Fluxheim 1.3.0
Fluxheim 1.3.0 Release Notes
Summary
Fluxheim 1.3.0 is the shared ingress/TLS feature-graph split release. It makes
the focused cache and proxy profiles TLS/ACME-capable without forcing unrelated
application modules into those builds.
- Release type: focused packaging and feature-boundary release
- Compatibility: default and full builds remain broad production builds;
focused cache/proxy images are stricter by design - Primary area: Cargo feature graph, containers, packaging, and release docs
Scope
Fluxheim 1.3.0 starts the shared ingress/TLS feature-graph split. The goal is
to make TLS and ACME usable by focused builds such as cache, proxy, and future
load-balancer images without forcing every deployment to compile unrelated
webserver or cache modules.
Highlights
- TLS backends now depend on the shared
ingressfeature instead of forcing
the fullproxyfeature. - Added focused profile aliases:
profile-fullprofile-web-serverprofile-cache-edgeprofile-proxy-edgeprofile-load-balancer-edge
- Added CI validation for the new focused profile aliases.
- Added focused container configs for cache-edge and proxy-edge image builds.
- Added runtime config guardrails so binaries compiled without
webor
cachereject configs that require those modules. - Expanded local and GitHub clippy coverage for TLS-only, full, web-server,
cache-edge, proxy-edge, and load-balancer-edge builds. - Updated the roadmap:
1.3.1+: PHP/FastCGI and PHP runtime follow-ups.1.4: advanced proxy parity.1.5: enterprise load-balancer parity.1.6: shared Wasm extensibility.
Compatibility Notes
The focused profiles are a compatibility step toward stricter images. Static
web serving still uses the shared proxy runtime in this first split, so
profile-web-server intentionally includes proxy.
The load-balancer image profile is prepared in CI but remains gated until the
1.5 load-balancer line unless explicitly requested in a manual image
workflow run.
Checksums And Signatures
- Commit:
91c4cfe74b34c65f3d5d8b1f27ab39f725c91c5c - Local gate: GitHub CI green before tag; local release metadata checks passed
- CodeQL/code scanning: no open release-blocking alerts before tag
- Source archive checksums:
0171b48920678b99ae77d36c7888d5b523bcb45b5827ee0ef4a3a68131863b56 fluxheim-1.3.0.tar.gzc6acdf36b9310a3c6d9731f6dcbdeed5a5e79f75835b8ce24fa1ba2009d70237 fluxheim-1.3.0.zip
- Binary checksums:
26d2220a8a8e6eefd5b0fc65de100c9a55896ef359aea92b62840d09d44f29be fluxheim-1.3.0-full-x86_64-linux.tar.gz64f73b293ba87f9209744501e30b20c62ccd1e853f98435e7603431edb95bee3 fluxheim-1.3.0-cache-x86_64-linux.tar.gz8a7cca9dd3f434895dae4bc4c3cad45005683fd2d813301b3da08a18c815e71c fluxheim-1.3.0-proxy-x86_64-linux.tar.gz
- SBOM checksums:
0b98ffa64f8597c68aa9e7dfa0bab75c4ceb4027113705e2564575382500c7a1 fluxheim.spdx.json20af0d1856635524c9894705688171244e81baec0a3247e4f7d0290f7acc74f7 fluxheim.cyclonedx.json
- Reproducible build:
39065869d07a21352971b7c884ae3f3a93f1cf1db40929e362022598b631d45b
- Full Build Container digests:
- Wolfi:
ghcr.io/valkyoth/fluxheim@sha256:83f6649a2da859f9d1e45d300dbabb41ef72e0ddfd8ae881fc645733e34c6318 - Alpine:
ghcr.io/valkyoth/fluxheim@sha256:3da7a8c8f37b1acd13a5a0d28cd9350a9a9ef1adf7cea1aaf555fd3fc1e9fe74 - SUSE Micro:
ghcr.io/valkyoth/fluxheim@sha256:b1f95109f9b67278ade4b197b02af51a4cc2be612270b32df5339f50ee7b3f92 - Debian:
ghcr.io/valkyoth/fluxheim@sha256:41bbc9f5c585af3c66a61a221a1a96b9403cc38b370b3156d03963e243d7015f
- Wolfi:
- Cache Build Container digests:
- Wolfi:
ghcr.io/valkyoth/fluxheim@sha256:bb4152e92bd89e4c1dd09ce4e583cf6340c0737b04f12a5dd478cf90e6026a6d - Alpine:
ghcr.io/valkyoth/fluxheim@sha256:4bfae69db74e1aea20ff3abd6e5b41550d8e7b19bbba86faec9e000905ad1bdd - SUSE Micro:
ghcr.io/valkyoth/fluxheim@sha256:69937a3ee2ac45faa1e737f16a2938ba05b8669b4d64a83fa0d5629d002b46c6 - Debian:
ghcr.io/valkyoth/fluxheim@sha256:7f2b6010eff66f0edb4f7c82107468c99d08d9bd7e7b1d764cdb1912b7afef2e
- Wolfi:
- Proxy Build Container digests:
- Wolfi:
ghcr.io/valkyoth/fluxheim@sha256:2f7dd19fd273236b34fd6fa09b07fd782c349004fd3650f0647ca0a771ed4b94 - Alpine:
ghcr.io/valkyoth/fluxheim@sha256:2e1e2bd355e5bb47a160f76ccb35510e557b018aae4387827291752948aec32c - SUSE Micro:
ghcr.io/valkyoth/fluxheim@sha256:96927c467c99234fbbe9d6f6f2f66f722652b31a2b95935a758d0b783940d8eb - Debian:
ghcr.io/valkyoth/fluxheim@sha256:3bd12333af9ea438eb50ecd545cc19df5c4b7319e2e88fa2476e1d2f7033d936
- Wolfi:
- Tag signature:
Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4