aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2024-12-22nix: include fortify show outputOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-22fortify: show short mode omit filesystemsOphestra
Filesystem information can be quite noisy in permissive defaults. Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-22app: mount /dev/kvm in permissive defaultsOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-22fortify: sort by time of startOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-22fortify: sort ps outputOphestra
This ensures consistency between runs. Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-22nix: test dbus via notify-sendOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-22fortify: print short instance id in non-json short modeOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-22release: 0.2.6Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-22nix: check state store contentsOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21fortify: serialise ps with string as keyOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21fortify: zsh complete show instance listOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21fortify: clean up ps formatting codeOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21fortify: move json indent callOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21fortify: move show formatting out of mainOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21app: rename /fortify to /.fortifyOphestra
Also removed the inner share tmpfs mount. Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21nix: clear terminal prior to screenshotOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21nix: test pulseaudio pass throughOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21app: do not fail on missing cookieOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21nix: filter nix files from srcOphestra
This prevents constant rebuilds when debugging integration tests. Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21nix: test dbus proxyOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21nix: background go testOphestra
Go test takes significant time. Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21nix: remove workspace switchingOphestra
Switching workspaces does not test anything and introduces unnecessary wait time. Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-21fortify: config/state pretty-print subcommandOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-20system: implement Enablements String methodOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-20state: store join utilOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2024-12-20release: 0.2.5Ophestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-20migrate to git.gensokyo.uk/security/fortifyOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-19state: expose aids and use instance id as keyOphestra Umiker
Fortify state store instances was specific to aids due to outdated design decisions carried over from the ego rewrite. That no longer makes sense in the current application, so the interface now enables a single store object to manage all transient state. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-19fst: implement app id parserOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-19state: rename simple store implementationOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-19fortify: remove systemd checkOphestra Umiker
This is no longer necessary as fortify no longer integrates with external user switchers. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-19acl: use test-managed tmpdirOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18release: 0.2.4Ophestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18workflows: cache nix storeOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18workflows: cache apt packagesOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18workflows: upload nixos test outputOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18workflows: build and upload test distributionOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18cmd/fshim: switch to setup pipeOphestra Umiker
The socket-based approach is no longer necessary as fsu allows extra files and sudo compatibility is no longer relevant. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18cmd/fshim: switch to generic setup funcOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18proc: setup payload sendOphestra Umiker
Generic setup payload encoder adapted from fshim. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18cmd/finit: switch to generic receive funcOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18proc: setup payload receiveOphestra Umiker
Generic implementation of setup payload receiver adapted from finit. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18fst: rename from fipcOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18nix: increase cpu countOphestra Umiker
This improves performance, especially when kvm is inaccessible. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18nix: collect fortify ps outputOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18fipc: export config structOphestra Umiker
Also store full config as part of state. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-18nix: check acl rollbackOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-17nix: run Go tests in nixosOphestra Umiker
Nix build environment does not support ACLs in any filesystem. This allows acl tests to run. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-17release: 0.2.3Ophestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
2024-12-17dist: generate distribution tarballOphestra Umiker
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
generated by cgit v1.3.1 (git 2.54.0) at 2026-09-02 20:58:13 +0000