Fluxheim 1.3.0

[eldryoth]

Fluxheim 1.3.0 Release Notes

Summary

Fluxheim 1.3.0 is the shared ingress/TLS feature-graph split release. It makes
the focused cache and proxy profiles TLS/ACME-capable without forcing unrelated
application modules into those builds.

• Release type: focused packaging and feature-boundary release
• Compatibility: default and full builds remain broad production builds;
  focused cache/proxy images are stricter by design
• Primary area: Cargo feature graph, containers, packaging, and release docs

Scope

Fluxheim 1.3.0 starts the shared ingress/TLS feature-graph split. The goal is
to make TLS and ACME usable by focused builds such as cache, proxy, and future
load-balancer images without forcing every deployment to compile unrelated
webserver or cache modules.

Highlights

• TLS backends now depend on the shared ingress feature instead of forcing
  the full proxy feature.
• Added focused profile aliases:
  • profile-full
  • profile-web-server
  • profile-cache-edge
  • profile-proxy-edge
  • profile-load-balancer-edge
• Added CI validation for the new focused profile aliases.
• Added focused container configs for cache-edge and proxy-edge image builds.
• Added runtime config guardrails so binaries compiled without web or
  cache reject configs that require those modules.
• Expanded local and GitHub clippy coverage for TLS-only, full, web-server,
  cache-edge, proxy-edge, and load-balancer-edge builds.
• Updated the roadmap:
  • 1.3.1+: PHP/FastCGI and PHP runtime follow-ups.
  • 1.4: advanced proxy parity.
  • 1.5: enterprise load-balancer parity.
  • 1.6: shared Wasm extensibility.

Compatibility Notes

The focused profiles are a compatibility step toward stricter images. Static
web serving still uses the shared proxy runtime in this first split, so
profile-web-server intentionally includes proxy.

The load-balancer image profile is prepared in CI but remains gated until the
1.5 load-balancer line unless explicitly requested in a manual image
workflow run.

Checksums And Signatures

• Commit: 91c4cfe74b34c65f3d5d8b1f27ab39f725c91c5c
• Local gate: GitHub CI green before tag; local release metadata checks passed
• CodeQL/code scanning: no open release-blocking alerts before tag
• Source archive checksums:
  • 1e1d7cede7b147d9f2a30d9c992eaec07ef202302eac2f52917e9892c5f7f8f7 fluxheim-1.3.0.tar.gz
  • ef31837452bb1c67bdaf440ccc57bad08893393de00712b259442181cd0bf60a fluxheim-1.3.0.zip
• Binary checksums:
  • 26d2220a8a8e6eefd5b0fc65de100c9a55896ef359aea92b62840d09d44f29be fluxheim-1.3.0-full-x86_64-linux.tar.gz
  • 64f73b293ba87f9209744501e30b20c62ccd1e853f98435e7603431edb95bee3 fluxheim-1.3.0-cache-x86_64-linux.tar.gz
  • 8a7cca9dd3f434895dae4bc4c3cad45005683fd2d813301b3da08a18c815e71c fluxheim-1.3.0-proxy-x86_64-linux.tar.gz
• SBOM checksums:
  • 0b98ffa64f8597c68aa9e7dfa0bab75c4ceb4027113705e2564575382500c7a1 fluxheim.spdx.json
  • 20af0d1856635524c9894705688171244e81baec0a3247e4f7d0290f7acc74f7 fluxheim.cyclonedx.json
• Reproducible build:
  • 39065869d07a21352971b7c884ae3f3a93f1cf1db40929e362022598b631d45b
• Full Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:83f6649a2da859f9d1e45d300dbabb41ef72e0ddfd8ae881fc645733e34c6318
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:3da7a8c8f37b1acd13a5a0d28cd9350a9a9ef1adf7cea1aaf555fd3fc1e9fe74
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:b1f95109f9b67278ade4b197b02af51a4cc2be612270b32df5339f50ee7b3f92
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:41bbc9f5c585af3c66a61a221a1a96b9403cc38b370b3156d03963e243d7015f
• Cache Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:bb4152e92bd89e4c1dd09ce4e583cf6340c0737b04f12a5dd478cf90e6026a6d
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:4bfae69db74e1aea20ff3abd6e5b41550d8e7b19bbba86faec9e000905ad1bdd
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:69937a3ee2ac45faa1e737f16a2938ba05b8669b4d64a83fa0d5629d002b46c6
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:7f2b6010eff66f0edb4f7c82107468c99d08d9bd7e7b1d764cdb1912b7afef2e
• Proxy Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:2f7dd19fd273236b34fd6fa09b07fd782c349004fd3650f0647ca0a771ed4b94
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:2e1e2bd355e5bb47a160f76ccb35510e557b018aae4387827291752948aec32c
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:96927c467c99234fbbe9d6f6f2f66f722652b31a2b95935a758d0b783940d8eb
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:3bd12333af9ea438eb50ecd545cc19df5c4b7319e2e88fa2476e1d2f7033d936
• Tag signature:
  • Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4

---

This discussion was created from the release Fluxheim 1.3.0.