Commit Graph

9091 Commits

Author SHA1 Message Date
b53581eef3 refactor: hal: rename pine64 -> pine64-pinephone
it turns out i'll likely need a pinephonepro HAL as well
2024-09-23 02:06:33 +00:00
b9ce182ede powersupply: ship 2024-09-23 01:47:16 +00:00
af6eaf687d linux-postmarketos-pinephone-pro: init at 6.6.0 2024-09-23 01:42:23 +00:00
cc30673c10 mmcli: temporarily revert bunpen sandboxing 2024-09-22 01:05:53 +00:00
960f881cb4 millipixels: fix broken ref 2024-09-22 01:05:42 +00:00
2e78e9aa0c rsync-net: remove unused sanebox dependency 2024-09-21 23:41:21 +00:00
76583c49f4 UNTESTED: programs/assorted: switch every remaining bwrap sandboxed program over to the default (bunpen) 2024-09-21 23:35:46 +00:00
31615340a7 programs/assorted: remove explicit (and extraneous) sandbox.method = "bunpen" declarations 2024-09-21 23:35:06 +00:00
4868fbb82c UNTESTED: assorted: add sandbox.tryKeepUsers to programs which appear to need capabilities 2024-09-21 23:01:41 +00:00
ea3eaf048e programs: sandbox with bunpen *by default*; manually opt out or opt to a different sandboxer where required 2024-09-21 23:00:49 +00:00
b4662c838e megapixels-next: sandbox 2024-09-21 22:32:11 +00:00
b113d98ab5 todo.md: add a note for nmcli sandboxing 2024-09-21 22:19:14 +00:00
4f28d11bfa networkmanager_dmenu: sandbox with bunpen (NOTE: BROKEN)
this is as broken as the bwrap sandboxing: it can see the current connection, but can't adjust it. i believe this is because of faulty NetworkManager sandboxing (e.g. nmcli has similar issues)
2024-09-21 22:18:07 +00:00
2d5d685607 feedbackd: sandbox with bunpen 2024-09-21 22:12:51 +00:00
ded7aeffd8 callaudiod: sandbox with bunpen 2024-09-21 22:12:26 +00:00
b7576029bf xdg-desktop-portal-wlr: sandbox with bunpen 2024-09-21 22:05:05 +00:00
fc79093245 tuba: sandbox with bunpen 2024-09-21 22:04:19 +00:00
9cac849917 ffmpeg: sandbox with bunpen 2024-09-21 22:02:13 +00:00
e55cf14e99 gawk: sandbox with bunpen 2024-09-21 22:01:32 +00:00
76ea30ada9 mesa-demos: sandbox with bunpen 2024-09-21 21:59:31 +00:00
bf9c664d03 seahorse: sandbox with bunpen 2024-09-21 21:58:42 +00:00
a770ac7c78 nixpkgs: 24.05-unstable-2024-09-17 -> 24.05-unstable-2024-09-21 2024-09-21 20:23:41 +00:00
68f1dae946 nixpkgs-wayland: 0-unstable-2024-09-17 -> 0-unstable-2024-09-21 2024-09-21 20:23:27 +00:00
282b9d041b uassets: 0-unstable-2024-09-19 -> 0-unstable-2024-09-21 2024-09-21 20:20:57 +00:00
e8b957a4dc megapixels-next: make it the default camera 2024-09-21 12:58:06 +00:00
1501c99016 sane-vpn: port to bunpen 2024-09-21 12:48:31 +00:00
b1763ccd02 todo.md: sync 2024-09-21 12:33:45 +00:00
7cf5aa4732 hosts/all: remove the zfs kernel pin 2024-09-21 12:30:44 +00:00
66f829492c servo: replace zfs pool with a btrfs pool 2024-09-21 12:27:08 +00:00
821855651d gnome-calls: sandbox with bunpen 2024-09-21 12:23:33 +00:00
606be197db nicotine-plus: sandbox with bunpen 2024-09-21 12:23:21 +00:00
208b634040 programs/sandboxing: add required args to use pasta 2024-09-21 12:21:11 +00:00
224b298cda bunpen: tighter sequencing around pasta net proxying 2024-09-21 11:52:13 +00:00
29975ce787 remove custom eg25-manager and use nixpkgs upstream instead 2024-09-21 08:33:15 +00:00
90d48849cc mpv: replace "blast-to-default" with "sane-cast"
i could kill 'blast-to-default' altogether now, but i may hold off until i'm more certain this works
2024-09-21 08:30:01 +00:00
9a4635c93b sane-cast: support casting audio 2024-09-21 08:29:23 +00:00
f7b4e5ba98 pipewire: create a "effect_input.virtual" node which can become the "blast" audio source in the future 2024-09-21 07:38:05 +00:00
84c4dcb9d1 blast-ugjka: format with nixfmt 2024-09-21 06:37:31 +00:00
3dff60397e bunpen: get pasta working
full of race conditions and weird edge cases (some of which may have existed before)
2024-09-21 03:40:26 +00:00
b105e774b3 btrfs-progs: fix sandboxing 2024-09-21 01:56:56 +00:00
e9d3623a97 firefox: add search shortcut for ArchLinux wiki 2024-09-21 00:14:34 +00:00
a9472a14f2 bunpen: restore /proc access in PID-namespaced applications 2024-09-20 23:15:05 +00:00
a2abe159a4 bunpen: tests: ensure that --bunpen-keep-net actually does something 2024-09-20 22:50:24 +00:00
0546bf6ea5 bunpen: barebones pasta integration
totally untested, except that it builds
2024-09-20 12:41:39 +00:00
d22bbcf44a bunpen: refactor: be more organized with how we shed resources 2024-09-20 11:51:53 +00:00
e6803d6068 bunpen: refactor: split mount_ns into own file 2024-09-20 11:22:10 +00:00
3993f26cc6 bunpen: move restrict::namespace_restrict -> restrict::ns::namespace_restrict 2024-09-20 11:18:02 +00:00
f6a93e120a yt-dlp: fix that downloaded files have ordinary mtimes 2024-09-20 11:02:11 +00:00
b3a6656c81 moby: linux-armbian: remove an unnecessary HDMI-sound patch 2024-09-20 10:12:21 +00:00
a4a43d24dc eg25-control: fix missing sandbox path 2024-09-20 10:11:46 +00:00