kcore 0.5.0

What's Changed

• feat: kcore SAN (Ceph) phases 1–2 by @rtacconi in #4
• fix(console): adaptive Network/Storage layout for small framebuffers by @rtacconi in #6
• fix(ceph): bring-up overlays, preflight, first-mon quorum, NixOS OSD activate by @rtacconi in #8
• Combine open PRs #5–#9 and fix CI (clippy on current stable, statix, deadnix) by @rtacconi in #10
• kcoreOS 0.4.2: netboot image and ISO with kcore-disk-verify, disk-check service and wipe by @rtacconi in #5
• feat: Implement bare-metal Kubernetes with Cilium CNI (Phases 1-3 partial) by @rtacconi in #12
• feat(mcp): kcore_rpc can call the kcore-provisioning API by @rtacconi in #11
• Add KDS and Kubernetes pages to the dashboard by @rtacconi in #17
• docs: plan Ceph cluster detail dashboard with capacity charts by @rtacconi in #13
• Fix Kubernetes PKI deployment and HA control-plane bootstrap by @rtacconi in #14
• Run a second Kubernetes cluster on the same nodes by @rtacconi in #15
• feat(storage): manage LVM and ZFS host volumes from the controller by @rtacconi in #16
• Show Ceph, LVM, and ZFS volumes on the dashboard by @rtacconi in #19
• Declare local volumes, LVM pools, and control-plane scheduling by @rtacconi in #18
• Keep Kubernetes updates on the nodes by @rtacconi in #21
• Show the rest of the controller inventory on the dashboard by @rtacconi in #22
• Stop unreachable nodes from stalling the dashboard by @rtacconi in #20
• Add the verification model and its TLA checks by @rtacconi in #23
• Add NixOS generation updates and the 0.5.0 release manifest by @rtacconi in #24
• Include the Kubernetes Nix module in the node-agent package source by @rtacconi in #25
• Create node_host_status when schema 57 was skipped by @rtacconi in #26

Full Changelog: v0.3.0...v0.5.0

kcore 0.3.0

kcore 0.3.0

First release since 0.2.0, adding VM serial consoles, operator RBAC, an
append-only audit log, and coordinated cluster/host OS updates.

Highlights

VM serial console

• Attach to a VM serial console from the dashboard or with kctl console <vm>
  (Ctrl-] to detach). Streaming is wired through the node agent and
  controller.
• Console session opens are recorded in the audit log.

Operator RBAC

• Per-operator client certificates (CN=kctl:<name>) stored under
  ~/.kcore/operators/<OPERATOR>/operator.{crt,key}, selectable per command
  or via operator: in the config context.
• Flat role model: read-only < vm-admin < cluster-admin.
• Manage identities and assignments with kctl operator (add, delete,
  list, show) and the accompanying role commands.

Append-only audit log

• Mutating controller RPCs now append to a tamper-evident audit log, replicated
  through the CRDT replication log alongside operator mutations.
• Inspect with kctl audit-events (filter by --action, --since, --limit).

Cluster / host OS updates

• New ClusterUpdate resource with API, reconciler, node-agent and kctl
  support: kctl update-cluster supports dry-run planning, create/update from a
  YAML manifest, list, show, approve, cancel and best-effort rollback.
• See docs/cluster-updates.md.

Install and tooling

• New scripts/get-kctl.sh installer that pulls kctl
  straight from GitHub Releases.
• Formal verification was rescoped: Kani now proves only the byte-loop path
  scanners in kcore-sanitize, with parser and string-builder code covered by
  proptest instead.

Security

• Updated h2 to 0.4.19, fixing
  RUSTSEC-2026-0258
  (unbounded empty HTTP/2 DATA frames), reachable through tonic/hyper in the
  controller, node agent and dashboard.

Fixes

• Dashboard console focus handling and cloud-init plaintext password handling.
• kcore-console theme and wordmark aligned with the KCORE logo art.

Upgrade / install

• ISO: flash kcoreos-0.3.0-x86_64-linux.iso (verify SHA256SUMS).
• kctl Linux: extract kctl-0.3.0-linux-x86_64.tar.gz and run ./kctl --help (glibc Linux x86_64, built via this repo's Nix flake).
• kctl macOS Intel: extract kctl-0.3.0-macos-x86_64.tar.gz and run ./kctl --help.
• kctl macOS Apple Silicon: extract kctl-0.3.0-macos-aarch64.tar.gz and run ./kctl --help.

Checksums

See SHA256SUMS attached to the GitHub Release.

kcore 0.2.0

Full Changelog: https://github.com/kcorehypervisor/kcore/commits/v0.2.0