[chandarith-chea]

This bumps the version to 0.6.8 on the same 21 lines in 15 files as #63. It also pins Dockiva Engine to 08c7901 (from b8bb543).

What changes for users

Containers in the app (#65):

• The Containers list follows Dockiva Engine's own events, so containers started outside the app, such as CI runner containers, show up and update live.
• A + beside the Containers title opens a New container sheet. It sets the image, name, ports, environment and command, and has templates for PostgreSQL, Redis, MySQL, MongoDB, Nginx and Node.js.
• Rows show an icon and colour for well-known images.

Dockiva Engine (Tomnerb/dockiva-engine#7, #13 to #28):

• Case-sensitive container files (build(deps-dev): bump typescript from 5.9.3 to 7.0.2 in /frontend #7, build(deps): bump github.com/wailsapp/wails/v3 from 3.0.0-beta.19 to 3.0.0-beta.25 #14, build(deps): bump @wailsio/runtime from 3.0.0-beta.19 to 3.0.0-beta.28 in /frontend #16). Packages whose file names differ only by case now unpack, such as linux-libc-dev's xt_CONNMARK.h and xt_connmark.h. The first start after the update moves each engine home into a case-sensitive store, a sparse bundle the engine attaches. The store detaches when the engine stops.
• Go image builds work (build(deps): bump github.com/containerd/containerd/v2 from 2.3.4 to 2.4.1 #18 to Bind mounts and volumes for the VM-free engine #28):
  • RUN steps have no memory limit, as in Docker, unless docker build -m sets one. Before, the 2 GiB default got go build killed.
  • Alpine's apk package scripts run again: exec of an open file (fexecve, /dev/fd/N) works.
  • go build links again. Shared file mappings are written back and released when their process exits, and the Go linker can map a large module's archives.
  • linux/amd64 Go builds and runs under FEX:
    • Go's asynchronous preemption is off for x86 programs (GODEBUG=asyncpreemptoff=1).
    • x86 programs get FEX's vDSO.
    • The top 64 KiB of the address space count as mapped.
    • Read-only shared file mappings leave 256 segments free.
    • Freed reservation pages are write-protected again.
  • The hypervisor maps committed memory on first use. MES-Core's amd64 image build went from 721 s to 454 s.
• docker rm -f and docker stop of a running --rm container no longer answer 500 (build(deps-dev): bump vite from 7.3.6 to 8.3.4 in /frontend #13).
• sudo works after apt in the same container (build(deps): bump github.com/containerd/containerd/v2 from 2.3.4 to 2.4.0 #17).
• The engine's binaries target macOS 14, Dockiva's minimum (build(deps): bump vue from 3.5.42 to 3.5.43 in /frontend #15).

Not in this release: running the amd64 Go toolchain under FEX can still hit a FEX bug (vfork pipe) and an unexplained fault. Use a native --platform=$BUILDPLATFORM builder stage when an amd64 Go build fails.

Checks

• This branch changes only the version lines and DOCKIVA_ENGINE_REF. 08c7901 is on engine main, and v0.6.7's pin b8bb543 is an ancestor of it.
• App: go test ./... and swift test --package-path macos pass. The macOS app builds (arm64, --external-only, ad-hoc signed).
• Engine 08c7901. Its tree is identical to the combined tree of build(deps): bump github.com/containerd/containerd/v2 from 2.3.4 to 2.4.1 #18 to Bind mounts and volumes for the VM-free engine #28 tested before merging:
  • verify_fork_sockets.py: 95 of 95 at --cpus 1 and --cpus 4.
  • go -C dockivad test -race: ok.
  • CI (corpus) passed on every PR.
• Engine 08c7901's bundle, built with bundle_dockiva_engine.py for this release: verify_dockivad.py passes 31 of 31. The first run timed out at the script's 10-second startup wait, on the first launch of the freshly built binaries; the rerun passed.
• release.yml is unchanged since v0.6.7. Its runner labels are ubuntu-24.04, ubuntu-24.04-arm, macos-26 and windows-2025.

Not checked

• The update path that moves a home into the case-sensitive store, on a real install with containers. It was tested in engine build(deps-dev): bump typescript from 5.9.3 to 7.0.2 in /frontend #7 and build(deps): bump github.com/wailsapp/wails/v3 from 3.0.0-beta.19 to 3.0.0-beta.25 #14.
• The app with a native-engine build (--guest-assets) on this branch. The release workflow builds that.

After merge: tag main v0.6.8.