hakurei/dbus, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/dbus?h=develop2025-07-02T12:52:07Zsystem: move system access packages2025-07-02T12:52:07ZOphestracat@gensokyo.uk2025-07-02T12:52:07Zurn:sha1:82561d62b66f17c05604e87f18187bb3a91f00d2
These packages loosely belong in the "system" package and "system" provides high level wrappers for all of them.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hakurei: move container helpers toplevel2025-07-02T12:31:29ZOphestracat@gensokyo.uk2025-07-02T12:31:29Zurn:sha1:eec021cc4b4eb42bc9c8311755826828bfba1996
Signed-off-by: Ophestra <cat@gensokyo.uk>
hakurei: move container toplevel2025-07-02T12:23:55ZOphestracat@gensokyo.uk2025-07-02T12:23:55Zurn:sha1:a1d98823f8d17b49b432508d071b62ccd426f1ce
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/hakurei: move to cmd2025-07-02T11:42:51ZOphestracat@gensokyo.uk2025-07-02T11:42:51Zurn:sha1:eb22a8bcc1ac03357d4073e5d3ed6d0ab5246a37
Having it at the project root never made sense since the "ego" name was deprecated. This change finally addresses it.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: expose seccomp interface2025-07-01T19:47:13ZOphestracat@gensokyo.uk2025-07-01T19:38:28Zurn:sha1:31aef905fa819310ee7694775a836c294ff742e4
There's no point in artificially limiting and abstracting away these options. The higher level hakurei package is responsible for providing a secure baseline and sane defaults. The sandbox package should present everything to the caller.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox/seccomp: resolve rules natively2025-07-01T13:11:32ZOphestracat@gensokyo.uk2025-07-01T11:23:33Zurn:sha1:1a8840bebc673672235b6e10b1b9386f24751757
This enables loading syscall filter policies from external cross-platform config files.
This also removes a significant amount of C code.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: rename to hakurei2025-06-24T19:57:41ZOphestracat@gensokyo.uk2025-06-24T18:59:52Zurn:sha1:87e008d56de974947ebb99c2cc40b25d3c2cf43e
Fortify makes little sense for a container tool.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: update flake lock2025-06-04T19:05:39ZOphestracat@gensokyo.uk2025-06-02T09:53:28Zurn:sha1:b7e991de5bfa81bff474d07142555df51202640a
Signed-off-by: Ophestra <cat@gensokyo.uk>
dbus: handle bizarre dbus proxy behaviour2025-05-25T10:50:06ZOphestracat@gensokyo.uk2025-05-25T10:50:06Zurn:sha1:dde2516304ac6b0edc1dfc6650f37d32fa62642c
There is a strange behaviour in xdg-dbus-proxy where if any interface string when stripped of a single ".*" suffix does not contain a '.' byte anywhere, the program will exit with code 1 without any output. This checks for such conditions to make the failure less confusing.
Signed-off-by: Ophestra <cat@gensokyo.uk>
dbus: clean up wrapper implementation2025-04-16T14:35:17ZOphestracat@gensokyo.uk2025-04-16T14:10:04Zurn:sha1:5979d8b1e0fc4249fb73de9b0ba099bae7707214
The dbus proxy wrapper haven't been updated much ever since the helper interface was introduced.
Signed-off-by: Ophestra <cat@gensokyo.uk>