v0.1.8

Installing

curl -fsSL https://hostseal.io/apt/hostseal-archive-keyring.gpg \
  | sudo tee /usr/share/keyrings/hostseal-archive-keyring.gpg > /dev/null
curl -fsSL https://hostseal.io/apt/hostseal.sources \
  | sudo tee /etc/apt/sources.list.d/hostseal.sources > /dev/null
sudo apt-get update && sudo apt-get install hostseal-agent

The agent installs with no keys in /etc/hostseal/trusted-signers and a policy that permits
security updates and nothing else. It will report on the host and keep it patched, and will
do nothing else until you say otherwise.

Verifying the build

The binaries are built with -trimpath and a pinned SOURCE_DATE_EPOCH, so rebuilding this
tag reproduces them byte for byte. SHA256SUMS is attached.

apt-repository.tar.gz is the signed repository exactly as published. The pages workflow
unpacks it under /apt; it is attached so that the published tree can be verified against
this release rather than taken on trust.

What's Changed

• Say who holds the rights, and stop claiming a trademark that is not registered by @pascalgross in #78
• A Windows agent that reads, and cannot be asked to do anything else by @pascalgross in #82
• Rename the project to HostSeal, and press a seal where the shoe was by @pascalgross in #85
• Take the four Dependabot updates by hand, and fix what made them unmergeable by @pascalgross in #88
• Take this week's three Dependabot updates by hand, one of which was broken by @pascalgross in #92
• Report capacity and load, and let a host be found by its MAC address by @pascalgross in #98
• Say so when the published APT repository predates the rename by @pascalgross in #100
• Give a fleet a host limit and a suspension switch by @pascalgross in #93

Full Changelog: v0.1.7...v0.1.8