hakurei/test, branch v0.3.6low-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/test?h=v0.3.62026-02-16T09:22:29Znix: mount tmpfs on /tmp2026-02-16T09:22:29ZOphestracat@gensokyo.uk2026-02-16T09:22:29Zurn:sha1:1df3bcc3b96c5e5bf0f5e4d337cd017569415233
This hopefully eliminates spurious test failures caused by /tmp running out of space.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/sharefs: implement shared filesystem2025-12-24T20:13:02ZOphestracat@gensokyo.uk2025-12-24T19:05:54Zurn:sha1:7bfbd5981025282007f09225e22e895523d7a7bf
This is for passing files between applications, similar to android /sdcard.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test: check shim private dir cleanup2025-12-15T11:30:19ZOphestracat@gensokyo.uk2025-12-15T11:14:39Zurn:sha1:767f1844d222bdd5afc99868df7b5b42e7e2fad4
This asserts that no shim private dir was left behind after all containers terminate.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/outcome: expose pipewire via pipewire-pulse2025-12-15T03:57:06ZOphestracat@gensokyo.uk2025-12-15T03:43:58Zurn:sha1:54610aaddcc01e335c34087bc0c3bc1de6d23cf8
This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst.
Closes #29.
Signed-off-by: Ophestra <cat@gensokyo.uk>
nix: update flake lock2025-12-11T23:39:55ZOphestracat@gensokyo.uk2025-12-11T23:39:55Zurn:sha1:ebc67bb8ada03750eee60ab58c945b4745f22af1
NixOS 25.11 introduces a crash in cage and an intermittent crash in foot.
Signed-off-by: Ophestra <cat@gensokyo.uk>
container/initdaemon: copy wstatus from wait4 loop2025-12-08T13:58:42ZOphestracat@gensokyo.uk2025-12-08T13:58:42Zurn:sha1:e9fb1d7be540794ebe5027a08fbf97df189c6787
Due to the special nature of the init process, direct use of wait outside the wait4 loop is racy. This change copies the wstatus from wait4 loop state instead.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/hakurei: exec instead of fork/exec from shell2025-12-08T13:29:41ZOphestracat@gensokyo.uk2025-12-08T13:29:41Zurn:sha1:d5fb179012e36436a81761502948c91d44d21cc3
There is no reason to keep the shell process around.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/interactive: add app with bad daemon2025-12-08T13:12:07ZOphestracat@gensokyo.uk2025-12-08T13:12:07Zurn:sha1:2786611b88188702c8bcd0cd36ab5c331d36204f
This is useful for testing daemon error handling behaviour.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: include PipeWire op and enforce PulseAudio check2025-12-07T23:53:04ZOphestracat@gensokyo.uk2025-12-07T23:03:50Zurn:sha1:87781c765844409226804157546753b84ef3c6b4
This fully replaces PulseAudio with PipeWire and enforces the PulseAudio check and error message. The pipewire-pulse daemon is handled in the NixOS module.
Closes #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>
hst: check for insecure PulseAudio enablement2025-12-07T18:13:02ZOphestracat@gensokyo.uk2025-12-07T17:53:07Zurn:sha1:422efcf258eb49ecd0d4de8e53adae656696ea56
This is currently still a noop, but required for #26.
Signed-off-by: Ophestra <cat@gensokyo.uk>