hakurei/test/sandbox, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/test/sandbox?h=develop2026-07-07T09:56:27Ztest: move nix files2026-07-07T09:56:27ZOphestracat@gensokyo.uk2026-07-07T09:32:56Zurn:sha1:6d55ee536e902d059380f79e870d06547627cc7c
These are too much clutter. Move them to test directory until the test suite replacement is upstreamed.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: work around systemd nondeterminism2026-06-07T05:10:06ZOphestracat@gensokyo.uk2026-06-07T05:10:06Zurn:sha1:b18ecf58326f9048afca885e2bf56d516578b1e4
NixOS switched to systemd initramfs by default.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: update flake lock2026-06-06T04:14:09ZOphestracat@gensokyo.uk2026-06-05T00:53:15Zurn:sha1:7eafc7b1e4b895d1986280e192aa8d493fff8d96
Was unfortunately not able to implement vm test suite before this release. Hopefully the last nixos update we have to follow.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/initoverlay: configure via fsconfig2026-05-03T17:29:56ZOphestracat@gensokyo.uk2026-05-03T17:07:52Zurn:sha1:da11b26ec16ef9ed61045fdbb03c4090286bfeba
This works around the page size limit at the cost of negligible performance regressions.
Closes #34.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: remove all explicit timeouts2026-04-23T04:07:22ZOphestracat@gensokyo.uk2026-04-23T04:07:22Zurn:sha1:725ae7d64d56727364da16d9e016162dd80016d7
These were useful during development because timing out is often the only indication of failure due to the terrible design of nixos vm test harness. This has become a nuisance however especially when the system is under load, so remove explicit values and fall back to the ludicrously high default.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/hakurei: rename app to run2026-03-28T07:48:26ZOphestracat@gensokyo.uk2026-03-28T07:43:02Zurn:sha1:b1ea3b4acf85365fd76c890f8b8852b5f95be5c1
The run command was a legacy holdover from very early days and is only useful for testing and demonstration these days. This change also renames it to exec.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test: check shim private dir cleanup2025-12-15T11:30:19ZOphestracat@gensokyo.uk2025-12-15T11:14:39Zurn:sha1:767f1844d222bdd5afc99868df7b5b42e7e2fad4
This asserts that no shim private dir was left behind after all containers terminate.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/outcome: expose pipewire via pipewire-pulse2025-12-15T03:57:06ZOphestracat@gensokyo.uk2025-12-15T03:43:58Zurn:sha1:54610aaddcc01e335c34087bc0c3bc1de6d23cf8
This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst.
Closes #29.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: update flake lock2025-12-11T23:39:55ZOphestracat@gensokyo.uk2025-12-11T23:39:55Zurn:sha1:ebc67bb8ada03750eee60ab58c945b4745f22af1
NixOS 25.11 introduces a crash in cage and an intermittent crash in foot.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: include PipeWire op and enforce PulseAudio check2025-12-07T23:53:04ZOphestracat@gensokyo.uk2025-12-07T23:03:50Zurn:sha1:87781c765844409226804157546753b84ef3c6b4
This fully replaces PulseAudio with PipeWire and enforces the PulseAudio check and error message. The pipewire-pulse daemon is handled in the NixOS module.
Closes #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>