hakurei/internal/init, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/internal/init?h=develop2024-11-01T18:13:57Zcmd: shim and init into separate binaries2024-11-01T18:13:57ZOphestra Umikercat@ophivana.moe2024-11-01T18:03:44Zurn:sha1:584732f80ab91afb349720cfb8e9979ed2ba173e
This change also fixes a deadlock when shim fails to connect and complete the setup.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
fmsg: support temporarily withholding output2024-10-26T14:09:32ZOphestra Umikercat@ophivana.moe2024-10-26T14:09:32Zurn:sha1:ae1a102882103221ef842176dfd8cb1090d5f591
Trying to print to a shared stdout is a terrible idea. This change makes it possible to withhold output for the lifetime of the sandbox.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
fmsg: produce all output through fmsg2024-10-21T11:47:02ZOphestra Umikercat@ophivana.moe2024-10-21T11:47:02Zurn:sha1:42e0b168e3d75389dfb968aebf9f5629d64782f9
The behaviour of print functions from package fmt is not thread safe. Functions provided by fmsg wrap around Logger methods. This makes prefix much cleaner and makes it easy to deal with future changes to logging.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
migrate to git.ophivana.moe/security/fortify2024-10-20T10:50:13ZOphestra Umikercat@ophivana.moe2024-10-20T10:50:13Zurn:sha1:65af1684e3f12c1920f91c96474f19dbd0b147fc
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
init: start timeout only if reaped PID is the initial process2024-10-17T11:46:48ZOphestra Umikercat@ophivana.moe2024-10-17T11:46:25Zurn:sha1:919e5b5cd5deb16087f4a85e2801e73643d7dce4
Fix a very obvious bug introduced in 5401882ed0.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
init: post initial process death exit timeout2024-10-16T17:38:24ZOphestra Umikercat@ophivana.moe2024-10-16T17:38:24Zurn:sha1:5401882ed0f4e6ca28d1312bc29b90bb4d64a04f
Wait for 5 seconds before printing a message and exiting after picking up the initial process's wait status. This also kills any lingering processes.This behaviour is helpful for applications launched without a terminal attached.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
init: custom init process inside sandbox2024-10-13T17:27:02ZOphestra Umikercat@ophivana.moe2024-10-13T17:27:02Zurn:sha1:1302bcede057538665a4eb626357409d8cb515e8
Bubblewrap as init is a bit awkward and don't support a few setup actions fortify will need, such as starting/supervising nscd.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>