hakurei/test/sandbox/case, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/test/sandbox/case?h=develop2026-06-07T05:10:06Znix: work around systemd nondeterminism2026-06-07T05:10:06ZOphestracat@gensokyo.uk2026-06-07T05:10:06Zurn:sha1:b18ecf58326f9048afca885e2bf56d516578b1e4
NixOS switched to systemd initramfs by default.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: update flake lock2026-06-06T04:14:09ZOphestracat@gensokyo.uk2026-06-05T00:53:15Zurn:sha1:7eafc7b1e4b895d1986280e192aa8d493fff8d96
Was unfortunately not able to implement vm test suite before this release. Hopefully the last nixos update we have to follow.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/initoverlay: configure via fsconfig2026-05-03T17:29:56ZOphestracat@gensokyo.uk2026-05-03T17:07:52Zurn:sha1:da11b26ec16ef9ed61045fdbb03c4090286bfeba
This works around the page size limit at the cost of negligible performance regressions.
Closes #34.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/outcome: expose pipewire via pipewire-pulse2025-12-15T03:57:06ZOphestracat@gensokyo.uk2025-12-15T03:43:58Zurn:sha1:54610aaddcc01e335c34087bc0c3bc1de6d23cf8
This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst.
Closes #29.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: update flake lock2025-12-11T23:39:55ZOphestracat@gensokyo.uk2025-12-11T23:39:55Zurn:sha1:ebc67bb8ada03750eee60ab58c945b4745f22af1
NixOS 25.11 introduces a crash in cage and an intermittent crash in foot.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: include PipeWire op and enforce PulseAudio check2025-12-07T23:53:04ZOphestracat@gensokyo.uk2025-12-07T23:03:50Zurn:sha1:87781c765844409226804157546753b84ef3c6b4
This fully replaces PulseAudio with PipeWire and enforces the PulseAudio check and error message. The pipewire-pulse daemon is handled in the NixOS module.
Closes #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst/grp_pwd: specify new uid format2025-11-03T23:24:41ZOphestracat@gensokyo.uk2025-11-03T23:00:37Zurn:sha1:cb9ebf0e1541c0e49380cda6d4c2d619a0e9933f
This leaves slots available for additional uid ranges in Rosa OS.
This breaks all existing installations! Users are required to fix ownership manually.
Closes #18.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst/container: optional runtime and tmpdir sharing2025-10-18T19:11:38ZOphestracat@gensokyo.uk2025-10-18T18:53:20Zurn:sha1:699c19e972a3cbcc714403aedffcb5ff74386cfc
Sharing and persisting these directories do not always make sense. Make it optional here.
Closes #16.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/app/outcome: apply configured filesystems late2025-10-18T16:41:52ZOphestracat@gensokyo.uk2025-10-18T16:41:52Zurn:sha1:e47aebb7a0de9b3b9f0345db68ff0119e6cc12c0
This enables configured filesystems to cover system mount points.
Closes #8.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/app/spruntime: emulate pam_systemd type2025-10-17T19:33:04ZOphestracat@gensokyo.uk2025-10-17T19:25:40Zurn:sha1:d4284c109d593fa1413a162734b3db5134c66d19
This sets XDG_SESSION_TYPE to the corresponding values specified in pam_systemd(8) according to enablements.
Signed-off-by: Ophestra <cat@gensokyo.uk>