hakurei/container/capability.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/container/capability.go?h=develop2026-05-07T06:15:47Zcontainer: optionally map uid/gid 0 as init2026-05-07T06:15:47ZOphestracat@gensokyo.uk2026-05-07T06:15:28Zurn:sha1:d4144fcf7f9217d2a2dcec21202421d5fa9d4928
Unfortunately required to work around flawed APIs like binfmt_misc.
Signed-off-by: Ophestra <cat@gensokyo.uk>
ext: move syscall wrappers from container2026-03-17T06:48:40ZOphestracat@gensokyo.uk2026-03-17T06:48:40Zurn:sha1:b852402f67b22a3a850ce4eb1305a3ce5898d128
These are generally useful, and none of them are container-specific. Syscalls subtle to use and requiring container-specific setup remains in container.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: improve documentation2026-02-28T11:18:30ZOphestracat@gensokyo.uk2026-02-28T11:18:30Zurn:sha1:cd9b534d6b1d432d3c997ccc5b14f630afb9dda6
This change removes inconsistencies collected over time in this package.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/init: configure interface lo2026-01-10T18:36:20ZOphestracat@gensokyo.uk2026-01-10T18:32:21Zurn:sha1:2494ede1067d5071d3cc7d355cdc2ae3fac66dc5
This enables loopback networking when owning the net namespace.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/syscall: export prctl wrapper2025-10-21T20:26:54ZOphestracat@gensokyo.uk2025-10-21T20:26:54Zurn:sha1:c5f59c5488cc529a5a7c7a89e1da56c2b44db16c
This is useful as package "syscall" does not provide such a wrapper. This change also improves error handling to fully conform to the manpage.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/init: wrap syscall helper functions2025-08-22T10:27:31ZOphestracat@gensokyo.uk2025-08-21T12:59:07Zurn:sha1:09d284498109b847da0da1e2c5f883268a7f2d46
This allows tests to stub all kernel behaviour, enabling measurement of all function call arguments and error injection.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: raise CAP_DAC_OVERRIDE2025-08-07T15:43:19ZOphestracat@gensokyo.uk2025-08-07T15:43:19Zurn:sha1:f1a53d611604482db975b312f4eeb6a81ea95ce5
This is required for upperdir and workdir checks in overlayfs.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: move capset implementation2025-07-07T04:47:13ZOphestracat@gensokyo.uk2025-07-07T04:47:05Zurn:sha1:ddfcc51b913a70da48102f64e18b34579dc3611c
Signed-off-by: Ophestra <cat@gensokyo.uk>