NetBox Appliance 1.2.0

A sanitized community NetBox appliance for a fresh vSphere deployment. Start with the attached step-by-step Deployment Guide (DOCX).

New in 1.2.0

• VCF Identity Broker OIDC SSO setup inside NetBox. Existing NetBox superusers can inspect and approve the broker certificate fingerprint, test discovery/JWKS and an existing-user mapping, and enable or disable SSO under Appliance > Single sign-on. An exact approved directory UPN maps to an existing active NetBox user; no automatic user creation or permission changes. Local password recovery remains available, with visible Local login / IDB login labels. No separate human appliance-admin password is required.
• Optional VMware interface enrichment. Enable interfaces to collect NIC/MAC inventory using stable VM UUID and NIC device keys. associate_guest_ips can associate existing NetBox IP records to eligible connected VM interfaces. Preview first; ambiguous identities and conflicting assignments are held. This does not create guest IP records, change DNS names, choose primary IPs, infer VLANs or create virtual disk records.
• Refreshed Ubuntu 24.04 LTS patch baseline, tested on kernel 6.8.0-146-generic. SSO request validation and socket startup fixes are included, and encrypted backup archives include SSO configuration.

Included

NetBox 4.7.0, PostgreSQL 18, Valkey 9.1 and bundled runtime images. Optional vCenter VM/cluster inventory, UniFi VLAN/prefix/DHCP pool sync, authoritative Windows DNS discovery from two agreeing owner-authorized AXFR replicas, multiple VCF Operations inventory sources, and encrypted SFTP backups remain included. Connections and SSO start disabled and require your own settings, credentials and certificate trust.

4 vCPU, 8 GiB RAM, 64 GiB system disk and a new blank 100 GiB data disk. Map the Management network, power on and complete the console prompts. No factory password, original inventory, lab connections, credentials or private certificates are included.

Validation and scope

The exact final OVA passed a fresh vSphere import, interactive first boot using DHCP, HTTPS administrator login, six healthy containers, local console login and reboot persistence. Validation also passed 24 runtime connector/access-control fixture checks, 14 local SSO security/configuration checks, and 9 end-to-end checks against a synthetic OIDC provider, including denied unapproved users and invalid nonces, secret redaction and local-login fallback.

Five isolated backup checks covered no-write preview, incorrect SFTP host-key rejection, encrypted upload/readback verification, archive decryption with SSO coverage, and a separate PostgreSQL restore. This is not a complete replacement-VM recovery test. Exported disk and metadata privacy checks found no targeted private markers.

Static networking and Workstation were not requalified for v1.2. Connector fixtures and the synthetic OIDC provider do not qualify every external endpoint/version. Validate your endpoints and complete a real browser SSO sign-in during onboarding; the setup Test alone does not prove the directory login or client secret.

Download and verify

Download NetBox-Appliance-1.2.0.ova (1,807,994,880 bytes, approximately 1.68 GiB). Verify against SHA256SUMS.txt or the .ova.sha256 sidecar before importing.

SHA-256: 99a4bad0b77b3f27749650e7e121d4159f6c4c6c796f4652b518cb21a0c06a22

The three Word guides cover deployment, building and release verification. NetBox-Appliance-1.2.0-source.zip contains the appliance source bundle; GitHub’s automatic source archives contain only the repository documents.

This is an unsigned community appliance, not an official NetBox or VMware distribution. It is a fresh-deployment release, not an automated in-place updater. Earlier releases remain available for historical reference.

NetBox Appliance 1.1.0

A sanitized community NetBox appliance for a fresh vSphere deployment. Start with the attached step-by-step Deployment Guide (DOCX).

New in 1.1.0

• VCF Operations inventory observations, with multiple independently configured instances and adapter scopes. vCenter remains the source for core VM inventory.
• Authoritative Windows DNS discovery using two agreeing, owner-authorized AXFR replicas. Within existing NetBox prefixes, it creates missing IP records, updates DNS names and reconciles unambiguous address moves. It does not write DNS or delete IP records.
• Updated first-boot recovery behavior and an Ubuntu host OS patch baseline refreshed on 5 October 2026.

Included

Ubuntu 24.04.5 LTS, NetBox 4.7.0, connector plugin 1.1.0, PostgreSQL 18, Valkey 9.1 and bundled runtime container images. Optional vCenter VM/cluster inventory, UniFi VLAN/prefix/DHCP pool synchronization, DNS reconciliation, VCF Operations observations and encrypted SFTP backups are configured through the superuser connector page.

4 vCPU, 8 GiB RAM, 64 GiB system disk and a new blank 100 GiB data disk. Map the Management network, power on and complete the console prompts. There is no shared factory password, original inventory, configured connection or owner credential. Connectors start disabled and require your own settings, credentials and trust configuration.

Validation of this exact OVA

Fresh vCenter import, interactive first boot using DHCP, six healthy containers, certificate-validated HTTPS administrator login, connector administration, reboot persistence and recovery console sign-in passed on 5 October 2026. Eighteen synthetic application checks and five isolated backup/recovery checks passed, including incorrect SFTP host-key rejection, encrypted upload/readback, decryption and a separate PostgreSQL restore. The exported disk passed 16 targeted privacy checks.

Static addressing was not retested end to end. External connectors were tested with controlled fixtures; validate your own endpoint versions, accounts, certificates, DNS zone-transfer permissions and recovery process during onboarding. The configured standard Ubuntu repositories reported zero pending upgrades at build time; maintain OS and container updates after deployment.

Download and verify

Use NetBox-Appliance-1.1.0.ova (1,808,445,440 bytes, approximately 1.68 GiB). Verify against SHA256SUMS.txt or the .ova.sha256 sidecar before importing.

SHA-256: 561539a4e62721e3a1a4f0bdb401a70922a8c2e4dcd7dfac72c509bb41acc1c8

The three Word guides cover deployment, building and release verification. NetBox-Appliance-1.1.0-source.zip is the appliance source bundle; GitHub's automatically generated source archives contain only this repository's documents.

This is an unsigned community appliance, not an official NetBox or VMware distribution. This release is for a fresh deployment, not an in-place upgrade. The previous v0.1.0 release remains available for historical reference.

NetBox Appliance 0.1.0

Deployable community NetBox appliance for vSphere. Start with the attached Deployment Guide (DOCX).

Included: Ubuntu 24.04 LTS, NetBox, PostgreSQL, Valkey, offline container images, interactive first-boot setup, and optional vCenter inventory, UniFi VLAN/DHCP pool, DNS reconciliation and encrypted SFTP backup connectors.

Requirements: 4 vCPU, 8 GiB RAM, 64 GiB system disk and a new blank 100 GiB data disk. Map the Management network, power on, and complete the console prompts. No default password, original inventory or preconfigured external connections are included.

Validated: fresh OVA import in vCenter, first-boot initialization, six healthy containers, HTTPS administrator login and restart persistence. Connector logic was qualified with controlled fixtures; validate your own external endpoints during onboarding.

Limitations: vCenter collects core VM/cluster inventory, not guest IPs or ESXi device records. UniFi collects configured pools, not individual leases. DNS updates existing NetBox IP dns_name fields and does not write DNS. VCF Operations, IDB SSO, Windows DHCP leases and controlled DNS creation are not included.

Verify the OVA using SHA256SUMS.txt or the .ova.sha256 sidecar before importing. Read the Release Verification document for test coverage. The appliance is not an official NetBox or VMware distribution.

This download release contains the OVA and Word documentation. The Build Guide describes the build process; the appliance source bundle is not attached. GitHub autogenerated source archives contain only this repository’s documents. The checksum manifest also lists the locally retained source ZIP.