Skip to content

0.4.3: use the corrected Linux confinement backend

Choose a tag to compare

View all tags
@Sunrisepeak Sunrisepeak released this 03 Nov 10:25
0.4.3
b8ac889
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The native Linux runner is built over openkal-linux 0.24.1. It advertises confinement only with Landlock ABI 3 or later, whose policy can prevent raw file truncation in a read-only grant. Earlier ABIs refuse the confinement request before starting a program. The backend's ABI probe cache uses atomic accesses during concurrent first queries.

All four image packages share version 0.4.3. The loader, binding, format and runner implementation sources are unchanged. Full CI 41618178520 passes image production for both architectures and execution on Linux x86_64, Linux aarch64, Windows x86_64 and macOS arm64.

This source release is the prerequisite for the corrected platform group. Standalone binary archives are built separately against platform 0.23.3 after that group is available.

PR: #24

Assets 15
Loading