Nixorium v2.0.0-beta.3

Added

• A Raw GitHub install.sh entrypoint that selects a tagged release, prepares
  the private deployment Git repository, and installs the controller from it.

Changed

• Rewrote the deployment upgrade guide with an explicit release example,
  current Nix Flake commands, complete validation, and the Git merge workflow.
• Completed the project-wide Nixorium rebrand across repositories, Flake
  inputs, installer identifiers, command names, desktop identifiers, and the
  Agent Skill.
• Adopted nixorium.org as the canonical website and installer entrypoint,
  with Raw GitHub documented as the bootstrap fallback.

Breaking

• Private deployments must rename their upstream input to nixorium and use
  github:giovantenne/nixorium/<release> when moving to this release.
• Installer environment variables now use the NIXORIUM_ prefix.

Nixorium v2.0.0-beta.2

Added

• A reusable lib.mkLab Flake API with typed lab configuration validation.
• A site Flake template for private per-lab deployment repositories.
• Extension points for shared, controller, client, host-specific and netboot modules.
• Configurable logo, backgrounds, MIME defaults, VS Code settings and public key paths.
• A standalone netboot installer bundle containing the effective downstream configuration.
• A portable repository-maintainer Agent Skill, preinstalled by the site template for Codex, OpenCode, Claude Code and Pi.

Changed

• Operational Harmonia and PXE helpers are exposed as Flake apps for downstream repositories.
• Lab-specific configuration can now update the upstream through a pinned Flake input instead of Git merges.
• The upstream screensaver logo is generic and site-specific printer drivers are delegated to deployment modules.

Nixorium v2.0.0-beta.1

Added

• Per-user rootless Docker daemons with declarative subordinate UID/GID ranges.
• A writable ~/.local/npm global prefix, available in every login session for tools such as Codex and Claude Code.
• An opt-in veyonNativeHosts canary for Veyon 4.11's PipeWire/XDG portal Wayland backend.
• Setuid wrappers for Veyon's authentication and Wayland input helpers.

Changed

• Updated nixpkgs from NixOS 25.11 to 26.05 and refreshed all flake inputs.
• Updated Veyon from the local 4.10.0 derivation to its official 4.11.0 flake.
• Updated the GNOME Remote Desktop reconnect patch for GNOME 50's connection throttler.
• Switched development packages to the current stable Node.js and PHP aliases.
• Migrated the controller sleep policy to NixOS 26.05's structured systemd settings.
• Disabled automatic ZFS root-pool imports because the shared Disko layout uses Btrfs.
• Excluded Docker data, the npm cache, and global npm tools from student home snapshots.

Security

• Removed every normal user from the root-equivalent docker group.

Breaking

• Docker now uses a per-user rootless socket and storage. Existing rootful images and containers are not migrated.

Nixorium v1.0.0

Added

• Declarative generation of controller and student workstations with Nix Flakes.
• UEFI installation and Btrfs partitioning through Disko.
• Offline client installation through ProxyDHCP, TFTP, HTTP netboot, and a local Harmonia cache.
• Multi-host deployment through Colmena.
• Parameterized lab settings and a public labMeta flake output for operational scripts.
• GNOME Wayland student desktop with development tools and classroom defaults.
• Boot-time student home reset with five recoverable Btrfs snapshots.
• Veyon classroom management with pre-generated lab topology and GNOME Remote Desktop integration.

Security

• Key-only SSH access and immutable declarative users.
• Separate public and private material for SSH, Harmonia, and Veyon.