hakurei/fst/app.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/fst/app.go?h=develop2025-04-12T04:56:41Zapp/instance: wrap internal implementation2025-04-12T04:56:41ZOphestracat@gensokyo.uk2025-04-12T04:56:41Zurn:sha1:6309469e933a31a300fbf16d8e77f48dcee402d3
This reduces the scope of the fst package, which was growing questionably large.
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: improve shim process management2025-04-06T18:55:17ZOphestracat@gensokyo.uk2025-04-05T14:51:39Zurn:sha1:e9a7cd526f4e5f0a8f7b18ad3682d2e3afbcb8ba
This ensures a signal gets delivered to the process instead of relying on parent death behaviour.
SIGCONT was chosen as it is the only signal an unprivileged process is allowed to send to processes with different credentials.
A custom signal handler is installed because the Go runtime does not expose signal information other than which signal was received, and shim must check pid to ensure reasonable behaviour.
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: run in native sandbox2025-03-24T16:52:49ZOphestracat@gensokyo.uk2025-03-24T16:52:49Zurn:sha1:5c4058d5ac7e7944973ca8216c258fc50c194e22
Signed-off-by: Ophestra <cat@gensokyo.uk>
fst: remove empty file2025-02-21T10:27:08ZOphestracat@gensokyo.uk2025-02-21T10:27:08Zurn:sha1:ff30a5ab5d12c79184581fe77621ea50c3d61cf6
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: separate instance from process state2025-02-21T07:06:24ZOphestracat@gensokyo.uk2025-02-21T07:00:31Zurn:sha1:c64b8163e79d47f1e710c1d067589bb393f8463c
This works better for the implementation.
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: defer system.I revert2025-02-19T12:12:11ZOphestracat@gensokyo.uk2025-02-19T12:05:48Zurn:sha1:3c80fd2b0f907af7b179e9e307304c0fa52994a0
Just returning an error after a successful call of commit will leave garbage behind with no way for the caller to clean them. This change ensures revert is always called after successful commit with at least per-process state enabled.
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: remove share method2025-02-19T07:20:25ZOphestracat@gensokyo.uk2025-02-19T04:41:06Zurn:sha1:ef81828e0c1ce6277e0b124f6062eab564dfeceb
This is yet another implementation detail from before system.I, getting rid of this vastly cuts down on redundant seal state.
Signed-off-by: Ophestra <cat@gensokyo.uk>
fst: move App interface declaration2025-02-18T13:36:45ZOphestracat@gensokyo.uk2025-02-18T13:36:45Zurn:sha1:bf9512733267e2781cf50070a6606d8f1a8bf5d9
Signed-off-by: Ophestra <cat@gensokyo.uk>