hakurei/helper/bwrap, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/helper/bwrap?h=develop2025-03-24T20:35:02Zhelper: remove bubblewrap wrapper2025-03-24T20:35:02ZOphestracat@gensokyo.uk2025-03-24T20:35:02Zurn:sha1:b39f3aeb59095aef123920d891fecf890ce0b088
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: move out of internal2025-03-16T17:55:36ZOphestracat@gensokyo.uk2025-03-16T17:55:36Zurn:sha1:24618ab9a1524e8b8986a9bf67667288e642fcf1
Signed-off-by: Ophestra <cat@gensokyo.uk>
seccomp: install output atomically2025-03-16T16:10:27ZOphestracat@gensokyo.uk2025-03-16T16:09:12Zurn:sha1:ee108603572101ad3c285830e04ee248916b6c5d
Signed-off-by: Ophestra <cat@gensokyo.uk>
seccomp: move out of helper2025-03-14T13:42:40ZOphestracat@gensokyo.uk2025-03-14T13:42:40Zurn:sha1:2647a71be1f287e50011a65653b9e9c806627899
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: rename Write to WriteFile2025-02-18T15:34:19ZOphestracat@gensokyo.uk2025-02-18T15:33:34Zurn:sha1:d1f83f40d6eb3458bb01d39cf6177d5e6285b27f
In case this might want to be an io.Writer.
Signed-off-by: Ophestra <cat@gensokyo.uk>
fmsg: implement suspend in writer2025-02-16T09:51:53ZOphestracat@gensokyo.uk2025-02-16T08:26:09Zurn:sha1:e599b5583dd821ed26bdfc01f7f67d4a317b9843
This removes the requirement to call fmsg.Exit on every exit path, and enables direct use of the "log" package. However, fmsg.BeforeExit is still encouraged when possible to catch exit on suspended output.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: expose address of DataConfig2025-02-16T03:33:59ZOphestracat@gensokyo.uk2025-02-16T03:33:59Zurn:sha1:1fa5e992e4e73fd6f1774544e07655b88f9c83d6
This allows the caller to defer fulfilling its payload.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: implement file copy flags2025-02-14T18:13:15ZOphestracat@gensokyo.uk2025-02-14T18:12:28Zurn:sha1:72b0160aadac590bc479b9ec86e0378a95d2bdc0
These are significantly more efficient and less error-prone than mounting an external tmpfile. This should also reduce attack surface as the resulting files are private to its specific sandbox.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: PositionalArg implement fmt.Stringer2025-02-14T15:11:48ZOphestracat@gensokyo.uk2025-02-14T14:58:52Zurn:sha1:be7d944b39ed2e6a674c64c39c0f0f093d4d3097
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: merge Args and FDArgs2025-02-14T09:13:06ZOphestracat@gensokyo.uk2025-02-14T09:13:06Zurn:sha1:ace97952ccd08afe74737659794f43233d28596e
Signed-off-by: Ophestra <cat@gensokyo.uk>