-
v0.2.0
StableAll checks were successfulRelease / Create release (push) Successful in 39sTest / Sandbox (push) Successful in 41sTest / Hakurei (push) Successful in 1m9sTest / Create distribution (push) Successful in 24sTest / Hpkg (push) Successful in 1m10sTest / Sandbox (race detector) (push) Successful in 4m5sTest / Hakurei (race detector) (push) Successful in 5m12sTest / Flake checks (push) Successful in 1m31sreleased this
2025-08-26 02:23:59 +09:00 | 948 commits to master since this releaseAPI Changes
- Remove
coverfield fromhst/container. - Remove
symlinkfield fromhst/container. - Field
datahas been renamed tohome. - field
dirhas been removed since it is made redundant byfilesystem. - All pathname fields now take the
*container.Absolutetype. Does not breakjson. - The
filesystemfield now accepts many types of supported filesystems. - Container root behaviour is now configured through the
filesystemfield. - Autoetc behaviour is now accessible through a special
bindtypefilesystem. - Autoroot behaviour is now accessible through a special
bindtypefilesystem. - The enablement flags are now represented in
jsonas boolean fields. - Net and Abstract fields have been renamed. Does not break
json. - Autoroot prefix has been removed.
- Share path now uses hsu userid.
Fixes
- Unexport internal
containerstate. - Package
containerno longer attempts to look up executable file from name. - Set up acl on X server socket.
- Check
containersetup op equivalence by value. - Validate
containersetup ops early.
Enhancements
- Export mount string constants.
- Export FHS pathname constants
- Mount mqueue as part of
/dev. - Mount container
/devread only. - High-level API for overlay mounts in
container. - The
hakurei showcommand now exposes more information. - Optionally isolate host abstract UNIX domain sockets via landlock.
- Ptrace protection via Yama LSM.
Internal
- Move
tmpfspathname prefixing to caller. - Expose interactive testing vm for tracing.
- Reduce noise in non-verbose tests and test failures.
- CAP_DAC_OVERRIDE is now raised for
container/init. - Container setup ops are now able to share global state.
- Enforce nonrepeatable autoetc and autoroot.
- Container now spawns on a locked thread tied to its lifecycle.
- Full test coverage has been achieved in
containersetup code. - NixOS module config validation is now implemented via
hakurei show. - Output of initial hakurei run in vm tests is no longer discarded.
Full Changelog: v0.1.3...v0.2.0
Downloads
- Remove
-
v0.1.3
StableAll checks were successfulTest / Create distribution (push) Successful in 26sRelease / Create release (push) Successful in 41sTest / Sandbox (push) Successful in 41sTest / Hakurei (push) Successful in 44sTest / Hakurei (race detector) (push) Successful in 44sTest / Sandbox (race detector) (push) Successful in 42sTest / Hpkg (push) Successful in 42sTest / Flake checks (push) Successful in 1m17sreleased this
2025-08-02 00:02:54 +09:00 | 1046 commits to master since this releaseFixes
- Remount container
/read-only. - Remove hard coded nscd cover from NixOS module.
Enhancements
- Expose additional
tmpfsflags. - Expose remount behaviour.
- Relocate autoroot behaviour to package
container. - Display autoroot information in
hakurei show. - Expose
tmpfsinhst.
Internal
- Increase test vm memory allocation.
- Rename obsolete
hpkgpackage. - Cover
hakurei runbehaviour in tests. - Remount can now be called independently from bind.
Full Changelog: v0.1.2...v0.1.3
Downloads
- Remount container
-
v0.1.2
StableAll checks were successfulRelease / Create release (push) Successful in 41sTest / Sandbox (push) Successful in 40sTest / Hakurei (push) Successful in 2m37sTest / Create distribution (push) Successful in 24sTest / Sandbox (race detector) (push) Successful in 3m29sTest / Planterette (push) Successful in 3m5sTest / Hakurei (race detector) (push) Successful in 2m27sTest / Flake checks (push) Successful in 1m19sreleased this
2025-07-29 03:11:33 +09:00 | 1061 commits to master since this releaseEnhancements
- Per-container configurable lingering process wait delay.
- Optionally forward
containercontext cancellation to the initial process. - Expose signal forwarding behaviour in
hst.
Internal
- Use more reliable nonexistence.
- Improve container testing setup.
- Move shim signal handler outcome to Go.
Full Changelog: v0.1.1...v0.1.2
Downloads
-
v0.1.1
StableAll checks were successfulRelease / Create release (push) Successful in 41sTest / Hakurei (push) Successful in 49sTest / Sandbox (push) Successful in 40sTest / Create distribution (push) Successful in 24sTest / Planterette (push) Successful in 3m13sTest / Sandbox (race detector) (push) Successful in 3m46sTest / Hakurei (race detector) (push) Successful in 2m18sTest / Flake checks (push) Successful in 1m21sreleased this
2025-07-09 05:42:31 +09:00 | 1074 commits to master since this releaseFixes
- Fix prctl typo in
container/init. - Add
testtoolbuild tag fortest/sandbox.
Enhancements
- Add aarch64 constants.
Internal
- Remove split
internal/appimplementation. - Use /proc/self for initial filesystem setup.
- Improve seccomp test case representation.
- Check seccomp state on all vm test cases.
Full Changelog: v0.1.0...v0.1.1
Downloads
- Fix prctl typo in
-
v0.1.0
StableAll checks were successfulRelease / Create release (push) Successful in 39sTest / Sandbox (push) Successful in 39sTest / Hakurei (push) Successful in 1m9sTest / Sandbox (race detector) (push) Successful in 2m58sTest / Create distribution (push) Successful in 24sTest / Planterette (push) Successful in 3m48sTest / Hakurei (race detector) (push) Successful in 4m6sTest / Flake checks (push) Successful in 1m15sreleased this
2025-07-03 03:42:58 +09:00 | 1090 commits to master since this releaseInitial Hakurei release.
Downloads