Virfield v2.1.1

Fixes

• Recover guest Keychain agent startup when launchd already has the exact Virfield GUI job registered after bootstrap returns an error. Genuine registration and restart failures remain fatal.
• Retain bounded bootstrap diagnostics in the private lease diagnostic directory. Native GUI, Keychain, console, and SSH readiness checks remain required.
• Expand installation, web UI, and MCP setup documentation.

Package

macOS ARM64. Verify the archive against SHA256SUMS before installation.

Virfield v2.1.0

Virfield manages macOS VM images and temporary machines through Tart, with pinned SSH access, an MCP server and a web console.

Included

• Image creation from approved macOS bases, optional Xcode provisioning and a pinned legacy iOS build toolchain.
• VM leases with resource budgets, renewal, native readiness checks, desktop access and confirmed cleanup.
• Physical macOS/Linux node leases and Linux-hosted macOS lab VMs through rootless Podman/QEMU.
• GHCR image import/publication and verified transfers between local Tart storage locations.
• In-place lease revalidation, persistent diagnostics and resource admission details.
• Twenty MCP tools, embedded usage guides and an English quick start with agent task examples.

Install

The prebuilt package targets macOS on Apple Silicon. Install Tart; image builds also require Packer. Xcode archives and registry credentials are configured separately.

Download both assets into the same directory, then verify and extract:

shasum -a 256 -c SHA256SUMS
tar -xzf virfield-v2.1.0-darwin-arm64.tar.gz
cd virfield-v2.1.0-darwin-arm64

The binaries are already in bin/. Continue with Create a deployment, then connect your MCP client.

Upgrade

Back up configuration, credentials, state and installed binaries before replacing an installation. This release uses an explicit Tart runtime configuration; Lume deployments need migration, not a binary-only upgrade. Configure approved Tart images and preserve existing disks. An older binary needs its matching state snapshot for rollback.

Drain active leases and jobs, restart the registered daemon, then reconnect each MCP client. Follow Operations for the procedure. Publishing this release does not update a running installation.

Package

The archive includes three Go binaries, the native Apple sign-in browser, source, instructions, dependency licenses and release.json with the source commit and binary hashes. Binaries use ad-hoc signatures; the archive is not a notarized macOS installer. Use your own signing identity when persistent Full Disk Access is required. The Orchard adapter remains experimental.

Virfield v2.0.0

Virfield v2 replaces the TypeScript manager with a single Go control plane for disposable macOS VMs on an Apple Silicon host.

Included

• Four binaries: virfieldd, virfield, virfield-mcp, and virfield-lume; authenticated HTTP/MCP APIs and an embedded console.
• Durable image/lease jobs, a two-VM capacity limit, explicit capacity errors, per-lease SSH identity isolation, expiry and cleanup.
• Verified macOS 27 image preparation, unattended Setup Assistant, Recovery/SIP automation and the optional Xcode/UI-test provisioning profile.
• Portable service/MCP preparation using the operator's account, HOME, configured paths and ports. No personal checkout paths or deployment credentials are bundled.

Install

Download virfield-v2.0.0-darwin-arm64.tar.gz and SHA256SUMS, then run shasum -a 256 -c SHA256SUMS before extracting. Follow Operations for dependencies and service registration.

The archive contains macOS/arm64 binaries, source, documentation, deployment tools, third-party license notices and a revision/hash manifest. Binaries have ad-hoc signatures; this is not an Apple-notarized installer. Lume, Python/VNC dependencies, Tesseract, Xcode and Apple restore media are installed separately.

Validation

• Clean source build and race tests with an empty HOME and empty Go caches; dependency integrity and static analysis passed.
• Linux and macOS GitHub Actions checks passed for the tagged commit, including current Go vulnerability checks and full-history secret scanning.
• Gitleaks found no secrets in all 50 reachable commits or the extracted release; binary hashes/signatures and installation smoke checks passed.
• Earlier real-host acceptance covered the Apple IPSW download/resume, full image build, two isolated clones, third-VM refusal, SSH/tunnels and cleanup. Verification records evidence and remaining limits.

Supported scope

VM hosting requires Apple Silicon macOS. The implemented image recipe is macOS 27 build 26A428; the full UI-test profile requires Xcode 27 or newer. Linux is supported for compilation/tests, not VM hosting. End-to-end image acceptance was performed on one physical Mac; a second-host image build, prolonged soak and full VM-disk disaster recovery are not yet accepted. Broker/Runner/Balda integration, remote TLS routing and per-principal authentication remain separate work.

The previous application is preserved in branch v1; main contains only the Go implementation. This release does not migrate or restart existing installations automatically.