hakurei/container/container_test.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/container/container_test.go?h=develop2026-08-25T05:53:29Zcontainer: enter init path early2026-08-25T05:53:29ZOphestracat@gensokyo.uk2026-08-25T05:48:27Zurn:sha1:1c3761bb53c95d75751f95e8f77d9d1e5928b968
There is generally no use case where any setup is required before init, and requiring the explicit function call is error-prone and unnecessary. It also causes trouble with packages using a similar trick. This change moves argv0 check early and makes it an import side effect. The stub will be removed in v0.5.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: optionally map uid/gid 0 as init2026-05-07T06:15:47ZOphestracat@gensokyo.uk2026-05-07T06:15:28Zurn:sha1:d4144fcf7f9217d2a2dcec21202421d5fa9d4928
Unfortunately required to work around flawed APIs like binfmt_misc.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: improve capability handling2026-05-07T05:27:28ZOphestracat@gensokyo.uk2026-05-07T05:14:06Zurn:sha1:bad66facbc1b555d8883534c27ada586fc15df9c
This cleans up preserving caps for expansion and correctly sets privileged caps.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: abandon response on termination2026-05-06T15:58:02ZOphestracat@gensokyo.uk2026-05-06T15:50:47Zurn:sha1:4aba014eac0c11bd184364b506b3e15d5716e947
This prevents blocking on early failure.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: check capability in test helper2026-05-06T12:05:54ZOphestracat@gensokyo.uk2026-05-06T12:05:54Zurn:sha1:779ba994ce8811a747a902359fe2e9c488a8563e
This makes corresponding nixos tests redundant.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/initoverlay: configure via fsconfig2026-05-03T17:29:56ZOphestracat@gensokyo.uk2026-05-03T17:07:52Zurn:sha1:da11b26ec16ef9ed61045fdbb03c4090286bfeba
This works around the page size limit at the cost of negligible performance regressions.
Closes #34.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/landlock: relocate from package container2026-04-10T14:56:45ZOphestracat@gensokyo.uk2026-04-10T14:56:45Zurn:sha1:b39064037625d1757a65913086ec3a247ad5bb29
This is not possible to use directly, so remove it from the public API.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/params: relocate from package container2026-04-07T07:37:44ZOphestracat@gensokyo.uk2026-04-07T07:31:46Zurn:sha1:c61cdc505f05decd940cb2d861241039a49251e3
This does not make sense as part of the public API, so make it internal.
Signed-off-by: Ophestra <cat@gensokyo.uk>
all: optionally forbid degrading in tests2026-04-07T06:22:52ZOphestracat@gensokyo.uk2026-04-07T06:18:28Zurn:sha1:e4355279a1624833e36455a1a85788dbe091464e
This enables transparently degradable tests to be forced on in environments known to support them.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: transparently degrade landlock in tests2026-04-07T06:03:48ZOphestracat@gensokyo.uk2026-04-07T06:03:48Zurn:sha1:289fdebead872b1b011b8fe892d43a2f234703d1
Explicitly requiring landlock in tests will be supported in a future change.
Signed-off-by: Ophestra <cat@gensokyo.uk>