buninu-linux 0.11.56 → 0.14.57

package/NOTICE.md

@@ -139,83 +139,83 @@ the built image redistributes them.
 - License: GPL-2.0-only WITH Linux-syscall-note
 - See: `LICENSES/GPL-2.0.txt` and `LICENSES/Linux-syscall-note.txt`
 
-Linux 6.18.56 as packaged by Alpine Linux 3.24 from the `linux-lts` aport.
-The default build uses package `linux-virt`, version 6.18.56-r0.
-`--linux-lts` and `--real` use package `linux-lts`, version 6.18.56-r0.
+Linux 6.18.57 as packaged by Alpine Linux 3.24 from the `linux-lts` aport.
+The default build uses package `linux-virt`, version 6.18.57-r0.
+`--linux-lts` and `--real` use package `linux-lts`, version 6.18.57-r0.
 Each comes from the x86_64 or aarch64 repository to match `--arch`. All
 listed modules are the selected package's `.ko.gz` files decompressed without
 modification.
 
-- Upstream source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.56.tar.xz
+- Upstream source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.57.tar.xz
 - Alpine build recipe, configuration and patches (Corresponding Source),
-  pinned to the commit shipping 6.18.56-r0 (the same for both architectures):
-  https://gitlab.alpinelinux.org/alpine/aports/-/blob/efc8ddbb20c827d2bd8223c19a2625e754e5cb3c/main/linux-lts/APKBUILD
+  pinned to the commit shipping 6.18.57-r0 (the same for both architectures):
+  https://gitlab.alpinelinux.org/alpine/aports/-/blob/0c40eb4fea009af7de457fa20e186f43a88e0954/main/linux-lts/APKBUILD
 - Packages:
-  https://dl-cdn.alpinelinux.org/alpine/v3.24/main/x86_64/linux-virt-6.18.56-r0.apk
-  SHA-256 `755deb045cfeb8c2bcaa2b2febe01ab2101d747921e64d4cd54d0312321e8d5d`
-  https://dl-cdn.alpinelinux.org/alpine/v3.24/main/x86_64/linux-lts-6.18.56-r0.apk
-  SHA-256 `b0d8cc4d7e031b5619221e7978920d051bf1dd1e335f6d05d03964b2285fc3b4`
-  https://dl-cdn.alpinelinux.org/alpine/v3.24/main/aarch64/linux-virt-6.18.56-r0.apk
-  SHA-256 `e3839bfd751ff0a4421484f712b9b29efb514024523736a0ef62521521571b12`
-  https://dl-cdn.alpinelinux.org/alpine/v3.24/main/aarch64/linux-lts-6.18.56-r0.apk
-  SHA-256 `795bcd49840be7f4ff9566f5f669201bd41202376a455b720a98eb814f0e72f8`
+  https://dl-cdn.alpinelinux.org/alpine/v3.24/main/x86_64/linux-virt-6.18.57-r0.apk
+  SHA-256 `414aa2572ef88164b1af9905fa6dfbe863bf50f6130d895d57282dea3e15f7b9`
+  https://dl-cdn.alpinelinux.org/alpine/v3.24/main/x86_64/linux-lts-6.18.57-r0.apk
+  SHA-256 `7614556471859956a436b95813daf409b444aa849ec899178b404e828c5a9d98`
+  https://dl-cdn.alpinelinux.org/alpine/v3.24/main/aarch64/linux-virt-6.18.57-r0.apk
+  SHA-256 `b3820fee22e0366a15f7c139e5bc00348e333f3e7f77802271df7ded795aee4f`
+  https://dl-cdn.alpinelinux.org/alpine/v3.24/main/aarch64/linux-lts-6.18.57-r0.apk
+  SHA-256 `67b8f61c5cfb6ac9b5a65cb1610b67d467e6c4ffc17e7d29dbea4bd8c447ff32`
 
 SHA-256 of files in the default x86_64 `linux-virt` image:
 
 ```text
-kernel/x86_64/vmlinuz-virt   dc99c86bb8e58cb4eda5f01eac44c4d972105945a46dfe76a9e86e8529915c72
-failover.ko                  ddf94fe8a89b24e839f21866f828adc3eb91e62fa46dd977c74d7c2b6f92fe21
-net_failover.ko              fb710ef0450417dea2f6dede919d14f5a4a94b1be73f338cfe2ed05e32f0cc30
-virtio_net.ko                2fb98ab7d06cfb7a1e1a07dcc5098da44316360097d75e288a30ad4855c449f7
+kernel/x86_64/vmlinuz-virt   3725536e1c015345d781430b728849c2f090cf2040af00d7fe825920a106a08e
+failover.ko                  f373917790e5e17b8c0c278efdd6fef7545ee8362510efaa80efb821e553f0b3
+net_failover.ko              78fce63b3625b11bc65d4f0eb8f844796cad472ef14302016458ac60f898ac95
+virtio_net.ko                18addca2d17e0b01b9adc64111b0409c08da6a196215e68bfda067309ff323a8
 ```
 
 SHA-256 of files in an x86_64 `--linux-lts` image:
 
 ```text
-kernel/x86_64/vmlinuz-lts   e893ce0f7aecbdf2dcf012659ec5a0b35740780ae5c3af5ad188029f5cd4aa8f
-failover.ko                 59e4e4808dca2d18d849c2da850e4ea659485007b09a690c7e57fb0e623cd1df
-net_failover.ko             20dd06a6f6f1528079a438630d741f125d11cc9bae58d618e0e6381f8bff6f5c
-virtio_net.ko               39bcd12bfc3149351fa226dabdbb1f82137c53f3b1ccbacbf30661bf8ff99ad4
-virtio_ring.ko              e8fdebd89345ef39a54d3b23e6f2a57c6c4b201708b35113705b56d0fa373596
-virtio.ko                   d4ab148e31f5d4d5a1dd3c3f30bb52ba9a13e670929c9f7f1668396edf8049b7
-virtio_pci_legacy_dev.ko    15c35c8875b68dcaed3ac58d463d1b3f2c3e52dcf9a3840366d3fa6da7cd4dd7
-virtio_pci_modern_dev.ko    59bd6e34e6cf3c0ce54bab1eca1d7ac0325112280a6718613460002d2cde70d0
-virtio_pci.ko               cc3ad8eaffa321bd58dbd663afba074dee81a5ad6f283d50cd5b1b340672430e
+kernel/x86_64/vmlinuz-lts   674c615f1f0887621e6609becd11a7db40cc71b7616644fcc260b4b226a52103
+failover.ko                 00d409746a8033e5acf0d4d0b8db4589d48168f2965e4de0c05374bc4e3a4025
+net_failover.ko             afbe1a6cd279381ade52943158c62931d79f38dcd293e31ef522878ff82c17ed
+virtio_net.ko               84b658a64416094f3bc793ac43ccd987e087898d0c0510ddf5f9e53e0f9b36ff
+virtio_ring.ko              db497b3c23133f48b5a48800695b9f7068244dfa9d52cd1d10b5d4618e68fb60
+virtio.ko                   c867c11e61db4c9c4a7af54f29ba9d127759706854ba84bf42ca6f2ae8b4f71a
+virtio_pci_legacy_dev.ko    8825df8124c86800b3bf3d3403f6aba47d527d02565f91baddebe40ea0f66f88
+virtio_pci_modern_dev.ko    3ba582ad90247b04fe2afe289d2b51a39e3efc1cc40e58f55e7701062141e061
+virtio_pci.ko               5f6baef35e1536d735628e14fa3172c27228cd26f7c80b7465d2afbed8ee3876
 ```
 
 `--real` additionally includes the following modules from that same
 x86_64 `linux-lts` package for physical xHCI controllers and USB HID keyboards:
 
 ```text
-usb-common.ko               37feaa14670d4bbd3dca77d701344d2fb02e2cb139d21c5af8b2c140aab5c6fe
-usbcore.ko                  75efddfd7d1bf996ad99f0d9be790be767ca72ebdb53a00194b449c3588faa16
-xhci-hcd.ko                 bd5772b2ba908dff16c74ae10211a1e5cfd72910d861dbdf30b8f71c5995066a
-xhci-pci.ko                 6c688038c9b45297fce752c8f0443cd0f398f31e0b4efffd7f869325ce9884fa
-xhci-pci-renesas.ko         aa08808c9e609fe570a1c5b90d0f0ba33f2ca2e7d84e8ccbb3a2856fe65a7b3f
-hid.ko                      161160bf12d18a24c25aef6355e265142fc4fb2122b09923a6e184fabedf6246
-hid-generic.ko              6d5ae3cfd8f8b034cbe444869485ac9012376c4ca604a3cd039f0cae442005f9
-usbhid.ko                   6ed1e4891b242f64520621d689a24828dfc24a96236c71b86d9af9361248aa5a
+usb-common.ko               eb9d7b52b5c8f74b062ea3efbd8112c1460e3d34c0338e538602c648b958a8ef
+usbcore.ko                  30286b4e42c985e56903f41fd35233b3b35700b96ab99b088b1d91735c8e6e94
+xhci-hcd.ko                 f0988c511d5692265f8c5221d77c468c9650151f3d69b5b68988eba9d1fab7f1
+xhci-pci.ko                 a9145f467b6bf9b099e52eb5ac41b0c1164d9400e5b2f5f9d595ff58b4d776fb
+xhci-pci-renesas.ko         2d88a4e72512944b62a4394172702db8dc211ccc7b99a93778f2d42ed8a23caf
+hid.ko                      7994f6b42f1df68a62312cf4de50a22b1a9756c3da91966a634630a62b18ae10
+hid-generic.ko              ea2eb7491e30bef769d2c419a2ccc9d55db030edddfe531c0d4e4723e170a4c3
+usbhid.ko                   899f357db5ba74182cf9161a577b080f8a6a9b0b015f6a322a5c31bf8754188b
 ```
 
 SHA-256 of files in the default aarch64 `linux-virt` image:
 
 ```text
-kernel/aarch64/vmlinuz-virt  039c532c2fa8f49896a679065d79a03b8a444c9d54fa80ac9bc4d0ce1ecd0ca6
-failover.ko                  ce65a98acce98720753c4a9a7e339f6c70d22eae70b65cc1b4211543a7c6c3a3
-net_failover.ko              39c9222d800ae95d8a82ff797e408187411ac2ff47bec2c9d7ddbfe99537dbe3
-virtio_net.ko                762f8e362ae2e2bbf200ab9bc742524999e8bce12c72671bf8560fd9bb7907d5
+kernel/aarch64/vmlinuz-virt  60603568b5589c730e9183e5d6d4f0b8575ddac31e9187222decc92416329b26
+failover.ko                  792943de0975a4111d2040ab35cc214e5b1b4ec8c12dbc9725fd0602a56f1576
+net_failover.ko              ba3ab71ef38aa3a957c5b0fe7ddd908e31635e408f5937bccb50f36bb78761ba
+virtio_net.ko                716e32b4425aa8dd4ebfeb6808e58c125e6b125c71b00ba8288851363f72fa60
 ```
 
 SHA-256 of files in an aarch64 `--linux-lts` image:
 
 ```text
-kernel/aarch64/vmlinuz-lts  de5ff95fd663a30e53765cb0794707656bb80749d77f16bbf94225d17c512447
-failover.ko                 7f3d40067603c9916d22e9d85fea1512bd95c087aaae774e5ea70f8bacb7ae04
-net_failover.ko             085e4fd53a40704408b6bf914ee464d16007296fa3615940fa54688afe84466c
-virtio_net.ko               4ea86521819063df91cfd18191e8bc2bd2551392e8f7a33126df0aba675ee409
-virtio_pci_legacy_dev.ko    baf8033c183819a8bccacf36677247740a5cff9eec9b403b94840af258b60b6e
-virtio_pci_modern_dev.ko    2905133de7c9baceff9fc6a27dba9b8469744019545c19cf1456e64f7e50f062
-virtio_pci.ko               3b506947c25866e08a311f124cd143bd0f501179f0b556aed7ca4d6632143d8d
+kernel/aarch64/vmlinuz-lts  19fc9f974bb3cb666b8a216f18ca9f9df8e1658da4e9e55ed464c3fcaf87a303
+failover.ko                 d243de2d9c2b2c34094c125719fa784b2e476986bfcd5766b96e7f7fbcb658ac
+net_failover.ko             675cdf971cbb2ab15f8db6295afadcfc852172f38d289e9935ed28386e3e38f6
+virtio_net.ko               34ea985ebf0bef82731f398aa3aca9030d6d7882d4bcb1542fd17d8637cad70e
+virtio_pci_legacy_dev.ko    17f1487bf62ac3b2961f5f959fb28a2e1135db565e8a77296372c5101e00aae1
+virtio_pci_modern_dev.ko    e7a76945ae0b9c75af78a77950a4f22c95758fe507db2b77fbc168a4d6f842d8
+virtio_pci.ko               76efc4e0428eb0413727247f41972d72c3f2ed1373f7e94f88052357a097b6a8
 ```
 
 ### linuxx64.efi.stub and linuxaa64.efi.stub
@@ -285,8 +285,8 @@ committed source files, but their contents are redistributed in the image.
 | Package | Version | Package license | Project / package page | Installed license and notices (relative to `/usr/lib/node_modules/`) |
 |---|---|---|---|---|
 | `buninu-browser` | 0.2.3 | MIT for the browser's own code; bundled components retain their own terms | https://github.com/jjtseng93/buninu-browser | `buninu-browser/LICENSE`, `THIRD_PARTY_NOTICES.md`, `LICENSES/` and vendor notices within that package |
-| `buninu-land` | 0.1.2 | MIT for its own code; bundled components retain their own terms | https://github.com/jjtseng93/buninu-land | `buninu-land/LICENSE`, `THIRD_PARTY_NOTICES.md`, `LICENSES/`, `SOURCES.md`, protocol XML notices and vendor notices |
-| `@drxiaozhi/casty` | 1.3.6 | MIT | https://github.com/jjtseng93/casty | `@drxiaozhi/casty/LICENSE` |
+| `buninu-land` | 0.1.3 | MIT for its own code; bundled components retain their own terms | https://github.com/jjtseng93/buninu-land | `buninu-land/LICENSE`, `THIRD_PARTY_NOTICES.md`, `LICENSES/`, `SOURCES.md`, protocol XML notices and vendor notices |
+| `@drxiaozhi/casty` | 1.3.7 | MIT | https://github.com/jjtseng93/casty | `@drxiaozhi/casty/LICENSE` |
 | `@drxiaozhi/jspulse` | 0.2.1 | LGPL-2.1-or-later, with additional component notices | https://github.com/jjtseng93/jspulse | `@drxiaozhi/jspulse/LICENSE`, `NOTICE.md`, `LICENSES/` and source-file notices within that package |
 | `@drxiaozhi/jspinyin` | 0.1.1 | MIT; hanzipinyin material under the Unlicense | https://www.npmjs.com/package/@drxiaozhi/jspinyin | `@drxiaozhi/jspinyin/LICENSE` and `@drxiaozhi/jspinyin/LICENSE-hanzipinyin.md` |
 
@@ -320,8 +320,11 @@ the source archive or rebuild material merely to reduce the image size.
 
 ### Buninu Land
 
-The compositor package is extracted in full, including its CanvasKit WASM,
-loader, protocol XML, source provenance, patches and license collection.
+The compositor package retains its loader, protocol XML, source provenance,
+patches and license collection. When its CanvasKit WASM is byte-identical to
+the system copy, packing omits the duplicate and the distribution launcher
+creates a relative symlink to `/lib/canvaskit/canvaskit.wasm`. Differing WASM
+versions remain bundled. All associated licenses and notices are retained.
 Retain `THIRD_PARTY_NOTICES.md`, `SOURCES.md`, `vendor-manifest.json`,
 `LICENSES/`, `vendor/canvaskit/LICENSE`, and the notices embedded in the
 Wayland protocol XML files. These cover Buninu Browser-derived code,

package/README.md

@@ -35,10 +35,10 @@
   * Bun reaches its interactive REPL
   * `start` starts the Buninu userspace shell
   * `cfg.disk` + shell `mount` mounts local disks
-  * `cfg.net` loads common wired NIC and Android USB-tethering drivers
+  * `cfg.net` loads common wired NIC and Android USB-tethering drivers and automatically attempts DHCP configuration
   * `cfg.sound` loads every packaged ALSA sound module
   * Android phone USB tethering over RNDIS has been tested successfully, allowing Buninu Linux to access the Internet through an Android phone
-  * IP addresses and routes are configured manually because the image does not yet include a DHCP client.
+  * After a DHCP lease expires or when you need fresh network settings, run `dhclient usb0` (using your interface name). Manual configuration with `ip` remains available.
   * The bundled `jmi` editor, jsmdcui App runtime, and local JavaScript execution also work.
   * Multi-tasking with kernel VT or jsmdcui
     + See [Multitasking modes](#multitasking-modes)
@@ -227,8 +227,7 @@ It supports Chinese text, emoji and the browser's terminal graphics. Use
 `Ctrl+Alt+F1` to return to the original console and `Ctrl+Alt+F2` to return
 to this terminal.
 
-There is no DHCP client yet; configure a detected wired interface with `ip` as
-described under [Basic configuration](#basic-configuration). Run `poweroff` for a synced
+Run `poweroff` for a synced
 shutdown. After editing the initramfs, `bun ./index.js -b --real --export` rebuilds the
 image; `-h` lists all flags.
 
@@ -384,9 +383,16 @@ cfg.power
 cfg.sound
 ```
 
-`cfg.net` loads the packaged wired-network and Android USB-tethering drivers and prints detected
-interfaces and MAC addresses. There is no DHCP client yet, so configure the
-interface manually after entering the Buninu shell with `start()`:
+`cfg.net` loads the packaged wired-network and Android USB-tethering drivers,
+prints detected interfaces and MAC addresses, and automatically attempts DHCP
+configuration. If it succeeds, no additional DHCP command is needed.
+
+After a lease expires or when you need to obtain network settings again,
+enter the Buninu shell with `start()` and run `dhclient usb0` (replace `usb0`
+with your interface name). It configures the interface once and exits;
+there is no automatic renewal.
+
+For a manually configured static address, use:
 
 ```sh
 ip link set eth0 up
@@ -695,6 +701,8 @@ If there is no sound, check step 4's terminal for errors, and make sure
 | `mount` | `mount(2)` with type detection, `-o` parsing, `LABEL=`/`UUID=`, bind/move/remount; loads required filesystem and disk modules | `mount --help` → `/usr/share/doc/buninu-linux/mount.md` |
 | `umount` | `umount2(2)` with `-l`, `-f`, `-R` | `umount --help` |
 | `ip` | iproute2 grammar over `SIOC*` ioctls and `/proc/net`: `link`, `addr`, `route`, `neigh` | `ip --help` |
+| `dhclient` | Reacquire DHCPv4 settings after expiry or when needed (`dhclient usb0`), then exit; also supports release | `dhclient --help` |
+| `ping` | IPv4 ICMP / IPv6 ICMPv6 echo via Bun FFI; count, interval, timeout, deadline, payload size, TTL and source selection | `ping --help` |
 | `ps` | composable process fields from `/proc`; also exports its snapshot and single-row formatter for other commands | `ps --help` |
 | `top` | periodically refreshes the process snapshot and rows supplied by `ps` | `top --help` |
 | `poweroff` | sync pending writes and power off through the Linux reboot system call | `poweroff --help` |
@@ -717,6 +725,14 @@ above, implemented as Bun scripts or thin launchers for bundled packages.
 For Debian/Alpine rootfs and Chromium examples, see
 [Optional chroot and native binaries](#optional-chroot-and-native-binaries).
 
+`ping -c 4 127.0.0.1` checks IPv4 connectivity; `ping -6 -c 4 ::1` checks
+IPv6. `ping -c 10 -i 0.2 -W 1 HOST` adjusts count, interval and reply timeout.
+The command uses ICMP sockets directly, with a raw-socket fallback when needed.
+It supports Linux glibc/musl and native Android bionic through the shared libc
+loader; `BUNINU_LIBC` remains an explicit override. Run
+`bun test test/ping.test.js test/libc.test.js` to compare against the installed
+system ping. See `ping --help` for permission requirements and supported flags.
+
 ### Buninu Browser (early-stage, experimental)
 
 `buninu-browser` is still in an early stage. Websites may render incorrectly
@@ -763,7 +779,8 @@ The `/bin/buninu-land` launcher sets `CASTY_BROWSER` to
 `/usr/lib/node_modules/buninu-land/compositor.js` and runs the bundled Casty.
 `--casty` forwards arguments to Casty; `--headless`, `--help`, `--version`,
 README options and reserved native frontends go through the package entry.
-The package's CanvasKit WASM and license files are retained unchanged.
+The package's CanvasKit WASM shares the system copy when byte-identical;
+its loader and license files are retained.
 
 ### Archive tools and other examples
 
@@ -1178,7 +1195,7 @@ initramfs/                init.js, commands, userspace: the same for every archi
 native/<arch>/            musl and the GCC runtime (committed); bun and modules (fetched)
 ```
 
-The `--real` inputs are Alpine v3.24 `linux-lts-6.18.56-r0`, musl `1.2.6-r2`,
+The `--real` inputs are Alpine v3.24 `linux-lts-6.18.57-r0`, musl `1.2.6-r2`,
 `systemd-efistub-260.2-r0`, `libstdc++`/`libgcc` `15.2.0-r5`, and Bun 1.4.2
 `linux-x64-musl-baseline`. The aarch64 guest uses the same versions from
 Alpine's aarch64 repository and Bun's `linux-aarch64-musl`. There is no BusyBox
@@ -1193,11 +1210,11 @@ extracts from it. Bumping a version changes both the file name and the hash, so
 it always refetches.
 
 The five application packages are pinned separately in
-`scripts/npm-packages.md`: `buninu-browser@0.2.3`, `buninu-land@0.1.2`,
-`@drxiaozhi/casty@1.3.6`, `@drxiaozhi/jspulse@0.2.1`, and
+`scripts/npm-packages.md`: `buninu-browser@0.2.4`, `buninu-land@0.1.4`,
+`@drxiaozhi/casty@1.3.7`, `@drxiaozhi/jspulse@0.2.1`, and
 `@drxiaozhi/jspinyin@0.1.1`. These were npm's `latest` versions when checked
 on 2026-10-11, with buninu-browser updated on 2026-10-12, and
-casty 1.3.6 and buninu-land 0.1.2 verified on 2026-10-16;
+casty 1.3.7 and buninu-land 0.1.3 verified on 2026-10-16;
 fetch never resolves `latest` or a version range at runtime.
 Each registry tarball was checked against its published SHA-512 integrity
 before its SHA-256 was recorded in the shared pins file.
@@ -1342,7 +1359,7 @@ The physical boot chain is firmware → the UKI stub → its embedded
 and, with the currently pinned kernel, embeds this complete command line:
 
 ```text
-console=ttyS0,115200 console=tty0 REAL_MACHINE=1 panic=0 PATH=/bin KERNEL_RELEASE=6.18.56-0-lts rdinit=/bin/bun -- -e import('/init.js')
+console=ttyS0,115200 console=tty0 REAL_MACHINE=1 panic=0 PATH=/bin KERNEL_RELEASE=6.18.57-0-lts rdinit=/bin/bun -- -e import('/init.js')
 ```
 
 Serial kernel logging is retained, while the final console makes
@@ -1366,7 +1383,7 @@ the same way). Build without `--real`; this selects Alpine `linux-virt`, omits t
 module set, and puts `ttyS0` last so serial stdio owns `/dev/console`:
 
 ```text
-console=tty0 console=ttyS0,115200 panic=0 PATH=/bin KERNEL_RELEASE=6.18.56-0-virt rdinit=/bin/bun -- -e import('/init.js')
+console=tty0 console=ttyS0,115200 panic=0 PATH=/bin KERNEL_RELEASE=6.18.57-0-virt rdinit=/bin/bun -- -e import('/init.js')
 ```
 
 Build and boot it with:
@@ -1483,7 +1500,7 @@ The default `--real` image embeds this kernel command line (shown for the
 currently pinned LTS release):
 
 ```text
-console=ttyS0,115200 console=tty0 REAL_MACHINE=1 panic=0 PATH=/bin KERNEL_RELEASE=6.18.56-0-lts rdinit=/bin/bun -- -e import('/init.js')
+console=ttyS0,115200 console=tty0 REAL_MACHINE=1 panic=0 PATH=/bin KERNEL_RELEASE=6.18.57-0-lts rdinit=/bin/bun -- -e import('/init.js')
 ```
 
 The physical display (`tty0`) is the final console and therefore owns PID 1's
@@ -1562,8 +1579,22 @@ custom `libinit.so` is needed.
 On a `--real` boot, init starts `/etc/resolv.conf` with `1.1.1.1` and
 `8.8.8.8`; these are initial public resolvers until the user replaces them
 with DNS appropriate for the local network. Hardware networking remains down
-until `cfg.net` loads the packaged drivers and the user assigns an address and
-route.
+until `cfg.net` loads the packaged drivers and attempts DHCP configuration.
+Manual address and route configuration with `ip` remains available.
+
+`cfg.net` starts DHCP in the background for every detected non-loopback interface.
+It returns immediately; failures and acquisition timeouts are logged without
+interrupting init. Each client exits after configuring its lease; no renewal process stays running.
+Repeated `cfg.net` calls do not launch duplicate active clients. Route metrics
+start at 100; only the first interface updates DNS, leaving the init fallback
+resolver available if it cannot acquire a lease.
+
+After a lease expires or when network settings need to be obtained again,
+run `dhclient usb0` (or `dhclient eth0`, depending on the interface name).
+This is not an extra step after successful automatic configuration by `cfg.net`.
+`dhclient` exits after configuration; `-timeout 20` limits acquisition to 20
+seconds. Leases do not renew automatically. For manual static configuration,
+see [Basic configuration](#basic-configuration).
 
 On a `--real` image the REPL also offers the getter-based `cfg` namespace:
 `cfg.net`, `cfg.disk`, `cfg.power`, `cfg.sound` and `cfg.all` run as soon as the property is read, without
@@ -1696,9 +1727,9 @@ when redistributing the image.
 | systemd EFI stub | LGPL-2.1-or-later | image only |
 | Bun | MIT, plus the licenses of what it statically links | image only |
 | buninu-browser 0.2.3 | MIT for its own code; bundled components have their own licenses | npm download → image |
-| buninu-land 0.1.2 | MIT for its own code; bundled components retain their own licenses and notices | npm download → image |
+| buninu-land 0.1.3 | MIT for its own code; bundled components retain their own licenses and notices | npm download → image |
 | wasmpeg / FFmpeg (`@wasmpeg/cpu` 1.0.1, bundled in buninu-browser) | LGPL-2.1-or-later, plus component notices; source archive and rebuild documentation retained | browser package → image |
-| `@drxiaozhi/casty` 1.3.6 | MIT | npm download → image |
+| `@drxiaozhi/casty` 1.3.7 | MIT | npm download → image |
 | `@drxiaozhi/jspulse` 0.2.1 | LGPL-2.1-or-later, plus component notices | npm download → image |
 | `@drxiaozhi/jspinyin` 0.1.1 | MIT; hanzipinyin material under the Unlicense | npm download → image |
 | CanvasKit 0.41.1 (`initramfs/lib/canvaskit/`, Skia compiled to WebAssembly) | BSD-3-Clause (`LICENSES/BSD-3-Clause-Skia.txt`) | committed |

package/fetch-alpine.sh

@@ -63,7 +63,7 @@ select_optional_module() {
 # Network: virtio-net for QEMU (init.js loads these at boot). virtio_pci is
 # the PCI transport for every virtio device, disk included; linux-virt builds
 # it in, linux-lts has it as a module that nothing in modules.dep pulls in.
-for module in failover net_failover virtio_net; do select_module "$module"; done
+for module in failover net_failover virtio_net af_packet; do select_module "$module"; done
 select_optional_module virtio_pci
 # Storage: what /bin/mount loads on demand. ext4 brings jbd2, mbcache and
 # crc16; FAT, exFAT and NTFS ask the kernel for the NLS tables at mount

package/initramfs/bin/buninu-land

@@ -3,10 +3,12 @@
 // preserve the distribution entry point.
 import { resolve, join } from "node:path";
 import { pathToFileURL } from "node:url";
+import { ensureLandResources } from "../lib/browser-resources.js";
 
 const root = resolve(import.meta.dir, "..");
 const modules = join(root, "usr/lib/node_modules");
 const browser = join(modules, "buninu-land");
+ensureLandResources(browser, root);
 const entry = join(browser, "index.js");
 const { chooseFrontend } = await import(pathToFileURL(entry).href);
 const args = process.argv.slice(2);

package/initramfs/bin/dhclient

@@ -0,0 +1,8 @@
+#!/bin/bun
+import {parseDhclient,runDhclient} from '../lib/dhclient.js';
+import {showDocument} from '../lib/document.js';
+try {
+  const options=parseDhclient(Bun.argv.slice(2));
+  if(options.help)await showDocument('dhclient');
+  else process.exitCode=await runDhclient(options);
+}catch(error){console.error(`dhclient: ${error.message}`);process.exitCode=1;}

package/initramfs/bin/ping

@@ -0,0 +1,8 @@
+#!/bin/bun
+import {parsePing,runPing} from '../lib/ping.js';
+import {showDocument} from '../lib/document.js';
+try {
+  const options=parsePing(Bun.argv.slice(2));
+  if(options.help)await showDocument('ping');
+  else process.exitCode=await runPing(options);
+} catch(error) {console.error(`ping: ${error.message}`);process.exitCode=2;}

package/initramfs/buninu/apps/jsgotty/gotty.js

@@ -1001,7 +1001,9 @@ class CursorStateTracker {
 }
 
 class KittyGraphicsParser {
-  constructor() {
+  constructor({ binaryData = false } = {}) {
+    // Local renderers can consume bytes directly; browser clients retain base64.
+    this.binaryData = binaryData;
     this.pending = Buffer.alloc(0);
     this.transfers = new Map();
     this.images = new Map();
@@ -1220,7 +1222,7 @@ class KittyGraphicsParser {
       width: Number.parseInt(existing.control.s || "0", 10),
       height: Number.parseInt(existing.control.v || "0", 10),
       mime: existing.control.U || existing.control.mime || null,
-      data: binary.toString("base64")
+      data: this.binaryData ? binary : binary.toString("base64")
     };
 
     this.images.set(imageId, image);

package/initramfs/init.js

@@ -495,7 +495,7 @@ globalThis.start = launchBuninu;
 // cfg.net loads every packaged network module, including PHY and bus support
 // that a kernel userspace modprobe helper would normally load on demand. It
 // then reports the device matches and lists the resulting interfaces. The
-// address and route are still yours to set with `ip`.
+// DHCP runs independently afterward; errors and timeouts never block init.
 const configureEthernet = () => {
   const { autoload, modprobeAll } = require("/lib/modprobe.js");
   const { readdirSync, readFileSync } = require("node:fs");
@@ -529,12 +529,13 @@ const configureEthernet = () => {
     const carrier = read(`/sys/class/net/${name}/carrier`);
     console.log(`eth: ${name} ${read(`/sys/class/net/${name}/address`)} ${read(`/sys/class/net/${name}/operstate`)}${carrier === "1" ? " carrier" : ""}`);
   }
-  if (interfaces.length) console.log(`eth:
-  Next steps in shell( after start() ):
-  ip link set ${interfaces[0]} up
-  ip addr add A.B.C.D/24 dev ${interfaces[0]};
-  ip route add default via GATEWAY
-`);
+  try {
+    const { startDhcp } = require("/lib/dhcp-start.js");
+    startDhcp(interfaces);
+  } catch (error) {
+    console.log(`[dhcp setup] unavailable: ${error?.message ?? error}; init continues`);
+  }
+  console.log("[dhcp] If automatic DHCP fails, run start() to enter the shell, then try dhclient usb0 (replace usb0 with your interface) or configure the network manually with ip commands. Use ip link to list network interfaces.");
   return interfaces;
 };
 

package/initramfs/lib/browser-resources.js

@@ -23,3 +23,14 @@ export function ensureBrowserResources(browser, systemRoot = "/") {
     catch (error) { if (error.code !== "EEXIST") throw error; }
   }
 }
+
+// Land keeps its own loader and notices; only the identical WASM is shared.
+export function ensureLandResources(land, systemRoot = "/") {
+  const path = join(land, "vendor/canvaskit/canvaskit.wasm");
+  if (lstat(path)) return;
+  const target = resolve(systemRoot, "lib/canvaskit/canvaskit.wasm");
+  if (!statSync(target).isFile()) throw new Error(`missing compositor resource: ${target}`);
+  mkdirSync(dirname(path), { recursive: true });
+  try { symlinkSync(relative(dirname(path), target), path); }
+  catch (error) { if (error.code !== "EEXIST") throw error; }
+}

package/initramfs/lib/bunterm/images.js

@@ -16,7 +16,8 @@ const number = (value, fallback = 0) => {
 // encoded format Skia knows); 24 and 32 are raw RGB / RGBA. Bun.Image, when
 // present, transcodes encodings Skia cannot read on its own.
 export const decodeImage = async (CanvasKit, image) => {
-  const bytes = Buffer.from(image.data, "base64");
+  // The local parser supplies bytes; retain compatibility with base64 callers.
+  const bytes = typeof image.data === "string" ? Buffer.from(image.data, "base64") : image.data;
   if (image.format === 24 || image.format === 32) {
     const { width, height } = image;
     if (!width || !height) throw new Error("raw image without dimensions");

package/initramfs/lib/bunterm/renderer.js

@@ -58,7 +58,7 @@ const isSingleCodePoint = (text) => {
 };
 
 export class Renderer {
-  constructor({ CanvasKit, screen, fonts, fontSize = 16, lineHeight = 1, theme = defaultTheme }) {
+  constructor({ CanvasKit, screen, fonts, fontSize = 13, lineHeight = 1, theme = defaultTheme }) {
     this.CanvasKit = CanvasKit;
     this.screen = screen;
     this.canvas = screen.canvas;

package/initramfs/lib/bunterm/terminal.js

@@ -49,7 +49,7 @@ export const createSession = ({
   fonts,
   command = "/bin/sh",
   argv = [],
-  fontSize = 16,
+  fontSize = 13,
   lineHeight = 1,
   theme = defaultTheme,
   scrollback = 1000,
@@ -70,7 +70,7 @@ export const createSession = ({
   term.loadAddon(new UnicodeGraphemesAddon());
   term.unicode.activeVersion = "15-graphemes";
   const images = new ImageStore({ CanvasKit, term, renderer });
-  const kitty = new KittyGraphicsParser();
+  const kitty = new KittyGraphicsParser({ binaryData: true });
 
   const backend = new BunPtyBackend({
     command,

package/initramfs/lib/dhclient.js

@@ -0,0 +1,135 @@
+import {readFileSync,writeFileSync,mkdirSync,renameSync,unlinkSync,openSync,closeSync} from 'node:fs';
+import {dirname,resolve} from 'node:path';
+import {DhcpClient} from './dhcp.js';
+import {interfaceInfo,openTransport} from './dhcp-transport.js';
+export function parseDhclient(args) {
+  const o={timeout:60,dns:true,resolv:'/etc/resolv.conf',once:true,release:false,verbose:false};
+  for(let i=0;i<args.length;i++){
+    const a=args[i];
+    if(['--help','-h','-help'].includes(a))return {...o,help:true};
+    if(a==='-4'||a==='-d')continue;
+    if(a==='-1')o.once=true;
+    else if(a==='-r')o.release=true;
+    else if(a==='-v')o.verbose=true;
+    else if(a==='-q')o.quiet=true;
+    else if(a==='--no-dns')o.dns=false;
+    else if(['-timeout','-lf','-H','--resolv-conf','--metric'].includes(a)){
+      const value=args[++i];if(!value||value.startsWith('-'))throw new Error(`${a} requires a value`);
+      if(a==='-timeout'){o.timeout=Number(value);if(!Number.isFinite(o.timeout)||o.timeout<=0)throw new Error('timeout must be positive');}
+      if(a==='--metric'){o.metric=Number(value);if(!Number.isInteger(o.metric)||o.metric<0||o.metric>32766)throw new Error('metric must be between 0 and 32766');}
+      if(a==='-lf')o.leaseFile=resolve(value);
+      if(a==='-H'){if(!/^[a-zA-Z0-9][a-zA-Z0-9.-]{0,252}$/.test(value))throw new Error('invalid hostname');o.hostname=value;}
+      if(a==='--resolv-conf')o.resolv=resolve(value);
+    }else if(a.startsWith('-'))throw new Error(`unsupported option: ${a} (DHCPv4 only; see --help)`);
+    else if(o.interface)throw new Error('specify one interface per process');
+    else o.interface=a;
+  }
+  if(!o.interface||!/^[a-zA-Z0-9_.:-]{1,15}$/.test(o.interface))throw new Error('specify an Ethernet interface, e.g. dhclient usb0. Use ip link to list network interfaces; use dhclient -h or dhclient --help for help.');
+  o.leaseFile??=`/var/lib/dhclient/${o.interface}.json`;
+  if(args.includes('-1')&&o.release)throw new Error('-1 and -r cannot be combined');
+  return o;
+}
+export async function runIp(args) {
+  const p=Bun.spawn([process.execPath,`${import.meta.dir}/../bin/ip`,...args],{stdout:'pipe',stderr:'pipe'});
+  const [status,out,err]=await Promise.all([p.exited,new Response(p.stdout).text(),new Response(p.stderr).text()]);
+  if(status)throw new Error(`ip ${args.join(' ')}: ${err.trim()||out.trim()}`);
+  return out;
+}
+const readOptional=path=>{try{return readFileSync(path,'utf8');}catch(e){if(e.code==='ENOENT')return null;throw e;}};
+export function saveLease(path,lease) {
+  mkdirSync(dirname(path),{recursive:true});const tmp=`${path}.${process.pid}.tmp`;
+  writeFileSync(tmp,JSON.stringify(lease,null,2)+'\n',{mode:0o600});renameSync(tmp,path);
+}
+export class Configuration {
+  constructor(options,ip=runIp){this.options=options;this.ip=ip;}
+  metric(lease){return lease.metric===undefined?[]:['metric',String(lease.metric)];}
+  async apply(lease,previous) {
+    const o=this.options;
+    lease.metric=o.metric;
+    if(previous&&previous.routers[0]!==lease.routers[0])await this.removeRoute(previous);
+    await this.ip(['addr','replace',`${lease.address}/${lease.prefix}`,'brd','+','dev',o.interface]);
+    if(lease.routers[0])await this.ip(['route','replace','default','via',lease.routers[0],'dev',o.interface,...this.metric(lease)]);
+    if(previous?.resolver)lease.resolver=previous.resolver;
+    if(o.dns&&lease.dns.length){
+      const content=`# dhclient ${o.interface}\n`+lease.dns.map(ip=>`nameserver ${ip}\n`).join('');
+      const old=lease.resolver;
+      // Keep the original resolver across repeated invocations, unless another writer took over.
+      const current=readOptional(o.resolv);
+      lease.resolver={path:o.resolv,before:old?.path===o.resolv&&current===old.written?old.before:current,written:content};
+      writeFileSync(o.resolv,content);
+    }
+  }
+  async removeRoute(lease) {
+    if(!lease.routers[0])return;
+    try{await this.ip(['route','del','default','via',lease.routers[0],'dev',this.options.interface,...this.metric(lease)]);}
+    catch(e){if(!/No such process|No such device|Cannot find device/.test(e.message))throw e;}
+  }
+  async clear(lease) {
+    const errors=[];
+    try{await this.removeRoute(lease);}catch(e){errors.push(e);}
+    // ip addr del checks the current address before deleting it.
+    try{await this.ip(['addr','del',`${lease.address}/${lease.prefix}`,'dev',this.options.interface]);}
+    catch(e){if(!/Cannot assign requested address|Cannot find device/.test(e.message))errors.push(e);}
+    try{
+      const r=lease.resolver;
+      if(r&&readOptional(r.path)===r.written){if(r.before===null)unlinkSync(r.path);else writeFileSync(r.path,r.before);}
+    }catch(e){errors.push(e);}
+    if(errors.length)throw new AggregateError(errors,errors.map(e=>e.message).join('; '));
+  }
+}
+// A command invocation acquires once and exits. There is no renewal daemon.
+export async function manageLease(client,config,{previous,signal,log=console.log,save=()=>{},forget=()=>{}}={}) {
+  let lease,kept=false;
+  try {
+    lease=await client.acquire();
+    if(!lease){if(signal?.aborted)return 0;throw new Error('no DHCP lease received before timeout');}
+    if(signal?.aborted)return 0;
+    await config.apply(lease,previous);await save(lease);
+    log(`bound to ${lease.address}/${lease.prefix}, lease ${lease.seconds}s; configured and exiting (no automatic renewal)`);
+    kept=true;return 0;
+  }finally{
+    if(lease&&!kept){
+      try{client.release(lease);}catch(e){log(`release: ${e.message}`);}
+      await config.clear(lease);await forget();
+    }
+  }
+}
+export async function runDhclient(o) {
+  if(!['linux','android'].includes(process.platform))throw new Error('dhclient requires Linux/Android networking');
+  // Serialize this interface even when callers choose different lease files.
+  const lock=`/run/dhclient-${o.interface}.lock`;mkdirSync(dirname(lock),{recursive:true});
+  let handle;
+  try{handle=openSync(lock,'wx',0o600);}catch(e){if(e.code==='EEXIST')throw new Error(`${lock} exists; stop the other client, or remove this lock if its process died`);throw e;}
+  writeFileSync(handle,`${process.pid}\n`);
+  let transport;
+  const controller=new AbortController(),stop=()=>controller.abort();
+  process.on('SIGINT',stop);process.on('SIGTERM',stop);
+  const log=message=>{if(!o.quiet)console.log(`dhclient: ${message}`);};
+  const forget=()=>{try{unlinkSync(o.leaseFile);}catch(e){if(e.code!=='ENOENT')throw e;}};
+  try{
+    const info=interfaceInfo(o.interface);
+    await runIp(['link','set','dev',o.interface,'up']);
+    try { transport=openTransport(o.interface,info); }
+    catch(error) {
+      if(error.errno!==97)throw error; // EAFNOSUPPORT: Alpine ships AF_PACKET as a module.
+      const {modprobe}=await import('./modprobe.js');
+      modprobe('af_packet');transport=openTransport(o.interface,info);
+    }
+    const client=new DhcpClient({transport,...info,...o,signal:controller.signal,log:o.verbose?log:()=>{}});
+    const config=new Configuration(o);
+    if(o.release){
+      const text=readOptional(o.leaseFile);if(!text)throw new Error(`no saved lease: ${o.leaseFile}`);
+      const lease=JSON.parse(text);if(lease.interface!==o.interface||lease.mac!==info.mac.toString('hex'))throw new Error('saved lease belongs to another interface');
+      try{client.release(lease);}finally{await config.clear(lease);forget();}log(`released ${lease.address}`);return 0;
+    }
+    let previous;
+    const saved=readOptional(o.leaseFile);
+    if(saved){
+      const candidate=JSON.parse(saved);
+      if(candidate.interface===o.interface&&candidate.mac===info.mac.toString('hex'))previous=candidate;
+    }
+    return await manageLease(client,config,{...o,previous,signal:controller.signal,log,save:lease=>saveLease(o.leaseFile,{...lease,interface:o.interface,mac:info.mac.toString('hex')}),forget});
+  }finally{
+    transport?.close();process.off('SIGINT',stop);process.off('SIGTERM',stop);closeSync(handle);unlinkSync(lock);
+  }
+}