aboutsummaryrefslogtreecommitdiffhomepage
path: root/package.nix
AgeCommit message (Collapse)Author
2025-11-12release: 0.3.1v0.3.1Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-11-06release: 0.3.0v0.3.0Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-10-21internal: clean up build stringsOphestra
These names are less ambiguous and should be understandable without reading the source code. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-09-28release: 0.2.2v0.2.2Ophestra
Unfortunately removal of internal/hlog brought about some changes that breaks API. This will likely be the last 0.2.x release. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-08-26release: 0.2.1v0.2.1Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-08-26release: 0.2.0v0.2.0Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-08-02release: 0.1.3v0.1.3Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-07-31cmd/hpkg: rename from planteretteOphestra
Planterette is now developed in another repository, so rename this proof of concept to avoid confusion. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-07-29release: 0.1.2v0.1.2Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-07-26nix: update flake lockOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-07-09release: 0.1.1v0.1.1Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-07-03release: 0.1.0v0.1.0Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-07-03treewide: migrate to hakurei.appOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-07-02hakurei: move container toplevelOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-06-25release: 0.0.2Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-06-25cmd/planterette: remove hsu special caseOphestra
Remove special case and invoke hakurei out of process. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-06-25release: 0.0.1Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-06-25treewide: rename to hakureiOphestra
Fortify makes little sense for a container tool. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-06-18dist: move comp to distOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-06-07nix: go generate in src derivationOphestra
This saves the generated files in the nix store and exposes them for use by external tools. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-05-26release: 0.4.1Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-04-13release: 0.4.0Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-04-01release: 0.3.3Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-30release: 0.3.2Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-26release: 0.3.1Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-26release: 0.3.0Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-25helper: remove bubblewrap wrapperOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-24test/sandbox: verify outcome via mountinfoOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-23nix: filter test from sourceOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-17nix: clean up flake outputsOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-14ldd: run in native sandboxOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-13sandbox: native container toolingOphestra
This should eventually replace bwrap. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-28nix: increase nixfmt max widthOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26cmd/fpkg: call app in-processOphestra
Wrapping fortify is slow, painful and error-prone. Start apps in-process instead. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26nix: wrap fpkgOphestra
This is usable on nixos now due to the static build. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-26internal: store fortify path in internalOphestra
This now makes more sense due to the changes in build system. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-24nix: exclude files ending in ".py"Ophestra
This reduces rebuilds when debugging nixos tests. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23release: 0.2.18Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23nix: separate fsu from packageOphestra
This appears to be the only way to build them with different configuration. This enables static linking in the main package. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-23release: 0.2.17Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-19release: 0.2.16Ophestra
Mostly refactor and cleanup, but also contains major fix to process lifecycle management. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-17release: 0.2.15Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-15release: 0.2.14Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-02-13release: 0.2.13Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-25release: 0.2.12Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-23release: 0.2.11Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-20proc/priv/shim: seccomp bpf filter via libseccompOphestra
Rulesets adapted from Flatpak for compatibility. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-18release: 0.2.10Ophestra
Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-18proc: remove duplicate compile-time fortify referenceOphestra
This is no longer needed since shim and init are now part of the main program. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-18proc/priv/init: merge init into main programOphestra
Signed-off-by: Ophestra <cat@gensokyo.uk>