25 Releases 235 Tags

RSS Feed

• v7.0.0 5b96fcae10

  Compare

  Onebox v7.0.0

  jkunz released this 2026-08-03 20:33:11 +00:00 | 151 commits to main since this release

  2026-08-03 - 7.0.0

  Breaking Changes

  • replace the standalone MongoDB and SmartStorage platform-service surface with Corestore (platform)
    • Remove the legacy mongodb and smartstorage provider variants and the superseded MongoDB replica-set migration command.
    • Require the explicit checkpoint-gated Corestore cutover for existing installations while preserving MongoDB wire-protocol workload variables.
  • replace legacy MongoDB and SmartStorage services with Corestore (platform)
    • Remove standalone MongoDB and SmartStorage platform providers in favor of a unified Corestore provider for database and object-storage resources.
    • Replace the MongoDB replica-set migration command with a checkpoint-gated Corestore platform cutover.
    • Upgrade App Store and storage contracts to v2, including sealed secret ingress, generated/file-delivered secrets, and Corestore backup APIs.
    • Authenticate hosted apps with signed machine identities and revision-fenced lifecycle actions.

  Features

  • consolidate database and object storage under Corestore (platform)
    • Replace the standalone MongoDB and SmartStorage platform providers with one pinned Corestore owner while preserving the MongoDB wire protocol and standard workload variables.
    • Add an explicit, checkpoint-gated, replay-safe migration under ts_migration/ that converts non-empty legacy databases, atomically replaces resource credentials, and retains recovery containers.
    • Consume Corestore's exact v2 storage capability, binding, credential, release, and database-backup contracts.
  • add end-to-end App Store secret contracts (security)
    • Seal declared browser and CLI secret inputs to a persistent X25519 recipient with install-specific authenticated context.
    • Generate declared values inside Onebox and deliver file-only secrets through Docker secrets without duplicating them into the public environment.
  • authenticate hosted apps with signed machine identities (hosted-app)
    • Issue encrypted-at-rest, audience-scoped RS256 JWTs and rotate legacy or near-expiry control tokens through normal runtime reconciliation.
    • Replace free-form bootstrap payloads with typed message/setup-route actions and revision-fenced atomic lifecycle transitions.

  Fixes

  • keep external registry passwords out of process arguments (security)
    • Require registry passwords through a bounded single-line stdin value and remove the process-argument password form.
    • Keep credentials encrypted in Onebox and attach them only to the exact Docker pull request instead of persisting them through docker login.
  • keep secret settings out of process arguments (security)
    • Require every recognized secret setting through the bounded stdin form and reject positional secret values.
    • Require App Store secret overrides as a bounded JSON object through --secrets-stdin, reject declared secret keys supplied through --env, and seal values before installation.
  • consume the owner package for mutable application image pulls (docker)
    • Upgrade @apiclient.xyz/docker to 7.2 and remove Onebox's raw Docker Engine pull request and response parsing.
    • Keep exact digest pulls separate while delegating mutable-tag validation, request-scoped credentials, progress failures, direct inspection, and stale-cache rejection to the Docker package.
  • consume owner-level fail-closed Swarm stop proof (docker)
    • Upgrade @apiclient.xyz/docker to 7.3 and remove Onebox's raw service update and task-state proof logic.
    • Delegate exact-ID replicated-service shutdown and bounded terminal-task proof to the Docker package while retaining standalone-container proof locally.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)