Something went wrong. Try again.
A bubblewrap-compatible unprivileged sandboxing tool written in Rust
Something went wrong. Try again.
Commits on main
Niclas Overby 1568372a feat(platform/tangled/publish): Let default.nix be the published build main
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(platform/tangled/publish): Let default.nix be the published build main
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 62b7f80c feat(platform/tangled/publish): Build every published repo with buildCargoProject
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(platform/tangled/publish): Build every published repo with buildCargoProject
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 385b4c4f chore(flake): Stop restating the name each crate's Cargo.toml holds
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(flake): Stop restating the name each crate's Cargo.toml holds
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 2cf17071 chore(flake): Name each crate what its project is called
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(flake): Name each crate what its project is called
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby fff60985 feat(platform/nix): Four fewer integration layers
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(platform/nix): Four fewer integration layers
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby b28ff90e feat(platform/nix): Declare zen-browser and nix-wallpaper as themselves
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(platform/nix): Declare zen-browser and nix-wallpaper as themselves
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 68ec97f0 feat(platform/nix): Free nix-config's consumers of pins they never named
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(platform/nix): Free nix-config's consumers of pins they never named
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby b2d0bfe2 feat(platform/nix): One functor call for every flake in the tree
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(platform/nix): One functor call for every flake in the tree
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 1d0b9aa1 feat(platform/nix): Drop the last two explicit roots
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(platform/nix): Drop the last two explicit roots
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby d3b829e0 fix(platform/tangled): Relock every generated flake to the rootless framework
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(platform/tangled): Relock every generated flake to the rootless framework
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 6ac04754 feat(platform): Call the workspace with one set and no path
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(platform): Call the workspace with one set and no path
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 657083f5 feat(flake.nix): Take nix-workspace as an input instead of carrying it
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(flake.nix): Take nix-workspace as an input instead of carrying it
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 9c864da6 chore(platform/tangled/publish): Relock the published flakes onto nix-workspace
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(platform/tangled/publish): Relock the published flakes onto nix-workspace
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 4722606a feat(platform/nix/workspace): Publish the framework and its modules as nix-workspace
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(platform/nix/workspace): Publish the framework and its modules as nix-workspace
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby aa5ae2e4 chore(platform/tangled/publish): Relock the published repos off flakelight
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(platform/tangled/publish): Relock the published repos off flakelight
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 7dbe19f6 chore(platform/tangled/publish): Take nix-project from Tangled, not GitHub
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(platform/tangled/publish): Take nix-project from Tangled, not GitHub
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 0b06ef7d chore(platform/tangled/publish): Call nix-project instead of restating it
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(platform/tangled/publish): Call nix-project instead of restating it
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 4bdd7623 chore(platform/tangled/publish): Relock every project on nix-project
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(platform/tangled/publish): Relock every project on nix-project
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby d0f92f59 chore(platform/nix/project): Rename nix-standalone to nix-project
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(platform/nix/project): Rename nix-standalone to nix-project
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 2ec3fb16 doc(README.md): Title projects as prose, not as their identifier
Signed-off-by: Niclas Overby <niclas@overby.me>
doc(README.md): Title projects as prose, not as their identifier
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby b374f4de feat(safety): Publish the twelve remaining oxidized projects
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(safety): Publish the twelve remaining oxidized projects
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 46fa7a2c chore(flake.nix): Group git-hooks follows into one inputs attrset (statix)
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(flake.nix): Group git-hooks follows into one inputs attrset (statix)
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby a574c26c fix(rust/sed): Address regex modifier I/M uppercase only, /regex/i\ insert fix — 55/61 (90%)
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/sed): Address regex modifier I/M uppercase only, /regex/i\ insert fix — 55/61 (90%)
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
trigger
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 7fda034e fix(rust/sed): POSIX class validation, compile-tests passing, is_last_script — 53/61 (87%)
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/sed): POSIX class validation, compile-tests passing, is_last_script — 53/61 (87%)
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
test
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby ee37e199 fix(rust/awk): Revert libc rand (doesn't match gawk's PRNG), keep positional printf
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/awk): Revert libc rand (doesn't match gawk's PRNG), keep positional printf
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 2320be5e doc(rust/awk): Stable at 187/241 (78%) — div-by-zero returns inf
Signed-off-by: Niclas Overby <niclas@overby.me>
doc(rust/awk): Stable at 187/241 (78%) — div-by-zero returns inf
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby d87754c6 fix(rust/awk): Revert array-as-scalar check (needs param tracking)
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/awk): Revert array-as-scalar check (needs param tracking)
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 99a33492 fix(rust/awk): Keep fatal exit on invalid regex (needed for regexpbad test)
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/awk): Keep fatal exit on invalid regex (needed for regexpbad test)
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby baa88160 fix(rust/awk): Revert array merge attempt, keep working copy-back logic
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/awk): Revert array merge attempt, keep working copy-back logic
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby a2c61016 fix(rust/bash): Validate read fd before reading, only open script on fd 0 when tty
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/bash): Validate read fd before reading, only open script on fd 0 when tty
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 4bf6ec8a fix(rust/bash): Revert pipe fd 0 close guard back to original
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/bash): Revert pipe fd 0 close guard back to original
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby bc4a0fa4 fix(rust/bash): Revert pipe fd guard (caused massive redir10.sub regression)
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/bash): Revert pipe fd guard (caused massive redir10.sub regression)
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 2a700fe6 fix(rust/bash): Close pipe read fd even when fd==0 to prevent blocking on reused pipe
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/bash): Close pipe read fd even when fd==0 to prevent blocking on reused pipe
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby aecf458d fix(rust/bash): Adjust eval line offset to LINENO (not LINENO-1) for correct error line numbers
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/bash): Adjust eval line offset to LINENO (not LINENO-1) for correct error line numbers
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby a196355e fix(rust/bash): Include function/builtin context in readonly error messages
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/bash): Include function/builtin context in readonly error messages
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 28714592 fix(rust/bash): Fire DEBUG trap before brace group compound commands
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/bash): Fire DEBUG trap before brace group compound commands
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 118e9e20 fix(rust/bash): Suppress recursive RETURN trap execution during handler
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/bash): Suppress recursive RETURN trap execution during handler
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby 58438601 fix(rust/bash): Remove duplicate use statement in echo builtin
Signed-off-by: Niclas Overby <niclas@overby.me>
fix(rust/bash): Remove duplicate use statement in echo builtin
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby c2a181ab chore(rust/bubblewrap): Apply rustfmt formatting
Signed-off-by: Niclas Overby <niclas@overby.me>
chore(rust/bubblewrap): Apply rustfmt formatting
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed
Niclas Overby ec1b8131 feat(rust/bubblewrap): Add bubblewrap-compatible sandboxing tool written in Rust
Signed-off-by: Niclas Overby <niclas@overby.me>
feat(rust/bubblewrap): Add bubblewrap-compatible sandboxing tool written in Rust
Signed-off-by: Niclas Overby <niclas@overby.me>
Niclas Overby committed