-
v0.4.6
StableTest / Create distribution (push) Successful in 32sTest / ShareFS (push) Successful in 35sTest / Sandbox (race detector) (push) Successful in 45sTest / Hakurei (push) Successful in 44sTest / Sandbox (push) Successful in 45sTest / Hakurei (race detector) (push) Successful in 49sRelease / Create release (push) Successful in 57sTest / Flake checks (push) Successful in 1m7sreleased this
2026-08-09 20:48:58 +09:00 | 0 commits to master since this releaseFixes
- Apply patches in specified order via
internal/rosa. - Default to
/usr/localprefix incmd/dist. - Skip character device nodes and print warning in
internal/pkg. - Unconditionally statically link C++ runtimes via
internal/rosa. - Print unprefixed outcome pathname to stdout in
cmd/mbf. - Drain optional unstructured input in
internal/rosa. - Use NUL for magic usage string in
command.
Enhancements
- Allow
nilsource ininternal/rosa. - Automate
/binsymlinks ininternal/rosa. - Optional shallow external cure in
internal/pkg. - Expose cure whence in
internal/pkg. - Optionally force implementation entry in
internal/pkg. - Validate build determinism in
cmd/mbf. - Run
makein hardcoded directory for build determinism ininternal/rosa. - Set
mesontimeout multiplier ininternal/rosa. - Consolidate cache attributes in
internal/pkg. - Expose preferred loadavg target to container in
internal/pkg. - Respect preferred loadavg target in supported build systems via
internal/rosa. - Optionally override preferred loadavg target in
cmd/mbf. - Migrate go toolchain to Azalea in
internal/rosa. - Always prepend D in
mesonhelper ininternal/rosa. - Optional
muonimplementation formesonhelper ininternal/rosa. - Allow patching output-only packages via
internal/rosa. - Implementation revisions in
internal/pkg. - Optionally set execute bit on files via
internal/pkg. - Make build script executable in
internal/rosa. - Native
zstdandxzdecompressor forinternal/pkg. - Move Gentoo stage3 bootstrap path to the
curecommand ofcmd/mbf. - Optionally colour output via
internal/pkg. - Enable output colouring in
cmd/mbf. - Force build system output colouring via
internal/rosa. - Cure entry/exit notification in
internal/pkg. - Set window title in
cmd/mbf. - Hard wrap help message flags in
command. - Replace readme document with license in
cmd/dist.
Internal
- Uncover
/tmp/incmd/app. - Expose insecure options in
cmd/app. - Improve error messages in
cmd/earlyinit. - Updated stage0 distribution.
- Remove legacy exec helper in
internal/rosa. - Validate toolchain on stage 4.
- New
allcommand replacesinternal/rosatest case incmd/mbf.
Full Changelog: v0.4.5...v0.4.6
Downloads
- Apply patches in specified order via
-
v0.4.5
StableRelease / Create release (push) Successful in 1m0sTest / Flake checks (push) Successful in 1m11sTest / Create distribution (push) Successful in 30sTest / ShareFS (push) Successful in 36sTest / Hakurei (push) Successful in 43sTest / Sandbox (race detector) (push) Successful in 43sTest / Sandbox (push) Successful in 43sTest / Hakurei (race detector) (push) Successful in 48sreleased this
2026-06-24 06:20:55 +09:00 | 200 commits to master since this releaseFixes
- Fix ephemeral overlay order in
hst. - Build
cmd/hsuseparately incmd/dist. - Attempt
nscdpath-hiding if present ininternal/outcome.
Enhancements
- Optionally disable file placement in
hst. - Exempt pipeline intermediates from cures counter in
internal/pkg. - Read overridden version string from source in
internal/rosa.
Internal
- Common configuration file in
cmd/app. - Multiple template uppers in
cmd/app. - Include template name in container metadata in
cmd/app. - Optionally override configured command in
cmd/app. - Pass through user-supplied arguments in
cmd/app. - Expose additional configuration in
cmd/app. - Remove hardcoded sysfs bind mounts in
cmd/app. - Optional interactive shell in
cmd/app. - Enforce mutable instance exclusion in
cmd/app.
Full Changelog: v0.4.4...v0.4.5
Downloads
- Fix ephemeral overlay order in
-
v0.4.4
StableRelease / Create release (push) Successful in 37sTest / Flake checks (push) Successful in 1m17sTest / Create distribution (push) Successful in 1m3sTest / Sandbox (push) Successful in 2m49sTest / ShareFS (push) Successful in 3m53sTest / Hakurei (push) Successful in 4m6sTest / Sandbox (race detector) (push) Successful in 5m38sTest / Hakurei (race detector) (push) Successful in 6m44sreleased this
2026-06-17 21:07:41 +09:00 | 242 commits to master since this releaseFixes
- Load runtime dependencies for alternative go toolchain bootstrap path.
- Correctly scrub substitute status in
internal/pkg. - Populate opts of cloned S in
internal/rosa. - Check for unclean shutdown in
internal/pkg. - Remove external toolchain reference in
internal/rosa. - Register binfmt entry for shell in
cmd/mbf.
Enhancements
- Streaming archive reader/writer in
internal/pkg. - Stream decompress artifact in
internal/pkg. - Remove tar built-in decompressor in
internal/pkg. - Do not hold up cures during status link in
internal/pkg. - Optionally replace outcomes from external cache in
internal/pkg. - Mirror service via external cache in
internal/rosa. - Optionally load from custom azalea path in
cmd/mbf. - Move emulated targets to
internal/rosa. - Remove parent check in
cmd/hsu. - Support ephemeral overlay mounts in
hst. - Optionally cover /run/ early in
hst.
Internal
- IR-curable source override in
internal/rosa. - Report errors exiting cure in
internal/pkg. - Destroy new substitution status on fault in
internal/pkg. - Migrate distribution artifacts to azalea.
- Resolve runtimes for overlay extras in
internal/rosa. - Kobject uevent processing loop in
internal/kobject. - Basic error reporting in
internal/report. - Use DESTDIR instead of --prefix for cmake installation in
internal/rosa. - Load device drivers in
cmd/earlyinit. - Annotate blocked updates in
internal/rosa. - Garbage collection in
internal/pkg. - Export etc native artifact in
internal/rosa. - Experimental application container tooling
cmd/app.
Full Changelog: v0.4.3...v0.4.4
Downloads
-
v0.4.3
StableTest / Create distribution (push) Successful in 41sTest / ShareFS (push) Successful in 49sTest / Sandbox (race detector) (push) Successful in 54sTest / Sandbox (push) Successful in 56sTest / Hakurei (push) Successful in 58sTest / Hakurei (race detector) (push) Successful in 1m2sRelease / Create release (push) Successful in 1m13sTest / Flake checks (push) Successful in 1m23sreleased this
2026-05-22 02:21:56 +09:00 | 372 commits to master since this releaseFixes
- Bring back pkgserver favicon in
cmd/mbf.
Enhancements
- Include version string in release for
cmd/dist.
Internal
- Initial implementation of Azalea in
internal/rosa/azalea. - Packages are ported to Azalea in
internal/rosa/package.
Full Changelog: v0.4.2...v0.4.3
Downloads
- Bring back pkgserver favicon in
-
v0.4.2
StableTest / Create distribution (push) Successful in 38sTest / ShareFS (push) Successful in 42sTest / Sandbox (push) Successful in 48sTest / Sandbox (race detector) (push) Successful in 49sTest / Hakurei (push) Successful in 53sTest / Hakurei (race detector) (push) Successful in 54sRelease / Create release (push) Successful in 1m10sTest / Flake checks (push) Successful in 1m21sreleased this
2026-05-10 16:17:48 +09:00 | 514 commits to master since this releaseFixes
- Abandon response on termination during testing of package
container.
Enhancements
- Optionally suppress init verbosity in package
container. - Replace capability checks during NixOS VM tests with native tests of
packagecontainer. - Optionally map uid/gid 0 as init in package
container. - Arrange for
binfmt_miscregistration in packagecontainer.
Full Changelog: v0.4.1...v0.4.2
Downloads
- Abandon response on termination during testing of package
-
v0.4.1
StableTest / Create distribution (push) Successful in 38sTest / ShareFS (push) Successful in 43sTest / Sandbox (push) Successful in 48sTest / Sandbox (race detector) (push) Successful in 48sTest / Hakurei (race detector) (push) Successful in 55sRelease / Create release (push) Successful in 1m8sTest / Hakurei (push) Successful in 2m14sTest / Flake checks (push) Successful in 1m25sreleased this
2026-05-04 05:05:38 +09:00 | 561 commits to master since this releaseFixes
- Strings larger than a page is rejected by package
container.
Enhancements
- Overlay mounts are now configured via fsconfig(2) in package
container.
Internal
- Checksum helper command in
cmd/mbf. - Pass preferred job count via
internal/pkg. - Optionally open cache in
cmd/mbf. - Artifact IR daemon in
cmd/mbf. - Ongoing cures now supports fine-grained cancellation in
internal/pkg. - LLVM toolchain is now built in a single artifact.
- Binary stage0 distribution is shrunk to less than half its former size.
- The stage0 toolchain is now functionally equivalent to all future stages and is able to cure artifacts without special cases.
- Package status dashboard upstreamed in
cmd/mbf.
Full Changelog: v0.4.0...v0.4.1
Downloads
- Strings larger than a page is rejected by package
-
v0.4.0
StableTest / Create distribution (push) Successful in 37sRelease / Create release (push) Successful in 45sTest / ShareFS (push) Successful in 43sTest / Sandbox (push) Successful in 48sTest / Hakurei (push) Successful in 52sTest / Sandbox (race detector) (push) Successful in 48sTest / Hakurei (race detector) (push) Successful in 55sTest / Flake checks (push) Successful in 1m28sreleased this
2026-04-11 10:49:43 +09:00 | 734 commits to master since this releaseMigration
The
cmd/hakureicommandapp, for starting containers from a configuration file, has been renamed torun. Additionally,dist/release.shhas been renamed toall.sh, however usage remains identical.API Changes
- Remove compatibility wrappers for all deprecated APIs.
- Package
extrenamed fromcontainer/std. - Rename
ScmpSyscalltoSyscallNum. - Package
vfsrenamed fromcontainer/vfs. - Package
checkrenamed fromcontainer/check. - Move syscall wrappers to package
ext. - Package
fhsrenamed fromcontainer/fhs. - Move package
container/stubinternal. - Command
runrenamed toexec, andapptorunincmd/hakurei. - Remove setup helpers from package
container. - Optionally reject insecure options in package
hst. - Remove explicit enablements JSON adapter in package
hst. - Unexport
PR_SET_NO_NEW_PRIVSwrapper in packagecontainer. - Move landlock internal from package
container.
Fixes
- Correctly describe
--with-toolchainincmd/mbf. - Use
filepathin portable packages. - Ignore finished process in container init.
- Optionally skip landlock on hostnet in package
container. - Group-accessible permission bits in
cmd/sharefsto work around vfs inode file attribute race.
Enhancements
- C integer limit values in package
ext. - Optionally set
FD_CLOEXECviaclose_range(build tag:close_range). - Optionally suppress via assumed checksum in package
internal/pkg. - Release script
dist/release.shreplaced bycmd/dist. - Prefix configurable from environment via
cmd/dist. - Conditionally skip root remount in package
hst. - Add riscv64 stage0 tarball for Rosa OS.
- Optionally transparently degrade in test suite.
Internal
- Generic netlink implementation in package
internal/netlink. - Kobject uevent (with coldboot) implementation in package
internal/uevent. - Export container params of
KindExecandKindExecNetin packageinternal/pkg. - Move collection helper-artifact to package
internal/pkg. - Retain session by default in
cmd/mbf. - Alternative hsurc path for Rosa OS.
- Cache now accepts flags in package
internal/pkg.
Full Changelog: v0.3.7...v0.4.0
Downloads
-
v0.3.7
StableTest / Sandbox (race detector) (push) Successful in 58sTest / Hakurei (race detector) (push) Successful in 1m2sTest / Flake checks (push) Successful in 1m30sRelease / Create release (push) Successful in 53sTest / Create distribution (push) Successful in 44sTest / ShareFS (push) Successful in 50sTest / Hakurei (push) Successful in 1m2sTest / Sandbox (push) Successful in 56sreleased this
2026-03-15 21:04:55 +09:00 | 890 commits to master since this releaseFixes
- Update URLs for rename of organisation
securitytorosa.
Enhancements
- Text representation for scheduling policy constants.
- Export scheduling constants in
std. - Expose scheduling policy and priority in
hst.
Internal
- Represent runtime dependencies in
internal/rosa.
Full Changelog: v0.3.6...v0.3.7
Downloads
- Update URLs for rename of organisation
-
v0.3.6
StableTest / Hakurei (push) Successful in 4m31sTest / ShareFS (push) Successful in 4m24sRelease / Create release (push) Successful in 1m19sTest / Sandbox (race detector) (push) Successful in 5m24sTest / Hakurei (race detector) (push) Successful in 6m30sTest / Create distribution (push) Successful in 1m6sTest / Sandbox (push) Successful in 2m58sTest / Flake checks (push) Successful in 1m26sreleased this
2026-03-07 16:32:04 +09:00 | 945 commits to master since this releaseFixes
- Allow devel syscalls in
internal/pkg. - Keep objects alive while stopping cleanups in
internal/lockedfile. - Cancel on scanner error in
internal/pkg. - Stricter checking in
internal/pkgerror filtering.
Enhancements
- Set scheduling policy in
container. - Treat nil pathname as self in
ldd. - Use
/proc/self/exedirectly incontainer. - Deprecate unused APIs and remove
cmd/hpkg.
Internal
- Validate tar pathnames in
internal/pkg. - Read buffer free list in
internal/pkg. - Buffer tar reader in
internal/pkg. - Significantly improve error resolution performance in
internal/pkg. - Expose extra information for
FileArtifactpipelines. - Mount
tmpfson/tmpin integration test to prevent spurious failures. - Match
ospackage behaviour incontainerpackage error injection tests. - Export layer promotion in
internal/pkg. - Raise string limit to 16 MiB in
internal/pkg. - Supported artifacts in
internal/pkgnow saves logs.
Full Changelog: v0.3.5...v0.3.6
Downloads
- Allow devel syscalls in
-
v0.3.5
StableTest / Create distribution (push) Successful in 1m10sTest / Sandbox (push) Successful in 2m7sTest / Hakurei (race detector) (push) Successful in 6m25sTest / ShareFS (push) Successful in 3m18sTest / Hakurei (push) Successful in 3m25sTest / Hpkg (push) Successful in 4m8sTest / Flake checks (push) Successful in 1m35sTest / Sandbox (race detector) (push) Successful in 5m23sRelease / Create release (push) Successful in 1m14sreleased this
2026-02-09 00:11:20 +09:00 | 1118 commits to master since this releaseFixes
- Filter host-dependent mount options in test cases.
Enhancements
- Include target in dist filename.
- Add riscv64 constants.
Internal
- Allow multiarch in
execArtifact. - Set project-specific User-Agent in
httpArtifact. - Artifact IR is now standardised for
internal/pkg.
Full Changelog: v0.3.4...v0.3.5
Downloads