Skip to content

SecondBox v0.12.0

Choose a tag to compare

View all tags
@melonamin melonamin released this 13 Sep 19:23
· 35 commits to main since this release
v0.12.0
23a30ff
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Rotated the Firecracker microVM bundle and its signing authority so Firecracker guests receive the port-credit and streaming-exec fixes, and introduced the lean release tier.

Existing deployments must be reinstalled and their resources recreated; the guided updater refuses bundle digest changes. See the v0.12.0 release notes.

Changed

  • Rotated the Firecracker microVM bundle to secondbox-0.12.0 with a new RSA-4096 trust anchor, shipping the guest port-credit and streaming-exec fixes from #127, #128, and #134. Existing deployments require reinstallation and resource recreation because the guided updater refuses bundle digest changes. See v0.12.0 release notes for the fingerprint and bundle identity.
  • Added a lean release tier with sharded Firecracker and local gVisor qualification, amd64 images, and one installer guest. just nightly retains the full scenario matrix; just release VERSION --full also builds arm64 images and runs all installer modes. Manifests record built platforms and evidence remains commit-exact (#135).

Fixed

  • Fixed queued streaming stdin blocking the guest connection after an exec terminates, preserved command exit status when a program stops reading stdin before exiting, and allowed deadline outcomes to reach the streaming client (#134).

Full release notes · Full changelog

Install

Guided Linux amd64 install:

curl -fsSL https://github.com/SecondStack-AI/SecondBox/releases/download/v0.12.0/install.sh | sh

SDKs: npm install @secondstack-ai/secondbox@0.12.0 and go get github.com/SecondStack-AI/SecondBox@v0.12.0

Assets 31
Loading