13 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
hulthe	46a86116b0	Add a --memory flag	2026-08-29 21:12:23 +02:00
hulthe	ec05936d2f	Add Arch Linux example	2026-08-29 21:04:35 +02:00
hulthe	41bc570bfb	Print qemu command	2026-08-29 21:04:27 +02:00
hulthe	56a76ce934	Add basic README.md with an example	2026-08-26 23:46:57 +02:00
hulthe	6af8660f8d	Add qemu network device	2026-08-26 23:27:58 +02:00
hulthe	8b544ab688	Add image ls and image rm commands	2026-08-26 23:27:58 +02:00
marvin	37f537184c	refactor: split main.rs into registry, build, and qemu modules ... main.rs keeps only the CLI definition and command dispatch: - registry.rs: image-name validation + XDG registry path handling (tests) - build.rs: podman mount/unmount, vmlinuz extraction, cpio/gzip initrd - qemu.rs: direct-kernel-boot VM launch No behavior change; cargo fmt/clippy/test pass, build/run paths verified against the mock-vm image.	2026-08-26 20:15:16 +00:00
marvin	5b80885207	fix: validate image name before building registry path ... The user-supplied image/name argument was interpolated unsanitized into registry/{name}/initrd, so a name containing '../' (e.g. 'slim run ../../.ssh/authorized_keys') escaped the XDG data dir and let slim create directories and read/write files at attacker-chosen locations. validate_image_name now rejects empty names, '.', '..' and anything outside [A-Za-z0-9._:-] at the registry_dir chokepoint used by both build and run, plus a defense-in-depth containment check that the resolved path stays under the registry root. Fixes sec-2 from the code review.	2026-08-26 20:11:57 +00:00
hulthe	d517ab6a1a	Fix minor issues	2026-08-26 21:45:26 +02:00
hulthe	e3bd77379f	Add lockfile	2026-08-26 19:25:20 +02:00
marvin	8dd5267bb4	fix: read rootfs inside podman unshare, always unmount, fail on qemu errors ... - build: the rootless overlay mount only exists inside podman unshare's user namespace; run the vmlinuz check/copy and the find|cpio pipeline there, streaming cpio's stdout to the parent for gzipping (also drops the initrd.tmp round-trip and excludes vmlinuz from the archive) - build: unmount the image on all code paths, not just success - run: treat timeout's exit 124 as the expected smoke-test timeout and error on any other non-zero status (a missing qemu binary no longer reports success) Fixes bug-1, bug-2, bug-3 from the code review.	2026-08-25 20:45:29 +00:00
marvin	b9b5e3942b	slim-rs v1: initrd build, qemu run, gitea actions	2026-08-25 20:10:03 +00:00
marvin	f7ca39117a	slim-rs v1: initrd build + qemu run via podman image mount	2026-08-25 19:53:47 +00:00