hakurei/config.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/config.go?h=develop2024-11-04T15:07:36Zfortify: implement cleaner argument structure2024-11-04T15:07:36ZOphestra Umikercat@ophivana.moe2024-11-04T14:08:29Zurn:sha1:714818c8aa1a26450cdfac0828d1a9528fdb95a4
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
system: move sd_booted implementation to os abstraction2024-10-27T03:09:34ZOphestra Umikercat@ophivana.moe2024-10-27T03:08:17Zurn:sha1:7df9d8d01dadcb05396d278aba11afc2ab4a2328
This implements lazy loading of the systemd marker (they are not accessed in init and shim) and ensures consistent behaviour when running with a stub.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
fmsg: support temporarily withholding output2024-10-26T14:09:32ZOphestra Umikercat@ophivana.moe2024-10-26T14:09:32Zurn:sha1:ae1a102882103221ef842176dfd8cb1090d5f591
Trying to print to a shared stdout is a terrible idea. This change makes it possible to withhold output for the lifetime of the sandbox.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
internal: wrap calls to os standard library functions2024-10-23T12:46:21ZOphestra Umikercat@ophivana.moe2024-10-23T12:46:21Zurn:sha1:6bc5be7e5a2334274adf2945ad6d29d063a7086b
This change helps tests stub out and simulate OS behaviour during the sealing process. This also removes dependency on XDG_RUNTIME_DIR as the internal.System implementation provided to App provides a compat directory inside the tmpdir-based share when XDG_RUNTIME_DIR is unavailable.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
fmsg: produce all output through fmsg2024-10-21T11:47:02ZOphestra Umikercat@ophivana.moe2024-10-21T11:47:02Zurn:sha1:42e0b168e3d75389dfb968aebf9f5629d64782f9
The behaviour of print functions from package fmt is not thread safe. Functions provided by fmsg wrap around Logger methods. This makes prefix much cleaner and makes it easy to deal with future changes to logging.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
migrate to git.ophivana.moe/security/fortify2024-10-20T10:50:13ZOphestra Umikercat@ophivana.moe2024-10-20T10:50:13Zurn:sha1:65af1684e3f12c1920f91c96474f19dbd0b147fc
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
system: move enablements from state package2024-10-16T05:38:57ZOphestra Umikercat@ophivana.moe2024-10-16T05:38:57Zurn:sha1:c21168a74181903535c63f49c5a6d3bd2052c883
This removes the unnecessary import of the state package.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
fortify/config: flag to print template config serialised as JSON2024-10-12T10:46:40ZOphestra Umikercat@ophivana.moe2024-10-12T10:46:40Zurn:sha1:283bcba05b55acddbb3ffe664e84fda10ed779ad
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
fortify: clean up config loading2024-10-11T16:51:06ZOphestra Umikercat@ophivana.moe2024-10-11T16:51:06Zurn:sha1:61b473a06fb12b9f3d6f9d7f07693313bd954509
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
fortify: move flag handling to separate files2024-10-11T16:28:22ZOphestra Umikercat@ophivana.moe2024-10-11T16:28:22Zurn:sha1:d2575b670835fd19f7a67e5eee476a46eb9822e5
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>