v0.19.0

deskosctl v0.19.0 (builds an image) and deskos v0.19.0 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.19.0; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• feat(desktop): same desktop, browser, tools and layout (#359)
• fix(iso): read the published tag as root, where the login is (#358)
• fix(iso): a registry hiccup must not read as not published (#357)
• fix(supply-chain): accept CVE-2026-98432 and decouple the installers (#356)
• feat(rhel-10): a PackageSet can install the Firefox RPM (#352)

and 33 more — full list.

Moving from an older release? docs/migrations.md.

v0.18.0

deskosctl v0.18.0 (builds an image) and deskos v0.18.0 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.18.0; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• fix(gnome): write login-screen defaults to the database GDM reads (#247)
• feat(deskosctl): move a pinned resource with a curated rule (#245)
• feat(deskosctl): check every checksum-pinned resource against upstream (#244)
• feat(identity): add a disposable Samba AD DC and the AD join (#238)
• feat(identity): log in at GDM as the directory user (#237)

and 10 more — full list.

Moving from an older release? docs/migrations.md.

v0.17.2

deskosctl v0.17.2 (builds an image) and deskos v0.17.2 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.17.2; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• fix(flatpak): stop the preinstall unit within 20s (#211)

Moving from an older release? docs/migrations.md.

v0.17.1

deskosctl v0.17.1 (builds an image) and deskos v0.17.1 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.17.1; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• fix(flatpak): refresh appstream and retry the preinstall unit until it succeeds (#209)
• feat(promotion): move one digest to stable with a recorded approval (#202)
• feat(vm): close the remaining Tier B coverage gaps (#197)
• feat(evidence): add digest-scoped repair and deletion (#194)
• fix(lifecycle): give the guest enough disk for the staged image (#192)

and 4 more — full list.

Moving from an older release? docs/migrations.md.

v0.17.0

deskosctl v0.17.0 (builds an image) and deskos v0.17.0 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.17.0; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• Distrust a CA as image intent, not as a script (#118)
• Write an image-owned identity summary into the image (#115)
• Mirror the Fedora base into DeskOS's namespace (#116)
• Record the tested artifact identity in CI (#114)
• Allow a time-bound scheduled image apply (#113)

Moving from an older release? docs/migrations.md.

v0.16.0

deskosctl v0.16.0 (builds an image) and deskos v0.16.0 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.16.0; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• Model default applications and XKB options (#112)

Moving from an older release? docs/migrations.md.

v0.15.0

deskosctl v0.15.0 (builds an image) and deskos v0.15.0 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.15.0; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• Retire AlmaLinux and Fedora from shipped platforms (#111)
• Ignore generated goldens in Renovate (#109)
• Update docker.io/library/golang:1.27 Docker digest to f20d83a (#107)
• Add design guidance to AGENTS.md (#106)
• Do not autoremove dependencies when removing packages (#105)

and 4 more — full list.

Moving from an older release? docs/migrations.md.

v0.14.2

deskosctl v0.14.2 (builds an image) and deskos v0.14.2 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.14.2; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• deskos-look: put minimize, maximize and close on the right (#100)
• installer-iso: set the kickstart hostname to deskos (#99)
• Update docker.io/library/golang:1.27 Docker digest to f241642 (#92)
• Scope the pin check and build only the legs a change needs (#96)
• Put the flow and composition diagrams back at the top of the README (#95)

Moving from an older release? docs/migrations.md.

v0.14.1

deskosctl v0.14.1 (builds an image) and deskos v0.14.1 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.14.1; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• Install deskos in /usr/bin, repair Flatpak before preinstall, and pin the released Fedora 45 compose (#98)
• Accept GO-2026-6770 on the AlmaLinux base, reviewed (#94)
• Boot Fedora 45 in CI and deliver the tray extension as a pinned artifact (#91)
• Support Fedora 45 and retire Fedora 44 (#90)
• Name the two steps in the gate after what they check (#89)

and 8 more — full list.

Moving from an older release? docs/migrations.md.

v0.14.0

deskosctl v0.14.0 (builds an image) and deskos v0.14.0 (runs on a machine), for linux/amd64, with the DeskOS resources.
deskosctl is also published as a scanned, signed container at quay.io/deskos/deskosctl:v0.14.0; verify the downloads with sha256sum -c SHA256SUMS.

Changes

• Ubuntu leaves Core, and Core says only what it still verifies
• Draw the platforms Core ships, and match the text to the picture
• Add ADR 0020 to the index
• Decide that Ubuntu lives in its own repository
• Keep a customer's name out of this repository's documents

and 13 more — full list.

Moving from an older release? docs/migrations.md.