v2.1.0

A build/packaging health release: the v2.0.0 filtered-egress test suite now
runs cleanly on non-FHS systems (NixOS builders) without weakening any
sandbox assertion. No behavior changes for end users.

Fixed

• Nix checkPhase no longer fails on the filtered-egress tests. curl
  is declared in nativeCheckInputs (test-only, not in the runtime closure)
  and in the dev shell. The tests now follow the existing
  tests/sandbox_escape.rs prerequisite pattern: they skip cleanly when the
  host lacks curl, and the lockdown test skips when bash/curl are
  absent from lockdown's fixed FHS PATH — which is the case on NixOS,
  where lockdown's --clearenv + fixed PATH + empty-tmpfs /run means
  the guest cannot see the Nix store. Skipping leaves the isolation
  boundary exactly as designed; the alternative (inheriting host PATH or
  bind-mounting the host profile) would have weakened lockdown itself.
  Thanks @wtf9880 for the initial report and @pqitr for the complete fix
  (#133, #134).

Checksums (SHA256)

3bca37c5570a4f43fdff29e67db718caff069e454650525271a1e6e81e44b1a4  ai-jail-linux-x86_64.tar.gz
c079c54abd48ce09426393c17a3d6ca8dc9d9c61176af8285dc44cf5fffd2ee1  ai-jail-macos-aarch64.tar.gz

Install

brew tap akitaonrails/tap && brew install ai-jail
yay -S ai-jail-bin
cargo install --locked ai-jail