Repository navigation
Release v0.1.0
Nexus v0.1.0
What's Changed
0.1.0 (2026-03-08)
Features
- cni: manage firewall forwarding on init/close (198e93c)
- nexus-cni-exec: add iptables forwarding management (2d8bcc8)
Bug Fixes
- containerd: wait for I/O copy goroutines before reading exec output (a3fdde5)
- dns: change TLD from .nexus.local to .nexus (b665aa2)
- e2e: keep all temp dirs within the repo (4bf14b5)
- nexus-cni-exec: add INPUT chain rules for VM → host traffic (fc71e94)
- nexus-cni-exec: match host firewall iptables backend (5bec1de)
- nexus-cni-exec: prefer iptables-nft and handle lock file (5bc89e8)
- nexus-cni-exec: raise CAP_NET_ADMIN before iptables calls (e5613ba)
Tests
- e2e: add networking tests and fix E2E capability handling (0c78613)
- e2e: add TCP outbound connectivity test (fa7976b)
Documentation
- add firewall forwarding design and implementation plan (9dc3874)
- document automatic firewall forwarding (4321f41)
Installation
Linux (x86_64)
wget https://github.com/Work-Fort/Nexus/releases/download/v0.1.0/nexus-linux-amd64.tar.xz
tar xf nexus-linux-amd64.tar.xz
sudo cp nexus-linux-amd64/* /usr/local/bin/
sudo setcap cap_sys_admin+ep /usr/local/bin/nexus-netns
sudo setcap cap_net_admin,cap_sys_admin+ep /usr/local/bin/nexus-cni-exec
sudo setcap cap_sys_admin+ep /usr/local/bin/nexus-quota
sudo setcap cap_sys_admin,cap_fowner+ep /usr/local/bin/nexus-btrfs
sudo setcap cap_net_bind_service+ep /usr/local/bin/nexus-dnsLinux (ARM64)
wget https://github.com/Work-Fort/Nexus/releases/download/v0.1.0/nexus-linux-arm64.tar.xz
tar xf nexus-linux-arm64.tar.xz
sudo cp nexus-linux-arm64/* /usr/local/bin/
sudo setcap cap_sys_admin+ep /usr/local/bin/nexus-netns
sudo setcap cap_net_admin,cap_sys_admin+ep /usr/local/bin/nexus-cni-exec
sudo setcap cap_sys_admin+ep /usr/local/bin/nexus-quota
sudo setcap cap_sys_admin,cap_fowner+ep /usr/local/bin/nexus-btrfs
sudo setcap cap_net_bind_service+ep /usr/local/bin/nexus-dnsArch Linux (AUR)
yay -S nexus-virtVerification
wget https://github.com/Work-Fort/Nexus/releases/download/v0.1.0/SHA256SUMS
sha256sum -c SHA256SUMS --ignore-missingBuilt automatically by Nexus CI