OpenShell Development Build

This build is automatically published on every commit to main that passes CI.

NOTE: This is a development build, not a tagged release, and may be unstable.

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=dev sh

OpenShell v0.0.105

OpenShell v0.0.105

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.105 sh

What's Changed

• fix(gator): separate review budget from approval gate by @johntmyers in #2704
• perf(supervisor-network): avoid reparsing native policy input by @shiju-nv in #2654
• fix(dev): separate Podman Machine loopback listeners by @krishicks in #2725
• feat(sandbox): add stop and start operations by @sjenning in #2653

Full Changelog: v0.0.104...v0.0.105

OpenShell v0.0.104

OpenShell v0.0.104

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.104 sh

What's Changed

• feat(build): add glibc-static supervisor libc variant by @EmilienM in #2682
• fix(sbom): detect sha256 hashes in expression-form licenses in needs_fix by @mesutoezdil in #1911
• feat(gateway,cli): windows compilation support by @araza008 in #2496
• feat(cli): warn when --env values look like credentials by @letv1nnn in #2655

New Contributors

• @EmilienM made their first contribution in #2682
• @araza008 made their first contribution in #2496

Full Changelog: v0.0.103...v0.0.104

OpenShell v0.0.103

OpenShell v0.0.103

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.103 sh

What's Changed

• fix(sandbox): acknowledge unchanged policy revisions by @NaveCohenMonday in #2557
• fix(gator): allow same-sha state nudges by @johntmyers in #2681
• feat(proxy): bind static credentials to provider endpoints by @johntmyers in #2510
• fix(gateway-interceptors): configure connect timeout and HTTP/2 keepalive on interceptor gRPC channel by @letv1nnn in #2618
• chore(ci): disable telemetry in internal test runs by @matthewgrossman in #2648
• perf(supervisor-middleware): remove body clones from local dispatch by @shiju-nv in #2679

Full Changelog: v0.0.102...v0.0.103

OpenShell v0.0.102

OpenShell v0.0.102

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.102 sh

What's Changed

• fix(e2e): separate Podman Machine loopback listeners by @matthewgrossman in #2622
• fix(policy): prevent implicit authorization inheritance by @shiju-nv in #2499
• fix(gateway-interceptors): apply tls-native-roots for HTTPS interceptor endpoints by @sauagarwa in #2666

Full Changelog: v0.0.101...v0.0.102

OpenShell v0.0.101

OpenShell v0.0.101

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.101 sh

What's Changed

• build(bazel): add credential driver targets by @SDAChess in #2649
• feat(bazel): build vm driver and pull runtime from Github by @SDAChess in #2650

Full Changelog: v0.0.100...v0.0.101

OpenShell v0.0.99

OpenShell v0.0.99

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.99 sh

What's Changed

• test: disable tests flaky under parallel stress by @SDAChess in #2611
• feat(build): add system CA root mode by @politerealism in #2324
• test(server): fix race condition in tracing tests by @krishicks in #2604
• docs: add experimental Bazel build commands by @rhuss in #2600
• feat(sandbox): honor OCI image working directories by @matthewgrossman in #2530
• docs(cli): recommend providers for secrets by @krishicks in #2603
• perf(net): set TCP_NODELAY on latency-sensitive TCP hops by @purp in #2220

Full Changelog: v0.0.98...v0.0.99

OpenShell v0.0.98

OpenShell v0.0.98

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.98 sh

What's Changed

• test(podman): gate gateway discovery test on Linux by @krishicks in #2580
• feat(bazel): add rustfmt checks to tests by @SDAChess in #2599
• feat(vm): export driver traces over OTLP by @krishicks in #2564

Full Changelog: v0.0.97...v0.0.98

OpenShell v0.0.97

OpenShell v0.0.97

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.97 sh

What's Changed

• refactor(otel): share OTLP trace provider setup by @krishicks in #2567
• feat(compute): negotiate gateway callback listeners by @elezar in #2492
• fix(server): isolate otel tracing test exporters by @krishicks in #2579
• chore(deps): bump actions/attest from 4.2.0 to 4.2.1 by @dependabot[bot] in #2572
• refactor(network): consolidate proxy egress pipeline by @johntmyers in #2373
• fix(podman): combine sandbox stop and removal by @pimlock in #2570
• chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 by @dependabot[bot] in #2573
• chore(build): bump sccache to 0.16.0 by @matthewgrossman in #2581
• test(server): stabilize watch span cancellation test by @pimlock in #2582
• fix(supervisor): quote nft log prefix in bypass rules by @gracesmith6504 in #2555
• feat(build): prototype Bazel build system by @SDAChess in #2414
• build(bazel): add OpenTelemetry crate targets by @SDAChess in #2595

Full Changelog: v0.0.96...v0.0.97

OpenShell v0.0.96

OpenShell v0.0.96

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.96 sh

What's Changed

• fix(server): bind gateway listeners before sandbox resume by @elezar in #2495
• fix(proxy): retry with backoff on transient accept errors instead of exiting by @politerealism in #2369
• fix(tasks): scope pre-commit to lint checks by @drew in #2503
• fix(cli): write exec stderr events to stderr in interactive mode by @andrewwhitecdw in #2447
• fix(cli): eliminate flaky subprocess integration tests by @rhuss in #2504
• refactor(cli): extract gateway commands into commands/gateway module by @varshaprasad96 in #2506
• fix(podman): tolerate shutdown transport closes by @elezar in #2498
• fix(sandbox): gate Linux-only ordering import by @elezar in #2513
• fix(server): stabilize flaky delete telemetry unit test by @derekwaynecarr in #2521
• fix(e2e): bound podman stop timeout in tests by @elezar in #2516
• ci: add focused macOS Rust lint by @elezar in #2515
• feat(examples): add supervisor middleware content guard by @pimlock in #2169
• feat(k8s): support configuring workspace PVC storageClassName by @loveRhythm1990 in #2463
• feat(sandbox): use policy-first OCI image identity by @matthewgrossman in #2509
• fix(cli): avoid panic on multi-byte UTF-8 in --since duration by @andrewwhitecdw in #2446
• chore(deps): bump docker/login-action from 4.5.1 to 4.5.2 by @dependabot[bot] in #2537
• refactor(compute): make sandbox readiness gateway-owned across all drivers by @elezar in #2153
• chore(deps): bump actions/stale from 10.4.0 to 11.0.0 by @dependabot[bot] in #2536
• fix(cli): isolate subprocess tests from host OPENSHELL_ env vars by @rhuss in #2523
• ci(e2e): probe VM gateway readiness by @elezar in #2544
• fix(cli): bracket IPv6 bind literals in SSH forwards by @russellb in #2552
• test(e2e): add reusable QEMU infrastructure for E2E tests by @drew in #2471
• Wire authorization into workspace model by @derekwaynecarr in #2445
• fix(gator): preserve resolved review feedback by @drew in #2533
• test(e2e): add VM-backed E2E suite runner by @drew in #2473
• refactor(server): isolate gateway listener context by @elezar in #2542
• fix(server): notify watchers after atomic policy commits by @NaveCohenMonday in #2556
• feat(observability): export gateway traces over OTLP by @krishicks in #2534
• docs: document issue lifecycle labels and roadmap sequencing by @krishicks in #2524
• fix(ci): preserve KVM access across udev restarts by @matthewgrossman in #2566
• fix(deps): update russh, DOMPurify, and gateway base by @alangou in #2575

New Contributors

• @politerealism made their first contribution in #2369
• @NaveCohenMonday made their first contribution in #2556

Full Changelog: v0.0.92...v0.0.96