Skip to content

v0.6.4

Choose a tag to compare

@github-actions github-actions released this 11 Sep 15:41
· 13 commits to main since this release

This release contains the complete v0.6.0 feature set, along with several follow-up fixes that make the distroless image build reliably with Docker BuildKit and Podman.

Breaking Changes

  • Removed Xvfb and virtual display support.
  • Removed the DISPLAY=:99.0 environment variable.
  • Graphical applications that depend on the bundled X server are no longer supported.
  • Added a minimal POSIX /bin/sh to the distroless runtime. This is required by OpenCode's shell tool and npm lifecycle scripts.

Features

  • Added custom CA certificate support through custom-ca.crt.
  • Configured npm to use the system CA bundle, including custom certificates.
  • Added HTTP, HTTPS, and NO_PROXY forwarding during image builds and runtime.
  • Added the DCP TUI plugin configuration.
  • Added runtime collector validation for the POSIX shell and custom CA certificates.
  • Preserved the distroless runtime's minimal security model while supporting shell execution.

Fixes

  • Fixed BuildKit and Podman failures when copying the collected runtime filesystem into the distroless image.
  • Preserved the base image's /bin, /sbin, /lib, and /lib64 symlinks.
  • Merged collected runtime files into the corresponding /usr paths instead of exporting conflicting top-level directories.
  • Replaced incomplete chroot validation with validation of the collected shell executable and symlink target.
  • Preserved runtime shared-library paths after filesystem assembly.
  • Fixed make prune-cache deleting tagged images.

Updates

  • OpenCode 1.18.25 -> 1.18.30
  • Context7 MCP 4.0.4 -> 4.0.6
  • Updated pinned GitHub Actions and git-cliff dependencies.

Upgrade Notes

Existing users who want the latest TUI configuration should run:

opencode-container --update-config

Users behind a corporate proxy can export the following variables before building:

export HTTP_PROXY=http://proxy.example:3128
export HTTPS_PROXY=$HTTP_PROXY
export NO_PROXY=localhost,127.0.0.1
make build

Corporate CA certificates should be placed in custom-ca.crt at the build-context root before running make build.

Container Image

Pull the released image with:

docker pull ghcr.io/pkhamre/opencode-container:v0.6.4

The latest tag is also updated by the release workflow.

Full Changelog: v0.5.0...v0.6.4