hakurei/container/seccomp/libseccomp.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/container/seccomp/libseccomp.go?h=develop2026-03-17T04:39:26Zext: isolate from container/std2026-03-17T04:39:26ZOphestracat@gensokyo.uk2026-03-17T04:35:48Zurn:sha1:cd5959fe5ab04786cd5dee3cf09f725229ae7c7b
These are too general to belong in the container package. This targets the v0.4 release to reduce the wrapper maintenance burden.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: improve documentation2026-02-28T11:18:30ZOphestracat@gensokyo.uk2026-02-28T11:18:30Zurn:sha1:cd9b534d6b1d432d3c997ccc5b14f630afb9dda6
This change removes inconsistencies collected over time in this package.
Signed-off-by: Ophestra <cat@gensokyo.uk>
std: separate seccomp constants2025-11-06T19:30:06ZOphestracat@gensokyo.uk2025-11-06T19:02:40Zurn:sha1:3d188ef884d6147d579e59eb8f51332bb8959ad5
This avoids inadvertently using PNRs as syscall numbers.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/std: relocate rule types2025-11-04T21:00:39ZOphestracat@gensokyo.uk2025-11-04T21:00:39Zurn:sha1:fba201c9953a490da914b09e09eaaa697a4b36e1
This enables its use in hst for #15.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/seccomp: use native types2025-11-04T20:48:59ZOphestracat@gensokyo.uk2025-11-04T20:48:59Zurn:sha1:7f27a6dc5173bc6c4b71918b98a2d6b72bd37d30
This prepares NativeRule for relocation to std for #15.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/seccomp: alias libseccomp types2025-11-04T20:21:43ZOphestracat@gensokyo.uk2025-11-04T20:04:56Zurn:sha1:b65aba94467e9d8f3400c3e3de5f403e82bc99e7
This enables tests to refer to these types and check its size.
Signed-off-by: Ophestra <cat@gensokyo.uk>
std: relocate seccomp lookup tables2025-11-04T19:48:05ZOphestracat@gensokyo.uk2025-11-04T19:48:05Zurn:sha1:becaf8b6d7151971907ff65f338afa038f021c92
This should enable resolving NativeRule in hst.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/seccomp: remove export pipe2025-10-13T09:51:35ZOphestracat@gensokyo.uk2025-10-13T09:49:58Zurn:sha1:123d7fbfd5a2955dc5042c0a85211e376d5a8e65
This was only useful when wrapping bwrap.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: parallel tests2025-10-12T19:38:48ZOphestracat@gensokyo.uk2025-10-12T19:38:48Zurn:sha1:7638a44fa613f23434318bdf136723aa010e8638
Most tests already had no global state, however parallel was never enabled. This change enables it for all applicable tests.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/seccomp: move personality constants2025-07-07T03:44:32ZOphestracat@gensokyo.uk2025-07-07T03:44:32Zurn:sha1:84e8142a2de4acae0cb1e09545b172efa061a0ae
Signed-off-by: Ophestra <cat@gensokyo.uk>