Skip to content

WolfStack v24.7.1

Choose a tag to compare

@github-actions github-actions released this 24 May 20:05
· 1645 commits to master since this release

v24.7.1: surface existing extra NICs in the VM editor (Proxmox + libvirt)

Both Proxmox list paths (qm_list_via_filesystem + qm_list_via_subprocess)
and both libvirt list paths returned extra_nics: Vec::new(), so the
editor's "Additional Network Interfaces" section was always empty for
existing VMs — operator could add but couldn't edit existing net1/net2/…
adapters. Fixed via two parsers:

  • parse_pve_extra_nic walks netN: virtio=MAC,bridge=X lines, returns
    (n, NicConfig) so the caller sorts by index. Skips wnbr-* (the WolfNet
    bridge is owned by network_mode, not an editable NIC).
  • parse_libvirt_extra_nics walks blocks, skipping the first
    (= primary NIC, shown via the preset cards) and any wnbr-* bridges.

Both backends now also derive primary-NIC mode from the actual bridge
plus a WolfNet-attachment-wins-rule, so a VM with WolfNet stays on the
WolfNet preset on open instead of silently displaying NAT and risking
a net1 wipe on the next save.


Verifying this release

Each binary is signed via cosign keyless OIDC (no key distribution — signing identity is the GitHub Actions workflow itself, anchored to the Sigstore Fulcio CA and the Rekor transparency log) and ships with a SLSA build provenance attestation.

Verify the cosign signature:

cosign verify-blob \
  --bundle wolfstack-x86_64.cosign.bundle \
  --certificate-identity-regexp 'https://github.com/wolfsoftwaresystemsltd/WolfStack/\.github/workflows/release\.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  wolfstack-x86_64

Verify the build provenance:

gh attestation verify wolfstack-x86_64 --repo wolfsoftwaresystemsltd/WolfStack

Verify the SHA-256 checksum:

sha256sum -c SHA256SUMS

Artifacts

  • wolfstack-x86_64 / wolfstack-aarch64 — static musl binaries (Linux x86_64 and ARM64 / Raspberry Pi 4+).
  • wolfstack-<arch>.cosign.bundle — cosign signature bundle (cert + signature + Rekor entry).
  • SHA256SUMS — checksums for both binaries.

For per-version history see CHANGELOG.md.