aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2026-04-13internal/rosa: wrapper around git helperOphestra
This results in much cleaner call site for the majority of use cases. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa: assume file source is xz-compressedOphestra
XZ happens to be the only widely-used format that is awful to deal with, everything else is natively supported. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa/mesa: libdrm artifactOphestra
Required by mesa. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa/python: pyyaml artifactOphestra
Mesa unfortunately requires this horrible format. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa/python: mako artifactOphestra
This unfortunately pulls in platform-specific package. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13cmd/mbf: checksum commandOphestra
This computes and encodes sha384 checksum of data streamed from standard input. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa: wrap per-arch valuesOphestra
This is cleaner syntax in some specific cases. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa/nss: buildcatrust 0.4.0 to 0.5.1Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa/python: pytest 9.0.2 to 9.0.3Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa/python: pygments 2.19.2 to 2.20.0Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa/python: use predictable URLsOphestra
This is much cleaner and more maintainable than specifying URL prefix manually. This change also populates Anitya project identifiers. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-13internal/rosa/python: url pip wheel helperOphestra
This enables a cleaner higher-level helper. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-12internal/rosa/llvm: libclc artifactOphestra
This is built independently of llvm build system to avoid having to build llvm again. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-12internal/rosa/glslang: glslang artifactOphestra
Required by mesa. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-12internal/rosa/glslang: spirv-tools artifactOphestra
Required by glslang. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-12internal/rosa/glslang: spirv-headers artifactOphestra
Required by spirv-tools. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-12internal/rosa/mesa: libglvnd artifactOphestra
Required by mesa. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-12internal/rosa/dbus: xdg-dbus-proxy artifactOphestra
This is currently a hakurei runtime dependency, but will eventually be removed. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-12internal/rosa/gnu: gcc set with-multilib-list as neededOphestra
This breaks riscv64. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-12internal/rosa/gnu: gmp explicit CCOphestra
The configure script is hard coded to use gcc without fallback on riscv64. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-11nix: add sharefs supplementary groupOphestra
This works around vfs inode file attribute race. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-11internal/rosa/hakurei: 0.3.7 to 0.4.0Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-11release: 0.4.0v0.4.0Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/landlock: relocate from package containerOphestra
This is not possible to use directly, so remove it from the public API. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10container: unexport PR_SET_NO_NEW_PRIVS wrapperOphestra
This is subtle to use correctly. It also does not make sense as part of the container API. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10check: use encoding interfacesOphestra
This turned out not to require specific treatment, so the shared interfaces are cleaner. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10hst: remove enablement json adapterOphestra
The go116 behaviour of built-in new function makes this cleaner. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10hst: optionally reject insecure optionsOphestra
This prevents inadvertent use of insecure compatibility features. Closes #30. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/rosa/python: 3.14.3 to 3.14.4Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/rosa/openssl: 3.6.1 to 3.6.2Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/rosa/libcap: 2.77 to 2.78Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/rosa/tamago: 1.26.1 to 1.26.2Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/rosa/go: 1.26.1 to 1.26.2Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/rosa/llvm: remove unused fieldOphestra
This change also renames confusingly named flags field and corrects its doc comment. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/rosa/llvm: use latest version on arm64Ophestra
This also removes arch-specific patches because they were not useful. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/rosa/llvm: enable cross compilationOphestra
This now passes the test suite. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-10internal/rosa/llvm: increase stack sizeOphestra
Some aarch64 regression tests fail intermittently on the default size. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-09internal/rosa/llvm: 22.1.2 to 22.1.3Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-08internal/kobject: process uevent messageOphestra
This deals with environment variables generally present in every message. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-08cmd/sharefs: group-accessible permission bitsOphestra
This works around the race in vfs via supplementary group. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-08cmd/sharefs: reproduce vfs inode file attribute raceOphestra
This happens in the vfs permissions check only and stale data appears to never reach userspace. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-07cmd/mbf: optional host abstractOphestra
This works around kernels with Landlock LSM disabled. Does not affect cure outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-07internal/rosa/go: enable riscv64 bootstrap pathOphestra
This is quite expensive, but no other option, unfortunately. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-07container: do not set static deadlineOphestra
This usually ends up in the buffer, or completes well before the deadline, however this can still timeout on a very slow system. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-07internal/params: relocate from package containerOphestra
This does not make sense as part of the public API, so make it internal. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-07container: remove setup pipe helperOphestra
The API forces use of finalizer to close the read end of the setup pipe, which is no longer considered acceptable. Exporting this as part of package container also imposes unnecessary maintenance burden. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-07all: optionally forbid degrading in testsOphestra
This enables transparently degradable tests to be forced on in environments known to support them. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-07container: transparently degrade landlock in testsOphestra
Explicitly requiring landlock in tests will be supported in a future change. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-07ldd: remove timeoutOphestra
The program generally never blocks, and it is more flexible to leave it up to the caller to set a timeout. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-04-07internal/pkg: transparently degrade landlock in testsOphestra
This does not test package container, so should transparently cope with Landlock LSM being unavailable. Signed-off-by: Ophestra <cat@gensokyo.uk>