Commit Graph

17 Commits

Author SHA1 Message Date
11e7d52350
wrapper-manager/sandboxing/bubblewrap: fix escaping arguments and launcher
The makeWrapper arguments are not escaped anymore for the binary wrapper
that automatically does this anyways.
2024-08-12 15:34:23 +08:00
20b483fda4
wrapper-manager/sandboxing/bubblewrap: fix options 2024-08-10 21:28:01 +08:00
99b13543ae
wrapper-manager/sandboxing/bubblewrap: update default values 2024-08-06 11:17:22 +08:00
5773481ce0
wrapper-manager/sandboxing/bubblewrap: add option to bundle certificates from nixpkgs 2024-08-06 11:00:00 +08:00
3a4833d46d
wrapper-manager/sandboxing/bubblewrap: init launcher submodule
At the end of the day, I decided to make it in nixpkgs' runtime shell
(GNU Bash) instead of Rust because it'll be a pain in the ass.
2024-08-05 18:42:12 +08:00
3c56efb777
wrapper-manager/sandboxing: change to arg0 for wraparound for consistency 2024-08-01 12:10:19 +08:00
9428bc0472
wrapper-manager/sandboxing: update comments and description 2024-08-01 09:01:05 +08:00
0d32b27571
wrapper-manager/sandboxing/bubblewrap: refactor and update 2024-07-29 19:04:45 +08:00
7ba31a2e75
wrapper-manager/sandboxing: add wraparound under namespace
Each wrapper represents one... wrapper anyways so it is fine to have
this. If nothing else applies, you could still make the specific
sandboxing module to have its own wraparound option namespace. That
practice should be discouraged though.
2024-07-29 16:39:59 +08:00
4262ccfa89
wrapper-manager: make modules and library set up-to-date 2024-07-27 21:22:55 +08:00
193d587d07
wrapper-manager/sandboxing/bubblewrap: move sharing Nix store to filesystem submodule and add option for binding certain Nix store paths 2024-07-27 20:02:50 +08:00
971d786b81
wrapper-manager/sandboxing/bubblewrap: add option for ensuring dying with parent 2024-07-27 11:46:51 +08:00
34f086a6a5
wrapper-manager/sandboxing/bubblewrap: revise filesystem submodule 2024-07-27 11:46:15 +08:00
50e7d29620
wrapper-manager/sandboxing/bubblewrap: fix config 2024-07-27 11:44:44 +08:00
bf51e0dcde
wrapper-manager/sandboxing/bubblewrap: add filesystem integration
Also untested.
2024-07-26 16:12:57 +08:00
22ecf7726e
wrapper-manager/sandboxing/bubblewrap: add D-Bus integration
With xdg-dbus-proxy for filtering.

Also, as of writing, we have no internet so there's basically no testing
done here :)
2024-07-26 15:56:16 +08:00
d633fc2b38
wrapper-manager/sandboxing/bubblewrap: init prototype
Not complete, just its options for now. We might even go into the
direction of NixPak and nix-bubblewrap creating our own specialized
launcher.
2024-07-26 15:41:49 +08:00