aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2025-03-14ldd: run in native sandboxOphestra
2025-03-14sandbox: write uid/gid map as initOphestra
2025-03-14sandbox: invert seccomp ruleset defaultsOphestra
2025-03-14sandbox: mount container /devOphestra
2025-03-14sandbox/mount: pass custom tmpfs nameOphestra
2025-03-14sandbox: pass params to setup opsOphestra
2025-03-14sandbox/mount: fix source flag pathOphestra
2025-03-14sandbox: separate tmpfs function from opOphestra
2025-03-14sandbox: separate bind mount function from opOphestra
2025-03-13internal/app: rename init to init0Ophestra
2025-03-13sandbox: native container toolingOphestra
2025-03-13test: run go test under regular userOphestra
2025-03-13test: print output of failed testOphestra
2025-03-13internal: pull EINTR loop from stdlibOphestra
2025-03-13sandbox: read overflow idsOphestra
2025-03-13test/sandbox: bypass fieldsOphestra
2025-03-12ldd: handle musl static behaviourOphestra
2025-03-12helper/seccomp: improve error handlingOphestra
2025-03-12helper/seccomp: seccomp_load on negative fdOphestra
2025-03-12test/sandbox/mount: work around nondeterminismOphestra
2025-03-10nix: update flake lockOphestra
2025-03-09helper/proc: expose setup fileOphestra
2025-03-07internal/prctl: rename prctl wrappersOphestra
2025-03-04test/sandbox: check seccomp outcomeOphestra
2025-03-03test/sandbox: check fs outcomeOphestra
2025-03-02test/sandbox: assert filesystem jsonOphestra
2025-03-02test/sandbox: compare filesystem hierarchyOphestra
2025-03-02test: rename session message identifierOphestra
2025-03-02test/sandbox/assert: wrap printfOphestra
2025-02-28test/sandbox: check mount outcomeOphestra
2025-02-28test/sandbox: assert mntent jsonOphestra
2025-02-28test/sandbox: wrap libc getmntentOphestra
2025-02-28nix: increase nixfmt max widthOphestra
2025-02-26app: print comp values earlyOphestra
2025-02-26cmd/fpkg: call app in-processOphestra
2025-02-26cmd/fsu: allow switch from fpkgOphestra
2025-02-26fortify: move internal commands upOphestra
2025-02-26app: handle RunState errorsOphestra
2025-02-26fortify: configure seccomp logger earlyOphestra
2025-02-26app: define errors in a separate fileOphestra
2025-02-26test: verify fsu ppid checkOphestra
2025-02-26test: remove sway process checkOphestra
2025-02-26cmd/fpkg/test: nixos test fpkg install/startOphestra
2025-02-26cmd/fpkg/build: expose nixos configurationOphestra
2025-02-26nix: wrap fpkgOphestra
2025-02-26cmd/fpkg: use fortify path from internalOphestra
2025-02-26internal: store fortify path in internalOphestra
2025-02-25cmd/fpkg/build: run final build step in nixOphestra
2025-02-25nix: interrupt via ttyOphestra
2025-02-25dbus: set process group idOphestra