aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2025-02-28test/sandbox: check mount outcomeOphestra
Do this at the beginning of the test for early failure. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-28test/sandbox: assert mntent jsonOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-28test/sandbox: wrap libc getmntentOphestra
For checking mounts outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-28nix: increase nixfmt max widthOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26app: print comp values earlyOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26cmd/fpkg: call app in-processOphestra
Wrapping fortify is slow, painful and error-prone. Start apps in-process instead. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26cmd/fsu: allow switch from fpkgOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26fortify: move internal commands upOphestra
This improves readability. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26app: handle RunState errorsOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26fortify: configure seccomp logger earlyOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26app: define errors in a separate fileOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26test: verify fsu ppid checkOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26test: remove sway process checkOphestra
This eliminates the race where systemd restarts sway too quick. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26cmd/fpkg/test: nixos test fpkg install/startOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26cmd/fpkg/build: expose nixos configurationOphestra
This should be used sparingly as the NixOS closure is in the bootstrap store which compresses rather poorly. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26nix: wrap fpkgOphestra
This is usable on nixos now due to the static build. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26cmd/fpkg: use fortify path from internalOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26internal: store fortify path in internalOphestra
This now makes more sense due to the changes in build system. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-25cmd/fpkg/build: run final build step in nixOphestra
This used to be a script that had to be run outside of nix because the sandbox disallows access to nix store state. Turns out closureInfo is the proper way to do that. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-25nix: interrupt via ttyOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-25dbus: set process group idOphestra
This stops signals sent by the TTY driver from propagating to the xdg-dbus-proxy process. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-25nix: include fsu sources in dist buildOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-25nix: verify silent signal exitOphestra
This catches errors in the cleanup process initiated by a signal. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-25system/acl: do not fail gone revert targetOphestra
A removed file effectively already has its ACLs stripped, so failing this makes no sense. Still print a message to warn about it. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-25system/dbus: filter context cancellation errorOphestra
This message would otherwise show up when alternative exit path is taken due to a signal. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-25fortify: improve handling of RevertErrOphestra
All this error wrapping is getting a bit ridiculous and I might want to do something about that somewhere down the line. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-24nix: exclude files ending in ".py"Ophestra
This reduces rebuilds when debugging nixos tests. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23cmd/fpkg: integrate command handlerOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23cmd/fpkg/build: prepend extra nix flagsOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23release: 0.2.18Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23nix: clean up directory structureOphestra
Tests for fpkg is going to be in ./cmd/fpkg, so this central tests directory is no longer necessary. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23workflows: separate nixos tests from flake checkOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23nix: separate fsu from packageOphestra
This appears to be the only way to build them with different configuration. This enables static linking in the main package. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23ldd: handle behaviour on static executableOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23ldd: pass absolute path to bwrapOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23fortify: handle errors via MustParseOphestra
The errSuccess behaviour is kept for beforeExit. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23command: filter parse errorsOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23fortify: keep external files aliveOphestra
This should eliminate sporadic failures, like the known double close in "seccomp". Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23release: 0.2.17Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23fortify: test help messageOphestra
This helps catch regressions in "command". Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23fortify: integrate command handlerOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23command/flag: implement repeatable flagOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23command/flag: implement integer flagOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23command: hide internal commandsOphestra
This marks commands as internal via a magic usage string. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23command: expose print helpOphestra
This is useful for custom help commands. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23command: root early handler func special caseOphestra
This allows for early initialisation with access to flags on the root node. This can be useful for configuring global state used by subcommands. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23command: expose command with direct handlingOphestra
This exposes flag set on commands with direct handling. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-22command: implement builder and parserOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-22command: implement help builderOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-22command: implement node structureOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>