diff options
| -rw-r--r-- | .github/workflows/README (renamed from .github/README) | 0 | ||||
| -rw-r--r-- | README.md | 41 | ||||
| -rw-r--r-- | options.md | 4 | ||||
| -rw-r--r-- | package.nix | 2 |
4 files changed, 19 insertions, 28 deletions
diff --git a/.github/README b/.github/workflows/README index 1b99aac5..1b99aac5 100644 --- a/.github/README +++ b/.github/workflows/README @@ -1,38 +1,29 @@ -Hakurei -======= +<p align="center"> + <a href="https://git.gensokyo.uk/security/hakurei"> + <picture> + <img src="https://basement.gensokyo.uk/images/yukari1.png" width="200px" alt="Yukari"> + </picture> + </a> +</p> -[](https://pkg.go.dev/git.gensokyo.uk/security/hakurei) -[](https://goreportcard.com/report/git.gensokyo.uk/security/hakurei) +<p align="center"> + <a href="https://pkg.go.dev/git.gensokyo.uk/security/hakurei"><img src="https://pkg.go.dev/badge/git.gensokyo.uk/security/hakurei.svg" alt="Go Reference" /></a> + <a href="https://goreportcard.com/report/git.gensokyo.uk/security/hakurei"><img src="https://goreportcard.com/badge/git.gensokyo.uk/security/hakurei" alt="Go Report Card" /></a> +</p> -Lets you run graphical applications as dedicated subordinate users in a container environment with a nice NixOS -module to configure target users and provide launch scripts and desktop files. +Hakurei is a tool for running sandboxed graphical applications as dedicated subordinate users on the Linux kernel. +It also implements [planterette (WIP)](cmd/planterette), a self-contained Android-like package manager with modern security features. -Why would you want this? +## NixOS Module usage -- It protects the desktop environment from applications. - -- It protects applications from each other. - -- It provides UID isolation on top of the standard application sandbox. - -If you have a flakes-enabled nix environment, you can try out the tool by running: - -```shell -nix run git+https://git.gensokyo.uk/security/hakurei -- help -``` - -## Module usage - -The NixOS module currently requires home-manager to configure subordinate users. - -Full module documentation can be found [here](options.md). +The NixOS module currently requires home-manager to configure subordinate users. Full module documentation can be found [here](options.md). To use the module, import it into your configuration with ```nix { inputs = { - nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.05"; + nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11"; hakurei = { url = "git+https://git.gensokyo.uk/security/hakurei"; @@ -35,7 +35,7 @@ package *Default:* -` <derivation hakurei-static-x86_64-unknown-linux-musl-0.4.1> ` +` <derivation hakurei-static-x86_64-unknown-linux-musl-0.0.2> ` @@ -916,7 +916,7 @@ package *Default:* -` <derivation hakurei-hsu-0.4.1> ` +` <derivation hakurei-hsu-0.0.2> ` diff --git a/package.nix b/package.nix index c22ad22a..bb645172 100644 --- a/package.nix +++ b/package.nix @@ -31,7 +31,7 @@ buildGoModule rec { pname = "hakurei"; - version = "0.0.1"; + version = "0.0.2"; srcFiltered = builtins.path { name = "${pname}-src"; |