buninu-linux 0.13.56 → 0.14.57

package/initramfs/lib/dhcp.js

@@ -0,0 +1,124 @@
+// DHCPv4 codec and lease state machine. Network/configuration adapters are
+// separate so protocol tests never change the host's addresses or resolver.
+import { randomBytes } from 'node:crypto';
+export const TYPE = { DISCOVER:1, OFFER:2, REQUEST:3, DECLINE:4, ACK:5, NAK:6, RELEASE:7 };
+export const ipv4 = text => {
+  const parts=String(text).split('.');
+  if(parts.length!==4 || parts.some(p=>!/^\d{1,3}$/.test(p)||Number(p)>255))throw new Error(`invalid IPv4 address: ${text}`);
+  return Buffer.from(parts.map(Number));
+};
+const address=b=>[...b].join('.');
+export function checksum(b) {let n=0;for(let i=0;i<b.length;i+=2)n+=(b[i]<<8)|(b[i+1]??0);while(n>>>16)n=(n&65535)+(n>>>16);return (~n)&65535;}
+export function encode({type,xid,mac,requested,server,ciaddr='0.0.0.0',hostname,secs=0,broadcast=true}) {
+  const b=Buffer.alloc(240);b[0]=1;b[1]=1;b[2]=6;b.writeUInt32BE(xid,4);b.writeUInt16BE(Math.min(65535,secs),8);
+  b.writeUInt16BE(broadcast?0x8000:0,10);ipv4(ciaddr).copy(b,12);Buffer.from(mac).copy(b,28,0,6);b.writeUInt32BE(0x63825363,236);
+  const options=[];
+  const option=(code,value)=>{value=Buffer.from(value);if(value.length>255)throw new Error('DHCP option too long');options.push(Buffer.from([code,value.length]),value);};
+  option(53,[type]);option(61,[1,...mac]);
+  if(requested)option(50,ipv4(requested));if(server)option(54,ipv4(server));
+  if(hostname)option(12,Buffer.from(hostname));
+  if(type!==TYPE.RELEASE){option(55,[1,3,6,15,28,51,58,59]);option(57,[5,220]);}
+  const packet=Buffer.concat([b,...options,Buffer.from([255])]);
+  return packet.length<300?Buffer.concat([packet,Buffer.alloc(300-packet.length)]):packet;
+}
+export function decode(b,{xid,mac}={}) {
+  if(b.length<240||b[0]!==2||b[1]!==1||b[2]!==6||b.readUInt32BE(236)!==0x63825363)return null;
+  if(xid!==undefined&&b.readUInt32BE(4)!==xid)return null;
+  if(mac&&!b.subarray(28,34).equals(Buffer.from(mac)))return null;
+  const options=new Map();
+  function parse(start,end){for(let i=start;i<end;){const code=b[i++];if(code===255)return true;if(!code)continue;if(i>=end)return false;const len=b[i++];if(i+len>end)return false;options.set(code,Buffer.concat([options.get(code)??Buffer.alloc(0),b.subarray(i,i+len)]));i+=len;}return true;}
+  if(!parse(240,b.length))return null;
+  const overload=options.get(52);if(overload&&(overload.length!==1||overload[0]>3))return null;
+  if(overload?.[0]&1)if(!parse(108,236))return null;
+  if(overload?.[0]&2)if(!parse(44,108))return null;
+  if(options.get(53)?.length!==1)return null;
+  for(const code of [1,28,51,54,58,59])if(options.has(code)&&options.get(code).length!==4)return null;
+  for(const code of [3,6])if(options.has(code)&&(!options.get(code).length||options.get(code).length%4))return null;
+  const ip=code=>options.has(code)?address(options.get(code)):undefined;
+  const ips=code=>{const v=options.get(code),out=[];if(v)for(let i=0;i<v.length;i+=4)out.push(address(v.subarray(i,i+4)));return out;};
+  const number=code=>options.get(code)?.readUInt32BE(0);
+  return {type:options.get(53)[0],xid:b.readUInt32BE(4),address:address(b.subarray(16,20)),server:ip(54),mask:ip(1),routers:options.has(3)?ips(3):undefined,dns:options.has(6)?ips(6):undefined,lease:number(51),t1:number(58),t2:number(59)};
+}
+export function prefixOf(mask) {
+  const n=ipv4(mask).readUInt32BE(),inverse=(~n)>>>0;
+  if((inverse&(inverse+1))!==0)throw new Error('DHCP supplied a non-contiguous subnet mask');
+  return 32-Math.log2(inverse+1);
+}
+export function leaseFrom(reply,previous,now) {
+  const ip=reply.address==='0.0.0.0'?previous?.address:reply.address;
+  const server=reply.server,mask=reply.mask??previous?.mask;
+  if(!ip||ip==='0.0.0.0'||!server||!mask||!reply.lease)throw new Error('DHCP ACK is missing address, server, mask or lease duration');
+  const prefix=prefixOf(mask),seconds=reply.lease;
+  let t1=reply.t1??seconds*.5,t2=reply.t2??seconds*.875;
+  if(!(t1>0&&t1<t2&&t2<seconds)){t1=seconds*.5;t2=seconds*.875;}
+  return {address:ip,server,mask,prefix,routers:reply.routers??previous?.routers??[],dns:reply.dns??previous?.dns??[],seconds,
+    acquiredAt:now,renewAt:now+t1*1000,rebindAt:now+t2*1000,expiresAt:now+seconds*1000};
+}
+// SOCK_DGRAM AF_PACKET supplies/consumes the Ethernet header itself.
+export function wrapIPv4(payload,source='0.0.0.0',destination='255.255.255.255') {
+  const b=Buffer.alloc(28+payload.length);b[0]=0x45;b.writeUInt16BE(b.length,2);b[8]=64;b[9]=17;
+  ipv4(source).copy(b,12);ipv4(destination).copy(b,16);b.writeUInt16BE(checksum(b.subarray(0,20)),10);
+  b.writeUInt16BE(68,20);b.writeUInt16BE(67,22);b.writeUInt16BE(8+payload.length,24);payload.copy(b,28);
+  // IPv4 allows zero UDP checksum; the IPv4 header is checksummed above.
+  return b;
+}
+export function unwrapIPv4(b) {
+  if(b.length<28||b[0]>>>4!==4||b[9]!==17)return null;
+  const h=(b[0]&15)*4,n=b.readUInt16BE(2);
+  if(h<20||n>b.length||n<h+8||(b.readUInt16BE(6)&0x3fff)||checksum(b.subarray(0,h)))return null;
+  const len=b.readUInt16BE(h+4);
+  if(b.readUInt16BE(h)!==67||b.readUInt16BE(h+2)!==68||len<8||h+len>n)return null;
+  if(b.readUInt16BE(h+6)){
+    const pseudo=Buffer.alloc(12);b.copy(pseudo,0,12,20);pseudo[9]=17;pseudo.writeUInt16BE(len,10);
+    if(checksum(Buffer.concat([pseudo,b.subarray(h,h+len)])))return null;
+  }
+  return b.subarray(h+8,h+len);
+}
+export class NakError extends Error {}
+export class DhcpClient {
+  constructor({transport,mac,hostname,timeout=60,signal,log=()=>{},now=Date.now,sleep=ms=>Bun.sleep(ms),random=Math.random}) {
+    Object.assign(this,{transport,mac,hostname,timeout,signal,log,now,sleep,random});
+  }
+  get stopped(){return this.signal?.aborted;}
+  async exchange(fields,types,deadline,server) {
+    const xid=randomBytes(4).readUInt32BE(),start=this.now();let retry=0,next=start;
+    while(!this.stopped&&this.now()<deadline){
+      if(this.now()>=next){
+        const packet=encode({...fields,xid,mac:this.mac,hostname:this.hostname,secs:Math.floor((this.now()-start)/1000)});
+        this.transport.send(packet,fields.broadcast===false?server:undefined);
+        next=this.now()+Math.min(64000,4000*2**Math.min(retry++,4))*(.75+.5*this.random());
+      }
+      // Bound the work per iteration so unrelated traffic cannot starve timers.
+      for(let i=0;i<64;i++){
+        const packet=this.transport.receive();if(!packet)break;
+        const reply=decode(packet,{xid,mac:this.mac});
+        if(!reply||!types.includes(reply.type)||!reply.server||(server&&reply.server!==server))continue;
+        if(reply.type===TYPE.NAK)throw new NakError('DHCP server rejected the lease');
+        return {reply,sentAt:start};
+      }
+      await this.sleep(Math.min(20,Math.max(1,deadline-this.now())));
+    }
+    return null;
+  }
+  async acquire() {
+    const deadline=this.now()+this.timeout*1000;
+    while(!this.stopped&&this.now()<deadline){
+      this.log('DHCPDISCOVER');
+      const offer=await this.exchange({type:TYPE.DISCOVER},[TYPE.OFFER],deadline);
+      if(!offer)return null;
+      if(offer.reply.address==='0.0.0.0')continue;
+      this.log(`DHCPOFFER ${offer.reply.address} from ${offer.reply.server}`);
+      try {
+        const result=await this.exchange({type:TYPE.REQUEST,requested:offer.reply.address,server:offer.reply.server},[TYPE.ACK,TYPE.NAK],Math.min(deadline,this.now()+16000),offer.reply.server);
+        if(result){if(result.reply.address!==offer.reply.address)continue;return leaseFrom(result.reply,offer.reply,result.sentAt);}
+      }catch(error){if(!(error instanceof NakError))throw error;await this.sleep(1000);}
+    }
+    return null;
+  }
+  async renew(lease,rebind=false) {
+    this.log(rebind?'DHCPREQUEST broadcast (rebinding)':'DHCPREQUEST unicast (renewing)');
+    const result=await this.exchange({type:TYPE.REQUEST,ciaddr:lease.address,broadcast:rebind},[TYPE.ACK,TYPE.NAK],rebind?lease.expiresAt:lease.rebindAt,rebind?undefined:lease.server);
+    return result?leaseFrom(result.reply,lease,result.sentAt):null;
+  }
+  release(lease){this.transport.send(encode({type:TYPE.RELEASE,xid:randomBytes(4).readUInt32BE(),mac:this.mac,ciaddr:lease.address,server:lease.server,broadcast:false}),lease.server);}
+}

package/initramfs/lib/dlopen.js

@@ -3,8 +3,7 @@
 // init.js opens musl on its own because it runs before /proc exists and must
 // not import anything. Every other command imports this module instead, so
 // the symbol table, the errno plumbing and the error messages live in one
-// place. The library is located relative to this file (/lib in the guest),
-// which also lets the commands run from a checkout for testing.
+// place. Automatic lookup follows the runtime ABI; BUNINU_LIBC overrides it.
 
 import { dlopen, FFIType, ptr, read, CString, toArrayBuffer } from "bun:ffi";
 
@@ -20,11 +19,13 @@ const architectures = {
 export const arch = architectures[process.arch]
   ?? (() => { throw new Error(`unsupported CPU architecture ${process.arch}`); })();
 
-// BUNINU_LIBC lets the commands run on a glibc host for testing:
-//   BUNINU_LIBC=/lib/aarch64-linux-gnu/libc.so.6 bun initramfs/bin/ip addr
-export const libcPath = process.env.BUNINU_LIBC ?? `${import.meta.dir}/${arch.libc}`;
-
-export const libc = dlopen(libcPath, {
+// Automatic lookup must not mix bionic, glibc and musl runtime ABIs.
+// An explicit override is authoritative: report its error instead of hiding it.
+const android = process.platform === "android";
+const glibc = !android && !!process.report?.getReport?.().header?.glibcVersionRuntime;
+export const libcFamily = android ? "bionic" : glibc ? "glibc" : "musl";
+const errnoSymbol = android ? "__errno" : "__errno_location";
+const definitions = {
   mount: {
     args: [FFIType.ptr, FFIType.ptr, FFIType.ptr, FFIType.u64, FFIType.ptr],
     returns: FFIType.i32,
@@ -41,7 +42,7 @@ export const libc = dlopen(libcPath, {
     args: [],
     returns: FFIType.void,
   },
-  __errno_location: {
+  [errnoSymbol]: {
     args: [],
     returns: FFIType.ptr,
   },
@@ -77,6 +78,14 @@ export const libc = dlopen(libcPath, {
     args: [FFIType.i32, FFIType.i32, FFIType.i32],
     returns: FFIType.i32,
   },
+  bind: { args: [FFIType.i32, FFIType.ptr, FFIType.u32], returns: FFIType.i32 },
+  inet_pton: { args: [FFIType.i32, FFIType.ptr, FFIType.ptr], returns: FFIType.i32 },
+  connect: { args: [FFIType.i32, FFIType.ptr, FFIType.u32], returns: FFIType.i32 },
+  getsockname: { args: [FFIType.i32, FFIType.ptr, FFIType.ptr], returns: FFIType.i32 },
+  setsockopt: { args: [FFIType.i32, FFIType.i32, FFIType.i32, FFIType.ptr, FFIType.u32], returns: FFIType.i32 },
+  send: { args: [FFIType.i32, FFIType.ptr, FFIType.u64, FFIType.i32], returns: FFIType.i64 },
+  sendto: { args: [FFIType.i32, FFIType.ptr, FFIType.u64, FFIType.i32, FFIType.ptr, FFIType.u32], returns: FFIType.i64 },
+  recv: { args: [FFIType.i32, FFIType.ptr, FFIType.u64, FFIType.i32], returns: FFIType.i64 },
   syscall: {
     args: [FFIType.i64, FFIType.i64, FFIType.ptr, FFIType.i64],
     returns: FFIType.i32,
@@ -93,13 +102,51 @@ export const libc = dlopen(libcPath, {
     args: [FFIType.ptr],
     returns: FFIType.i32,
   },
-});
+};
+const override = process.env.BUNINU_LIBC;
+const candidates = override !== undefined ? [override]
+  : android ? ["libc.so", "/apex/com.android.runtime/lib64/bionic/libc.so", "/system/lib64/libc.so"]
+  : glibc ? ["libc.so.6", `/lib/${process.arch === "x64" ? "x86_64" : "aarch64"}-linux-gnu/libc.so.6`, `/usr/lib/${process.arch === "x64" ? "x86_64" : "aarch64"}-linux-gnu/libc.so.6`]
+  : [`${import.meta.dir}/${arch.libc}`, arch.libc, `/lib/${arch.libc}`, `/lib/ld-musl-${process.arch === "x64" ? "x86_64" : "aarch64"}.so.1`, "libc.so"];
+// Bun requires at least one symbol per dlopen call. Defer opening until a
+// symbol is requested; unrelated missing symbols never prevent an import.
+export let libcPath;
+const handles = [], bound = new Map();
+let closed = false;
+function resolve(name) {
+  if (bound.has(name)) return bound.get(name);
+  const failures = [];
+  for (const path of libcPath === undefined ? candidates : [libcPath]) {
+    try {
+      const handle = dlopen(path, { [name]: definitions[name] });
+      libcPath = path; handles.push(handle); bound.set(name, handle.symbols[name]);
+      return handle.symbols[name];
+    } catch (error) { failures.push(`${path}: ${error.message}`); }
+  }
+  throw new Error(`Cannot load libc symbol ${name}:\n${failures.join("\n")}`);
+}
+export const libc = {
+  symbols: new Proxy({}, {
+    get(_target, name) {
+      if (closed) throw new Error("libc is closed");
+      if (!Object.hasOwn(definitions, name)) return undefined;
+      const symbol = resolve(name);
+      // Compile the errno accessor before the native call, so first-use FFI
+      // compilation cannot clobber the errno that the caller wants to inspect.
+      // An absent accessor only fails when errno() is actually requested.
+      if (name !== errnoSymbol && !bound.has(errnoSymbol)) {
+        try { resolve(errnoSymbol); } catch {}
+      }
+      return symbol;
+    },
+  }),
+  close() { if (closed) return; closed = true; for (const handle of handles) handle.close(); },
+};
 
 export const cString = (value) => new TextEncoder().encode(`${value}\0`);
 
 // musl reports failure as -1 plus errno; the raw syscall() wrapper does too.
-const errnoLocation = libc.symbols.__errno_location();
-export const errno = () => read.i32(errnoLocation);
+export const errno = () => read.i32(libc.symbols[errnoSymbol]());
 export const strerror = (code) => new CString(libc.symbols.strerror(code)).toString();
 
 export const Errno = {

package/initramfs/lib/ping.js

@@ -0,0 +1,110 @@
+import { isIP } from 'node:net';
+import { randomBytes } from 'node:crypto';
+
+export function parsePing(args) {
+  const o={count:4,interval:1,timeout:2,deadline:Infinity,size:56,ttl:64,family:0,quiet:false,timestamp:false};
+  const values={c:'count',i:'interval',W:'timeout',w:'deadline',s:'size',t:'ttl',I:'source'};
+  let positional=false;
+  for(let i=0;i<args.length;i++){
+    const arg=args[i];
+    if(!positional&&arg==='--'){positional=true;continue;}
+    if(!positional&&(arg==='--help'||arg==='-h')){o.help=true;continue;}
+    if(!positional&&arg.startsWith('-')&&arg!=='-'){
+      for(let j=1;j<arg.length;j++){
+        const flag=arg[j];
+        if(values[flag]){const value=arg.slice(j+1)||args[++i];if(value===undefined||value==='')throw Error(`-${flag} requires a value`);if(flag!=='I'&&(!Number.isFinite(Number(value))||!value.trim()))throw Error(`invalid ${values[flag]}`);o[values[flag]]=flag==='I'?value:Number(value);break;}
+        if(flag==='4'||flag==='6')o.family=Number(flag);
+        else if(flag==='q')o.quiet=true;
+        else if(flag==='D')o.timestamp=true;
+        else if(flag!=='n')throw Error(`unknown option -${flag}`);
+      }
+    }else{if(o.host)throw Error('only one destination is supported');o.host=arg;}
+  }
+  if(o.help)return o;
+  if(!o.host)throw Error('destination required (see ping --help)');
+  for(const key of ['count','size','ttl'])if((key!=='count'||o.count!==Infinity)&&(!Number.isInteger(o[key])||o[key]<(key==='size'?0:1)))throw Error(`invalid ${key}`);
+  if(o.size>65507||o.ttl>255||o.count>Number.MAX_SAFE_INTEGER&&o.count!==Infinity)throw Error('count, packet size or TTL out of range');
+  for(const key of ['interval','timeout','deadline'])if(!(o[key]>0)||(!Number.isFinite(o[key])&&!(key==='deadline'&&o[key]===Infinity)))throw Error(`invalid ${key}`);
+  if(o.interval<.002)throw Error('minimum interval is 0.002 seconds');
+  return o;
+}
+export function checksum(bytes) {
+  let sum=0;for(let i=0;i<bytes.length;i+=2)sum+=(bytes[i]<<8)|(bytes[i+1]??0);
+  while(sum>>>16)sum=(sum&65535)+(sum>>>16);return (~sum)&65535;
+}
+export function echoPacket(family,id,seq,size) {
+  const b=Buffer.alloc(size+8);b[0]=family===6?128:8;b.writeUInt16BE(id,4);b.writeUInt16BE(seq,6);randomBytes(size).copy(b,8);
+  if(family===4)b.writeUInt16BE(checksum(b),2);return b;
+}
+export function isEchoReply(bytes,{family,raw,id,seq,packet}) {
+  let offset=0;
+  if(raw&&family===4){if(bytes.length<20||bytes[0]>>>4!==4||bytes[9]!==1)return false;offset=(bytes[0]&15)*4;if(offset<20||offset>bytes.length-8)return false;}
+  const b=bytes.subarray(offset);
+  return b.length===packet.length&&b[0]===(family===6?129:0)&&b[1]===0&&b.readUInt16BE(4)===id&&b.readUInt16BE(6)===seq&&b.subarray(8).equals(packet.subarray(8))&&(family===6||checksum(b)===0);
+}
+export async function runPing(o,{log=console.log,error=console.error,forceRaw=false}={}) {
+  if(!['linux','android'].includes(process.platform))throw Error('ping currently supports Linux and Android; Windows needs an ICMP API backend');
+  const {libc,ptr,cString,errno,SysError,check}=await import('./dlopen.js');
+  const c=libc.symbols;
+  let family=o.family||isIP(o.host)||4,address=o.host;
+  if(isIP(address)&&isIP(address)!==family)throw Error('destination does not match selected address family');
+  if(!isIP(address)){
+    const records=await Bun.dns.lookup(address,{family});address=records.find(r=>r.family===family)?.address;
+    if(!address)throw Error(`no IPv${family} address for ${o.host}`);
+  }
+  const af=family===6?10:2;
+  const sockaddr=value=>{
+    const b=Buffer.alloc(family===6?28:16);b.writeUInt16LE(af,0);
+    if(c.inet_pton(af,ptr(cString(value)),ptr(b.subarray(family===6?8:4)))!==1)throw Error(`invalid IPv${family} address: ${value}`);
+    return b;
+  };
+  let raw=forceRaw,fd=c.socket(af,(raw?3:2)|0x80800,family===6?58:1);
+  if(fd<0&&!raw){const code=errno();if(![1,13,93,97].includes(code))throw new SysError('ICMP socket',code);raw=true;fd=c.socket(af,3|0x80800,family===6?58:1);}
+  if(fd<0)throw new SysError('ICMP socket (allow ping_group_range or CAP_NET_RAW)');
+  let stop=false;const interrupt=()=>{stop=true};let transmitted=0,received=0,min=Infinity,max=0,sum=0,sumSquares=0;
+  const started=performance.now(),pending=new Map();let next=started;
+  const prefix=()=>o.timestamp?`[${(Date.now()/1000).toFixed(6)}] `:'';
+  try{
+    if(o.source){
+      if(isIP(o.source)){const src=sockaddr(o.source);check('bind source address',c.bind(fd,ptr(src),src.length));}
+      else{const name=cString(o.source);check('bind interface',c.setsockopt(fd,1,25,ptr(name),name.length));}
+    }
+    const ttl=Buffer.alloc(4);ttl.writeInt32LE(o.ttl);check('set TTL',c.setsockopt(fd,family===6?41:0,family===6?16:2,ptr(ttl),4));
+    const remote=sockaddr(address);check('connect',c.connect(fd,ptr(remote),remote.length));
+    const local=Buffer.alloc(28),length=Buffer.alloc(4);length.writeUInt32LE(local.length);check('getsockname',c.getsockname(fd,ptr(local),ptr(length)));
+    const id=raw?randomBytes(2).readUInt16BE():local.readUInt16BE(2);
+    log(`PING ${o.host} (${address}) ${o.size} data bytes`);
+    process.on('SIGINT',interrupt);process.on('SIGTERM',interrupt);
+    const buffer=Buffer.alloc(65536);
+    while(!stop&&performance.now()-started<o.deadline*1000){
+      let now=performance.now();
+      if(transmitted<o.count&&now>=next){
+        const seq=(transmitted+1)&65535;
+        // Avoid confusing a sequence that wrapped while an old probe is pending.
+        if(!pending.has(seq)){
+          const packet=echoPacket(family,id,seq,o.size);const sent=Number(c.send(fd,ptr(packet),packet.length,0));
+          if(sent!==packet.length)throw new SysError('send');
+          transmitted++;pending.set(seq,{packet,start:now});
+        }
+        next=now+o.interval*1000;
+      }
+      for(let n=0;n<64;n++){
+        const size=Number(c.recv(fd,ptr(buffer),buffer.length,0));
+        if(size<0){const code=errno();if(code===11)break;if(code===4)continue;if([101,111,113].includes(code)){if(!o.quiet)error(`${prefix()}ping: ${new SysError('receive',code).message}`);break;}throw new SysError('receive',code);}
+        const b=buffer.subarray(0,size),offset=raw&&family===4?(b[0]&15)*4:0;
+        if(size<offset+8)continue;const seq=b.readUInt16BE(offset+6),p=pending.get(seq);
+        if(!p||!isEchoReply(b,{family,raw,id,seq,packet:p.packet}))continue;
+        const ms=performance.now()-p.start;pending.delete(seq);received++;min=Math.min(min,ms);max=Math.max(max,ms);sum+=ms;sumSquares+=ms*ms;
+        if(!o.quiet)log(`${prefix()}${p.packet.length} bytes from ${address}: icmp_seq=${seq}${raw&&family===4?` ttl=${b[8]}`:''} time=${ms.toFixed(3)} ms`);
+      }
+      now=performance.now();for(const [seq,p] of pending)if(now-p.start>=o.timeout*1000){pending.delete(seq);if(!o.quiet)log(`${prefix()}Request timeout for icmp_seq=${seq}`);}
+      if(transmitted>=o.count&&!pending.size)break;
+      const sendDelay=transmitted<o.count?next-now:10;
+      await Bun.sleep(Math.max(1,Math.min(10,sendDelay,started+o.deadline*1000-now)));
+    }
+  }finally{process.removeListener('SIGINT',interrupt);process.removeListener('SIGTERM',interrupt);c.close(fd);}
+  log(`\n--- ${o.host} ping statistics ---`);
+  log(`${transmitted} packets transmitted, ${received} received, ${transmitted?((transmitted-received)/transmitted*100).toFixed(0):0}% packet loss, time ${Math.round(performance.now()-started)}ms`);
+  if(received)log(`rtt min/avg/max/mdev = ${min.toFixed(3)}/${(sum/received).toFixed(3)}/${max.toFixed(3)}/${Math.sqrt(Math.max(0,sumSquares/received-(sum/received)**2)).toFixed(3)} ms`);
+  return received>0&&!(Number.isFinite(o.deadline)&&Number.isFinite(o.count)&&received<o.count)?0:1;
+}

package/initramfs/usr/share/doc/buninu-linux/bunterm.md

@@ -35,7 +35,7 @@ identified from the process task name and its open console descriptor under
 | --- | --- |
 | `N`, `/dev/ttyN` | The virtual console to use for graphics and the keyboard; for example, `2` means `/dev/tty2`. Naming a VT other than the active one starts a detached bunterm there, switches the display to it, and immediately returns control to the calling shell. Without this argument, bunterm uses the active VT in the foreground. |
 | `-e command [argument...]` | The program to run; everything after `-e` belongs to it. Default `/bin/sh`. |
-| `-s N`, `--font-size N` | Font size in pixels (default 16). The cell is 0.6 × N wide and 1.16 × N tall with DejaVu Sans Mono, so 1024×768 at 16 px gives 106 × 41 cells. |
+| `-s N`, `--font-size N` | Font size in pixels (default 13). The cell is 0.6 × N wide and 1.16 × N tall with DejaVu Sans Mono, so 1024×768 at 16 px gives 106 × 41 cells. |
 | `--line-height F` | Multiplies the cell height (default 1). |
 | `--fb /dev/fbN` | The framebuffer device (default `/dev/fb0`). |
 | `--no-blink` | A steady cursor. |

package/initramfs/usr/share/doc/buninu-linux/dhclient.md

@@ -0,0 +1,82 @@
+# dhclient — DHCPv4 client
+
+Use `ip link` to list available network interfaces, then choose the interface
+name for the command, for example `dhclient usb0`.
+
+Acquire an IPv4 lease on an Ethernet-compatible interface. DHCP packets are
+implemented in JavaScript; Bun FFI calls the runtime libc for packet/UDP
+sockets and interface identification. Address and route changes invoke the
+existing Buninu `ip` command, without an external DHCP binary or dependencies.
+
+```sh
+dhclient eth0                    # acquire, configure, then exit
+dhclient -v -timeout 20 eth0     # show progress, fail after 20 seconds
+dhclient -r eth0                # release a saved lease after the client stops
+dhclient --no-dns eth0          # leave the resolver unchanged
+```
+
+| Option | Meaning |
+| --- | --- |
+| `-4` | DHCPv4 (default) |
+| `-d` | Accepted for compatibility; all invocations exit after configuration |
+| `-1` | Acquire once (already the default) |
+| `-r` | Send DHCPRELEASE and remove the saved lease's configuration |
+| `-timeout SECONDS` | Initial acquisition deadline; default 60 seconds |
+| `-v`, `-q` | Verbose protocol progress, or quiet output |
+| `-H HOSTNAME` | Send DHCP hostname option |
+| `-lf PATH` | JSON lease file; default `/var/lib/dhclient/INTERFACE.json` |
+| `--metric NUMBER` | Default route metric, 0–32766 |
+| `--no-dns` | Do not write DNS configuration |
+| `--resolv-conf PATH` | Resolver file; default `/etc/resolv.conf` |
+| `-h`, `--help` | This manual |
+
+Specify one interface per process. The interface is brought up first. This
+client replaces its primary IPv4 address and installs the first offered
+router as its default gateway. DNS server addresses replace the resolver
+file; its previous content is saved and restored on explicit release only if
+another writer has not modified it. `--no-dns` is useful for secondary links.
+Avoid simultaneous resolver management by multiple clients.
+
+Each invocation acquires and configures one lease, then exits. No background
+renewal process is started. `-1` is an optional alias for this default behavior.
+A DHCP lease is still time-limited unless the server grants an infinite lease:
+run the command again before expiry, or use an appropriate static address.
+After exit this command cannot renew or remove an expired address. The reported
+lease duration and JSON timestamps show the server's validity period.
+Ctrl-C/SIGTERM during acquisition stops the attempt; successful configuration
+remains after normal exit. Use `-r` to release it explicitly. Saved JSON leases
+support release and resolver restoration; their addresses are never assumed
+valid on a later acquisition.
+
+The per-interface `/run/dhclient-INTERFACE.lock` prevents duplicate Buninu
+clients, including callers using different lease files. Stop the running
+client before `-r`. After an unclean kill, verify it is gone before removing
+the stale lock. UDP port 68 is reserved exclusively to detect other clients.
+
+Linux/Android on x86-64 or aarch64 is supported, subject to privileges:
+CAP_NET_RAW for packet sockets, CAP_NET_ADMIN for interface/route changes,
+and permission to bind UDP 68 and write lease/resolver files. Ordinary
+unprivileged Termux cannot configure Android networking. Root in Buninu's
+VM can. Library selection follows the shared `dlopen.js` runtime ABI rules.
+
+This is a focused client, not an ISC dhclient CLI clone. DHCPv6, ISC config/
+script hooks, address-conflict ARP probing/DECLINE, classless static routes,
+and automatic renewal/daemonization are not implemented. Wi-Fi must already be
+associated. A failed acquisition exits nonzero; successful one-shot/release
+or clean signal termination returns zero.
+
+Protocol: [RFC 2131](https://www.rfc-editor.org/rfc/rfc2131) and
+[DHCP options, RFC 2132](https://www.rfc-editor.org/rfc/rfc2132).
+Run `bun test test/dhcp.test.js test/libc.test.js` for codec, state-machine,
+configuration and libc regression tests; tests do not reconfigure host links.
+
+`cfg.net` launches foreground clients as background child processes. Each has
+a 20-second acquisition deadline and an independent 25-second startup watchdog
+(SIGTERM, then SIGKILL after 2 seconds if necessary). Successful clients exit after configuration; none remain to renew. All child and output failures are caught and logged. Metrics start
+at 100 per interface; only the first interface may write DNS. Repeated calls
+reuse active clients; a later call can retry clients which have exited.
+
+Automatic calls report one final result per interface, prefixed with
+`[dhcp INTERFACE]`. A failed interface does not change another interface's
+success result or configuration; output is collected before reporting exit
+status so a delayed stderr message cannot appear after its final result.

package/initramfs/usr/share/doc/buninu-linux/ping.md

@@ -0,0 +1,91 @@
+# ping — send ICMP echo requests
+
+`ping` sends real IPv4 ICMP or IPv6 ICMPv6 echo requests through Bun FFI.
+It does not execute a system ping, open a TCP connection, or use an HTTP probe.
+
+```sh
+ping [-4|-6] [-nqD] [-c COUNT] [-i SECONDS] [-W SECONDS]
+     [-w SECONDS] [-s BYTES] [-t TTL] [-I ADDRESS|INTERFACE] DESTINATION
+ping --help
+```
+
+| Option | Meaning |
+|---|---|
+| `-c COUNT` | Stop after COUNT requests and their replies/timeouts. Default: 4 requests, then exit. |
+| `-i SECONDS` | Send interval, default 1 second; fractional values supported, minimum 0.002 seconds. |
+| `-W SECONDS` | Per-request reply timeout, default 2 seconds; fractional values supported. |
+| `-w SECONDS` | Overall probing deadline, including outstanding requests. DNS resolution happens first. |
+| `-s BYTES` | Payload size, default 56; 0–65507 bytes. The ICMP header adds 8 bytes. |
+| `-t TTL` | IPv4 TTL or IPv6 hop limit, 1–255; default 64. |
+| `-I ADDRESS` | Bind a source IPv4/IPv6 address. |
+| `-I INTERFACE` | Bind an interface such as `eth0` or `wlan0`; OS permissions may be required. |
+| `-4`, `-6` | Select IPv4 or IPv6. Numeric destinations infer their family; hostnames default to IPv4. |
+| `-n` | Numeric reply addresses (currently always used; no reverse DNS). |
+| `-q` | Print only the initial line and final statistics. |
+| `-D` | Add Unix timestamps to per-packet output. |
+| `-h`, `--help` | Show this document. |
+
+Short options can be combined (`-nq`) and values attached (`-c3`). Use `--`
+to end option parsing. Unknown options are rejected rather than ignored.
+
+```sh
+ping -c 4 1.1.1.1
+ping -c 3 localhost
+ping -6 -c 3 ::1
+ping -n -c 10 -i 0.2 -W 1 -s 1200 192.168.1.1
+ping -q -w 5 192.168.1.1
+ping -I eth0 -c 3 192.168.1.1
+```
+
+Statistics include transmitted/received counts, loss and RTT min/average/max/
+standard deviation. Ctrl-C prints statistics and closes the socket. Exit status
+is 0 if any reply arrived, 1 if none arrived (or a combined `-c`/`-w` deadline
+prevented receiving the requested count), and 2 for argument/setup/system errors.
+RTT is measured by the Bun process, so event-loop scheduling affects it.
+
+The preferred socket is an unprivileged ICMP datagram (ping) socket. If the OS
+refuses that socket, a raw ICMP socket is attempted; this normally requires root
+or `CAP_NET_RAW`. Linux controls datagram access with `ping_group_range`, and
+Android may impose additional restrictions. The command does not change system
+permissions. Replies are matched by identifier, sequence and payload; IPv4
+checksums are checked. Concurrent outstanding probes are supported. Datagram
+replies do not expose their received TTL through this implementation, so it is
+not printed; raw IPv4 replies do include TTL.
+
+Supported runtimes: 64-bit Linux (glibc or musl) and native Android/Termux
+(bionic), on x86_64 or aarch64. `/lib/dlopen.js` chooses libc automatically:
+
+- Android: `libc.so`, then the APEX and `/system/lib64` bionic paths; `__errno`.
+- Linux glibc runtime: `libc.so.6`, then architecture-specific `/lib` and
+  `/usr/lib` glibc paths; `__errno_location`.
+- Linux musl runtime: the adjacent `libc.musl-<arch>.so.1`, its soname,
+  `/lib/libc.musl-<arch>.so.1`, `/lib/ld-musl-<arch>.so.1`, then `libc.so`;
+  `__errno_location`.
+- Search stays within the runtime ABI: loading musl into glibc can crash on
+  errno/TLS access.
+- `BUNINU_LIBC=/absolute/path` overrides the search. A bad override fails
+  explicitly rather than silently selecting a different library. Symbols resolve
+  on first use: an unavailable mount symbol does not prevent ping from using
+  the socket symbols. An explicit override is not rejected based on its filename;
+  matching the runtime ABI remains the caller's responsibility.
+
+Windows requires a separate `iphlpapi.dll` ICMP backend and is not implemented.
+Flood/adaptive modes, IPv4 record-route/timestamps, reverse DNS, broadcast ping,
+and IPv6 scoped address notation (`fe80::1%eth0`) are not implemented.
+
+## Tests
+
+```sh
+bun test test/ping.test.js test/libc.test.js
+```
+
+These compare local IPv4/IPv6 echo replies, payload sizes, counts, quiet output,
+source selection, deadlines and exit codes against the installed system ping.
+RTT values are not expected to match. A missing system ping or unavailable
+loopback ICMP support skips the corresponding network comparisons. Older
+Android systems have a separate `ping6` and a 200 ms interval restriction; the
+reference tests accommodate those without limiting this command's options.
+Packet validation, argument errors, fast intervals and Ctrl-C also have tests.
+
+References: [Linux ICMP sockets](https://man7.org/linux/man-pages/man7/icmp.7.html),
+[Android errno](https://android.googlesource.com/platform/bionic/+/master/libc/include/errno.h).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "buninu-linux",
-  "version": "0.13.56",
+  "version": "0.14.57",
   "description": "A Linux distribution running Bun as PID 1 with the Buninu userspace.",
   "type": "module",
   "main": "./index.js",
@@ -37,6 +37,6 @@
     "fetch": "./index.js -f",
     "pack": "./index.js -b",
     "start": "./index.js -r",
-    "check": "for f in ./index.js ./initramfs/init.js ./initramfs/lib/document.js ./initramfs/lib/dlopen.js ./initramfs/lib/fbdev.js ./initramfs/lib/canvas.js ./initramfs/lib/bunterm/glyphs.js ./initramfs/lib/bunterm/renderer.js ./initramfs/lib/bunterm/images.js ./initramfs/lib/bunterm/input.js ./initramfs/lib/bunterm/mouse.js ./initramfs/lib/bunterm/terminal.js ./initramfs/lib/modprobe.js ./initramfs/lib/power.js ./initramfs/bin/bunterm ./initramfs/bin/chroot ./initramfs/bin/mount ./initramfs/bin/umount ./initramfs/bin/ip ./initramfs/bin/ps ./initramfs/bin/top ./initramfs/bin/poweroff ./initramfs/bin/reboot ./initramfs/bin/tar ./initramfs/bin/stripansi; do node --check \"$f\" || exit 1; done"
+    "check": "for f in ./index.js ./initramfs/init.js ./initramfs/lib/document.js ./initramfs/lib/dlopen.js ./initramfs/lib/ping.js ./initramfs/lib/dhcp.js ./initramfs/lib/dhcp-transport.js ./initramfs/lib/dhclient.js ./initramfs/lib/dhcp-start.js ./initramfs/lib/fbdev.js ./initramfs/lib/canvas.js ./initramfs/lib/bunterm/glyphs.js ./initramfs/lib/bunterm/renderer.js ./initramfs/lib/bunterm/images.js ./initramfs/lib/bunterm/input.js ./initramfs/lib/bunterm/mouse.js ./initramfs/lib/bunterm/terminal.js ./initramfs/lib/modprobe.js ./initramfs/lib/power.js ./initramfs/bin/bunterm ./initramfs/bin/chroot ./initramfs/bin/mount ./initramfs/bin/umount ./initramfs/bin/ip ./initramfs/bin/ping ./initramfs/bin/dhclient ./initramfs/bin/ps ./initramfs/bin/top ./initramfs/bin/poweroff ./initramfs/bin/reboot ./initramfs/bin/tar ./initramfs/bin/stripansi; do node --check \"$f\" || exit 1; done"
   }
 }

package/scripts/arch.js

@@ -16,8 +16,8 @@ export const rootDir = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 
 const pins = {
   x86_64: {
-    linuxVirtSha256: "755deb045cfeb8c2bcaa2b2febe01ab2101d747921e64d4cd54d0312321e8d5d",
-    linuxLtsSha256: "b0d8cc4d7e031b5619221e7978920d051bf1dd1e335f6d05d03964b2285fc3b4",
+    linuxVirtSha256: "414aa2572ef88164b1af9905fa6dfbe863bf50f6130d895d57282dea3e15f7b9",
+    linuxLtsSha256: "7614556471859956a436b95813daf409b444aa849ec899178b404e828c5a9d98",
     muslSha256: "573712e2f49c15bfc20a2699f204acdfc74c772722b15e7353d768057fae0e71",
     stubSha256: "8e64a5a3afee5f930e6e6716be726dc6d405530ac7f8fa5be6251dae68671ec9",
     libstdcppSha256: "14c987b556f5385a5db18376e788c75f37d85321b8dc1920d926ea7daac1d6f6",
@@ -32,8 +32,8 @@ const pins = {
     serialMajor: 4,
   },
   aarch64: {
-    linuxVirtSha256: "e3839bfd751ff0a4421484f712b9b29efb514024523736a0ef62521521571b12",
-    linuxLtsSha256: "795bcd49840be7f4ff9566f5f669201bd41202376a455b720a98eb814f0e72f8",
+    linuxVirtSha256: "b3820fee22e0366a15f7c139e5bc00348e333f3e7f77802271df7ded795aee4f",
+    linuxLtsSha256: "67b8f61c5cfb6ac9b5a65cb1610b67d467e6c4ffc17e7d29dbea4bd8c447ff32",
     muslSha256: "5e9674b7f41152fe2119093b5cb4c13eaaadb19c2d5422b2d7267913e663ee6e",
     stubSha256: "a1823d2d7082db555d528f82c1809f276c818aeb5b40f198f4565f104e055c38",
     libstdcppSha256: "2302e766d4e4926038ec166ecb85837ee884576115236ddb565e3a5fca4a11d7",
@@ -67,7 +67,7 @@ export const config = ({
   // The Alpine repository keeps only the newest build of a package, so a pin
   // stops downloading when Alpine bumps it; the hashes then fail loudly.
   const alpineBase = `${mirror}/v3.24/main/${arch}`;
-  const kernelVersion = "6.18.56";
+  const kernelVersion = "6.18.57";
   const kernelRelease = `${kernelVersion}-0-${flavor}`;
   const bunVersion = "1.4.2";
   const downloadsDir = join(rootDir, "downloads", arch);

package/scripts/arch.sh

@@ -44,7 +44,7 @@ fi
 alpine_mirror=${ALPINE_MIRROR:-https://dl-cdn.alpinelinux.org/alpine}
 alpine_base="$alpine_mirror/v3.24/main/$arch"
 
-kernel_version=6.18.56
+kernel_version=6.18.57
 kernel_release="$kernel_version-0-$linux_flavor"
 linux_package="linux-$linux_flavor-$kernel_version-r0.apk"
 musl_package=musl-1.2.6-r2.apk
@@ -63,8 +63,8 @@ musl_libc="libc.musl-$arch.so.1"
 
 case $arch in
     x86_64)
-        linux_virt_sha256=755deb045cfeb8c2bcaa2b2febe01ab2101d747921e64d4cd54d0312321e8d5d
-        linux_lts_sha256=b0d8cc4d7e031b5619221e7978920d051bf1dd1e335f6d05d03964b2285fc3b4
+        linux_virt_sha256=414aa2572ef88164b1af9905fa6dfbe863bf50f6130d895d57282dea3e15f7b9
+        linux_lts_sha256=7614556471859956a436b95813daf409b444aa849ec899178b404e828c5a9d98
         musl_sha256=573712e2f49c15bfc20a2699f204acdfc74c772722b15e7353d768057fae0e71
         stub_sha256=8e64a5a3afee5f930e6e6716be726dc6d405530ac7f8fa5be6251dae68671ec9
         libstdcpp_sha256=14c987b556f5385a5db18376e788c75f37d85321b8dc1920d926ea7daac1d6f6
@@ -82,8 +82,8 @@ case $arch in
         serial_major=4
         ;;
     aarch64)
-        linux_virt_sha256=e3839bfd751ff0a4421484f712b9b29efb514024523736a0ef62521521571b12
-        linux_lts_sha256=795bcd49840be7f4ff9566f5f669201bd41202376a455b720a98eb814f0e72f8
+        linux_virt_sha256=b3820fee22e0366a15f7c139e5bc00348e333f3e7f77802271df7ded795aee4f
+        linux_lts_sha256=67b8f61c5cfb6ac9b5a65cb1610b67d467e6c4ffc17e7d29dbea4bd8c447ff32
         musl_sha256=5e9674b7f41152fe2119093b5cb4c13eaaadb19c2d5422b2d7267913e663ee6e
         stub_sha256=a1823d2d7082db555d528f82c1809f276c818aeb5b40f198f4565f104e055c38
         libstdcpp_sha256=2302e766d4e4926038ec166ecb85837ee884576115236ddb565e3a5fca4a11d7

package/scripts/modules.js

@@ -21,6 +21,7 @@ export const requests = ({ arch, flavor, real }) => [
     "failover",
     "net_failover",
     "virtio_net",
+    "af_packet", // DHCP before an interface has an IPv4 address
   ]),
   ...optional([
     "virtio_pci",

package/scripts/npm-packages.md

@@ -1,15 +1,15 @@
 # npm packages
 # Latest versions checked on 2026-10-11; SHA-256 pins verified against registry SHA-512 integrity.
-# buninu-browser updated and verified on 2026-10-12.
-# casty 1.3.7 and buninu-land 0.1.3 verified on 2026-10-16.
+# buninu-browser 0.2.4 and buninu-land 0.1.4 verified on 2026-10-18.
+# casty 1.3.7 verified on 2026-10-16.
 
-"buninu-browser@0.2.3":
-  - https://registry.npmjs.org/buninu-browser/-/buninu-browser-0.2.3.tgz
-  - sha256:0f7c9cd9df689d7b0900fdf3172851125ebd8aba12bed555be7e091d427146e8
+"buninu-browser@0.2.4":
+  - https://registry.npmjs.org/buninu-browser/-/buninu-browser-0.2.4.tgz
+  - sha256:247c1ae9644b5016d1dc3f74d1c6c18a986e3961b1d86d2497862e4007bc50aa
 
-"buninu-land@0.1.3":
-  - https://registry.npmjs.org/buninu-land/-/buninu-land-0.1.3.tgz
-  - sha256:b2c94f7fa0f7275ed739f4949d0be3ef45a99bf0b61e63a71ea9d6459f9f1c2e
+"buninu-land@0.1.4":
+  - https://registry.npmjs.org/buninu-land/-/buninu-land-0.1.4.tgz
+  - sha256:5cda65c60a7af8c7a05ec519a254e0af3f9913ea94f6ae493e5ddc93a8d87407
 
 "@drxiaozhi/casty@1.3.7":
   - https://registry.npmjs.org/@drxiaozhi/casty/-/casty-1.3.7.tgz