Skip to content

clio-relay 1.4.19

Choose a tag to compare

View all tags
@JaimeCernuda JaimeCernuda released this 21 Jul 11:14
v1.4.19
a3a90d1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

clio-relay 1.4.19

This patch makes upgrades from older, pre-generation cluster installations safe and usable. When an existing bootstrap receipt cannot prove the currently installed relay provider, clio-relay now stages the exact incoming release wheel in a private area, verifies its artifact and persistent-tool identity, and uses that attested candidate only to plan and perform the generation migration. JARVIS, clio-kit, frp, uv, hardware-profile, and retained execution checks remain strict.

It also restores portable Linux release validation across uv-managed Python layouts and Linux kernels/libcs with different pidfd exposure. Bootstrap candidate execution now uses an isolated environment, a pinned private uv copy, descriptor-bound Python execution, crash-recoverable scratch cleanup, and symlink-safe filesystem operations.

Observation deadlines remain observation-only: a queued HPC job keeps the same durable relay and scheduler identities and is never failed, canceled, or resubmitted when a client stops waiting. SSH transport validation now applies the same rule to remote session startup, retaining its exact operation, route, status, and retry selectors until the session is ready.

Assets 5
Loading