-
v0.4.5
StableRelease / Create release (push) Successful in 1m0sTest / Flake checks (push) Successful in 1m11sTest / Create distribution (push) Successful in 30sTest / ShareFS (push) Successful in 36sTest / Hakurei (push) Successful in 43sTest / Sandbox (race detector) (push) Successful in 43sTest / Sandbox (push) Successful in 43sTest / Hakurei (race detector) (push) Successful in 48sreleased this
2026-06-24 06:20:55 +09:00 | 0 commits to master since this releaseFixes
- Fix ephemeral overlay order in
hst. - Build
cmd/hsuseparately incmd/dist. - Attempt
nscdpath-hiding if present ininternal/outcome.
Enhancements
- Optionally disable file placement in
hst. - Exempt pipeline intermediates from cures counter in
internal/pkg. - Read overridden version string from source in
internal/rosa.
Internal
- Common configuration file in
cmd/app. - Multiple template uppers in
cmd/app. - Include template name in container metadata in
cmd/app. - Optionally override configured command in
cmd/app. - Pass through user-supplied arguments in
cmd/app. - Expose additional configuration in
cmd/app. - Remove hardcoded sysfs bind mounts in
cmd/app. - Optional interactive shell in
cmd/app. - Enforce mutable instance exclusion in
cmd/app.
Full Changelog: v0.4.4...v0.4.5
Downloads
- Fix ephemeral overlay order in
-
v0.4.4
StableRelease / Create release (push) Successful in 37sTest / Flake checks (push) Successful in 1m17sTest / Create distribution (push) Successful in 1m3sTest / Sandbox (push) Successful in 2m49sTest / ShareFS (push) Successful in 3m53sTest / Hakurei (push) Successful in 4m6sTest / Sandbox (race detector) (push) Successful in 5m38sTest / Hakurei (race detector) (push) Successful in 6m44sreleased this
2026-06-17 21:07:41 +09:00 | 42 commits to master since this releaseFixes
- Load runtime dependencies for alternative go toolchain bootstrap path.
- Correctly scrub substitute status in
internal/pkg. - Populate opts of cloned S in
internal/rosa. - Check for unclean shutdown in
internal/pkg. - Remove external toolchain reference in
internal/rosa. - Register binfmt entry for shell in
cmd/mbf.
Enhancements
- Streaming archive reader/writer in
internal/pkg. - Stream decompress artifact in
internal/pkg. - Remove tar built-in decompressor in
internal/pkg. - Do not hold up cures during status link in
internal/pkg. - Optionally replace outcomes from external cache in
internal/pkg. - Mirror service via external cache in
internal/rosa. - Optionally load from custom azalea path in
cmd/mbf. - Move emulated targets to
internal/rosa. - Remove parent check in
cmd/hsu. - Support ephemeral overlay mounts in
hst. - Optionally cover /run/ early in
hst.
Internal
- IR-curable source override in
internal/rosa. - Report errors exiting cure in
internal/pkg. - Destroy new substitution status on fault in
internal/pkg. - Migrate distribution artifacts to azalea.
- Resolve runtimes for overlay extras in
internal/rosa. - Kobject uevent processing loop in
internal/kobject. - Basic error reporting in
internal/report. - Use DESTDIR instead of --prefix for cmake installation in
internal/rosa. - Load device drivers in
cmd/earlyinit. - Annotate blocked updates in
internal/rosa. - Garbage collection in
internal/pkg. - Export etc native artifact in
internal/rosa. - Experimental application container tooling
cmd/app.
Full Changelog: v0.4.3...v0.4.4
Downloads
-
v0.4.3
StableTest / Create distribution (push) Successful in 41sTest / ShareFS (push) Successful in 49sTest / Sandbox (race detector) (push) Successful in 54sTest / Sandbox (push) Successful in 56sTest / Hakurei (push) Successful in 58sTest / Hakurei (race detector) (push) Successful in 1m2sRelease / Create release (push) Successful in 1m13sTest / Flake checks (push) Successful in 1m23sreleased this
2026-05-22 02:21:56 +09:00 | 172 commits to master since this releaseFixes
- Bring back pkgserver favicon in
cmd/mbf.
Enhancements
- Include version string in release for
cmd/dist.
Internal
- Initial implementation of Azalea in
internal/rosa/azalea. - Packages are ported to Azalea in
internal/rosa/package.
Full Changelog: v0.4.2...v0.4.3
Downloads
- Bring back pkgserver favicon in
-
v0.4.2
StableTest / Create distribution (push) Successful in 38sTest / ShareFS (push) Successful in 42sTest / Sandbox (push) Successful in 48sTest / Sandbox (race detector) (push) Successful in 49sTest / Hakurei (push) Successful in 53sTest / Hakurei (race detector) (push) Successful in 54sRelease / Create release (push) Successful in 1m10sTest / Flake checks (push) Successful in 1m21sreleased this
2026-05-10 16:17:48 +09:00 | 314 commits to master since this releaseFixes
- Abandon response on termination during testing of package
container.
Enhancements
- Optionally suppress init verbosity in package
container. - Replace capability checks during NixOS VM tests with native tests of
packagecontainer. - Optionally map uid/gid 0 as init in package
container. - Arrange for
binfmt_miscregistration in packagecontainer.
Full Changelog: v0.4.1...v0.4.2
Downloads
- Abandon response on termination during testing of package
-
v0.4.1
StableTest / Create distribution (push) Successful in 38sTest / ShareFS (push) Successful in 43sTest / Sandbox (push) Successful in 48sTest / Sandbox (race detector) (push) Successful in 48sTest / Hakurei (race detector) (push) Successful in 55sRelease / Create release (push) Successful in 1m8sTest / Hakurei (push) Successful in 2m14sTest / Flake checks (push) Successful in 1m25sreleased this
2026-05-04 05:05:38 +09:00 | 361 commits to master since this releaseFixes
- Strings larger than a page is rejected by package
container.
Enhancements
- Overlay mounts are now configured via fsconfig(2) in package
container.
Internal
- Checksum helper command in
cmd/mbf. - Pass preferred job count via
internal/pkg. - Optionally open cache in
cmd/mbf. - Artifact IR daemon in
cmd/mbf. - Ongoing cures now supports fine-grained cancellation in
internal/pkg. - LLVM toolchain is now built in a single artifact.
- Binary stage0 distribution is shrunk to less than half its former size.
- The stage0 toolchain is now functionally equivalent to all future stages and is able to cure artifacts without special cases.
- Package status dashboard upstreamed in
cmd/mbf.
Full Changelog: v0.4.0...v0.4.1
Downloads
- Strings larger than a page is rejected by package
-
v0.4.0
StableTest / Create distribution (push) Successful in 37sRelease / Create release (push) Successful in 45sTest / ShareFS (push) Successful in 43sTest / Sandbox (push) Successful in 48sTest / Hakurei (push) Successful in 52sTest / Sandbox (race detector) (push) Successful in 48sTest / Hakurei (race detector) (push) Successful in 55sTest / Flake checks (push) Successful in 1m28sreleased this
2026-04-11 10:49:43 +09:00 | 534 commits to master since this releaseMigration
The
cmd/hakureicommandapp, for starting containers from a configuration file, has been renamed torun. Additionally,dist/release.shhas been renamed toall.sh, however usage remains identical.API Changes
- Remove compatibility wrappers for all deprecated APIs.
- Package
extrenamed fromcontainer/std. - Rename
ScmpSyscalltoSyscallNum. - Package
vfsrenamed fromcontainer/vfs. - Package
checkrenamed fromcontainer/check. - Move syscall wrappers to package
ext. - Package
fhsrenamed fromcontainer/fhs. - Move package
container/stubinternal. - Command
runrenamed toexec, andapptorunincmd/hakurei. - Remove setup helpers from package
container. - Optionally reject insecure options in package
hst. - Remove explicit enablements JSON adapter in package
hst. - Unexport
PR_SET_NO_NEW_PRIVSwrapper in packagecontainer. - Move landlock internal from package
container.
Fixes
- Correctly describe
--with-toolchainincmd/mbf. - Use
filepathin portable packages. - Ignore finished process in container init.
- Optionally skip landlock on hostnet in package
container. - Group-accessible permission bits in
cmd/sharefsto work around vfs inode file attribute race.
Enhancements
- C integer limit values in package
ext. - Optionally set
FD_CLOEXECviaclose_range(build tag:close_range). - Optionally suppress via assumed checksum in package
internal/pkg. - Release script
dist/release.shreplaced bycmd/dist. - Prefix configurable from environment via
cmd/dist. - Conditionally skip root remount in package
hst. - Add riscv64 stage0 tarball for Rosa OS.
- Optionally transparently degrade in test suite.
Internal
- Generic netlink implementation in package
internal/netlink. - Kobject uevent (with coldboot) implementation in package
internal/uevent. - Export container params of
KindExecandKindExecNetin packageinternal/pkg. - Move collection helper-artifact to package
internal/pkg. - Retain session by default in
cmd/mbf. - Alternative hsurc path for Rosa OS.
- Cache now accepts flags in package
internal/pkg.
Full Changelog: v0.3.7...v0.4.0
Downloads
-
v0.3.7
StableRelease / Create release (push) Successful in 53sTest / Create distribution (push) Successful in 44sTest / ShareFS (push) Successful in 50sTest / Sandbox (push) Successful in 56sTest / Hakurei (push) Successful in 1m2sTest / Sandbox (race detector) (push) Successful in 58sTest / Hakurei (race detector) (push) Successful in 1m2sTest / Flake checks (push) Successful in 1m30sreleased this
2026-03-15 21:04:55 +09:00 | 690 commits to master since this releaseFixes
- Update URLs for rename of organisation
securitytorosa.
Enhancements
- Text representation for scheduling policy constants.
- Export scheduling constants in
std. - Expose scheduling policy and priority in
hst.
Internal
- Represent runtime dependencies in
internal/rosa.
Full Changelog: v0.3.6...v0.3.7
Downloads
- Update URLs for rename of organisation
-
v0.3.6
StableRelease / Create release (push) Successful in 1m19sTest / Create distribution (push) Successful in 1m6sTest / Sandbox (push) Successful in 2m58sTest / Hakurei (push) Successful in 4m31sTest / ShareFS (push) Successful in 4m24sTest / Sandbox (race detector) (push) Successful in 5m24sTest / Hakurei (race detector) (push) Successful in 6m30sTest / Flake checks (push) Successful in 1m26sreleased this
2026-03-07 16:32:04 +09:00 | 745 commits to master since this releaseFixes
- Allow devel syscalls in
internal/pkg. - Keep objects alive while stopping cleanups in
internal/lockedfile. - Cancel on scanner error in
internal/pkg. - Stricter checking in
internal/pkgerror filtering.
Enhancements
- Set scheduling policy in
container. - Treat nil pathname as self in
ldd. - Use
/proc/self/exedirectly incontainer. - Deprecate unused APIs and remove
cmd/hpkg.
Internal
- Validate tar pathnames in
internal/pkg. - Read buffer free list in
internal/pkg. - Buffer tar reader in
internal/pkg. - Significantly improve error resolution performance in
internal/pkg. - Expose extra information for
FileArtifactpipelines. - Mount
tmpfson/tmpin integration test to prevent spurious failures. - Match
ospackage behaviour incontainerpackage error injection tests. - Export layer promotion in
internal/pkg. - Raise string limit to 16 MiB in
internal/pkg. - Supported artifacts in
internal/pkgnow saves logs.
Full Changelog: v0.3.5...v0.3.6
Downloads
- Allow devel syscalls in
-
v0.3.5
StableRelease / Create release (push) Successful in 1m14sTest / Create distribution (push) Successful in 1m10sTest / Sandbox (push) Successful in 2m7sTest / ShareFS (push) Successful in 3m18sTest / Hakurei (push) Successful in 3m25sTest / Hpkg (push) Successful in 4m8sTest / Sandbox (race detector) (push) Successful in 5m23sTest / Hakurei (race detector) (push) Successful in 6m25sTest / Flake checks (push) Successful in 1m35sreleased this
2026-02-09 00:11:20 +09:00 | 918 commits to master since this releaseFixes
- Filter host-dependent mount options in test cases.
Enhancements
- Include target in dist filename.
- Add riscv64 constants.
Internal
- Allow multiarch in
execArtifact. - Set project-specific User-Agent in
httpArtifact. - Artifact IR is now standardised for
internal/pkg.
Full Changelog: v0.3.4...v0.3.5
Downloads
-
v0.3.4
StableRelease / Create release (push) Successful in 1m3sTest / Create distribution (push) Successful in 1m0sTest / Sandbox (push) Successful in 2m10sTest / Hakurei (push) Successful in 3m24sTest / ShareFS (push) Successful in 3m20sTest / Hpkg (push) Successful in 4m0sTest / Sandbox (race detector) (push) Successful in 5m13sTest / Hakurei (race detector) (push) Successful in 6m8sTest / Flake checks (push) Successful in 1m31sreleased this
2026-01-27 03:56:06 +09:00 | 1005 commits to master since this releaseFixes
- Treat
internal/pipewirenetwork errors as fatal.
Enhancements
- No longer poll possibly blocking calls in
internal/pipewire. - Shared permissionless filesystem via
cmd/sharefs. - Intern checked absolute pathnames.
Internal
- Handle socket fd directly in
internal/pipewire. - Hakurei is now fully self-hosted via
internal/rosa.
Full Changelog: v0.3.3...v0.3.4
Downloads
- Treat