buninu-linux 0.9.56 → 0.11.56

package/LICENSES/MIT-ZilchOS-bootstrap-from-tcc.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2021 Alexander Sosedkin.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE.md

@@ -18,6 +18,40 @@ Alpine's CDN serves only the current pkgrel of each branch, so the package
 URLs below stop working once a build is superseded. The pinned aports commits
 are permanent and are the Corresponding Source for each exact build.
 
+## Bootstrap source archives
+
+`initramfs/usr/lib/bootstrap/sources/` additionally carries uncompiled source:
+
+- musl 1.2.6, from https://musl.libc.org/releases/musl-1.2.6.tar.gz;
+  its full `COPYRIGHT` is preserved inside the archive.
+- TinyCC commit `05f0faf`, with `COPYING` and per-file license notices preserved
+  in `tinycc-05f0faf-upstream.tar.gz`.
+- Local TinyCC bootstrap recipes in `tinycc-local-bootstrap-files.tar.gz`.
+
+### Bootstrap route credit and build-time downloads
+
+Credit to [ZilchOS/bootstrap-from-tcc](https://github.com/ZilchOS/bootstrap-from-tcc)
+by Alexander Sosedkin (Copyright (c) 2021 Alexander Sosedkin), whose bootstrap
+route and recipes informed Buninu's TinyCC-to-GCC stages. The complete MIT
+notice is preserved in `LICENSES/MIT-ZilchOS-bootstrap-from-tcc.txt` and in
+the bootstrap payload. Reference checkout:
+`d2f9454b34fef570cfb32cf5b17d85a90dba81bf`.
+
+Stages 5–12 additionally fetch GNU Make 4.4.1, Binutils 2.39, GMP 4.3.2,
+MPFR 2.4.2, MPC 0.8.1, GNU m4 1.4.18, Flex 2.6.4 and the pinned GCC 4.7
+vendor snapshot. These source archives and compiled results are not bundled
+in the npm package. Their own licenses apply, independently of Buninu's and
+ZilchOS's MIT licenses.
+
+See [the bootstrap-specific notices](initramfs/usr/lib/bootstrap/NOTICE.md)
+for component licenses, provenance, runtime-helper exceptions and where
+upstream license texts are retained. The credit and MIT license are copied
+into each prepared rootfs and the final result's license directory.
+
+The numbered bootstrap scripts extract these sources into the new rootfs.
+See `initramfs/usr/lib/bootstrap/README.md` for the source-generation steps
+and the ARM64 ordinary-CRT compatibility adjustment.
+
 ## Components tracked in this repository
 
 These files are committed under `native/x86_64/lib/` and
@@ -250,8 +284,9 @@ committed source files, but their contents are redistributed in the image.
 
 | Package | Version | Package license | Project / package page | Installed license and notices (relative to `/usr/lib/node_modules/`) |
 |---|---|---|---|---|
-| `buninu-browser` | 0.2.2 | MIT for the browser's own code; bundled components retain their own terms | https://github.com/jjtseng93/buninu-browser | `buninu-browser/LICENSE`, `THIRD_PARTY_NOTICES.md`, `LICENSES/` and vendor notices within that package |
-| `@drxiaozhi/casty` | 1.3.4 | MIT | https://github.com/jjtseng93/casty | `@drxiaozhi/casty/LICENSE` |
+| `buninu-browser` | 0.2.3 | MIT for the browser's own code; bundled components retain their own terms | https://github.com/jjtseng93/buninu-browser | `buninu-browser/LICENSE`, `THIRD_PARTY_NOTICES.md`, `LICENSES/` and vendor notices within that package |
+| `buninu-land` | 0.1.2 | MIT for its own code; bundled components retain their own terms | https://github.com/jjtseng93/buninu-land | `buninu-land/LICENSE`, `THIRD_PARTY_NOTICES.md`, `LICENSES/`, `SOURCES.md`, protocol XML notices and vendor notices |
+| `@drxiaozhi/casty` | 1.3.6 | MIT | https://github.com/jjtseng93/casty | `@drxiaozhi/casty/LICENSE` |
 | `@drxiaozhi/jspulse` | 0.2.1 | LGPL-2.1-or-later, with additional component notices | https://github.com/jjtseng93/jspulse | `@drxiaozhi/jspulse/LICENSE`, `NOTICE.md`, `LICENSES/` and source-file notices within that package |
 | `@drxiaozhi/jspinyin` | 0.1.1 | MIT; hanzipinyin material under the Unlicense | https://www.npmjs.com/package/@drxiaozhi/jspinyin | `@drxiaozhi/jspinyin/LICENSE` and `@drxiaozhi/jspinyin/LICENSE-hanzipinyin.md` |
 
@@ -283,6 +318,17 @@ LGPL-2.1-or-later. Within `/usr/lib/node_modules/buninu-browser/`, retain:
 The decoder's `cpu.wasm` remains a separate, replaceable file. Do not remove
 the source archive or rebuild material merely to reduce the image size.
 
+### Buninu Land
+
+The compositor package is extracted in full, including its CanvasKit WASM,
+loader, protocol XML, source provenance, patches and license collection.
+Retain `THIRD_PARTY_NOTICES.md`, `SOURCES.md`, `vendor-manifest.json`,
+`LICENSES/`, `vendor/canvaskit/LICENSE`, and the notices embedded in the
+Wayland protocol XML files. These cover Buninu Browser-derived code,
+CanvasKit/Skia and embedded libraries, Wayland protocols, and the Hyprland
+window-management/input reference credit (`LICENSES/hyprland.txt`).
+The distribution-owned launcher uses the separately bundled Casty package.
+
 ### jspulse source and notices
 
 jspulse is shipped as JavaScript source, with its LGPL license, modification

package/README.md

@@ -47,6 +47,9 @@
     + Simplified browser works: buninu-browser natively or casty in chroot debian
     + Playing YouTube with sound (experimental); see [Playing YouTube with sound](#playing-youtube-with-sound-experimental)
     + See [Buninu Browser](#buninu-browser-early-stage-experimental) for the built-in browser, or [Debian and Chromium with casty](#debian-and-chromium-with-casty) for the optional chroot setup
+  * [Bootstrap a C compiler from Bun](initramfs/usr/lib/bootstrap/README.md):
+    + numbered scripts generate musl headers/CRT, 
+    + build TinyCC and download the sources needed to continue through GCC 4.7, starting with `bun /usr/lib/bootstrap/1.prepare-rootfs.js`.
 
 ---
 
@@ -686,6 +689,7 @@ If there is no sound, check step 4's terminal for errors, and make sure
 | --- | --- | --- |
 | `buninu-linux-help` | render this buninu-linux README from `/usr/share/doc/buninu-linux/README.md` | `buninu-linux-help` |
 | `buninu-browser` | early-stage, experimental JavaScript/WASM browser with the bundled casty terminal frontend; not yet a general-purpose browser replacement | `buninu-browser --help` |
+| `buninu-land` | experimental software-rendered Wayland compositor with the bundled casty terminal frontend | `buninu-land --help` |
 | `jspulse` | PulseAudio-compatible audio server and ALSA mixer controls; use `--alsa` on Buninu Linux | `jspulse --help` |
 | `jspinyin` | Chinese pinyin input panel, opened with the system jsmdcui in TUI mode; not a system-wide input method | — |
 | `mount` | `mount(2)` with type detection, `-o` parsing, `LABEL=`/`UUID=`, bind/move/remount; loads required filesystem and disk modules | `mount --help` → `/usr/share/doc/buninu-linux/mount.md` |
@@ -704,7 +708,7 @@ If there is no sound, check step 4's terminal for errors, and make sure
 | `mmd`, `mcopy`, `mdir` | create directories, copy files and list contents in a FAT image without mounting it; use `-i IMAGE` and `::/path` | — |
 | `parted` | create and inspect GPT partitions in a disk image; script-mode subset | `parted --help` |
 | `stripansi` | remove ANSI escape sequences from stdin, `-`, or one or more files and concatenate the results | — |
-| `chroot` | `chroot(2)` into another root directory, mounting `/proc`, `/sys`, `/dev`, `/dev/pts`, `/run`, `/tmp` and `/etc/resolv.conf` for you and unmounting them afterwards | `chroot --help` |
+| `chroot` | `chroot(2)` into another root directory, mounting `/proc`, `/sys`, `/dev`, `/dev/pts`, `/run`, `/tmp` and `/etc/resolv.conf` for you; supports `-b HOST[:GUEST]` and `--shared-tmp`, with automatic cleanup on exit | `chroot --help` |
 | `bunterm` | a graphical terminal on the framebuffer: Skia (CanvasKit) text with CJK, colour emoji, seamless box drawing, kitty graphics images, with the mouse working, wheel scrollback included (`--no-mouse` turns it off); xterm.js's emulator core over Bun's built-in PTY | `bunterm --help` |
 
 Besides `bun` (and `sh`/`node` pointing at it), `/bin` includes the commands
@@ -735,6 +739,32 @@ REPL, then run `jspulse --alsa` in another terminal or use `jspulse --alsa &` to
 buninu-browser about:audio
 ```
 
+### Buninu Land (early-stage, experimental)
+
+Run `buninu-land` inside `bunterm` (or another Kitty-graphics terminal) to
+open the Wayland desktop. The compositor and Casty are bundled; startup
+requires no npm download.
+
+```sh
+buninu-land
+```
+
+The socket directory defaults to `$TMPDIR`, or the system temporary directory
+if `TMPDIR` is unset; an explicitly set `XDG_RUNTIME_DIR` takes precedence.
+No environment setup is needed to launch the compositor.
+
+In another terminal, set the Wayland client's `XDG_RUNTIME_DIR` to that socket
+directory and `WAYLAND_DISPLAY` to the compositor's socket name (normally `wayland-buninu`;
+additional instances use `wayland-buninu1`, `wayland-buninu2`, and so on),
+then start a Wayland client. Clients inside a chroot can share the socket
+with `chroot --shared-tmp` when the host's `TMPDIR` points to that directory.
+
+The `/bin/buninu-land` launcher sets `CASTY_BROWSER` to
+`/usr/lib/node_modules/buninu-land/compositor.js` and runs the bundled Casty.
+`--casty` forwards arguments to Casty; `--headless`, `--help`, `--version`,
+README options and reserved native frontends go through the package entry.
+The package's CanvasKit WASM and license files are retained unchanged.
+
 ### Archive tools and other examples
 
 The small `tar` reads the archive's own headers for links and listing, so
@@ -869,9 +899,45 @@ apk add libgcc libstdc++
 # and /etc/resolv.conf are mounted for you and removed again on exit
 chroot /mnt
 chroot /mnt /bin/bun --version
-chroot -n /mnt /bin/sh        # traditional: mount nothing
+chroot -n /mnt /bin/sh        # skip automatic mounts (explicit -b still applies)
 ```
 
+
+Share host files and directories with repeatable `-b` options, placed before
+the root filesystem path:
+
+```sh
+# Mount a host directory at a different path inside the guest
+chroot -b /home/user/project:/work /mnt /bin/sh
+
+# Omit the guest path to expose the same absolute path inside the guest
+chroot -b /home/user/project /mnt /bin/sh
+
+# Share multiple paths, including individual files
+chroot -b /home/user/project:/work -b /etc/hosts:/etc/hosts /mnt /bin/sh
+
+# Share the host temporary directory, including Wayland sockets
+export TMPDIR=/tmp
+chroot --shared-tmp /mnt /bin/sh
+# Equivalent to:
+chroot -b "$TMPDIR:/tmp" /mnt /bin/sh
+```
+
+`--shared-tmp` expands to `-b "$TMPDIR:/tmp"` and replaces the automatic
+`/tmp` tmpfs. `TMPDIR` must be set and its source path must exist. The option
+does not rewrite environment variables inside the guest; set `TMPDIR=/tmp`
+there if the host uses a different path. For Buninu Land clients, set the
+guest's `XDG_RUNTIME_DIR=/tmp` and `WAYLAND_DISPLAY` to the compositor's socket
+name, and ensure the host's `TMPDIR` is the directory containing that socket.
+
+Host paths may be relative; guest paths must be absolute. Missing guest
+mount destinations are created. Directories are bound recursively, and a
+repeated destination uses the last argument. Bind failures abort setup and
+clean up its mounts, even with `-k`. Normally mounts are removed when the
+command exits; `-k` / `--keep-mounts` keeps them after a successful setup.
+Use `-v` to report mounts and unmounts. Full details: `chroot --help` or the
+[chroot manual](initramfs/usr/share/doc/buninu-linux/chroot.md).
+
 ## Environment and dependencies
 
 The default JS build uses host Bun. The native build-tool dependencies below
@@ -1098,7 +1164,7 @@ index.js                  entry point: -f / -b / -r / --arch / --docker / --expo
 Dockerfile                Debian-based oven/bun:1.4.2 plus the shell build toolchain
 fetch-alpine.sh           [fetch]  kernel, EFI stub, musl, network/input/display modules
 fetch-bun.sh              [fetch]  Bun, libstdc++, libgcc
-fetch-npm.sh              [fetch]  pinned browser, casty, jspulse and jspinyin tarballs (download only)
+fetch-npm.sh              [fetch]  pinned browser, land, casty, jspulse and jspinyin tarballs (download only)
 build-uki.sh              [build]  UKI; calls scripts/pack-initramfs.sh
 build-image.sh            [build]  GPT disk image; shared with the hello-world EFI
 run-qemu.sh               [run]    QEMU q35 (x86_64) or virt (aarch64), KVM/HVF/TCG
@@ -1126,11 +1192,12 @@ tampered with is fetched again and has to pass the same hash before a script
 extracts from it. Bumping a version changes both the file name and the hash, so
 it always refetches.
 
-The four application packages are pinned separately in
-`scripts/npm-packages.md`: `buninu-browser@0.2.3`,
-`@drxiaozhi/casty@1.3.4`, `@drxiaozhi/jspulse@0.2.1`, and
+The five application packages are pinned separately in
+`scripts/npm-packages.md`: `buninu-browser@0.2.3`, `buninu-land@0.1.2`,
+`@drxiaozhi/casty@1.3.6`, `@drxiaozhi/jspulse@0.2.1`, and
 `@drxiaozhi/jspinyin@0.1.1`. These were npm's `latest` versions when checked
-on 2026-10-11, with buninu-browser updated to npm's `latest` on 2026-10-12;
+on 2026-10-11, with buninu-browser updated on 2026-10-12, and
+casty 1.3.6 and buninu-land 0.1.2 verified on 2026-10-16;
 fetch never resolves `latest` or a version range at runtime.
 Each registry tarball was checked against its published SHA-512 integrity
 before its SHA-256 was recorded in the shared pins file.
@@ -1156,7 +1223,7 @@ dependency resolution run. JS extraction uses the initramfs JS `tar` and
 requires a host Bun; shell/Docker extraction uses the host `tar`, without Bun.
 The source `initramfs/` and project `package.json` are not modified by packing.
 
-The image gets `/usr/lib/package.json` with the four exact dependencies and
+The image gets `/usr/lib/package.json` with the five exact dependencies and
 standard `node_modules/.bin` links. This reserves a normal package-manager
 layout for later `cd /usr/lib` and `bun i --backend=copyfile`; no lockfile is
 fabricated. `bun i` alone retains the pinned versions, not newer releases.
@@ -1553,6 +1620,7 @@ for the userspace session.
   * [Playing YouTube with sound (experimental)](#playing-youtube-with-sound-experimental)
 - [Commands inside /bin](#commands-inside-bin)
   * [Buninu Browser (early-stage, experimental)](#buninu-browser-early-stage-experimental)
+  * [Buninu Land (early-stage, experimental)](#buninu-land-early-stage-experimental)
   * [Archive tools and other examples](#archive-tools-and-other-examples)
 - [Optional chroot and native binaries](#optional-chroot-and-native-binaries)
   * [Debian and Chromium with casty](#debian-and-chromium-with-casty)
@@ -1606,8 +1674,8 @@ architecture under `native/<arch>/lib/`, and the built image redistributes
 several more. Each stays
 under its own terms, with platform license texts in [`LICENSES/`](LICENSES/).
 
-The build also fetches four SHA-256-pinned npm releases and redistributes
-them under `/usr/lib/node_modules`: `buninu-browser`, `@drxiaozhi/casty`,
+The build also fetches five SHA-256-pinned npm releases and redistributes
+them under `/usr/lib/node_modules`: `buninu-browser`, `buninu-land`, `@drxiaozhi/casty`,
 `@drxiaozhi/jspulse` and `@drxiaozhi/jspinyin`. Their license and notice files
 remain inside their package directories. Exact download URLs and hashes are
 in [`scripts/npm-packages.md`](scripts/npm-packages.md); versions, upstream
@@ -1627,9 +1695,10 @@ when redistributing the image.
 | Linux kernels and networking, storage, xHCI, USB and HID modules | GPL-2.0-only with the Linux syscall note | image only |
 | systemd EFI stub | LGPL-2.1-or-later | image only |
 | Bun | MIT, plus the licenses of what it statically links | image only |
-| buninu-browser 0.2.2 | MIT for its own code; bundled components have their own licenses | npm download → image |
+| buninu-browser 0.2.3 | MIT for its own code; bundled components have their own licenses | npm download → image |
+| buninu-land 0.1.2 | MIT for its own code; bundled components retain their own licenses and notices | npm download → image |
 | wasmpeg / FFmpeg (`@wasmpeg/cpu` 1.0.1, bundled in buninu-browser) | LGPL-2.1-or-later, plus component notices; source archive and rebuild documentation retained | browser package → image |
-| `@drxiaozhi/casty` 1.3.4 | MIT | npm download → image |
+| `@drxiaozhi/casty` 1.3.6 | MIT | npm download → image |
 | `@drxiaozhi/jspulse` 0.2.1 | LGPL-2.1-or-later, plus component notices | npm download → image |
 | `@drxiaozhi/jspinyin` 0.1.1 | MIT; hanzipinyin material under the Unlicense | npm download → image |
 | CanvasKit 0.41.1 (`initramfs/lib/canvaskit/`, Skia compiled to WebAssembly) | BSD-3-Clause (`LICENSES/BSD-3-Clause-Skia.txt`) | committed |

package/initramfs/bin/buninu-land

@@ -0,0 +1,26 @@
+#!/bin/bun
+// Keep the offline casty launcher outside the npm package so package updates
+// preserve the distribution entry point.
+import { resolve, join } from "node:path";
+import { pathToFileURL } from "node:url";
+
+const root = resolve(import.meta.dir, "..");
+const modules = join(root, "usr/lib/node_modules");
+const browser = join(modules, "buninu-land");
+const entry = join(browser, "index.js");
+const { chooseFrontend } = await import(pathToFileURL(entry).href);
+const args = process.argv.slice(2);
+const choice = chooseFrontend(args);
+const casty = choice.frontend === "casty";
+const forwarded = casty ? choice.args : args;
+// Bun consumes a leading separator after the script path; preserve Casty's
+// own separator when --casty is followed directly by -- engine flags.
+const runtimeArgs = forwarded[0] === "--" ? ["--", ...forwarded] : forwarded;
+const child = Bun.spawn({
+  cmd: [process.execPath, casty ? join(modules, "@drxiaozhi/casty/index.js") : entry,
+    ...runtimeArgs],
+  env: casty ? { ...process.env, CASTY_BROWSER: join(browser, "compositor.js") } : process.env,
+  stdio: ["inherit", "inherit", "inherit"],
+});
+for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) process.on(signal, () => child.kill(signal));
+process.exit(await child.exited);

package/initramfs/bin/chroot

@@ -10,6 +10,8 @@
 
 import { chmodSync, existsSync, mkdirSync, realpathSync, statSync, readFileSync, writeFileSync } from "node:fs";
 import { libc, cString, ptr, errno, strerror, Errno } from "../lib/dlopen.js";
+import { dirname } from "node:path";
+import { parseChrootArguments, resolveBindings, resolveGuestPath } from "../lib/chroot-options.js";
 import { showDocument } from "../lib/document.js";
 
 const MS = { RDONLY: 1n, NOSUID: 2n, NODEV: 4n, NOEXEC: 8n, BIND: 4096n, REC: 16384n, SLAVE: 1n << 19n };
@@ -23,27 +25,18 @@ const fail = (message, status = 125) => {
 const usage = () => {
   console.error(`Usage:
   chroot NEWROOT [COMMAND [ARGUMENT...]]
-  chroot [-n] [-k] [-v] NEWROOT [COMMAND [ARGUMENT...]]
+  chroot [-n] [-k] [-v] [-b HOST[:GUEST]] [--shared-tmp] NEWROOT [COMMAND [ARGUMENT...]]
   chroot -h | --help          full manual (chroot.md)`);
   process.exit(125);
 };
 
 // ------------------------------------------------------------- arguments --
 
-const options = { mount: true, keep: false, verbose: false };
-const positional = [];
-const argv = process.argv.slice(2);
-for (let index = 0; index < argv.length; index++) {
-  const argument = argv[index];
-  if (positional.length > 0) { positional.push(argument); continue; }
-  if (argument === "--") { positional.push(...argv.slice(index + 1)); break; }
-  if (argument === "-h" || argument === "--help") { await showDocument("chroot"); process.exit(0); }
-  else if (argument === "-n" || argument === "--no-mount") options.mount = false;
-  else if (argument === "-k" || argument === "--keep-mounts") options.keep = true;
-  else if (argument === "-v" || argument === "--verbose") options.verbose = true;
-  else if (argument.startsWith("-") && argument.length > 1) { console.error(`chroot: unknown option ${argument}`); usage(); }
-  else positional.push(argument);
-}
+let parsed;
+try { parsed = parseChrootArguments(process.argv.slice(2)); }
+catch (error) { fail(error.message); }
+const { options, positional } = parsed;
+if (parsed.help) { await showDocument("chroot"); process.exit(0); }
 if (positional.length === 0) usage();
 
 const [target, ...command] = positional;
@@ -55,6 +48,10 @@ try {
   fail(`cannot change root directory to ${target}: ${error.code === "ENOENT" ? "no such directory" : error.message}`);
 }
 if (root === "/") fail("refusing to chroot to /");
+let bindings;
+try { bindings = resolveBindings(options.binds); }
+catch (error) { fail(`invalid bind: ${error.message}`); }
+
 
 const report = (message) => { if (options.verbose) console.error(`chroot: ${message}`); };
 
@@ -80,57 +77,39 @@ const made = [];
 // Prepares one mount. `inside` is the path within the new root. A target that
 // is already a mount point, or that cannot be created on a read-only root, is
 // left alone rather than treated as a failure: the command may still run.
-const prepare = ({ inside, source, type, flags = 0n, data, file = false }) => {
+const prepare = ({ inside, source, type, flags = 0n, data, file = false, required = false }) => {
+  inside = resolveGuestPath(root, inside);
+  if (!required && bindings.some(bind => {
+    const destination = resolveGuestPath(root, bind.inside);
+    return inside === destination || inside.startsWith(destination + "/");
+  })) return;
+  if (required && made.includes(inside)) throw Error(`bind destination is already used by this invocation: ${inside}`);
   const point = `${root}${inside}`;
-  if (mountPoints().includes(point)) {
+  if (!required && mountPoints().includes(point)) {
     report(`${inside} is already mounted`);
     return;
   }
   if (!existsSync(point)) {
     try {
-      if (file) writeFileSync(point, "");
+      if (file) { mkdirSync(dirname(point), { recursive: true, mode: 0o755 }); writeFileSync(point, "", { flag: "wx" }); }
       else mkdirSync(point, { recursive: true, mode: 0o755 });
     } catch (error) {
+      if (required) throw Error(`cannot create ${inside}: ${error.message}`);
       report(`cannot create ${inside}: ${error.message}; skipped`);
       return;
     }
   }
   if (mountSyscall(source, point, type, flags, data) === -1) {
+    if (required) throw Error(`bind ${source} -> ${inside}: ${strerror(errno())}`);
     report(`mount ${inside}: ${strerror(errno())}; skipped`);
     return;
   }
   made.push(inside);
   report(`mounted ${inside}`);
-};
-
-if (options.mount) {
-  prepare({ inside: "/proc", source: "proc", type: "proc", flags: MS.NOSUID | MS.NODEV | MS.NOEXEC });
-  prepare({ inside: "/sys", source: "sysfs", type: "sysfs", flags: MS.NOSUID | MS.NODEV | MS.NOEXEC });
-  // /dev is bound rather than mounted fresh so the devices, the pty
-  // multiplexer and anything the host added are all there. The bind is then
-  // made a slave: mounts appearing inside do not propagate back to the host,
-  // and unmounting it later does not take the host's /dev with it.
-  prepare({ inside: "/dev", source: "/dev", type: "none", flags: MS.BIND | MS.REC });
-  if (made.includes("/dev")) {
-    if (mountSyscall("none", `${root}/dev`, "none", MS.REC | MS.SLAVE) === -1) {
-      report(`making /dev a slave mount: ${strerror(errno())}`);
-    }
-    // Only needed when the host has no /dev/pts of its own to bring along.
-    if (!existsSync(`${root}/dev/pts/ptmx`)) {
-      prepare({ inside: "/dev/pts", source: "devpts", type: "devpts", flags: MS.NOSUID | MS.NOEXEC, data: "gid=5,mode=620,ptmxmode=666" });
-    }
+  if (required && !file && mountSyscall("none", point, "none", MS.REC | MS.SLAVE) === -1) {
+    throw Error(`making ${inside} a slave mount: ${strerror(errno())}`);
   }
-  prepare({ inside: "/run", source: "tmpfs", type: "tmpfs", flags: MS.NOSUID | MS.NODEV, data: "mode=755" });
-  prepare({ inside: "/tmp", source: "tmpfs", type: "tmpfs", flags: MS.NOSUID | MS.NODEV, data: "mode=1777" });
-  // A bound file, so name resolution inside follows the host's configuration
-  // and nothing inside the root is modified.
-  if (existsSync("/etc/resolv.conf") && existsSync(`${root}/etc`)) {
-  
-    chmodSync(`/etc/resolv.conf`, 0o644);
-    
-    prepare({ inside: "/etc/resolv.conf", source: "/etc/resolv.conf", type: "none", flags: MS.BIND, file: true });
-  }
-}
+};
 
 // Mount points are recorded by their path inside the new root. Until
 // chroot(2) has happened they are reached through this prefix; afterwards
@@ -167,10 +146,52 @@ const cleanup = () => {
 
 process.on("exit", cleanup);
 
+try {
+  if (options.mount) {
+    prepare({ inside: "/proc", source: "proc", type: "proc", flags: MS.NOSUID | MS.NODEV | MS.NOEXEC });
+    prepare({ inside: "/sys", source: "sysfs", type: "sysfs", flags: MS.NOSUID | MS.NODEV | MS.NOEXEC });
+    // /dev is bound rather than mounted fresh so the devices, the pty
+    // multiplexer and anything the host added are all there. The bind is then
+    // made a slave: mounts appearing inside do not propagate back to the host,
+    // and unmounting it later does not take the host's /dev with it.
+    prepare({ inside: "/dev", source: "/dev", type: "none", flags: MS.BIND | MS.REC });
+    if (made.includes("/dev")) {
+      if (mountSyscall("none", `${root}/dev`, "none", MS.REC | MS.SLAVE) === -1) {
+        report(`making /dev a slave mount: ${strerror(errno())}`);
+      }
+      // Only needed when the host has no /dev/pts of its own to bring along.
+      if (!existsSync(`${root}/dev/pts/ptmx`)) {
+        prepare({ inside: "/dev/pts", source: "devpts", type: "devpts", flags: MS.NOSUID | MS.NOEXEC, data: "gid=5,mode=620,ptmxmode=666" });
+      }
+    }
+    prepare({ inside: "/run", source: "tmpfs", type: "tmpfs", flags: MS.NOSUID | MS.NODEV, data: "mode=755" });
+    prepare({ inside: "/tmp", source: "tmpfs", type: "tmpfs", flags: MS.NOSUID | MS.NODEV, data: "mode=1777" });
+    // A bound file, so name resolution inside follows the host's configuration
+    // and nothing inside the root is modified.
+    if (existsSync("/etc/resolv.conf") && existsSync(`${root}/etc`)) {
+
+      chmodSync(`/etc/resolv.conf`, 0o644);
+
+      prepare({ inside: "/etc/resolv.conf", source: "/etc/resolv.conf", type: "none", flags: MS.BIND, file: true });
+    }
+  }
+
+  for (const binding of bindings) {
+    prepare({ ...binding, type: "none", flags: MS.BIND | (binding.file ? 0n : MS.REC), required: true });
+  }
+} catch (error) {
+  // --keep-mounts applies to a prepared session, not a failed setup.
+  options.keep = false;
+  cleanup();
+  fail(error.message);
+}
+
+
 // ----------------------------------------------------------------- enter --
 
 if (libc.symbols.chroot(ptr(cString(root))) === -1) {
   const code = errno();
+  options.keep = false;
   cleanup();
   fail(`cannot change root directory to ${target}: ${code === Errno.EPERM ? "must be superuser" : strerror(code)}`);
 }

package/initramfs/buninu/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.4.21 - 2026-10-15
+
+- Sync jsgotty to 1.1.16: Turn on pixel report
+
+## 0.4.20 - 2026-10-13
+
+- Sync bunmsh to 0.4.0:
+  * Add a pure JavaScript awk fallback, file diff with line alignment, cmp,
+    uniq, expr, and egrep/fgrep aliases; extend sed and other utility builtins
+    for configure scripts and compiler builds.
+  * Improve compound commands, here-documents, parameter expansion, function
+    and loop control, descriptor redirection, and pipeline/subshell state
+    transfer for Autoconf and GCC bootstrap workloads.
+  * In `set -o posix` mode, use plain ls output and pass only exported variables
+    and command-prefix assignments to external programs. Default mode retains
+    ls icons and its existing environment behavior.
+  * Preserve the existing background-process behavior and stable
+    `Bun.sha.procs` indices. POSIX and awk compatibility remain partial; see
+    the bundled bunmsh PORTING.md for limitations.
+- Sync jsgotty to 1.1.15: forward Kitty graphics to the terminal in `--client`
+  mode and avoid applying the corresponding cursor movement twice.
+
 ## 0.4.19 - 2026-10-12
 
 - Sync bunmsh to 0.3.11: more POSIX syntax

package/initramfs/buninu/apps/jsgotty/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "jsgotty",
-  "version": "1.1.15",
+  "version": "1.1.16",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "jsgotty",
-      "version": "1.1.15",
+      "version": "1.1.16",
       "dependencies": {
         "node-addon-api": "^7.1.1",
         "ws": "^8.18.3"

package/initramfs/buninu/apps/jsgotty/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jsgotty",
-  "version": "1.1.15",
+  "version": "1.1.16",
   "description": "Share your terminal as a web application: A JavaScript rewrite of GoTTY",
   "license": "MIT",
   "bin": {

package/initramfs/buninu/apps/jsgotty/static/js/gotty.js

@@ -12530,6 +12530,7 @@
 	              (this.fontSizeOverride = fontSizeValue),
 	              (this.term = new r.Terminal({
 	                allowProposedApi: !0,
+	                windowOptions: { getWinSizePixels: true, getCellSizePixels: true },
 	                customGlyphs: !0,
 	                rescaleOverlappingGlyphs: !0,
 	                fontFamily:

package/initramfs/buninu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "buninu",
-  "version": "0.4.19",
+  "version": "0.4.21",
   "description": "Buninu is a portable, self-bootstrapping Unix-like userspace built on Bun that runs across operating systems",
   "type": "module",
   "main": "./bin/init.js",

package/initramfs/lib/bunterm/geometry.js

@@ -0,0 +1,15 @@
+// Report the content area in the same pixel units as SGR 1016, not fb margins.
+export function attachGeometry({ term, renderer, reply }) {
+  term.options.windowOptions = { ...term.options.windowOptions, getWinSizePixels: true, getCellSizePixels: true };
+  return term.parser.registerCsiHandler({ final: 't' }, params => {
+    if (params[0] === 14 && params[1] !== 2) {
+      reply(`\x1b[4;${Math.round(term.rows * renderer.cellHeight)};${Math.round(term.cols * renderer.cellWidth)}t`);
+      return true;
+    }
+    if (params[0] === 16) {
+      reply(`\x1b[6;${Math.round(renderer.cellHeight)};${Math.round(renderer.cellWidth)}t`);
+      return true;
+    }
+    return false;
+  });
+}

package/initramfs/lib/bunterm/pointer-report.js

@@ -0,0 +1,10 @@
+// Supply both coordinate systems: xterm selects cells (1006) or pixels (1016).
+// Pixels are relative to the terminal content, excluding framebuffer margins.
+export function terminalMouseEvent(report, renderer, button, action) {
+  const x = Math.floor(report.x - renderer.offsetX);
+  const y = Math.floor(report.y - renderer.offsetY);
+  return {
+    col: Math.floor(x / renderer.cellWidth), row: Math.floor(y / renderer.cellHeight),
+    x, y, button, action, ctrl: false, alt: false, shift: false,
+  };
+}

package/initramfs/lib/bunterm/terminal.js

@@ -21,6 +21,8 @@ import { Renderer, defaultTheme } from "./renderer.js";
 import { ImageStore } from "./images.js";
 import { openKeyboard, translateKeys } from "./input.js";
 import { claimVirtualConsole } from "./vt.js";
+import { attachGeometry } from "./geometry.js";
+import { terminalMouseEvent } from "./pointer-report.js";
 import { attachClipboard } from "./clipboard.js";
 
 const require = createRequire(import.meta.url);
@@ -160,6 +162,7 @@ export const createSession = ({
   });
   backend.onData(pump);
   term.onData((data) => backend.write(Buffer.from(data, "utf8")));
+  attachGeometry({ term, renderer, reply: text => backend.write(Buffer.from(text, "utf8")) });
   // OSC 52 copy and paste go straight to xclip; replies return to the program.
   // Without it (--no-clipboard) xterm.js ignores OSC 52 and nothing reaches xclip.
   if (clipboard) attachClipboard({ term, reply: (text) => backend.write(Buffer.from(text, "utf8")), onError });
@@ -181,7 +184,7 @@ export const createSession = ({
   // Turns a pointer report from mouse.js into the mouse sequences the
   // program asked for. xterm.js's CoreMouseService owns the protocol: it
   // knows which events the program enabled (DECSET 1000/1002/1003), encodes
-  // them (SGR 1006 or the default form) and sends them through onData, so
+  // them (SGR 1006, pixel 1016, or the default form) and sends them through onData, so
   // nothing here builds an escape sequence. Reports arrive only while a
   // pointer is open, and this is the only place the terminal sees one.
   const CoreMouseButton = { LEFT: 0, MIDDLE: 1, RIGHT: 2, NONE: 3, WHEEL: 4 };
@@ -223,11 +226,9 @@ export const createSession = ({
       if (report.wheel) wheelScroll(report.wheel);
       return;
     }
-    const column = Math.floor((report.x - renderer.offsetX) / renderer.cellWidth);
-    const row = Math.floor((report.y - renderer.offsetY) / renderer.cellHeight);
     const send = (button, action) => {
       try {
-        service.triggerMouseEvent({ col: column, row, button, action, ctrl: false, alt: false, shift: false });
+        service.triggerMouseEvent(terminalMouseEvent(report, renderer, button, action));
       } catch (error) {
         onError(error);
       }