hakurei/options.nix, branch v0.3.7low-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/options.nix?h=v0.3.72026-03-11T17:15:14Zhst: expose scheduling priority2026-03-11T17:15:14ZOphestracat@gensokyo.uk2026-03-11T16:20:08Zurn:sha1:620062cca92b6241c15f96f86a9c6f0f7882ecca
This is useful when limits are configured to allow it.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: expose scheduling policy2026-03-11T15:52:18ZOphestracat@gensokyo.uk2026-03-11T12:06:44Zurn:sha1:04e6bc3c5c99d6a99f17cfa5f69f34fe8941aee2
This is primarily useful for poorly written music players for now.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: use package from module in default2026-01-10T18:50:08ZOphestracat@gensokyo.uk2026-01-10T18:50:08Zurn:sha1:423808ac767ed3a410948bf9e5df7b0da8d9e9c1
This makes overriding hakurei easier. Also avoids building hakurei twice since nix does that for some reason.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: configure sharefs via fileSystems2025-12-27T14:14:08ZOphestracat@gensokyo.uk2025-12-27T13:52:12Zurn:sha1:e42ea32dbe9283d14a7c0e8746059bc5ef97f6cd
Turns out this did not work because in the vm test harness, virtualisation.fileSystems completely and silently overrides fileSystems, causing its contents to not even be evaluated anymore. This is not documented as far as I can tell, and is not obvious by any stretch of the imagination. The current hack is cargo culted from nix-community/impermanence and hopefully lasts until this project fully replaces nix.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/sharefs: implement shared filesystem2025-12-24T20:13:02ZOphestracat@gensokyo.uk2025-12-24T19:05:54Zurn:sha1:7bfbd5981025282007f09225e22e895523d7a7bf
This is for passing files between applications, similar to android /sdcard.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/outcome: expose pipewire via pipewire-pulse2025-12-15T03:57:06ZOphestracat@gensokyo.uk2025-12-15T03:43:58Zurn:sha1:54610aaddcc01e335c34087bc0c3bc1de6d23cf8
This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst.
Closes #29.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: update flake lock2025-12-11T23:39:55ZOphestracat@gensokyo.uk2025-12-11T23:39:55Zurn:sha1:ebc67bb8ada03750eee60ab58c945b4745f22af1
NixOS 25.11 introduces a crash in cage and an intermittent crash in foot.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: include PipeWire op and enforce PulseAudio check2025-12-07T23:53:04ZOphestracat@gensokyo.uk2025-12-07T23:03:50Zurn:sha1:87781c765844409226804157546753b84ef3c6b4
This fully replaces PulseAudio with PipeWire and enforces the PulseAudio check and error message. The pipewire-pulse daemon is handled in the NixOS module.
Closes #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: check for insecure PulseAudio enablement2025-12-07T18:13:02ZOphestracat@gensokyo.uk2025-12-07T17:53:07Zurn:sha1:422efcf258eb49ecd0d4de8e53adae656696ea56
This is currently still a noop, but required for #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst/container: optional runtime and tmpdir sharing2025-10-18T19:11:38ZOphestracat@gensokyo.uk2025-10-18T18:53:20Zurn:sha1:699c19e972a3cbcc714403aedffcb5ff74386cfc
Sharing and persisting these directories do not always make sense. Make it optional here.
Closes #16.
Signed-off-by: Ophestra <cat@gensokyo.uk>