# encapsule releases

## 0.5 (2026-08-15)
- `commit`: add `--name` to set the encapsule image name
- `commit`: replaces `refresh` with simpler logic
- `create`,`run`: now always act on a container image
- bind-mount `/etc/localtime`
- check first if runuser and sudo are in the container image
- use image passwd user with the same UID as the host (e.g. support ubuntu)
- container `$HOME` follows the image passwd home when it is a real directory; `--home` mounts there
- simplify setup script: no longer installs sudo and util-linux
- now also setup home if no runuser
- `--no-sudo` no longer attempts to remove sudo
- add `--user` option to override the container user
- `run --debug` now also outputs podman command like `--dryrun`
- dryrun/debug colors podman flag names in cyan (honors `NO_COLOR`)
- `backup` now excludes local git ignored files
- add hspec tests (`cabal test`; needs podman and local images)
- add tasty-bench suite (`cabal bench`; needs podman and a local image)

## 0.4.1 (2026-08-07)
- require volume host paths to exist
- drop `-P` for `--path` and add `-H` for `--home`
- copy `/etc/skel` into home if `~/.bashrc` is missing (`--no-skel` to skip)
- config.toml: add dbus, dconf, machine-id capabilities
- support mount options for `--home` and `--project` (like `:O` for overlay)
- only auto SELinux `:z` for user-owned paths and not overlay `:O`
- create `--project`/`--volume` mount points in --home for $HOME targets
- add `backup` command to tarball a directory (prompts if >100MB)
- `run`,`create`: `--backup-home` / `--backup-project` to tarball those dirs
- `refresh`: always update image (drop freshness checks and `--force`)
- sanitize `.` to `-` in container hostname

## 0.4 (2026-08-04)
- convert to using subcommands
- `list`: separate images and containers and include image tags
- introduce `create` to make a permanent container
- add `enter` command (formerly --join)
- `run`: automate unique container name (drop --unique)
- new `refresh` command to update an existing encapsule toolbox image if container has layered changes
- correct some container name sanitizations
- check that the host project dir actually exists
- improve HOME handling and mount project to its own path for clarity
- also default workdir to home for image
- add `--pull` for `run` and `create` to pull a newer image
- Allow mounting $HOME (without SELinux :z relabeling)

## 0.3 (2026-07-20)
- project renamed from constrained-toolbox
- rename `--persistent` to `--keep`
- add `--list` command to show encapsule containers and images
- add `--no-sudo` to remove sudo from the container
- check toolbox container exists before buildah commit
- support running container images directly (name:tag)
- add `--name` option
- add `--debug` flag for verbose startup output
- use `--name ^...` to reference a full container name explicitly
- export TERM and COLORTERM
- `--delete` and commit image now respect --dryrun
- use shell-monad for installSetup Script
- installScript now respects `--no-sudo` and outputs "installing"
- use xdg-basedir for config file
- error for `--project`/`--home` on HOME
- `--project` now names the container after the project directory too,
  so different projects can run concurrently in separate containers
- add `--podman-opt` to pass options directly to podman

## 0.2.1 (2026-07-17)
- add --delete container command
- handle missing container gracefully in --stop and --remove
- default to ephemeral containers again, use --persistent to keep

## 0.2 (2026-07-16)
- add `--home` option to mount a directory as a writable home
- name the container and exec into it if already running
- add `--unique` option to run a separate container instance
- make home directory writable and workdir by default
- change `--delete` to `--delete-image` standalone command
- add `--ephemeral`, restart stopped containers
- error for unused options when joining running container
- add --stop command

## 0.1 (2026-07-03)
- initial release with `--delete` and `--project` options
- defaults to :z shared bind mounts
- `--caps` to list user's defined capabilities
- wayland: fix socket handling in SELinux labeling
- add `security_opts` capability field
- support PATH[:opts] shorthand for same host/container mount path
  (makes config incompatible with toolbox-constrained)
- add `--no-network` option to disable network access
- exit cleanly on shell error instead of throwing an exception