hakurei/container/seccomp/libseccomp_test.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/container/seccomp/libseccomp_test.go?h=develop2025-11-04T17:47:43Zstd: rename from comp2025-11-04T17:47:43ZOphestracat@gensokyo.uk2025-11-04T17:47:43Zurn:sha1:c1399f5030abde76728ba7982a7a22fd49e75359
Seccomp lookup tables are going to be relocated here, and PNR constants.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/comp: rename from bits2025-10-21T11:54:03ZOphestracat@gensokyo.uk2025-10-21T11:54:03Zurn:sha1:e94acc424c5746eb6cf903ed97b4e71223fda50f
This package will also hold syscall lookup tables for seccomp.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/seccomp: remove export pipe2025-10-13T09:51:35ZOphestracat@gensokyo.uk2025-10-13T09:49:58Zurn:sha1:123d7fbfd5a2955dc5042c0a85211e376d5a8e65
This was only useful when wrapping bwrap.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: parallel tests2025-10-12T19:38:48ZOphestracat@gensokyo.uk2025-10-12T19:38:48Zurn:sha1:7638a44fa613f23434318bdf136723aa010e8638
Most tests already had no global state, however parallel was never enabled. This change enables it for all applicable tests.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: move seccomp preset bits2025-10-07T09:28:20ZOphestracat@gensokyo.uk2025-10-07T09:28:20Zurn:sha1:3ce63e95d7691450f7b368e639d984a223a764b1
This allows holding the bits without cgo.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: use more reliable nonexistence2025-07-18T14:18:26ZOphestracat@gensokyo.uk2025-07-18T14:18:26Zurn:sha1:9d7a19d162e7003ce89804f00c526b77b2328baa
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox: verify seccomp on all test cases2025-07-08T19:21:35ZOphestracat@gensokyo.uk2025-07-08T18:47:16Zurn:sha1:e574042d765f135814c5afabaf24cb7109fab175
This change also makes seccomp hashes cross-platform.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/seccomp: move bpf hashes2025-07-07T05:41:47ZOphestracat@gensokyo.uk2025-07-07T05:41:47Zurn:sha1:5853d7700ff606974fd801f143e7b9d55f3fc253
Filter programs are different across platforms. This representation is also much more readable.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: migrate to hakurei.app2025-07-02T18:30:39ZOphestracat@gensokyo.uk2025-07-02T18:30:39Zurn:sha1:d2f9a9b83b1c43304081493eb2305309be1dd504
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: move out of toplevel2025-07-02T17:59:43ZOphestracat@gensokyo.uk2025-07-02T17:59:43Zurn:sha1:1b5ecd9eaf3289d164d8ed1bce6013e0e4ef8e86
This allows slightly easier use of the vanity url. This also provides some disambiguation between low level containers and hakurei app containers.
Signed-off-by: Ophestra <cat@gensokyo.uk>