mirror of
https://github.com/marcoallegretti/WEFT_OS.git
synced 2026-03-27 01:13:09 +00:00
Marco Allegretti
97ea969075
New crate: weft-mount-helper. A privileged helper binary that sets up
dm-verity devices and mounts EROFS images for app isolation.
Commands:
mount <img> <hash_dev> <root_hash> <mountpoint>
- opens a named dm-verity device via veritysetup open
- mounts the resulting /dev/mapper/<name> as EROFS read-only
- cleans up the dm device if mount fails
umount <mountpoint>
- unmounts the mountpoint
- closes the dm-verity device via veritysetup close
Device naming: derives a stable name from the mountpoint path, limited
to 31 chars (DM limit), always prefixed weft-. Root check reads
/proc/self/status euid rather than using unsafe libc calls.
Tests: device_name_sanitizes_path, device_name_truncates_long_paths.
20 lines
393 B
TOML
20 lines
393 B
TOML
[workspace]
|
|
members = [
|
|
"crates/weft-appd",
|
|
"crates/weft-build-meta",
|
|
"crates/weft-compositor",
|
|
"crates/weft-ipc-types",
|
|
"crates/weft-mount-helper",
|
|
"crates/weft-pack",
|
|
"crates/weft-runtime",
|
|
"crates/weft-servo-shell",
|
|
]
|
|
resolver = "2"
|
|
|
|
[workspace.package]
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
rust-version = "1.93"
|
|
|
|
[workspace.lints.rust]
|
|
unsafe_code = "forbid"
|