hakurei/test/sandbox/tool, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/test/sandbox/tool?h=develop2026-10-06T10:41:06Ztest/sandbox: migrate tests2026-10-06T10:41:06ZOphestracat@gensokyo.uk2026-10-03T16:05:10Zurn:sha1:a7383510fb05abc98b992240cb76ad4b6c598956
This significantly improves performance, removing overhead of nix,
python, and virtualisation. Running this in an unprivileged container
required patching the kernel, but since special runner setup was already
needed, that was an acceptable tradeoff.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/internal/mountinfo: move from sandbox2026-10-03T09:15:20ZOphestracat@gensokyo.uk2026-10-03T08:49:27Zurn:sha1:aa41002e8078a3ab00896cbd403e573c6dd817c2
This also improves its API.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test: move package sandbox internal2025-11-12T14:03:22ZOphestracat@gensokyo.uk2025-11-12T14:03:22Zurn:sha1:b5630f6883c874d458d9ae3c666cfb7ae5e3121d
This should never be used outside vm tests.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/init: close setup pipe early2025-11-10T22:31:58ZOphestracat@gensokyo.uk2025-11-10T22:18:43Zurn:sha1:9dec9dbc4bbd09a59cf35f4000d26794b42edcfc
This prevents leaking the setup pipe.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox/tool: marker pathname from flag2025-09-14T06:57:41ZOphestracat@gensokyo.uk2025-09-14T06:57:41Zurn:sha1:56aad8dc112f45ec26df72bdbbd959c5e8db5bec
Since this is going to be placed in a shared directory, it needs to be unique to the identity. Instead of trying to figure out identity from mountinfo, just have the test script pass hardcoded values.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox: verify seccomp on all test cases2025-07-08T19:21:35ZOphestracat@gensokyo.uk2025-07-08T18:47:16Zurn:sha1:e574042d765f135814c5afabaf24cb7109fab175
This change also makes seccomp hashes cross-platform.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox: guard on testtool tag2025-07-07T11:11:29ZOphestracat@gensokyo.uk2025-07-07T11:11:29Zurn:sha1:2b44493e8a255b40a9809208f5c751ca7c539027
This tool should not show up when building hakurei normally.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: migrate to hakurei.app2025-07-02T18:30:39ZOphestracat@gensokyo.uk2025-07-02T18:30:39Zurn:sha1:d2f9a9b83b1c43304081493eb2305309be1dd504
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: rename to hakurei2025-06-24T19:57:41ZOphestracat@gensokyo.uk2025-06-24T18:59:52Zurn:sha1:87e008d56de974947ebb99c2cc40b25d3c2cf43e
Fortify makes little sense for a container tool.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test: move test program to sandbox directory2025-03-30T12:09:16ZOphestracat@gensokyo.uk2025-03-30T12:09:16Zurn:sha1:89a05909a4fb393864a8aa752f6979dd9aaa2898
This prepares for the separation of app and sandbox tests.
Signed-off-by: Ophestra <cat@gensokyo.uk>