0.16.0

Added

• tinirc: Write tinirc's pid to /tmp/tinirc.pid (#277)
• set-attr/stop: Add attributes exec_stop and stop_timeout (#275)
• init/de-init: Add flag "-m" to be minimally intrusive, add flag -p to specify pf file (#284)
• init: Add flag -s to not alter syslogd settings, deprecate flag -f pf_file, as it is replaced by -p (#284)
• vnet: Add global configuration POT_ISOLATE_VNET_POTS to prevent direct traffic between VNET pots (#283)

Fixed

• tinirc: Overwrite tinirc on start instead of appending to an existing file (#277)
• start: Fix setting of nullfs attribute
• set-status: Ignore status files that predate system boot (#278)
• set-status: Forward verbosity flags (#279)
• network: Find bridge interfaces by interface group, this allows custom bridge names (#282)

0.15.6

This release includes improvements and fixes for round mount-in/mount-out operations and an extension to support customizing pf rules to accommodate a wider range of network environments. Thanks to all contributors!

Added

• start: Add custom pf rule configuration hook, POT_EXPORT_PORTS_PF_RULES_HOOK (#273)
• Remove basepath from mountpoint, make mount-in/out errors more visible (#259)

0.15.5

This release contains fixes and features around attributes, thanks to all contributors!

Added

• set-attr: Add support for setting devfs_ruleset (#270)
• set-attr: Add support for setting mlock, sysvshm, sysvsem, sysvmsg, retire sysvipc attribute, which was always a noop (#263)

Fixed

• pot-cmd: Output problems with pot root to stderr (#254)
• version: Don't require pot root to exist to run version command (#253)
• mount-in: Skip empty lines in fscomp.conf during mount process (#258)

Features and Fixes

This release is mostly about stabilizing the 0.15 line, but also brings in
a couple of new features, some provided by new contributors, thanks! 👍

Added

• set-attr: add jail attributes "raw_sockets", "sysvipc" (#247, #248)
• import/export/prepare: support signing pots (#221)

Changed

• flavours: scripts are made executable when loading
• destroy: remove status file when destroying
• vnet: use unique epaira interface names (#232)
• Add pot group to protect pot root (#240)

Fixed

• Reverted the change of permissions of pot root mountpoint to fix a regression (#233)
• set-attr: fix no-etc-hosts attribute handling
• Remove leftover mount points on destroy (#236)
• set-attr/get-attr: fix help output (#245)
• Fix running flavour script on non-persistent pot (#238)

New Contributors

• @zilti made their first contribution in #247
• @reezer made their first contribution in #246

Full Changelog: 0.15.3...0.15.4

0.15.3

Fix release

Fixed

• stop: Destroy epair interface if stop is not called from start (#229)

0.15.2

Fix release

Fixed

• start: fix pot getting stuck in state "starting" on pot start failure (#227)

0.15.1

Fix release

Fixed

• set-status: introduced a bug that prevent to stop pots

0.15.0

Tons of changes for this new release

Added

• mount-out: new command to remove or unmount a previously mount-in folder or fs
• attribute no-tmpfs: an attribute, for single dataset only, to not use tmpfs for /tmp
• create/import: inherit ZFS encryption property from parent filesystem (#196)
• attribute no-etchosts: an attribute, to not inject additional /etc/hosts entries from potnet
• last-run-stats: new command to get statistics on the last run of a pot, currently contains "ExitCode", which is the exit code of pot.cmd (#200)
• start: return with code 125 in case pot.cmd of a non-persistent pot failed (#200)
• tinirc: wait for epair interface, exit early if it doesn't become available (#204)
• ifconfig: label and group interfaces created by pot (#206)
• clone: add dns option, to customize DNS configuration while cloning (#199)
• prepare: add -d option to change dns configuration during clone (#192)
• signal: send signals to processes running inside a pot (#216)
• exec: command to execute programs inside a running pot (#217)

Changed

• Stop logging trivial commands like get-rss to syslog by default (#190)
• get-rss: test if the pot is running, instead of it only exists during input validation
• mount-in: mountpoint cannot contain spaces anymore (#187)
• start: allow pots to run for less than 5 seconds (#200)
• start: always stop and cleanup non-persistent pots once pot.cmd finished, prevents stray background tasks from keeping them alive (#200)
• prune: add flag "-g" to delay pruning of pots that just stopped, so users have a chance to inspect last-run-stats (#200)
• help: rework usage screens (#209)
• prepare: enable attribute no-tmpfs and no-etc-hosts (#192)
• tests: improved monitoring of tests, requires sysutils/flock on FreeBSD (#220)
• Change permissions of pot root mount point to be only accessible by root user (#218)

Fixed

• start: correct invocation of prestart and poststart hooks (#200)
• tinirc: configure address selection policy (#205)
• fdescfs/procfs: fixed the correcte behavior of those attribute, such as mount them at start
• mount-out: fix it
• clone: fix cleanup after failed clone (#214)
• start/stop: heavy rework to fix concurrency (#202)

0.14.0

Several quality of life improvements and an important fix in the copy-in command.
A big thank you to the community, for patches and fixes! Without you, this project wouldn't exist!

Added

• copy-in: -c option to create missing dirs on copy-in (#172)
• create: New command copy-in-flv, which is the same as copy-in, but always relative to flavourdir (#173)
• init: -f option to specify pf file to patch on init (#181)

Changed

• start: do not write jid files to POT_TMP (#178)
• start/stop: remove pot_stopped files from TMP_DIR after stopping non-persistent jails (#179)

Fixed

• prepare: fix -N option to allow network-type "host" as used by nomad-pot-driver (#177)
• copy-in: fix tmp source directory creation

0.13.0

New major version with layered images, new features to simplify github action custom runner and several fixes.
Special thanks to @grembo for the design and implementation of layered images

Added

• import-export: add support for layered images (#151)
• POT_TMP: add a parameter to select the folder used to create temporary files
• flavour: -f option support a full pathname (#161)
• copy-out: new command to copy file or folder out from a pot (#162)

Changed

• start: simplify startup, use jexec to run pot.cmd (#150)
• flavour: the current directory is added to the flavour search path (#161)

Fixed

• start/stop: prevent stopping non-persistent jails twice (#152)
• stop: garbage collect POSIX shared memory (#150)
• start: fix ncat failing to start due to argv handling (#167)