184 lines
7 KiB
Markdown
184 lines
7 KiB
Markdown
# Changelog
|
|
|
|
History before 0.5.0 lives in git and in [drill/RUNS.md](drill/RUNS.md),
|
|
which records not just what changed but what each drill run proved.
|
|
|
|
## Unreleased
|
|
|
|
## 0.9.0 — 2026-07-21
|
|
|
|
### Added
|
|
|
|
- `box import` stamps the trip, leaving the artifact's own mint stamp intact
|
|
(#131)
|
|
- A minted box records how it was minted, and `box info` reads it back (#103)
|
|
- A clone re-stamps its own provenance instead of inheriting its source's
|
|
(#103)
|
|
- `box info` grew a provenance block, blank on boxes that predate the stamp
|
|
(#103)
|
|
- Every fresh mint marks a `pristine` snapshot, before rig converges anything
|
|
(#104, heavy-duty/rig#62)
|
|
- A mint that converges a tenant role marks a `bootstrapped` snapshot (#130)
|
|
- CI refuses a release PR with no drill record at `drills/<version>.md`
|
|
|
|
### Changed
|
|
|
|
- `state:needs-human` is set at handoff, not by the cron (#141)
|
|
- PR labels split into two axes: `state:*` (whose ball) and `blocker:*` (what
|
|
is in the way); `state:needs-rebase` is retired
|
|
- BREAKING: the tenant templates carry rig's family suffix — `claude` →
|
|
`claude-box`, `codex` → `codex-box`, `grok` → `grok-box`, `staging` →
|
|
`staging-box` (#123, heavy-duty/rig#76)
|
|
- Changelog entries are one line each, and the whole file now follows the rule
|
|
(#147)
|
|
|
|
### Fixed
|
|
|
|
- `test/release.sh` is green on the release ceremony's own tree
|
|
- `changelog-monotonic.sh` no longer lets a duplicate heading through when it
|
|
cannot see the base (#143)
|
|
- An unreadable check rollup no longer reads as "nothing is failing"
|
|
- `state:needs-human` no longer appears on PRs a human cannot merge (#136)
|
|
- CI's shellcheck sweep now lints `.github/scripts/*.sh` (#116)
|
|
- A PR can no longer delete or duplicate a shipped changelog section and stay
|
|
green (#122)
|
|
- An upgrade over a pre-0.7.0 flat `/opt/box` no longer skips host setup (#115)
|
|
- Host setup runs the version it just installed, not whatever `current` points
|
|
at (#115)
|
|
- The pre-0.7.0 migration says what it left behind, and how to keep or reap it
|
|
(#117)
|
|
- `teardown-host.sh` refuses a terminal-less run instead of aborting mute
|
|
(#113)
|
|
- `drill/wipe.sh` no longer carries #102's SIGPIPE shape, and the pin sweeps
|
|
the class (#107)
|
|
- The racing-reader sweep guards the class, not one spelling, and names
|
|
`incus config trust list` as a second writer (#124)
|
|
|
|
## 0.8.0 — 2026-07-19
|
|
|
|
### Added
|
|
|
|
- Merging the release PR is the release, and the release re-arms main itself
|
|
(#96)
|
|
|
|
### Fixed
|
|
|
|
- The release ceremony re-arms `CHANGELOG.md`, and CI refuses to let main sit
|
|
disarmed (#108, heavy-duty/rig#67)
|
|
- Ctrl-D at a confirmation prompt aborts out loud instead of exiting in
|
|
silence (#111)
|
|
- `box restore` asks before it destroys, in the row's own words rather than
|
|
`rm`'s (#105)
|
|
- `box-firewall` could hand a UFW host the no-UFW firewall, ~2% of the time
|
|
(#102)
|
|
- A missing firewall log now diagnoses itself (#102)
|
|
- `box grant` provisions an `incus-admin` member instead of refusing them
|
|
(#99)
|
|
|
|
## 0.7.0 — 2026-07-19
|
|
|
|
### Added
|
|
|
|
- The installer defaults to the latest release, and releases publish
|
|
themselves (#83)
|
|
- `setup-host` auto-picks a free subnet — nested box-in-box with zero flags
|
|
(#80)
|
|
- `setup-host` refuses a claimed subnet, and `BOX_SUBNET` picks another (#80)
|
|
- `box doctor` knows the #80 signature: a gateway held as a local address, and
|
|
duplicate connected routes for the uplink subnet
|
|
- The `staging` template — a server-class, creds-free seed (#81)
|
|
- The `BOX_BOOTSTRAP_ROLE` template key, auto-run at mint (#81)
|
|
- The rig pin point: `RIG_REPO` / `RIG_REF` (#81)
|
|
- Server-posture template keys `BOX_REQUIRE_VM` and `BOX_AUTOSTART` (#81)
|
|
- The template test suite discovers `templates/*/` instead of hardcoding the
|
|
list (#81)
|
|
- `box export` / `box import` — a box's state that survives the box and the
|
|
host (#70)
|
|
- Versioned installs at `<root>/versions/<v>`, with `box versions` and
|
|
`box use` (#66)
|
|
- A real uninstall: `box uninstall [<version>] [--all] [--purge-host]`, ending
|
|
in an absence assert
|
|
- `BOX_INSTALL_SOURCE=<dir-or-tarball>` installs from a local tree, and CI's
|
|
rehearsal drills the uninstall to zero residue
|
|
- `test/cli.sh` drives real installs against throwaway roots and a fake incus
|
|
(154 checks)
|
|
|
|
### Changed
|
|
|
|
- Thin templates — box mints a creds-free seed, rig's bootstrap roles converge
|
|
the tenant content (#81, heavy-duty/rig#31)
|
|
|
|
### Fixed
|
|
|
|
- A wedged `incus launch` fails loudly, not forever: the launch phase is
|
|
narrated and time-boxed (#93)
|
|
- UFW's gateway carve-out converges with the bridge, and the doctor can see it
|
|
(#86)
|
|
- The boot-time gateway fallback is gone — an unaddressed bridge leaves the
|
|
persisted UFW rules alone (#86)
|
|
- `revoke --purge` re-checks the incus-user state, and stats it through
|
|
`$SUDO`
|
|
- A wedged `$BINDIR/box` no longer blocks installing
|
|
|
|
## 0.6.0 — 2026-07-18
|
|
|
|
### Added
|
|
|
|
- The restricted tier: `box grant` / `box revoke` give a user their own boxes
|
|
on the shared hardened `boxnet` (#74)
|
|
- CI runs the multi-user rehearsal on a real Incus
|
|
- Global / root install — one world-readable tree at `/opt/box` (#71)
|
|
- CI and a test suite: `.github/workflows/ci.yml` and `test/cli.sh`
|
|
|
|
### Fixed
|
|
|
|
- `box restore` never worked against Incus 6 — it dispatched `incus restore`,
|
|
which does not exist
|
|
- `box tmux` works on every template — tmux is in each template's package list
|
|
(#65)
|
|
- `box setup-host` finishes in one run, re-execing itself under
|
|
`sg incus-admin` (#63)
|
|
- `setup-host` works as root, with or without `sudo`
|
|
- `setup-host` grants `incus-admin` to the human, not to root
|
|
- `box-firewall.service` reports its state honestly, via `RemainAfterExit=yes`
|
|
- `setup-host`'s apt calls can no longer hang on the dpkg lock
|
|
|
|
### Changed
|
|
|
|
- `drill.sh` asserts the post-install stack instead of building it itself
|
|
- `install.sh` asks, sets up the host, and no-ops on re-run (#64)
|
|
- `install.sh` never overwrites an existing install
|
|
|
|
## 0.5.0 — 2026-07-15
|
|
|
|
The release the project was renamed in: the repo is `heavy-duty/box`, matching
|
|
the CLI it ships. Everything legacy-facing is honored forever — the
|
|
`user.claudebox=1` tag, the `.claudebox/` runbook folder, the old symlink the
|
|
installer retires — but nothing current carries the old name.
|
|
|
|
### Added
|
|
|
|
- `codex` and `grok` templates
|
|
- `box expose <box> <port> [<host-port>]` — a loopback-only door to a port
|
|
inside a box
|
|
- Inline resource overrides on `new`: `--cpu`, `--memory`, `--disk` (#57)
|
|
- Host lifecycle as verbs: `box setup-host`, `box teardown-host`,
|
|
`box migrate-host`
|
|
- The `.box/` recipe convention, renamed from `.claudebox/` (both spellings
|
|
read)
|
|
|
|
### Fixed
|
|
|
|
- VM mints no longer hang at GRUB — boxes launch with
|
|
`security.secureboot=false`
|
|
- `box expose` actually delivers packets
|
|
- Firewall rules converge on upgrade instead of pinning a host to the release
|
|
that first ran there
|
|
- Failed mints tell you why
|
|
- `grok` installs the binary it actually ships
|
|
|
|
### Changed
|
|
|
|
- Debrand complete — env vars, install dir, docs, template descriptions and
|
|
the README all say `box`; the install URL is `heavy-duty/box`
|
|
- The drill grew from 47 to 84 checks
|