runtime-v0.4.0

Machinen 0.4.0

This release pairs the npm packages with the public kernel and rootfs assets that machinen install downloads for version runtime-v0.4.0.

npm packages

• @machinen/cli@0.4.0 — CLI (machinen / mn)
• @machinen/runtime@0.4.0 — Node.js runtime API
• @machinen/native-arm64-darwin@0.4.0 — Apple Silicon host tools
• @machinen/native-arm64-linux@0.4.0 — arm64 Linux/KVM host tools
• @machinen/native-x64-linux@0.4.0 — amd64 Linux/KVM host tools

Install or update with:

npm i @machinen/cli@0.4.0 @machinen/runtime@0.4.0

What's changed

Minor Changes

• 37cf5fa: Ship amd64 Linux/KVM guest support.

  The release now publishes the @machinen/native-x64-linux host package and amd64 base assets (bzImage-x86_64, rootfs-debian-amd64.tar.gz, and the prebaked rootfs image). On amd64 Linux hosts, the CLI/runtime select amd64 guest assets by default and same-architecture amd64 snapshot/restore uses the vmstate path.

• bd30262: Add opt-in nested virtualization for arm64 hosts.

  boot({ nested: true }) and machinen boot --nested now ask the VMM to expose EL2 to the guest. Linux/KVM uses KVM_CAP_ARM_EL2 and KVM_ARM_VCPU_HAS_EL2; macOS uses Hypervisor.framework's EL2 VM config when available. The guest kernel config now builds KVM in so /dev/kvm can appear inside nested-capable guests, masks SVE/SME features that HVF cannot virtualize at EL2, and uses a nested-safe poweroff marker when PSCI terminates inside the L1 guest. Provider-level snapshots of nested-enabled VMs are refused until EL2 vmstate capture is fully audited. Docs now include a Firecracker guide, plus an example that boots an aarch64 Firecracker L2 inside machinen.

Patch Changes

• ca23f28: Mix fresh host entropy into vmstate restores and expose vmstate smoke repros for timer, entropy, and socket contracts.

Public base assets

Asset	What it is
Image-arm64	arm64 guest Linux kernel
virt-arm64.dtb	arm64 virt machine device tree
rootfs-debian-arm64.tar.gz	arm64 Debian base rootfs tarball
rootfs-debian-arm64.img.gz	arm64 prebuilt fast-boot rootfs image
bzImage-x86_64	amd64 guest Linux kernel
rootfs-debian-amd64.tar.gz	amd64 Debian base rootfs tarball
rootfs-debian-amd64.img.gz	amd64 prebuilt fast-boot rootfs image

Each payload has a .sha256 sidecar. The release script rewrites those sidecars from the exact uploaded bytes and then downloads the public URLs back to verify them.

runtime-v0.3.4

Base assets for @machinen/runtime@0.3.4.

runtime-v0.3.3

Base assets for @machinen/runtime@0.3.3.

runtime-v0.3.2

Base assets for @machinen/runtime@0.3.2.

runtime-v0.3.1

Base assets for @machinen/runtime@0.3.1.

runtime-v0.3.0

Base assets for @machinen/runtime@0.3.0.

runtime-v0.2.0

Base assets for @machinen/runtime@0.2.0.

runtime-v0.1.2

Base assets for @machinen/runtime@0.1.2.

runtime-v0.1.1

Base assets for @machinen/runtime@0.1.1.

runtime-v0.1.0

Base assets for @machinen/runtime@0.1.0.