Peter Cai
bee621e0a7
app_containers: Don't perform privileged operations in cleanup
5 months ago
Peter Cai
bc418c3776
app_container: Expand TODO
5 months ago
Peter Cai
a631fae406
app_containers: Add TODO about DBus in userns
5 months ago
Peter Cai
1afb772f71
app_containers: Kill all previously running instances
...
Because things like dbus can be broken inside.
5 months ago
Peter Cai
edcfaef386
app_containers: Move to using CONTAINER_BIND_MOUNTS for extra binds
...
...instead of the overly generic SYSTEMD_NSPAWN_EXTRA_ARGS variable.
5 months ago
Peter Cai
19f37e343b
app_containers: Rename the cleanup routine to cleanup()
...
exit is actually a keyword in bash
5 months ago
Peter Cai
8ce1f690b7
app_containers: Force the use of SUDO_ASKPASS
5 months ago
Peter Cai
edddafda26
app_containers: Grant input devices access to inside the container
5 months ago
Peter Cai
da9414d4a8
app_containers: Properly support different UID on host / in container
...
We simply use the same logic as the user namespaced case.
5 months ago
Peter Cai
fd3fcf1e36
app_containers: Detect the user home directory dynamically
...
...so that we can stop assuming the username inside the container
(although the shortcut generation script still does, but we'll fix that
later, hopefully)
5 months ago
Peter Cai
8aa252305d
app_containers: Define SUDO_ASKPASS first
5 months ago
Peter Cai
fab54bfafa
app_containers: Use UID instead of username for $run_as
...
Note that we still assume the user name inside the container is `user`.
5 months ago
Peter Cai
fc6ee67cf2
app_containers: Optionally support user namespaces
...
using the env variable CONTAINER_USE_USERNS
5 months ago
Peter Cai
062d08778e
app_containers: pulse socket is not in $container_xdg_runtime
...
:D
5 months ago
Peter Cai
4c18c58c6d
app_containers: Handle pulse native socket properly
5 months ago
Peter Cai
fad120e4af
app_containers: Enable userns with identity mapping by default
5 months ago
Peter Cai
440a00ce16
app_containers: Add support for icon generation in pixmaps
5 months ago
Peter Cai
ea876c8a76
app_containers: Support generation of shortcuts from ~/.local/share
5 months ago
Peter Cai
ccde40e865
app_containers: Explain GDK_SCALE
5 months ago
Peter Cai
a172660bcf
app_containers: Set XDG_SESSION_TYPE instead
5 months ago
Peter Cai
195b685148
app_containers: Launch QT programs inside containers under Wayland
5 months ago
Peter Cai
58a207c66c
app_containers: Add default hacks for Proton
...
Need to disable futex for Proton to avoid dead locks (for some reason).
5 months ago
Peter Cai
d8d634e45c
app_containers: Disable /dev/shm mount
...
We have disabled the MIT-SHM extension entirely.
5 months ago
Peter Cai
2e6e29ed34
app_containers: Set DeviceAllow properly
...
/dev/dri and /dev/shm are NOT devices.
5 months ago
Peter Cai
0d9d4b363e
app_containers: Bind Xorg sockets as rw
5 months ago
Peter Cai
2fbffcda50
app_containers: Add automatic shortcut generation
5 months ago
Peter Cai
529f6e358c
app_containers: Bind the entire /dev/dri subdirectory
5 months ago
Peter Cai
79aeb5321f
app_containers: Support per-container config
...
We don't use the .nspawn files because they live in /etc...
5 months ago
Peter Cai
fc08c1002a
app_containers: Use askpass_bemenu to invoke sudo
...
This makes it work in GUI mode
5 months ago
Peter Cai
c3d5c58ce3
app_containers: Add Wayland handling
5 months ago
Peter Cai
60e83e345d
Introduce run_app_container script
5 months ago
