• v0.4.5 3a5f4af114

    v0.4.5
    Release / Create release (push) Successful in 1m0s
    Test / Flake checks (push) Successful in 1m11s
    Test / Create distribution (push) Successful in 30s
    Test / ShareFS (push) Successful in 36s
    Test / Hakurei (push) Successful in 43s
    Test / Sandbox (race detector) (push) Successful in 43s
    Test / Sandbox (push) Successful in 43s
    Test / Hakurei (race detector) (push) Successful in 48s
    Stable

    cat released this 2026-06-24 06:20:55 +09:00 | 0 commits to master since this release

    Fixes

    • Fix ephemeral overlay order in hst.
    • Build cmd/hsu separately in cmd/dist.
    • Attempt nscd path-hiding if present in internal/outcome.

    Enhancements

    • Optionally disable file placement in hst.
    • Exempt pipeline intermediates from cures counter in internal/pkg.
    • Read overridden version string from source in internal/rosa.

    Internal

    • Common configuration file in cmd/app.
    • Multiple template uppers in cmd/app.
    • Include template name in container metadata in cmd/app.
    • Optionally override configured command in cmd/app.
    • Pass through user-supplied arguments in cmd/app.
    • Expose additional configuration in cmd/app.
    • Remove hardcoded sysfs bind mounts in cmd/app.
    • Optional interactive shell in cmd/app.
    • Enforce mutable instance exclusion in cmd/app.

    Full Changelog: v0.4.4...v0.4.5

    Downloads
  • v0.4.4 79342e3053

    v0.4.4
    Release / Create release (push) Successful in 37s
    Test / Flake checks (push) Successful in 1m17s
    Test / Create distribution (push) Successful in 1m3s
    Test / Sandbox (push) Successful in 2m49s
    Test / ShareFS (push) Successful in 3m53s
    Test / Hakurei (push) Successful in 4m6s
    Test / Sandbox (race detector) (push) Successful in 5m38s
    Test / Hakurei (race detector) (push) Successful in 6m44s
    Stable

    cat released this 2026-06-17 21:07:41 +09:00 | 42 commits to master since this release

    Fixes

    • Load runtime dependencies for alternative go toolchain bootstrap path.
    • Correctly scrub substitute status in internal/pkg.
    • Populate opts of cloned S in internal/rosa.
    • Check for unclean shutdown in internal/pkg.
    • Remove external toolchain reference in internal/rosa.
    • Register binfmt entry for shell in cmd/mbf.

    Enhancements

    • Streaming archive reader/writer in internal/pkg.
    • Stream decompress artifact in internal/pkg.
    • Remove tar built-in decompressor in internal/pkg.
    • Do not hold up cures during status link in internal/pkg.
    • Optionally replace outcomes from external cache in internal/pkg.
    • Mirror service via external cache in internal/rosa.
    • Optionally load from custom azalea path in cmd/mbf.
    • Move emulated targets to internal/rosa.
    • Remove parent check in cmd/hsu.
    • Support ephemeral overlay mounts in hst.
    • Optionally cover /run/ early in hst.

    Internal

    • IR-curable source override in internal/rosa.
    • Report errors exiting cure in internal/pkg.
    • Destroy new substitution status on fault in internal/pkg.
    • Migrate distribution artifacts to azalea.
    • Resolve runtimes for overlay extras in internal/rosa.
    • Kobject uevent processing loop in internal/kobject.
    • Basic error reporting in internal/report.
    • Use DESTDIR instead of --prefix for cmake installation in internal/rosa.
    • Load device drivers in cmd/earlyinit.
    • Annotate blocked updates in internal/rosa.
    • Garbage collection in internal/pkg.
    • Export etc native artifact in internal/rosa.
    • Experimental application container tooling cmd/app.

    Full Changelog: v0.4.3...v0.4.4

    Downloads
  • v0.4.3 e231341e48

    v0.4.3
    Test / Create distribution (push) Successful in 41s
    Test / ShareFS (push) Successful in 49s
    Test / Sandbox (race detector) (push) Successful in 54s
    Test / Sandbox (push) Successful in 56s
    Test / Hakurei (push) Successful in 58s
    Test / Hakurei (race detector) (push) Successful in 1m2s
    Release / Create release (push) Successful in 1m13s
    Test / Flake checks (push) Successful in 1m23s
    Stable

    cat released this 2026-05-22 02:21:56 +09:00 | 172 commits to master since this release

    Fixes

    • Bring back pkgserver favicon in cmd/mbf.

    Enhancements

    • Include version string in release for cmd/dist.

    Internal

    • Initial implementation of Azalea in internal/rosa/azalea.
    • Packages are ported to Azalea in internal/rosa/package.

    Full Changelog: v0.4.2...v0.4.3

    Downloads
  • v0.4.2 0cf0e18e35

    v0.4.2
    Test / Create distribution (push) Successful in 38s
    Test / ShareFS (push) Successful in 42s
    Test / Sandbox (push) Successful in 48s
    Test / Sandbox (race detector) (push) Successful in 49s
    Test / Hakurei (push) Successful in 53s
    Test / Hakurei (race detector) (push) Successful in 54s
    Release / Create release (push) Successful in 1m10s
    Test / Flake checks (push) Successful in 1m21s
    Stable

    cat released this 2026-05-10 16:17:48 +09:00 | 314 commits to master since this release

    Fixes

    • Abandon response on termination during testing of package container.

    Enhancements

    • Optionally suppress init verbosity in package container.
    • Replace capability checks during NixOS VM tests with native tests of
      package container.
    • Optionally map uid/gid 0 as init in package container.
    • Arrange for binfmt_misc registration in package container.

    Full Changelog: v0.4.1...v0.4.2

    Downloads
  • v0.4.1 337bf20f50

    v0.4.1
    Test / Create distribution (push) Successful in 38s
    Test / ShareFS (push) Successful in 43s
    Test / Sandbox (push) Successful in 48s
    Test / Sandbox (race detector) (push) Successful in 48s
    Test / Hakurei (race detector) (push) Successful in 55s
    Release / Create release (push) Successful in 1m8s
    Test / Hakurei (push) Successful in 2m14s
    Test / Flake checks (push) Successful in 1m25s
    Stable

    cat released this 2026-05-04 05:05:38 +09:00 | 361 commits to master since this release

    Fixes

    • Strings larger than a page is rejected by package container.

    Enhancements

    • Overlay mounts are now configured via fsconfig(2) in package container.

    Internal

    • Checksum helper command in cmd/mbf.
    • Pass preferred job count via internal/pkg.
    • Optionally open cache in cmd/mbf.
    • Artifact IR daemon in cmd/mbf.
    • Ongoing cures now supports fine-grained cancellation in internal/pkg.
    • LLVM toolchain is now built in a single artifact.
    • Binary stage0 distribution is shrunk to less than half its former size.
    • The stage0 toolchain is now functionally equivalent to all future stages and is able to cure artifacts without special cases.
    • Package status dashboard upstreamed in cmd/mbf.

    Full Changelog: v0.4.0...v0.4.1

    Downloads
  • v0.4.0 0b1009786f

    v0.4.0
    Test / Create distribution (push) Successful in 37s
    Release / Create release (push) Successful in 45s
    Test / ShareFS (push) Successful in 43s
    Test / Sandbox (push) Successful in 48s
    Test / Hakurei (push) Successful in 52s
    Test / Sandbox (race detector) (push) Successful in 48s
    Test / Hakurei (race detector) (push) Successful in 55s
    Test / Flake checks (push) Successful in 1m28s
    Stable

    cat released this 2026-04-11 10:49:43 +09:00 | 534 commits to master since this release

    Migration

    The cmd/hakurei command app, for starting containers from a configuration file, has been renamed to run. Additionally, dist/release.sh has been renamed to all.sh, however usage remains identical.

    API Changes

    • Remove compatibility wrappers for all deprecated APIs.
    • Package ext renamed from container/std.
    • Rename ScmpSyscall to SyscallNum.
    • Package vfs renamed from container/vfs.
    • Package check renamed from container/check.
    • Move syscall wrappers to package ext.
    • Package fhs renamed from container/fhs.
    • Move package container/stub internal.
    • Command run renamed to exec, and app to run in cmd/hakurei.
    • Remove setup helpers from package container.
    • Optionally reject insecure options in package hst.
    • Remove explicit enablements JSON adapter in package hst.
    • Unexport PR_SET_NO_NEW_PRIVS wrapper in package container.
    • Move landlock internal from package container.

    Fixes

    • Correctly describe --with-toolchain in cmd/mbf.
    • Use filepath in portable packages.
    • Ignore finished process in container init.
    • Optionally skip landlock on hostnet in package container.
    • Group-accessible permission bits in cmd/sharefs to work around vfs inode file attribute race.

    Enhancements

    • C integer limit values in package ext.
    • Optionally set FD_CLOEXEC via close_range (build tag: close_range).
    • Optionally suppress via assumed checksum in package internal/pkg.
    • Release script dist/release.sh replaced by cmd/dist.
    • Prefix configurable from environment via cmd/dist.
    • Conditionally skip root remount in package hst.
    • Add riscv64 stage0 tarball for Rosa OS.
    • Optionally transparently degrade in test suite.

    Internal

    • Generic netlink implementation in package internal/netlink.
    • Kobject uevent (with coldboot) implementation in package internal/uevent.
    • Export container params of KindExec and KindExecNet in package internal/pkg.
    • Move collection helper-artifact to package internal/pkg.
    • Retain session by default in cmd/mbf.
    • Alternative hsurc path for Rosa OS.
    • Cache now accepts flags in package internal/pkg.

    Full Changelog: v0.3.7...v0.4.0

    Downloads
  • v0.3.7 b208af8b85

    v0.3.7
    Release / Create release (push) Successful in 53s
    Test / Create distribution (push) Successful in 44s
    Test / ShareFS (push) Successful in 50s
    Test / Sandbox (push) Successful in 56s
    Test / Hakurei (push) Successful in 1m2s
    Test / Sandbox (race detector) (push) Successful in 58s
    Test / Hakurei (race detector) (push) Successful in 1m2s
    Test / Flake checks (push) Successful in 1m30s
    Stable

    cat released this 2026-03-15 21:04:55 +09:00 | 690 commits to master since this release

    Fixes

    • Update URLs for rename of organisation security to rosa.

    Enhancements

    • Text representation for scheduling policy constants.
    • Export scheduling constants in std.
    • Expose scheduling policy and priority in hst.

    Internal

    • Represent runtime dependencies in internal/rosa.

    Full Changelog: v0.3.6...v0.3.7

    Downloads
  • v0.3.6 bae45363bc

    v0.3.6
    Release / Create release (push) Successful in 1m19s
    Test / Create distribution (push) Successful in 1m6s
    Test / Sandbox (push) Successful in 2m58s
    Test / Hakurei (push) Successful in 4m31s
    Test / ShareFS (push) Successful in 4m24s
    Test / Sandbox (race detector) (push) Successful in 5m24s
    Test / Hakurei (race detector) (push) Successful in 6m30s
    Test / Flake checks (push) Successful in 1m26s
    Stable

    cat released this 2026-03-07 16:32:04 +09:00 | 745 commits to master since this release

    Fixes

    • Allow devel syscalls in internal/pkg.
    • Keep objects alive while stopping cleanups in internal/lockedfile.
    • Cancel on scanner error in internal/pkg.
    • Stricter checking in internal/pkg error filtering.

    Enhancements

    • Set scheduling policy in container.
    • Treat nil pathname as self in ldd.
    • Use /proc/self/exe directly in container.
    • Deprecate unused APIs and remove cmd/hpkg.

    Internal

    • Validate tar pathnames in internal/pkg.
    • Read buffer free list in internal/pkg.
    • Buffer tar reader in internal/pkg.
    • Significantly improve error resolution performance in internal/pkg.
    • Expose extra information for FileArtifact pipelines.
    • Mount tmpfs on /tmp in integration test to prevent spurious failures.
    • Match os package behaviour in container package error injection tests.
    • Export layer promotion in internal/pkg.
    • Raise string limit to 16 MiB in internal/pkg.
    • Supported artifacts in internal/pkg now saves logs.

    Full Changelog: v0.3.5...v0.3.6

    Downloads
  • v0.3.5 9fb0b2452e

    v0.3.5
    Release / Create release (push) Successful in 1m14s
    Test / Create distribution (push) Successful in 1m10s
    Test / Sandbox (push) Successful in 2m7s
    Test / ShareFS (push) Successful in 3m18s
    Test / Hakurei (push) Successful in 3m25s
    Test / Hpkg (push) Successful in 4m8s
    Test / Sandbox (race detector) (push) Successful in 5m23s
    Test / Hakurei (race detector) (push) Successful in 6m25s
    Test / Flake checks (push) Successful in 1m35s
    Stable

    cat released this 2026-02-09 00:11:20 +09:00 | 918 commits to master since this release

    Fixes

    • Filter host-dependent mount options in test cases.

    Enhancements

    • Include target in dist filename.
    • Add riscv64 constants.

    Internal

    • Allow multiarch in execArtifact.
    • Set project-specific User-Agent in httpArtifact.
    • Artifact IR is now standardised for internal/pkg.

    Full Changelog: v0.3.4...v0.3.5

    Downloads
  • v0.3.4 d61faa09eb

    v0.3.4
    Release / Create release (push) Successful in 1m3s
    Test / Create distribution (push) Successful in 1m0s
    Test / Sandbox (push) Successful in 2m10s
    Test / Hakurei (push) Successful in 3m24s
    Test / ShareFS (push) Successful in 3m20s
    Test / Hpkg (push) Successful in 4m0s
    Test / Sandbox (race detector) (push) Successful in 5m13s
    Test / Hakurei (race detector) (push) Successful in 6m8s
    Test / Flake checks (push) Successful in 1m31s
    Stable

    cat released this 2026-01-27 03:56:06 +09:00 | 1005 commits to master since this release

    Fixes

    • Treat internal/pipewire network errors as fatal.

    Enhancements

    • No longer poll possibly blocking calls in internal/pipewire.
    • Shared permissionless filesystem via cmd/sharefs.
    • Intern checked absolute pathnames.

    Internal

    • Handle socket fd directly in internal/pipewire.
    • Hakurei is now fully self-hosted via internal/rosa.

    Full Changelog: v0.3.3...v0.3.4

    Downloads