cmdb-lite v0.6.0

Full Changelog: v0.5.0...v0.6.0

cmdb-lite v0.5.0

Full Changelog: v0.4.0...v0.5.0

cmdb-lite v0.4.0

cmdb-lite v0.4.0

This release adds managed CI categories and dark/light/system themes.

Downloads

Platform	Asset
Debian/Ubuntu	cmdb-lite_0.4.0_amd64.deb
Fedora/RHEL	cmdb-lite-0.4.0-1.x86_64.rpm
Portable Linux	cmdb-lite-0.4.0-linux-x86_64.tar.gz
Flatpak (Linux)	cmdb-lite.flatpak
Windows portable	cmdb-lite-windows-x64.zip
Windows installer	cmdb-lite-0.4.0-windows-x64.msi
Checksums	SHA256SUMS

Highlights

• Managed CI categories. Categories now have stable IDs, descriptions,
  colors, ordering, and CRUD in the Categories dialog. CI types select a
  category rather than typing a free-text label.
• Schema v3 migration. Existing free-text category labels are converted to
  category records automatically when the database is opened.
• Dark, light, and system themes. Theme selectors are available on the
  unlock screen and top bar. The preference is stored in the encrypted database
  (app_meta.ui.theme) and applied through CSS variables.
• Official draw.io is not bundled. The built-in .drawio-compatible editor
  remains the supported editor. The official draw.io web app is roughly 50 MB
  of static assets, requires a multi-file asset origin, and has additional
  icon/stencil/trademark terms. Saved diagram XML still opens in draw.io Desktop
  and diagrams.net.
• Existing features retained: async nmap discovery with cancellation,
  persisted staging, match/merge review, -sV/-O, encrypted backup, diagram
  editor, Fedora RPM, Flatpak, and single-file Linux/Windows executables.

Upgrade warning

v0.4.0 migrates the database from schema version 2 to 3. Back up the .cmdb and
.meta pair before opening an older database. After migration, do not open the
file with an older application.

See docs/upgrading.md, docs/backup.md, and docs/themes.md.

Validation

Linux, Fedora, Flatpak, and Windows CI passed, including the real WebView2
smoke test, live nmap test, encrypted backup, category migration, and theme
preference tests.

Windows SmartScreen may warn until code signing is configured. The MSI is
per-machine and requires administrator elevation.

cmdb-lite v0.3.0

cmdb-lite v0.3.0

A feature release adding the embedded diagram editor, persisted discovery
review, database backup, CI categories, and a Flatpak.

Downloads

Platform	Asset
Debian/Ubuntu	cmdb-lite_0.3.0_amd64.deb
Fedora/RHEL	cmdb-lite-0.3.0-1.x86_64.rpm
Portable Linux	cmdb-lite-0.3.0-linux-x86_64.tar.gz
Flatpak (Linux)	cmdb-lite.flatpak
Windows portable	cmdb-lite-windows-x64.zip
Windows installer	cmdb-lite-0.3.0-windows-x64.msi
Checksums	SHA256SUMS

Highlights

• MIT license. Free for everyone; see LICENSE.
• Embedded diagram editor. Add CIs, drag nodes, connect two nodes to create
  a real typed relationship, and save .drawio-compatible XML in the encrypted
  database. The Dependency Map updates from the created relationships.
• Persisted discovery staging. Scan jobs and discovered hosts survive
  application restarts. Jobs that were running at shutdown are marked
  interrupted.
• Match suggestions and explicit merge decisions. Hosts are matched to
  existing CIs by IP/management IP, MAC, CI name, and hostname. Matched hosts
  default to unselected/Ignore. Merge fills empty scan fields by default, with
  an explicit overwrite toggle.
• Async nmap with cancellation. scan.start returns immediately; the UI
  polls and can cancel the nmap process group.
• -sV and -O. Optional service/version and OS detection. -O requires
  root/administrator and is rejected in the standard Flatpak sandbox.
• In-app encrypted backup. Uses SQLite's online backup API and writes the
  matching .meta sidecar. The destination must be a new path.
• CI type categories. Types are grouped by a free-text category and the
  schema migrates existing databases in place.
• Flatpak. Uses the GNOME runtime and bundles SQLCipher, libsodium, and nmap.
  Install the GNOME runtime from Flathub if Flatpak does not fetch it.
• Live nmap CI test against a localhost listener, plus async manager,
  cancellation, backup, migration, matching, and merge tests.

Upgrade warning

v0.3.0 migrates the database from schema version 1 to 2. Back up the .cmdb and
.meta pair before opening an older database with this release. After migration,
do not open the file with an older application.

See docs/upgrading.md and docs/backup.md.

Notes

• Windows SmartScreen may warn until code signing is configured.
• The MSI is per-machine and requires administrator elevation.
• The embedded diagram editor is a lightweight .drawio-compatible canvas, not
  the official draw.io web application.
• The Flatpak app bundle is small because GTK/WebKit come from the GNOME runtime
  rather than being duplicated inside the app.

cmdb-lite v0.2.0

cmdb-lite v0.2.0

This release adds authorised, nmap-based network discovery with staged review
and selective import.

Downloads

Platform	Asset
Debian/Ubuntu	cmdb-lite_0.2.0_amd64.deb
Fedora/RHEL	cmdb-lite-0.2.0-1.x86_64.rpm
Portable Linux	cmdb-lite-0.2.0-linux-x86_64.tar.gz
Windows portable	cmdb-lite-windows-x64.zip
Windows installer	cmdb-lite-0.2.0-windows-x64.msi
Checksums	SHA256SUMS

The single executable contains the embedded UI. SQLCipher and libsodium are
statically linked on Windows and on the portable Linux build when .a archives
are available. GTK3, WebKitGTK, expat, OpenSSL 3, and the WebView2 runtime are
system libraries.

Network discovery

• Discovery tab with an explicit authorisation confirmation.
• IPv4 address or /24–/32 CIDR targets; at most 256 addresses and 256 ports.
• Unprivileged nmap TCP connect scans with a fixed argv, no shell, rate limits,
  retries, per-host timeouts, and an overall process timeout.
• Staged results with hostname, MAC, vendor, open ports, and OS guess.
• Selective import as CIs with ip_address, hostname, mac_address,
  vendor, os_guess, open_ports, discovery_method, and
  discovery_target attributes.
• No auto-merge. Every import is explicit and audited.
• DTD/entity rejection and bounded parsing for untrusted nmap XML.

nmap must be installed separately:
sudo apt install nmap, sudo dnf install nmap, or the Windows installer from
https://nmap.org/download.html. Set CMDB_NMAP to the full executable path if
it is not on PATH.

Install and upgrade

See the README for detailed installation instructions and
docs/upgrading.md for backups, database compatibility, rollback, and
post-upgrade checks. The scanner release does not change the database schema;
v0.1.0 databases open directly.

Notes

• Windows SmartScreen may warn until code signing is configured.
• The MSI is per-machine and requires administrator elevation.
• A clean-Windows-VM GUI/WebView2 and MSI install/uninstall check is still
  recommended; CI runs a real WebView2 smoke test.
• The embedded draw.io editor is not included in this release.

cmdb-lite v0.1.0

cmdb-lite v0.1.0

Local-first, encrypted Configuration Management Database for Linux and Windows.

Downloads

Windows

• cmdb-lite-windows-x64.zip — portable package containing a single cmdb.exe
• cmdb-lite-0.1.0-windows-x64.msi — per-machine WiX installer with Start Menu shortcut

Windows 10/11 require the Microsoft Edge WebView2 Runtime (included on current systems). SQLCipher, libsodium, OpenSSL, and the C/C++ runtime are linked statically.

Linux

• cmdb-lite_0.1.0_amd64.deb — Debian/Ubuntu package
• cmdb-lite-0.1.0-linux-x86_64.tar.gz — portable package containing a single cmdb ELF

The Linux ELF requires GTK3, WebKitGTK 4.1, and the system OpenSSL 3 libcrypto.so.3. SQLCipher and libsodium are linked statically. The .deb declares these dependencies.

Highlights

• Encrypted SQLCipher database at a user-selected path
• Argon2id master passphrase
• User-defined CI types and custom fields
• CI inventory, relationships, CSV/TSV import
• Dependency maps and .drawio export
• Audit log with hash chain
• Embedded HTML/CSS/JS UI — no separate web/ folder
• Single-file executables on both platforms

Notes

• The database and .meta sidecar are separate files chosen by the user; back them up together.
• No code signing certificate is configured yet, so Windows SmartScreen may warn.
• The MSI is per-machine and requires administrator elevation.
• See README.md and docs/ for import formats, security, architecture, and the Windows clean-VM checklist.