Commit Graph

Select branches

Hide Pull Requests

develop

master

staging

#1

v0.1.0

v0.1.1

v0.1.2

v0.1.3

v0.2.0

v0.2.1

v0.2.2

Mono Color

• 33d2dcce1b
  
  container/initoverlay: internal bypass sysroot prefix Ophestra 2025-08-25 02:34:39 +09:00
• 2baa2d7063
  
  container/init: measure init behaviour Ophestra 2025-08-24 02:28:24 +09:00
• 0166833431
  
  container/dispatcher: start goroutine in dispatcher Ophestra 2025-08-23 21:47:06 +09:00
• b3da3da525
  
  container/init: avoid multiple lastcap calls Ophestra 2025-08-23 11:09:11 +09:00
• 1b3902df78
  
  container/dispatcher: instrument each goroutine individually Ophestra 2025-08-23 11:06:19 +09:00
• ea1e3ebae9
  
  container/params: pass fd instead of file Ophestra 2025-08-23 00:16:46 +09:00
• 1c692bfb79
  
  container/init: call lockOSThread through dispatcher Ophestra 2025-08-22 22:24:14 +09:00
• 141a18999f
  
  container: move integration test helpers Ophestra 2025-08-22 22:07:19 +09:00
• afe23600d2
  
  container/path: use syscall dispatcher Ophestra 2025-08-22 22:00:40 +09:00
• 09d2844981
  
  container/init: wrap syscall helper functions Ophestra 2025-08-21 21:59:07 +09:00
• d500d6e559
  
  system/dbus: share host net ns for abstract Ophestra 2025-08-21 21:55:23 +09:00
• 5b73316ae0
  
  container/syscall: doc comments from manpages Ophestra 2025-08-21 00:33:46 +09:00
• 5d8a2199b6
  
  container/init: op interface valid method Ophestra 2025-08-21 00:18:50 +09:00
• a1482ecdd0
  
  container/inittmpfs: check path equivalence by value Ophestra 2025-08-20 20:17:28 +09:00
• a07f9ed84c
  
  container/initsymlink: check path equivalence by value Ophestra 2025-08-20 20:03:02 +09:00
• 51304b03af
  
  container/initremount: check path equivalence by value Ophestra 2025-08-20 19:55:51 +09:00
• c6397b941f
  
  container/initproc: check path equivalence by value Ophestra 2025-08-20 19:29:45 +09:00
• d65e5f817a
  
  container/initplace: check path equivalence by value Ophestra 2025-08-20 19:19:27 +09:00
• 696e593898
  
  container/initoverlay: check path equivalence by value Ophestra 2025-08-20 17:33:15 +09:00
• 97ab24feef
  
  container/init: use absolute compare method Ophestra 2025-08-20 17:14:36 +09:00
• 31f0dd36df
  
  absolute: efficient equivalence check method Ophestra 2025-08-20 17:06:38 +09:00
• 9aec2f46fe
  
  container/initdev: check path equivalence by value Ophestra 2025-08-20 02:55:45 +09:00
• 022cc26b2e
  
  container/capability: check CAP_TO_INDEX and CAP_TO_MASK Ophestra 2025-08-20 02:45:00 +09:00
• b4c018da8f
  
  container/autoetc: do not bypass absolute check Ophestra 2025-08-20 02:37:11 +09:00
• 66f52407d3
  
  container/initmkdir: check path equivalence by value Ophestra 2025-08-20 02:32:22 +09:00
• e463faf649
  
  container/initbind: check path equivalence by value Ophestra 2025-08-20 02:22:04 +09:00
• 375acb476d
  
  container/autoroot: check host path equivalence by value Ophestra 2025-08-20 02:03:18 +09:00
• c81c9a9d75
  
  container/init: split setup ops into individual files Ophestra 2025-08-20 01:26:41 +09:00
• 339e4080dc
  
  container/ops: move Op type to init file Ophestra 2025-08-20 01:11:24 +09:00
• e0533aaa68
  
  container/autoroot: filter dentry with empty name Ophestra 2025-08-20 01:03:49 +09:00
• 13c7083bc0
  
  container: ptrace protection via Yama LSM Ophestra 2025-08-20 00:27:45 +09:00
• 6947ff04e0
  
  system/dbus/proc: host abstract only when not binding Ophestra 2025-08-19 23:39:14 +09:00
• 140fe21237
  
  container/params: check setup/receive behaviour Ophestra 2025-08-18 22:30:34 +09:00
• f52d2c7db6
  
  container/path: check create and mountinfo helpers Ophestra 2025-08-18 21:30:28 +09:00
• 3c9e547c4a
  
  cmd/hpkg: add deprecation notice Ophestra 2025-08-18 17:00:27 +09:00
• a3988c1a77
  
  hst: rename net and abstract fields Ophestra 2025-08-18 16:47:23 +09:00
• 5db0714072
  
  container: optionally isolate host abstract UNIX domain sockets via landlock Clayton Gilmer 2025-08-18 12:00:52 +09:00
• 69a4ab8105
  
  container: move PR_SET_NO_NEW_PRIVS to parent Ophestra 2025-08-18 11:46:02 +09:00
• 22d577ab49
  
  test/sandbox: do not discard stderr getting hash Ophestra 2025-08-18 11:36:13 +09:00
• 83a1c75f1a
  
  app: set up acl on X11 socket Ophestra 2025-08-18 02:24:56 +09:00
• 0ac6e99818
  
  container: start from locked thread Ophestra 2025-08-17 17:26:20 +09:00
• f35733810e
  
  container: check output helper functions Ophestra 2025-08-17 02:59:37 +09:00
• 9c1a5d43ba
  
  container: enforce nonrepeatable autoetc and autoroot Ophestra 2025-08-17 01:43:11 +09:00
• 8aa65f28c6
  
  container: allow additional state between ops Ophestra 2025-08-17 01:29:54 +09:00
• f9edec7e41
  
  hst: merge miscellaneous files Ophestra 2025-08-16 02:32:57 +09:00
• 305c600cf5
  
  hst: move container type to config Ophestra 2025-08-16 02:28:36 +09:00
• 8dd3e1ee5d
  
  hst/fs: rename method Target to Path Ophestra 2025-08-16 02:06:41 +09:00
• 4ffeec3004
  
  hst/enablement: editor friendly enablement adaptor Ophestra 2025-08-15 04:57:37 +09:00
• 9ed3ba85ea
  
  hst/fs: implement overlay fstype Ophestra 2025-08-15 03:30:51 +09:00
• 4433c993fa
  
  nix: check config via hakurei Ophestra 2025-08-15 03:27:54 +09:00
• 430991c39b
  
  hst/fs: remove type method Ophestra 2025-08-15 00:37:07 +09:00
• ba3227bf15
  
  container: export overlay escape Ophestra 2025-08-14 23:44:11 +09:00
• 0e543a58b3
  
  hst/fs: valid method on underlying interface Ophestra 2025-08-14 21:36:22 +09:00
• c989e7785a
  
  hst/info: include extra information Ophestra 2025-08-14 19:52:03 +09:00
• 332d90d6c7
  
  container/path: remove unused path Ophestra 2025-08-14 05:00:09 +09:00
• 99ac96511b
  
  hst/fs: interface filesystem config Ophestra 2025-08-12 04:38:45 +09:00
• e99d7affb0
  
  container: use absolute for pathname Ophestra 2025-08-11 02:52:32 +09:00
• 41ac2be965
  
  container/absolute: wrap safe stdlib functions Ophestra 2025-08-10 03:10:13 +09:00
• 02271583fb
  
  container: remove PATH lookup behaviour Ophestra 2025-08-09 19:08:54 +09:00
• ef54b2cd08
  
  container/absolute: early absolute pathname check Ophestra 2025-08-09 17:50:03 +09:00
• 82608164f6
  
  container/params: remove confusingly named error Ophestra 2025-08-09 17:36:36 +09:00
• edd6f2cfa9
  
  container: document ambient capabilities Ophestra 2025-08-08 02:11:55 +09:00
• acffa76812
  
  container/ops: implement overlay op Ophestra 2025-08-08 01:50:38 +09:00
• 8da76483e6
  
  container/path: fix typo "paths" Ophestra 2025-08-08 01:32:48 +09:00
• 534c932906
  
  container: test case runtime initialisation Ophestra 2025-08-08 01:03:35 +09:00
• fee10fed4d
  
  container: test bypass output buffer on verbose Ophestra 2025-08-08 00:57:27 +09:00
• a4f7e92e1c
  
  test/interactive: helper scripts for tracing Ophestra 2025-08-08 00:49:11 +09:00
• f1a53d6116
  
  container: raise CAP_DAC_OVERRIDE Ophestra 2025-08-08 00:43:19 +09:00
• b353c3deea
  
  nix: make src overlay writable Ophestra 2025-08-07 18:07:19 +09:00
• fde5f1ca64
  
  container: buffer test output Ophestra 2025-08-07 02:55:58 +09:00
• 4d0bdd84b5
  
  container: test respect verbose flag Ophestra 2025-08-07 02:50:00 +09:00
• 72a931a71a
  
  nix: interactive nixos vm Ophestra 2025-08-05 21:31:36 +09:00
• 9a25542c6d
  
  container/init: use mount string constants Ophestra 2025-08-04 04:00:05 +09:00
• c6be82bcf9
  
  container/path: fhs path constants Ophestra 2025-08-03 20:46:41 +09:00
• 38245559dc
  
  container/ops: mount dev readonly Ophestra 2025-08-03 19:18:53 +09:00
• 7b416d47dc
  
  container/ops: merge mqueue and dev Ops Ophestra 2025-08-03 18:34:55 +09:00
• 15170735ba
  
  container/mount: move tmpfs sysroot prefixing to caller Ophestra 2025-08-03 18:06:41 +09:00
• 6a3886e9db
  
  container/op: unexport bind resolved source field Ophestra 2025-08-03 17:57:37 +09:00
• ff66296378
  
  container/mount: mount data escape helper function Ophestra 2025-08-03 15:35:32 +09:00
• 347a79df72
  
  container: improve clone flags readability Ophestra 2025-08-02 18:19:44 +09:00
• 0f78864a67
  
  container/mount: export mount string constants Ophestra 2025-08-02 17:15:41 +09:00
• b32b1975a8
  
  hst/container: remove cover Ophestra 2025-08-02 00:34:52 +09:00
• 2b1eaa62f1
  
  update github notice Ophestra 2025-08-02 00:20:46 +09:00
• f13dca184c
  
  release: 0.1.3 v0.1.3 Ophestra 2025-08-02 00:02:54 +09:00
• 3b8a3d3b00
  
  app: remount root readonly Ophestra 2025-08-01 23:54:33 +09:00
• c5d24979f5
  
  container/ops: expose remount as Op Ophestra 2025-08-01 23:48:02 +09:00
• 1dc780bca7
  
  container/mount: separate remount from bind Ophestra 2025-08-01 23:32:38 +09:00
• ec33061c92
  
  nix: remove nscd cover Ophestra 2025-08-01 22:04:58 +09:00
• af0899de96
  
  hst/container: mount tmpfs via magic src string Ophestra 2025-08-01 21:23:52 +09:00
• 547a2adaa4
  
  container/mount: pass tmpfs flags Ophestra 2025-08-01 18:58:42 +09:00
• c02948e155
  
  cmd/hakurei: print autoroot configuration Ophestra 2025-08-01 04:29:01 +09:00
• 387b86bcdd
  
  app: integrate container autoroot Ophestra 2025-08-01 04:10:33 +09:00
• 4e85643865
  
  container: implement autoroot as setup op Ophestra 2025-08-01 04:04:36 +09:00
• 987981df73
  
  test/sandbox: check pd behaviour Ophestra 2025-08-01 02:11:19 +09:00
• f14e7255be
  
  container/ops: use correct flags value in bind string Ophestra 2025-08-01 00:54:08 +09:00
• a8a79a8664
  
  cmd/hpkg: rename from planterette Ophestra 2025-07-31 23:57:11 +09:00
• 3ae0cec000
  
  test: increase vm memory Ophestra 2025-07-31 22:08:01 +09:00
• 4e518f11d8
  
  container/ops: autoetc implementation to separate file Ophestra 2025-07-31 19:54:03 +09:00
• cb513bb1cd
  
  release: 0.1.2 v0.1.2 Ophestra 2025-07-29 03:11:33 +09:00
• f7bd28118c
  
  hst: configurable wait delay Ophestra 2025-07-29 03:06:49 +09:00