hakurei/internal/sandbox/init.go, branch develop
low-level userspace tooling for Rosa OS
http://src.rosa.moe/hakurei/atom/internal/sandbox/init.go?h=develop
2025-03-16T17:55:36Z
sandbox: move out of internal
2025-03-16T17:55:36Z
Ophestra
cat@gensokyo.uk
2025-03-16T17:55:36Z
urn:sha1:24618ab9a1524e8b8986a9bf67667288e642fcf1
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: move params setup functions
2025-03-16T17:48:32Z
Ophestra
cat@gensokyo.uk
2025-03-16T17:48:32Z
urn:sha1:9ce4706a0766880c072cccd2643d66f614a6a16b
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: wrap fmsg interface
2025-03-16T17:44:07Z
Ophestra
cat@gensokyo.uk
2025-03-16T17:31:46Z
urn:sha1:9a1f8e129fe0f9919981b8a1d345a9b455bd76de
Signed-off-by: Ophestra <cat@gensokyo.uk>
seccomp: install output atomically
2025-03-16T16:10:27Z
Ophestra
cat@gensokyo.uk
2025-03-16T16:09:12Z
urn:sha1:ee108603572101ad3c285830e04ee248916b6c5d
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox/init: early params nil check
2025-03-14T19:03:10Z
Ophestra
cat@gensokyo.uk
2025-03-14T19:03:10Z
urn:sha1:bac4e67867faa7d8274b684575140a65827d3a4c
Signed-off-by: Ophestra <cat@gensokyo.uk>
seccomp: move out of helper
2025-03-14T13:42:40Z
Ophestra
cat@gensokyo.uk
2025-03-14T13:42:40Z
urn:sha1:2647a71be1f287e50011a65653b9e9c806627899
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: write uid/gid map as init
2025-03-14T08:42:22Z
Ophestra
cat@gensokyo.uk
2025-03-14T08:41:08Z
urn:sha1:f41fd946284aa30e7529bd92193632b20d77a2dd
This avoids PR_SET_DUMPABLE in the parent process.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: pass params to setup ops
2025-03-13T17:11:38Z
Ophestra
cat@gensokyo.uk
2025-03-13T17:11:38Z
urn:sha1:a092b042abca15ce3ba9def9b502d8a7cb889c1b
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: native container tooling
2025-03-13T12:36:26Z
Ophestra
cat@gensokyo.uk
2025-03-13T11:59:03Z
urn:sha1:9b1a60b5c9f7a92abb632639117d61c5cbaf74f7
This should eventually replace bwrap.
Signed-off-by: Ophestra <cat@gensokyo.uk>