nx_daemon_container.nx
buildroot/runtime/nx_daemon_container.nx
about
nx_daemon_container.nx -- run the nishi pulse daemon INSIDE the sovereign
container runtime (nx_container, the Docker replacement) instead of bare
WSL. UTS+IPC+mount namespace isolation (no PID-ns: the pulse daemon
self-daemonizes, so PID-1 would tear the namespace down on the parent's
exit). rootfs="/" => no chroot, so the daemon still sees the repo +
toolchain; CWD (nxc2 root) is inherited from the launcher for its relative
paths. Needs CAP_SYS_ADMIN (run as root). Prints the container verdict.
expect_exit: 0
license_tier: ORIGINAL
(direct import "nx_syscalls.nx" REMOVED 2026-07-31, debt 1785528831: this file also
imports nx_container.nx which imports nx_syscalls_x86_64.nx, so the direct import put
TWO syscall layers in one TU -- every wrapper twice, picked by definition ORDER. The
syscalls it needs arrive via nx_container.nx, and the raw x86 numbers 165/161/272 pass
through the backend translator correctly. Verified by reading emitted asm, not exit codes.)
dependencies 1 imports · 0 importers
imports: nx_container.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| 17 | const CLONE_NEWNS: i64 = 0x00020000 |
| 18 | const CLONE_NEWUTS: i64 = 0x04000000 |
| 19 | const CLONE_NEWIPC: i64 = 0x08000000 |
functions
| 21 | func _p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } called by 1: main |
| 22 | func _pn(v: i64) -> i64 { let b: *u8=sys_mmap(28); var m: i64=v; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48 as u8;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{b[i]=t[k-1-i];i=i+1}; sys_write(1,b,k); return 0 } called by 1: main |
| 24 | func main() -> i64 |