Magic Mesh v12.1.1

Magic Mesh v12.1.1 release artifacts.

Farm release build completed on BigBoy (172.20.0.130), including core, browser, and lighthouse RPMs. RPM payload limits and SHA256/GPG signatures were verified.

Validation note: policy, formatting, and Clippy gates passed. The full test gate remains RED with 8 pre-existing behavioral/UI expectation failures in mde-shell-egui and mackesd; these are recorded for follow-up and are not represented as release-gate green.

magic-mesh 12.1.0

12.1.0 ships a dedicated 10.6 MiB magic-mesh-lighthouse RPM for DigitalOcean. Lighthouse cloud-init accepts only this control-plane package: no media, Navidrome, Syncthing/file-sharing, browser, desktop, virtualization, or birthright payloads. Base and browser RPMs remain available for their respective roles. All RPMs are signed with the Magic Mesh release key; verify SHA256SUMS and SHA256SUMS.asc.

magic-mesh 12.0.0 "Quasar"

12.0 "Quasar": VOIP-GW Voice/Vitelity (7/7) + SURFACE tablet enablement (11/11) + notification cutover (mde-notify retired) + OW-15 remote-push (Hybrid C) + the iced/Carbon decommission. Signed with the release key. fc42 RPM → F44 workstations (forward-compat), fc43 RPM → F43 lighthouses.

MCNF 11.3.1

MCNF 11.3.1 — patch: Nebula Cert V2 fingerprint fix (parse_fingerprint_json handles the V2 array-JSON; fixes the self-test cert probe + the leave-verb revocation-eviction on V2 fleets). Signed RPM.

MCNF 11.3.0

MCNF 11.3.0 — onboard first-desktop (OW-8) + service-add (OW-11) verbs, CTRLSURF 1–8 (Command Watchfloor complete), NOTIFY-REDESIGN A–C (Notification Hub complete). Signed RPM (gpgcheck=1). See CHANGELOG.md.

MCNF 11.2.0 — reconciled trunk

MCNF 11.2.0 — reconciled trunk

Unifies the divergent master (pre-SUBSTRATE-V2) and the fleet-proven
farm-autoscale-plan lines onto one validated trunk (SUBSTRATE-V2 etcd+Syncthing,
farm autoscale, datacenter control). 2969 tests green; fmt/clippy/boundary clean.

• XEN-194 grafted onto the for_each XAPI farm model (4th build dom0)
• ABOUT-OSS acknowledgements + NotifyCenter autostart
• MEDIA-9: mcnf-music-ingest packaged in the RPM
• MEDIA-7: mackesd leave de-registers from the media plane
• Removed dead ipc::bus_bridge

Install the attached signed RPM. Verify:
sha256sum -c SHA256SUMS && gpg --verify SHA256SUMS.asc SHA256SUMS

MCNF 11.0.15 — mackesd secret put/get CLI

Adds the operational secret-store put-path (mackesd secret put|get [--local]) for provisioning MEDIA/DR/VPN credentials. Signed RPM.

MCNF 11.0.14 — turn-key add/retire (MIG-1 + MIG-2)

remove-peer now deletes the etcd directory key (MIG-1); overlay-IP assignments recorded mesh-wide at sign time so concurrent lighthouses can't collide (MIG-2). Signed RPM (RSA-4096 d0921c73).

MCNF 11.0.13 — mesh-global overlay-IP allocation

Joined lighthouses now allocate overlay IPs from the global etcd directory, not just their local cert-store, so a new lighthouse no longer hands a fresh node a colliding IP (caught live: nyc3 assigned 10.42.0.1). Unblocks retiring the founding lighthouse. Signed RPM (RSA-4096 d0921c73).

MCNF 11.0.12 — joined lighthouse serves enrollment (:4243 self-cert)

A join --role lighthouse node now self-generates its /enroll endpoint cert at startup (when it holds the CA key but lacks the cert), so :4243 binds and a joined lighthouse can ACCEPT enrollments — not just sign. Found live in the lighthouse migration. Signed RPM (RSA-4096 d0921c73).