hakurei/hst/config.go, branch masterlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/hst/config.go?h=master2026-04-10T10:34:02Zhst: optionally reject insecure options2026-04-10T10:34:02ZOphestracat@gensokyo.uk2026-04-10T10:12:45Zurn:sha1:c33a6a5b7ee130370aeeebf6635977415115f7da
This prevents inadvertent use of insecure compatibility features.
Closes #30.
Signed-off-by: Ophestra <cat@gensokyo.uk>
check: move from container2026-03-17T06:39:03ZOphestracat@gensokyo.uk2026-03-17T06:35:58Zurn:sha1:6d015a949e27f20c86409c7d78053f0b0493f165
This package is not container specific, and widely used across the project.
Signed-off-by: Ophestra <cat@gensokyo.uk>
ext: isolate from container/std2026-03-17T04:39:26ZOphestracat@gensokyo.uk2026-03-17T04:35:48Zurn:sha1:cd5959fe5ab04786cd5dee3cf09f725229ae7c7b
These are too general to belong in the container package. This targets the v0.4 release to reduce the wrapper maintenance burden.
Signed-off-by: Ophestra <cat@gensokyo.uk>
all: migrate to rosa/hakurei2026-03-15T11:12:51ZOphestracat@gensokyo.uk2026-03-15T11:12:51Zurn:sha1:8d650c0c8f5e44e1bd50d4354cd56ae4467445cb
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: expose scheduling priority2026-03-11T17:15:14ZOphestracat@gensokyo.uk2026-03-11T16:20:08Zurn:sha1:620062cca92b6241c15f96f86a9c6f0f7882ecca
This is useful when limits are configured to allow it.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: expose scheduling policy2026-03-11T15:52:18ZOphestracat@gensokyo.uk2026-03-11T12:06:44Zurn:sha1:04e6bc3c5c99d6a99f17cfa5f69f34fe8941aee2
This is primarily useful for poorly written music players for now.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: improve doc comments2026-03-11T10:21:55ZOphestracat@gensokyo.uk2026-03-11T10:21:55Zurn:sha1:330a344845aa8653772a9be6c085f4fdb602a028
These now read a lot better both in source and on pkgsite.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: add direct hardware option2025-12-15T03:29:32ZOphestracat@gensokyo.uk2025-12-15T03:29:32Zurn:sha1:0c0e3d6fc2bf37eef703e9295fc56ef2a2fc5808
This is unfortunately the only possible setup to securely expose PipeWire to the container. Further explanation explained in the doc comment and #29.
This will be implemented in a future commit.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: include PipeWire op and enforce PulseAudio check2025-12-07T23:53:04ZOphestracat@gensokyo.uk2025-12-07T23:03:50Zurn:sha1:87781c765844409226804157546753b84ef3c6b4
This fully replaces PulseAudio with PipeWire and enforces the PulseAudio check and error message. The pipewire-pulse daemon is handled in the NixOS module.
Closes #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: check for insecure PulseAudio enablement2025-12-07T18:13:02ZOphestracat@gensokyo.uk2025-12-07T17:53:07Zurn:sha1:422efcf258eb49ecd0d4de8e53adae656696ea56
This is currently still a noop, but required for #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>