start-cli v2.6.0

Highlights

• Added start-cli auth token create --name <name>, which creates a StartOS bearer token for API clients and prints it once.

• Add --trust to package installation and OS-update commands to explicitly override signer trust. On StartOS 0.4.1 and later, these operations require an enabled trusted signer by default; signature and integrity verification remain mandatory with the override.

• Diagnostic updates no longer require a registry argument that had no effect.

• start-cli auth session kill takes --pubkey <key> and --token <id> for the sessions to end, in place of positional session IDs.

• Add disk format to erase a drive and prepare it as a single Btrfs partition for StartOS backups.

• Preserve multiline image environment values in JSON metadata for packages using Start SDK 3.1.2 or later.

• WireGuard configs can use a separate endpoint on NAT'd StartTunnel hosts.
  tunnel device show-config --endpoint supplies an IPv4, IPv6, or DNS endpoint
  independently of the local WAN assignment. Requires StartTunnel 1.5.0 or later.

Security

• Backup mount, backup information, package restore, and CIFS target add/update commands read passwords from a hidden prompt instead of positional arguments. Update automation to supply BACKUP_PASSWORD or CIFS_PASSWORD; PASSWORD remains the separate CLI authentication credential.

Full changelog

[2.6.0]

Added

• Added start-cli auth token create --name <name>, which creates a StartOS bearer token for API clients and prints it once.

• Publish and promote localized OS release notes by passing a JSON locale map to registry os version add.

• Add --trust to package installation and OS-update commands to explicitly override signer trust. On StartOS 0.4.1 and later, these operations require an enabled trusted signer by default; signature and integrity verification remain mandatory with the override.

• Diagnostic updates no longer require a registry argument that had no effect.

• Add disk format to erase a drive and prepare it as a single Btrfs partition for StartOS backups.

• OS registry publishing accepts a build Git hash and a security-update flag, and promotion preserves both. Release operations can reject a source image that changed while a release was being prepared.

Changed

• start-cli auth session kill takes --pubkey <key> and --token <id> for the sessions to end, in place of positional session IDs.

Fixed

• Preserve multiline image environment values in JSON metadata for packages using Start SDK 3.1.2 or later.

• WireGuard configs can use a separate endpoint on NAT'd StartTunnel hosts.
  tunnel device show-config --endpoint supplies an IPv4, IPv6, or DNS endpoint
  independently of the local WAN assignment. Requires StartTunnel 1.5.0 or later.

Security

• Backup mount, backup information, package restore, and CIFS target add/update commands read passwords from a hidden prompt instead of positional arguments. Update automation to supply BACKUP_PASSWORD or CIFS_PASSWORD; PASSWORD remains the separate CLI authentication credential.

start-cli Checksums

SHA-256

7cd3e9bd557a51d142fd2406324ddfb45c12ac45c40d2322240f4cb0c3b29b8e  start-cli_aarch64-linux
5a1456fe683fb73c85e81e1e4360612b93ef6afdb129c3ccc73e9652e28a5a38  start-cli_aarch64-macos
e850af7bbc129056b404b616c475c8768c21b6488514c0929ded64c5c525443c  start-cli_riscv64-linux
b13c65a49055d96fc578e837ecb5c37516bf1a2b241282d41ee291cd56e772e5  start-cli_x86_64-linux
61e5953c227c301f0bc5b576176010c3e0b46568ca765eec6048fb1931ee4388  start-cli_x86_64-macos

BLAKE-3

940accd065a4fe525a56923ee320b983ffd0d9a9652f1b2406c7d50eecba495d  start-cli_aarch64-linux
17c61125079fcde730aa85986e99316f47ee807febb2a24353b6ace463a7ac57  start-cli_aarch64-macos
e7f129d772f8561ba2be0b3a9b80cdb799a79aef2888edc00d2eabdd30a09b41  start-cli_riscv64-linux
665afde75b400ac74bee4f1032710447709c7ac96275a2315a887c000bc2dcb2  start-cli_x86_64-linux
6780bb03f34be5f8bb49e86c318497b7b29173486458897d738bce612256f92a  start-cli_x86_64-macos

start-cli packages Checksums

SHA-256

11098e5330f22d8cd43f87b3f9e6787368fc7a08c103f424aac8c4c9fbec91f3  start-cli_2.6.0_amd64.deb
fc208a1b43e881fa76b14d241316f077f4a93970ccd5828bf19e1f04331ae9ce  start-cli_2.6.0_arm64.deb
3b875d9fc67e61f48a588b11953d99b9b8354ab75cb2e31fa4f3099e2e4a01af  start-cli_2.6.0_riscv64.deb

BLAKE-3

cf63d91181d8b1be6295f68056635ade9543eecc7c472a12c3446fd12ea08690  start-cli_2.6.0_amd64.deb
12cc19ac352f6203a43a0daf68be7fec6ba0ac8d981e8bf1dc2068bebca89722  start-cli_2.6.0_arm64.deb
7d73e8f644b96b440fa48c6b0dcb91c70ecf94e69c7aecff8afa106eb8ad2c00  start-cli_2.6.0_riscv64.deb