archy/RELEASE-NOTES-v1.0.0.md

# Archipelago v1.0.0 Release Notes

**Release Date**: March 2026
**Target Platform**: Debian 13 (Trixie) — x86_64 and ARM64

## What is Archipelago?

Archipelago is a self-sovereign Bitcoin Node OS. Flash it to a USB drive, install on any x86_64 or ARM64 machine, and manage your personal server through a modern web interface. Run Bitcoin infrastructure, self-hosted apps, and Web5 identity — all from hardware you control.

## Key Features

### Bitcoin Infrastructure
- **Bitcoin Knots** full node with pruning support
- **LND** Lightning Network daemon with channel management UI
- **Electrs** Electrum server for wallet connectivity
- **BTCPay Server** for accepting Bitcoin payments
- **Mempool** block explorer and fee estimator
- **Fedimint** federation guardian and gateway

### Self-Hosted Apps (20+)
- **Storage**: File Browser, Immich, PhotoPrism, Nextcloud
- **Productivity**: Penpot, OnlyOffice, Vaultwarden
- **Media**: Jellyfin
- **Search**: SearXNG (private search)
- **AI**: Ollama (local LLMs with Claude, GPT, and open models)
- **Network**: Tailscale VPN, Nginx Proxy Manager, Uptime Kuma
- **Home**: Home Assistant
- **Platform**: IndeedHub, Grafana monitoring

### Web5 Identity
- DID-based digital identity (Ed25519 + secp256k1 dual key)
- Verifiable Credentials issuance and verification
- Decentralized Web Node (DWN) for data sync
- Nostr relay integration for node discovery

### Federation
- DID-authenticated peer-to-peer federation
- Remote node monitoring and management
- Bilateral trust with single-use invite codes
- Tor hidden services for private communication

### Security
- AES-256-GCM encrypted secrets at rest
- Container isolation: read-only root, capability dropping, non-root user
- TOTP two-factor authentication with backup codes
- Session management: HttpOnly cookies, SameSite=Strict, CSRF tokens
- Rate limiting on sensitive endpoints
- AppArmor profiles for container confinement
- Per-endpoint input validation

### System
- Rust backend with JSON-RPC API (<1ms response time)
- Vue 3 frontend with glassmorphism design
- WebSocket real-time updates
- Automated OTA updates with rollback
- Tor hidden services for all apps
- Goal-based onboarding wizard
- Kiosk mode for dedicated hardware

## Supported Hardware

- **x86_64**: Any 64-bit PC, Intel NUC, mini PCs
- **ARM64**: Raspberry Pi 5, other ARM64 SBCs
- **Minimum**: 4GB RAM, 32GB storage (500GB+ recommended for Bitcoin)
- **Recommended**: 8GB+ RAM, 1TB+ NVMe SSD

## Installation

1. Download the ISO for your architecture
2. Flash to USB drive (use Balena Etcher or `dd`)
3. Boot from USB on target hardware
4. Follow the automated installer
5. Access the web UI at `http://<device-ip>`
6. Set your password and start the onboarding wizard

## Known Limitations

- Bitcoin initial block download takes 3-7 days depending on hardware
- Some apps (BTCPay Server, Home Assistant) open in new tab due to X-Frame-Options
- ARM64 builds may have slower container pulls due to less cached registry content
- Tor hidden service generation takes 1-2 minutes on first boot

## Upgrade from Beta

If upgrading from v0.5.0-beta:
1. Back up your data via Settings > Backup
2. The OTA update system will handle the upgrade automatically
3. If OTA fails, reflash with the v1.0.0 ISO (app data is preserved on separate partition)

## Security Model

Archipelago follows defense-in-depth:
- **Network**: Nginx reverse proxy, Tor hidden services, VPN support
- **Application**: Container isolation with Podman (rootless)
- **Data**: AES-256-GCM encryption for secrets, 0600 file permissions
- **Auth**: Argon2 password hashing, TOTP 2FA, session rotation
- **Updates**: SHA-256 verified downloads with rollback capability

See `docs/adr/` for architectural decision records on security choices.

## Contributing

Archipelago is open source. To contribute:
1. Fork the repository
2. Create a feature branch (`feature/description`)
3. Follow the coding standards in `CLAUDE.md`
4. Submit a pull request with tests

## License

MIT License. See `LICENSE` for details.
# 2026-04-18 ISO build trigger
chore: baseline codex hardening before lifecycle refactor Snapshots the in-flight hardening work so subsequent reconcile/Quadlet phases land on a clean before/after diff. Changes: - core/container/src/podman_client.rs: image_uses_insecure_registry() whitelist for the OVH (146.59.87.168:3000) and legacy Hetzner (23.182.128.160:3000) HTTP mirrors; podman_network_settings() lifts custom networks into the Networks map so containers can join them. - core/archipelago/src/container/prod_orchestrator.rs: ensure_container_network() creates per-manifest networks on demand; apply_data_uid() now goes through host_sudo for mkdir -p + chown so bind-mount roots get created and chowned without password prompts. - core/archipelago/src/api/rpc/package/{install,update,stacks}.rs: podman pull adds --tls-verify=false only for whitelisted registries. - core/archipelago/src/bootstrap.rs: removes stale dev-mode systemd override on startup (live nodes carried it from old installers). - core/archipelago/src/config.rs: ignore ARCHIPELAGO_DEV_MODE in prod binaries — it had been silently rerouting volumes to /tmp. - apps/bitcoin-{core,knots}/manifest.yml: locate bitcoind at runtime so image-layout differences don't break entrypoint. - scripts/app-catalog-image-smoke-test.py: production catalog/image smoke test that probes a target node before users click Install. - .gitignore: cover .codex, .pnpm-store, __pycache__, *.bak. Removes filebrowser.rs.bak and two stale catalog.json.bak files (verified identical to live counterparts). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> 2026-05-01 08:52:29 -04:00			`# Archipelago v1.0.0 Release Notes`

			`Release Date: March 2026`
			`Target Platform: Debian 13 (Trixie) — x86_64 and ARM64`

			`## What is Archipelago?`

			`Archipelago is a self-sovereign Bitcoin Node OS. Flash it to a USB drive, install on any x86_64 or ARM64 machine, and manage your personal server through a modern web interface. Run Bitcoin infrastructure, self-hosted apps, and Web5 identity — all from hardware you control.`

			`## Key Features`

			`### Bitcoin Infrastructure`
			`- Bitcoin Knots full node with pruning support`
			`- LND Lightning Network daemon with channel management UI`
			`- Electrs Electrum server for wallet connectivity`
			`- BTCPay Server for accepting Bitcoin payments`
			`- Mempool block explorer and fee estimator`
			`- Fedimint federation guardian and gateway`

			`### Self-Hosted Apps (20+)`
			`- Storage: File Browser, Immich, PhotoPrism, Nextcloud`
			`- Productivity: Penpot, OnlyOffice, Vaultwarden`
			`- Media: Jellyfin`
			`- Search: SearXNG (private search)`
			`- AI: Ollama (local LLMs with Claude, GPT, and open models)`
			`- Network: Tailscale VPN, Nginx Proxy Manager, Uptime Kuma`
			`- Home: Home Assistant`
			`- Platform: IndeedHub, Grafana monitoring`

			`### Web5 Identity`
			`- DID-based digital identity (Ed25519 + secp256k1 dual key)`
			`- Verifiable Credentials issuance and verification`
			`- Decentralized Web Node (DWN) for data sync`
			`- Nostr relay integration for node discovery`

			`### Federation`
			`- DID-authenticated peer-to-peer federation`
			`- Remote node monitoring and management`
			`- Bilateral trust with single-use invite codes`
			`- Tor hidden services for private communication`

			`### Security`
			`- AES-256-GCM encrypted secrets at rest`
			`- Container isolation: read-only root, capability dropping, non-root user`
			`- TOTP two-factor authentication with backup codes`
			`- Session management: HttpOnly cookies, SameSite=Strict, CSRF tokens`
			`- Rate limiting on sensitive endpoints`
			`- AppArmor profiles for container confinement`
			`- Per-endpoint input validation`

			`### System`
			`- Rust backend with JSON-RPC API (<1ms response time)`
			`- Vue 3 frontend with glassmorphism design`
			`- WebSocket real-time updates`
			`- Automated OTA updates with rollback`
			`- Tor hidden services for all apps`
			`- Goal-based onboarding wizard`
			`- Kiosk mode for dedicated hardware`

			`## Supported Hardware`

			`- x86_64: Any 64-bit PC, Intel NUC, mini PCs`
			`- ARM64: Raspberry Pi 5, other ARM64 SBCs`
			`- Minimum: 4GB RAM, 32GB storage (500GB+ recommended for Bitcoin)`
			`- Recommended: 8GB+ RAM, 1TB+ NVMe SSD`

			`## Installation`

			`1. Download the ISO for your architecture`
			2. Flash to USB drive (use Balena Etcher or `dd`)
			`3. Boot from USB on target hardware`
			`4. Follow the automated installer`
			5. Access the web UI at `http://<device-ip>`
			`6. Set your password and start the onboarding wizard`

			`## Known Limitations`

			`- Bitcoin initial block download takes 3-7 days depending on hardware`
			`- Some apps (BTCPay Server, Home Assistant) open in new tab due to X-Frame-Options`
			`- ARM64 builds may have slower container pulls due to less cached registry content`
			`- Tor hidden service generation takes 1-2 minutes on first boot`

			`## Upgrade from Beta`

			`If upgrading from v0.5.0-beta:`
			`1. Back up your data via Settings > Backup`
			`2. The OTA update system will handle the upgrade automatically`
			`3. If OTA fails, reflash with the v1.0.0 ISO (app data is preserved on separate partition)`

			`## Security Model`

			`Archipelago follows defense-in-depth:`
			`- Network: Nginx reverse proxy, Tor hidden services, VPN support`
			`- Application: Container isolation with Podman (rootless)`
			`- Data: AES-256-GCM encryption for secrets, 0600 file permissions`
			`- Auth: Argon2 password hashing, TOTP 2FA, session rotation`
			`- Updates: SHA-256 verified downloads with rollback capability`

			See `docs/adr/` for architectural decision records on security choices.

			`## Contributing`

			`Archipelago is open source. To contribute:`
			`1. Fork the repository`
			2. Create a feature branch (`feature/description`)
			3. Follow the coding standards in `CLAUDE.md`
			`4. Submit a pull request with tests`

			`## License`

			MIT License. See `LICENSE` for details.
			`# 2026-04-18 ISO build trigger`