v0.1.0-rc.7

What Changed 👀

🚀 Features

• feat(appliance): rc.7 batch 2: lockout limit, preferred offer, relay pin, collector CA @Bugs5382 (#573)
• feat(osadmin): set the services' OTLP collector from :8443 and restart them in order @Bugs5382 (#554)
• feat(appliance): rc.7 backups on helm-postgres-ha @Bugs5382 (#543)

🐛 Bug Fixes

• fix(test): read the retried telemetry restart's pods, not the failed one's @Bugs5382 (#575)
• fix(appliance): rc.7 batch: finished previous release, shell source race, whole serial lines @Bugs5382 (#567)

Known issues

• A box can stay stuck if it loses power right after the database move. Don't cut power during the upgrade or straight after it. I'm tracking it in #579.

Extra

Full Changelog: v0.1.0-rc.6...v0.1.0-rc.7

v0.1.0-rc.6

What Changed 👀

🐛 Bug Fixes

• fix(release): install virt-fw-vars for the OVA first-boot proof @Bugs5382 (#542)
• fix(support): download the support bundle as a compressed zip @Bugs5382 (#534)
• fix(osadmin): give each atomic write its own temp file @Bugs5382 (#539)
• fix(appliance): rc.6 wave 2 batch @Bugs5382 (#529)
• fix(appliance): first batch of rc.6 changes @Bugs5382 (#520)

Extra

Full Changelog: v0.1.0-rc.5...v0.1.0-rc.6

v0.1.0-rc.5

What Changed 👀

🚀 Features

• feat(support): add the support bundle and its product-neutral framework @Bugs5382 (#504)
• feat(network): confirm on the console, stage and commit over SSH @Bugs5382 (#511)

🐛 Bug Fixes

• fix(tls): make the box's certificates follow an address change, by DHCP or static @Bugs5382 (#512)
• fix(edgefall): show the real Sneakers mark on the box-state pages @Bugs5382 (#505)
• fix(updates): take the newest finished release on the update check @Bugs5382 (#508)
• fix(product): keep the command-line sign-in up with the MCP off @Bugs5382 (#506)
• fix(import): match bundle format 2.0 and the imported-from record @Bugs5382 (#507)
• fix(console): keep console codes readable at the Proxmox default display size @Bugs5382 (#496)
• fix(setup): name the downloaded recovery key file so it reads as a recovery key @Bugs5382 (#497)
• fix(console): keep the network editor from freezing the console when netd is slow @Bugs5382 (#494)
• fix(hooks): exempt generated code from the pre-commit tell scan @Bugs5382 (#510)
• fix(shell): say a reboot or poweroff can take more than 5 minutes @Bugs5382 (#499)
• fix(shell): point an address in ipv4= or ipv6= to the address keys @Bugs5382 (#493)
• fix(netd): stop the lock-order deadlock that hangs netd during an address change @Bugs5382 (#495)

📄 Documentation

• fix(shell): say a reboot or poweroff can take more than 5 minutes @Bugs5382 (#499)

Extra

Full Changelog: v0.1.0-rc.4...v0.1.0-rc.5

v0.1.0-rc.4

What Changed 👀

🚀 Features

• feat(qcow2): build the qcow2, the Proxmox VE guide and the restricted guest agent @Bugs5382 (#476)

Extra

Full Changelog: v0.1.0-rc.3...v0.1.0-rc.4

v0.1.0-rc.3

What Changed 👀

🚀 Features

• feat(release): publish every service image for linux/amd64 and linux/arm64 @Bugs5382 (#470)

🐛 Bug Fixes

• fix(deps): bump Go to 1.26.10 for GO-2026-6809 @Bugs5382 (#471)
• fix(appliance): rc.3 wave 3 — update check, edge mark, network, release checklist @Bugs5382 (#461)
• fix(diskguard): never read a one-time step as a steady rate @Bugs5382 (#440)
• fix(edgefall): wrap a failure detail that runs long and unbroken @Bugs5382 (#436)

🔐 Security

• fix(deps): bump Go to 1.26.10 for GO-2026-6809 @Bugs5382 (#471)

📄 Documentation

• docs(email): troubleshoot a failed test email @Bugs5382 (#441)

🧩 Dependency Updates

• fix(deps): bump Go to 1.26.10 for GO-2026-6809 @Bugs5382 (#471)

Extra

Full Changelog: v0.1.0-rc.2...v0.1.0-rc.3

v0.1.0-rc.2

What Changed 👀

🐛 Bug Fixes

• fix(release): sealing a release with a patch looks for the kit in the release folder @Bugs5382 (#429)
• fix(import): size the step Jobs, end failed steps with a reason, and gate a 727k-record import @Bugs5382 (#421)

📄 Documentation

• docs(agents): record the first full green CI pass @Bugs5382 (#424)

Extra

Full Changelog: v0.1.0-rc.1...v0.1.0-rc.2

v0.1.0-rc.1

What Changed 👀

🚀 Features

• feat(product): reinstall the installed version from Updates and with sneakers reinstall @Bugs5382 (#378)
• feat(product): remove the installed product and its data with sneakers reset @Bugs5382 (#373)
• feat(product): wait for the cluster's DNS and each phase's needs in an init container @Bugs5382 (#353)
• feat(product): apply the product in phases, each gated on Ready @Bugs5382 (#346)
• feat(status): let an admin hide the reduced-protection notice @Bugs5382 (#345)
• feat(edgefall): push the box state as server-sent events @Bugs5382 (#335)
• feat(edgefall): follow the box state over /_box/events in the box-state client @Bugs5382 (#328)
• feat(release): name every release file by its version alone @Bugs5382 (#293)
• feat(osaudit): archive a log file before its retention prune, and audit every removal @Bugs5382 (#286)
• feat(updates): a Base OS always ships with its Base Web @Bugs5382 (#280)
• feat(os): disk guard: log caps, audit rotation, self-cleanup, growth and usage alerts @Bugs5382 (#281)
• feat(updates): GitHub Releases as the built-in update source, with channels @Bugs5382 (#282)
• feat(shell): tab completion in the closed-shell menu @Bugs5382 (#279)
• feat(rootshell): add watch to the root-shell image @Bugs5382 (#276)
• feat(shell): document every closed-shell command and list the network set keys @Bugs5382 (#277)
• feat(product): product email settings on :8443 @Bugs5382 (#271)
• feat(bundle): serve the OAuth issuer at https://<fqdn>/oauth @Bugs5382 (#273)
• feat(release): ship the whole Sneakers product from one appliance tag @Bugs5382 (#262)
• feat(product): give the product the box's own host name @Bugs5382 (#263)
• feat(keycustody): the recovery escrow carries the product's keys @Bugs5382 (#261)
• feat(osadmin): the Import page backend and imported-users mode @Bugs5382 (#260)
• feat(upgrade): three update units: Base OS, Base Web and Product @Bugs5382 (#245)
• feat: build m appliance wave 2 @Bugs5382 (#246)
• feat(edge): box-state pages carry the product bundle's logo and colours @Bugs5382 (#215)
• feat(upgrade): discard uploads and stages, one upload at a time, and a base version range for product bundles @Bugs5382 (#214)
• feat(elevated): kubectl and helm work in the root shell against the installed k0s @Bugs5382 (#213)
• feat(upgrade): an internal update mirror over HTTP or HTTPS with its own CA @Bugs5382 (#206)
• feat(shell): offer a product's commands in its own group, only when it is installed @Bugs5382 (#210)
• feat(edge): serve the product's Ingresses on the lab edge @Bugs5382 (#209)
• feat(upgrades): the Upgrading screen shows each step with progress on the console @Bugs5382 (#188)
• feat(edge): route the box state to edgefall on the lab edge, and load the poller on the hello page @Bugs5382 (#187)
• feat(edge): serve the box state on the product edge while the cluster is down @Bugs5382 (#186)
• feat(osadmin): generate recovery keys on the box, and stamp the lab's :8443 pages @Bugs5382 (#164)
• feat(console): an information-only console at the large font @Bugs5382 (#136)
• feat(osadmin): the certificate store and a live :8443 certificate swap @Bugs5382 (#138)
• feat(access): password and TOTP sign-in, a sealed setup code and certificate-only SSH @Bugs5382 (#139)
• feat(bundle): ship the product stack as a signed bundle installed from Updates @Bugs5382 (#137)
• feat(console): the first-boot wizard, the console and the first-boot step machine @Bugs5382 (#124)
• feat(netd): the network daemon and sneakers-sshd-run @Bugs5382 (#122)
• feat(init): unlock and mount the state volumes and serve KeyCustody @Bugs5382 (#121)
• feat(access): record who revoked a login key @Bugs5382 (#116)
• feat(upgrade): an owner override that ends an open elevated shell to apply @Bugs5382 (#111)
• feat(build): the root image with the access services, and the airgap bundle @Bugs5382 (#90)
• feat(accessd): one-time elevation, the user CA and the enrolment window @Bugs5382 (#82)
• feat(accessd): the access service, so osadmin runs unprivileged @Bugs5382 (#81)
• feat(init): carry out reboot, shutdown, forced power and the factory reset @Bugs5382 (#80)
• feat(shell): add the closed shell @Bugs5382 (#78)
• feat(sshconfig): render sshd_config, authorized keys and principals @Bugs5382 (#77)
• feat(osadmin): factory reset by quorum, forced power and the update flows @Bugs5382 (#74)
• feat(osadmin): the :8443 appliance admin server, sign-in and page API @Bugs5382 (#73)
• feat(ukikey): carry the update key in the signed UKI @Bugs5382 (#68)
• feat(keycustody): import an escrow on new hardware @Bugs5382 (#66)
• feat(keycustody): turn Secure Boot on or off later and reseal @Bugs5382 (#63)
• feat(network): add the settings model, validation and auto-revert @Bugs5382 (#60)
• feat(accounts): render passwd, group and shadow from the access store @Bugs5382 (#56)
• feat(osaudit): add the chained OS audit log and session recordings @Bugs5382 (#41)
• build(openssh): add pinned static OpenSSH and busybox builds @Bugs5382 (#47)
• feat(ova): build the OVA and the qcow2 for VMware and Proxmox VE @Bugs5382 (#53)
• feat(image): stage releases into the inactive slot with boot counting @Bugs5382 (#48)
• feat(os): build the kernel and static tools from pinned sources @Bugs5382 (#46)
• feat(access): parse keys and keep the access store's invariants @Bugs5382 (#37)
• feat(build): assemble the UKI and port the PCR 11 predictor @Bugs5382 (#40)
• feat(consoleui): show the protection level in plain words @Bugs5382 (#36)
• feat(keycustody): seal small secrets and write the escrow @Bugs5382 (#34)
• feat(init): serve init.sock and run as PID 1 @Bugs5382 (#27)
• feat(keycustody): initialize TPM or key-file custody and format the state @Bugs5382 (#32)
• feat(keycustody): port the TPM sealing and LUKS2 code @Bugs5382 (#29)
• feat(secureboot): read state, enrol org keys and apply the mismatch rule @Bugs5382 (#26)
• feat(init): decide boot phases and supervise the service table @Bugs5382 (#24)
• feat(switchroot): find the root by its verity hash @Bugs5382 (#21)
• feat(disk): write the installed layout and plan the first-boot partitions @Bugs5382 (#22)
• feat(kit): verify then build atomically, with the refusal suite @Bugs5382 (#18)
• feat(verify): check Authenticode, verity, the airgap bundle and the enrolment material @Bugs5382 (#16)
• feat(verify): verify signatures, the manifests and the layer digests @Bugs5382 (#14)
• feat(kit): add the build-time pins, the kit skeleton and the appliance manifest @Bugs5382 (#12)

🐛 Bug Fixes

• fix(osadmin): run one update apply or revert at a time @Bugs5382 (#404)
• fix(disk): mount the state and backup volumes without delayed allocation @Bugs5382 (#399)
• fix(product): follow every apply until its phases are up, and never let a stale ask act @Bugs5382 (#392)
• fix(bundle): refuse a wait the release's wait command refuses, and run every rendered wait @Bugs5382 (#383)
• fix(kubeapi): mint a new service account token when the API server refuses the cached one @Bugs5382 (#377)
• fix(productup): take a phase's workloads over from the stack an earlier version kept them in @Bugs5382 (#374)
• fix(productup): stop an unphased running product in the incoming slot's phase order @Bugs5382 (#372)
• fix(productup): stop the product by the running slot's spec, one phase at a time, the database last @Bugs5382 (#370)
• fix(init): run a service's pre-start once at a time; make k0s's image links safe @Bugs5382 (#368)
• fix(productup): quiesce an unphased product's switch workloads and never wait on product workloads at the cluster step @Bugs5382 (#365)
• fix(init): keep the ready line and earlier lines on the consoles at a claim @Bugs5382 (#363)
• fix(test): sample the phases after a power loss only once the box runs @Bugs5382 (#361)
• fix(edgefall,build): keep a failed product's reason across an edgefall restart; count every product input @Bugs5382 (#360)
• fix(test): read the phase pods line and check for sandbox errors after a power loss @Bugs5382 (#359)
• fix(bundle): give the MCP server its protected-resource metadata @Bugs5382 (#356)
• fix(osadmin): keep the self-signed :8443 certificate while it names every address @Bugs5382 (#354)
• fix(k0s): run the box's own copy of the CNI plugins @Bugs5382 (#342)
• fix(mcp): answer the MCP switch once the product is ready with it @Bugs5382 (#350)
• fix(shell): word the history help in plain terms @Bugs5382 (#352)
• fix(shell): keep prompt answers out of arrow-key recall @Bugs5382 (#348)
• fix(shell): ? lists what a command takes, Tab lists one per line, usage after errors, history @Bugs5382 (#331)
• fix(test): wait for the pushed event instead of a non-blocking read @Bugs5382 (#343)
• fix(test): check the :8443 fingerprint against the status answer @Bugs5382 (#341)
• fix(release): name a lab Base Web hotfix by its build label @Bugs5382 (#336)
• fix(edgefall): ask the box state every 45 seconds while the box runs @Bugs5382 (#325)
• fix(productup): wait for a spec-only change before the product counts as ready @Bugs5382 (#319)
• fix(units): a lab patch names its full release by the earlier name @Bugs5382 (#317)
• fix(edge): hold every request on 443 until the product is ready @Bugs5382 (#316)
• fix(osaudit): give a session's recording entries the outcome ok @Bugs5382 (#314)
• fix(keycustody): restore escrowed product keys into the box secrets @Bugs5382 (#312)
• fix(updates): don't offer a pages revert that can't change what serves @Bugs5382 (#308)
• fix(diskguard): say what a volume really grew, over hours of samples @Bugs5382 (#304)
• fix(shell): say a network change netd keeps at once is kept @Bugs5382 (#302)
• fix(rootshell): give busybox-safe disk lines in the root shell's help @Bugs5382 (#306)
• fix(shell): offer only the switches the product declares in mcp's help @Bugs5382 (#298)
• fix(import): drop the step log's colour codes from ...