Skip to content

Kervan v0.4.0

Choose a tag to compare

@github-actions github-actions released this 09 Oct 07:37
· 146 commits to master since this release

Added

  • audit: tamper-evident file logs, on by default
    (audit.integrity). Each record is HMAC-chained to the previous one,
    using a per-installation key in <data_dir>/audit.key.
    • kervan audit verify detects modified, deleted, inserted and
      reordered records, and exits non-zero on any finding.
    • The line format stays backward compatible: the chain is an extra
      chain field.
    • The chain continues across restarts, and backups include the key.

Container image: docker pull ghcr.io/kervanserver/kervan:0.4.0 (linux/amd64, linux/arm64).


Checksums are in checksums.txt. Verify with sha256sum -c --ignore-missing checksums.txt.