Walden 0.2.1

Walden 0.2.1 packages for every supported platform and architecture.

Installation

Download the package for your system, then confirm it against SHA256SUMS.

System	Architecture	Package
macOS 12 and later	arm64	walden-0.2.1-macos-arm64.pkg
macOS 12 and later	x86_64	walden-0.2.1-macos-x86_64.pkg
Debian-based Linux	amd64	walden_0.2.1-1_amd64.deb
Debian-based Linux	arm64	walden_0.2.1-1_arm64.deb
Source	—	walden-0.2.1.tar.gz

Checksums: SHA256SUMS

# Debian-based Linux
sudo apt install ./walden_0.2.1-1_amd64.deb

# Arch Linux, from the recipe generated after this release
makepkg -si

The macOS package is opened in Finder or installed with
sudo installer -pkg walden-0.2.1-macos-arm64.pkg -target /.

Unsigned macOS packages

The macOS packages are unsigned. macOS refuses to open them on the first
attempt and offers only Move to Trash or Cancel. Opening one anyway is a
deliberate trust decision: after the refusal, go to System Settings → Privacy
& Security and choose Open Anyway. Alternatively, right-click the package in
Finder and choose Open. Checking the published checksum is what a signature
would otherwise be doing.

Supported systems

• macOS 12 and later, arm64 and x86_64. Each package is one architecture;
  the installer refuses the other.
• Linux with systemd and nftables, amd64/x86_64 and arm64/aarch64.
  Other service managers and firewall backends are not supported.

A fresh installation is inactive. The daemon runs only while a block does.

Using Walden

The README covers install, setup,
starting, stopping, status, categories, and removal.
usage.md covers troubleshooting,
persistence, upgrades, and catalog details.

Upgrading

An upgrade replaces the package's files and puts back only what it interrupted.
An inactive installation stays inactive. An active daemon restarts on the new
version and resumes the same block: the same deadline, the same blocklist, the
same unlock delay. An upgrade cannot reset, shorten, or remove an active block.

Downgrading is not supported.

Known limitations

• macOS packages are unsigned, as above.
• Linux other than systemd and nftables is not supported.
• There is no signed apt repository yet; Debian packages are installed from
  this release.
• A Homebrew tap is not part of this release.
• Removing Walden does not lift an active block. The hosts entries and
  firewall rules stay, and the daemon's persisted state is kept so an
  unfinished block resumes if Walden is installed again.

See packaging.md for
ownership, purge behaviour, and how the packages are built, and
testing.md for privileged
smoke checks.