CopperBSD 0.1.18

CopperBSD 0.1.18 live/installer image, based on FreeBSD 15.1 (amd64).

Download

CopperBSD-0.1.18-amd64.iso.zip (1.4 GB). The ISO itself is 4.7 GB, over GitHub's 2 GB limit per file, so it is zipped. Unzip it, then write CopperBSD-15.1-amd64.iso to a USB stick.

Checksum of the ISO inside the zip (SHA-256):

c2324ca904a904c05a8c4dd7eb353290e4e9f027ea50f926ad7f6cb42a878447

Already running CopperBSD? The dashboard's Update button brings an installed system to 0.1.18; no reinstall needed.

Tested before release

• CI built this ISO from the v0.1.18 tag, validated it, and boot-tested it: the graphical installer starts.
• The installer, live image and desktops are unchanged since 0.1.11, which was installed start to finish. That full install was not repeated.
• The changes below were run for real on a FreeBSD 15.1 VM:
  • the nightly media checks, run under cron conditions;
  • adding new English-only patterns to existing formats, and recreating a deleted format;
  • a fake torrent containing setup.exe, caught and removed;
  • the hourly quick routine.
• Nothing was tested on physical hardware.

Fixed

• Nightly English-only and English-dub checks run again. The nightly routine runs as root and was reading root's empty copy of the dashboard's API keys. So since 0.1.12 both steps were silently skipped every night. It now reads the desktop user's keys.
• New English-only patterns reach existing installs. Before, only a newly created "Foreign Language Markers" format got them. Missing patterns are now added, and patterns you added yourself are kept.

New

• Fake-release purge. Torrents whose files include an executable (.exe, .scr, .msi, ...) are removed and blocklisted, and Sonarr/Radarr search again. Runs nightly and hourly. These fakes turn up before a film's digital release, with names like a real WEB-DL.
• Paired cam tags such as IT.EN or AR.EN count as foreign under the English-only rule.
• IMAX upgrades. A few owned movies a night are searched for an IMAX release. This only applies to Radarr profiles set up to upgrade to IMAX; a stock install has none, so it does nothing there.

CopperBSD 0.1.17

CopperBSD 0.1.17 live/installer image, based on FreeBSD 15.1 (amd64).

Download

CopperBSD-0.1.17-amd64.iso.zip (1.4 GB). The ISO itself is 4.7 GB, over GitHub's 2 GB limit per file, so it is zipped. Unzip it, then write CopperBSD-15.1-amd64.iso to a USB stick.

Checksum of the ISO inside the zip (SHA-256):

65a87968b9fd88977c03faed2e507828f94873a6729663c29766b8d63a1e9efb

Already running CopperBSD? The dashboard's Update button brings an installed system to 0.1.17; no reinstall needed.

Tested before release

• CI built this ISO from the v0.1.17 tag, validated it, and boot-tested it: the graphical installer starts.
• The installer, live image and desktops are unchanged since 0.1.11, which was installed start to finish. That full install was not repeated.
• The media-server and dashboard changes below were run for real on a FreeBSD 15.1 VM:
  • the self-heal script, including the English-dub fallback;
  • a rebuild of the dashboard app;
  • AI "off" stopping a running pane;
  • the acceptance checks: all 10 jails up, terminal dock, and no internet for the VPN-routed apps until a WireGuard config is added.
• Nothing was tested on physical hardware.

New

• English-only audio. Releases with any non-English audio track are rejected, and the rule is re-applied nightly if it drifts.
• English-dub fallback. A foreign-original film or series that can't be found in English after 6 hours gets a dual-audio (English dub) release instead.
• qBittorrent peer check. If qBittorrent has no peers after a VPN change, its listen port is rebound.
• Nightly intrusion and malware check on the dashboard.
• Reboot after kernel updates. When the nightly routine has installed a new FreeBSD kernel, it reboots a minute later to load it.

Fixed

• AI "off" really stops the AI. The dock's off button used to leave the agent running in the background. It now ends the pane's session.
• qBittorrent 403 mid-run. The nightly self-heal logs in again and retries instead of failing "can't list torrents".
• Sonarr timeouts. The English-dub fallback no longer times out on a busy Sonarr.

CopperBSD 0.1.11

CopperBSD 0.1.11 live/installer image, based on FreeBSD 15.1 (amd64).

Download

CopperBSD-0.1.11-amd64.iso.zip (1.4 GB). The ISO itself is 4.7 GB, over GitHub's 2 GB limit per file, so it is zipped. Unzip it, then write CopperBSD-15.1-amd64.iso to a USB stick.

Checksum of the ISO inside the zip (SHA-256):

27351ad01bb3db851ad1c802b5c5d9616ba5b6ed3430c9fae121239a5605f72e

0.1.10 and earlier stopped at a text login instead of the installer. Use this one.

Tested before release

This exact ISO was booted in QEMU/KVM (UEFI, NVMe) and installed from start to finish with the graphical installer. First boot then ran, and the desktop was logged into from the login screen:

• KDE Plasma, GNOME and XFCE work; the dashboard opens on its own (0 failed, 0 warnings, all 10 jails up).
• Niri ran without a GPU (nested, software rendering), with the QuickShell bar and the dashboard.
• MangoWC installs, but could not be run without a real GPU.
• "All of the above" was not run.
• Nothing was tested on physical hardware.

Fixed

• Boots into the installer again. The live scripts had lost their executable bit. Every ISO is now boot-tested in CI.
• Cursor visible straight away, in the installer and on the login screen.
• Reaches the installer sooner: no login: flash, only the needed GPU driver is loaded, DHCP runs in the background, and there is no 30 s default-route wait.
• Keyboard layout: the installer's test box types in the chosen layout, and the layout now reaches the login screen and every desktop (uk → gb).
• Installer pages: rows line up, the Summary shows the desktop, step 2 is "Time zone", and the finish page names the chosen desktop.
• Login screen on UEFI PCs without a KMS GPU (scfb, 1080p), with GPU detection that looks at display devices only.
• GNOME: first boot no longer uninstalls its packages, procfs is mounted, and "GNOME on Xorg" is preselected.
• Niri / MangoWC: they used to install nothing (bad package names); now the QuickShell bar starts, the cursor theme is set, MangoWC gets its config, they're offered only when chosen, and they need an AMD/Intel GPU, which the installer now says.
• Dashboard opens on every desktop, not only KDE.
• ntpd no longer quits at boot when the clock is far out.
• NVMe SMART: no more false nightly "failed".
• First-boot log is root-only (it holds the qBittorrent password).

CopperBSD 0.1.10

CopperBSD 0.1.10 live/installer image, based on FreeBSD 15.1 (amd64).

Download

CopperBSD-0.1.10-amd64.iso.zip (1.4 GB). The ISO itself is 4.7 GB, which is over GitHub's 2 GB limit per file, so it is zipped. Unzip it first, then write CopperBSD-15.1-amd64.iso to a USB stick.

Checksum of the ISO inside the zip (SHA-256):

9b01dc94a74c5ea4aa8eca98b44954c5033038ed9ac4ad139e271e544c2ac055

New since 0.1.8

• Terminal dock in the dashboard. A terminal beside the panels with a pane picker: Shell, Processes, Jail stats, System log, Disk usage, the daily routine's log, and Claude Code once it is installed. There is an Ask box, and off / ¼ / ½ / ¾ / full widths (Ctrl+` steps through them). An agent pane keeps running when the dock is closed.
• Copy and paste in the dock. Dragging over text copies it to the desktop clipboard; right-click or middle-click pastes the clipboard in.
• Nightly security & firewall check, shown on the dashboard:
  • every run: pf firewall on (switched back on if it was off), no VPN leak from the download jail (stopped if it leaks), secret files such as the WireGuard key readable only by their owner;
  • nightly: what the internet can actually reach, probed from outside through the VPN and compared with what was there before, and sshd not open to the internet with password logins;
  • after the updates: pkg audit for known-vulnerable packages on the host and in every jail, upgrading them when a fixed version is out, and a warning when installed security patches need a reboot.

What has been tested

In a FreeBSD 15.1 VM with the full media stack, real pf and a real WireGuard tunnel:

• Fixes: pf switched off and a key file opened up were both fixed.
• Leaks: a deliberately created VPN leak was caught and the download jail stopped. A VPN exiting on the same connection gave a warning only.
• Audit and probe: the vulnerability audit ran against FreeBSD's real database, and the exposure probe found the right ports.
• Installer: a full CopperBSD re-apply installed the new parts.
• Dock: built against QtWebEngine and used on a virtual display.

The ISO was built and validated by GitHub's build, its checksum checked, and its contents confirmed to be 0.1.10.

What has not been tested

• This ISO has not been booted, and the graphical installer writing to a disk has not been run. Try it on a spare machine or a VM first.
• The dashboard on a physical screen, real temperature sensors, a commercial VPN provider, Nextcloud and public access.
• The full nightly routine end to end with the new check (each part was run on its own).