Skip to content

Feat/arm64 support#10

Merged
fullzer4 merged 6 commits into
mainfrom
feat/arm64-support
May 20, 2026
Merged

Feat/arm64 support#10
fullzer4 merged 6 commits into
mainfrom
feat/arm64-support

Conversation

@fullzer4
Copy link
Copy Markdown
Owner

No description provided.

fullzer4 added 5 commits May 20, 2026 14:56
- Stable FNV-1a hash for Go binary cache (replaces DefaultHasher)
- LazyLock for Go wrap regexes (avoids recompilation per call)
- Single-pass ELF parsing (merge parse_needed + parse_rpath_runpath)
- Cow<str> returns for stdout_str/stderr_str (avoid allocation)
- Vec instead of HashMap in VirtualFs (3 entries, linear scan faster)
- #[must_use] on builder and output types
Remove crate-level #![allow(clippy::...)] in favor of per-function
#[allow] with explanatory comments on why the cast is safe.
- Split seccomp whitelist into BASE_WHITELIST + LEGACY_WHITELIST
  with cfg(target_arch) gates for x86_64-only legacy syscalls
- AUDIT_ARCH cfg for x86_64 (0xc000003e) and aarch64 (0xc00000b7)
- default_whitelist() and notify_fs_syscalls() replace pub consts
- Socket filter AND mask to properly check SOCK_RAW after flag bits
- Drop minimum kernel from 6.12 to 6.7 (Landlock ABI 4)
- Fix OwnedFd double-close with ManuallyDrop + remove_dir_all
- SpawnedSandbox Drop impl for proper fd cleanup
- Supervisor cfg gates on legacy syscall handling
- Restore NixOS PATH detection in default_env()
@fullzer4 fullzer4 self-assigned this May 20, 2026
@fullzer4 fullzer4 merged commit 13f5bba into main May 20, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant