hakurei/helper/seccomp/seccomp.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/helper/seccomp/seccomp.go?h=develop2025-03-14T13:42:40Zseccomp: move out of helper2025-03-14T13:42:40ZOphestracat@gensokyo.uk2025-03-14T13:42:40Zurn:sha1:2647a71be1f287e50011a65653b9e9c806627899
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/seccomp: improve error handling2025-03-12T06:52:48ZOphestracat@gensokyo.uk2025-03-12T06:52:48Zurn:sha1:29c3f8becb875de308be9238f5ca0ba9f35eb7bd
This passes both errno and libseccomp return value.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/seccomp: seccomp_load on negative fd2025-03-12T06:18:52ZOphestracat@gensokyo.uk2025-03-12T06:18:52Zurn:sha1:be16970e770554b3c2191da41eb9bd4472b323e4
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper: use generic extra files interface2025-02-13T14:34:15ZOphestracat@gensokyo.uk2025-02-13T14:15:34Zurn:sha1:fe7d208cf76fa6f24bb9d12ba29b5ed61d837ce3
This replaces the pipes object and integrates context into helper process lifecycle.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/seccomp: implement reader interface via pipe2025-02-03T10:43:03ZOphestracat@gensokyo.uk2025-02-03T09:10:29Zurn:sha1:5b7b3fa9a4d8ca4ad08d6648752e28ee66f0ffae
This also does not require the libc tmpfile call.
BPF programs emitted by libseccomp seems to be deterministic. The tests would catch regressions as it verifies the program against known good output backed by manual testing.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/seccomp: do not call F_println if not verbose2025-01-25T04:19:38ZOphestracat@gensokyo.uk2025-01-25T04:19:38Zurn:sha1:7b96cd6ded2668b04c908737ff393b805d34cc5c
This (slightly) improves performance.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/seccomp: separate seccomp package2025-01-25T03:59:11ZOphestracat@gensokyo.uk2025-01-25T03:59:11Zurn:sha1:163f15e93f009d15ecc2f93932e26728aff9904b
Signed-off-by: Ophestra <cat@gensokyo.uk>