• v0.2.0 07194c74cb

    v0.2.0
    All checks were successful
    Release / Create release (push) Successful in 39s
    Test / Sandbox (push) Successful in 41s
    Test / Hakurei (push) Successful in 1m9s
    Test / Create distribution (push) Successful in 24s
    Test / Hpkg (push) Successful in 1m10s
    Test / Sandbox (race detector) (push) Successful in 4m5s
    Test / Hakurei (race detector) (push) Successful in 5m12s
    Test / Flake checks (push) Successful in 1m31s
    Stable

    cat released this 2025-08-26 02:23:59 +09:00 | 948 commits to master since this release

    API Changes

    • Remove cover field from hst/container.
    • Remove symlink field from hst/container.
    • Field data has been renamed to home.
    • field dir has been removed since it is made redundant by filesystem.
    • All pathname fields now take the *container.Absolute type. Does not break json.
    • The filesystem field now accepts many types of supported filesystems.
    • Container root behaviour is now configured through the filesystem field.
    • Autoetc behaviour is now accessible through a special bind type filesystem.
    • Autoroot behaviour is now accessible through a special bind type filesystem.
    • The enablement flags are now represented in json as boolean fields.
    • Net and Abstract fields have been renamed. Does not break json.
    • Autoroot prefix has been removed.
    • Share path now uses hsu userid.

    Fixes

    • Unexport internal container state.
    • Package container no longer attempts to look up executable file from name.
    • Set up acl on X server socket.
    • Check container setup op equivalence by value.
    • Validate container setup ops early.

    Enhancements

    • Export mount string constants.
    • Export FHS pathname constants
    • Mount mqueue as part of /dev.
    • Mount container /dev read only.
    • High-level API for overlay mounts in container.
    • The hakurei show command now exposes more information.
    • Optionally isolate host abstract UNIX domain sockets via landlock.
    • Ptrace protection via Yama LSM.

    Internal

    • Move tmpfs pathname prefixing to caller.
    • Expose interactive testing vm for tracing.
    • Reduce noise in non-verbose tests and test failures.
    • CAP_DAC_OVERRIDE is now raised for container/init.
    • Container setup ops are now able to share global state.
    • Enforce nonrepeatable autoetc and autoroot.
    • Container now spawns on a locked thread tied to its lifecycle.
    • Full test coverage has been achieved in container setup code.
    • NixOS module config validation is now implemented via hakurei show.
    • Output of initial hakurei run in vm tests is no longer discarded.

    Full Changelog: v0.1.3...v0.2.0

    Downloads
  • v0.1.3 f13dca184c

    v0.1.3
    All checks were successful
    Test / Create distribution (push) Successful in 26s
    Release / Create release (push) Successful in 41s
    Test / Sandbox (push) Successful in 41s
    Test / Hakurei (push) Successful in 44s
    Test / Hakurei (race detector) (push) Successful in 44s
    Test / Sandbox (race detector) (push) Successful in 42s
    Test / Hpkg (push) Successful in 42s
    Test / Flake checks (push) Successful in 1m17s
    Stable

    cat released this 2025-08-02 00:02:54 +09:00 | 1046 commits to master since this release

    Fixes

    • Remount container / read-only.
    • Remove hard coded nscd cover from NixOS module.

    Enhancements

    • Expose additional tmpfs flags.
    • Expose remount behaviour.
    • Relocate autoroot behaviour to package container.
    • Display autoroot information in hakurei show.
    • Expose tmpfs in hst.

    Internal

    • Increase test vm memory allocation.
    • Rename obsolete hpkg package.
    • Cover hakurei run behaviour in tests.
    • Remount can now be called independently from bind.

    Full Changelog: v0.1.2...v0.1.3

    Downloads
  • v0.1.2 cb513bb1cd

    v0.1.2
    All checks were successful
    Release / Create release (push) Successful in 41s
    Test / Sandbox (push) Successful in 40s
    Test / Hakurei (push) Successful in 2m37s
    Test / Create distribution (push) Successful in 24s
    Test / Sandbox (race detector) (push) Successful in 3m29s
    Test / Planterette (push) Successful in 3m5s
    Test / Hakurei (race detector) (push) Successful in 2m27s
    Test / Flake checks (push) Successful in 1m19s
    Stable

    cat released this 2025-07-29 03:11:33 +09:00 | 1061 commits to master since this release

    Enhancements

    • Per-container configurable lingering process wait delay.
    • Optionally forward container context cancellation to the initial process.
    • Expose signal forwarding behaviour in hst.

    Internal

    • Use more reliable nonexistence.
    • Improve container testing setup.
    • Move shim signal handler outcome to Go.

    Full Changelog: v0.1.1...v0.1.2

    Downloads
  • v0.1.1 6ba19a7ba5

    v0.1.1
    All checks were successful
    Release / Create release (push) Successful in 41s
    Test / Hakurei (push) Successful in 49s
    Test / Sandbox (push) Successful in 40s
    Test / Create distribution (push) Successful in 24s
    Test / Planterette (push) Successful in 3m13s
    Test / Sandbox (race detector) (push) Successful in 3m46s
    Test / Hakurei (race detector) (push) Successful in 2m18s
    Test / Flake checks (push) Successful in 1m21s
    Stable

    cat released this 2025-07-09 05:42:31 +09:00 | 1074 commits to master since this release

    Fixes

    • Fix prctl typo in container/init.
    • Add testtool build tag for test/sandbox.

    Enhancements

    • Add aarch64 constants.

    Internal

    • Remove split internal/app implementation.
    • Use /proc/self for initial filesystem setup.
    • Improve seccomp test case representation.
    • Check seccomp state on all vm test cases.

    Full Changelog: v0.1.0...v0.1.1

    Downloads
  • v0.1.0 e6967b8bbb

    v0.1.0
    All checks were successful
    Release / Create release (push) Successful in 39s
    Test / Sandbox (push) Successful in 39s
    Test / Hakurei (push) Successful in 1m9s
    Test / Sandbox (race detector) (push) Successful in 2m58s
    Test / Create distribution (push) Successful in 24s
    Test / Planterette (push) Successful in 3m48s
    Test / Hakurei (race detector) (push) Successful in 4m6s
    Test / Flake checks (push) Successful in 1m15s
    Stable

    cat released this 2025-07-03 03:42:58 +09:00 | 1090 commits to master since this release

    Initial Hakurei release.

    Downloads