feat(linux): add static musl x86_64 build, packaging, and Freedesktop integration

src/mount.rs

@@ -289,7 +289,7 @@ pub async fn mount_container(
     }
 
     // System-Tray Initialisierung
-    let (tray_shutdown_tx, mut tray_shutdown_rx) = tokio::sync::mpsc::channel::<()>(1);
+    let (_tray_shutdown_tx, mut tray_shutdown_rx) = tokio::sync::mpsc::channel::<()>(1);
     #[cfg(windows)]
     let _tray = if enable_tray {
         let icon_source = crate::windows::get_default_system_icon()
@@ -307,7 +307,7 @@ pub async fn mount_container(
                 let _ = tray.add_menu_item("Im Explorer öffnen", move || {
                     let _ = crate::windows::open_in_explorer(dl);
                 });
-                let s_tx = tray_shutdown_tx.clone();
+                let s_tx = _tray_shutdown_tx.clone();
                 let _ = tray.add_menu_item("Trennen & Beenden", move || {
                     let _ = s_tx.blocking_send(());
                 });
@@ -321,6 +321,8 @@ pub async fn mount_container(
     } else {
         None
     };
+    #[cfg(not(windows))]
+    let _tray: Option<()> = None;
 
     // Inaktivitäts-Timer (Auto-Lock)
     let (idle_shutdown_tx, mut idle_shutdown_rx) = tokio::sync::mpsc::channel::<()>(1);

src/windows.rs

@@ -1,5 +1,6 @@
 use std::process::Command;
 
+#[allow(unused_imports)]
 use anyhow::{bail, Context, Result};
 
 /// Ermittelt den nächsten verfügbaren Windows-Laufwerksbuchstaben (von 'Z' rückwärts bis 'D').
@@ -130,102 +131,137 @@ pub fn notify_shell_associations_changed() {
     }
 }
 
-/// Registriert `.sanctum`-Containerdateien im Windows Explorer für den aktuellen Benutzer (HKCU, 100% Userland, keine Adminrechte).
+/// Registriert `.sanctum`-Containerdateien im Windows Explorer für den aktuellen Benutzer bzw. unter Linux via Freedesktop.
 pub fn register_explorer_integration() -> Result<()> {
-    let current_exe = std::env::current_exe()
-        .context("Konnte den Pfad zur aktuellen sanctum.exe nicht ermitteln")?;
-    let exe_str = current_exe.display().to_string();
+    #[cfg(windows)]
+    {
+        let current_exe = std::env::current_exe()
+            .context("Konnte den Pfad zur aktuellen sanctum.exe nicht ermitteln")?;
+        let exe_str = current_exe.display().to_string();
 
-    let reg_commands = [
-        // 1. .sanctum Erweiterung mit ProgID verknüpfen
-        (
-            r"HKCU\Software\Classes\.sanctum",
-            "",
-            "Sanctum.Container",
-        ),
-        // 2. ProgID Metadaten & Beschreibung
-        (
-            r"HKCU\Software\Classes\Sanctum.Container",
-            "",
-            "Sanctum Verschlüsselter Container",
-        ),
-        // 3. Icon
-        (
-            r"HKCU\Software\Classes\Sanctum.Container\DefaultIcon",
-            "",
-            &format!("\"{exe_str}\",0"),
-        ),
-        // 4. Standard-Doppelklick-Aktion: Mount
-        (
-            r"HKCU\Software\Classes\Sanctum.Container\shell\open",
-            "",
-            "Als Laufwerk einbinden",
-        ),
-        (
-            r"HKCU\Software\Classes\Sanctum.Container\shell\open\command",
-            "",
-            &format!("\"{exe_str}\" mount --path \"%1\""),
-        ),
-        // 5. Kontextmenü-Aktion: Integritätsprüfung
-        (
-            r"HKCU\Software\Classes\Sanctum.Container\shell\verify",
-            "",
-            "Integrität prüfen (FSCK)",
-        ),
-        (
-            r"HKCU\Software\Classes\Sanctum.Container\shell\verify\command",
-            "",
-            &format!("\"{exe_str}\" verify --path \"%1\""),
-        ),
-        // 6. Kontextmenü-Aktion: Header sichern
-        (
-            r"HKCU\Software\Classes\Sanctum.Container\shell\backup_header",
-            "",
-            "Header sichern",
-        ),
-        (
-            r"HKCU\Software\Classes\Sanctum.Container\shell\backup_header\command",
-            "",
-            &format!("\"{exe_str}\" backup-header --path \"%1\""),
-        ),
-    ];
+        let reg_commands = [
+            // 1. .sanctum Erweiterung mit ProgID verknüpfen
+            (
+                r"HKCU\Software\Classes\.sanctum",
+                "",
+                "Sanctum.Container",
+            ),
+            // 2. ProgID Metadaten & Beschreibung
+            (
+                r"HKCU\Software\Classes\Sanctum.Container",
+                "",
+                "Sanctum Verschlüsselter Container",
+            ),
+            // 3. Icon
+            (
+                r"HKCU\Software\Classes\Sanctum.Container\DefaultIcon",
+                "",
+                &format!("\"{exe_str}\",0"),
+            ),
+            // 4. Standard-Doppelklick-Aktion: Mount
+            (
+                r"HKCU\Software\Classes\Sanctum.Container\shell\open",
+                "",
+                "In Sanctum öffnen",
+            ),
+            (
+                r"HKCU\Software\Classes\Sanctum.Container\shell\open\command",
+                "",
+                &format!("\"{exe_str}\" mount \"%1\""),
+            ),
+            // 5. Kontextmenü-Aktion: Verify / FSCK
+            (
+                r"HKCU\Software\Classes\Sanctum.Container\shell\verify",
+                "",
+                "Integrität prüfen (FSCK)",
+            ),
+            (
+                r"HKCU\Software\Classes\Sanctum.Container\shell\verify\command",
+                "",
+                &format!("cmd /k \"\"{exe_str}\" verify \"%1\"\""),
+            ),
+            // 6. Kontextmenü-Aktion: Header-Backup
+            (
+                r"HKCU\Software\Classes\Sanctum.Container\shell\backup",
+                "",
+                "Header sichern (Disaster Recovery)",
+            ),
+            (
+                r"HKCU\Software\Classes\Sanctum.Container\shell\backup\command",
+                "",
+                &format!("cmd /k \"\"{exe_str}\" backup-header \"%1\"\""),
+            ),
+        ];
 
-    for (key, val_name, val_data) in reg_commands {
-        let mut cmd = Command::new("reg");
-        cmd.arg("add").arg(key);
-        if val_name.is_empty() {
-            cmd.arg("/ve");
-        } else {
-            cmd.arg("/v").arg(val_name);
+        for (key, val_name, val_data) in reg_commands {
+            let mut cmd = Command::new("reg");
+            cmd.arg("add").arg(key);
+            if val_name.is_empty() {
+                cmd.arg("/ve");
+            } else {
+                cmd.arg("/v").arg(val_name);
+            }
+            cmd.arg("/d").arg(val_data).arg("/f");
+
+            let output = cmd.output().with_context(|| format!("Fehler beim Ausführen von 'reg add {key}'"))?;
+            if !output.status.success() {
+                let stderr = String::from_utf8_lossy(&output.stderr);
+                bail!("Registry-Fehler beim Anlegen von {key}: {stderr}");
+            }
         }
-        cmd.arg("/d").arg(val_data).arg("/f");
 
-        let output = cmd.output().with_context(|| format!("Fehler beim Ausführen von 'reg add {key}'"))?;
-        if !output.status.success() {
-            let stderr = String::from_utf8_lossy(&output.stderr);
-            bail!("Registry-Fehler beim Anlegen von {key}: {stderr}");
-        }
+        notify_shell_associations_changed();
+        Ok(())
     }
+    #[cfg(not(windows))]
+    {
+        if let Some(home) = std::env::var_os("HOME") {
+            let home_path = std::path::PathBuf::from(home);
+            let apps_dir = home_path.join(".local/share/applications");
+            let mime_dir = home_path.join(".local/share/mime/packages");
+            let _ = std::fs::create_dir_all(&apps_dir);
+            let _ = std::fs::create_dir_all(&mime_dir);
 
-    notify_shell_associations_changed();
-    Ok(())
+            let desktop_content = "[Desktop Entry]\nType=Application\nName=Sanctum\nComment=Verschlüsselter Ein-Datei-Container\nExec=sanctum mount %f\nIcon=security-high\nTerminal=true\nMimeType=application/x-sanctum;\nCategories=Utility;Security;\n";
+            let _ = std::fs::write(apps_dir.join("sanctum.desktop"), desktop_content);
+
+            let mime_content = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<mime-info xmlns=\"http://www.freedesktop.org/standards/shared-mime-info\">\n  <mime-type type=\"application/x-sanctum\">\n    <comment>Sanctum Verschlüsselter Container</comment>\n    <glob pattern=\"*.sanctum\"/>\n  </mime-type>\n</mime-info>\n";
+            let _ = std::fs::write(mime_dir.join("application-x-sanctum.xml"), mime_content);
+
+            notify_shell_associations_changed();
+        }
+        Ok(())
+    }
 }
 
-/// Entfernt die Windows-Explorer-Verknüpfungen aus der Benutzer-Registry (HKCU).
+/// Entfernt die Windows-Explorer-Verknüpfungen aus der Benutzer-Registry (HKCU) bzw. unter Linux aus Freedesktop.
 pub fn unregister_explorer_integration() -> Result<()> {
-    let keys_to_delete = [
-        r"HKCU\Software\Classes\.sanctum",
-        r"HKCU\Software\Classes\Sanctum.Container",
-    ];
+    #[cfg(windows)]
+    {
+        let keys_to_delete = [
+            r"HKCU\Software\Classes\.sanctum",
+            r"HKCU\Software\Classes\Sanctum.Container",
+        ];
 
-    for key in keys_to_delete {
-        let _ = Command::new("reg")
-            .args(["delete", key, "/f"])
-            .output();
+        for key in keys_to_delete {
+            let _ = Command::new("reg")
+                .args(["delete", key, "/f"])
+                .output();
+        }
+
+        notify_shell_associations_changed();
+        Ok(())
+    }
+    #[cfg(not(windows))]
+    {
+        if let Some(home) = std::env::var_os("HOME") {
+            let home_path = std::path::PathBuf::from(home);
+            let _ = std::fs::remove_file(home_path.join(".local/share/applications/sanctum.desktop"));
+            let _ = std::fs::remove_file(home_path.join(".local/share/mime/packages/application-x-sanctum.xml"));
+            notify_shell_associations_changed();
+        }
+        Ok(())
     }
-
-    notify_shell_associations_changed();
-    Ok(())
 }
 
 /// Lädt das Windows-Sicherheitsschild-Icon (IDI_SHIELD) oder Anwendungs-Icon für den System-Tray.
@@ -259,10 +295,9 @@ pub fn get_default_system_icon() -> Option<tray_item::IconSource> {
 
 /// Guard zur Verwaltung des Hintergrundthreads für die Windows-Sitzungssperre.
 /// Beim Droppen wird das Win32-Nachrichtenfenster geschlossen und der Thread sauber beendet.
+#[cfg(windows)]
 pub struct SessionLockGuard {
-    #[cfg(windows)]
     hwnd: isize,
-    #[cfg(windows)]
     join_handle: Option<std::thread::JoinHandle<()>>,
 }