hakurei/container, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/container?h=develop2026-08-27T07:06:13Zcontainer: explicitly order initialisation2026-08-27T07:06:13ZOphestracat@gensokyo.uk2026-08-27T06:35:55Zurn:sha1:ebb1144efc6c09dff8a732c5baf11db5b8f515b2
This avoids accessing uninitialised hostProc in some build modes.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: enter init path early2026-08-25T05:53:29ZOphestracat@gensokyo.uk2026-08-25T05:48:27Zurn:sha1:1c3761bb53c95d75751f95e8f77d9d1e5928b968
There is generally no use case where any setup is required before init, and requiring the explicit function call is error-prone and unnecessary. It also causes trouble with packages using a similar trick. This change moves argv0 check early and makes it an import side effect. The stub will be removed in v0.5.
Signed-off-by: Ophestra <cat@gensokyo.uk>
all: apply modernisers2026-06-08T05:58:24ZOphestracat@gensokyo.uk2026-06-08T05:19:11Zurn:sha1:f869ff95a12756de97827b4afd93763f9661f144
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: binfmt registration2026-05-07T06:55:19ZOphestracat@gensokyo.uk2026-05-07T06:40:47Zurn:sha1:575ef307ad5cedb13a514cd038a4880ab8c91242
This arranges for binfmt entries to be registered for the container.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: optionally map uid/gid 0 as init2026-05-07T06:15:47ZOphestracat@gensokyo.uk2026-05-07T06:15:28Zurn:sha1:d4144fcf7f9217d2a2dcec21202421d5fa9d4928
Unfortunately required to work around flawed APIs like binfmt_misc.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: improve capability handling2026-05-07T05:27:28ZOphestracat@gensokyo.uk2026-05-07T05:14:06Zurn:sha1:bad66facbc1b555d8883534c27ada586fc15df9c
This cleans up preserving caps for expansion and correctly sets privileged caps.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: abandon response on termination2026-05-06T15:58:02ZOphestracat@gensokyo.uk2026-05-06T15:50:47Zurn:sha1:4aba014eac0c11bd184364b506b3e15d5716e947
This prevents blocking on early failure.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: check capability in test helper2026-05-06T12:05:54ZOphestracat@gensokyo.uk2026-05-06T12:05:54Zurn:sha1:779ba994ce8811a747a902359fe2e9c488a8563e
This makes corresponding nixos tests redundant.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/init: mount intermediate before early2026-05-05T15:55:45ZOphestracat@gensokyo.uk2026-05-05T15:55:45Zurn:sha1:617ee21647ef86be67e37a3df2413d08c6658799
This is usable as scratch space during early.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: optionally suppress init verbosity2026-05-05T10:59:44ZOphestracat@gensokyo.uk2026-05-05T10:59:44Zurn:sha1:09d9f766a94c9261a7e6c4c24b52e718d6d5fe86
This change also removes verbose output no longer considered useful.
Signed-off-by: Ophestra <cat@gensokyo.uk>