v1.0.2

Changelog

Others

• 61c184b: topology: accept native absolute drive paths on Windows (@R3n3r0)

Verify this release

# checksums.txt: signed with cosign keyless by the release workflow of this tag
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity 'https://github.com/R3n3r0/Nexo/.github/workflows/release.yml@refs/tags/v1.0.2' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt

# images (multi-arch index, SBOM and provenance attestations)
cosign verify docker.io/paolor/nexo:v1.0.2 \
  --certificate-identity 'https://github.com/R3n3r0/Nexo/.github/workflows/release.yml@refs/tags/v1.0.2' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
docker buildx imagetools inspect docker.io/paolor/nexo:v1.0.2 --format '{{ json .SBOM }}'

Install

docker pull paolor/nexo:v1.0.2
docker pull paolor/nexoctl:v1.0.2
docker pull paolor/nexo-media-worker:v1.0.2
# Helm chart attached to this release (signature: nexo-1.0.2.tgz.sigstore.json)
helm install nexo https://github.com/R3n3r0/Nexo/releases/download/v1.0.2/nexo-1.0.2.tgz

deb/rpm packages nexo (server, systemd unit), nexoctl (CLI) and
nexo-media-worker (media worker, systemd unit) for amd64 and arm64 are
attached below; see docs/08-deployment-modes.md §8.7 and
docs/user/media-worker.md.

v1.0.1

Changelog

Performance

• 02c70ac: perf(storage): stage xl.meta in the object directory (@R3n3r0)
• bcd6597: perf: faster small PUTs and bulk deletes (@R3n3r0)

Others

• 3ea1b7a: Add a demo animation of the console to the README (@R3n3r0)
• b493470: Benchmarks: describe the machine every result comes from (@R3n3r0)
• af01faa: CI: remove the unit test and security scan jobs (@R3n3r0)
• d77581e: Images in every format and width (@R3n3r0)
• bfeb33e: Images on the same URL, media worker deployment, README (@R3n3r0)
• 564ccc3: Images: colors converted to sRGB, PNG and WebP orientation (@R3n3r0)
• d073d58: Media rules for images (domain), video pipeline diagram and logo (@R3n3r0)
• 0322319: Media worker: renditions, posters and thumbnails without ffmpeg (@R3n3r0)
• bdbe071: README: a new layout and the video features, with screenshots (@R3n3r0)
• 450888e: Video buckets in one step: the HLS option of bucket creation (@R3n3r0)
• 4e57463: Video pipeline benchmarks and the optimizations they found (@R3n3r0)
• 61995f2: bench: add warp-compare.sh to compare Nexo with other S3 servers (@R3n3r0)
• 3cb0117: media worker: decode and encode the video on every core (@R3n3r0)
• 84a1528: media: domain model of the bucket media rules, jobs and sidecars (@R3n3r0)
• b133dbc: media: package progressive MP4 as HLS on the fly (@R3n3r0)
• e3aad63: media: stream videos as HLS from the console and share links (@R3n3r0)
• bc91f12: media: video player in the console, stream share links and public player (@R3n3r0)
• 85eafed: release: extract the smoke archives outside the binary directory (@R3n3r0)
• 614e30a: storage: metadata log for small-object writes (opt-in) (@R3n3r0)
• 0dacfbe: test(integration): wait for healthy erasure sets before checking cluster metrics (@R3n3r0)

Verify this release

# checksums.txt: signed with cosign keyless by the release workflow of this tag
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity 'https://github.com/R3n3r0/Nexo/.github/workflows/release.yml@refs/tags/v1.0.1' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt

# images (multi-arch index, SBOM and provenance attestations)
cosign verify docker.io/paolor/nexo:v1.0.1 \
  --certificate-identity 'https://github.com/R3n3r0/Nexo/.github/workflows/release.yml@refs/tags/v1.0.1' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
docker buildx imagetools inspect docker.io/paolor/nexo:v1.0.1 --format '{{ json .SBOM }}'

Install

docker pull paolor/nexo:v1.0.1
docker pull paolor/nexoctl:v1.0.1
docker pull paolor/nexo-media-worker:v1.0.1
# Helm chart attached to this release (signature: nexo-1.0.1.tgz.sigstore.json)
helm install nexo https://github.com/R3n3r0/Nexo/releases/download/v1.0.1/nexo-1.0.1.tgz

deb/rpm packages nexo (server, systemd unit), nexoctl (CLI) and
nexo-media-worker (media worker, systemd unit) for amd64 and arm64 are
attached below; see docs/08-deployment-modes.md §8.7 and
docs/user/media-worker.md.

v1.0.0

Changelog

Features

• d8e267a: feat(M0): fondamenta, contratti e implementazioni iniziali dei servizi, transport HTTP, dashboard, Docker/CI (Paolo Russo paolorusso1991@gmail.com)
• f70cc7a: feat(M7): versioning, object lock, checksum, CORS, lifecycle, notifiche, KMS/SSE, quota (Paolo Russo paolorusso1991@gmail.com)
• db27c7a: feat: rate limiting per IP, user, bucket and distribution; enforce api.requests_max (wip of DNS-01 and hardening included) (Paolo Russo paolorusso1991@gmail.com)
• 4527202: feat: revoke sessions and shares on disable, ZAP API scan, DCO check (Paolo Russo paolorusso1991@gmail.com)

Bug fixes

• c472467: fix(console): disable Monaco paste-as so pasting never waits on clipboard permission (Paolo Russo paolorusso1991@gmail.com)

Performance

• 1c8b868: perf: zero-copy single-drive downloads with sendfile; O_DIRECT evaluated and dropped (T-9.2) (Paolo Russo paolorusso1991@gmail.com)

Others

• 29b594c: build: Go 1.27.2 toolchain, govulncheck v1.8.0, rpc WaitGroup race fix (Paolo Russo paolorusso1991@gmail.com)
• 598c67c: build: inizializza il modulo Go con le dipendenze principali (Paolo Russo paolorusso1991@gmail.com)
• e12a004: console: short deployment mode label with details below; security policy, code of conduct, issue templates (Paolo Russo paolorusso1991@gmail.com)
• 5d20efb: feat(M1+M2): S3 core su singolo disco, SigV4, IAM, policy engine, presigned e share link (Paolo Russo paolorusso1991@gmail.com)
• 92f0fc7: feat(M3+M4): Admin API completa, dashboard React e CLI nexoctl (Paolo Russo paolorusso1991@gmail.com)
• 9e2e202: feat(M5+M6): erasure coding, set e pool, healing, scanner, cluster distribuito (Paolo Russo paolorusso1991@gmail.com)
• d52c0f1: feat(M8+M9): osservabilità, hardening, packaging, documentazione utente, compatibilità (Paolo Russo paolorusso1991@gmail.com)
• 30824f3: fix(v1.0): correzioni della revisione finale (Paolo Russo paolorusso1991@gmail.com)
• cba6581: fix(v1.0): giro 3 della revisione finale (Paolo Russo paolorusso1991@gmail.com)
• e5c6c90: release: opt-in Docker Hub publishing alongside ghcr.io, Docker Hub README (Paolo Russo paolorusso1991@gmail.com)
• 420aa8f: release: pin cosign-installer v4.1.2 by commit (Paolo Russo paolorusso1991@gmail.com)
• cca4e19: release: script to build and push the images from a workstation (make publish-images) (Paolo Russo paolorusso1991@gmail.com)
• f23c70a: security: console and Admin API penetration test (T-9.3) (Paolo Russo paolorusso1991@gmail.com)
• 913716c: test(server): slow HTTP/2 client with the MSS of a real network (Paolo Russo paolorusso1991@gmail.com)
• f3cbc2d: test(server): steady sendfile client with a receive buffer above the loopback MSS (Paolo Russo paolorusso1991@gmail.com)
• a5a05d8: wip(M0): fondamenta, servizi core, transport HTTP, dashboard scaffold, Docker/CI (correzioni del critico in corso) (Paolo Russo paolorusso1991@gmail.com)
• b5c8199: wip(M0): snapshot intermedio dei contratti dei servizi (lavoro in corso del workflow M0) (Paolo Russo paolorusso1991@gmail.com)
• 4569532: wip(M3+M4): Admin API completa, dashboard storage/IAM, CLI nexoctl, e2e Playwright (correzioni finali in corso) (Paolo Russo paolorusso1991@gmail.com)
• 15ac31f: wip(M3+M4): Admin API e CLI in corso (snapshot del workflow in esecuzione) (Paolo Russo paolorusso1991@gmail.com)
• 0013ecf: wip(M5+M6): erasure codec, set e pool, RPC internode, dsync, servizio cluster, healing e scanner (wiring in corso) (Paolo Russo paolorusso1991@gmail.com)
• 29f332a: wip(M7): versioning, object lock, checksum, CORS, lifecycle, eventi, KMS/SSE, quota, Admin API, dashboard e CLI (integrazione in corso) (Paolo Russo paolorusso1991@gmail.com)
• 844a261: wip(M7b+M7c): access rules, distribuzioni, TLS, cache per dominio, Admin API e CLI, dashboard access/dist (rifinitura in corso) (Paolo Russo paolorusso1991@gmail.com)
• 8da9995: wip(M7b+M7c): correzioni del primo giro di revisione (cache key, webhook SSRF, coerenza cache, distribuzioni, forwarded host) in verifica (Paolo Russo paolorusso1991@gmail.com)
• fbd6628: wip(M8+M9): osservabilità, hardening TLS/sicurezza/fuzzing/benchmark, packaging (dashboard/CLI monitoraggio in corso, build non ancora verde) (Paolo Russo paolorusso1991@gmail.com)
• efa04a4: wip(v1.0): giro 3 della revisione finale (correzioni in corso, verifica non ancora eseguita) (Paolo Russo paolorusso1991@gmail.com)
• ecaeef5: wip: English translation of user docs, design docs 07-12 and remaining files (in progress) (Paolo Russo paolorusso1991@gmail.com)
• 72721c1: wip: Go 1.27.2, MkDocs and AGPL-3.0 relicensing (in progress, not verified) (Paolo Russo paolorusso1991@gmail.com)
• ca77dba: wip: Go 1.27.2, MkDocs strict e licenza AGPL-3.0 (in corso, non verificato) (Paolo Russo paolorusso1991@gmail.com)
• 98223a8: wip: O_DIRECT and zero-copy (in progress, not verified) (Paolo Russo paolorusso1991@gmail.com)
• 7781b44: wip: O_DIRECT and zero-copy (in progress, not verified) (Paolo Russo paolorusso1991@gmail.com)
• 35a25d6: wip: aggiornamento a Go 1.27.2 e build MkDocs strict (in corso, non verificato) (Paolo Russo paolorusso1991@gmail.com)
• 842bc7a: wip: final verification fixes (in progress) (Paolo Russo paolorusso1991@gmail.com)
• 6df6ec0: wip: final verification fixes (in progress) (Paolo Russo paolorusso1991@gmail.com)
• bec3e27: wip: final verification fixes in the cache store (in progress) (Paolo Russo paolorusso1991@gmail.com)
• 7bcc883: wip: move container images from ghcr.io to Docker Hub (in progress) (Paolo Russo paolorusso1991@gmail.com)
• 82cdf1d: wip: move container images to Docker Hub (in progress) (Paolo Russo paolorusso1991@gmail.com)
• 30fdde9: wip: rate limiting, ACME DNS-01 and hardening items (in progress, not verified) (Paolo Russo paolorusso1991@gmail.com)

Verify this release

# checksums.txt: signed with cosign keyless by the release workflow of this tag
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity 'https://github.com/R3n3r0/Nexo/.github/workflows/release.yml@refs/tags/v1.0.0' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt

# images (multi-arch index, SBOM and provenance attestations)
cosign verify docker.io/paolor/nexo:v1.0.0 \
  --certificate-identity 'https://github.com/R3n3r0/Nexo/.github/workflows/release.yml@refs/tags/v1.0.0' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
docker buildx imagetools inspect docker.io/paolor/nexo:v1.0.0 --format '{{ json .SBOM }}'

Install

docker pull paolor/nexo:v1.0.0
docker pull paolor/nexoctl:v1.0.0
# Helm chart attached to this release (signature: nexo-1.0.0.tgz.sigstore.json)
helm install nexo https://github.com/R3n3r0/Nexo/releases/download/v1.0.0/nexo-1.0.0.tgz

deb/rpm packages nexo (server, systemd unit) and nexoctl (CLI) for
amd64 and arm64 are attached below; see docs/08-deployment-modes.md §8.7.