NetBox Appliance 1.2.0

A sanitized community NetBox appliance for a fresh vSphere deployment. Start with the attached step-by-step Deployment Guide (DOCX).

New in 1.2.0

• VCF Identity Broker OIDC SSO setup inside NetBox. Existing NetBox superusers can inspect and approve the broker certificate fingerprint, test discovery/JWKS and an existing-user mapping, and enable or disable SSO under Appliance > Single sign-on. An exact approved directory UPN maps to an existing active NetBox user; no automatic user creation or permission changes. Local password recovery remains available, with visible Local login / IDB login labels. No separate human appliance-admin password is required.
• Optional VMware interface enrichment. Enable interfaces to collect NIC/MAC inventory using stable VM UUID and NIC device keys. associate_guest_ips can associate existing NetBox IP records to eligible connected VM interfaces. Preview first; ambiguous identities and conflicting assignments are held. This does not create guest IP records, change DNS names, choose primary IPs, infer VLANs or create virtual disk records.
• Refreshed Ubuntu 24.04 LTS patch baseline, tested on kernel 6.8.0-146-generic. SSO request validation and socket startup fixes are included, and encrypted backup archives include SSO configuration.

Included

NetBox 4.7.0, PostgreSQL 18, Valkey 9.1 and bundled runtime images. Optional vCenter VM/cluster inventory, UniFi VLAN/prefix/DHCP pool sync, authoritative Windows DNS discovery from two agreeing owner-authorized AXFR replicas, multiple VCF Operations inventory sources, and encrypted SFTP backups remain included. Connections and SSO start disabled and require your own settings, credentials and certificate trust.

4 vCPU, 8 GiB RAM, 64 GiB system disk and a new blank 100 GiB data disk. Map the Management network, power on and complete the console prompts. No factory password, original inventory, lab connections, credentials or private certificates are included.

Validation and scope

The exact final OVA passed a fresh vSphere import, interactive first boot using DHCP, HTTPS administrator login, six healthy containers, local console login and reboot persistence. Validation also passed 24 runtime connector/access-control fixture checks, 14 local SSO security/configuration checks, and 9 end-to-end checks against a synthetic OIDC provider, including denied unapproved users and invalid nonces, secret redaction and local-login fallback.

Five isolated backup checks covered no-write preview, incorrect SFTP host-key rejection, encrypted upload/readback verification, archive decryption with SSO coverage, and a separate PostgreSQL restore. This is not a complete replacement-VM recovery test. Exported disk and metadata privacy checks found no targeted private markers.

Static networking and Workstation were not requalified for v1.2. Connector fixtures and the synthetic OIDC provider do not qualify every external endpoint/version. Validate your endpoints and complete a real browser SSO sign-in during onboarding; the setup Test alone does not prove the directory login or client secret.

Download and verify

Download NetBox-Appliance-1.2.0.ova (1,807,994,880 bytes, approximately 1.68 GiB). Verify against SHA256SUMS.txt or the .ova.sha256 sidecar before importing.

SHA-256: 99a4bad0b77b3f27749650e7e121d4159f6c4c6c796f4652b518cb21a0c06a22

The three Word guides cover deployment, building and release verification. NetBox-Appliance-1.2.0-source.zip contains the appliance source bundle; GitHub’s automatic source archives contain only the repository documents.

This is an unsigned community appliance, not an official NetBox or VMware distribution. It is a fresh-deployment release, not an automated in-place updater. Earlier releases remain available for historical reference.