-
ChatTLLX v1.17.1
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 3m46sContainer images / Build temporary amd64 candidates (push) Successful in 6m19sContainer images / Smoke-test App candidate (push) Successful in 59sContainer images / Smoke-test Whisper candidate (push) Successful in 43sContainer images / Publish immutable amd64 candidates (push) Successful in 49sRelease / Verify and publish release (push) Successful in 1m16sreleased this
2026-09-26 12:59:16 +00:00 | 13 commits to main since this releaseAdded
- Provide a signed, checksum-bound Proxmox-host setup script and guided command that creates,
personalizes, and seals the Agent-Ready base CT without commands inside the guest.
Fixed
- Allow longer Proxmox clone tasks and guest startup; pause automatic warm-pool provisioning
after a failure instead of creating an unattended clone retry loop. - Retire incomplete sandbox journal entries only when the cluster confirms the CT is absent,
and bound deleted tombstones so they cannot exhaust the encrypted journal. - Add an offline operator journal-repair command for stale locks, confirmed-absent records,
and verified encrypted-backup restores; preserve encrypted evidence before every change. - Ship the CT image with D-Bus and an enabled systemd-networkd DHCP profile rather than requiring
post-install package/network patches. Give unprivileged guest jobs private, writable, size-bounded
RAM-backed/tmpand/var/tmp; check both services and scratch during host setup.
Security
- Refuse sandbox image publication until the complete local release passes checksum and
minisign verification against the application's pinned public key. Scan only real image
files and fail closed on scanner errors instead of following dangling symlinks. Require a clean
source tree before recording a Git revision in an official image.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Provide a signed, checksum-bound Proxmox-host setup script and guided command that creates,