fix: gate AppleVzHypervisor import behind cfg(target_os) for Linux build

boot.rs imported AppleVzHypervisor unconditionally. Now uses cfg gates
to dispatch to KvmHypervisor on Linux.

Author: ebursztein

CHANGELOG.md

@@ -9,11 +9,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Improved
 - **Boot timing display** -- formatted table with right-aligned columns and proportional bar chart instead of flat log lines.
+- **capsem-bench refactored to package** -- split 897-line single file into `capsem_bench/` Python package with per-category modules (disk, rootfs, startup, http_bench, throughput, snapshot). Shell wrapper at `capsem-bench` preserves the same CLI interface.
 - **capsem-bench JSON output** -- saved to `/tmp/capsem-benchmark.json` inside the VM instead of dumped to stdout.
 
 ### Docs
 - **Site restructuring** -- moved capsem-doctor to new top-level Debugging section (with troubleshooting guide), moved benchmarking methodology to Development, added top-level Benchmarks section with current performance results (boot time, disk I/O, CLI startup, HTTP, throughput, snapshots).
 
+## [0.14.8] - 2026-03-29
+
+### Fixed
+- **Linux build: gate all macOS-only APIs** -- `ApfsSnapshot` (`libc::clonefile`) and `AppleVzHypervisor` import in boot.rs were not `cfg`-gated, causing compile failures on Linux app builds. Boot now dispatches to `KvmHypervisor` on Linux.
+
 ## [0.14.7] - 2026-03-29
 
 ### Fixed

Cargo.toml

@@ -3,7 +3,7 @@ resolver = "2"
 members = ["crates/capsem-proto", "crates/capsem-core", "crates/capsem-app", "crates/capsem-agent", "crates/capsem-logger"]
 
 [workspace.package]
-version = "0.14.7"
+version = "0.14.8"
 
 # Always optimize blake3 -- its SIMD assembly is 100x faster than
 # unoptimized Rust. Without this, debug-build hashing takes 24s for 2GB.

crates/capsem-app/src/boot.rs

@@ -6,11 +6,15 @@ use std::sync::Arc;
 
 use anyhow::{Context, Result};
 use capsem_core::{
-    AppleVzHypervisor, GuestToHost, Hypervisor, HostState, HostStateMachine, HostToGuest,
+    GuestToHost, Hypervisor, HostState, HostStateMachine, HostToGuest,
     VirtioFsShare, VmConfig, VmHandle, VsockConnection, decode_guest_msg, encode_host_msg,
     MAX_FRAME_SIZE, VSOCK_PORT_CONTROL, VSOCK_PORT_MCP_GATEWAY, VSOCK_PORT_SNI_PROXY,
     VSOCK_PORT_TERMINAL,
 };
+#[cfg(target_os = "macos")]
+use capsem_core::AppleVzHypervisor;
+#[cfg(target_os = "linux")]
+use capsem_core::KvmHypervisor;
 use capsem_core::net::cert_authority::CertAuthority;
 use capsem_core::net::mitm_proxy;
 use capsem_core::net::policy_config;
@@ -137,7 +141,11 @@ pub(crate) fn boot_vm(
 
     let (vm, vsock_rx) = {
         let _span = debug_span!("hypervisor_boot").entered();
-        AppleVzHypervisor.boot(&config, &vsock_ports)
+        #[cfg(target_os = "macos")]
+        let result = AppleVzHypervisor.boot(&config, &vsock_ports);
+        #[cfg(target_os = "linux")]
+        let result = KvmHypervisor.boot(&config, &vsock_ports);
+        result
             .context("failed to boot VM")?
     };
 

crates/capsem-app/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/tauri-apps/tauri/dev/crates/tauri-utils/schema.json",
   "productName": "Capsem",
-  "version": "0.14.7",
+  "version": "0.14.8",
   "identifier": "com.capsem.capsem",
   "build": {
     "beforeDevCommand": "pnpm dev",

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "capsem"
-version = "0.14.7"
+version = "0.14.8"
 requires-python = ">=3.11"
 dependencies = [
     "pydantic>=2.0",

site/src/content/docs/releases/0-14.md

@@ -59,6 +59,10 @@ The settings system is now fully config-driven with Pydantic as the canonical sc
 
 ## Patch Releases
 
+### 0.14.8
+
+- **Linux build fix** -- gated all macOS-only APIs (`ApfsSnapshot`, `AppleVzHypervisor`) behind `cfg(target_os)`. Boot dispatches to `KvmHypervisor` on Linux.
+
 ### 0.14.7
 
 - **Linux build fix** -- `ApfsSnapshot` used `libc::clonefile` (macOS-only) without a `cfg` gate, breaking Linux app compilation.