microsandbox-rb 0.14.0 → 0.15.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5347e3ff3b98575cd98ee948fce387efc1bde98da5069fb808ed62e8d065a066
-  data.tar.gz: 4c143ec287857130709632f19d124c56488fd22837215a85e61e7c52da609884
+  metadata.gz: 241dfe5d94b8c98d3c790994698b004a591d66229d9965799fc5886b01e5a19d
+  data.tar.gz: a134b4cbb4b58a60d72d6a7ace30ab6333da4057d0868c1a6e351396b7ff4d00
 SHA512:
-  metadata.gz: f4d810f63d588b685b0393e93d637fa28554bdbfbf34a09b0b5d0ca45a4962acd9ac9991e0e6bd8157e5ef31b9cf4321d6dd20a703ad7d251099b1d4a951f346
-  data.tar.gz: f89447fa04f1bd6112199a7286101c26e1c2bed28d66d08816d171298f357ee412474207b60782b8592838f5191914657adafa3b89745dec9600552cb0507e1b
+  metadata.gz: c326c0481781ae1f3fc19994dfd8e4c004c4bdc8aa81b33e67386538f4fa9ff58cb84514955079c39daa09817c8eba65ac7d4ebe91ab34698ac5fce8cfa9c574
+  data.tar.gz: 1d93018f5982d2767cd66e29c50a195a3d138d7f60f93a2a3e6020384f41ce843e3a0b85d5152a2d17995a724ed9cc6169e72c0bcfc506017e7ae84b3acbe73f

data/CHANGELOG.md

@@ -6,6 +6,38 @@ All notable changes to this gem are documented here. The format is based on
 microsandbox runtime it embeds; each release notes the upstream runtime tag it
 wraps, and the README's Versioning section keeps the full gem→runtime map.
 
+## [0.15.0] - 2026-08-24
+
+Adopts upstream runtime **`v0.6.9` → `v0.6.14`**, stepping through every
+intermediate tag (v0.6.10, v0.6.11, v0.6.12, v0.6.13 each verified and
+committed individually).
+
+### Added
+
+- `ssh.open_client` and `ssh.prepare_server` accept `inactivity_timeout:` —
+  a per-session SSH inactivity timeout in seconds (upstream #1341, `v0.6.10`).
+  `nil` (the default) inherits the global config (600s out of the box), `0`
+  disables the timeout, and a negative or non-finite value raises
+  `ArgumentError`, matching the Python binding's `ValueError` semantics. The
+  SSH inactivity timeout stays separate from the sandbox lifecycle
+  `idle_timeout`.
+
+### Changed
+
+- Upstream runtime highlights carried without further Ruby surface:
+  - `v0.6.10` — bind-mount correctness (contained rootfs patches, parent-first
+    nested destinations, path formatting), guest bootstrap moved off the kernel
+    command line, DNS pins required for deferred domain allows, host-loopback
+    family fallback, configurable global ssh inactivity timeout.
+  - `v0.6.11` / `v0.6.12` — release-pipeline fixes (Linux glibc baseline
+    lowered to 2.28; bundled `msb` executable mode preserved), reflected in the
+    prebuilt bundles the companion binaries gem vendors.
+  - `v0.6.13` — legacy ext4 upper-disk resize support; temporary exec
+    sandboxes stopped on errors; `LocalBackendBuilder::try_build_lazy()` added
+    upstream (embedding-host API — not adopted here, matching the Python
+    binding; the ext stays on `LocalBackend::lazy()`).
+  - `v0.6.14` — `msb_krun` VMM stack bumped to 0.1.32.
+
 ## [0.14.0] - 2026-08-24
 
 Runtime tag unchanged — still upstream **`v0.6.9`**.

data/Cargo.lock

@@ -102,6 +102,12 @@ version = "0.2.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
 
+[[package]]
+name = "ambient-authority"
+version = "0.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e9d4ee0d472d1cd2e28c97dfa124b3d8d992e10eb0a035f33f5d12e3a177ba3b"
+
 [[package]]
 name = "android_system_properties"
 version = "0.1.5"
@@ -869,6 +875,36 @@ dependencies = [
  "pkg-config",
 ]
 
+[[package]]
+name = "cap-primitives"
+version = "4.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b5f74729fd2f44701d1a8eb47e906cdb3ccd9ec0f02baad85a744b791940b18"
+dependencies = [
+ "ambient-authority",
+ "fs-set-times",
+ "io-extras",
+ "io-lifetimes 3.0.1",
+ "ipnet",
+ "maybe-owned",
+ "rustix",
+ "rustix-linux-procfs",
+ "windows-sys 0.60.2",
+ "winx",
+]
+
+[[package]]
+name = "cap-std"
+version = "4.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1ec78e242cfa2cfe276807ac2ecc00315a6c97786977414bcd1c3963b6c91b8"
+dependencies = [
+ "cap-primitives",
+ "io-extras",
+ "io-lifetimes 3.0.1",
+ "rustix",
+]
+
 [[package]]
 name = "capng"
 version = "0.2.3"
@@ -1723,7 +1759,7 @@ dependencies = [
  "libc",
  "option-ext",
  "redox_users",
- "windows-sys 0.59.0",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -2023,6 +2059,17 @@ dependencies = [
  "percent-encoding",
 ]
 
+[[package]]
+name = "fs-set-times"
+version = "0.20.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94e7099f6313ecacbe1256e8ff9d617b75d1bcb16a6fddef94866d225a01a14a"
+dependencies = [
+ "io-lifetimes 2.0.4",
+ "rustix",
+ "windows-sys 0.52.0",
+]
+
 [[package]]
 name = "fs_extra"
 version = "1.3.0"
@@ -2046,9 +2093,9 @@ checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
 
 [[package]]
 name = "futures"
-version = "0.3.32"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b147ee9d1f6d097cef9ce628cd2ee62288d963e16fb287bd9286455b241382d"
+checksum = "9a31d2a3fbaaeb2af2368bbdd904aa8e812d3c04a1ee10d3171f52d556e5d0a3"
 dependencies = [
  "futures-channel",
  "futures-core",
@@ -2061,9 +2108,9 @@ dependencies = [
 
 [[package]]
 name = "futures-channel"
-version = "0.3.32"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
+checksum = "b1f9e3d69d39e4862ffed03ed071a76f9a13ba1d9109d355b0f0aa6b15e393c4"
 dependencies = [
  "futures-core",
  "futures-sink",
@@ -2071,15 +2118,15 @@ dependencies = [
 
 [[package]]
 name = "futures-core"
-version = "0.3.32"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+checksum = "92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e"
 
 [[package]]
 name = "futures-executor"
-version = "0.3.32"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
+checksum = "031b47cf1a3c6cc8bc2fc76cd437f521619387907d469316e7c0bc278f1f5432"
 dependencies = [
  "futures-core",
  "futures-task",
@@ -2099,9 +2146,9 @@ dependencies = [
 
 [[package]]
 name = "futures-io"
-version = "0.3.32"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
+checksum = "53c0fa8157de1303bfffdaa1cc2a673bfffb60102f76b0ef4441659124373fed"
 
 [[package]]
 name = "futures-lite"
@@ -2118,32 +2165,32 @@ dependencies = [
 
 [[package]]
 name = "futures-macro"
-version = "0.3.32"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
+checksum = "9fb9654ba8355388abeb8dcb4fc62f511300867002afc858860463bdd9fe0c44"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.118",
+ "syn 3.0.4",
 ]
 
 [[package]]
 name = "futures-sink"
-version = "0.3.32"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+checksum = "1944426bf7d03f1d14f708785e4b33efd750b36d48a157b836b3efc15ede8e1d"
 
 [[package]]
 name = "futures-task"
-version = "0.3.32"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+checksum = "cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd"
 
 [[package]]
 name = "futures-util"
-version = "0.3.32"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+checksum = "0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc"
 dependencies = [
  "futures-channel",
  "futures-core",
@@ -2832,6 +2879,28 @@ dependencies = [
  "rand_core 0.10.1",
 ]
 
+[[package]]
+name = "io-extras"
+version = "0.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20fd6de4ccfcc187e38bc21cfa543cb5a302cb86a8b114eb7f0bf0dc9f8ac00f"
+dependencies = [
+ "io-lifetimes 3.0.1",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "io-lifetimes"
+version = "2.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06432fb54d3be7964ecd3649233cddf80db2832f47fec34c01f65b3d9d774983"
+
+[[package]]
+name = "io-lifetimes"
+version = "3.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f0fb0570afe1fed943c5c3d4102d5358592d8625fda6a0007fdbe65a92fba96"
+
 [[package]]
 name = "ipnet"
 version = "2.12.0"
@@ -3284,6 +3353,12 @@ dependencies = [
  "regex-automata",
 ]
 
+[[package]]
+name = "maybe-owned"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4facc753ae494aeb6e3c22f839b158aebd4f9270f55cd3c79906c45476c47ab4"
+
 [[package]]
 name = "md-5"
 version = "0.11.0"
@@ -3317,8 +3392,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -3326,6 +3401,8 @@ dependencies = [
  "base64 0.23.1",
  "blake3",
  "bytes",
+ "cap-primitives",
+ "cap-std",
  "chrono",
  "ciborium",
  "crossterm",
@@ -3377,8 +3454,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-agent-client"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "ciborium",
  "microsandbox-protocol",
@@ -3390,8 +3467,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-db"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "async-trait",
  "sea-orm",
@@ -3402,8 +3479,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-filesystem"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "libc",
  "microsandbox-utils",
@@ -3415,8 +3492,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-image"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "astral-tokio-tar",
  "async-compression",
@@ -3442,8 +3519,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-metrics"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "chrono",
  "libc",
@@ -3454,8 +3531,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-migration"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "sea-orm-migration",
  "serde_json",
@@ -3463,8 +3540,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-network"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "base64 0.22.1",
  "bytes",
@@ -3507,8 +3584,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-protocol"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "chrono",
  "ciborium",
@@ -3522,8 +3599,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-runtime"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "bytes",
  "chrono",
@@ -3557,8 +3634,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-types"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "chrono",
  "ipnetwork",
@@ -3566,13 +3643,14 @@ dependencies = [
  "serde_json",
  "sha2 0.11.0",
  "thiserror",
+ "typed-path",
  "zeroize",
 ]
 
 [[package]]
 name = "microsandbox-utils"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "dirs",
  "libc",
@@ -3584,8 +3662,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-vsock"
-version = "0.6.9"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.9#664552c033a5976c5c318eb1cef94867fce619ee"
+version = "0.6.14"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.14#b30fd164ad8640cbc34f6aa9645f9c265c3490b8"
 dependencies = [
  "libc",
  "msb_krun",
@@ -3597,7 +3675,7 @@ dependencies = [
 
 [[package]]
 name = "microsandbox_rb"
-version = "0.14.0"
+version = "0.15.0"
 dependencies = [
  "chrono",
  "futures",
@@ -3702,9 +3780,9 @@ dependencies = [
 
 [[package]]
 name = "msb_krun"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "40e6b83f6cf90f676779409ac026f4429adfd7a11886085a59773ddd3aa8207f"
+checksum = "d4c0de669aeda774c3da60692af7e693fdf000f4813922b15389dd1209b042ac"
 dependencies = [
  "crossbeam-channel",
  "kvm-bindings",
@@ -3722,9 +3800,9 @@ dependencies = [
 
 [[package]]
 name = "msb_krun_arch"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "929f9765edd9e12cc45e5876998456bf2dfb0d2244d4fe6ddf2fdb5c3dd7e99c"
+checksum = "0e9631350df54bde880a7cf3fda67ff03132b115abae95f7b668599611286c87"
 dependencies = [
  "kvm-bindings",
  "kvm-ioctls",
@@ -3737,15 +3815,15 @@ dependencies = [
 
 [[package]]
 name = "msb_krun_arch_gen"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df83bf780774e4e131547a4e17d0ca389e5bbb04cdebcb626880b090cae20f2c"
+checksum = "fb11ff7f19adb1ee23d25ca65c9a06a75069e3b949e70922ba52a133dc9e43bb"
 
 [[package]]
 name = "msb_krun_cpuid"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c569d5d7285ed8f8f80e58454fb3ee213fd2c06ec647cc108a16a2e095558bb"
+checksum = "09a315fabad3ffbf3cd6b4922dfa8e95b25e11624f548850c8029f46039c332a"
 dependencies = [
  "kvm-bindings",
  "kvm-ioctls",
@@ -3754,9 +3832,9 @@ dependencies = [
 
 [[package]]
 name = "msb_krun_devices"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "422da6e72923c2debae8eaeddd2990b924df9042079b51a323b4f3de37ebbdaf"
+checksum = "b54befdee0428ae481ecd894306f2ceef19ad951275908bd4d9182a4216a4933"
 dependencies = [
  "bitflags 1.3.2",
  "capng",
@@ -3784,9 +3862,9 @@ dependencies = [
 
 [[package]]
 name = "msb_krun_hvf"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e5034e7b5ebd4f2f8caefb199f5f18483f8ed0c5cc6afb944b6ed0d127d59aa9"
+checksum = "cbde98ef6b71b920af6e4a8ee89110ffac6204942620799772dad12dcf2273ac"
 dependencies = [
  "crossbeam-channel",
  "libloading",
@@ -3796,9 +3874,9 @@ dependencies = [
 
 [[package]]
 name = "msb_krun_kernel"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "04163d07028500bf08e6247c40c64dd5bae462bbb1997cf6a9613d019976a055"
+checksum = "080d35863dad4a81a5eb6c5ff9292caab0219e50e7c8b3d0da4ebe74e7797322"
 dependencies = [
  "msb-vm-memory",
  "msb_krun_utils",
@@ -3806,9 +3884,9 @@ dependencies = [
 
 [[package]]
 name = "msb_krun_polly"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9812193639b368ab800b5f87e18509ad30fd85a2e6a77a05265ffadfed2553d1"
+checksum = "af85cc51c6f8f196224793975aad7da7e51ef8247b42b5cd8f7635561a9d5fdb"
 dependencies = [
  "libc",
  "msb_krun_utils",
@@ -3816,18 +3894,18 @@ dependencies = [
 
 [[package]]
 name = "msb_krun_smbios"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8cfd3f05f6447f0ad85f04f688b106eb9f04bb64525fee1183757cf9705070a0"
+checksum = "f36a5c9866ccf755b4675338d4e696ee50e7425a153ac71db89e3bb95b1cffce"
 dependencies = [
  "msb-vm-memory",
 ]
 
 [[package]]
 name = "msb_krun_utils"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b5ce62484f07792ab43a5ac64baa84435556f56a7633805e15030e990c3b98a3"
+checksum = "112be8806546f721718a88ba01f9e86d4189aff39f79d5816a90465e9eb4dbe0"
 dependencies = [
  "bitflags 1.3.2",
  "crossbeam-channel",
@@ -3841,9 +3919,9 @@ dependencies = [
 
 [[package]]
 name = "msb_krun_vmm"
-version = "0.1.31"
+version = "0.1.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67546eb70fa306e3c7e97f525dac2db44b9cc1642b6684aec4369e3b7f9b3af3"
+checksum = "f9865e5331c61d4dea48fae764f5c6a8248f83cd8d0f961dd03598b79885ace4"
 dependencies = [
  "bzip2",
  "crossbeam-channel",
@@ -4639,7 +4717,7 @@ dependencies = [
  "once_cell",
  "socket2",
  "tracing",
- "windows-sys 0.60.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -4806,9 +4884,9 @@ checksum = "cca7ad6a7e21e72151d56fe2495a259b5670e204c3adac41ee7ef676ea08117a"
 
 [[package]]
 name = "rcgen"
-version = "0.14.8"
+version = "0.14.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "57f6d249aad744e274e682777a50283a225a32705394ee6d5fcc01efa25e4055"
+checksum = "091e7a8e7d86e6feb87a27ce8e2cba29d49eff9507afeebefab7eeb2ca667fb4"
 dependencies = [
  "pem",
  "ring",
@@ -5012,9 +5090,9 @@ dependencies = [
 
 [[package]]
 name = "russh"
-version = "0.62.5"
+version = "0.62.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da7c230e0ed9cbeb92fbad6c8848985d6df2a1464c0dc247a021abd666e9005e"
+checksum = "b41043523e0edcbd4e31d00903e26f12994f63b21bae9904f7405c1ed92752a5"
 dependencies = [
  "aes 0.9.1",
  "aws-lc-rs",
@@ -5180,6 +5258,16 @@ dependencies = [
  "windows-sys 0.52.0",
 ]
 
+[[package]]
+name = "rustix-linux-procfs"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2fc84bf7e9aa16c4f2c758f27412dc9841341e16aa682d9c7ac308fe3ee12056"
+dependencies = [
+ "once_cell",
+ "rustix",
+]
+
 [[package]]
 name = "rustls"
 version = "0.23.41"
@@ -6231,6 +6319,17 @@ dependencies = [
  "unicode-ident",
 ]
 
+[[package]]
+name = "syn"
+version = "3.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6275cddf4610d1775e6d1fe9469b2e77d0f39fd98fb7450901b821e0c53649f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
 [[package]]
 name = "sync_wrapper"
 version = "1.0.2"
@@ -7368,6 +7467,16 @@ dependencies = [
  "memchr",
 ]
 
+[[package]]
+name = "winx"
+version = "0.36.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f3fd376f71958b862e7afb20cfe5a22830e1963462f3a17f49d82a6c1d1f42d"
+dependencies = [
+ "bitflags 2.13.0",
+ "windows-sys 0.52.0",
+]
+
 [[package]]
 name = "wit-bindgen"
 version = "0.51.0"

data/DESIGN.md

@@ -184,7 +184,7 @@ extension.
 
 `ext/microsandbox/Cargo.toml` depends on the core crate via a **pinned git tag**
 (`microsandbox` / `microsandbox-network`, pinned to the same tag as
-`Microsandbox::RUNTIME_VERSION` — currently `v0.6.9`), so the gem builds anywhere
+`Microsandbox::RUNTIME_VERSION` — currently `v0.6.14`), so the gem builds anywhere
 — CI, `rake-compiler-dock` release containers, and end-user source installs —
 without an adjacent checkout. For fast local development against a sibling
 microsandbox checkout, copy `.cargo/config.toml.example` to `.cargo/config.toml`

data/README.md

@@ -524,8 +524,8 @@ change diverged the two numbers — the gem version is **not** a reliable indica
 of the embedded runtime version. To learn which runtime a build wraps, ask it:
 
 ```ruby
-Microsandbox::VERSION          # => "0.13.0"  (the gem's own version)
-Microsandbox.runtime_version   # => "v0.6.9"  (the embedded upstream runtime tag)
+Microsandbox::VERSION          # => "0.15.0"  (the gem's own version)
+Microsandbox.runtime_version   # => "v0.6.14" (the embedded upstream runtime tag)
 ```
 
 The companion [`microsandbox-rb-binaries`](#the-runtime-binaries) gem is
@@ -557,6 +557,7 @@ stale.
 | `0.12.0` | `v0.6.8` | adopts upstream `v0.6.8` (**breaking**): `Sandbox.list`/`.list_with` return a cursor-paginated `SandboxPage` (`limit:`/`cursor:` keywords), `UnsupportedError` re-keyed by structured operations with `#operation`/`#hint`; runtime adds a shared log registry for followed streams and cloud exec/ssh reconnects |
 | `0.13.0` | `v0.6.9` | adopts upstream `v0.6.9` (**breaking**): a bare `MSB_API_KEY` no longer selects the cloud backend (explicit `MSB_BACKEND=cloud` or a cloud profile required; invalid cloud config fails closed with `InvalidConfigError`); snapshot payload integrity becomes opt-in (`record_integrity:`, `verify` can report `:not_recorded`). Parity: default-workload execution (`exec_default`/`exec_default_stream`/`attach_default`, `cmd:`), flat root disks (`RootDisk.flat`), `modify(root_disk_size:)`, `rate_limiter:`, `vsock:`, `default_backend_info`, `Volume.get_default` |
 | `0.14.0` | `v0.6.9` | two-gem split: SDK-only gem (no build-time runtime download) + companion `microsandbox-rb-binaries` platform gems |
+| `0.15.0` | `v0.6.14` | adopts upstream `v0.6.10`–`v0.6.14` step by step: bind-mount correctness, guest bootstrap off the kernel command line, DNS pins for deferred domain allows, Linux glibc 2.28 baseline for the prebuilt runtime, legacy ext4 upper-disk resize, `msb_krun` 0.1.32. Parity: `ssh.open_client`/`prepare_server` accept `inactivity_timeout:` (seconds; `0` disables, `nil` inherits the 600s global default) |
 
 **Going forward** — the gem version moves on its own semver track and no longer
 mirrors the upstream tag:

data/ext/microsandbox/Cargo.toml

@@ -6,8 +6,8 @@ name = "microsandbox_rb"
 description = "Ruby SDK native extension for microsandbox — secure, fast microVM-based sandboxing."
 # Must equal Microsandbox::VERSION (lib/microsandbox/version.rb) — Native.version
 # returns this via env!("CARGO_PKG_VERSION") and version_spec.rb asserts equality.
-# The core-crate dependency below stays pinned at its own tag (v0.6.9).
-version = "0.14.0"
+# The core-crate dependency below stays pinned at its own tag (v0.6.14).
+version = "0.15.0"
 authors = ["Super Rad Company <development@superrad.company>"]
 repository = "https://github.com/superradcompany/microsandbox"
 license = "Apache-2.0"
@@ -42,8 +42,8 @@ rb-sys = "0.9"
 # first-use download into ~/.microsandbox (`setup::install`, which is not
 # gated on "prebuilt"). "net"/"ssh"/"keyring" are the features the official
 # SDKs ship with.
-microsandbox = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.9", default-features = false, features = ["keyring", "net", "ssh"] }
-microsandbox-network = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.9" }
+microsandbox = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.14", default-features = false, features = ["keyring", "net", "ssh"] }
+microsandbox-network = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.14" }
 # The *guest* agent (`agentd`, PID 1 inside every microVM) is embedded into the
 # extension by microsandbox-filesystem's build.rs, which without its "prebuilt"
 # feature demands a locally built `build/agentd` (workspace-only, `just
@@ -52,7 +52,7 @@ microsandbox-network = { git = "https://github.com/superradcompany/microsandbox"
 # prebuilt agentd for the target arch is fetched (same behaviour as before)
 # while the SDK-level msb download above stays off. Feature unification means
 # this adds no new crates; keep it on the same tag as the deps above.
-microsandbox-runtime = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.9", default-features = false, features = ["prebuilt"] }
+microsandbox-runtime = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.14", default-features = false, features = ["prebuilt"] }
 
 # Async core bridged to Ruby's synchronous API via a blocking tokio runtime.
 tokio = { version = "1", features = ["rt-multi-thread", "sync", "time"] }

data/ext/microsandbox/src/sandbox.rs

@@ -866,11 +866,14 @@ impl Sandbox {
     //----------------------------------------------------------------------
 
     /// Open a native in-process SSH client to this sandbox. `opts`: user, term,
-    /// sftp (bool, default true).
+    /// sftp (bool, default true), inactivity_timeout (seconds, f64; 0 disables).
     fn ssh_open_client(&self, opts: RHash) -> Result<crate::ssh::SshClient, Error> {
         let user = conv::opt_string(opts, "user")?;
         let term = conv::opt_string(opts, "term")?;
         let sftp = conv::opt::<bool>(opts, "sftp")?.unwrap_or(true);
+        let inactivity_timeout = conv::opt_f64(opts, "inactivity_timeout")?
+            .map(secs_to_duration)
+            .transpose()?;
         let ssh = self.inner.ssh();
         let client = block_on(ssh.open_client_with(move |mut b| {
             if let Some(u) = user {
@@ -879,6 +882,9 @@ impl Sandbox {
             if let Some(t) = term {
                 b = b.term(t);
             }
+            if let Some(t) = inactivity_timeout {
+                b = b.inactivity_timeout(t);
+            }
             b.sftp(sftp)
         }))
         .map_err(error::to_ruby)?;
@@ -886,12 +892,16 @@ impl Sandbox {
     }
 
     /// Prepare a reusable SSH server endpoint. `opts`: host_key_path,
-    /// authorized_keys_path, user, sftp (bool, default true).
+    /// authorized_keys_path, user, sftp (bool, default true),
+    /// inactivity_timeout (seconds, f64; 0 disables).
     fn ssh_prepare_server(&self, opts: RHash) -> Result<crate::ssh::SshServer, Error> {
         let host_key_path = conv::opt_string(opts, "host_key_path")?;
         let authorized_keys_path = conv::opt_string(opts, "authorized_keys_path")?;
         let user = conv::opt_string(opts, "user")?;
         let sftp = conv::opt::<bool>(opts, "sftp")?.unwrap_or(true);
+        let inactivity_timeout = conv::opt_f64(opts, "inactivity_timeout")?
+            .map(secs_to_duration)
+            .transpose()?;
         let ssh = self.inner.ssh();
         let server = block_on(ssh.prepare_server_with(move |mut b| {
             if let Some(p) = host_key_path {
@@ -903,6 +913,9 @@ impl Sandbox {
             if let Some(u) = user {
                 b = b.user(u);
             }
+            if let Some(t) = inactivity_timeout {
+                b = b.inactivity_timeout(t);
+            }
             b.sftp(sftp)
         }))
         .map_err(error::to_ruby)?;

data/lib/microsandbox/ssh.rb

@@ -231,11 +231,17 @@ module Microsandbox
     # @param user [String] guest user to authenticate as (default "root")
     # @param term [String, nil] TERM value for the session
     # @param sftp [Boolean] enable the SFTP subsystem (default true)
+    # @param inactivity_timeout [Numeric, nil] per-session inactivity timeout in
+    #   seconds; `nil` inherits the global config (default 600s), `0` disables it
     # @yieldparam client [SshClient]
     # @return [SshClient, Object]
-    def open_client(user: "root", term: nil, sftp: true)
+    def open_client(user: "root", term: nil, sftp: true, inactivity_timeout: nil)
       opts = {"user" => user.to_s, "sftp" => sftp ? true : false}
       opts["term"] = term.to_s if term
+      unless inactivity_timeout.nil?
+        opts["inactivity_timeout"] =
+          Sandbox.send(:coerce_duration, inactivity_timeout, "inactivity_timeout")
+      end
       client = SshClient.new(@native.ssh_open_client(opts))
       return client unless block_given?
 
@@ -251,12 +257,19 @@ module Microsandbox
     # @param authorized_keys_path [String, nil] authorized_keys file path
     # @param user [String, nil] guest user connections run as
     # @param sftp [Boolean] enable the SFTP subsystem (default true)
+    # @param inactivity_timeout [Numeric, nil] per-session inactivity timeout in
+    #   seconds; `nil` inherits the global config (default 600s), `0` disables it
     # @return [SshServer]
-    def prepare_server(host_key_path: nil, authorized_keys_path: nil, user: nil, sftp: true)
+    def prepare_server(host_key_path: nil, authorized_keys_path: nil, user: nil, sftp: true,
+      inactivity_timeout: nil)
       opts = {"sftp" => sftp ? true : false}
       opts["host_key_path"] = host_key_path.to_s if host_key_path
       opts["authorized_keys_path"] = authorized_keys_path.to_s if authorized_keys_path
       opts["user"] = user.to_s if user
+      unless inactivity_timeout.nil?
+        opts["inactivity_timeout"] =
+          Sandbox.send(:coerce_duration, inactivity_timeout, "inactivity_timeout")
+      end
       SshServer.new(@native.ssh_prepare_server(opts))
     end
   end

data/lib/microsandbox/version.rb

@@ -8,12 +8,12 @@ module Microsandbox
   # Versioning section of the README for the full gem-to-runtime map. Must equal
   # the native ext's Cargo crate version (`Native.version`), enforced by
   # spec/unit/version_spec.rb.
-  VERSION = "0.14.0"
+  VERSION = "0.15.0"
 
   # The upstream microsandbox runtime release this gem build embeds — the `tag`
   # pinned on the `microsandbox`/`microsandbox-network` git deps in
   # ext/microsandbox/Cargo.toml. Exposed at runtime as
   # {Microsandbox.runtime_version}. spec/unit/version_spec.rb asserts it stays in
   # sync with the Cargo tag so it can't silently drift out of date.
-  RUNTIME_VERSION = "v0.6.9"
+  RUNTIME_VERSION = "v0.6.14"
 end

data/sig/microsandbox.rbs

@@ -653,8 +653,9 @@ module Microsandbox
 
   class SshOps
     def initialize: (untyped native) -> void
-    def open_client: (?user: String, ?term: String?, ?sftp: bool) ?{ (SshClient) -> untyped } -> untyped
+    def open_client: (?user: String, ?term: String?, ?sftp: bool,
+                      ?inactivity_timeout: Numeric?) ?{ (SshClient) -> untyped } -> untyped
     def prepare_server: (?host_key_path: String?, ?authorized_keys_path: String?,
-                         ?user: String?, ?sftp: bool) -> SshServer
+                         ?user: String?, ?sftp: bool, ?inactivity_timeout: Numeric?) -> SshServer
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: microsandbox-rb
 version: !ruby/object:Gem::Version
-  version: 0.14.0
+  version: 0.15.0
 platform: ruby
 authors:
 - ya-luotao