Skip to content

Milvago 1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Sep 13:07
v1.0.0
fcbc291
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Milvago server 1.0.0

Public image: ghcr.io/milvago-ai/milvago-server:1.0.0

Digest: sha256:f49cf2bd8a46222c04954f0fd8107cdd5838169b46f6e3049a83b977a99df588

The image passed vulnerability scanning, cosign signing and verification, and anonymous Docker pull.

Install

No GitHub account, token, or registry login is required. Download the release assets and verify their checksums:

mkdir -p milvago-install && cd milvago-install
release_url=https://github.com/Milvago-AI/milvago-server/releases/download/v1.0.0
curl -fLO "$release_url/install-private.sh"
curl -fLO "$release_url/release.json"
curl -fLO "$release_url/SHA256SUMS"
sha256sum --check SHA256SUMS
bash install-private.sh

The filename install-private.sh is historical. All installation downloads are public. The script checks prerequisites, asks for the public Milvago URL on the terminal, and installs the pinned image with the verified Community agent 0.6.4 bundle. For unattended execution, set MILVAGO_PUBLIC_URL to the exact HTTP or HTTPS origin.

Piped execution is also supported:

curl -fsSL https://get.milvago.ai | bash

Installer correction — 2026-09-29

The installer assets were replaced to remove the obsolete GitHub token requirement and correct piped startup. URL input uses /dev/tty; startup handles the absence of a script file and ignores the current directory as an installation when piped. A final main invocation ensures the script body is parsed before installation starts.

The installed profile now starts Keycloak in production mode. Mailpit is disabled by default and restricted to an optional development profile with user 65532:65532 and all capabilities dropped. Rerunning the installer stops an existing Mailpit container without deleting its captured messages, removes only the factory SMTP settings, and preserves custom SMTP settings. Configure and test a real SMTP service before using invitations or password-reset email.

Use a dedicated sudo-capable installation account without adding it to the Docker group. Docker user namespace remapping remains disabled pending volume and networking qualification.

The server image and server source commit are unchanged. release.json records the separate installer source commit d127a0d19fdd78382b0717beb29021eb47c97f19; SHA256SUMS covers the corrected files. Download all three assets again if you obtained an earlier installer. Existing installations receive these changes only when the new installer is run.

Community agent and extension 0.6.4: https://github.com/Milvago-AI/milvago-agent/releases/tag/community-agent-v0.6.4

The Windows MSI does not yet carry an Authenticode publisher signature. Update manifests are signed with Ed25519.

Assets 5
Loading