Issues

• List and manage running VMs (shuru ps, shuru stop)

  enhancement
  xbow-engineering/shuru#13 · Filter by author anth1y opened on Oct 28, 2026

• Linux x86_64 host support

  enhancement
  xbow-engineering/shuru#12 · Filter by author anth1y opened on Oct 28, 2026

• Harden the host-side VMM for CLI runs: reuse the shuru-node jail on Linux, sandbox the process on macOS

  enhancement
  xbow-engineering/shuru#11 · Filter by author anth1y opened on Oct 28, 2026

• VM memory snapshot and restore for warm starts

  enhancement
  xbow-engineering/shuru#10 · Filter by author anth1y opened on Oct 28, 2026

• DNS: wildcard allowlist entries permit subdomain exfiltration and non-A record types are forwarded unfiltered

  enhancement
  xbow-engineering/shuru#9 · Filter by author anth1y opened on Oct 28, 2026

• Blocked egress is only logged at debug level; add an egress audit log

  enhancement
  xbow-engineering/shuru#8 · Filter by author anth1y opened on Oct 28, 2026

• Rebase proxy-protocol-checks on upstream v0.11.0 now that #3 is merged

  enhancement
  xbow-engineering/shuru#7 · Filter by author anth1y opened on Oct 28, 2026

• install.sh and the OS image download do not verify checksums

  bug
  xbow-engineering/shuru#6 · Filter by author anth1y opened on Oct 28, 2026

• --allow-net without --allow-host silently means "allow every host"

  bug
  xbow-engineering/shuru#5 · Filter by author anth1y opened on Oct 28, 2026

• Proxy enforces the host allowlist only on port 443 (SNI); HTTP Host and other protocols bypass it

  bug
  xbow-engineering/shuru#4 · Filter by author anth1y opened on Oct 28, 2026