buninu-linux 0.13.56 → 0.15.58

package/initramfs/usr/share/doc/buninu-linux/bunterm.md

@@ -8,7 +8,7 @@ box drawing and kitty graphics protocol images — no X11, Wayland or GPU.
 ```sh
 bunterm 2                    # start a detached bunterm on /dev/tty2
 bunterm /dev/tty2            # the full virtual-console spelling also works
-bunterm                      # take over the console you are on (on tty1 that hides the bun-repl)
+bunterm                      # open a new VT after the last session; first is tty2
 bunterm -s 20                # short for --font-size 20
 bunterm -e bun /buninu/apps/jsmdcui/src/index.js --demo
 bunterm --no-mouse          # keyboard only
@@ -16,14 +16,19 @@ bunterm --no-clipboard      # ignore OSC 52 copy and paste
 bunterm -h
 ```
 
+Use `chvt 1` inside bunterm to return to tty1 without stopping it, and
+`chvt 2` from a shell to return to a bunterm started on tty2. See `chvt --help`
+for use from the init REPL.
+
 The program's `TERM` is `xterm-256color`, `COLORTERM=truecolor`,
 `TERM_PROGRAM=bunterm` and `JSMDCUI_KITTY_MODE=extended` (so `jsmdcui` shows
 Markdown images without `--kitty`). When it exits, the console returns to
 text mode and `bunterm` exits with its status.
 
 Every live session has a canonical `/bin/bunterm /dev/ttyN ...` command line.
-When no console is named, the currently active VT is used in the foreground.
-Naming a different VT starts bunterm as a detached session and returns
+When no console is named, a new VT after the last known session is selected,
+starting at tty2 and keeping tty1 for hardware setup.
+Using a VT other than the active one starts bunterm as a detached session and returns
 immediately to the calling shell. Only one bunterm may control a given VT;
 ownership is
 identified from the process task name and its open console descriptor under
@@ -33,14 +38,14 @@ identified from the process task name and its open console descriptor under
 
 | Option | Meaning |
 | --- | --- |
-| `N`, `/dev/ttyN` | The virtual console to use for graphics and the keyboard; for example, `2` means `/dev/tty2`. Naming a VT other than the active one starts a detached bunterm there, switches the display to it, and immediately returns control to the calling shell. Without this argument, bunterm uses the active VT in the foreground. |
+| `N`, `/dev/ttyN` | The virtual console to use for graphics and the keyboard; for example, `2` means `/dev/tty2`. Naming a VT other than the active one starts a detached bunterm there, switches the display to it, and immediately returns control to the calling shell. Without this argument, bunterm selects the next VT after the last known session (tty2 initially). |
 | `-e command [argument...]` | The program to run; everything after `-e` belongs to it. Default `/bin/sh`. |
-| `-s N`, `--font-size N` | Font size in pixels (default 16). The cell is 0.6 × N wide and 1.16 × N tall with DejaVu Sans Mono, so 1024×768 at 16 px gives 106 × 41 cells. |
+| `-s N`, `--font-size N` | Font size in pixels (default 13). The cell is 0.6 × N wide and 1.16 × N tall with DejaVu Sans Mono, so 1024×768 at 16 px gives 106 × 41 cells. |
 | `--line-height F` | Multiplies the cell height (default 1). |
 | `--fb /dev/fbN` | The framebuffer device (default `/dev/fb0`). |
 | `--no-blink` | A steady cursor. |
 | `--no-mouse` | Do not attach a pointing device; nothing then reads `/dev/input`. |
-| `--no-clipboard` | Ignore OSC 52: programs can neither copy to nor read from the clipboard, and `xclip` is never run. |
+| `--no-clipboard` | Disable both OSC 52 and menu copy/paste; `xclip` is never run. |
 
 ## What is drawn
 
@@ -66,7 +71,7 @@ identified from the process task name and its open console descriptor under
 
 ## Keyboard
 
-The console stays in the kernel's translated keyboard mode, so
+Without Kitty keyboard negotiation, the console stays in the kernel's translated keyboard mode, so
 `Ctrl-Alt-F2` and friends still switch consoles; coming back repaints the
 screen. While its VT is inactive, bunterm continues consuming PTY output and
 updating its scrollback and kitty images, but neither writes the framebuffer
@@ -76,6 +81,28 @@ forth through the normal Linux VT switch. A few console-specific
 sequences are rewritten to xterm's (`F1`–`F5`, `Home`, `End`), and arrow keys
 follow the program's application cursor mode.
 
+### Kitty keyboard
+
+The Kitty keyboard protocol uses the same encoder as jsgotty 1.2.0:
+flags **1** (disambiguation), **2** (press/repeat/release), and **8** (all keys).
+Applications enable it with `CSI > flags u`, query with `CSI ? u`, and restore
+with `CSI < u`; normal and alternate buffers have separate stacks. Flags 4
+(alternate keys) and 16 (associated text) are not advertised.
+
+Only while an application enables Kitty, the active console uses Linux
+`K_MEDIUMRAW` to distinguish Ctrl, Alt, Shift, Super, keypad and key releases.
+Bunterm restores the original mode on pop/reset or exit. Ctrl+Alt+F1–F12 and
+Alt+Left/Right remain reserved for VT switching. The kernel keymap supplies
+printable characters, including Shift/Caps Lock/AltGr. Kernel dead-key/Compose
+sequences are not implemented in this Kitty path; the ordinary translated
+console path retains its existing behavior. No global evdev keyboard grab is
+needed. A mode transition discards pending console typeahead so raw keycodes
+cannot leak into the child as text.
+
+中文：Kitty 模式與 jsgotty 支援相同的 flags 1、2、8，可區分 Super、
+Ctrl/Alt/Shift 組合及按下／重複／放開。程式退出模式後恢復原有 console
+輸入；Ctrl+Alt+Fn、Alt+左右保留為切換 VT。Kitty 模式尚不處理 dead key／Compose。
+
 ## Mouse
 
 Every pointing device under `/dev/input/event*` is opened and an arrow is
@@ -94,6 +121,13 @@ arrow keys on the alternate screen, which has no scrollback and is what a
 pager expects. Typing returns to the live screen, and the text cursor is
 hidden while it is scrolled out of view.
 
+When mouse reporting is off, left-drag selects terminal text. Wide characters
+and graphemes are selected whole; wrapped lines copy without extra newlines.
+Use **Copy** in the top-left menu to send the selection to xclip. Selection is
+cleared when new PTY text arrives or the font size changes, so it cannot refer
+to replaced cells. Applications requesting mouse reporting receive the drag
+instead; selection never overrides their mouse mode.
+
 `--no-mouse` turns all of this off: the terminal then never looks at
 `/dev/input` and never loads the mouse module.
 
@@ -114,7 +148,12 @@ bunterm keeps no clipboard of its own: `ESC ] 52 ; c ; <base64>` is passed to
 with the output of `xclip -selection clipboard -o`, so every bunterm session
 shares the same clipboard as `xclip`. A query xclip cannot answer is replied
 to with empty contents. `--no-clipboard` turns this off, so a program can
-neither set nor read the clipboard through the terminal.
+neither set nor read the clipboard through the terminal; menu copy/paste is
+also disabled. The menu's **Paste** reads xclip and sends one paste to the PTY,
+wrapped in `CSI 200~` / `CSI 201~` when the application enabled bracketed paste
+(`DECSET 2004`). Programs that have not requested it receive plain text.
+Newlines are normalized to CR; embedded ESC bytes are stripped in bracketed
+mode so clipboard text cannot close the paste early.
 
 ## Limits
 
@@ -123,10 +162,8 @@ neither set nor read the clipboard through the terminal.
   `--linux-lts` or `--real` (efifb/simpledrm from UEFI).
 - The aarch64 image has no framebuffer yet: `run-qemu.sh` gives QEMU's
   `virt` machine no display device, so there is no `/dev/fb0` to draw on.
-- No selection, and no keyboard way to scroll back: the wheel is it. The
-  buffer keeps 1000 lines. A program that does not enable mouse reporting
-  sees no clicks — the arrow still moves, so the pointer is visibly alive.
-  `--no-mouse` removes the pointer entirely.
+- Scrollback uses the wheel; the buffer keeps 1000 lines.
+  `--no-mouse` removes the pointer and local selection.
 - A program that prints a terminal reply while the tty echoes (that is, one
   not in raw mode) will see the reply echoed, as on any terminal.
 - Kitty images are drawn above text; `z` ordering below text and animation
@@ -143,3 +180,40 @@ neither set nor read the clipboard through the terminal.
 - `/lib/fbdev.js` — the framebuffer itself (`fbdev.md`)
 - `/buninu/apps/jsgotty/gotty.js` — the PTY backend and kitty packet parser
   that are reused
+
+## Local menu and commands
+
+Left-click the top-left **2×2 physical pixels** to open a text menu of live
+bunterm VTs and the initial tty (normally tty1). Click an entry to switch, or use
+Up/Down and Enter. The active VT is marked `(current)`.
+The wheel scrolls the selection; Escape, right-click, or a click
+outside the entries closes the menu. Menu input is consumed locally, including
+when a terminal application has enabled mouse reporting. Requires mouse support.
+The menu switches existing sessions; it does not create a new bunterm.
+
+- **Font − / +** changes the current session's font size and resizes the PTY.
+- **Copy / Paste** uses the same xclip clipboard as OSC 52.
+- Click the light **command input field**, or press Tab, to type a local command.
+  Enter executes it, Tab returns to menu navigation, Esc closes the menu.
+  Backspace/Delete, Left/Right, Home/End and Ctrl+U edit the field.
+
+Commands: `font 16`, `font +`, `font -`, `copy`, `paste`, `vt 2`, `help`.
+Font commands accept integer sizes 6–96; changes last for this session.
+The command registry is `/lib/bunterm/commands.js`; new commands can be added
+there without changing the input widget. These are bunterm commands, not shell
+commands. Clipboard failures and command errors appear in the menu footer.
+
+中文：左鍵點擊螢幕最左上角 2×2 像素，會列出正在運行的 bunterm 和初始 tty。
+目前顯示的 VT 會標示 `(current)`。
+可以點選或用上下鍵、Enter 切換；Esc、右鍵或點擊選項外關閉。不會把選單操作
+送進底下的 shell／應用程式，也不會關閉原本的 bunterm。
+選單還有字體大小減／加、複製／貼上，以及自由輸入的命令框（點選或按 Tab）。
+可輸入 `font 16`、`copy`、`paste`、`vt 2`、`help`；Enter 執行。
+複製前用左鍵拖曳選字，僅在程式未開啟滑鼠回報時生效。貼上沿用 xclip，
+程式啟用 bracketed paste 時會加上貼上邊界。
+
+On GPU-provided fbdev devices, a shared framebuffer mapping may not support
+`msync`. bunterm probes it once: `EINVAL`/`EOPNOTSUPP` disables further msync
+calls for that mapping while pixel writes continue normally. Drivers that
+support msync retain it; other errors still propagate. This is not a vsync or
+GPU-acceleration mechanism.

package/initramfs/usr/share/doc/buninu-linux/chvt.md

@@ -0,0 +1,34 @@
+# chvt — switch Linux virtual terminals
+
+```sh
+chvt 1             # switch to /dev/tty1 (normally the init REPL)
+chvt 2             # switch to /dev/tty2
+chvt -h            # also --help
+```
+
+Accepts one VT number, 1–63. Requires access to a real Linux virtual console
+and permission to switch it (normally root). A PTY alone, including a remote
+terminal or Android terminal, is not a Linux VT.
+
+With bunterm, for example:
+
+```sh
+bunterm 2          # start bunterm on tty2
+chvt 1             # from its shell, return to tty1 without stopping bunterm
+```
+
+Run `chvt 2` from a shell to return, or use Alt+F2 / Ctrl+Alt+F2 as appropriate.
+At the init JavaScript REPL, run a command with
+`Bun.spawnSync(["/bin/chvt", "2"], {stdio: ["inherit", "inherit", "inherit"]})`.
+The command switches the existing VT; it does not start a shell or bunterm on an
+empty VT. bunterm retains ownership of its VT, pauses drawing when switched away,
+and redraws when switched back. chvt does not change keyboard or graphics modes.
+
+Like the traditional command, chvt waits for the target VT to become active,
+then exits. If its current owner refuses to release the VT, the wait can persist. No daemon is created.
+
+中文：`chvt 1` 切至 tty1，`chvt 2` 切回 tty2 的 bunterm；不會結束 bunterm，
+也不會替空白 VT 啟動 shell。切出／切回使用 bunterm 原有的釋放與重繪機制。
+
+Uses Linux VT_ACTIVATE and VT_WAITACTIVE:
+https://man7.org/linux/man-pages/man2/ioctl_vt.2.html

package/initramfs/usr/share/doc/buninu-linux/dhclient.md

@@ -0,0 +1,82 @@
+# dhclient — DHCPv4 client
+
+Use `ip link` to list available network interfaces, then choose the interface
+name for the command, for example `dhclient usb0`.
+
+Acquire an IPv4 lease on an Ethernet-compatible interface. DHCP packets are
+implemented in JavaScript; Bun FFI calls the runtime libc for packet/UDP
+sockets and interface identification. Address and route changes invoke the
+existing Buninu `ip` command, without an external DHCP binary or dependencies.
+
+```sh
+dhclient eth0                    # acquire, configure, then exit
+dhclient -v -timeout 20 eth0     # show progress, fail after 20 seconds
+dhclient -r eth0                # release a saved lease after the client stops
+dhclient --no-dns eth0          # leave the resolver unchanged
+```
+
+| Option | Meaning |
+| --- | --- |
+| `-4` | DHCPv4 (default) |
+| `-d` | Accepted for compatibility; all invocations exit after configuration |
+| `-1` | Acquire once (already the default) |
+| `-r` | Send DHCPRELEASE and remove the saved lease's configuration |
+| `-timeout SECONDS` | Initial acquisition deadline; default 60 seconds |
+| `-v`, `-q` | Verbose protocol progress, or quiet output |
+| `-H HOSTNAME` | Send DHCP hostname option |
+| `-lf PATH` | JSON lease file; default `/var/lib/dhclient/INTERFACE.json` |
+| `--metric NUMBER` | Default route metric, 0–32766 |
+| `--no-dns` | Do not write DNS configuration |
+| `--resolv-conf PATH` | Resolver file; default `/etc/resolv.conf` |
+| `-h`, `--help` | This manual |
+
+Specify one interface per process. The interface is brought up first. This
+client replaces its primary IPv4 address and installs the first offered
+router as its default gateway. DNS server addresses replace the resolver
+file; its previous content is saved and restored on explicit release only if
+another writer has not modified it. `--no-dns` is useful for secondary links.
+Avoid simultaneous resolver management by multiple clients.
+
+Each invocation acquires and configures one lease, then exits. No background
+renewal process is started. `-1` is an optional alias for this default behavior.
+A DHCP lease is still time-limited unless the server grants an infinite lease:
+run the command again before expiry, or use an appropriate static address.
+After exit this command cannot renew or remove an expired address. The reported
+lease duration and JSON timestamps show the server's validity period.
+Ctrl-C/SIGTERM during acquisition stops the attempt; successful configuration
+remains after normal exit. Use `-r` to release it explicitly. Saved JSON leases
+support release and resolver restoration; their addresses are never assumed
+valid on a later acquisition.
+
+The per-interface `/run/dhclient-INTERFACE.lock` prevents duplicate Buninu
+clients, including callers using different lease files. Stop the running
+client before `-r`. After an unclean kill, verify it is gone before removing
+the stale lock. UDP port 68 is reserved exclusively to detect other clients.
+
+Linux/Android on x86-64 or aarch64 is supported, subject to privileges:
+CAP_NET_RAW for packet sockets, CAP_NET_ADMIN for interface/route changes,
+and permission to bind UDP 68 and write lease/resolver files. Ordinary
+unprivileged Termux cannot configure Android networking. Root in Buninu's
+VM can. Library selection follows the shared `dlopen.js` runtime ABI rules.
+
+This is a focused client, not an ISC dhclient CLI clone. DHCPv6, ISC config/
+script hooks, address-conflict ARP probing/DECLINE, classless static routes,
+and automatic renewal/daemonization are not implemented. Wi-Fi must already be
+associated. A failed acquisition exits nonzero; successful one-shot/release
+or clean signal termination returns zero.
+
+Protocol: [RFC 2131](https://www.rfc-editor.org/rfc/rfc2131) and
+[DHCP options, RFC 2132](https://www.rfc-editor.org/rfc/rfc2132).
+Run `bun test test/dhcp.test.js test/libc.test.js` for codec, state-machine,
+configuration and libc regression tests; tests do not reconfigure host links.
+
+`cfg.net` launches foreground clients as background child processes. Each has
+a 20-second acquisition deadline and an independent 25-second startup watchdog
+(SIGTERM, then SIGKILL after 2 seconds if necessary). Successful clients exit after configuration; none remain to renew. All child and output failures are caught and logged. Metrics start
+at 100 per interface; only the first interface may write DNS. Repeated calls
+reuse active clients; a later call can retry clients which have exited.
+
+Automatic calls report one final result per interface, prefixed with
+`[dhcp INTERFACE]`. A failed interface does not change another interface's
+success result or configuration; output is collected before reporting exit
+status so a delayed stderr message cannot appear after its final result.

package/initramfs/usr/share/doc/buninu-linux/ping.md

@@ -0,0 +1,91 @@
+# ping — send ICMP echo requests
+
+`ping` sends real IPv4 ICMP or IPv6 ICMPv6 echo requests through Bun FFI.
+It does not execute a system ping, open a TCP connection, or use an HTTP probe.
+
+```sh
+ping [-4|-6] [-nqD] [-c COUNT] [-i SECONDS] [-W SECONDS]
+     [-w SECONDS] [-s BYTES] [-t TTL] [-I ADDRESS|INTERFACE] DESTINATION
+ping --help
+```
+
+| Option | Meaning |
+|---|---|
+| `-c COUNT` | Stop after COUNT requests and their replies/timeouts. Default: 4 requests, then exit. |
+| `-i SECONDS` | Send interval, default 1 second; fractional values supported, minimum 0.002 seconds. |
+| `-W SECONDS` | Per-request reply timeout, default 2 seconds; fractional values supported. |
+| `-w SECONDS` | Overall probing deadline, including outstanding requests. DNS resolution happens first. |
+| `-s BYTES` | Payload size, default 56; 0–65507 bytes. The ICMP header adds 8 bytes. |
+| `-t TTL` | IPv4 TTL or IPv6 hop limit, 1–255; default 64. |
+| `-I ADDRESS` | Bind a source IPv4/IPv6 address. |
+| `-I INTERFACE` | Bind an interface such as `eth0` or `wlan0`; OS permissions may be required. |
+| `-4`, `-6` | Select IPv4 or IPv6. Numeric destinations infer their family; hostnames default to IPv4. |
+| `-n` | Numeric reply addresses (currently always used; no reverse DNS). |
+| `-q` | Print only the initial line and final statistics. |
+| `-D` | Add Unix timestamps to per-packet output. |
+| `-h`, `--help` | Show this document. |
+
+Short options can be combined (`-nq`) and values attached (`-c3`). Use `--`
+to end option parsing. Unknown options are rejected rather than ignored.
+
+```sh
+ping -c 4 1.1.1.1
+ping -c 3 localhost
+ping -6 -c 3 ::1
+ping -n -c 10 -i 0.2 -W 1 -s 1200 192.168.1.1
+ping -q -w 5 192.168.1.1
+ping -I eth0 -c 3 192.168.1.1
+```
+
+Statistics include transmitted/received counts, loss and RTT min/average/max/
+standard deviation. Ctrl-C prints statistics and closes the socket. Exit status
+is 0 if any reply arrived, 1 if none arrived (or a combined `-c`/`-w` deadline
+prevented receiving the requested count), and 2 for argument/setup/system errors.
+RTT is measured by the Bun process, so event-loop scheduling affects it.
+
+The preferred socket is an unprivileged ICMP datagram (ping) socket. If the OS
+refuses that socket, a raw ICMP socket is attempted; this normally requires root
+or `CAP_NET_RAW`. Linux controls datagram access with `ping_group_range`, and
+Android may impose additional restrictions. The command does not change system
+permissions. Replies are matched by identifier, sequence and payload; IPv4
+checksums are checked. Concurrent outstanding probes are supported. Datagram
+replies do not expose their received TTL through this implementation, so it is
+not printed; raw IPv4 replies do include TTL.
+
+Supported runtimes: 64-bit Linux (glibc or musl) and native Android/Termux
+(bionic), on x86_64 or aarch64. `/lib/dlopen.js` chooses libc automatically:
+
+- Android: `libc.so`, then the APEX and `/system/lib64` bionic paths; `__errno`.
+- Linux glibc runtime: `libc.so.6`, then architecture-specific `/lib` and
+  `/usr/lib` glibc paths; `__errno_location`.
+- Linux musl runtime: the adjacent `libc.musl-<arch>.so.1`, its soname,
+  `/lib/libc.musl-<arch>.so.1`, `/lib/ld-musl-<arch>.so.1`, then `libc.so`;
+  `__errno_location`.
+- Search stays within the runtime ABI: loading musl into glibc can crash on
+  errno/TLS access.
+- `BUNINU_LIBC=/absolute/path` overrides the search. A bad override fails
+  explicitly rather than silently selecting a different library. Symbols resolve
+  on first use: an unavailable mount symbol does not prevent ping from using
+  the socket symbols. An explicit override is not rejected based on its filename;
+  matching the runtime ABI remains the caller's responsibility.
+
+Windows requires a separate `iphlpapi.dll` ICMP backend and is not implemented.
+Flood/adaptive modes, IPv4 record-route/timestamps, reverse DNS, broadcast ping,
+and IPv6 scoped address notation (`fe80::1%eth0`) are not implemented.
+
+## Tests
+
+```sh
+bun test test/ping.test.js test/libc.test.js
+```
+
+These compare local IPv4/IPv6 echo replies, payload sizes, counts, quiet output,
+source selection, deadlines and exit codes against the installed system ping.
+RTT values are not expected to match. A missing system ping or unavailable
+loopback ICMP support skips the corresponding network comparisons. Older
+Android systems have a separate `ping6` and a 200 ms interval restriction; the
+reference tests accommodate those without limiting this command's options.
+Packet validation, argument errors, fast intervals and Ctrl-C also have tests.
+
+References: [Linux ICMP sockets](https://man7.org/linux/man-pages/man7/icmp.7.html),
+[Android errno](https://android.googlesource.com/platform/bionic/+/master/libc/include/errno.h).

package/initramfs/usr/share/doc/buninu-linux/xdg-open.md

@@ -0,0 +1,43 @@
+# xdg-open — open in a new browser terminal / 開啟瀏覽器
+
+```sh
+xdg-open https://buninu.org
+xdg-open about:audio
+xdg-open ./page.html
+xdg-open "./file with spaces.md"
+xdg-open file:///buninu/page.html
+```
+
+Runs `bunterm -e buninu-browser URL` on a new virtual console. HTTP, HTTPS,
+and `about:` URLs go to the browser. Local files must exist: symbolic links
+are resolved and the real path is encoded as a `file://` URL, including spaces,
+Chinese characters, `#`, and `%`. Markdown also opens in the browser.
+
+透過 bunterm 在新 tty 啟動瀏覽器。本地檔案先確認存在、解析實際路徑，再轉成
+`file://` 網址；Markdown 同樣使用瀏覽器。檔名若以 `-` 開頭，請加上 `./`。
+
+Directories and other schemes (including `data:`, `mailto:` and `ftp:`) are
+not supported. This is Buninu's lightweight implementation, not xdg-utils;
+it does not consult MIME associations or desktop application registrations.
+目前不支援目錄與其他協定，也不查詢 MIME 預設程式關聯。
+
+## Options / 選項
+
+| Option | Meaning |
+| --- | --- |
+| `-h`, `--help`, `--manual` | Show this Markdown manual / 顯示本手冊 |
+| `--version` | Show the Buninu Linux version from the image's os-release / 顯示映像檔的發行版版本 |
+
+## Exit codes / 退出碼
+
+| Code | Meaning |
+| --- | --- |
+| 0 | New terminal launch succeeded / 新終端啟動成功 |
+| 1 | Invalid arguments or URL / 參數或網址格式錯誤 |
+| 2 | Local file does not exist / 本地檔案不存在 |
+| 3 | Required tool not found / 缺少必要工具 |
+| 4 | Opening failed or target unsupported / 開啟失敗或目標不支援 |
+
+bunterm detaches when opening a new VT. Exit code 0 confirms the launcher
+succeeded, not that the browser subsequently loaded the page.
+新 tty 以背景工作階段啟動，因此成功退出不代表後續網頁一定載入成功。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "buninu-linux",
-  "version": "0.13.56",
+  "version": "0.15.58",
   "description": "A Linux distribution running Bun as PID 1 with the Buninu userspace.",
   "type": "module",
   "main": "./index.js",
@@ -37,6 +37,6 @@
     "fetch": "./index.js -f",
     "pack": "./index.js -b",
     "start": "./index.js -r",
-    "check": "for f in ./index.js ./initramfs/init.js ./initramfs/lib/document.js ./initramfs/lib/dlopen.js ./initramfs/lib/fbdev.js ./initramfs/lib/canvas.js ./initramfs/lib/bunterm/glyphs.js ./initramfs/lib/bunterm/renderer.js ./initramfs/lib/bunterm/images.js ./initramfs/lib/bunterm/input.js ./initramfs/lib/bunterm/mouse.js ./initramfs/lib/bunterm/terminal.js ./initramfs/lib/modprobe.js ./initramfs/lib/power.js ./initramfs/bin/bunterm ./initramfs/bin/chroot ./initramfs/bin/mount ./initramfs/bin/umount ./initramfs/bin/ip ./initramfs/bin/ps ./initramfs/bin/top ./initramfs/bin/poweroff ./initramfs/bin/reboot ./initramfs/bin/tar ./initramfs/bin/stripansi; do node --check \"$f\" || exit 1; done"
+    "check": "for f in ./index.js ./initramfs/init.js ./initramfs/lib/document.js ./initramfs/lib/dlopen.js ./initramfs/lib/ping.js ./initramfs/lib/dhcp.js ./initramfs/lib/dhcp-transport.js ./initramfs/lib/dhclient.js ./initramfs/lib/dhcp-start.js ./initramfs/lib/fbdev.js ./initramfs/lib/canvas.js ./initramfs/lib/bunterm/glyphs.js ./initramfs/lib/bunterm/renderer.js ./initramfs/lib/bunterm/images.js ./initramfs/lib/bunterm/input.js ./initramfs/lib/bunterm/mouse.js ./initramfs/lib/bunterm/terminal.js ./initramfs/lib/modprobe.js ./initramfs/lib/power.js ./initramfs/bin/bunterm ./initramfs/bin/chroot ./initramfs/bin/mount ./initramfs/bin/umount ./initramfs/bin/ip ./initramfs/bin/ping ./initramfs/bin/dhclient ./initramfs/bin/ps ./initramfs/bin/top ./initramfs/bin/poweroff ./initramfs/bin/reboot ./initramfs/bin/tar ./initramfs/bin/stripansi; do node --check \"$f\" || exit 1; done"
   }
 }

package/scripts/arch.js

@@ -16,8 +16,8 @@ export const rootDir = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 
 const pins = {
   x86_64: {
-    linuxVirtSha256: "755deb045cfeb8c2bcaa2b2febe01ab2101d747921e64d4cd54d0312321e8d5d",
-    linuxLtsSha256: "b0d8cc4d7e031b5619221e7978920d051bf1dd1e335f6d05d03964b2285fc3b4",
+    linuxVirtSha256: "1eec55004cf7167c914c8839f46691d2bc82767e20466bff51eb45d06f8e90cc",
+    linuxLtsSha256: "af399fba75cafb2940fc2853eb73ba2289aa463228f33541cd3010334a30992b",
     muslSha256: "573712e2f49c15bfc20a2699f204acdfc74c772722b15e7353d768057fae0e71",
     stubSha256: "8e64a5a3afee5f930e6e6716be726dc6d405530ac7f8fa5be6251dae68671ec9",
     libstdcppSha256: "14c987b556f5385a5db18376e788c75f37d85321b8dc1920d926ea7daac1d6f6",
@@ -32,8 +32,8 @@ const pins = {
     serialMajor: 4,
   },
   aarch64: {
-    linuxVirtSha256: "e3839bfd751ff0a4421484f712b9b29efb514024523736a0ef62521521571b12",
-    linuxLtsSha256: "795bcd49840be7f4ff9566f5f669201bd41202376a455b720a98eb814f0e72f8",
+    linuxVirtSha256: "b46c51ddf572d85b2ba7b9adfaa64f4c38fc490c93d97a20ffd2418d51284085",
+    linuxLtsSha256: "65ab581dd6773e2b1b6831dac50142518b2f2083668f164f68ebfcd00d1763c4",
     muslSha256: "5e9674b7f41152fe2119093b5cb4c13eaaadb19c2d5422b2d7267913e663ee6e",
     stubSha256: "a1823d2d7082db555d528f82c1809f276c818aeb5b40f198f4565f104e055c38",
     libstdcppSha256: "2302e766d4e4926038ec166ecb85837ee884576115236ddb565e3a5fca4a11d7",
@@ -58,6 +58,7 @@ export const config = ({
   arch = process.env.BUNINU_ARCH || "x86_64",
   flavor = process.env.LINUX_FLAVOR || "virt",
   real = process.env.REAL_MACHINE === "1",
+  noGpu = process.env.BUNINU_NO_GPU === "1",
   mirror = process.env.ALPINE_MIRROR || "https://dl-cdn.alpinelinux.org/alpine",
 } = {}) => {
   arch = normalizeArch(arch);
@@ -67,7 +68,7 @@ export const config = ({
   // The Alpine repository keeps only the newest build of a package, so a pin
   // stops downloading when Alpine bumps it; the hashes then fail loudly.
   const alpineBase = `${mirror}/v3.24/main/${arch}`;
-  const kernelVersion = "6.18.56";
+  const kernelVersion = "6.18.58";
   const kernelRelease = `${kernelVersion}-0-${flavor}`;
   const bunVersion = "1.4.2";
   const downloadsDir = join(rootDir, "downloads", arch);
@@ -77,6 +78,7 @@ export const config = ({
     arch,
     flavor,
     real,
+    noGpu,
     rootDir,
     alpineBase,
     kernelVersion,

package/scripts/arch.sh

@@ -44,7 +44,7 @@ fi
 alpine_mirror=${ALPINE_MIRROR:-https://dl-cdn.alpinelinux.org/alpine}
 alpine_base="$alpine_mirror/v3.24/main/$arch"
 
-kernel_version=6.18.56
+kernel_version=6.18.58
 kernel_release="$kernel_version-0-$linux_flavor"
 linux_package="linux-$linux_flavor-$kernel_version-r0.apk"
 musl_package=musl-1.2.6-r2.apk
@@ -63,8 +63,8 @@ musl_libc="libc.musl-$arch.so.1"
 
 case $arch in
     x86_64)
-        linux_virt_sha256=755deb045cfeb8c2bcaa2b2febe01ab2101d747921e64d4cd54d0312321e8d5d
-        linux_lts_sha256=b0d8cc4d7e031b5619221e7978920d051bf1dd1e335f6d05d03964b2285fc3b4
+        linux_virt_sha256=1eec55004cf7167c914c8839f46691d2bc82767e20466bff51eb45d06f8e90cc
+        linux_lts_sha256=af399fba75cafb2940fc2853eb73ba2289aa463228f33541cd3010334a30992b
         musl_sha256=573712e2f49c15bfc20a2699f204acdfc74c772722b15e7353d768057fae0e71
         stub_sha256=8e64a5a3afee5f930e6e6716be726dc6d405530ac7f8fa5be6251dae68671ec9
         libstdcpp_sha256=14c987b556f5385a5db18376e788c75f37d85321b8dc1920d926ea7daac1d6f6
@@ -82,8 +82,8 @@ case $arch in
         serial_major=4
         ;;
     aarch64)
-        linux_virt_sha256=e3839bfd751ff0a4421484f712b9b29efb514024523736a0ef62521521571b12
-        linux_lts_sha256=795bcd49840be7f4ff9566f5f669201bd41202376a455b720a98eb814f0e72f8
+        linux_virt_sha256=b46c51ddf572d85b2ba7b9adfaa64f4c38fc490c93d97a20ffd2418d51284085
+        linux_lts_sha256=65ab581dd6773e2b1b6831dac50142518b2f2083668f164f68ebfcd00d1763c4
         musl_sha256=5e9674b7f41152fe2119093b5cb4c13eaaadb19c2d5422b2d7267913e663ee6e
         stub_sha256=a1823d2d7082db555d528f82c1809f276c818aeb5b40f198f4565f104e055c38
         libstdcpp_sha256=2302e766d4e4926038ec166ecb85837ee884576115236ddb565e3a5fca4a11d7

package/scripts/build.js

@@ -28,6 +28,7 @@ import { format, openVolume } from "../initramfs/lib/fat.js";
 import { TYPES, randomGuid, writeGpt } from "../initramfs/lib/gpt.js";
 import { config, jsRuntime, rootDir, runIfMain } from "./arch.js";
 import { fetchAlpine } from "./fetch.js";
+import { gpuReady } from "./fetch-gpu.js";
 import { pack } from "./pack.js";
 
 const nonEmpty = (path) => existsSync(path) && statSync(path).size > 0;
@@ -64,6 +65,7 @@ export const uki = async (cfg = config()) => {
   const missing = !nonEmpty(cfg.kernelImage)
     || !nonEmpty(join(cfg.kernelDir, cfg.efiStub))
     || !nonEmpty(join(cfg.modulesRoot, "modules.dep"))
+    || !gpuReady(cfg)
     || (cfg.real && (
       !nonEmpty(join(cfg.modulesRoot, "kernel/drivers/hid/usbhid/usbhid.ko"))
       || !nonEmpty(join(cfg.modulesRoot, "kernel/drivers/acpi/battery.ko"))
@@ -94,11 +96,22 @@ export const uki = async (cfg = config()) => {
   console.log(`Built ${cfg.arch} UKI with Alpine linux-${cfg.flavor} at vda/EFI/BOOT/${cfg.efiBootName}`);
 };
 
-/** build-image.sh: vda.img, 128 MiB, GPT with the ESP from sector 2048 to the last usable one. */
+// Keep small images at 128 MiB. Reserve 1/16 payload size plus 4 MiB for
+// FAT metadata, directories, GPT/alignment and free space, rounded to 64 MiB.
+// Keep this calculation aligned with build-image.sh.
+export const imageBytes = (payloadBytes) => {
+  if (!Number.isSafeInteger(payloadBytes) || payloadBytes < 0 || payloadBytes > 0xffffffff)
+    throw new Error("EFI payload exceeds the FAT32 single-file limit or has an invalid size");
+  const unit = 64 * 1024 * 1024;
+  return Math.max(128 * 1024 * 1024,
+    Math.ceil((payloadBytes + Math.ceil(payloadBytes / 16) + 4 * 1024 * 1024) / unit) * unit);
+};
+
+/** build-image.sh: dynamically sized GPT disk with one FAT32 ESP. */
 export const image = (cfg = config()) => {
   const efi = join(rootDir, "vda/EFI/BOOT", cfg.efiBootName);
   if (!nonEmpty(efi)) throw new Error(`no ${cfg.arch} EFI payload ${efi} yet; build the UKI first`);
-  const diskSectors = (128 * 1024 * 1024) / 512;
+  const diskSectors = imageBytes(statSync(efi).size) / 512;
   const espStart = 2048;
   const espEnd = diskSectors - 34;
   const path = join(rootDir, "vda.img");
@@ -134,7 +147,7 @@ export const image = (cfg = config()) => {
   } finally {
     volume.close();
   }
-  console.log(`Packed vda/EFI/BOOT/${cfg.efiBootName} into vda.img`);
+  console.log(`Packed vda/EFI/BOOT/${cfg.efiBootName} into vda.img (${diskSectors * 512 / 1024 / 1024} MiB)`);
 };
 
 export const buildAll = async (cfg = config()) => {