Colin f10f1ee7b1 modules/programs: sane-sandboxed: optimize "normPath" to not invoke subshells ...

each subshell causes like 5ms just on my laptop, which really adds up.
this implementation still forks internally, but doesn't exec.
runtime decreases from 150ms -> 90ms for
`time librewolf --sane-sandbox-replace-cli true`

2024-02-18 12:08:23 +00:00

..

data

feeds: add "FullTimeNix" podcast :)

2024-02-12 00:09:49 +00:00

fs

fs: symlink: add an option by which to control the symlink target name

2023-09-12 04:41:32 +00:00

lib

persist: allow persisting of individual files, not just directories

2023-07-08 01:31:14 +00:00

persist

sane.persist.root-on-tmpfs -> sane.root-on-tmpfs

2023-11-09 00:15:04 +00:00

programs

modules/programs: sane-sandboxed: optimize "normPath" to not invoke subshells

2024-02-18 12:08:23 +00:00

services

nix-serve: fix coredump loop

2024-01-19 21:34:45 +00:00

default.nix

modules/programs: move to subdir

2024-01-23 01:02:04 +00:00

dns.nix

trust-dns: rework the module to be more suitable for upstreaming

2023-07-02 08:21:33 +00:00

feeds.nix

feeds: add support for video; subscribe to videos in gpodder

2023-12-06 15:36:05 +00:00

ids.nix

ids: improve docs

2023-01-08 06:54:29 +00:00

image.nix

image: allow configuring the sector size

2023-11-08 16:42:25 +00:00

ports.nix

ports: fix systemd RandomizedDelaySec typo

2023-12-12 02:14:27 +00:00

root-on-tmpfs.nix

sane.persist.root-on-tmpfs -> sane.root-on-tmpfs

2023-11-09 00:15:04 +00:00

sops.nix

impermanence: split out sops setup

2022-12-30 04:31:24 +00:00

ssh.nix

persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)

2023-11-08 15:33:15 +00:00

users.nix

implement sane.defaultUser attr

2024-02-12 14:27:32 +00:00

vpn.nix

programs: achieve network sandboxing without "sane-vpn do"

2024-01-21 03:51:12 +00:00

wowlan.nix

s/types.string/types.str/

2023-10-17 22:46:02 +00:00