hakurei/test/test.py, branch v0.4.2low-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/test/test.py?h=v0.4.22026-04-23T04:07:22Znix: remove all explicit timeouts2026-04-23T04:07:22ZOphestracat@gensokyo.uk2026-04-23T04:07:22Zurn:sha1:725ae7d64d56727364da16d9e016162dd80016d7
These were useful during development because timing out is often the only indication of failure due to the terrible design of nixos vm test harness. This has become a nuisance however especially when the system is under load, so remove explicit values and fall back to the ludicrously high default.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/hakurei: rename app to run2026-03-28T07:48:26ZOphestracat@gensokyo.uk2026-03-28T07:43:02Zurn:sha1:b1ea3b4acf85365fd76c890f8b8852b5f95be5c1
The run command was a legacy holdover from very early days and is only useful for testing and demonstration these days. This change also renames it to exec.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: expose scheduling priority2026-03-11T17:15:14ZOphestracat@gensokyo.uk2026-03-11T16:20:08Zurn:sha1:620062cca92b6241c15f96f86a9c6f0f7882ecca
This is useful when limits are configured to allow it.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container: expose priority and SCHED_OTHER policy2026-03-11T16:14:03ZOphestracat@gensokyo.uk2026-03-11T16:14:03Zurn:sha1:196b200d0f19c41730db439c62db9b39e424f21f
The more explicit API removes the arbitrary limit preventing use of SCHED_OTHER (referred to as SCHED_NORMAL in the kernel). This change also exposes priority value to set.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: expose scheduling policy2026-03-11T15:52:18ZOphestracat@gensokyo.uk2026-03-11T12:06:44Zurn:sha1:04e6bc3c5c99d6a99f17cfa5f69f34fe8941aee2
This is primarily useful for poorly written music players for now.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test: check shim private dir cleanup2025-12-15T11:30:19ZOphestracat@gensokyo.uk2025-12-15T11:14:39Zurn:sha1:767f1844d222bdd5afc99868df7b5b42e7e2fad4
This asserts that no shim private dir was left behind after all containers terminate.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/outcome: expose pipewire via pipewire-pulse2025-12-15T03:57:06ZOphestracat@gensokyo.uk2025-12-15T03:43:58Zurn:sha1:54610aaddcc01e335c34087bc0c3bc1de6d23cf8
This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst.
Closes #29.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/hakurei: exec instead of fork/exec from shell2025-12-08T13:29:41ZOphestracat@gensokyo.uk2025-12-08T13:29:41Zurn:sha1:d5fb179012e36436a81761502948c91d44d21cc3
There is no reason to keep the shell process around.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: include PipeWire op and enforce PulseAudio check2025-12-07T23:53:04ZOphestracat@gensokyo.uk2025-12-07T23:03:50Zurn:sha1:87781c765844409226804157546753b84ef3c6b4
This fully replaces PulseAudio with PipeWire and enforces the PulseAudio check and error message. The pipewire-pulse daemon is handled in the NixOS module.
Closes #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: check for insecure PulseAudio enablement2025-12-07T18:13:02ZOphestracat@gensokyo.uk2025-12-07T17:53:07Zurn:sha1:422efcf258eb49ecd0d4de8e53adae656696ea56
This is currently still a noop, but required for #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>