hakurei/ldd/exec.go, branch v0.1.0low-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/ldd/exec.go?h=v0.1.02025-07-02T18:30:39Ztreewide: migrate to hakurei.app2025-07-02T18:30:39ZOphestracat@gensokyo.uk2025-07-02T18:30:39Zurn:sha1:d2f9a9b83b1c43304081493eb2305309be1dd504
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: move out of toplevel2025-07-02T17:59:43ZOphestracat@gensokyo.uk2025-07-02T17:59:43Zurn:sha1:1b5ecd9eaf3289d164d8ed1bce6013e0e4ef8e86
This allows slightly easier use of the vanity url. This also provides some disambiguation between low level containers and hakurei app containers.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hakurei: move container helpers toplevel2025-07-02T12:31:29ZOphestracat@gensokyo.uk2025-07-02T12:31:29Zurn:sha1:eec021cc4b4eb42bc9c8311755826828bfba1996
Signed-off-by: Ophestra <cat@gensokyo.uk>
hakurei: move container toplevel2025-07-02T12:23:55ZOphestracat@gensokyo.uk2025-07-02T12:23:55Zurn:sha1:a1d98823f8d17b49b432508d071b62ccd426f1ce
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: expose seccomp interface2025-07-01T19:47:13ZOphestracat@gensokyo.uk2025-07-01T19:38:28Zurn:sha1:31aef905fa819310ee7694775a836c294ff742e4
There's no point in artificially limiting and abstracting away these options. The higher level hakurei package is responsible for providing a secure baseline and sane defaults. The sandbox package should present everything to the caller.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: rename to hakurei2025-06-24T19:57:41ZOphestracat@gensokyo.uk2025-06-24T18:59:52Zurn:sha1:87e008d56de974947ebb99c2cc40b25d3c2cf43e
Fortify makes little sense for a container tool.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: move out of internal2025-03-16T17:55:36ZOphestracat@gensokyo.uk2025-03-16T17:55:36Zurn:sha1:24618ab9a1524e8b8986a9bf67667288e642fcf1
Signed-off-by: Ophestra <cat@gensokyo.uk>
ldd: always copy stderr2025-03-16T15:08:00ZOphestracat@gensokyo.uk2025-03-16T15:08:00Zurn:sha1:bc54db54d2b33e5ed29667be69d0c07eed9bb007
Dropping the buffer on success is unhelpful and could hide some useful information.
Signed-off-by: Ophestra <cat@gensokyo.uk>
ldd: mount /proc in container2025-03-16T15:01:03ZOphestracat@gensokyo.uk2025-03-16T15:01:03Zurn:sha1:bf07b7cd9e8e305c619a45c8171dada4286c3fbf
This covers host /proc.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: check command function pointer2025-03-16T14:29:14ZOphestracat@gensokyo.uk2025-03-16T14:29:14Zurn:sha1:48feca800f90136f5a2d6169299f4efe5a93822c
Setting default CommandContext on initialisation is somewhat of a footgun.
Signed-off-by: Ophestra <cat@gensokyo.uk>