asterinas/RELEASES.md

Version 0.18.0 (2026-06-04)

The headline of this release is a major step toward running Asterinas as the guest OS for VM-based Kata Containers and Confidential Containers (CoCo). Getting there requires a host of new building blocks, and this release delivers many of them: namespaces (the IPC and cgroup namespaces, plus nsfs at /proc/[pid]/ns), cgroups (the PID sub-controller and a partial CPU sub-controller), virtio-fs for sharing a filesystem with the host, virtio-rng (/dev/hwrng) for hardware entropy, and a fully reimplemented vsock for host–guest communication.

Userspace debugging comes to Asterinas in this release. We implement the ptrace syscall along with its core operations—PTRACE_SETOPTIONS, PTRACE_SYSCALL, and PTRACE_PEEK/POKE—which together enable popular debugging tools such as GDB and strace to run on Asterinas, complete with verified-usage documentation and CI coverage.

This release also substantially modernizes the storage stack. The ext2 filesystem has been reimplemented, a new NVMe driver joins the block layer, and the VFS gains a new Dentry revalidate mechanism alongside a refactored page cache. The result is a more reliable and capable storage stack.

Finally, Asterinas NixOS dramatically expands its coverage of real-world software, with over 100 popular packages now verified—including Codex, QEMU, and Firefox. To keep this growing catalog working, we have integrated a range of new test suites, including kselftest, xfstests, and the standard unit-test suites of Go, Python, and JDK.

Asterinas NixOS

We have made the following key changes to Asterinas NixOS:

• Add a framework for Asterinas NixOS test suites
• Add documentation for more verified applications
• Add tests for popular applications
• Add Go std test on Asterinas NixOS
• Add JDK test on Asterinas NixOS
• Add Python regression tests on Asterinas NixOS
• Add QEMU test for virtualization applications
• Support ARCH_GET_GS/ARCH_SET_GS to enable Firefox

Asterinas Kernel

We have made the following key changes to the Asterinas kernel:

• Process management
  • Refactor PidFile and add the pidfd_getfd syscall, add the pidfd_send_signal syscall, and align PidFile semantics with POSIX
  • Fix buggy behavior when loading corrupted ELF files
• Ptrace
  • Add the ptrace syscall
  • Support debugging with ptrace
  • Add PTRACE_SETOPTIONS, PTRACE_SYSCALL, and PTRACE_PEEK/POKE_TEXT/DATA
  • Add (kernel-side) patches, verified-usage docs, and CI for GDB and strace
  • Support force-write via /proc/[pid]/mem
  • Add the Yama ptrace scope
• Signals and IPC
  • Correct sigsuspend and fix various other signal behaviors
  • Fix lots of bugs in System V semaphores
• Memory management
  • Respect mmap address hints
  • Fix many wrong error codes and other buggy behavior in various MM syscalls
• File systems
  • VFS
    • Add the pseudo Path
    • Introduce the Dentry revalidate mechanism
    • Refactor the page cache implementation and fix a page cache bug that leaks uninitialized memory to userspace
    • Implement the pivot_root syscall
    • Implement O_TMPFILE support for open/openat
    • Refactor Metadata's fields and fix pseudo-filesystems' Device ID
  • virtio-fs
    • Support virtio-fs in Asterinas
  • Ext2
    • Rewrite the ext2 filesystem
  • Procfs
    • Add /proc/mounts, /proc/[pid]/auxv, /proc/[tid], more entries in /proc/[pid]/maps, and mountstats
• Sockets and networking
  • Rewrite vsock
  • Add initial IPv6 support
  • Reject binding to privileged ports without CAP_NET_BIND_SERVICE
  • Fix some UDP problems
• Namespaces and cgroups
  • Support nsfs (/proc/[pid]/ns)
  • Support the IPC namespace
  • Support the cgroup namespace
  • Implement the cgroup PID sub-controller
  • Add a partial cgroup CPU sub-controller, providing cpu.stat statistics and dummy cpu.weight/cpu.max limit files
  • Bind mount namespace files
• Security
  • Implement capabilities and execution of programs by root
  • Implement capability bounding set support
  • Fix credentials-related system calls and clean them up
  • Add the initial LSM framework
• Devices
  • Block and NVMe
    • Add the NVMe driver
  • PCI
    • Improve PCI device enumeration and detection
    • Get the PCI bus range from FDT/ACPI and add support for PCI ECAM on x86
  • TTY and console
    • Support multiple TTYs
    • Support the NS16550A UART console, /dev/ttyS0, and console=ttyS0
    • Keyboard enhancements
  • VirtIO
    • Support virtio-rng and expose it as /dev/hwrng
    • Model virtqueue as untrusted and use fallible allocation in aster-virtio
  • TDX
    • Add TSM-MR (measurement register) sysfs support
• Tests
  • Add Linux kselftest test suite
  • Add the xfstests test suite
• Misc
  • Add a generic syscall table
  • Introduce the kernel parameter framework

Asterinas OSTD & OSDK

We have made the following key changes to OSTD and/or OSDK:

• OSTD
  • Replace the log crate with OSTD's own logging API
  • Refactor Pod with zerocopy
  • Refactor the DMA APIs
  • Add a Memcpy/Memset trait framework for typed memory copies
• Misc
  • Add a Docker development environment on ARM (aarch64)

Asterinas Book

We have made the following key changes to the Book:

• Add coding guidelines
• Add OSTD soundness analysis
• Add Kata Containers documentation
• Add Confidential Containers (CoCo) documentation

Version 0.17.0 (2025-12-17)

This release marks a significant milestone in the evolution of Asterinas as we transition from "just a kernel" to a more complete, usable system. The headline of this release is the introduction of Asterinas NixOS, our first distribution that integrates the Asterinas kernel with the NixOS userspace, and enables real applications and services out of the box—including XFCE, Podman, and systemd. To support this growth, we are also strengthening our governance by establishing the formal RFC (Request for Comments) process, ensuring that major architectural decisions—starting with Asterinas NixOS itself—are designed transparently and collaboratively.

On the architecture front, RISC-V support has improved dramatically, with support for SMP (Symmetric Multiprocessing), FPU (Floating-Point Unit), VirtIO, and the SiFive HiFive Unleashed QEMU machine type. The kernel has also expanded with a new input subsystem (supporting keyboards and mice) and initial support for namespaces and cgroups. For filesystem developers, the big news is the addition of an FS event notification mechanism (inotify), a new ioctl infrastructure, and a new filesystem type, ConfigFS. Finally, we are introducing sctrace—a dedicated tool for tracing and debugging syscall compatibility—now published on crates.io.

Asterinas NixOS

We have made the following key changes to Asterinas NixOS:

• Add NixOS as a distribution for Asterinas
• Add the XFCE Nix module
• Add the Podman Nix module
• Enable systemd
• Add Asterinas NixOS ISO installer
• Add Cachix as a source for pre-built binaries
• Add GitHub workflows to publish ISO images

Asterinas Kernel

We have made the following key changes to the Asterinas kernel:

• CPU architectures:
  • x86
    • Add TSM-based attestation support for TDX via ConfigFS
  • RISC-V
    • Implement arch-aware vDSO
    • Add VirtIO support for RISC-V platforms
• Memory management
  • Support sealing memfd files
  • Support executing memfd files and then open("/proc/self/exe")
• Process management
  • Support CLONE_PARENT flag
  • Support execve in multithreaded process
  • Support PR_SET/GET_SECUREBITS
  • Fix some kill-related behavior
• IPC
  • Add rt_sigtimedwait syscall
  • Enqueue ignored signals if the signals are blocked
  • Refactor NamedPipe to correct its opening and blocking behaviors
  • Support reopening anonymous pipes from /proc
  • Fix or clarify some futexes bugs
• File systems
  • VFS
    • Add inotify-related syscalls
    • Add new ioctl infrastructure
    • Add chmod and mkmod macros
    • Add syncfs syscall
    • Add fchmodat2 syscall
    • Support mount bind with a file
    • Support MS_REMOUNT flag
    • Ensure that every FileLike is associated with a dyn Inode
  • Devtmpfs
    • Add /dev/full device
    • Support registering char devices
    • Support registering block device (and their partitions)
  • Procfs
    • Add /proc/cmdline, /proc/stat, /proc/uptime, /proc/version, /proc/[pid]/environ, /proc/[pid]/oom_score_adj, /proc/[pid]/cmdline, /proc/[pid]/mem, /proc/[pid]/mountinfo, /proc/[pid]/fdinfo, and /proc/[pid]/maps
    • Support the sleeping and stopping states in /proc/[pid]/stat
    • Introduce VmPrinter and refactor procfs with VmPrinter
    • Fix a lot of bugs in procfs
  • Ext2
    • Support Ext2 handling of FIFO and devices
    • Fix Ext2 directory entry iteration
    • Fix the behavior of syncing BlockGroup metadata in Ext2
    • Fix some bugs in Ext2 superblock
  • Configfs
    • Add basic configfs implementation
• Sockets and networking
  • Support UNIX datagram sockets
  • Add sendmmsg syscall
  • Add sethostname and setdomainname syscalls
  • Support SO_BROADCAST and IP_RECVERR
• Namespace and cgroups
  • Add the namespace framework (along with unshare and setns syscalls)
  • Add the mount namespace
  • Support /proc/[pid]/uid_map and /proc/[pid]/gid_map
  • Implement controller framework for cgroup subsystem
  • Enable process management for cgroups
• Devices
  • Input devices
    • Add the input subsystem
    • Map the I/O memory to the userspace
    • Add the input devices /dev/input/eventX
    • Add the framebuffer device /dev/fb0
    • Add i8042 mouse
    • Make i8042 initialization stable on real hardware
  • TTY and PTY
    • Add KDSETMODE/KDSKBMODE ioctls
    • Fix PTY closing behavior
    • Make PTY master reads block if no PTY slave is open
    • Make the semantics of TTY-related devices correct
    • Support PTY packet mode
• System management
  • Add reboot syscall
  • Make reboot -f work on real hardware
  • Support RUSAGE_CHILDREN for getrusage
• Misc
  • Upgrade to Rust 2024 edition and the 20251208 nightly toolchain
  • Introduce the ASCII art of Asterinas logo in gradient colors
  • Add stage support for init_component macro
  • Add a new tool called Syscall Compatibility Tracer (sctrace)

Asterinas OSTD & OSDK

We have made the following key changes to OSTD and/or OSDK:

• CPU architectures
  • Common
    • Reorganize ostd::arch::irq
  • x86
    • Better x86 CPU feature detection by rewriting all CPUID-related code
    • Set CR0.WP/NE/MP explicitly to fix AP behavior
    • Extend cache policies for the x86 Architecture
  • RISC-V
    • Add support for RISC-V PLIC
    • Refactor RISC-V trap handling
    • Add RISC-V FPU support
    • Implement fallible memory operations on RISC-V platform
    • Support bootup on SiFive HiFive Unleashed
    • RISC-V SMP boot
    • Full (<=32) RISC-V SMP support
• CPU
  • Extract CpuId into a dedicated sub-module
• Memory management
  • Make UniqueFrame::repurpose sound
• Interrupt handling
  • Refactor OSTD's irq module for improved clarity
• Misc
  • Move PCI bus out of OSTD

Asterinas Book

We have made the following key changes to the Book:

• Add the first RFC: "Establish the RFC process"
• Add the second RFC: "Asterinas NixOS"
• Add a new "Limitations on System Calls" section to the book
• Add the Asterinas NixOS volume

Version 0.16.0 (2025-08-04)

This release introduces initial support for the LoongArch CPU architecture, a major milestone for the project. Version 0.16.0 also significantly expands our Linux ABI compatibility with the addition of nine new system calls such as memfd_create and pidfd_open.

Key enhancements include expanded functionality for UNIX sockets (file descriptor passing and the SOCK_SEQPACKET socket type), partial support for netlink sockets of the NETLINK_KOBJECT_UEVENT type, the initial implementation of CgroupFS, and a major testing improvement with the integration of system call tests from the Linux Test Project (LTP). We've also adopted Nix for building the initramfs, streamlining our cross-compilation and testing workflow.

Asterinas Kernel

We have made the following key changes to the Asterinas kernel:

• New system calls or features:
  • Memory:
    • Add the mremap system call
    • Add the msync system call based on an inefficient implementation
    • Add the memfd_create system call
  • Processes and IPC:
    • Add the pidfd_open system call along with the CLONE_PIDFD flag
  • File systems and I/O in general:
    • Add the close_range system call
    • Add the fadvise64 system call (dummy implementation)
    • Add the ioprio_get and ioprio_set system calls (dummy implementation)
    • Add the epoll_pwait2 system call
• Enhanced system calls or features:
  • Processes:
    • Add FUTEX_WAKE_OP support for the futex system call
    • Add WSTOPPED and WCONTINUED support to the wait4 and waitpid system calls
    • Add more fields in /proc/*/stat and /proc/*/status
  • File systems and I/O in general:
    • Add a few more features for the statx system call
    • Fix partial writes and reads in writev and readv
    • Introduce FsType and FsRegistry
  • Sockets and network:
    • Enable UNIX sockets to send and receive file descriptors
    • Support SO_PASSCRED & SCM_CREDENTIALS & SOCK_SEQPACKET for UNIX sockets
    • Add NETLINK_KOBJECT_UEVENT support for netlink sockets (a partial implementation)
    • Support some missing socket options for UNIX stream sockets
    • Truncate netlink messages when the user-space buffer is full
    • Fix the networking address reusing behavior (SO_REUSEADDR)
  • Security:
    • Add basic cgroupfs implementation
• New device support:
  • Add basic i8042 keyboard support
• Enhanced device support:
  • TTY
    • Refactor the TTY abstraction to support multiple I/O devices correctly
    • Enhance the framebuffer console to support ANSI escape sequences
• Test infrastructure:
  • Introduce the system call tests from LTP
  • Use Nix to build initramfs

Asterinas OSTD & OSDK

We have made the following key changes to OSTD:

• CPU architectures:
  • x86-64:
    • Refactor floating-point context management in context switching and signal handling
    • Use iret instead of sysret if the context is not clean
    • Don't treat APIC IDs as CPU IDs
    • Fix some CPUID problems and add support for AMD CPUs
  • RISC-V:
    • Add RISC-V timer support
    • Parse device tree for RISC-V ISA extensions
  • LoongArch:
    • Add the initial LoongArch support
• CPU:
  • Add support for dynamicall-allocated CPU-local objects
  • Require T: Send for CpuLocal<T, S>
• Memory management:
  • Adopt a two-phase locking scheme for page tables
• Trap handling:
  • Create IrqChip abstraction
• Task and scheduling:
  • Rewrite the Rust doc of OSTD's scheduling module
  • Fix the race between enabling IRQs and halting CPU
• Test infrastructure:
  • Add CI to check documentation and publish API documentation to a self-host website

We have made the following key changes to OSDK:

• Add OSDK's code coverage feature
• Support cargo osdk test for RISC-V

Before 0.16.0

Release notes were not kept for versions prior to 0.16.0.