• v0.3.2 ccc0d98bd7

    v0.3.2
    All checks were successful
    Release / Create release (push) Successful in 48s
    Test / Create distribution (push) Successful in 28s
    Test / Sandbox (push) Successful in 42s
    Test / Sandbox (race detector) (push) Successful in 41s
    Test / Hpkg (push) Successful in 44s
    Test / Hakurei (race detector) (push) Successful in 7m4s
    Test / Hakurei (push) Successful in 4m2s
    Test / Flake checks (push) Successful in 1m40s
    Stable

    cat released this 2025-12-09 08:12:52 +09:00 | 555 commits to master since this release

    Security

    This release introduces support for PipeWire SecurityContext. It is highly recommended to upgrade to this release as soon as possible.

    Legacy flatpak-like PulseAudio behaviour is now disabled by default and produces an error message. To make PulseAudio available in the container, use the hst filesystem type "daemon" and point it to pipewire-pulse within the container. An example of this can be found in the NixOS module.

    Fixes

    • Package ldd cancels ldd process on decoding error.

    Enhancements

    • Package ldd checks for absolute pathname.
    • Output of the cmd/hakurei sub-command show is reordered to improve readability.
    • Container init now supports spawning daemon processes.
    • PipeWire SecurityContext is now supported and can be enabled via the hst.EPipeWire enablement bit.
    • Container daemons are exposed via the hst filesystem types.

    Internal

    • Move multiple packages to internal. Wrappers are maintained until v0.4.0.
    • Implement PipeWire protocol native at internal/pipewire.
    • Package ldd now decodes from an io.Reader stream.
    • Package container now comes with a testable example.
    • Releases are now built using clang.
    • Error handling for libwayland-client is significantly improved.
    • Container ops are now able to access wait4 loop state.

    Full Changelog: v0.3.1...v0.3.2

    Downloads