aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app/instance
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-06-25 03:59:52 +0900
committerOphestra <cat@gensokyo.uk>2025-06-25 04:57:41 +0900
commit87e008d56de974947ebb99c2cc40b25d3c2cf43e (patch)
tree31791911e5226d6ec04e3fac7d91b0bf53e63aa5 /internal/app/instance
parent399207321265307bb15f37d867f9370cd51c82a8 (diff)
treewide: rename to hakurei
Fortify makes little sense for a container tool. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/instance')
-rw-r--r--internal/app/instance/common/container.go16
-rw-r--r--internal/app/instance/errors.go4
-rw-r--r--internal/app/instance/new.go6
-rw-r--r--internal/app/instance/shim.go2
4 files changed, 14 insertions, 14 deletions
diff --git a/internal/app/instance/common/container.go b/internal/app/instance/common/container.go
index cb3eb596..567a8aa7 100644
--- a/internal/app/instance/common/container.go
+++ b/internal/app/instance/common/container.go
@@ -8,20 +8,20 @@ import (
"path"
"syscall"
- "git.gensokyo.uk/security/fortify/dbus"
- "git.gensokyo.uk/security/fortify/fst"
- "git.gensokyo.uk/security/fortify/internal/sys"
- "git.gensokyo.uk/security/fortify/sandbox"
- "git.gensokyo.uk/security/fortify/sandbox/seccomp"
+ "git.gensokyo.uk/security/hakurei/dbus"
+ "git.gensokyo.uk/security/hakurei/hst"
+ "git.gensokyo.uk/security/hakurei/internal/sys"
+ "git.gensokyo.uk/security/hakurei/sandbox"
+ "git.gensokyo.uk/security/hakurei/sandbox/seccomp"
)
// in practice there should be less than 30 entries added by the runtime;
// allocating slightly more as a margin for future expansion
const preallocateOpsCount = 1 << 5
-// NewContainer initialises [sandbox.Params] via [fst.ContainerConfig].
+// NewContainer initialises [sandbox.Params] via [hst.ContainerConfig].
// Note that remaining container setup must be queued by the caller.
-func NewContainer(s *fst.ContainerConfig, os sys.State, uid, gid *int) (*sandbox.Params, map[string]string, error) {
+func NewContainer(s *hst.ContainerConfig, os sys.State, uid, gid *int) (*sandbox.Params, map[string]string, error) {
if s == nil {
return nil, nil, syscall.EBADE
}
@@ -67,7 +67,7 @@ func NewContainer(s *fst.ContainerConfig, os sys.State, uid, gid *int) (*sandbox
container.
Proc("/proc").
- Tmpfs(fst.Tmp, 1<<12, 0755)
+ Tmpfs(hst.Tmp, 1<<12, 0755)
if !s.Device {
container.Dev("/dev").Mqueue("/dev/mqueue")
diff --git a/internal/app/instance/errors.go b/internal/app/instance/errors.go
index b3331e3d..51d9cdbf 100644
--- a/internal/app/instance/errors.go
+++ b/internal/app/instance/errors.go
@@ -3,8 +3,8 @@ package instance
import (
"syscall"
- "git.gensokyo.uk/security/fortify/internal/app"
- "git.gensokyo.uk/security/fortify/internal/app/internal/setuid"
+ "git.gensokyo.uk/security/hakurei/internal/app"
+ "git.gensokyo.uk/security/hakurei/internal/app/internal/setuid"
)
func PrintRunStateErr(whence int, rs *app.RunState, runErr error) (code int) {
diff --git a/internal/app/instance/new.go b/internal/app/instance/new.go
index cb5e8b27..d1a6230b 100644
--- a/internal/app/instance/new.go
+++ b/internal/app/instance/new.go
@@ -6,9 +6,9 @@ import (
"log"
"syscall"
- "git.gensokyo.uk/security/fortify/internal/app"
- "git.gensokyo.uk/security/fortify/internal/app/internal/setuid"
- "git.gensokyo.uk/security/fortify/internal/sys"
+ "git.gensokyo.uk/security/hakurei/internal/app"
+ "git.gensokyo.uk/security/hakurei/internal/app/internal/setuid"
+ "git.gensokyo.uk/security/hakurei/internal/sys"
)
const (
diff --git a/internal/app/instance/shim.go b/internal/app/instance/shim.go
index bc497ad3..8147b7c5 100644
--- a/internal/app/instance/shim.go
+++ b/internal/app/instance/shim.go
@@ -1,6 +1,6 @@
package instance
-import "git.gensokyo.uk/security/fortify/internal/app/internal/setuid"
+import "git.gensokyo.uk/security/hakurei/internal/app/internal/setuid"
// ShimMain is the main function of the shim process and runs as the unconstrained target user.
func ShimMain() { setuid.ShimMain() }