Skip to content

release: 0.9.0 — the quickstart points at the loop whose recovery says what it could not establish - #26

Merged
itswl merged 1 commit into
mainfrom
quickstart-0-9-0
Oct 27, 2026
Merged

itswl merged 1 commit into
mainfrom
quickstart-0-9-0

Conversation

@itswl

@itswl itswl commented Oct 27, 2026

Copy link
Copy Markdown
Owner

The quickstart's six image lines move from 0.8.1 to 0.9.0, pinned by digest as docs/releasing.md says. The digests are the OCI index digests GHCR serves for the 0.9.0 tags, read anonymously after the release run for the tag finished green on every job; :latest carries the same four.

Nothing in 0.9.0 is something this file depends on, so its comment keeps saying it needs 0.8.0 or newer and points at the newest. The only compose key added since 0.8.1 is HOOKRELAY_SIGNATURE_LEASE_SECONDS, which the quickstart leaves at its default.

Run the way a stranger does before this was opened, from an empty directory holding only the compose file and scripts/demo.sh: pulled by digest, the three boards answered 200 within seconds, and the demo ran all nine steps (routes ai 2, reuse 1, recovery 1; the card press executed both observations; the recovery verified the work). demo exit=0; down -v removed the containers, the volumes and the network.

Read back from the running images: the investigator's posture is no-credentials, with the instance-metadata question asked and answered no on this machine; the new probe is in the image; the pipe's lease length is 120 seconds.

Upgrading note for strangers on a cloud VM: if the instance metadata service offers a role to containers, the quickstart's readonly investigator, which has no aws CLI, now refuses to start under the default enforce. The tag note lists the ways out.

Rollback: re-pin these lines to the 0.8.1 digests; the pipe's new pending_signatures table is ignored by 0.8.1.

Gate: STACK GATE GREEN locally; CI read back before merging.

…s what it could not establish

The six image lines move from 0.8.1 to 0.9.0, pinned by the OCI index digests GHCR serves for the tags, read anonymously after the release run for the tag finished green on every job; :latest carries the same four. Nothing in 0.9.0 is something this file depends on, so the comment keeps saying it needs 0.8.0 or newer and points at the newest. The only compose key added since 0.8.1 is the lease length, left at its default here.

Run the way a stranger does, from an empty directory: pulled by digest, boards up, the demo's nine steps with the press executed and demo exit 0, down -v. Read back from the running images: the investigator's posture is no-credentials with the metadata question asked and answered no; the probe is in the image; the pipe's lease is 120 seconds. Rollback: re-pin to the 0.8.1 digests; 0.8.1 ignores the pending_signatures table.
@itswl
itswl merged commit 451abfa into main Oct 27, 2026
6 checks passed
@itswl
itswl deleted the quickstart-0-9-0 branch October 27, 2026 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant