hakurei/internal/app/share.runtime.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/internal/app/share.runtime.go?h=develop2024-12-28T02:12:35Zapp: merge share methods2024-12-28T02:12:35ZOphestracat@gensokyo.uk2024-12-28T02:12:35Zurn:sha1:0107620d8c174dcf9237c16d4b4b7b2f6955a214
This significantly increases readability and makes order of ops more obvious.
Signed-off-by: Ophestra <cat@gensokyo.uk>
migrate to git.gensokyo.uk/security/fortify2024-12-19T15:20:02ZOphestra Umikercat@ophivana.moe2024-12-19T15:20:02Zurn:sha1:df6fc298f608eb106229efc742f0ef8ce9f78e8b
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
internal: wrap calls to os standard library functions2024-10-23T12:46:21ZOphestra Umikercat@ophivana.moe2024-10-23T12:46:21Zurn:sha1:6bc5be7e5a2334274adf2945ad6d29d063a7086b
This change helps tests stub out and simulate OS behaviour during the sealing process. This also removes dependency on XDG_RUNTIME_DIR as the internal.System implementation provided to App provides a compat directory inside the tmpdir-based share when XDG_RUNTIME_DIR is unavailable.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
migrate to git.ophivana.moe/security/fortify2024-10-20T10:50:13ZOphestra Umikercat@ophivana.moe2024-10-20T10:50:13Zurn:sha1:65af1684e3f12c1920f91c96474f19dbd0b147fc
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app: move app ID to app struct2024-10-19T15:22:18ZOphestra Umikercat@ophivana.moe2024-10-19T15:07:48Zurn:sha1:ad0034b09aaa76aca478304518c1394ba292a619
App ID is inherent to App, and it makes no sense to generate it as part of the app sealing process.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app/share: fix order to ensure SharePath before any of its subdirectories2024-10-17T16:21:58ZOphestra Umikercat@ophivana.moe2024-10-17T16:21:58Zurn:sha1:65bd7d18dbf35216d0a70c102a732c6356caee85
shareTmpdirChild happened to request an ephemeral dir within SharePath and was called before shareRuntime which ensures that path. This commit moves SharePath initialisation to shareSystem and moves shareTmpdirChild into ShareSystem. Further cleanup and tests are desperately needed for the app package but for now this fix will have to do.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app: port app to use the system package2024-10-15T16:38:59ZOphestra Umikercat@ophivana.moe2024-10-15T16:38:59Zurn:sha1:084cd84f36a1d608541b4aa4e1e95334395d8953
This commit does away with almost all baggage left over from the Ego port. Error wrapping also got simplified. All API changes happens to be internal which means no changes to main except renaming of the BaseError type.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
helper/bwrap: ordered filesystem args2024-10-14T17:15:55ZOphestra Umikercat@ophivana.moe2024-10-14T17:15:55Zurn:sha1:2faf510146733c28a5dbc3245175700abcf4f966
The argument builder was written based on the incorrect assumption that bwrap arguments are unordered. The argument builder is replaced in this commit to correct that mistake.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app: generate and replace passwd and group files2024-10-12T17:43:00ZOphestra Umikercat@ophivana.moe2024-10-12T17:43:00Zurn:sha1:e4536b87ad5bc23096eab00f17ac55b7aad23996
This ensures libc functions get correct user information.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app: integrate bwrap into environment setup2024-10-10T19:18:15ZOphestra Umikercat@ophivana.moe2024-10-10T19:18:15Zurn:sha1:662f2a9d2cea3f462cf5b508b3719d4d7a722146
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>