v0.5.0

What's changed

Features

• observability suite, Pages, and hardened git deploys (#1223) by @thegdsks

Install

Fresh install on a Linux host, pinned to this release:

curl -fsSL https://raw.githubusercontent.com/glincker/levelrail/main/install.sh | sudo env LEVELRAIL_VERSION=v0.5.0 sh

Upgrade an existing install in place (keeps the unit file and data):

curl -fsSL https://raw.githubusercontent.com/glincker/levelrail/main/install.sh | sudo env LEVELRAIL_VERSION=v0.5.0 sh -s upgrade

Docker Compose: pin the image tag in docker-compose.yml:

services:
  levelrail:
    image: ghcr.io/glincker/levelrail:v0.5.0

Container images

Multi-arch (linux/amd64, linux/arm64), signed with cosign, SBOM and provenance attached. Also tagged v0.5, latest at release time (moving tags).

Image	Tag	Digest
ghcr.io/glincker/levelrail	v0.5.0	sha256:70bdf1126f5d5093e4ef4b726a707a0e7f4ac7ce3ade053739fd39751e3ca0bb
ghcr.io/glincker/levelrail-agent	v0.5.0	sha256:346cf4e8835d95ac08414116d51071a8cd56b53469e476bff12d983064404a13

Verify

Binaries: check downloads against checksums.txt:

gh release download v0.5.0 --repo glincker/levelrail --pattern 'levelrail-linux-amd64' --pattern checksums.txt
sha256sum --ignore-missing -c checksums.txt

Images: verify the keyless signature was made by this repository's release workflow:

cosign verify ghcr.io/glincker/levelrail@sha256:70bdf1126f5d5093e4ef4b726a707a0e7f4ac7ce3ade053739fd39751e3ca0bb \
  --certificate-identity-regexp '^https://github\.com/glincker/levelrail/\.github/workflows/release\.yml@refs/(heads/main|tags/v.+)$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Contributors

Thanks to @thegdsks.

Full changelog: v0.4.0...v0.5.0 | Release page | Installing | Upgrading | Verifying signatures