mirror of
https://github.com/lucannez64/darling-lol.git
synced 2026-10-26 19:47:42 +00:00
41b5b6fc0f
RCLOL_FILTER_HOST_ENV=1 makes exec-guest.py drop host session metadata (WAYLAND_DISPLAY, XDG_SESSION_*, XDG_CURRENT_DESKTOP, GNOME/KDE/GDM, systemd, SSH agent, terminal, toolkit, Flatpak/Snap/AppImage, exported shell functions) and set SHELL to the guest's /bin/zsh. It is off by default; RCLOL_KEEP_HOST_ENV lists names to keep anyway. Unlike the denylist in #61, the filter runs after the launcher sets its GPU tuning, keeps everything Darling and the host graphics and audio libraries read (DISPLAY, XAUTHORITY, XDG_RUNTIME_DIR and the XDG base directories, D-Bus, PulseAudio/PipeWire/ALSA, DRI_PRIME, MESA_*, __GL_*, __NV_*, VK_*, LD_PRELOAD for gamemoderun, LD_LIBRARY_PATH), and lives in one place instead of three. tests/test_exec_guest.py runs in CI; the launcher check also verifies that MESA_NO_ERROR=1 and __GL_THREADED_OPTIMIZATIONS=0 reach the guest with the filter on. Split from #61. Co-authored-by: DevWebeloper <[email protected]> Co-Authored-By: Claude Opus 5.5 <[email protected]>
72 lines
3.0 KiB
Python
Executable File
72 lines
3.0 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
"""Run a command without the host file descriptors this launcher inherited (anything above stderr).
|
|
|
|
With RCLOL_FILTER_HOST_ENV=1 it also drops host desktop-session variables first (see
|
|
host_session_variable). RCLOL_KEEP_HOST_ENV lists names to keep anyway, separated by spaces or commas.
|
|
"""
|
|
import os
|
|
import sys
|
|
|
|
# Desktop-session, service-manager, terminal and packaging metadata that nothing in the guest reads.
|
|
# Everything Darling and the host libraries it loads need is kept: DISPLAY, XAUTHORITY, XCURSOR_*,
|
|
# XDG_RUNTIME_DIR, XDG_DATA_DIRS and the other XDG base directories (the Vulkan loader searches
|
|
# them), DBUS_SESSION_BUS_ADDRESS, PULSE_*, PIPEWIRE_*, ALSA_*, DRI_PRIME, MESA_*, mesa_glthread,
|
|
# __GL_*, __NV_*, __EGL_*, VK_*, LIBGL_*, LD_PRELOAD (gamemoderun) and LD_LIBRARY_PATH.
|
|
SESSION_PREFIXES = (
|
|
'XDG_SESSION_', 'XDG_SEAT', 'XDG_VTNR', 'XDG_CURRENT_DESKTOP', 'XDG_MENU_PREFIX',
|
|
'GNOME_', 'KDE_', 'GDM', 'SSH_', 'SYSTEMD_', 'MEMORY_PRESSURE_', 'QT_', 'GTK_', 'GDK_',
|
|
'GIO_', 'GSETTINGS_', 'GJS_', 'FLATPAK_', 'SNAP_', 'KONSOLE_', 'TERM_PROGRAM', 'BASH_FUNC_',
|
|
)
|
|
SESSION_NAMES = {
|
|
'WAYLAND_DISPLAY', 'DESKTOP_SESSION', 'DESKTOP_STARTUP_ID', 'SESSION_MANAGER',
|
|
'INVOCATION_ID', 'JOURNAL_STREAM', 'MANAGERPID', 'MANAGERPIDFDID', 'NOTIFY_SOCKET',
|
|
'LISTEN_FDS', 'LISTEN_PID', 'LISTEN_FDNAMES', 'COLORTERM', 'VTE_VERSION', 'WINDOWID',
|
|
'WINDOWPATH', 'CHROME_DESKTOP', 'NO_AT_BRIDGE', 'MOTD_SHOWN', 'SNAP', 'APPIMAGE', 'APPDIR',
|
|
'OWD', 'VIRTUAL_ENV', 'DEBUGINFOD_URLS', 'LS_COLORS', 'COLORFGBG', 'OLDPWD', 'SHLVL',
|
|
}
|
|
GUEST_SHELL = '/bin/zsh'
|
|
|
|
|
|
def host_session_variable(name):
|
|
return name in SESSION_NAMES or name.startswith(SESSION_PREFIXES)
|
|
|
|
|
|
def filter_host_environment(environ):
|
|
"""Return the names removed from environ (a mutable mapping), honoring RCLOL_KEEP_HOST_ENV."""
|
|
keep = set(environ.get('RCLOL_KEEP_HOST_ENV', '').replace(',', ' ').split())
|
|
removed = sorted(name for name in environ if host_session_variable(name) and name not in keep)
|
|
for name in removed:
|
|
del environ[name]
|
|
# The host login shell (for example /bin/fish) does not exist in the guest.
|
|
if 'SHELL' not in keep:
|
|
environ['SHELL'] = GUEST_SHELL
|
|
return removed
|
|
|
|
|
|
def close_inherited_fds():
|
|
"""A terminal, IDE or service manager can leak descriptors; the guest must not inherit them."""
|
|
try:
|
|
names = os.listdir('/proc/self/fd')
|
|
except OSError:
|
|
os.closerange(3, 65536)
|
|
return
|
|
for name in names:
|
|
if name.isdigit() and int(name) > 2:
|
|
try:
|
|
os.close(int(name))
|
|
except OSError:
|
|
pass # the descriptor listdir used is already closed
|
|
|
|
|
|
def main(argv):
|
|
if len(argv) < 2:
|
|
sys.exit('usage: exec-guest.py COMMAND [ARGUMENT]...')
|
|
if os.environ.get('RCLOL_FILTER_HOST_ENV') == '1':
|
|
filter_host_environment(os.environ)
|
|
close_inherited_fds()
|
|
os.execvp(argv[1], argv[1:])
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main(sys.argv)
|