Commit Graph

9091 Commits

Author SHA1 Message Date
6e30527688 modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc" 2024-09-06 04:18:46 +00:00
9340f52df1 modules/programs: rename isolatePids -> keepPids, isolateUsers -> keepUsers
this follows my explicit whitelisting elsewhere
2024-09-06 04:06:42 +00:00
cc90183ca2 blast-ugjka: sandbox with bunpen 2024-09-06 03:52:36 +00:00
31d475bf88 sane-cast: sandbox with bunpen 2024-09-06 03:42:03 +00:00
329a02f475 gnome-keyring-daemon: sandbox with bunpen 2024-09-06 03:12:00 +00:00
e3dda5b140 grimshot: sandbox with bunpen 2024-09-06 02:31:20 +00:00
876ec637c2 stepmania: shift the data dir patch upstream 2024-09-06 02:21:08 +00:00
d338826855 stepmania: sandbox with bunpen 2024-09-06 01:44:11 +00:00
b770a77257 stepmania: simplify the wrapping 2024-09-06 01:41:20 +00:00
b289f13779 stepmania: wrap in a way which doesnt require manually cding to the data dir 2024-09-06 01:19:13 +00:00
d8664cd88b stepmania: fix fs paths to point to valid data 2024-09-06 01:17:21 +00:00
5270c41347 avahi: fix ip6tables firewall rule 2024-09-06 01:17:21 +00:00
850c975321 modules/programs: when sandboxing, use makeBinaryWrapper if supported 2024-09-06 01:17:21 +00:00
b1b12c353d sm64ex-coop-deluxe: init 2024-09-05 23:43:42 +00:00
3934d9c5a5 sway: fix sm64ex syntax error 2024-09-05 23:39:21 +00:00
84a36d9ef8 bunpen: fix last failing integration test 2024-09-05 23:21:56 +00:00
05b8352b4d bunpen: bind execvpe 2024-09-05 23:21:31 +00:00
4123d2d92e sway: bind mod+P to screenshot
one of my keyboards here doesn't have PrintScreen :o
2024-09-05 22:55:02 +00:00
768998f78d bunpen: rearrange integration tests to make it obvious that invoking by PATH is what's failing 2024-09-05 22:51:21 +00:00
a128f624b2 bunpen: fix to correctly forward the exit status 2024-09-05 22:41:12 +00:00
f12123416b bunpen: integration_test: add logging tests 2024-09-05 22:21:06 +00:00
392330f9ca bunpen: make the integration tests easier to understand 2024-09-05 22:04:00 +00:00
60bdc7c5d3 nixpkgs: 0-unstable-2024-08-30 -> 0-unstable-2024-09-05 2024-09-05 21:50:19 +00:00
aa93ac608b nixpkgs-wayland: 0-unstable-2024-08-30 -> 0-unstable-2024-09-02 2024-09-05 21:50:19 +00:00
3ad7271439 syshud: 0-unstable-2024-08-27 -> 0-unstable-2024-09-04 2024-09-05 21:50:19 +00:00
fe087720ed uassets: 0-unstable-2024-08-30 -> 0-unstable-2024-09-05 2024-09-05 21:50:19 +00:00
15ff2589d3 sops: 2024-08-12 -> 2024-09-01 2024-09-05 21:50:19 +00:00
b74372dd2b fs: mount moby via wireguard 2024-09-05 21:50:19 +00:00
196cf2dc9e bunpen: cleanup the integration test infrastructure 2024-09-05 10:01:47 +00:00
3f6713c12c s64ex-coop: sandbox 2024-09-05 08:56:43 +00:00
d8058f0591 sm64ex-coop: persist save data 2024-09-05 08:48:33 +00:00
a1450b4eff sm64ex-coop: ship 2024-09-05 06:38:58 +00:00
3b009b8435 baseRom: init 2024-09-05 06:25:20 +00:00
c0bf2df718 firefox: add a "pr" search shortcut to search nixpkgs PRs 2024-09-05 05:30:10 +00:00
24eefbeded bunpen: add some integration tests (they fail heh) 2024-09-05 02:37:41 +00:00
e97302a453 bunpen: dont forward argv[0] if the caller didnt forward it 2024-09-05 02:34:56 +00:00
2b2173be56 bunpen: enable logging earlier 2024-09-05 02:32:12 +00:00
ac5b9061a2 scripts/deploy: implement --wireguard flag, to deploy the host over wireguard 2024-09-05 02:06:59 +00:00
a54b051bbe crappy: split cross-specific programs config into hal 2024-09-05 01:11:16 +00:00
968e9654cf moby: move cross-specific programs config to hal 2024-09-05 01:11:16 +00:00
a557c79f4e hosts/modules/hal/pine64: split kernel into own file 2024-09-05 00:59:51 +00:00
f2dc84a1c8 refactor: hosts/modules/hal/pine64: give it its own directory 2024-09-05 00:57:29 +00:00
8a7a20fe2b sane-open: fix isLandscape to query actual geometry instead of the less informative "rotation" property 2024-09-05 00:23:57 +00:00
7e674b205f rsync-net: add a script to help with restoring backups 2024-09-04 23:09:04 +00:00
8d87a15e60 modules/image: be verbose when we flash the bootloader 2024-09-04 13:50:22 +00:00
f39a08e379 aerc: sandbox with bunpen 2024-09-04 13:49:40 +00:00
b567aeadd7 bunpen: namespace: populat /dev/pts 2024-09-04 13:49:40 +00:00
04ac2ada05 bunpen: simplify the /proc/self/{u,g}id_map logic 2024-09-04 13:49:40 +00:00
6193f347e7 bunpen: allow mount to take str mount params 2024-09-04 13:49:40 +00:00
39733b4862 bunpen: log more clearly when an error message is fatal v.s. non-fatal 2024-09-04 13:49:40 +00:00