Skip to content

WolfStack v25.33.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Sep 11:46
· 63 commits to master since this release
v25.33.2
9af9f50

v25.33.2: shut native VMs down for their backup so the disk is not read while it changes

Backing up a running VM on a host without Proxmox or libvirt always
failed with "VM tar failed: tar: .qcow2: file changed as we read
it". The backup is meant to shut the VM down first, but it looked for
the VM under a process name and monitor socket that WolfStack stopped
using long ago. A running VM always looked stopped, so it was never shut
down and its disk was read while the guest was writing to it.

The backup now uses the same running check as the VM page. It presses
the ACPI power button through the VM's QMP monitor (SIGTERM for a VM
started before QMP support), waits up to 60 seconds, force-stops if it
must, and starts the VM again afterwards. If the VM cannot be stopped,
the backup refuses to run instead of copying a live disk.

Finding a VM's QEMU process now matches the exact name. Before, "vm1"
also matched "vm10", so force-stopping vm1 could kill vm10 as well. This
affected the VM page, backups and USB passthrough.

VM rows in the backup picker now say that a running VM is shut down for
its backup and started again.

Reported-by: RutgerDiehard
Co-Authored-By: CodeWolf paul@wolf.uk.com
Co-Authored-By: IntelligentWolf Ltd paul@wolf.uk.com

Verifying this release

Each binary is signed via cosign keyless OIDC (no key distribution — signing identity is the GitHub Actions workflow itself, anchored to the Sigstore Fulcio CA and the Rekor transparency log) and ships with a SLSA build provenance attestation.

Verify the cosign signature:

cosign verify-blob \
  --bundle wolfstack-x86_64.cosign.bundle \
  --certificate-identity-regexp 'https://github.com/intelligentwolf/WolfStack/\.github/workflows/release\.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  wolfstack-x86_64

Verify the build provenance:

gh attestation verify wolfstack-x86_64 --repo intelligentwolf/WolfStack

Verify the SHA-256 checksum:

sha256sum -c SHA256SUMS

Artifacts

  • wolfstack-x86_64 / wolfstack-aarch64 / wolfstack-armv7 — static musl binaries (Linux x86_64, ARM64 / Raspberry Pi 4+, and 32-bit ARM).
  • wolfstack-<arch>.cosign.bundle — cosign signature bundle (cert + signature + Rekor entry).
  • SHA256SUMS — checksums for both binaries.

For per-version history see CHANGELOG.md.

Assets 9
Loading