forgefirm

mirror of https://github.com/openglow-org/forgefirm.git synced 2026-10-16 01:29:55 -07:00

Files

T

ScottW514 56aa164708 Pin forgeext 0.1.4 on the pushed head

- forgeext e09f7b8 -> bb75b23 (0.1.3 -> 0.1.4): sandbox_test opens the
  machine's own files from inside the sandbox - /dev/glowforge,
  /data/forgefirm/forgefirm.conf, /data/forgefirm/setup.json - and
  requires EACCES of each (ENOENT is no pass; a file the host lacks is
  made for the run, readable by every account, and removed after).
  Test-only; nothing the image installs changes.

Proof: forgeext's CI run on bb75b23 (38780750106) is green on a kernel
with Landlock ABI 7; its log shows the three files made for the run and
each open refused with EACCES (sandbox_test, 0 failures). bitbake -c
fetch forgeext from this pin succeeds (2 tasks).

2026-10-15 13:57:52 -04:00

ffboot

Added SPDX

2026-09-18 12:14:22 -04:00

forgectrl

Pin forgectrl 0.1.33 on the pushed head

2026-10-15 12:50:22 -04:00

forgeext

Pin forgeext 0.1.4 on the pushed head

2026-10-15 13:57:52 -04:00

forgefirm-app

Pin forgectrl 0.1.31 and forgefirm-app 0.1.32 on the pushed heads, and meta-openglow in the kas lock