diff options
Diffstat (limited to 'cmd/fpkg/bundle.go')
| -rw-r--r-- | cmd/fpkg/bundle.go | 90 |
1 files changed, 0 insertions, 90 deletions
diff --git a/cmd/fpkg/bundle.go b/cmd/fpkg/bundle.go deleted file mode 100644 index d1641168..00000000 --- a/cmd/fpkg/bundle.go +++ /dev/null @@ -1,90 +0,0 @@ -package main - -import ( - "encoding/json" - "log" - "os" - - "git.gensokyo.uk/security/fortify/dbus" - "git.gensokyo.uk/security/fortify/system" -) - -type bundleInfo struct { - Name string `json:"name"` - Version string `json:"version"` - - // passed through to [fst.Config] - ID string `json:"id"` - // passed through to [fst.Config] - AppID int `json:"app_id"` - // passed through to [fst.Config] - Groups []string `json:"groups,omitempty"` - // passed through to [fst.Config] - UserNS bool `json:"userns,omitempty"` - // passed through to [fst.Config] - Net bool `json:"net,omitempty"` - // passed through to [fst.Config] - Dev bool `json:"dev,omitempty"` - // passed through to [fst.Config] - NoNewSession bool `json:"no_new_session,omitempty"` - // passed through to [fst.Config] - MapRealUID bool `json:"map_real_uid,omitempty"` - // passed through to [fst.Config] - DirectWayland bool `json:"direct_wayland,omitempty"` - // passed through to [fst.Config] - SystemBus *dbus.Config `json:"system_bus,omitempty"` - // passed through to [fst.Config] - SessionBus *dbus.Config `json:"session_bus,omitempty"` - // passed through to [fst.Config] - Enablements system.Enablements `json:"enablements"` - - // passed through inverted to [bwrap.SyscallPolicy] - Devel bool `json:"devel,omitempty"` - // passed through to [bwrap.SyscallPolicy] - Multiarch bool `json:"multiarch,omitempty"` - // passed through to [bwrap.SyscallPolicy] - Bluetooth bool `json:"bluetooth,omitempty"` - - // allow gpu access within sandbox - GPU bool `json:"gpu"` - // store path to nixGL mesa wrappers - Mesa string `json:"mesa,omitempty"` - // store path to nixGL source - NixGL string `json:"nix_gl,omitempty"` - // store path to activate-and-exec script - Launcher string `json:"launcher"` - // store path to /run/current-system - CurrentSystem string `json:"current_system"` - // store path to home-manager activation package - ActivationPackage string `json:"activation_package"` -} - -func loadBundleInfo(name string, beforeFail func()) *bundleInfo { - bundle := new(bundleInfo) - if f, err := os.Open(name); err != nil { - beforeFail() - log.Fatalf("cannot open bundle: %v", err) - } else if err = json.NewDecoder(f).Decode(&bundle); err != nil { - beforeFail() - log.Fatalf("cannot parse bundle metadata: %v", err) - } else if err = f.Close(); err != nil { - log.Printf("cannot close bundle metadata: %v", err) - // not fatal - } - - if bundle.ID == "" { - beforeFail() - log.Fatal("application identifier must not be empty") - } - - return bundle -} - -func formatHostname(name string) string { - if h, err := os.Hostname(); err != nil { - log.Printf("cannot get hostname: %v", err) - return "fortify-" + name - } else { - return h + "-" + name - } -} |
