SibillaOS v0.2.0

The operability release: everything needed to run SibillaOS beyond the first demo. Upgrading from 0.1.0 means reinstalling; an APT repository for in-place package updates is on the roadmap.

What is new

HTTPS on the gateway. sudo sibilla-tls enable myserver.lan switches the gateway to HTTPS with a locally trusted certificate from Caddy's internal CA; --acme you@example.org uses Let's Encrypt for public hostnames instead. sibilla-tls disable returns to plain HTTP. The proxy now rewrites the upstream Host header, fixing a bug where Ollama's DNS-rebinding protection silently rejected every authenticated request as soon as the gateway served a hostname.

Editor and agent hookup. sudo sibilla-connect prints ready-to-paste configuration for VS Code (Continue and Cline), aider and any OpenAI-compatible client, wired to your endpoint, API key and served model, including the CA certificate note when TLS runs in local-CA mode.

Chat interface. sudo sibilla-webui enable starts Open WebUI on port 3000 as an opt-in container; disable stops it and keeps it off across reboots.

Multi-model serving. The gateway passes the model field through, so several models can be pulled with sibilla-model use and addressed by name in the same API.

Self-contained install. llmfit now ships as a Debian package built from the pinned upstream release, removing the last install-time dependency on an external install script.

Security policy. SECURITY.md documents the private disclosure channel and the project's current security posture; the roadmap gained a dedicated security track (default firewall profile, unit sandboxing checks, automatic security updates, signed catalog).

What has been verified

Every commit goes through a pipeline that builds the ISO, boots it under BIOS and UEFI, performs a complete unattended installation, reboots into the installed system, downloads a model and obtains a real chat completion through the authenticated gateway. New in this release's pipeline: the TLS path (certificate issuance from the local CA, rejection of missing and wrong API keys, return to plain HTTP), a second model pulled and queried by name, the connection kit output, the rendered gateway configs validated by Caddy itself, the container units validated by the podman Quadlet generator, and the Open WebUI plumbing (unit generation, flag gating, enable/disable). Engine versions are pinned (Ollama 0.31.1, llmfit 0.9.36) and the Ubuntu base image is verified against its official checksums during the build.

Not covered by the pipeline: the Open WebUI web interface itself (the container image is too large to pull in CI; the packaging around it is tested, the login-and-chat flow is not) and the vLLM path on physical datacenter GPUs. Reports on both are welcome.

Installation

GitHub caps release assets at 2 GiB, so the ISO is published in parts. Download all .part files and SHA256SUMS, reassemble, verify, then write the image to a USB drive:

$ cat sibillaos-0.2.0-amd64.iso.part* > sibillaos-0.2.0-amd64.iso
$ sha256sum -c SHA256SUMS
$ sudo dd if=sibillaos-0.2.0-amd64.iso of=/dev/sdX bs=4M status=progress

Boot from the drive and select "Install SibillaOS (automated)". A wired network connection during installation is recommended: the model download starts during install and resumes at first boot if interrupted. Minimum practical requirements: 8 GB of RAM, 25 GB of disk, and either a supported GPU or patience with CPU inference.

Known limitations

The default gateway mode is still plain HTTP with a mandatory bearer token; enable TLS with sibilla-tls before exposing the port beyond the machine. Open WebUI listens on all interfaces when enabled; treat port 3000 accordingly. The curated catalog only contains permissively licensed, non-gated models; gated models (Llama, Gemma) require a Hugging Face token and are not supported yet. Sharded GGUF repositories are not supported by the Ollama pull path.

Licensing

SibillaOS components are licensed under Apache-2.0. The image bundles vLLM (Apache-2.0), Ollama (MIT) and llmfit (MIT); Open WebUI (BSD-3-Clause with a branding clause in recent versions) is pulled at the user's request and is not part of the image. NVIDIA drivers are installed from the Ubuntu restricted component and are not redistributed by this project. Models are downloaded by the user from Hugging Face under their respective licenses.

Checksums

See the attached SHA256SUMS file.

What's Changed

• release: v0.2.0 - operability (TLS, multi-model, connect kit, WebUI) by @engineering87 in #1

New Contributors

• @engineering87 made their first contribution in #1

Full Changelog: v0.1.0...v0.2.0