• v0.3.2 ccc0d98bd7

    v0.3.2
    Release / Create release (push) Successful in 50s
    Test / Create distribution (push) Successful in 44s
    Test / Sandbox (push) Successful in 2m34s
    Test / Hakurei (push) Successful in 3m37s
    Test / Sandbox (race detector) (push) Successful in 4m37s
    Test / Hpkg (push) Successful in 5m10s
    Test / Hakurei (race detector) (push) Successful in 5m33s
    Test / Flake checks (push) Successful in 2m9s
    Stable

    cat released this 2025-12-09 08:12:52 +09:00 | 1049 commits to master since this release

    Security

    This release introduces support for PipeWire SecurityContext. It is highly recommended to upgrade to this release as soon as possible.

    Legacy flatpak-like PulseAudio behaviour is now disabled by default and produces an error message. To make PulseAudio available in the container, use the hst filesystem type "daemon" and point it to pipewire-pulse within the container. An example of this can be found in the NixOS module.

    Fixes

    • Package ldd cancels ldd process on decoding error.

    Enhancements

    • Package ldd checks for absolute pathname.
    • Output of the cmd/hakurei sub-command show is reordered to improve readability.
    • Container init now supports spawning daemon processes.
    • PipeWire SecurityContext is now supported and can be enabled via the hst.EPipeWire enablement bit.
    • Container daemons are exposed via the hst filesystem types.

    Internal

    • Move multiple packages to internal. Wrappers are maintained until v0.4.0.
    • Implement PipeWire protocol native at internal/pipewire.
    • Package ldd now decodes from an io.Reader stream.
    • Package container now comes with a testable example.
    • Releases are now built using clang.
    • Error handling for libwayland-client is significantly improved.
    • Container ops are now able to access wait4 loop state.

    Full Changelog: v0.3.1...v0.3.2

    Downloads