Skip to content

0.1.18

Choose a tag to compare

@dgprivate dgprivate released this 19 Aug 15:01
· 37 commits to main since this release

First release published as a container image.

services:
  kronoterm2mqtt:
    image: hausbit/kronoterm2mqtt:0.1.18

Built for linux/amd64 and linux/arm64, so a server and a Raspberry Pi take the same tag. 26 MB compressed.

What is in it

  • Modbus resilience: retries with reconnect, tolerance for gateways that greet a new connection with their MAC address, and an undefined register value no longer takes the publish loop down
  • a health endpoint on 127.0.0.1:8099 with docker compose exec kronoterm2mqtt health, and a watchdog that ends the process after a long outage so the restart policy takes over
  • hardened image: Alpine, unprivileged UID 65532, all capabilities dropped, read-only root filesystem, no package managers, base pinned by digest
  • Python 3.14 with every dependency at its current release
  • an SBOM at /usr/share/kronoterm2mqtt/sbom.cdx.json, registry SBOM and provenance attestations, and a keyless Sigstore signature
  • 139 tests, 83% coverage

Verify what you pulled

cosign verify hausbit/kronoterm2mqtt:0.1.18 \
  --certificate-identity-regexp '^https://github.com/.+/.github/workflows/publish-image.yml@.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

See security/README.md for what is and is not claimed.