hakurei/container, branch v0.4.2low-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/container?h=v0.4.22026-05-07T06:55:19Zcontainer: binfmt registration2026-05-07T06:55:19ZOphestracat@gensokyo.uk2026-05-07T06:40:47Zurn:sha1:575ef307ad5cedb13a514cd038a4880ab8c91242
This arranges for binfmt entries to be registered for the container.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: optionally map uid/gid 0 as init2026-05-07T06:15:47ZOphestracat@gensokyo.uk2026-05-07T06:15:28Zurn:sha1:d4144fcf7f9217d2a2dcec21202421d5fa9d4928
Unfortunately required to work around flawed APIs like binfmt_misc.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: improve capability handling2026-05-07T05:27:28ZOphestracat@gensokyo.uk2026-05-07T05:14:06Zurn:sha1:bad66facbc1b555d8883534c27ada586fc15df9c
This cleans up preserving caps for expansion and correctly sets privileged caps.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: abandon response on termination2026-05-06T15:58:02ZOphestracat@gensokyo.uk2026-05-06T15:50:47Zurn:sha1:4aba014eac0c11bd184364b506b3e15d5716e947
This prevents blocking on early failure.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: check capability in test helper2026-05-06T12:05:54ZOphestracat@gensokyo.uk2026-05-06T12:05:54Zurn:sha1:779ba994ce8811a747a902359fe2e9c488a8563e
This makes corresponding nixos tests redundant.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/init: mount intermediate before early2026-05-05T15:55:45ZOphestracat@gensokyo.uk2026-05-05T15:55:45Zurn:sha1:617ee21647ef86be67e37a3df2413d08c6658799
This is usable as scratch space during early.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: optionally suppress init verbosity2026-05-05T10:59:44ZOphestracat@gensokyo.uk2026-05-05T10:59:44Zurn:sha1:09d9f766a94c9261a7e6c4c24b52e718d6d5fe86
This change also removes verbose output no longer considered useful.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/initoverlay: configure via fsconfig2026-05-03T17:29:56ZOphestracat@gensokyo.uk2026-05-03T17:07:52Zurn:sha1:da11b26ec16ef9ed61045fdbb03c4090286bfeba
This works around the page size limit at the cost of negligible performance regressions.
Closes #34.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: reject strings larger than a page2026-05-03T08:30:25ZOphestracat@gensokyo.uk2026-05-03T08:30:25Zurn:sha1:162265b47efb02ae7ed6d74f47c6fa95140129ae
The vfs stores these values in a page obtained via GFP, and silently stops copying once the page is filled. This check prevents confusing behaviour in such cases.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/landlock: relocate from package container2026-04-10T14:56:45ZOphestracat@gensokyo.uk2026-04-10T14:56:45Zurn:sha1:b39064037625d1757a65913086ec3a247ad5bb29
This is not possible to use directly, so remove it from the public API.
Signed-off-by: Ophestra <cat@gensokyo.uk>