78e7c59e78
Supersedes the earlier v1.6.0-alpha artifacts from today (which were identical to v1.5.0-alpha and only existed for the update-flow smoke test). This drop actually changes behaviour: - archipelago-fips auto-activates on startup when fips_key exists; no Activate button needed. - fips_key on-disk format migrated to bech32 nsec; legacy raw-byte files from v1.5.0-alpha self-heal when this version reads them. - fips.yaml schema matches upstream jmcorgan/fips 0.3+. - VPN status row shows "Not configured" instead of "Starting…" when wg0 isn't up — no VPN peer added yet is not a failure state. New SHA256s + sizes in manifest.json. Fleet nodes .116/.228/.253 will notice within 30 min (periodic update-check). Also lets .198 self-heal its crashlooping archipelago-fips when it picks up the update. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
33 lines
2.3 KiB
JSON
33 lines
2.3 KiB
JSON
{
|
|
"version": "1.6.0-alpha",
|
|
"release_date": "2026-04-19",
|
|
"changelog": [
|
|
"Bulletproof FIPS from install — no Activate button needed. archipelago auto-starts the FIPS daemon once the seed-derived key exists on disk.",
|
|
"fips_key written as bech32 nsec (upstream fips daemon format). Auto-migrates legacy raw-byte files from v1.5.0-alpha on first load so existing installs self-heal on this OTA update.",
|
|
"fips.yaml schema updated to match upstream jmcorgan/fips 0.3+ (`node.identity.persistent: true`, `transports.udp.bind_addr`). Old schema made the daemon crashloop with 'data did not match any variant of untagged enum TransportInstances'.",
|
|
"ISO: archipelago-fips / archipelago-wg / archipelago-wg-address services no longer masked — ConditionPathExists gates them quietly pre-onboarding. nostr-vpn stays masked (deprecated).",
|
|
"ISO: persistent journalctl (500M cap) so install, first-boot, and onboarding history survive reboots for post-mortem diagnosis.",
|
|
"ISO build: verify_backend_version() refuses to ship a binary whose embedded version doesn't match core/archipelago/Cargo.toml. Catches the stale-local-build regression that shipped v1.4.0 binaries inside v1.5.0-alpha ISOs.",
|
|
"ISO build: installer-env script passed as a bind-mounted file instead of inline `bash -c '…'` — works around a podman/overlay edge case that bricked every rebuild today at debootstrap's first tar extraction.",
|
|
"VPN status UI: shows 'Not configured' instead of 'Starting…' when no VPN peer has been added yet (wg0 legitimately isn't up; 'Starting' implied something was broken)."
|
|
],
|
|
"components": [
|
|
{
|
|
"name": "archipelago",
|
|
"current_version": "1.5.0-alpha",
|
|
"new_version": "1.6.0-alpha",
|
|
"download_url": "https://git.tx1138.com/lfg2025/archy/raw/branch/main/releases/v1.6.0-alpha/archipelago",
|
|
"sha256": "04b472a80ddebb4ca089455a831d8cf82a0522cc9b289a5b66bf53dc57ff466b",
|
|
"size_bytes": 40310192
|
|
},
|
|
{
|
|
"name": "archipelago-frontend-1.6.0-alpha.tar.gz",
|
|
"current_version": "1.5.0-alpha",
|
|
"new_version": "1.6.0-alpha",
|
|
"download_url": "https://git.tx1138.com/lfg2025/archy/raw/branch/main/releases/v1.6.0-alpha/archipelago-frontend-1.6.0-alpha.tar.gz",
|
|
"sha256": "9118ac5a392c7501d1bf35c8b2c328d00a3b3f0845cb2e5f72fd4337b5687c0c",
|
|
"size_bytes": 76985839
|
|
}
|
|
]
|
|
}
|