hakurei/cmd/fpkg/with.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/cmd/fpkg/with.go?h=develop2025-06-25T11:50:24Zcmd/planterette: remove hsu special case2025-06-25T11:50:24ZOphestracat@gensokyo.uk2025-06-25T11:44:49Zurn:sha1:aa454b158f3713b2ee47162837dcea1efdce0ee6
Remove special case and invoke hakurei out of process.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: rename to hakurei2025-06-24T19:57:41ZOphestracat@gensokyo.uk2025-06-24T18:59:52Zurn:sha1:87e008d56de974947ebb99c2cc40b25d3c2cf43e
Fortify makes little sense for a container tool.
Signed-off-by: Ophestra <cat@gensokyo.uk>
fst: improve config2025-04-12T18:30:19ZOphestracat@gensokyo.uk2025-04-12T18:23:28Zurn:sha1:31b7ddd122d54c36edb101d2c8bdf230651f27d4
The config struct more or less "grew" to what it is today. This change moves things around to make more sense and fixes nonsensical comments describing obsolete behaviour.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox/seccomp: rename flag type and constants2025-04-07T16:59:45ZOphestracat@gensokyo.uk2025-04-07T16:59:45Zurn:sha1:584405f7ccd4c8c0e63762e113f4650f2abd469e
The names are ambiguous. Rename them to make more sense.
Signed-off-by: Ophestra <cat@gensokyo.uk>
fst: optional configured shell path2025-03-31T12:27:31ZOphestracat@gensokyo.uk2025-03-31T10:31:37Zurn:sha1:4036da3b5c28d1a37780acc179985067865b94d0
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: run in native sandbox2025-03-24T16:52:49ZOphestracat@gensokyo.uk2025-03-24T16:52:49Zurn:sha1:5c4058d5ac7e7944973ca8216c258fc50c194e22
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fpkg: call app in-process2025-02-26T10:51:44ZOphestracat@gensokyo.uk2025-02-26T10:46:43Zurn:sha1:673b648bd35285a1dbfc0348716dd6bdd8064a51
Wrapping fortify is slow, painful and error-prone. Start apps in-process instead.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fpkg: rename shell to shellPath2025-02-21T08:50:20ZOphestracat@gensokyo.uk2025-02-21T08:50:20Zurn:sha1:4fa1e97026006a9b5d4e98de302256c7ae7cbad7
Signed-off-by: Ophestra <cat@gensokyo.uk>
fmsg: implement suspend in writer2025-02-16T09:51:53ZOphestracat@gensokyo.uk2025-02-16T08:26:09Zurn:sha1:e599b5583dd821ed26bdfc01f7f67d4a317b9843
This removes the requirement to call fmsg.Exit on every exit path, and enables direct use of the "log" package. However, fmsg.BeforeExit is still encouraged when possible to catch exit on suspended output.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fpkg: expose syscall policy options2025-01-22T03:01:30ZOphestracat@gensokyo.uk2025-01-22T03:01:30Zurn:sha1:580128922be2a983192804b7963175b2a0fe2093
Signed-off-by: Ophestra <cat@gensokyo.uk>