karapace/crates
Marco Allegretti 8493831222 feat: karapace-runtime — namespace/OCI/mock backends, sandbox, host integration
- RuntimeBackend trait: resolve, build, enter, exec, destroy, status
- Namespace backend: unshare + fuse-overlayfs + chroot (unprivileged)
- OCI backend: crun/runc/youki support
- Mock backend: deterministic test backend with configurable resolution
- Image downloading from images.linuxcontainers.org with blake3 verification
- Sandbox script generation with POSIX shell-quote injection prevention
- Host integration: Wayland, X11, PipeWire, PulseAudio, D-Bus, GPU, audio, SSH agent
- Desktop app export as .desktop files on the host
- SecurityPolicy: mount whitelist, device policy, env var allow/deny, resource limits
- Prerequisite detection with distro-specific install instructions
- OSC 777 terminal markers for container-aware terminals
2026-02-22 18:36:46 +01:00
..
karapace-runtime feat: karapace-runtime — namespace/OCI/mock backends, sandbox, host integration 2026-02-22 18:36:46 +01:00
karapace-schema feat: karapace-schema — manifest v1, normalization, identity hashing, lock file v2 2026-02-22 18:36:15 +01:00
karapace-store feat: karapace-store — content-addressable object store, layers, metadata, WAL 2026-02-22 18:36:31 +01:00