hakurei/internal/proc, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/internal/proc?h=develop2025-02-08T04:03:45Zhelper/proc: move package out of internal2025-02-08T04:03:45ZOphestracat@gensokyo.uk2025-02-08T04:03:45Zurn:sha1:e14923ae530dda0601c204fe17ac1956f54a45b0
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/seccomp: separate seccomp package2025-01-25T03:59:11ZOphestracat@gensokyo.uk2025-01-25T03:59:11Zurn:sha1:163f15e93f009d15ecc2f93932e26728aff9904b
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: integrate seccomp into helper interface2025-01-21T16:52:57ZOphestracat@gensokyo.uk2025-01-21T16:51:10Zurn:sha1:9a239fa1a5ad2ff248ca7a9d39342f66926c9fef
This makes API usage much cleaner, and encapsulates all bwrap arguments in argsWt.
Signed-off-by: Ophestra <cat@gensokyo.uk>
proc: append to ExtraFiles slice pointer2025-01-21T03:51:39ZOphestracat@gensokyo.uk2025-01-21T03:51:39Zurn:sha1:82029948e6d8d047edc02ccff354e16c419e5742
This is useful for initialising extra files before command.
Signed-off-by: Ophestra <cat@gensokyo.uk>
proc/priv/shim: resolve and load seccomp rules2025-01-20T14:52:56ZOphestracat@gensokyo.uk2025-01-20T14:52:56Zurn:sha1:20a3d4c458d3df7488e3fa444a5b849f99d55d9e
Signed-off-by: Ophestra <cat@gensokyo.uk>
proc/priv/shim: seccomp bpf filter via libseccomp2025-01-20T14:39:47ZOphestracat@gensokyo.uk2025-01-20T14:39:47Zurn:sha1:3df344828feaba958345050cfa56787e133d06db
Rulesets adapted from Flatpak for compatibility.
Signed-off-by: Ophestra <cat@gensokyo.uk>
fst: include syscall filter configuration2025-01-20T12:12:39ZOphestracat@gensokyo.uk2025-01-20T12:12:39Zurn:sha1:27f5922d5c4d4432246d6de6eb0d81d574cdc8c7
This value is passed through to shim.
Signed-off-by: Ophestra <cat@gensokyo.uk>
proc/priv/shim: do not log bwrap args2025-01-20T10:51:28ZOphestracat@gensokyo.uk2025-01-20T10:51:28Zurn:sha1:3c55fc8e862daa2f3adaf5f5c6b332ced16dc6b5
This message is very long and does not serve much real purpose. Remove it to de-clutter verbose messages.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: generic extra file interface2025-01-19T15:20:04ZOphestracat@gensokyo.uk2025-01-19T10:18:22Zurn:sha1:eb0ef2d1151fbca484bf0c82667a511dbd0cb80b
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: move sync to helper state2025-01-19T09:38:13ZOphestracat@gensokyo.uk2025-01-19T09:38:13Zurn:sha1:2f705068658bf9c47a5fa829105111e46a7732a0
Signed-off-by: Ophestra <cat@gensokyo.uk>