Every automated entry now installs to completion, on legacy BIOS (SeaBIOS) and UEFI (OVMF) alike — each install runs to a rebooted system off its own disk that accepts a root SSH login with the menu-typed password, with hostname, static IP and os-release asserted.
Installs
- Answer files corrected across every family. Credential handling and disk scope both had defects that let an install finish and still leave the box unreachable. Accounts are now created locked and get their real password from the kernel command line; a missing
fluxpass=leaves them locked rather than falling back to anything. - openSUSE Leap 15.6 sets its password in stage 1, not after the reboot.
- Target disk is no longer guessed — and a failed kernel image is freed instead of being left to strand the fetch.
- Unreachable-gateway regression fixed, along with a gate that reported a pass when it had broken.
Surviving upstream moves
- Two fallback hosts for the d-i entries, not one: a country mirror, then the archive host, so a deleted Debian suite still installs.
- An upstream watchdog probes every URL the menu actually fetches — the list is generated from the menu itself, never hand-copied — and opens a bump PR when Ubuntu supersedes a pinned point release, without ever downgrading a pin.
Build
- TLS is validated locally at build time, and the build now fails instead of shipping a broken ISO.
- The binary bakes in a set of public root CAs, so the HTTPS fetches iPXE does make validate with no
ca.ipxe.orground-trip. - The boot-time version manifest is gone.
Menu
- Ubuntu 25.10 dropped — an interim release with no LTS future; the four remaining subiquity entries cover the family. 23 OS entries.
Verify the download:
sha256 c50ddce42e32128365003249e1670cc04bc3eec003cd4aeed1fd6fc1be461854
USB sticks need a hybrid MBR — xxd -s 510 -l 2 FluxBilling-OS-Installer_v1.1.iso must read 55aa. Virtual media (the intended path) is unaffected.