Repository navigation
Kervan v0.4.0
Added
- audit: tamper-evident file logs, on by default
(audit.integrity). Each record is HMAC-chained to the previous one,
using a per-installation key in<data_dir>/audit.key.kervan audit verifydetects modified, deleted, inserted and
reordered records, and exits non-zero on any finding.- The line format stays backward compatible: the chain is an extra
chainfield. - The chain continues across restarts, and backups include the key.
Container image: docker pull ghcr.io/kervanserver/kervan:0.4.0 (linux/amd64, linux/arm64).
Checksums are in checksums.txt. Verify with sha256sum -c --ignore-missing checksums.txt.