WolfStack v25.23.4
v25.23.4: the backup picker no longer hides containers a scheduled run would archive
list_available_targets still enumerated native LXC with a bare lxc-ls,
which only sees the default lxcpath, while backup_all now reads the full
container list — so a container on any other registered storage path could
be archived by a scheduled "back up everything" run without ever appearing
in the picker. Both read the same source now.
Also corrects the account in pve_task_running_for_lxc's doc comment of
what wolf1's open task-index entries actually are, and renames the lock
sweep to sweep_stale_lxc_locks so its name does not promise the QEMU
guests it has never covered.
Co-Authored-By: CodeWolf paul@wolf.uk.com
Co-Authored-By: Wolf Software Systems Ltd paul@wolf.uk.com
Claude-Session: https://claude.ai/code/session_01LsQe76ei9PparByAYL3vUn
Verifying this release
Each binary is signed via cosign keyless OIDC (no key distribution — signing identity is the GitHub Actions workflow itself, anchored to the Sigstore Fulcio CA and the Rekor transparency log) and ships with a SLSA build provenance attestation.
Verify the cosign signature:
cosign verify-blob \
--bundle wolfstack-x86_64.cosign.bundle \
--certificate-identity-regexp 'https://github.com/intelligentwolf/WolfStack/\.github/workflows/release\.yml@.*' \
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
wolfstack-x86_64
Verify the build provenance:
gh attestation verify wolfstack-x86_64 --repo intelligentwolf/WolfStack
Verify the SHA-256 checksum:
sha256sum -c SHA256SUMS
Artifacts
wolfstack-x86_64/wolfstack-aarch64/wolfstack-armv7— static musl binaries (Linux x86_64, ARM64 / Raspberry Pi 4+, and 32-bit ARM).wolfstack-<arch>.cosign.bundle— cosign signature bundle (cert + signature + Rekor entry).SHA256SUMS— checksums for both binaries.
For per-version history see CHANGELOG.md.