hakurei/internal/app/container_linux.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/internal/app/container_linux.go?h=develop2025-08-27T16:07:51Zinternal/app: remove seal interface2025-08-27T16:07:51ZOphestracat@gensokyo.uk2025-08-27T16:07:51Zurn:sha1:b14690aa77b3d5f86c4d1b1965675d6d82789e32
This further cleans up the package for the restructure.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/app: update doc comments2025-08-27T15:45:57ZOphestracat@gensokyo.uk2025-08-27T15:45:57Zurn:sha1:da0459aca1988401c9e8743bedb349d6f8544aa3
A lot of these comments are quite old and have not been updated to reflect changes.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/initdev: mount tmpfs on shm for ro dev2025-08-25T18:27:07ZOphestracat@gensokyo.uk2025-08-25T18:15:32Zurn:sha1:9bc8532d56fc5c1f727919d21f464dff09316913
Programs expect /dev/shm to be a writable tmpfs.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst/config: remove symlink field2025-08-25T13:23:54ZOphestracat@gensokyo.uk2025-08-25T13:21:16Zurn:sha1:9585b35d5b4e91bb327e3eddb229d1b711eeec2f
Closes #6.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst/config: remove container etc field2025-08-25T10:24:33ZOphestracat@gensokyo.uk2025-08-25T10:13:31Zurn:sha1:0dcac55a0c3fcbb2d48028a4474ccecb37bb22fc
This no longer needs special treatment since it can be specified as a generic filesystem entry.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst/fsbind: optional autoetc behaviour2025-08-25T09:38:19ZOphestracat@gensokyo.uk2025-08-25T09:30:40Zurn:sha1:6d202d73b41d28166f7bea7da36d1ce054711ff9
This generalises the special field allowing any special behaviour to be matched from target.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst/config: handle filesystem entry targeting root2025-08-25T08:52:57ZOphestracat@gensokyo.uk2025-08-25T08:51:08Zurn:sha1:1438096339f49bdd466f3b057c7e695aa126fc3c
This allows any fstype supported by hst to be directly mounted on sysroot. A special case in internal/app applies the matching entry early and excludes it from path hiding.
Closes #5.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/autoroot: remove prefix field2025-08-24T18:39:20ZOphestracat@gensokyo.uk2025-08-24T18:38:12Zurn:sha1:cedfceded548ef3b8d80b4e46e64dbaa9de8bd93
This field has been a noop for a long time. Remove it to prevent further confusion.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: rename net and abstract fields2025-08-18T07:48:01ZOphestracat@gensokyo.uk2025-08-18T07:47:23Zurn:sha1:a3988c1a7725eb791795643e0810f03bab4572b3
This makes more sense and matches the container library.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: optionally isolate host abstract UNIX domain sockets via landlock2025-08-18T07:28:14ZClayton Gilmernetadr_t@outlook.com2025-08-18T03:00:52Zurn:sha1:5db07140726e6e1bf615ed075e9a8b653508c2a7