add HakureiConfig.kt and test
This commit is contained in:
parent
4c68f4ca13
commit
0baf6b876b
GPG Key ID:
B54591A4805E9CC8
122
api/src/main/kotlin/app/hakurei/planterette/api/HakureiConfig.kt
Normal file
122
api/src/main/kotlin/app/hakurei/planterette/api/HakureiConfig.kt
Normal file
@ -0,0 +1,122 @@
|
||||
package app.hakurei.planterette.api
|
||||
|
||||
import kotlinx.serialization.SerialName
|
||||
import kotlinx.serialization.Serializable
|
||||
|
||||
@Serializable
|
||||
data class HakureiConfig(
|
||||
val id: String,
|
||||
|
||||
val path: String? = null,
|
||||
val args: Array<String>,
|
||||
|
||||
val enablements: Byte,
|
||||
|
||||
@SerialName("session_bus") val sessionBus: DbusConfig?,
|
||||
@SerialName("system_bus") val systemBus: DbusConfig?,
|
||||
@SerialName("direct_wayland") val directWayland: Boolean?,
|
||||
|
||||
val username: String? = null,
|
||||
val shell: String? = null,
|
||||
val data: String,
|
||||
val dir: String,
|
||||
@SerialName("extra_perms") val extraPerms: Array<ExtraPermConfig>?,
|
||||
|
||||
val identity: Int,
|
||||
val groups: Array<String>,
|
||||
|
||||
val container: ContainerConfig
|
||||
) {
|
||||
@Serializable
|
||||
data class DbusConfig(
|
||||
val see: Array<String>? = null,
|
||||
val talk: Array<String>,
|
||||
val own: Array<String>?,
|
||||
val call: Map<String, String>?,
|
||||
val broadcast: Map<String, String>?,
|
||||
val log: Boolean,
|
||||
val filter: Boolean
|
||||
)
|
||||
@Serializable
|
||||
data class ExtraPermConfig(
|
||||
val ensure: Boolean? = null,
|
||||
val path: String,
|
||||
@SerialName("r") val read: Boolean? = null,
|
||||
@SerialName("w") val write: Boolean? = null,
|
||||
@SerialName("x") val execute: Boolean? = null
|
||||
)
|
||||
@Serializable
|
||||
data class ContainerConfig(
|
||||
val hostname: String? = null,
|
||||
|
||||
@SerialName("seccomp_flags") val seccompFlags: Int,
|
||||
@SerialName("seccomp_presets") val seccompPresets: Int,
|
||||
@SerialName("seccomp_compat") val seccompCompat: Boolean? = null,
|
||||
|
||||
val devel: Boolean? = null,
|
||||
val userns: Boolean? = null,
|
||||
val net: Boolean? = null,
|
||||
val tty: Boolean? = null,
|
||||
val multiarch: Boolean? = null,
|
||||
|
||||
val env: Map<String, String>,
|
||||
@SerialName("map_real_uid") val mapRealUid: Boolean,
|
||||
|
||||
val device: Boolean? = null,
|
||||
val filesystem: Array<FilesystemConfig>,
|
||||
@SerialName("symlink") val link: Array<String>,
|
||||
|
||||
val etc: String? = null,
|
||||
@SerialName("auto_etc") val autoEtc: Boolean,
|
||||
val cover: Array<String>
|
||||
)
|
||||
@Serializable
|
||||
data class FilesystemConfig(
|
||||
val dst: String? = null,
|
||||
val src: String,
|
||||
val write: Boolean? = null,
|
||||
val device: Boolean? = null,
|
||||
@SerialName("require") val must: Boolean? = null
|
||||
)
|
||||
@Serializable
|
||||
enum class Enablement(val value: Int) {
|
||||
Wayland(1 shl 0),
|
||||
X11(1 shl 1),
|
||||
DBus(1 shl 2),
|
||||
Pulse(1 shl 3),
|
||||
|
||||
EM(0b10000);
|
||||
|
||||
companion object {
|
||||
fun enablements(vararg enablements: Enablement): Byte {
|
||||
return enablements.sumOf(Enablement::value).toByte()
|
||||
}
|
||||
}
|
||||
}
|
||||
@Serializable
|
||||
enum class SeccompFilterPreset(val value: Int) {
|
||||
Ext(1 shl 0),
|
||||
DenyNS(1 shl 1),
|
||||
DenyTTY(1 shl 2),
|
||||
DenyDevel(1 shl 3),
|
||||
Linux32(1 shl 4);
|
||||
|
||||
companion object {
|
||||
fun filterPresets(vararg filterPresets: SeccompFilterPreset): Int {
|
||||
return filterPresets.sumOf(SeccompFilterPreset::value)
|
||||
}
|
||||
}
|
||||
}
|
||||
@Serializable
|
||||
enum class HakureiExportFlag(val value: Int) {
|
||||
Multiarch(1 shl 0),
|
||||
CAN(1 shl 1),
|
||||
Bluetooth(1 shl 2);
|
||||
|
||||
companion object {
|
||||
fun exportFlags(vararg exportFlags: HakureiExportFlag): Int {
|
||||
return exportFlags.sumOf(HakureiExportFlag::value)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,97 @@
|
||||
package app.hakurei.planterette.api
|
||||
|
||||
import kotlinx.serialization.ExperimentalSerializationApi
|
||||
import kotlinx.serialization.json.Json
|
||||
import kotlinx.serialization.serializer
|
||||
import org.junit.jupiter.api.Test
|
||||
import java.io.FileInputStream
|
||||
import kotlin.test.asserter
|
||||
|
||||
class HakureiConfigTest {
|
||||
@OptIn(ExperimentalSerializationApi::class)
|
||||
val format = Json {
|
||||
explicitNulls = false
|
||||
}
|
||||
val templateFile: String = javaClass.classLoader.getResource("template.json")!!.readText()
|
||||
|
||||
@Test
|
||||
fun testHakureiConfigSerialization() {
|
||||
val testConfig: HakureiConfig = HakureiConfig(
|
||||
id = "org.chromium.Chromium",
|
||||
path = "/run/current-system/sw/bin/chromium",
|
||||
args = arrayOf(
|
||||
"chromium",
|
||||
"--ignore-gpu-blocklist",
|
||||
"--disable-smooth-scrolling",
|
||||
"--enable-features=UseOzonePlatform",
|
||||
"--ozone-platform=wayland"
|
||||
),
|
||||
enablements = HakureiConfig.Enablement.enablements(HakureiConfig.Enablement.Wayland, HakureiConfig.Enablement.DBus,
|
||||
HakureiConfig.Enablement.Pulse),
|
||||
sessionBus = HakureiConfig.DbusConfig(
|
||||
see = null,
|
||||
talk = arrayOf("org.freedesktop.Notifications", "org.freedesktop.FileManager1", "org.freedesktop.ScreenSaver",
|
||||
"org.freedesktop.secrets", "org.kde.kwalletd5", "org.kde.kwalletd6", "org.gnome.SessionManager"),
|
||||
own = arrayOf("org.chromium.Chromium.*", "org.mpris.MediaPlayer2.org.chromium.Chromium.*",
|
||||
"org.mpris.MediaPlayer2.chromium.*"),
|
||||
call = mapOf("org.freedesktop.portal.*" to "*"),
|
||||
broadcast = mapOf("org.freedesktop.portal.*" to "@/org/freedesktop/portal/*"),
|
||||
log = false,
|
||||
filter = true
|
||||
),
|
||||
systemBus = HakureiConfig.DbusConfig(
|
||||
see = null,
|
||||
talk = arrayOf("org.bluez", "org.freedesktop.Avahi", "org.freedesktop.UPower"),
|
||||
own = null,
|
||||
call = null,
|
||||
broadcast = null,
|
||||
log = false,
|
||||
filter = true
|
||||
),
|
||||
directWayland = false,
|
||||
|
||||
username = "chronos",
|
||||
shell = "/run/current-system/sw/bin/zsh",
|
||||
data = "/var/lib/hakurei/u0/org.chromium.Chromium",
|
||||
dir = "/data/data/org.chromium.Chromium",
|
||||
extraPerms = arrayOf(
|
||||
HakureiConfig.ExtraPermConfig(path = "/var/lib/hakurei/u0", ensure = true, execute = true),
|
||||
HakureiConfig.ExtraPermConfig(path = "/var/lib/hakurei/u0/org.chromium.Chromium", read = true, write = true, execute = true)
|
||||
),
|
||||
identity = 9,
|
||||
groups = arrayOf("video", "dialout", "plugdev"),
|
||||
container = HakureiConfig.ContainerConfig(
|
||||
hostname = "localhost",
|
||||
devel = true,
|
||||
userns = true,
|
||||
net = true,
|
||||
device = true,
|
||||
seccompFlags = HakureiConfig.HakureiExportFlag.Multiarch.value,
|
||||
seccompPresets = HakureiConfig.SeccompFilterPreset.Ext.value,
|
||||
tty = true,
|
||||
multiarch = true,
|
||||
mapRealUid = true,
|
||||
env = mapOf(
|
||||
"GOOGLE_API_KEY" to "AIzaSyBHDrl33hwRp4rMQY0ziRbj8K9LPA6vUCY",
|
||||
"GOOGLE_DEFAULT_CLIENT_ID" to "77185425430.apps.googleusercontent.com",
|
||||
"GOOGLE_DEFAULT_CLIENT_SECRET" to "OTJgUOQcT7lO7GsGZq2G4IlT",
|
||||
),
|
||||
filesystem = arrayOf(
|
||||
HakureiConfig.FilesystemConfig(src = "/nix/store"),
|
||||
HakureiConfig.FilesystemConfig(src = "/run/current-system"),
|
||||
HakureiConfig.FilesystemConfig(src = "/run/opengl-driver"),
|
||||
HakureiConfig.FilesystemConfig(src = "/var/db/nix-channels"),
|
||||
HakureiConfig.FilesystemConfig(src = "/var/lib/hakurei/u0/org.chromium.Chromium", dst = "/data/data/org.chromium.Chromium", write = true, must = true),
|
||||
HakureiConfig.FilesystemConfig(src = "/dev/dri", device = true)
|
||||
),
|
||||
link = arrayOf("/run/user/65534", "/run/user/150"),
|
||||
etc = "/etc",
|
||||
autoEtc = true,
|
||||
cover = arrayOf("/var/run/nscd")
|
||||
)
|
||||
)
|
||||
val json = format.encodeToString(serializer(), testConfig)
|
||||
println("can't compare to template generated by go right now, so printing here. add \"prettyPrint = true\" to format to add whitespace")
|
||||
println(json)
|
||||
}
|
||||
}
|
||||
123
api/src/test/resources/template.json
Normal file
123
api/src/test/resources/template.json
Normal file
@ -0,0 +1,123 @@
|
||||
{
|
||||
"id": "org.chromium.Chromium",
|
||||
"path": "/run/current-system/sw/bin/chromium",
|
||||
"args": [
|
||||
"chromium",
|
||||
"--ignore-gpu-blocklist",
|
||||
"--disable-smooth-scrolling",
|
||||
"--enable-features=UseOzonePlatform",
|
||||
"--ozone-platform=wayland"
|
||||
],
|
||||
"enablements": 13,
|
||||
"session_bus": {
|
||||
"see": null,
|
||||
"talk": [
|
||||
"org.freedesktop.Notifications",
|
||||
"org.freedesktop.FileManager1",
|
||||
"org.freedesktop.ScreenSaver",
|
||||
"org.freedesktop.secrets",
|
||||
"org.kde.kwalletd5",
|
||||
"org.kde.kwalletd6",
|
||||
"org.gnome.SessionManager"
|
||||
],
|
||||
"own": [
|
||||
"org.chromium.Chromium.*",
|
||||
"org.mpris.MediaPlayer2.org.chromium.Chromium.*",
|
||||
"org.mpris.MediaPlayer2.chromium.*"
|
||||
],
|
||||
"call": {
|
||||
"org.freedesktop.portal.*": "*"
|
||||
},
|
||||
"broadcast": {
|
||||
"org.freedesktop.portal.*": "@/org/freedesktop/portal/*"
|
||||
},
|
||||
"filter": true
|
||||
},
|
||||
"system_bus": {
|
||||
"see": null,
|
||||
"talk": [
|
||||
"org.bluez",
|
||||
"org.freedesktop.Avahi",
|
||||
"org.freedesktop.UPower"
|
||||
],
|
||||
"own": null,
|
||||
"call": null,
|
||||
"broadcast": null,
|
||||
"filter": true
|
||||
},
|
||||
"username": "chronos",
|
||||
"shell": "/run/current-system/sw/bin/zsh",
|
||||
"data": "/var/lib/hakurei/u0/org.chromium.Chromium",
|
||||
"dir": "/data/data/org.chromium.Chromium",
|
||||
"extra_perms": [
|
||||
{
|
||||
"ensure": true,
|
||||
"path": "/var/lib/hakurei/u0",
|
||||
"x": true
|
||||
},
|
||||
{
|
||||
"path": "/var/lib/hakurei/u0/org.chromium.Chromium",
|
||||
"r": true,
|
||||
"w": true,
|
||||
"x": true
|
||||
}
|
||||
],
|
||||
"identity": 9,
|
||||
"groups": [
|
||||
"video",
|
||||
"dialout",
|
||||
"plugdev"
|
||||
],
|
||||
"container": {
|
||||
"hostname": "localhost",
|
||||
"seccomp_flags": 1,
|
||||
"seccomp_presets": 1,
|
||||
"devel": true,
|
||||
"userns": true,
|
||||
"net": true,
|
||||
"tty": true,
|
||||
"multiarch": true,
|
||||
"env": {
|
||||
"GOOGLE_API_KEY": "AIzaSyBHDrl33hwRp4rMQY0ziRbj8K9LPA6vUCY",
|
||||
"GOOGLE_DEFAULT_CLIENT_ID": "77185425430.apps.googleusercontent.com",
|
||||
"GOOGLE_DEFAULT_CLIENT_SECRET": "OTJgUOQcT7lO7GsGZq2G4IlT"
|
||||
},
|
||||
"map_real_uid": true,
|
||||
"device": true,
|
||||
"filesystem": [
|
||||
{
|
||||
"src": "/nix/store"
|
||||
},
|
||||
{
|
||||
"src": "/run/current-system"
|
||||
},
|
||||
{
|
||||
"src": "/run/opengl-driver"
|
||||
},
|
||||
{
|
||||
"src": "/var/db/nix-channels"
|
||||
},
|
||||
{
|
||||
"dst": "/data/data/org.chromium.Chromium",
|
||||
"src": "/var/lib/hakurei/u0/org.chromium.Chromium",
|
||||
"write": true,
|
||||
"require": true
|
||||
},
|
||||
{
|
||||
"src": "/dev/dri",
|
||||
"dev": true
|
||||
}
|
||||
],
|
||||
"symlink": [
|
||||
[
|
||||
"/run/user/65534",
|
||||
"/run/user/150"
|
||||
]
|
||||
],
|
||||
"etc": "/etc",
|
||||
"auto_etc": true,
|
||||
"cover": [
|
||||
"/var/run/nscd"
|
||||
]
|
||||
}
|
||||
}
|
||||
Loading…
x
Reference in New Issue
Block a user