hakurei/options.nix, branch v0.3.6low-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/options.nix?h=v0.3.62026-01-10T18:50:08Znix: use package from module in default2026-01-10T18:50:08ZOphestracat@gensokyo.uk2026-01-10T18:50:08Zurn:sha1:423808ac767ed3a410948bf9e5df7b0da8d9e9c1
This makes overriding hakurei easier. Also avoids building hakurei twice since nix does that for some reason.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: configure sharefs via fileSystems2025-12-27T14:14:08ZOphestracat@gensokyo.uk2025-12-27T13:52:12Zurn:sha1:e42ea32dbe9283d14a7c0e8746059bc5ef97f6cd
Turns out this did not work because in the vm test harness, virtualisation.fileSystems completely and silently overrides fileSystems, causing its contents to not even be evaluated anymore. This is not documented as far as I can tell, and is not obvious by any stretch of the imagination. The current hack is cargo culted from nix-community/impermanence and hopefully lasts until this project fully replaces nix.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/sharefs: implement shared filesystem2025-12-24T20:13:02ZOphestracat@gensokyo.uk2025-12-24T19:05:54Zurn:sha1:7bfbd5981025282007f09225e22e895523d7a7bf
This is for passing files between applications, similar to android /sdcard.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/outcome: expose pipewire via pipewire-pulse2025-12-15T03:57:06ZOphestracat@gensokyo.uk2025-12-15T03:43:58Zurn:sha1:54610aaddcc01e335c34087bc0c3bc1de6d23cf8
This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst.
Closes #29.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: update flake lock2025-12-11T23:39:55ZOphestracat@gensokyo.uk2025-12-11T23:39:55Zurn:sha1:ebc67bb8ada03750eee60ab58c945b4745f22af1
NixOS 25.11 introduces a crash in cage and an intermittent crash in foot.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: include PipeWire op and enforce PulseAudio check2025-12-07T23:53:04ZOphestracat@gensokyo.uk2025-12-07T23:03:50Zurn:sha1:87781c765844409226804157546753b84ef3c6b4
This fully replaces PulseAudio with PipeWire and enforces the PulseAudio check and error message. The pipewire-pulse daemon is handled in the NixOS module.
Closes #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: check for insecure PulseAudio enablement2025-12-07T18:13:02ZOphestracat@gensokyo.uk2025-12-07T17:53:07Zurn:sha1:422efcf258eb49ecd0d4de8e53adae656696ea56
This is currently still a noop, but required for #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst/container: optional runtime and tmpdir sharing2025-10-18T19:11:38ZOphestracat@gensokyo.uk2025-10-18T18:53:20Zurn:sha1:699c19e972a3cbcc714403aedffcb5ff74386cfc
Sharing and persisting these directories do not always make sense. Make it optional here.
Closes #16.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: use slightly less ambiguous type2025-09-14T05:45:14ZOphestracat@gensokyo.uk2025-09-14T05:45:14Zurn:sha1:70e02090f7163729ff0002aa51cbf002d583233b
I had trouble getting Nix to merge json arrays properly, I am not sure that this helps.
At this point I have given up trying to understand Nix type system, and I am just trying to keep the Nix stuff going with extensive tests until it can be replaced by lkl for testing and planterette for general usage.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: rename net and abstract fields2025-08-18T07:48:01ZOphestracat@gensokyo.uk2025-08-18T07:47:23Zurn:sha1:a3988c1a7725eb791795643e0810f03bab4572b3
This makes more sense and matches the container library.
Signed-off-by: Ophestra <cat@gensokyo.uk>