hakurei/container/init.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/container/init.go?h=develop2026-08-27T07:06:13Zcontainer: explicitly order initialisation2026-08-27T07:06:13ZOphestracat@gensokyo.uk2026-08-27T06:35:55Zurn:sha1:ebb1144efc6c09dff8a732c5baf11db5b8f515b2
This avoids accessing uninitialised hostProc in some build modes.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: enter init path early2026-08-25T05:53:29ZOphestracat@gensokyo.uk2026-08-25T05:48:27Zurn:sha1:1c3761bb53c95d75751f95e8f77d9d1e5928b968
There is generally no use case where any setup is required before init, and requiring the explicit function call is error-prone and unnecessary. It also causes trouble with packages using a similar trick. This change moves argv0 check early and makes it an import side effect. The stub will be removed in v0.5.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: binfmt registration2026-05-07T06:55:19ZOphestracat@gensokyo.uk2026-05-07T06:40:47Zurn:sha1:575ef307ad5cedb13a514cd038a4880ab8c91242
This arranges for binfmt entries to be registered for the container.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: optionally map uid/gid 0 as init2026-05-07T06:15:47ZOphestracat@gensokyo.uk2026-05-07T06:15:28Zurn:sha1:d4144fcf7f9217d2a2dcec21202421d5fa9d4928
Unfortunately required to work around flawed APIs like binfmt_misc.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: improve capability handling2026-05-07T05:27:28ZOphestracat@gensokyo.uk2026-05-07T05:14:06Zurn:sha1:bad66facbc1b555d8883534c27ada586fc15df9c
This cleans up preserving caps for expansion and correctly sets privileged caps.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/init: mount intermediate before early2026-05-05T15:55:45ZOphestracat@gensokyo.uk2026-05-05T15:55:45Zurn:sha1:617ee21647ef86be67e37a3df2413d08c6658799
This is usable as scratch space during early.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/params: relocate from package container2026-04-07T07:37:44ZOphestracat@gensokyo.uk2026-04-07T07:31:46Zurn:sha1:c61cdc505f05decd940cb2d861241039a49251e3
This does not make sense as part of the public API, so make it internal.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/init: ignore finished process2026-04-04T15:38:33ZOphestracat@gensokyo.uk2026-04-04T15:38:33Zurn:sha1:9641805ec2025e8434e1120257f51d19b877c8e4
This is not considered an error, if the process finishes while the signal is being delivered.
Signed-off-by: Ophestra <cat@gensokyo.uk>
all: use filepath2026-03-30T09:24:53ZOphestracat@gensokyo.uk2026-03-30T09:15:56Zurn:sha1:a6600be34ad812ff13c89f45c3cadaac6d994e67
This makes package check portable, and removes nonportable behaviour from package pkg, pipewire, and system. All other packages remain nonportable due to their nature. No latency increase was observed due to this change on amd64 and arm64 linux.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/netlink: wrap netpoll via context2026-03-25T06:39:29ZOphestracat@gensokyo.uk2026-03-25T06:34:20Zurn:sha1:50403e9d60a69640107d20525379d4714da2f739
This removes netpoll boilerplate for the most common use case.
Signed-off-by: Ophestra <cat@gensokyo.uk>