v2.0.0-beta.17

Motrix 2.0.0-beta.17

English | 简体中文

Motrix 2.0.0-beta.17 is the next Motrix Turbo beta intended for public
distribution only after every protected release gate passes. It fixes the
non-artifact failure observed after beta.16 had already published and signed
its two-registry container index, without moving or reusing the immutable
v2.0.0-beta.16 tag.

The beta.16 historical record
documents the successful desktop, GitHub prerelease, R2, native platform,
cross-registry index, provenance, SBOM, and signature stages, followed by the
HTTP 403 that prevented the final public runtime matrix from starting.

Release-gate recovery

• Removes Docker Hub repository-description mutation from the release
  workflow. Repository description and overview are publisher metadata, not
  versioned OCI artifacts, and their administrative access boundary is
  separate from image publication.
• Makes anonymous signature verification the final step of the single
  container finalize job. A successful finalize result and its verified digest
  can therefore hand off directly to the native public runtime matrix.
• Adds a workflow contract that rejects the removed Docker Hub login route,
  repository-description payload, or description step if they return to the
  security-critical release path.
• Keeps failures visible and fail-closed. The change does not use
  continue-on-error, does not weaken an artifact, signature, provenance,
  SBOM, platform, anonymous-pull, or runtime check, and does not broaden
  release access.

Native container publication

• Builds linux/amd64 on ubuntu-22.04 and linux/arm64 on
  ubuntu-22.04-arm. Each job proves its GitHub-hosted Linux runner and native
  architecture before Buildx starts. The container release path does not
  install or invoke QEMU.
• Pushes each successful platform only by its untagged, content-addressed OCI
  digest to Docker Hub and GHCR. A single architecture never receives the
  public version tag and cannot become the official release by itself.
• Anonymously pulls the exact staged digest from both registries and runs the
  complete Server runtime smoke on its native runner. Platform metadata is
  emitted only after both registry smokes succeed.
• Binds each platform record to the exact version, source commit, workflow run
  and attempt, native runner identity, raw OCI index hash, image manifest,
  attestation manifest, max-level provenance, and non-empty SPDX SBOM.
• Allows the single finalize job to proceed only after the complete
  amd64/arm64 set succeeds. Missing, duplicate, unexpected, cross-wired,
  shared, ambiguous, conflicting, or future-attempt data fails closed before
  either version tag can be created.
• Rechecks both immutable version tags immediately before finalization. A clean
  run creates both indexes; a rerun resumes an identical complete result or
  repairs one missing registry from the verified existing index. A conflicting
  immutable tag fails closed.
• Requires Docker Hub and GHCR to expose the same final index digest, platform
  manifests, attestation manifests, provenance, and SBOM set before signing.
  Both signatures are then verified anonymously.
• Runs the complete final public Server runtime smoke on native amd64 and arm64
  runners against the exact signed digest in both registries.
• Advances stable floating aliases only in the last recovery-safe job after
  every build, index, signature, provenance, SBOM, anonymous pull, and runtime
  gate passes. Beta releases publish only their immutable version tag, so
  beta.17 does not update latest, stable, or another stable alias.

The GitHub prerelease, R2 update feed, container registries, and Snap Store
remain independently gated publication channels. Their individual safety and
recovery rules are strict, but this release does not claim cross-channel
atomicity.

Snap beta policy

Snap is not part of the beta.17 distribution. Protected prerelease Snap runs
stop after source validation, so they do not build Snap artifacts, upload
Store revisions, or change latest/edge.

Highlights

• A ground-up desktop rebuild with Electron 43, React 19, and TypeScript 7,
  including a customizable Dashboard, dark mode, a cross-platform application
  menu, and clearer task-inspector feedback.
• One host-neutral download core for both the desktop app and the Node/Web
  Server, with SQLite session recovery, tracker management, UPnP/NAT-PMP, and
  HTTP, FTP, BitTorrent, and magnet support.
• MDXP-based integration for the official CLI and browser handoff, including
  local discovery and device-code pairing for remote Server instances.
• A QuickJS plugin sandbox with capability consent, bundled builtin plugins,
  and an in-app plugin marketplace.
• Persistent multi-platform Server containers for NAS and home-server
  deployments, published only after the complete native architecture set and
  every public verification gate pass.

Before testing

This is prerelease software. Back up existing Motrix application data and
downloads before installing it. Migration from Motrix v1 data has not yet been
validated, so do not use your only copy of v1 data with this beta.

When practical, test v2 in parallel using a separate OS account, machine, or
Docker data directory. Do not rely on this beta for your only copy of important
downloads.

Planned downloads after release gates pass

Distribution	Architectures	Planned output
macOS 12 or later	arm64 (Apple Silicon), x64 (Intel)	DMG and ZIP
Windows	x64	Unsigned NSIS installer (.exe) and ZIP
Linux	x64, arm64	DEB and RPM
Flatpak Native Host companion	linux/x64, linux/arm64	Motrix-Native-Host-2.0.0-beta.17-linux-<arch>.tar.gz
Docker Hub / GHCR	linux/amd64, linux/arm64	Immutable 2.0.0-beta.17 tag in both registries
Snap Store	—	Not published for this beta

After every container gate passes, the versioned image references will be
docker.io/motrixapp/motrix-server:2.0.0-beta.17 and
ghcr.io/agalwood/motrix-server:2.0.0-beta.17. See the
Docker Server deployment guide
for storage, networking, and upgrade guidance.

Known distribution limits

• AppImage is not published for this beta.
• Flatpak is validated separately and is not published by the release tag;
  the GitHub prerelease includes its Native Host companion archives.
• Windows arm64 and all 32-bit packages are not available.
• Windows packages are unsigned and may trigger a Windows SmartScreen warning.
  Download them only from the official GitHub prerelease after it is published.
• Beta container tags are immutable and do not update latest, stable, or
  other stable floating tags.
• Snap is not published for this beta. Prerelease Snap runs stop after source
  validation without building or publishing Snap artifacts.

Feedback

Please report reproducible problems through
GitHub Issues. Include your
operating system, architecture, package type, and the steps needed to reproduce
the issue.

What's Changed

• fix(release): unblock container runtime verification by @agalwood in #1868

Full Changelog: v2.0.0-beta.16...v2.0.0-beta.17