hakurei/internal/app/seal_linux.go, branch develop

internal/app: remove seal interface

2025-08-27T16:07:51Z

This further cleans up the package for the restructure. Signed-off-by: Ophestra

internal/app: less strict username regex

2025-08-27T15:22:55Z

Use the default value of NAME_REGEX from adduser. Should not hurt compatibility while being less strict. Signed-off-by: Ophestra

internal: move sysconf wrapper to app

2025-08-27T15:04:58Z

This should not be used and is not useful in other packages. Signed-off-by: Ophestra

app/seal: leave $DISPLAY as is on host abstract

2025-08-27T11:42:03Z

This helps work around faulty software that misinterprets unix: DISPLAY string. Signed-off-by: Ophestra

hst/config: remove data field, rename dir to home

2025-08-25T15:56:10Z

There is no reason to give the home directory special treatment, as this behaviour can be quite confusing. The home directory also does not necessarily require its own mount point, it could be provided by a parent or simply be ephemeral. Signed-off-by: Ophestra

hst/config: remove container etc field

2025-08-25T10:24:33Z

This no longer needs special treatment since it can be specified as a generic filesystem entry. Signed-off-by: Ophestra

hst/fsbind: optional autoetc behaviour

2025-08-25T09:38:19Z

This generalises the special field allowing any special behaviour to be matched from target. Signed-off-by: Ophestra

hst/config: handle filesystem entry targeting root

2025-08-25T08:52:57Z

This allows any fstype supported by hst to be directly mounted on sysroot. A special case in internal/app applies the matching entry early and excludes it from path hiding. Closes #5. Signed-off-by: Ophestra

hst: rename net and abstract fields

2025-08-18T07:48:01Z

This makes more sense and matches the container library. Signed-off-by: Ophestra

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18T07:28:14Z