Fix host-run and profile input, and make gateway egress diagnosable - #228

Merged

pjbgf merged 21 commits into

mainfrom

bwrap-fix

Sep 12, 2026

Commits on Sep 12, 2026

profiles, bwrap: carry the host timezone with TZ, not a mount
pjbgf
committed
8a9ec47
host-run: authorize the command against the profile's display
pjbgf
committed
6961ea2
host-run: return while the command runs
pjbgf
committed
8193787
gateway: keep the gateway's log where it can be read
pjbgf
committed
aa114f2
host-run: leave the launching session's variables behind
pjbgf
committed
ee71317
xkb: prefer the running layout on an X11 session
pjbgf
committed
781c5cf
profiles: name the profile's display for the window manager
pjbgf
committed
d9e2878
gateway: narrow the logs to one profile or one workload
pjbgf
committed
27079da
doctor: report what the gateway has been doing with egress
pjbgf
committed
4d64b64
gateway: do not report a config the running gateway may not have
pjbgf
committed
c9c10e8
bwrap: tell a workload where to ask the gateway for a tunnel
pjbgf
committed
72e04b0
gateway: say when the log will not close
pjbgf
committed
d57908a
gateway: wait for a stopped gateway to go before forgetting it
pjbgf
committed
dcddd79
gateway: describe the address record, not a gateway that is not running
pjbgf
committed
8196091
gateway: say the subnet mismatch the same way in both places
pjbgf
committed
5cd2927
cmd: write an error to stderr, not to stdout
pjbgf
committed
9ffd3f6
gateway, bwrap: give a workload's ssh a way through the gateway
pjbgf
committed
52f132c
gateway: keep a log's lines whole, and bound what reading one costs
pjbgf
committed
870e1ad
gateway: undo slog's escapes when reading a log field
pjbgf
committed
d14b6e9
cmd: keep the Wayland warning off stdout
pjbgf
committed
3b41110
gateway: record which config the gateway was started from
pjbgf
committed
84e1233

Navigation Menu

Uh oh!

Fix host-run and profile input, and make gateway egress diagnosable - #228

Fix host-run and profile input, and make gateway egress diagnosable#228
pjbgf merged 21 commits into
mainfrom
bwrap-fix

Commits on Sep 12, 2026

profiles, bwrap: carry the host timezone with TZ, not a mount

host-run: authorize the command against the profile's display

host-run: return while the command runs

gateway: keep the gateway's log where it can be read

host-run: leave the launching session's variables behind

xkb: prefer the running layout on an X11 session

profiles: name the profile's display for the window manager

gateway: narrow the logs to one profile or one workload

doctor: report what the gateway has been doing with egress

gateway: do not report a config the running gateway may not have

bwrap: tell a workload where to ask the gateway for a tunnel

gateway: say when the log will not close

gateway: wait for a stopped gateway to go before forgetting it

gateway: describe the address record, not a gateway that is not running

gateway: say the subnet mismatch the same way in both places

cmd: write an error to stderr, not to stdout

gateway, bwrap: give a workload's ssh a way through the gateway

gateway: keep a log's lines whole, and bound what reading one costs

gateway: undo slog's escapes when reading a log field

cmd: keep the Wayland warning off stdout

gateway: record which config the gateway was started from