aboutsummaryrefslogtreecommitdiffhomepage
path: root/test/sandbox
AgeCommit message (Expand)Author
2026-07-07test: move nix filesOphestra
2026-06-07nix: work around systemd nondeterminismOphestra
2026-06-06nix: update flake lockOphestra
2026-05-04container/initoverlay: configure via fsconfigOphestra
2026-04-23nix: remove all explicit timeoutsOphestra
2026-03-28cmd/hakurei: rename app to runOphestra
2025-12-15test: check shim private dir cleanupOphestra
2025-12-15internal/outcome: expose pipewire via pipewire-pulseOphestra
2025-12-12nix: update flake lockOphestra
2025-12-08treewide: include PipeWire op and enforce PulseAudio checkOphestra
2025-11-12test: move package sandbox internalOphestra
2025-11-12container: set FD_CLOEXEC on all open filesOphestra
2025-11-11container/init: close setup pipe earlyOphestra
2025-11-04hst/grp_pwd: specify new uid formatOphestra
2025-10-19hst/container: optional runtime and tmpdir sharingOphestra
2025-10-19internal/app/outcome: apply configured filesystems lateOphestra
2025-10-18internal/app/spruntime: emulate pam_systemd typeOphestra
2025-10-14test/sandbox: ignore nondeterministic mount pointOphestra
2025-10-07hst/config: move container fields from toplevelOphestra
2025-10-05internal/app: check nscd socket for path hidingOphestra
2025-09-24test/sandbox: raise timeoutOphestra
2025-09-14test/sandbox: create marker in /var/tmpOphestra
2025-09-14test/sandbox/tool: marker pathname from flagOphestra
2025-09-14test/sandbox: check extra writable pathsOphestra
2025-09-14test/sandbox: bind /var/tmp writableOphestra
2025-09-14internal/app: mount /dev/shm earlyOphestra
2025-08-27app/seal: leave $DISPLAY as is on host abstractOphestra
2025-08-26container/initdev: mount tmpfs on shm for ro devOphestra
2025-08-26hst: use hsu userid for share path suffixOphestra
2025-08-26hst/config: remove data field, rename dir to homeOphestra
2025-08-25hst/config: remove container etc fieldOphestra
2025-08-18container: optionally isolate host abstract UNIX domain sockets via landlockClayton Gilmer
2025-08-18test/sandbox: do not discard stderr getting hashOphestra
2025-08-18app: set up acl on X11 socketOphestra
2025-08-15hst/fs: implement overlay fstypeOphestra
2025-08-15nix: check config via hakureiOphestra
2025-08-03container/ops: mount dev readonlyOphestra
2025-08-01app: remount root readonlyOphestra
2025-08-01nix: remove nscd coverOphestra
2025-08-01hst/container: mount tmpfs via magic src stringOphestra
2025-08-01container/mount: pass tmpfs flagsOphestra
2025-08-01app: integrate container autorootOphestra
2025-08-01test/sandbox: check pd behaviourOphestra
2025-07-26nix: update flake lockOphestra
2025-07-09test/sandbox: add arm64 constantsOphestra
2025-07-09test/sandbox: verify seccomp on all test casesOphestra
2025-07-07test/sandbox: guard on testtool tagOphestra
2025-07-07test/sandbox/seccomp: remove uselibOphestra
2025-07-03treewide: migrate to hakurei.appOphestra
2025-06-25treewide: rename to hakureiOphestra