hakurei/internal/sandbox/container_test.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/internal/sandbox/container_test.go?h=develop2025-03-16T17:55:36Zsandbox: move out of internal2025-03-16T17:55:36ZOphestracat@gensokyo.uk2025-03-16T17:55:36Zurn:sha1:24618ab9a1524e8b8986a9bf67667288e642fcf1
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: wrap fmsg interface2025-03-16T17:44:07ZOphestracat@gensokyo.uk2025-03-16T17:31:46Zurn:sha1:9a1f8e129fe0f9919981b8a1d345a9b455bd76de
Signed-off-by: Ophestra <cat@gensokyo.uk>
ldd: lib paths resolve function2025-03-15T16:20:09ZOphestracat@gensokyo.uk2025-03-15T16:20:09Zurn:sha1:273d97af8502059193ccb6a188422f9d22eaf106
This is what always happens right after a ldd call, so implement it here.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: expose cancel behaviour2025-03-14T18:04:27ZOphestracat@gensokyo.uk2025-03-14T18:04:27Zurn:sha1:e64e7608ca47d25e81fb43d66838d9aa0ffd2e9a
Signed-off-by: Ophestra <cat@gensokyo.uk>
ldd: run in native sandbox2025-03-14T08:55:55ZOphestracat@gensokyo.uk2025-03-14T08:51:29Zurn:sha1:4bb5d9780f3c46e942dc778d93c28391caee33c7
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: write uid/gid map as init2025-03-14T08:42:22ZOphestracat@gensokyo.uk2025-03-14T08:41:08Zurn:sha1:f41fd946284aa30e7529bd92193632b20d77a2dd
This avoids PR_SET_DUMPABLE in the parent process.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: invert seccomp ruleset defaults2025-03-13T17:38:32ZOphestracat@gensokyo.uk2025-03-13T17:38:32Zurn:sha1:94895bbacb42b82673b07142e786855a8ac756dc
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: mount container /dev2025-03-13T17:18:44ZOphestracat@gensokyo.uk2025-03-13T17:18:44Zurn:sha1:f332200ca4a18ae098e4c42509ba1256d8562cf9
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: native container tooling2025-03-13T12:36:26ZOphestracat@gensokyo.uk2025-03-13T11:59:03Zurn:sha1:9b1a60b5c9f7a92abb632639117d61c5cbaf74f7
This should eventually replace bwrap.
Signed-off-by: Ophestra <cat@gensokyo.uk>