Cloudrail v0.1.0-alpha.4 — recover the dashboard HTTPS route

This early alpha fixes a missing dashboard route during public-host recovery.

Alpha.3 restored persistent data and regenerated application routes, but omitted the dashboard HTTPS route because generated route storage is excluded from cold backups. Alpha.4 regenerates that route from the retained dashboard domain after the agent starts. The VPS installer and restore tool now share the same validated route generator.

Verified build

Commit: 302aec491fc33fd8a0ef5216b33856d899e5cb5f.

CI run 34213340630 passed all five jobs: checks, runtime/browser, maintenance, host backup and independent-host recovery. After recovering application/platform data onto a separate Ubuntu VM, the dashboard route was regenerated and exercised through Traefik over HTTPS using a trusted fixture certificate. The original owner status and dashboard HTML were served. This fixture makes no ACME request; real public-host DNS/certificate validation remains pending.

Source and Linux amd64/arm64 runtime archives have checksums and verified GitHub build provenance. The source archive is the package for the Docker quickstart/VPS installer; runtime archives still need the platform's Compose services/build tools.

sha256sum -c SHA256SUMS
gh attestation verify cloudrail-0.1.0-alpha.4-source.tar.gz \
  --repo MinnKhantThuu/cloudrail \
  --signer-workflow MinnKhantThuu/cloudrail/.github/workflows/verify.yml \
  --source-digest 302aec491fc33fd8a0ef5216b33856d899e5cb5f

Repeat for each runtime archive. Quickstart · Myanmar guide · Host recovery and alpha.3 repair.

Existing backups and remaining gates

Restore an alpha.3 backup using its matching alpha.3 source/images first; the recovery guide provides the missing dashboard-route repair. Do not bypass backup version/architecture or empty-host guards. New alpha.4 backups include the same state inventory and automatically regenerate the route during restore.

Public VPS installer/DNS/ACME, actual GitHub App delivery, AWS pilot and billing observation, and final owner UX acceptance remain pending. This is an early alpha for one owner/node and trusted repositories, with no production-readiness or hostile multi-tenancy guarantee.

Cloudrail v0.1.0-alpha.3 — independent host recovery

Public-host recovery correction

Alpha.3 omits the dashboard HTTPS route after a public-host restore, which can leave the dashboard returning a proxy 404. Alpha.4 fixes route regeneration. For existing alpha.3 backups, restore with matching alpha.3 source/images and follow the dashboard-route repair. Original alpha.3 assets remain unchanged.

Cloudrail is a self-hosted deployment platform for one owner, one Linux node and trusted repositories. This early alpha adds recovery onto a new host.

Included

• Cold backup of platform/application volumes, owner account, encrypted settings, node identity, registry, application backups and exact platform images.
• Restore onto an empty Linux Docker host of the same architecture and source version, after fencing the source. Inventory/checksum, archive-path and symlink-chain guards run before restore.
• Coolify-like first-owner registration: email, password and confirmation; automatic sign-in, then email/password login. No setup token.
• Existing deployment dashboard, source builds, private PostgreSQL services, volumes, logs, encrypted variables and guarded update/rollback.
• Updated README, Myanmar usage guide and step-by-step host recovery instructions.

Verified build

Commit: 991798dfb339173caaef4e34b613fdd19d2cd492.

CI run 34212164749 passed all five jobs: checks, runtime/browser, maintenance, host backup and independent-host recovery. The recovery uses separate Ubuntu VMs with different kernels and empty destination storage. Owner/session, PostgreSQL rows, persistent files, registry image, encrypted database binding, backup download, certificate-storage fixture and stopped state survived; a new deployment served HTTP afterward. The temporary transfer was authenticated/encrypted and deleted after use.

Download the source archive for the Docker quickstart/VPS installer. Linux amd64/arm64 runtime archives contain API/agent binaries and dashboard assets; the platform still requires Compose services and build tools. Release assets include checksums and verified GitHub build provenance. No private backup or transfer fixture is included.

sha256sum -c SHA256SUMS
gh attestation verify cloudrail-0.1.0-alpha.3-source.tar.gz \
  --repo MinnKhantThuu/cloudrail \
  --signer-workflow MinnKhantThuu/cloudrail/.github/workflows/verify.yml \
  --source-digest 991798dfb339173caaef4e34b613fdd19d2cd492

Repeat for each runtime archive. Quickstart · Myanmar guide · Host recovery.

Remaining gates

Public VPS installer, actual DNS/ACME issuance/renewal, real GitHub App delivery, AWS pilot/cost observation and final owner UX review remain pending. Certificate-storage fixture retention is not real HTTPS validation. Independent Linux amd64 recovery does not prove both architectures or production readiness. Cold backups interrupt applications, need encrypted off-server storage, and exclude container writable layers, external storage and operating-system configuration. Follow the runbook before use.

Cloudrail 0.1.0-alpha.2

Cloudrail is a self-hosted deployment platform for one owner, one Linux node and trusted application repositories. This is an early alpha.

What is included

• First-owner registration with email, password and confirmation; immediate sign-in and normal email/password login afterward. No setup token.
• Go API/agent and React dashboard; projects/environments, digest deployments, source builds, logs, encrypted variables, private PostgreSQL services and backup/restore.
• Guarded updates: pending-job and concurrent-operator checks, frozen control-plane backup, exact recovery images, schema/installation checks before rollback, and automatic recovery when backup preparation fails.
• Source and Linux amd64/arm64 runtime archives with checksums, dependency notices and GitHub-signed build provenance.

Verified source and artifacts

Commit: b4c5bd21636a00a243f636305c3c66c7ae376fc3.

CI run 34205416387 passed checks, runtime and maintenance jobs. This includes fresh Ubuntu 24.04 Docker/browser registration/deployment, upgrading the previously published source runtime, exact-image rollback, backup restore, encrypted-variable preservation, and continued deployment/application HTTP traffic.

Download the source archive for the Docker quickstart or VPS installer. Runtime archives contain binaries/dashboard assets; the platform still needs its Compose services and build tools.

sha256sum -c SHA256SUMS
gh attestation verify cloudrail-0.1.0-alpha.2-source.tar.gz \
  --repo MinnKhantThuu/cloudrail \
  --signer-workflow MinnKhantThuu/cloudrail/.github/workflows/verify.yml \
  --source-digest b4c5bd21636a00a243f636305c3c66c7ae376fc3

Use the same verification command for each runtime archive. Quickstart · Myanmar guide · Update/recovery.

Remaining gates

Real public DNS/ACME, GitHub App webhook delivery, the AWS application pilot, complete host disaster recovery and final owner UX review remain pending. The Linux Compose rehearsal is not public-VPS or production-readiness proof. Existing installations retain their owner accounts and application data; follow the update/recovery guide.