b53581eef3
refactor: hal: rename pine64 -> pine64-pinephone
...
it turns out i'll likely need a pinephonepro HAL as well
2024-09-23 02:06:33 +00:00
b9ce182ede
powersupply: ship
2024-09-23 01:47:16 +00:00
af6eaf687d
linux-postmarketos-pinephone-pro: init at 6.6.0
2024-09-23 01:42:23 +00:00
cc30673c10
mmcli: temporarily revert bunpen sandboxing
2024-09-22 01:05:53 +00:00
960f881cb4
millipixels: fix broken ref
2024-09-22 01:05:42 +00:00
2e78e9aa0c
rsync-net: remove unused sanebox
dependency
2024-09-21 23:41:21 +00:00
76583c49f4
UNTESTED: programs/assorted: switch every remaining bwrap sandboxed program over to the default (bunpen)
2024-09-21 23:35:46 +00:00
31615340a7
programs/assorted: remove explicit (and extraneous) sandbox.method = "bunpen" declarations
2024-09-21 23:35:06 +00:00
4868fbb82c
UNTESTED: assorted: add sandbox.tryKeepUsers to programs which appear to need capabilities
2024-09-21 23:01:41 +00:00
ea3eaf048e
programs: sandbox with bunpen *by default*; manually opt out or opt to a different sandboxer where required
2024-09-21 23:00:49 +00:00
b4662c838e
megapixels-next: sandbox
2024-09-21 22:32:11 +00:00
b113d98ab5
todo.md: add a note for nmcli sandboxing
2024-09-21 22:19:14 +00:00
4f28d11bfa
networkmanager_dmenu: sandbox with bunpen (NOTE: BROKEN)
...
this is as broken as the bwrap sandboxing: it can see the current connection, but can't adjust it. i believe this is because of faulty NetworkManager sandboxing (e.g. nmcli has similar issues)
2024-09-21 22:18:07 +00:00
2d5d685607
feedbackd: sandbox with bunpen
2024-09-21 22:12:51 +00:00
ded7aeffd8
callaudiod: sandbox with bunpen
2024-09-21 22:12:26 +00:00
b7576029bf
xdg-desktop-portal-wlr: sandbox with bunpen
2024-09-21 22:05:05 +00:00
fc79093245
tuba: sandbox with bunpen
2024-09-21 22:04:19 +00:00
9cac849917
ffmpeg: sandbox with bunpen
2024-09-21 22:02:13 +00:00
e55cf14e99
gawk: sandbox with bunpen
2024-09-21 22:01:32 +00:00
76ea30ada9
mesa-demos: sandbox with bunpen
2024-09-21 21:59:31 +00:00
bf9c664d03
seahorse: sandbox with bunpen
2024-09-21 21:58:42 +00:00
a770ac7c78
nixpkgs: 24.05-unstable-2024-09-17 -> 24.05-unstable-2024-09-21
2024-09-21 20:23:41 +00:00
68f1dae946
nixpkgs-wayland: 0-unstable-2024-09-17 -> 0-unstable-2024-09-21
2024-09-21 20:23:27 +00:00
282b9d041b
uassets: 0-unstable-2024-09-19 -> 0-unstable-2024-09-21
2024-09-21 20:20:57 +00:00
e8b957a4dc
megapixels-next: make it the default camera
2024-09-21 12:58:06 +00:00
1501c99016
sane-vpn: port to bunpen
2024-09-21 12:48:31 +00:00
b1763ccd02
todo.md: sync
2024-09-21 12:33:45 +00:00
7cf5aa4732
hosts/all: remove the zfs kernel pin
2024-09-21 12:30:44 +00:00
66f829492c
servo: replace zfs pool with a btrfs pool
2024-09-21 12:27:08 +00:00
821855651d
gnome-calls: sandbox with bunpen
2024-09-21 12:23:33 +00:00
606be197db
nicotine-plus: sandbox with bunpen
2024-09-21 12:23:21 +00:00
208b634040
programs/sandboxing: add required args to use pasta
2024-09-21 12:21:11 +00:00
224b298cda
bunpen: tighter sequencing around pasta net proxying
2024-09-21 11:52:13 +00:00
29975ce787
remove custom eg25-manager and use nixpkgs upstream instead
2024-09-21 08:33:15 +00:00
90d48849cc
mpv: replace "blast-to-default" with "sane-cast"
...
i could kill 'blast-to-default' altogether now, but i may hold off until i'm more certain this works
2024-09-21 08:30:01 +00:00
9a4635c93b
sane-cast: support casting audio
2024-09-21 08:29:23 +00:00
f7b4e5ba98
pipewire: create a "effect_input.virtual" node which can become the "blast" audio source in the future
2024-09-21 07:38:05 +00:00
84c4dcb9d1
blast-ugjka: format with nixfmt
2024-09-21 06:37:31 +00:00
3dff60397e
bunpen: get pasta working
...
full of race conditions and weird edge cases (some of which may have existed before)
2024-09-21 03:40:26 +00:00
b105e774b3
btrfs-progs: fix sandboxing
2024-09-21 01:56:56 +00:00
e9d3623a97
firefox: add search shortcut for ArchLinux wiki
2024-09-21 00:14:34 +00:00
a9472a14f2
bunpen: restore /proc access in PID-namespaced applications
2024-09-20 23:15:05 +00:00
a2abe159a4
bunpen: tests: ensure that --bunpen-keep-net actually does something
2024-09-20 22:50:24 +00:00
0546bf6ea5
bunpen: barebones pasta integration
...
totally untested, except that it builds
2024-09-20 12:41:39 +00:00
d22bbcf44a
bunpen: refactor: be more organized with how we shed resources
2024-09-20 11:51:53 +00:00
e6803d6068
bunpen: refactor: split mount_ns into own file
2024-09-20 11:22:10 +00:00
3993f26cc6
bunpen: move restrict::namespace_restrict -> restrict::ns::namespace_restrict
2024-09-20 11:18:02 +00:00
f6a93e120a
yt-dlp: fix that downloaded files have ordinary mtimes
2024-09-20 11:02:11 +00:00
b3a6656c81
moby: linux-armbian: remove an unnecessary HDMI-sound patch
2024-09-20 10:12:21 +00:00
a4a43d24dc
eg25-control: fix missing sandbox path
2024-09-20 10:11:46 +00:00