hakurei/sandbox/syscall.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/sandbox/syscall.go?h=develop2025-07-02T12:23:55Zhakurei: move container toplevel2025-07-02T12:23:55ZOphestracat@gensokyo.uk2025-07-02T12:23:55Zurn:sha1:a1d98823f8d17b49b432508d071b62ccd426f1ce
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: support privileged container2025-03-27T10:40:19ZOphestracat@gensokyo.uk2025-03-27T10:40:19Zurn:sha1:184e9db2b2ee960e7c7b2014aec72a28d9110bcc
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: wrap capset syscall2025-03-25T22:44:07ZOphestracat@gensokyo.uk2025-03-25T22:44:07Zurn:sha1:18644d90bef239100f3a89982f27b4b6792068d2
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox/init: drop capabilities2025-03-25T21:32:08ZOphestracat@gensokyo.uk2025-03-25T21:28:32Zurn:sha1:52fcc48ac141147324c3baac0e87ea49e8c2ca09
During development the syscall filter caused me to make an incorrect assumption about SysProcAttr.
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: run in native sandbox2025-03-24T16:52:49ZOphestracat@gensokyo.uk2025-03-24T16:52:49Zurn:sha1:5c4058d5ac7e7944973ca8216c258fc50c194e22
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: resolve inverted flags in op2025-03-21T03:58:38ZOphestracat@gensokyo.uk2025-03-21T03:58:38Zurn:sha1:a70daf22504f80c4e3dfbc2f34cf95db4dbb5879
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: move out of internal2025-03-16T17:55:36ZOphestracat@gensokyo.uk2025-03-16T17:55:36Zurn:sha1:24618ab9a1524e8b8986a9bf67667288e642fcf1
Signed-off-by: Ophestra <cat@gensokyo.uk>