| Age | Commit message (Collapse) | Author |
|---|
|
This overlaps with net namespace, so can be skipped without degrading security.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
The alpine linux riscv64 kernel does not enable Landlock LSM, and kernel compilation is not yet feasible.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This has no effect, but is nice to have.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This had not yet passed all test suites because emulator is prohibitively slow.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This enables rejection of non-coldboot synthetic events.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This is much more robust than a shell script.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This breaks on shells that do not evaluate pathnames.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This enables the writable root overlay use case.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This no longer relies on the hermetic build system to clean up.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
These are baked in, so make them configurable for the build.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This is not considered an error, if the process finishes while the signal is being delivered.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Eliminates the xz dependency.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Eliminates the xz dependency.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Eliminates the xz dependency.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Eliminates the xz dependency.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Eliminates the xz dependency.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Eliminates the xz dependency.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Eliminates the xz dependency. This also switches to meson to avoid pulling in autotools.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This eliminates xz dependency.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Hardware on arm64 is quite messy, this miscompiles.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
The test suite is somehow happy on amd64 but fails on arm64.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
The .git directory is destroyed anyway, so no point fetching more than the bare minimum.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This enables accurate benchmarking of the toolchain abstraction.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This is quite error-prone and causes cache inconsistency similar to the store inconsistency seen on nix when a similar condition happens. Keep this behind a flag in case it is ever beneficial.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This is cleaner than setting it globally, and is impossible to race.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This is cleaner for extending the API.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
These timeouts are no longer useful, and causes spurious test failures under load.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Will be gradually replaced with a native implementation.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
GNU readline breaks without this.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Nice to have library for command line programs.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Incredibly ugly and expensive package, but unfortunately required by some packages.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Required by GnuTLS.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This improves behaviour of some programs.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This improves behaviour of some programs.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Required by gnutls.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This is generally correct, and is a lot cleaner to call.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Removed after all packages upgrade for nettle 4.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Optional dependency of p11-kit.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Another package distributed in xz only. This is fetched from the git remote directly to avoid XZ Utils.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
There is generally no reason to disable this, so it was not made optional.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This unfortunately pulls automake, libtool and their dependencies into stage2.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This package now unfortunately switched to xz as well.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
