hakurei/container/syscall.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/container/syscall.go?h=develop2026-04-10T14:45:51Zcontainer: unexport PR_SET_NO_NEW_PRIVS wrapper2026-04-10T14:45:51ZOphestracat@gensokyo.uk2026-04-10T14:45:51Zurn:sha1:ad2c9f36cddfd8adcd06fbe9238d176a8eb89614
This is subtle to use correctly. It also does not make sense as part of the container API.
Signed-off-by: Ophestra <cat@gensokyo.uk>
ext: move syscall wrappers from container2026-03-17T06:48:40ZOphestracat@gensokyo.uk2026-03-17T06:48:40Zurn:sha1:b852402f67b22a3a850ce4eb1305a3ce5898d128
These are generally useful, and none of them are container-specific. Syscalls subtle to use and requiring container-specific setup remains in container.
Signed-off-by: Ophestra <cat@gensokyo.uk>
ext: isolate from container/std2026-03-17T04:39:26ZOphestracat@gensokyo.uk2026-03-17T04:35:48Zurn:sha1:cd5959fe5ab04786cd5dee3cf09f725229ae7c7b
These are too general to belong in the container package. This targets the v0.4 release to reduce the wrapper maintenance burden.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: expose priority and SCHED_OTHER policy2026-03-11T16:14:03ZOphestracat@gensokyo.uk2026-03-11T16:14:03Zurn:sha1:196b200d0f19c41730db439c62db9b39e424f21f
The more explicit API removes the arbitrary limit preventing use of SCHED_OTHER (referred to as SCHED_NORMAL in the kernel). This change also exposes priority value to set.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: move scheduler policy constants to std2026-03-11T11:03:08ZOphestracat@gensokyo.uk2026-03-11T11:03:08Zurn:sha1:fd515badffc159b62c5140b8340164ccd29e41f5
This avoids depending on cgo.
Signed-off-by: Ophestra <cat@gensokyo.uk>
go: 1.262026-03-09T18:29:19ZOphestracat@gensokyo.uk2026-03-09T18:26:40Zurn:sha1:48cdf8bf852234ea3dad8dad3d571bb1d9546c32
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: sched policy string representation2026-03-09T09:38:31ZOphestracat@gensokyo.uk2026-03-09T09:33:49Zurn:sha1:19a2737148609f0b40ea31cf5cd0cb809b60722f
This also uses priority obtained via sched_get_priority_min, and improves bounds checking.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/std: rename seccomp types2026-02-28T11:48:30ZOphestracat@gensokyo.uk2026-02-28T11:47:23Zurn:sha1:ad8f799703a4bf8d87741890ba831856af2dd145
Aliases will be kept until 0.4.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: set scheduling policy2026-02-26T07:29:47ZOphestracat@gensokyo.uk2026-02-26T07:29:47Zurn:sha1:a6160cd410b1def222018cd88951fcbbf1a65f5c
This is thread-directed so cannot be done externally. The glibc wrapper exposes this behaviour so most multithreaded programs using this is straight up incorrect.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/syscall: export prctl wrapper2025-10-21T20:26:54ZOphestracat@gensokyo.uk2025-10-21T20:26:54Zurn:sha1:c5f59c5488cc529a5a7c7a89e1da56c2b44db16c
This is useful as package "syscall" does not provide such a wrapper. This change also improves error handling to fully conform to the manpage.
Signed-off-by: Ophestra <cat@gensokyo.uk>