hakurei/helper/bwrap/sequential.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/helper/bwrap/sequential.go?h=develop2025-03-24T20:35:02Zhelper: remove bubblewrap wrapper2025-03-24T20:35:02ZOphestracat@gensokyo.uk2025-03-24T20:35:02Zurn:sha1:b39f3aeb59095aef123920d891fecf890ce0b088
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: implement file copy flags2025-02-14T18:13:15ZOphestracat@gensokyo.uk2025-02-14T18:12:28Zurn:sha1:72b0160aadac590bc479b9ec86e0378a95d2bdc0
These are significantly more efficient and less error-prone than mounting an external tmpfile. This should also reduce attack surface as the resulting files are private to its specific sandbox.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: PositionalArg implement fmt.Stringer2025-02-14T15:11:48ZOphestracat@gensokyo.uk2025-02-14T14:58:52Zurn:sha1:be7d944b39ed2e6a674c64c39c0f0f093d4d3097
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: integrate seccomp into helper interface2025-01-21T16:52:57ZOphestracat@gensokyo.uk2025-01-21T16:51:10Zurn:sha1:9a239fa1a5ad2ff248ca7a9d39342f66926c9fef
This makes API usage much cleaner, and encapsulates all bwrap arguments in argsWt.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: separate sequential/static args2025-01-15T04:07:06ZOphestracat@gensokyo.uk2025-01-15T01:57:10Zurn:sha1:3e11ce6868182f1a3f74d5bf6c1db761097666fa
Signed-off-by: Ophestra <cat@gensokyo.uk>