Skip to content

Releases: runkrate/krate

Release list

KRATE 0.7.0 beta.13

KRATE 0.7.0 beta.13 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Aug 15:46
v0.7.0-beta.13
e7ff40b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

KRATE 0.7.0
Tag v0.7.0-beta.13
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.13-trixie_amd64.deb 340501b707fc12e4bf10a46b7301d74c418743399bc92ea2252f0d48b94e0d5e

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (e002bc4)

  • chore(repo): drop accidental CMake build-test tree (e002bc4) — @tomcdj71
  • fix(dashboard): keep HarmonyUI var/ shared during updates (6ad78db) — @tomcdj71
  • fix(pull): select latest release by version, not GitHub list order (ce3ff74) — @tomcdj71
  • feat(telemetry): collect SMART disk health in snapshot (0f22178) — @tomcdj71
  • feat(telemetry): add processes, thermals, and storage pool collectors (7d1319f) — @tomcdj71
  • feat(telemetry): collect multi-GPU metrics for NVIDIA, AMD, and Intel (803eef1) — @tomcdj71
  • feat(telemetry): expose NVIDIA GPU util, VRAM, and temperature (bd77300) — @tomcdj71
  • chore(artifacts): delete CMake build artifacts and configuration files (8566dfc) — @tomcdj71
  • fix(crypto): harden machine fingerprint with root disk UUID and MAC (5197f8f) — @tomcdj71
  • checkpoint before checking out develop (d28b293) — @tomcdj71
  • fix(provider): detect OVH VPS via cloud-init and hostname markers (115a8f8) — @tomcdj71
  • fix(zen): repair set domain validation and pull --check snapshots (d27510e) — @tomcdj71
  • fix(license): use canonical KRATE/zen/1.0 User-Agent for API calls (9f0ebf4) — @tomcdj71
  • feat(license): unify payload contract and enforce free update delay (a6b376d) — @tomcdj71
  • fix(license): upgrade local-free fallback when the API is reachable (b47b374) — @tomcdj71
  • fix(software): qualify Options in subdomain install defaults helper (f1c788b) — @tomcdj71
  • fix(provider): broaden OVH detection on modern VPS images (308b441) — @tomcdj71
  • feat(license): add license::request and refresh API-signed licenses. (c5ed87b) — @tomcdj71
  • feat(software): default CLI installs to subdomain when user routing is on (d2a57c9) — @tomcdj71
  • refactor(domain): subdomain routing opt-out instead of opt-in (2af39b2) — @tomcdj71
  • fix(domain): honor autocomplete -s for subdomain install eligibility (f32b576) — @tomcdj71
  • fix(caddy): use parent-relative imports in per-user site template (f41df9f) — @tomcdj71
  • fix(domain): repair missing user site block when subdomain label exists (f18f2e8) — @tomcdj71
  • fix(tmpfiles): add www-data-writable zen job log directory (422a9fd) — @tomcdj71
  • feat(domain): auto-provision default user subdomain labels (eb68c4b) — @tomcdj71
  • feat(domain): regenerate VSFTPD TLS cert when apex domain changes (decca33) — @tomcdj71
  • fix(domain): parse OpenSSL SAN values from continuation line (1765542) — @tomcdj71
  • feat(domain): add domain::cert::list for Caddy and VSFTPD certificates (16a37f1) — @tomcdj71
  • fix(lifecycle): resolve url_base before proxy routing is computed (24b9602) — @tomcdj71
  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71

setup (71a0d80)

  • chore(repo): harden ignore rules and neutralize conf example (71a0d80) — @tomcdj71
  • fix(setup): stop using zenfw::license::k_license_user_agent in activateLicense (7f5752b) — @tomcdj71
  • fix(license): send canonical User-Agent on setup activation (c0d9afa) — @tomcdj71
  • feat(setup): align local-free license with canonical payload contract (58cab9c) — @tomcdj71
  • feat(setup): add account_email for paid license activation (d0c3d7e) — @tomcdj71
  • fix(setup): wait for apt lock before package steps (07b539b) — @tomcdj71
  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (`891c...
Read more
Loading

KRATE 0.7.0 beta.9

KRATE 0.7.0 beta.9 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Jul 14:56
v0.7.0-beta.9
3549b3a

KRATE 0.7.0
Tag v0.7.0-beta.9
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.9-trixie_amd64.deb 024fc3e6abb8e7a98bc60cd56ce2f6fb130ad132f626a3a2537cd431cabe94b1

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (115a8f8)

  • fix(provider): detect OVH VPS via cloud-init and hostname markers (115a8f8) — @tomcdj71
  • fix(zen): repair set domain validation and pull --check snapshots (d27510e) — @tomcdj71
  • fix(license): use canonical KRATE/zen/1.0 User-Agent for API calls (9f0ebf4) — @tomcdj71
  • feat(license): unify payload contract and enforce free update delay (a6b376d) — @tomcdj71
  • fix(license): upgrade local-free fallback when the API is reachable (b47b374) — @tomcdj71
  • fix(software): qualify Options in subdomain install defaults helper (f1c788b) — @tomcdj71
  • fix(provider): broaden OVH detection on modern VPS images (308b441) — @tomcdj71
  • feat(license): add license::request and refresh API-signed licenses. (c5ed87b) — @tomcdj71
  • feat(software): default CLI installs to subdomain when user routing is on (d2a57c9) — @tomcdj71
  • refactor(domain): subdomain routing opt-out instead of opt-in (2af39b2) — @tomcdj71
  • fix(domain): honor autocomplete -s for subdomain install eligibility (f32b576) — @tomcdj71
  • fix(caddy): use parent-relative imports in per-user site template (f41df9f) — @tomcdj71
  • fix(domain): repair missing user site block when subdomain label exists (f18f2e8) — @tomcdj71
  • fix(tmpfiles): add www-data-writable zen job log directory (422a9fd) — @tomcdj71
  • feat(domain): auto-provision default user subdomain labels (eb68c4b) — @tomcdj71
  • feat(domain): regenerate VSFTPD TLS cert when apex domain changes (decca33) — @tomcdj71
  • fix(domain): parse OpenSSL SAN values from continuation line (1765542) — @tomcdj71
  • feat(domain): add domain::cert::list for Caddy and VSFTPD certificates (16a37f1) — @tomcdj71
  • fix(lifecycle): resolve url_base before proxy routing is computed (24b9602) — @tomcdj71
  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71
  • fix(BashCompletion): call _software_flag_expects_value outside [[ ]] (39621b9) — @tomcdj71
  • feat(Rollback): add i18n strings for setup --rollback recovery (127498f) — @tomcdj71
  • fix(Support): bound support code random index to alphabet size (61b26bd) — @tomcdj71
  • docs(Support): document auditable support and audit UX (cdc7dca) — @tomcdj71
  • feat(zen): add zen support audit subcommand (e1f9379) — @tomcdj71
  • feat(zen): wire zen support to auditable session flow (0d86e54) — @tomcdj71
  • feat(Support): add krate-supportd and auditable session scripts (1107bd3) — @tomcdj71
  • feat(zen): show opaque support code with 6h expiry and progress (1d933f7) — @tomcdj71
  • fix(zenfw): keep Tailwind CLI binaries executable under var/tailwind (2700137) — @tomcdj71
  • fix(zenfw): reuse existing trim_copy in APT recent_changes parser (ffb6db0) — @tomcdj71

setup (7f5752b)

  • fix(setup): stop using zenfw::license::k_license_user_agent in activateLicense (7f5752b) — @tomcdj71
  • fix(license): send canonical User-Agent on setup activation (c0d9afa) — @tomcdj71
  • feat(setup): align local-free license with canonical payload contract (58cab9c) — @tomcdj71
  • feat(setup): add account_email for paid license activation (d0c3d7e) — @tomcdj71
  • fix(setup): wait for apt lock before package steps (07b539b) — @tomcdj71
  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (891c984) — @tomcdj71
  • fix(PHP): grant Caddy access to php-fpm socket via listen.acl_users. (...
Read more
Loading

KRATE 0.7.0 beta.8

KRATE 0.7.0 beta.8 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Jul 10:20
v0.7.0-beta.8
3549b3a

KRATE 0.7.0
Tag v0.7.0-beta.8
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.8-trixie_amd64.deb 06fcf58ceea85d3e8bad730b7ff988f7e0926685f0e1375d7484460f2771db72

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (9f0ebf4)

  • fix(license): use canonical KRATE/zen/1.0 User-Agent for API calls (9f0ebf4) — @tomcdj71
  • feat(license): unify payload contract and enforce free update delay (a6b376d) — @tomcdj71
  • fix(license): upgrade local-free fallback when the API is reachable (b47b374) — @tomcdj71
  • fix(software): qualify Options in subdomain install defaults helper (f1c788b) — @tomcdj71
  • fix(provider): broaden OVH detection on modern VPS images (308b441) — @tomcdj71
  • feat(license): add license::request and refresh API-signed licenses. (c5ed87b) — @tomcdj71
  • feat(software): default CLI installs to subdomain when user routing is on (d2a57c9) — @tomcdj71
  • refactor(domain): subdomain routing opt-out instead of opt-in (2af39b2) — @tomcdj71
  • fix(domain): honor autocomplete -s for subdomain install eligibility (f32b576) — @tomcdj71
  • fix(caddy): use parent-relative imports in per-user site template (f41df9f) — @tomcdj71
  • fix(domain): repair missing user site block when subdomain label exists (f18f2e8) — @tomcdj71
  • fix(tmpfiles): add www-data-writable zen job log directory (422a9fd) — @tomcdj71
  • feat(domain): auto-provision default user subdomain labels (eb68c4b) — @tomcdj71
  • feat(domain): regenerate VSFTPD TLS cert when apex domain changes (decca33) — @tomcdj71
  • fix(domain): parse OpenSSL SAN values from continuation line (1765542) — @tomcdj71
  • feat(domain): add domain::cert::list for Caddy and VSFTPD certificates (16a37f1) — @tomcdj71
  • fix(lifecycle): resolve url_base before proxy routing is computed (24b9602) — @tomcdj71
  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71
  • fix(BashCompletion): call _software_flag_expects_value outside [[ ]] (39621b9) — @tomcdj71
  • feat(Rollback): add i18n strings for setup --rollback recovery (127498f) — @tomcdj71
  • fix(Support): bound support code random index to alphabet size (61b26bd) — @tomcdj71
  • docs(Support): document auditable support and audit UX (cdc7dca) — @tomcdj71
  • feat(zen): add zen support audit subcommand (e1f9379) — @tomcdj71
  • feat(zen): wire zen support to auditable session flow (0d86e54) — @tomcdj71
  • feat(Support): add krate-supportd and auditable session scripts (1107bd3) — @tomcdj71
  • feat(zen): show opaque support code with 6h expiry and progress (1d933f7) — @tomcdj71
  • fix(zenfw): keep Tailwind CLI binaries executable under var/tailwind (2700137) — @tomcdj71
  • fix(zenfw): reuse existing trim_copy in APT recent_changes parser (ffb6db0) — @tomcdj71
  • feat(zenfw): add APT recent_changes command from history.log (5c30197) — @tomcdj71
  • fix(zen): repair zen pull compile errors after version display change (9667947) — @tomcdj71

setup (7f5752b)

  • fix(setup): stop using zenfw::license::k_license_user_agent in activateLicense (7f5752b) — @tomcdj71
  • fix(license): send canonical User-Agent on setup activation (c0d9afa) — @tomcdj71
  • feat(setup): align local-free license with canonical payload contract (58cab9c) — @tomcdj71
  • feat(setup): add account_email for paid license activation (d0c3d7e) — @tomcdj71
  • fix(setup): wait for apt lock before package steps (07b539b) — @tomcdj71
  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (891c984) — @tomcdj71
  • fix(PHP): grant Caddy access to php-fpm socket via listen.acl_users. (`...
Read more
Loading

KRATE 0.7.0 beta.7

KRATE 0.7.0 beta.7 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Jul 17:25
v0.7.0-beta.7
3549b3a

KRATE 0.7.0
Tag v0.7.0-beta.7
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.7-trixie_amd64.deb a0eee2d14c792a8f8cbcba2f89e7ba8ee02ea68513c15ec4b3bbd6616f25bc6b

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (f1c788b)

  • fix(software): qualify Options in subdomain install defaults helper (f1c788b) — @tomcdj71
  • fix(provider): broaden OVH detection on modern VPS images (308b441) — @tomcdj71
  • feat(license): add license::request and refresh API-signed licenses. (c5ed87b) — @tomcdj71
  • feat(software): default CLI installs to subdomain when user routing is on (d2a57c9) — @tomcdj71
  • refactor(domain): subdomain routing opt-out instead of opt-in (2af39b2) — @tomcdj71
  • fix(domain): honor autocomplete -s for subdomain install eligibility (f32b576) — @tomcdj71
  • fix(caddy): use parent-relative imports in per-user site template (f41df9f) — @tomcdj71
  • fix(domain): repair missing user site block when subdomain label exists (f18f2e8) — @tomcdj71
  • fix(tmpfiles): add www-data-writable zen job log directory (422a9fd) — @tomcdj71
  • feat(domain): auto-provision default user subdomain labels (eb68c4b) — @tomcdj71
  • feat(domain): regenerate VSFTPD TLS cert when apex domain changes (decca33) — @tomcdj71
  • fix(domain): parse OpenSSL SAN values from continuation line (1765542) — @tomcdj71
  • feat(domain): add domain::cert::list for Caddy and VSFTPD certificates (16a37f1) — @tomcdj71
  • fix(lifecycle): resolve url_base before proxy routing is computed (24b9602) — @tomcdj71
  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71
  • fix(BashCompletion): call _software_flag_expects_value outside [[ ]] (39621b9) — @tomcdj71
  • feat(Rollback): add i18n strings for setup --rollback recovery (127498f) — @tomcdj71
  • fix(Support): bound support code random index to alphabet size (61b26bd) — @tomcdj71
  • docs(Support): document auditable support and audit UX (cdc7dca) — @tomcdj71
  • feat(zen): add zen support audit subcommand (e1f9379) — @tomcdj71
  • feat(zen): wire zen support to auditable session flow (0d86e54) — @tomcdj71
  • feat(Support): add krate-supportd and auditable session scripts (1107bd3) — @tomcdj71
  • feat(zen): show opaque support code with 6h expiry and progress (1d933f7) — @tomcdj71
  • fix(zenfw): keep Tailwind CLI binaries executable under var/tailwind (2700137) — @tomcdj71
  • fix(zenfw): reuse existing trim_copy in APT recent_changes parser (ffb6db0) — @tomcdj71
  • feat(zenfw): add APT recent_changes command from history.log (5c30197) — @tomcdj71
  • fix(zen): repair zen pull compile errors after version display change (9667947) — @tomcdj71
  • fix(Support): allocate PTY for sshx support session startup (8436b4d) — @tomcdj71
  • fix(zen): show full prerelease version after zen pull (f269ab9) — @tomcdj71
  • feat(zenfw): add APT list_upgradable and upgrade_packages commands (9c5ce77) — @tomcdj71

setup (07b539b)

  • fix(setup): wait for apt lock before package steps (07b539b) — @tomcdj71
  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (891c984) — @tomcdj71
  • fix(PHP): grant Caddy access to php-fpm socket via listen.acl_users. (47d6dd2) — @tomcdj71
  • fix(Firewall): pre-declare SSH and web ports before nftables default-deny. (326a6fe) — @tomcdj71
  • fix(Firewall): open firewall port 443/tcp for Caddy after nftables init. (2fb9e22) — @tomcdj71
  • fix(HarmonyUI): ensure var/ is writable by krate before Harmony migrations. (716093e) — @tomcdj71
  • feat(Firewall): wire nftables firewall into SSH/FTP setup phase (`42...
Read more
Loading

KRATE 0.7.0 beta.6

KRATE 0.7.0 beta.6 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Jul 16:02
v0.7.0-beta.6
3549b3a

KRATE 0.7.0
Tag v0.7.0-beta.6
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.6-trixie_amd64.deb 1979c62dc2bc16ddd8324b20c9c25b0a1daeeb140d66d49dd59b92fecebd4bbb

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (2af39b2)

  • refactor(domain): subdomain routing opt-out instead of opt-in (2af39b2) — @tomcdj71
  • fix(domain): honor autocomplete -s for subdomain install eligibility (f32b576) — @tomcdj71
  • fix(caddy): use parent-relative imports in per-user site template (f41df9f) — @tomcdj71
  • fix(domain): repair missing user site block when subdomain label exists (f18f2e8) — @tomcdj71
  • fix(tmpfiles): add www-data-writable zen job log directory (422a9fd) — @tomcdj71
  • feat(domain): auto-provision default user subdomain labels (eb68c4b) — @tomcdj71
  • feat(domain): regenerate VSFTPD TLS cert when apex domain changes (decca33) — @tomcdj71
  • fix(domain): parse OpenSSL SAN values from continuation line (1765542) — @tomcdj71
  • feat(domain): add domain::cert::list for Caddy and VSFTPD certificates (16a37f1) — @tomcdj71
  • fix(lifecycle): resolve url_base before proxy routing is computed (24b9602) — @tomcdj71
  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71
  • fix(BashCompletion): call _software_flag_expects_value outside [[ ]] (39621b9) — @tomcdj71
  • feat(Rollback): add i18n strings for setup --rollback recovery (127498f) — @tomcdj71
  • fix(Support): bound support code random index to alphabet size (61b26bd) — @tomcdj71
  • docs(Support): document auditable support and audit UX (cdc7dca) — @tomcdj71
  • feat(zen): add zen support audit subcommand (e1f9379) — @tomcdj71
  • feat(zen): wire zen support to auditable session flow (0d86e54) — @tomcdj71
  • feat(Support): add krate-supportd and auditable session scripts (1107bd3) — @tomcdj71
  • feat(zen): show opaque support code with 6h expiry and progress (1d933f7) — @tomcdj71
  • fix(zenfw): keep Tailwind CLI binaries executable under var/tailwind (2700137) — @tomcdj71
  • fix(zenfw): reuse existing trim_copy in APT recent_changes parser (ffb6db0) — @tomcdj71
  • feat(zenfw): add APT recent_changes command from history.log (5c30197) — @tomcdj71
  • fix(zen): repair zen pull compile errors after version display change (9667947) — @tomcdj71
  • fix(Support): allocate PTY for sshx support session startup (8436b4d) — @tomcdj71
  • fix(zen): show full prerelease version after zen pull (f269ab9) — @tomcdj71
  • feat(zenfw): add APT list_upgradable and upgrade_packages commands (9c5ce77) — @tomcdj71
  • fix(Support): relocate sshx install under /var/lib/krate/support (8456acd) — @tomcdj71
  • fix(caddy): allow data URIs in CSP script-src for AssetMapper (d2743ed) — @tomcdj71
  • chore(AssetMapper): update dashboard frontend build for AssetMapper (d3124d5) — @tomcdj71
  • refactor(zenfw): refresh system-update snapshot via zen pull --check (a03fadd) — @tomcdj71

setup (0b2f5de)

  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (891c984) — @tomcdj71
  • fix(PHP): grant Caddy access to php-fpm socket via listen.acl_users. (47d6dd2) — @tomcdj71
  • fix(Firewall): pre-declare SSH and web ports before nftables default-deny. (326a6fe) — @tomcdj71
  • fix(Firewall): open firewall port 443/tcp for Caddy after nftables init. (2fb9e22) — @tomcdj71
  • fix(HarmonyUI): ensure var/ is writable by krate before Harmony migrations. (716093e) — @tomcdj71
  • feat(Firewall): wire nftables firewall into SSH/FTP setup phase (4264b8d) — @tomcdj71
  • fix(HarmonyUI): expose APP_ENV=prod to php-fpm for HarmonyUI...
Read more
Loading

KRATE 0.7.0 beta.5

KRATE 0.7.0 beta.5 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Jul 13:11
v0.7.0-beta.5
3549b3a

KRATE 0.7.0
Tag v0.7.0-beta.5
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.5-trixie_amd64.deb bcfd2a5da1a3510726f24bf225b1696ad9793fc0a6393be08096d21cce05b98e

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (f18f2e8)

  • fix(domain): repair missing user site block when subdomain label exists (f18f2e8) — @tomcdj71
  • fix(tmpfiles): add www-data-writable zen job log directory (422a9fd) — @tomcdj71
  • feat(domain): auto-provision default user subdomain labels (eb68c4b) — @tomcdj71
  • feat(domain): regenerate VSFTPD TLS cert when apex domain changes (decca33) — @tomcdj71
  • fix(domain): parse OpenSSL SAN values from continuation line (1765542) — @tomcdj71
  • feat(domain): add domain::cert::list for Caddy and VSFTPD certificates (16a37f1) — @tomcdj71
  • fix(lifecycle): resolve url_base before proxy routing is computed (24b9602) — @tomcdj71
  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71
  • fix(BashCompletion): call _software_flag_expects_value outside [[ ]] (39621b9) — @tomcdj71
  • feat(Rollback): add i18n strings for setup --rollback recovery (127498f) — @tomcdj71
  • fix(Support): bound support code random index to alphabet size (61b26bd) — @tomcdj71
  • docs(Support): document auditable support and audit UX (cdc7dca) — @tomcdj71
  • feat(zen): add zen support audit subcommand (e1f9379) — @tomcdj71
  • feat(zen): wire zen support to auditable session flow (0d86e54) — @tomcdj71
  • feat(Support): add krate-supportd and auditable session scripts (1107bd3) — @tomcdj71
  • feat(zen): show opaque support code with 6h expiry and progress (1d933f7) — @tomcdj71
  • fix(zenfw): keep Tailwind CLI binaries executable under var/tailwind (2700137) — @tomcdj71
  • fix(zenfw): reuse existing trim_copy in APT recent_changes parser (ffb6db0) — @tomcdj71
  • feat(zenfw): add APT recent_changes command from history.log (5c30197) — @tomcdj71
  • fix(zen): repair zen pull compile errors after version display change (9667947) — @tomcdj71
  • fix(Support): allocate PTY for sshx support session startup (8436b4d) — @tomcdj71
  • fix(zen): show full prerelease version after zen pull (f269ab9) — @tomcdj71
  • feat(zenfw): add APT list_upgradable and upgrade_packages commands (9c5ce77) — @tomcdj71
  • fix(Support): relocate sshx install under /var/lib/krate/support (8456acd) — @tomcdj71
  • fix(caddy): allow data URIs in CSP script-src for AssetMapper (d2743ed) — @tomcdj71
  • chore(AssetMapper): update dashboard frontend build for AssetMapper (d3124d5) — @tomcdj71
  • refactor(zenfw): refresh system-update snapshot via zen pull --check (a03fadd) — @tomcdj71
  • fix(zen): refresh system-update snapshot after pull upgrade completes (b0e3e2c) — @tomcdj71
  • chore(caddy): remove stray rutorrent.conf from templates (dfb2027) — @tomcdj71
  • feat(caddy): add proxy_caddy_fragment_path for app handlers (3a5aaa7) — @tomcdj71

setup (0b2f5de)

  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (891c984) — @tomcdj71
  • fix(PHP): grant Caddy access to php-fpm socket via listen.acl_users. (47d6dd2) — @tomcdj71
  • fix(Firewall): pre-declare SSH and web ports before nftables default-deny. (326a6fe) — @tomcdj71
  • fix(Firewall): open firewall port 443/tcp for Caddy after nftables init. (2fb9e22) — @tomcdj71
  • fix(HarmonyUI): ensure var/ is writable by krate before Harmony migrations. (716093e) — @tomcdj71
  • feat(Firewall): wire nftables firewall into SSH/FTP setup phase (4264b8d) — @tomcdj71
  • fix(HarmonyUI): expose APP_ENV=prod to php-fpm for HarmonyUI (`c41b5cf...
Read more
Loading

KRATE 0.7.0 beta.4

KRATE 0.7.0 beta.4 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Jul 18:12
v0.7.0-beta.4
3549b3a

KRATE 0.7.0
Tag v0.7.0-beta.4
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.4-trixie_amd64.deb d4eeb660f2c9c19714312105e22032642016d94780cef893713e7b9b89d9ddc9

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (eb68c4b)

  • feat(domain): auto-provision default user subdomain labels (eb68c4b) — @tomcdj71
  • feat(domain): regenerate VSFTPD TLS cert when apex domain changes (decca33) — @tomcdj71
  • fix(domain): parse OpenSSL SAN values from continuation line (1765542) — @tomcdj71
  • feat(domain): add domain::cert::list for Caddy and VSFTPD certificates (16a37f1) — @tomcdj71
  • fix(lifecycle): resolve url_base before proxy routing is computed (24b9602) — @tomcdj71
  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71
  • fix(BashCompletion): call _software_flag_expects_value outside [[ ]] (39621b9) — @tomcdj71
  • feat(Rollback): add i18n strings for setup --rollback recovery (127498f) — @tomcdj71
  • fix(Support): bound support code random index to alphabet size (61b26bd) — @tomcdj71
  • docs(Support): document auditable support and audit UX (cdc7dca) — @tomcdj71
  • feat(zen): add zen support audit subcommand (e1f9379) — @tomcdj71
  • feat(zen): wire zen support to auditable session flow (0d86e54) — @tomcdj71
  • feat(Support): add krate-supportd and auditable session scripts (1107bd3) — @tomcdj71
  • feat(zen): show opaque support code with 6h expiry and progress (1d933f7) — @tomcdj71
  • fix(zenfw): keep Tailwind CLI binaries executable under var/tailwind (2700137) — @tomcdj71
  • fix(zenfw): reuse existing trim_copy in APT recent_changes parser (ffb6db0) — @tomcdj71
  • feat(zenfw): add APT recent_changes command from history.log (5c30197) — @tomcdj71
  • fix(zen): repair zen pull compile errors after version display change (9667947) — @tomcdj71
  • fix(Support): allocate PTY for sshx support session startup (8436b4d) — @tomcdj71
  • fix(zen): show full prerelease version after zen pull (f269ab9) — @tomcdj71
  • feat(zenfw): add APT list_upgradable and upgrade_packages commands (9c5ce77) — @tomcdj71
  • fix(Support): relocate sshx install under /var/lib/krate/support (8456acd) — @tomcdj71
  • fix(caddy): allow data URIs in CSP script-src for AssetMapper (d2743ed) — @tomcdj71
  • chore(AssetMapper): update dashboard frontend build for AssetMapper (d3124d5) — @tomcdj71
  • refactor(zenfw): refresh system-update snapshot via zen pull --check (a03fadd) — @tomcdj71
  • fix(zen): refresh system-update snapshot after pull upgrade completes (b0e3e2c) — @tomcdj71
  • chore(caddy): remove stray rutorrent.conf from templates (dfb2027) — @tomcdj71
  • feat(caddy): add proxy_caddy_fragment_path for app handlers (3a5aaa7) — @tomcdj71
  • refactor(zenfw): drop legacy Caddy proxy path fallbacks (95139b2) — @tomcdj71
  • test(zen): add domain helper tests and set domain i18n strings (45129e8) — @tomcdj71

setup (0b2f5de)

  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (891c984) — @tomcdj71
  • fix(PHP): grant Caddy access to php-fpm socket via listen.acl_users. (47d6dd2) — @tomcdj71
  • fix(Firewall): pre-declare SSH and web ports before nftables default-deny. (326a6fe) — @tomcdj71
  • fix(Firewall): open firewall port 443/tcp for Caddy after nftables init. (2fb9e22) — @tomcdj71
  • fix(HarmonyUI): ensure var/ is writable by krate before Harmony migrations. (716093e) — @tomcdj71
  • feat(Firewall): wire nftables firewall into SSH/FTP setup phase (4264b8d) — @tomcdj71
  • fix(HarmonyUI): expose APP_ENV=prod to php-fpm for HarmonyUI (c41b5cf) — [@TomCD...
Read more
Loading

KRATE 0.7.0 beta.3

KRATE 0.7.0 beta.3 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Jul 18:19
v0.7.0-beta.3
3549b3a

KRATE 0.7.0
Tag v0.7.0-beta.3
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.3-trixie_amd64.deb ceee8555c445c497c48803913da62e66873e9c1376499b99d09bb4e0b10531d3

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (1765542)

  • fix(domain): parse OpenSSL SAN values from continuation line (1765542) — @tomcdj71
  • feat(domain): add domain::cert::list for Caddy and VSFTPD certificates (16a37f1) — @tomcdj71
  • fix(lifecycle): resolve url_base before proxy routing is computed (24b9602) — @tomcdj71
  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71
  • fix(BashCompletion): call _software_flag_expects_value outside [[ ]] (39621b9) — @tomcdj71
  • feat(Rollback): add i18n strings for setup --rollback recovery (127498f) — @tomcdj71
  • fix(Support): bound support code random index to alphabet size (61b26bd) — @tomcdj71
  • docs(Support): document auditable support and audit UX (cdc7dca) — @tomcdj71
  • feat(zen): add zen support audit subcommand (e1f9379) — @tomcdj71
  • feat(zen): wire zen support to auditable session flow (0d86e54) — @tomcdj71
  • feat(Support): add krate-supportd and auditable session scripts (1107bd3) — @tomcdj71
  • feat(zen): show opaque support code with 6h expiry and progress (1d933f7) — @tomcdj71
  • fix(zenfw): keep Tailwind CLI binaries executable under var/tailwind (2700137) — @tomcdj71
  • fix(zenfw): reuse existing trim_copy in APT recent_changes parser (ffb6db0) — @tomcdj71
  • feat(zenfw): add APT recent_changes command from history.log (5c30197) — @tomcdj71
  • fix(zen): repair zen pull compile errors after version display change (9667947) — @tomcdj71
  • fix(Support): allocate PTY for sshx support session startup (8436b4d) — @tomcdj71
  • fix(zen): show full prerelease version after zen pull (f269ab9) — @tomcdj71
  • feat(zenfw): add APT list_upgradable and upgrade_packages commands (9c5ce77) — @tomcdj71
  • fix(Support): relocate sshx install under /var/lib/krate/support (8456acd) — @tomcdj71
  • fix(caddy): allow data URIs in CSP script-src for AssetMapper (d2743ed) — @tomcdj71
  • chore(AssetMapper): update dashboard frontend build for AssetMapper (d3124d5) — @tomcdj71
  • refactor(zenfw): refresh system-update snapshot via zen pull --check (a03fadd) — @tomcdj71
  • fix(zen): refresh system-update snapshot after pull upgrade completes (b0e3e2c) — @tomcdj71
  • chore(caddy): remove stray rutorrent.conf from templates (dfb2027) — @tomcdj71
  • feat(caddy): add proxy_caddy_fragment_path for app handlers (3a5aaa7) — @tomcdj71
  • refactor(zenfw): drop legacy Caddy proxy path fallbacks (95139b2) — @tomcdj71
  • test(zen): add domain helper tests and set domain i18n strings (45129e8) — @tomcdj71
  • feat(zen): replace -s label with --subdomain install flag (b333029) — @tomcdj71
  • feat(zen): add set domain for apex and per-user subdomains (36b044d) — @tomcdj71

setup (0b2f5de)

  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (891c984) — @tomcdj71
  • fix(PHP): grant Caddy access to php-fpm socket via listen.acl_users. (47d6dd2) — @tomcdj71
  • fix(Firewall): pre-declare SSH and web ports before nftables default-deny. (326a6fe) — @tomcdj71
  • fix(Firewall): open firewall port 443/tcp for Caddy after nftables init. (2fb9e22) — @tomcdj71
  • fix(HarmonyUI): ensure var/ is writable by krate before Harmony migrations. (716093e) — @tomcdj71
  • feat(Firewall): wire nftables firewall into SSH/FTP setup phase (4264b8d) — @tomcdj71
  • fix(HarmonyUI): expose APP_ENV=prod to php-fpm for HarmonyUI (c41b5cf) — [@tomcdj71](htt...
Read more
Loading

KRATE 0.7.0 beta.2

KRATE 0.7.0 beta.2 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Jul 11:45
v0.7.0-beta.2
3549b3a

KRATE 0.7.0
Tag v0.7.0-beta.2
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.2-trixie_amd64.deb cc93dfb238db34aa42f4cfcef360faddc5680ccadd0370229403b99a5838fd7b

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (40b5c38)

  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71
  • fix(BashCompletion): call _software_flag_expects_value outside [[ ]] (39621b9) — @tomcdj71
  • feat(Rollback): add i18n strings for setup --rollback recovery (127498f) — @tomcdj71
  • fix(Support): bound support code random index to alphabet size (61b26bd) — @tomcdj71
  • docs(Support): document auditable support and audit UX (cdc7dca) — @tomcdj71
  • feat(zen): add zen support audit subcommand (e1f9379) — @tomcdj71
  • feat(zen): wire zen support to auditable session flow (0d86e54) — @tomcdj71
  • feat(Support): add krate-supportd and auditable session scripts (1107bd3) — @tomcdj71
  • feat(zen): show opaque support code with 6h expiry and progress (1d933f7) — @tomcdj71
  • fix(zenfw): keep Tailwind CLI binaries executable under var/tailwind (2700137) — @tomcdj71
  • fix(zenfw): reuse existing trim_copy in APT recent_changes parser (ffb6db0) — @tomcdj71
  • feat(zenfw): add APT recent_changes command from history.log (5c30197) — @tomcdj71
  • fix(zen): repair zen pull compile errors after version display change (9667947) — @tomcdj71
  • fix(Support): allocate PTY for sshx support session startup (8436b4d) — @tomcdj71
  • fix(zen): show full prerelease version after zen pull (f269ab9) — @tomcdj71
  • feat(zenfw): add APT list_upgradable and upgrade_packages commands (9c5ce77) — @tomcdj71
  • fix(Support): relocate sshx install under /var/lib/krate/support (8456acd) — @tomcdj71
  • fix(caddy): allow data URIs in CSP script-src for AssetMapper (d2743ed) — @tomcdj71
  • chore(AssetMapper): update dashboard frontend build for AssetMapper (d3124d5) — @tomcdj71
  • refactor(zenfw): refresh system-update snapshot via zen pull --check (a03fadd) — @tomcdj71
  • fix(zen): refresh system-update snapshot after pull upgrade completes (b0e3e2c) — @tomcdj71
  • chore(caddy): remove stray rutorrent.conf from templates (dfb2027) — @tomcdj71
  • feat(caddy): add proxy_caddy_fragment_path for app handlers (3a5aaa7) — @tomcdj71
  • refactor(zenfw): drop legacy Caddy proxy path fallbacks (95139b2) — @tomcdj71
  • test(zen): add domain helper tests and set domain i18n strings (45129e8) — @tomcdj71
  • feat(zen): replace -s label with --subdomain install flag (b333029) — @tomcdj71
  • feat(zen): add set domain for apex and per-user subdomains (36b044d) — @tomcdj71
  • feat(zen): resolve app url_base from user subdomain and install flag (cbf8b0f) — @tomcdj71
  • feat(caddy): add user subdomain site templates and parent cookie domain (daa120f) — @tomcdj71
  • feat(zenfw): split proxy snippets into path and host routing modes (a5a6a4a) — @tomcdj71

setup (0b2f5de)

  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (891c984) — @tomcdj71
  • fix(PHP): grant Caddy access to php-fpm socket via listen.acl_users. (47d6dd2) — @tomcdj71
  • fix(Firewall): pre-declare SSH and web ports before nftables default-deny. (326a6fe) — @tomcdj71
  • fix(Firewall): open firewall port 443/tcp for Caddy after nftables init. (2fb9e22) — @tomcdj71
  • fix(HarmonyUI): ensure var/ is writable by krate before Harmony migrations. (716093e) — @tomcdj71
  • feat(Firewall): wire nftables firewall into SSH/FTP setup phase (4264b8d) — @tomcdj71
  • fix(HarmonyUI): expose APP_ENV=prod to php-fpm for HarmonyUI (c41b5cf) — [@tom...
Read more
Loading

KRATE 0.7.0 beta.12

KRATE 0.7.0 beta.12 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Aug 11:24
v0.7.0-beta.12
3549b3a

KRATE 0.7.0
Tag v0.7.0-beta.12
Channel pre-release (beta)

Packages

Platform File SHA256
debian13-amd64 krate_0.7.0.beta.12-trixie_amd64.deb 79adc50ce228f3bdd8dea547f6d8bc5b9a435cd868ca469ee665a8572c26c4f8

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (e002bc4)

  • chore(repo): drop accidental CMake build-test tree (e002bc4) — @tomcdj71
  • fix(dashboard): keep HarmonyUI var/ shared during updates (6ad78db) — @tomcdj71
  • fix(pull): select latest release by version, not GitHub list order (ce3ff74) — @tomcdj71
  • feat(telemetry): collect SMART disk health in snapshot (0f22178) — @tomcdj71
  • feat(telemetry): add processes, thermals, and storage pool collectors (7d1319f) — @tomcdj71
  • feat(telemetry): collect multi-GPU metrics for NVIDIA, AMD, and Intel (803eef1) — @tomcdj71
  • feat(telemetry): expose NVIDIA GPU util, VRAM, and temperature (bd77300) — @tomcdj71
  • chore(artifacts): delete CMake build artifacts and configuration files (8566dfc) — @tomcdj71
  • fix(crypto): harden machine fingerprint with root disk UUID and MAC (5197f8f) — @tomcdj71
  • checkpoint before checking out develop (d28b293) — @tomcdj71
  • fix(provider): detect OVH VPS via cloud-init and hostname markers (115a8f8) — @tomcdj71
  • fix(zen): repair set domain validation and pull --check snapshots (d27510e) — @tomcdj71
  • fix(license): use canonical KRATE/zen/1.0 User-Agent for API calls (9f0ebf4) — @tomcdj71
  • feat(license): unify payload contract and enforce free update delay (a6b376d) — @tomcdj71
  • fix(license): upgrade local-free fallback when the API is reachable (b47b374) — @tomcdj71
  • fix(software): qualify Options in subdomain install defaults helper (f1c788b) — @tomcdj71
  • fix(provider): broaden OVH detection on modern VPS images (308b441) — @tomcdj71
  • feat(license): add license::request and refresh API-signed licenses. (c5ed87b) — @tomcdj71
  • feat(software): default CLI installs to subdomain when user routing is on (d2a57c9) — @tomcdj71
  • refactor(domain): subdomain routing opt-out instead of opt-in (2af39b2) — @tomcdj71
  • fix(domain): honor autocomplete -s for subdomain install eligibility (f32b576) — @tomcdj71
  • fix(caddy): use parent-relative imports in per-user site template (f41df9f) — @tomcdj71
  • fix(domain): repair missing user site block when subdomain label exists (f18f2e8) — @tomcdj71
  • fix(tmpfiles): add www-data-writable zen job log directory (422a9fd) — @tomcdj71
  • feat(domain): auto-provision default user subdomain labels (eb68c4b) — @tomcdj71
  • feat(domain): regenerate VSFTPD TLS cert when apex domain changes (decca33) — @tomcdj71
  • fix(domain): parse OpenSSL SAN values from continuation line (1765542) — @tomcdj71
  • feat(domain): add domain::cert::list for Caddy and VSFTPD certificates (16a37f1) — @tomcdj71
  • fix(lifecycle): resolve url_base before proxy routing is computed (24b9602) — @tomcdj71
  • fix(pull): compare installed KRATE upstream version reliably (40b5c38) — @tomcdj71
  • fix(support): terminate sshx session on disable (b0e0b31) — @tomcdj71
  • fix(support): resolve audit session dir for remote shells (7f54993) — @tomcdj71
  • fix(support): ensure session wrapper is executable at install (d3f5096) — @tomcdj71
  • fix(Support): gate session readiness on captured sshx URL (91e34b7) — @tomcdj71
  • fix(Caddy): prune stale template artifacts from /etc/caddy (5461dc1) — @tomcdj71
  • fix(Support): stop krate-supportd from killing session during startup (c485b0b) — @tomcdj71
  • fix(Support): tolerate null JSON fields in krate-supportd session state (13079b2) — @tomcdj71
  • fix(Support): resolve build_status_json compile errors in CI (a09bfa1) — @tomcdj71
  • feat(Support): add JSON output for status and audit commands (fcd6438) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level (02abed1) — @tomcdj71
  • fix(Dependency): use 7200s timeout for platform apt install phases (b4f52ac) — @tomcdj71
  • fix(Support): find prebuilt zenfw package when building krate-supportd (bdcd400) — @tomcdj71
  • feat(License): gate user and firewall CLI on premium license features (a10fc3a) — @tomcdj71
  • chore(Branding): drop get.runkrate.com from zenfw trusted hosts (d45ce83) — @tomcdj71
  • chore(Branding): point console services and license client to runkrate.com (9e2de5e) — @tomcdj71

setup (71a0d80)

  • chore(repo): harden ignore rules and neutralize conf example (71a0d80) — @tomcdj71
  • fix(setup): stop using zenfw::license::k_license_user_agent in activateLicense (7f5752b) — @tomcdj71
  • fix(license): send canonical User-Agent on setup activation (c0d9afa) — @tomcdj71
  • feat(setup): align local-free license with canonical payload contract (58cab9c) — @tomcdj71
  • feat(setup): add account_email for paid license activation (d0c3d7e) — @tomcdj71
  • fix(setup): wait for apt lock before package steps (07b539b) — @tomcdj71
  • fix(Caddy): prune package-only templates after copying Caddy tree (0b2f5de) — @tomcdj71
  • fix(Caddy): import public TLS fragment at site level during setup (1a65480) — @tomcdj71
  • fix(Rollback): repair stop-services shell and wait for apt lock (cf336bd) — @tomcdj71
  • feat(License): disable premium features on free local license (e918f8e) — @tomcdj71
  • chore(Branding): use runkrate.com endpoints in setup installer (9c9ba52) — @tomcdj71
  • feat(Rollback): restore APT snapshot on failure and via setup --rollback (e6b4195) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot via zen pull --check after install (b46307a) — @tomcdj71
  • fix(Permissions): resolve krate group with getgrnam in zenfw.conf.local permissions (472b622) — @tomcdj71
  • fix(Permissions): call intl::timezone::set and defer krate group on zenfw.conf.local (c022cd4) — @tomcdj71
  • feat(ZenConfig): default cli.mode=original during install (8991da0) — @tomcdj71
  • fix(ZenConfig): pass CommandArgs to intl::set_timezone zen_invoke (cca64dc) — @tomcdj71
  • fix(Install): persist public.base.url for app install infobox URLs (85a9324) — @tomcdj71
  • fix(Install): show detected IP or configured domain instead of localhost (6ed230a) — @tomcdj71
  • feat(PlatformSettings): persist platform locale settings and print install summary (695ebff) — @tomcdj71
  • fix(PHP): apply 99-krate.ini permissions after template edits (fce87b2) — @tomcdj71
  • feat(SystemUpdate): refresh update snapshot at end of installation (58ccd8a) — @tomcdj71
  • fix(CI): build against older zenfw prefix and fix CI app token input (80f6b61) — @tomcdj71
  • feat(Install): seed SMTP sender from install email and PHP 8.5 stack (641bf53) — @tomcdj71
  • chore(ci): bump github-app-token and upload-artifact actions (7ac7225) — @tomcdj71
  • chore(ci): bump actions/checkout to v6 (81d661c) — @tomcdj71
  • fix(ZenConfig): persist zenfw.command.timeout during install (34c0019) — @tomcdj71
  • fix(PHP): stop pinning APP_ENV in the PHP-FPM pool (c4a6aed) — @tomcdj71
  • fix(ZenConfig): persist krate.conf branch=beta to zenfw.conf.local (5ef8ce7) — @tomcdj71
  • fix(Permissions): declare zenfw_conf_finalize_local_permissions after permission_set (1b27a26) — @tomcdj71
  • fix(Permissions): normalize krate runtime permissions for timers and vault (9db0cb2) — @tomcdj71
  • fix(PHP): restart PHP instead of reload after pool changes (`891c...
Read more
Loading