Version 4.13.2

Fixed

• Regression causing web notifications to be sent repeatedly.
• Fixed by the update of jlesage/baseimage to version 3.11.11:
  • logmonitor leaking zombie send processes when a matching log line repeats.

Version 4.13.1

Fixed

• Control bar auto-closing when host clipboard synchronization is enabled.
• Audio playback re-enabling itself after being muted.
• Web interface robustness and security issues.
• Fixed by the update of jlesage/baseimage to version 3.11.10:
  • Account management tools replacing account database symbolic links with regular files.
  • Installation of Debian-based packages that call account management tools via absolute paths under /usr/bin.

Changed

• Changed by the update of jlesage/baseimage to version 3.11.10:
  • Updated shadow-rs to version 0.2.1.
  • Primary group ID (GROUP_ID) is now always included in the service supplementary groups list.

Version 4.13.0

Added

• Option to control host clipboard synchronization (via environment variable and web UI toggle).
• Option to allow web authentication without secure connection for reverse-proxy edge cases.

Fixed

• Web authentication security and robustness issues.
• Web file manager path validation and access control issues.
• Audio recorder stability and correctness issues.
• Web services reliability issues.
• Browser notification issues:
  • Permission prompt failing when requested during page load.
  • Notification updates creating a new toast instead of replacing the existing one.
• Fixed by the update of jlesage/baseimage to version 3.11.9:
  • Incorrect handling of logmonitor target debouncing when it is not set.
  • Incorrect interval calculation in the container init process for the yearly and monthly service interval keywords.

Changed

• Changed by the update of jlesage/baseimage to version 3.11.9:
  • Docker secrets now take precedence over environment variables set by other means.
  • Users definition: password is hashed via stdin so it no longer appears in process listings.
  • Applied robustness improvements to the container init process.

Version 4.12.6

Added

• Added by the update of jlesage/baseimage to version 3.11.8:
  • Users definition: ability to define password.
  • Users and groups definition: ability to override name.

Fixed

• Fixed by the update of jlesage/baseimage to version 3.11.8:
  • Regression causing container startup failure when the container engine automatically mounts files under /run.
  • Users definition: password field not set to x.

Changed

• Changed by the update of jlesage/baseimage to version 3.11.8:
  • Read-only filesystem support now requires exposing /run as a tmpfs.

Version 4.12.5

Added

• Image based on Alpine 3.24.

Removed

• Image based on Alpine 3.17 (reached end of support on 2024-11-22).

Version 4.12.4

Fixed

• Fixed by the update of jlesage/baseimage to version 3.11.6:
  • sed-patch error while handling read-only files.

Version 4.12.3

Fixed

• Maintain DISPLAY environment variable compatibility across various X11 clients while continuing to prevent unintended connections to the host X server.

Version 4.12.2

Added

• Image based on Ubuntu 26.04.
• Added by the update of jlesage/baseimage to version 3.11.5:
  • Default group definitions for Debian-based distributions.

Fixed

• Force clients to use the local X display to avoid connecting to the host X server in Docker host network mode.
• Fixed by the update of jlesage/baseimage to version 3.11.5:
  • Installation of Debian-based packages at runtime and during container builds.

Changed:

• Changed by the update of jlesage/baseimage to version 3.11.5:
  • Set default value for the HOME internal environment variable.
  • Home directory of the app user is now set in /etc/passwd based on the HOME environment variable.
  • Internal container environment variables are now also loaded when logging in with Bash.

Version 4.12.1

Fixed

• Fixed by the update of jlesage/baseimage to version 3.11.4:
  • Installation of Debian-based packages during container builds.

Changed

• Changed by the update of jlesage/baseimage to version 3.11.4:
  • Handle the group shadow password file on distros that support it.

Version 4.12.0

Added

• Ability to run the container with read-only filesystem.
• Ability to configure the shell used by the web terminal.
• Enabled window shadows to improve support of GTK4 applications.

Changed

• Switched to fastcompmgr as the X compositor.
• Updated TigerVNC to version 1.16.2.
• Updated noVNC to version 1.7.0.
• Improved web authentication compatibility with reverse proxies by using relative redirects.
• Changed by the update of jlesage/baseimage to version 3.11.2:
  • The underlying distro packages are updated to get all security updates.

Removed

• Image based on Ubuntu 16.04 (Expanded Security Maintenance ended on 2026/04).
• Image based on Alpine 3.16 (reached end of support on 2024-05-23).