Skip to content

v0.28.3

Choose a tag to compare

@paulca paulca released this 18 Oct 15:40

carlos v0.28.3 (platform 50f5b268, 2026-10-18)

  • Nothing changes for people using the CLI.

For operators

  • Roll the boxes first, then the console.

  • Coming from v0.28.1, read the v0.28.2 operator notes first. They all still apply.

  • carlos system install-channel --policy prepares a box that is already running for host claims. It puts the box's current release in both its copies, so the guard can be armed before a floor is published. That replaces the box's rollback copy, and the command says so. Nothing runs it on its own, and host claims stay off.

  • Every dormant switch stays off. Leave CARLOS_SWAP, CARLOS_MOVES_PHASE1, CARLOS_HOST_CLAIM, CARLOS_HOST_CLAIM_ORIGINS, CARLOS_HOST_CLAIM_RETIRED_LOCATIONS, CARLOS_CONSOLE_ID, CARLOS_REGION_HA, CONSOLE_APP_REGIONS, CARLOS_TEMPORARY_APPS and CARLOS_REQUIRE_POINTER_DIGEST unset, don't put CARLOS_BOX_REFERENCE=group in any host.env, and don't run carlos channels digests on.

Verify a download against SHA256SUMS.txt. SHA256SUMS.txt.sig is the ed25519 signature (base64) over that file, and carlos update checks it against its embedded key.