Skip to content

DevOps Shield 6.0.0

Choose a tag to compare

@devopsshield-bot devopsshield-bot released this 12 Aug 11:14

DevOps Shield 6.0.0

The first release that you can install without being handed anything. Every
component ships through a public channel: a self-contained Docker Compose
bundle, a Helm chart on Docker Hub, and the dos command line interface
through Homebrew, Scoop and winget.

Everything below was executed against this release before it was written down.

Install

Docker Compose — the fastest way to see it running

Downloads a signed bundle, verifies it, and brings the whole stack up.

VERSION=6.0.0
curl -fsSLO https://github.com/devopsshield/devops-shield/releases/download/v${VERSION}/devopsshield-compose-${VERSION}.tar.gz
curl -fsSLO https://github.com/devopsshield/devops-shield/releases/download/v${VERSION}/SHA256SUMS
grep "devopsshield-compose-${VERSION}.tar.gz$" SHA256SUMS | sha256sum -c -
tar -xzf devopsshield-compose-${VERSION}.tar.gz
cd devopsshield-compose-${VERSION}
./dos-compose.sh up

On Windows, the same bundle ships a PowerShell entry point:

.\dos-compose.ps1 up

Then ./dos-compose.sh status to see what is running, and
./dos-compose.sh uninstall --yes to remove it. uninstall deletes the data
volumes unless you pass --keep-data.

Helm

helm install devopsshield \
  oci://registry-1.docker.io/devopsshield/devopsshield-chart \
  --version 6.0.0

The chart is named devopsshield-chart, not devopsshield. The container
images keep their existing names, devopsshield/devopsshield and
devopsshield/devopsshield-apihost, and nothing you render changes as a
result of the chart's name.

Command line interface

brew install devopsshield/tap/dos
scoop bucket add devopsshield https://github.com/devopsshield/scoop-bucket; scoop install dos
winget install DevOpsShield.dos

Or take the self-contained archive directly; no .NET runtime is required on
the target machine. Per-platform archives, download commands and checksum
verification are listed in the release assets and in the workflow summary for
this release.

What is in this release

  • A Docker Compose bundle that installs, upgrades, rolls back and uninstalls
    from a single script, in both shell and PowerShell form.
  • A Helm chart published as an OCI artifact on Docker Hub, signed with Cosign.
  • dos for Windows x64, Linux x64, Linux arm64, macOS Intel and macOS Apple
    silicon, published to Homebrew, Scoop and winget.
  • SPDX and CycloneDX SBOMs for every published artifact.
  • Cosign signatures and build provenance attestations for the container
    images and the chart.

Verifying what you downloaded

Every asset is listed in SHA256SUMS. Tags are mutable; the digest references
published in this release's workflow summary are not, and they are the ones
Cosign signed. To verify a reference:

cosign verify \
  --certificate-identity-regexp '^https://github\.com/devopsabcs-engineering/Cad4DevOps-Cad4DevOps/\.github/workflows/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  <reference>

The chart published with this release is
registry-1.docker.io/devopsshield/devopsshield-chart@sha256:4e10ebb363482f6e912565f35a729e2de542f2530489390f93fc2d309fe3b9a6,
and that command is exactly what the release pipeline ran against it before
publishing this page.

Upgrading

There is no supported in-place upgrade path from an earlier major version.
Install 6.0.0 alongside your existing deployment and cut over.