Keel Core 19.0-10, testing build 2026-10-12 step 12 (not signed, ISO missing)

Step 12 build of 2026-10-12, Core 19.0-10 on Core 19.0-10.

Debian trixie and archive.keellinux.org trixie-testing only; keel 0.23.13, keel-core 0.1.3, keel-overlay-vip 0.2.0 (installed, every unit off), inithooks 2.3.6+keel23, confconsole 2.2.3+keel15. No private key, certificate or machine-id in the image; root locked.

Lean core per decision 0052 (one image per application): the boot set (kernel, initrd tools, firmware, bootloaders, installer) is not in the container template; it moves to the per-appliance boot layer the ISO is made from.

NOT SIGNED, NOT FOR PRODUCTION: no archive key signature; the build keyring has no secret signing subkey.

ISO IS MISSING: this pre-release ships the container template (tar.zst) alone, per decision 0052 section 8. Not on the mirror. Testing channel.

Keel Core 19.0-9, testing build 2026-10-08 step 11 (signed)

Step 11 build of 2026-10-08 on Core 19.0-9: Debian trixie and archive.keellinux.org trixie-testing only; keel 0.20.0, keel-core 0.1.3, keel-overlay-vip 0.1.1 (installed, every unit off), inithooks 2.3.6+keel23, confconsole 2.2.3+keel15. No private key, certificate or machine-id in the image or its layer tarballs; root locked; signed by the Keel archive key.

Mirror: https://mirror.keellinux.org/images/debian-13-keel-core_19.0-9_amd64.tar.zst (same bytes). Release 2026-10-08 revision 3.

Testing channel. Not for production.

Keel Core 19.0-8, testing build 2026-10-03 step 10 (signed)

Final build of 2026-10-03 (step 10): Debian trixie and archive.keellinux.org trixie-testing only; keel-core 0.1.2, keel-web 0.2.0 (Keel default site), inithooks 2.3.6+keel21, confconsole 2.2.3+keel14, common with /etc/keel_version and no stale 127.0.1.1. No private key, certificate or machine-id in the image; root locked; signed by the Keel archive key.

Mirror: https://mirror.keellinux.org/images/debian-13-keel-core_19.0-8_amd64.tar.zst (same bytes). Release 2026-10-03 revision 3.

Testing channel. Not for production.

Keel Core 19.0-7, testing build 2026-10-03 (signed)

Core 19.0-6 plus three fixed packages: inithooks 2.3.6+keel21, confconsole 2.2.3+keel14, turnkey-sysinfo 1.1.0+keel2. Built from Debian trixie and archive.keellinux.org trixie-testing only; no private key, certificate or machine-id in the image; root locked; signed by the Keel archive key.

Mirror: https://mirror.keellinux.org/images/debian-13-keel-core_19.0-7_amd64.tar.zst (same bytes as this asset). Layer core sha256 319cf56bf7c3a70abd9f91d6f7979a576543e417a7657d62f32c9898433a17ee, release 2026-10-03.

Testing channel. Not for production.

Keel Core 19.0-6, testing build 2026-10-02 (signed)

Core image of the attended release of 2026-10-02 (step 9): built from Debian trixie and archive.keellinux.org trixie-testing only, no TurnKey source; no private key, certificate or machine-id in the image (keel-core#8); signed by the Keel archive key.

Mirror: https://mirror.keellinux.org/images/debian-13-keel-core_19.0-6_amd64.tar.zst (same bytes; .sha512 and .sha512.asc beside it). Layer core sha256 ee0f7aa7cb52a672758173e00aac16bd9d49ed7eb05bded622bcf9151cbb2ff5, release 2026-10-02 revision 2.

Testing channel: the image follows trixie-testing. Not for production.

Keel Core 19.0-3, testing build 2026-10-02 (unsigned)

Test image of Keel Core, Phase 1 of the roadmap (Keel-Linux/tracker#46), rebuilt in isolation from this commit (keel-core master, 1902ac8) with every package built from its merged head: keel 0.15.1, inithooks 2.3.6+keel16, confconsole 2.2.3+keel11, keel-core 0.1.1 and common 19.x (686ff5c). Testing only: not for production and not signed. Verify with the .sha512 file. Supersedes testing-19.0-3-step7-20261001.

The file name keeps the 19.0-3 testing series; the recipe inside the image now says 19.0-4 (keel-core#19).

Proxmox: copy to /var/lib/vz/template/cache and create a container from it. Plain LXC: extract into the rootfs.

Fixed since step7b (2026-10-01)

• Branding: the first boot screens, confconsole, Webmin (logo, opens on the dashboard instead of the TKLBAM page) and the login message say Keel Linux; no TurnKey newsletter, Hub or turnkeylinux.org links (inithooks#32, confconsole#17, common#26).
• The maintainer's console art at login and on the usage screen, in tiers by terminal size and locale (keel-core#19, #20, confconsole#16).
• A login gets LANG=C.UTF-8, so confconsole on the LXC console draws real lines instead of lqqqk (common#28).
• A generated root password is shown once; the confirmation no longer repeats it, and the security updates answer is recorded (inithooks#33).
• keel inspect on a Core: the appliance is recognised, no exit 13 for instance.fqdn, the Keel Cloud key is referenced, no phantom eth1, updates_at_first_boot as chosen (keel#64).
• Overlay confirm says "already confirmed ... it stays" instead of "reverted" (keel#64, confconsole#18).
• Database mode > Primary on a node with no database shows only its own text (confconsole#18).
• monit summary works: a root-only socket, no TCP listener (keel#64); monit starts after Core's units (keel-core#21).

Tested

First boot (generated password, fake Keel Cloud key, Skip, Skip); confconsole screens; keel inspect/diff (exit 0); simple → cloud_simple → simple through keel spec apply --system (0 failed); Monit, CrowdSec ban into nftables, WireGuard overlay with confirm. No SSH host keys, CrowdSec identity or secrets in the image, and the machine-id is empty.

Still open

• overlays.wireguard is reported "not inferred" by keel inspect with wg0 up and wg-quick@wg0 enabled.
• The login message lists "Web: https://..." lines on Core, which has no web server.
• On 80x24 and 100x30 terminals the art scrolls off the top of the login message: the tier is chosen by the art's height alone.

Keel Core 19.0-3, testing build 2026-10-01 (unsigned)

Superseded by testing-19.0-3-step8-20261002. Use that build instead.

Test image of Keel Core, Phase 1 of the roadmap (Keel-Linux/tracker#46), rebuilt in isolation from this commit (keel-core master) for step 7 of handbook decision 0041, with keel 0.15.0 (Keel-Linux/keel#63: the overlays' state hooks) and common 19.x. Not for production and not signed. Verify with the .sha512 file. Supersedes testing-19.0-3-step4-20260930.

Proxmox: copy to /var/lib/vz/template/cache and create a container from it. Plain LXC: extract into the rootfs.

What it was tested for: first boot in a simple installation; keel manifest validate passes and show core --resolved prints the Core table; etcd and CrowdSec inactive; Monit watches sshd, Webmin and postfix; a re-apply changes nothing; no SSH host keys, CrowdSec identity or machine-id in the image.

Keel Core 19.0-3, testing build 2026-09-30 (unsigned)

Superseded by testing-19.0-3-step7-20261001. Use that build instead.

Test image of Keel Core, Phase 1 of the roadmap (Keel-Linux/tracker#46), built in isolation from this commit (keel-core#17) with keel 0.13.0 and the common overlays. Not for production and not signed: the attended, signed release on releases.keellinux.org comes later. Verify with the .sha512 file.

Proxmox: copy to /var/lib/vz/template/cache and create a container from it. Plain LXC: extract into the rootfs.

What it was tested for: first boot in simple installation, YAML re-applies as a no-op, etcd and CrowdSec inactive, Monit watches sshd, Webmin and postfix, no SSH host keys, CrowdSec identity or machine-id in the image (each machine makes its own at first boot).