• v1.6.3 5a8ac18afd

    hclaude released this 2026-09-17 22:09:52 +00:00 | 11 commits to master since this release

    templates 1.6.3

    Artifacts (Forgejo generic registry):

    • debian-13-trixie-ECS01_13-1.6.3_amd64.tar.zst (169 MB)
    • devuan-6-excalibur-ECS01_6-1.6.3_amd64.tar.zst (163 MB)
    • devuan-6-excalibur_6-1.6.3_amd64.tar.zst (89 MB)
    • ubuntu-24.04-noble-ECS01_24.04-1.6.3_amd64.tar.zst (140 MB)

    Changes

    1.6.3 (package-refresh rebuild following 1.6.2:
    (a) The 1.6.2 artifacts were built 2026-07-08; by 2026-09-17
    58-119 packages per template had newer versions in the
    release/-updates/-security suites (glibc, openssl 3.5.7,
    curl, bind9, python3.13, util-linux, expat, …). Registry
    files are immutable and version-as-identity applies, so
    fresh content = new revision.
    (b) REFRESH-1: every chroot phase now runs apt-get dist-upgrade
    right after its first apt-get update. debootstrap installs
    the base set from the bare release suite, and nothing ever
    upgraded it — so base packages shipped at release-pocket
    versions regardless of build date. Glaring on Ubuntu (noble
    release pocket is frozen at April 2024: a first 1.6.3 build
    still carried 48 GA-era packages — apt, dpkg, coreutils,
    libgnutls30, libpam*, zlib1g, tar, …); latent on
    Debian/Devuan between point releases.
    VM builder (build-cloud-image.sh) goes 0.2.2 -> 0.2.3 in the
    same cycle with two REAL fixes:
    SUITES-1: it bootstrapped from the bare release suite only, so
    VM images were built without -updates/-security AND shipped a
    sources.list lacking them — deployed VMs never received
    security updates via apt (Ubuntu 0.2.2 carried the April-2024
    GA kernel/openssl/openssh). LXC templates were never affected
    (sources.list has always carried all suites).
    GRUB-1: the Ubuntu qcow2 was UNBOOTABLE in 0.2.1 and 0.2.2 —
    guestfish PASS 2 aborted on mount -t sysfs (EBUSY under
    noble's mount(8)), so grub-install never ran, and the builder
    published the image anyway. Mounts are now failure-tolerant,
    a missing grub.cfg/core.img is fatal, and the script exits
    non-zero when a target fails. Devuan/Debian images were fine.
    CYCLE-1: the systemd VM unit ecs-firstboot.service was
    After=cloud-final + Before=nullmailer — an ordering cycle that
    systemd broke by skipping BOTH nullmailer.service and
    ecs-firstboot.service on every Debian/Ubuntu VM boot. Now
    ordered after cloud-init's network (hostname) stage instead.
    Refs: #46

    SHA256SUMS

    da91084b5091d50d3d63f8db9678307678c88f8b85f4b9828afcf34468da82cd  debian-13-trixie-ECS01_13-1.6.3_amd64.tar.zst
    3e4294a8ac390e58512fa1b6f060b1a71cfa4bfb1bf5b3e7669b50203c326f10  devuan-6-excalibur-ECS01_6-1.6.3_amd64.tar.zst
    dca41f8da9e80ea7c226a93926810bcd8e2b53502daec577345e9da7e5cfa01f  devuan-6-excalibur_6-1.6.3_amd64.tar.zst
    0f3f46e177bc376101a67d7846397147ddd8af7035e14f63456f43826801f9d7  ubuntu-24.04-noble-ECS01_24.04-1.6.3_amd64.tar.zst
    555b6f59d8d3554ffd869dcac1eba3937d2393f435cdb5d60261990927cd04bd  debian-13-trixie-ECS01_13-1.6.3_amd64.manifest.txt
    a8d344102131e33e21d418be2b26e5ed31c70752ae191989cff2eebe7c1729a2  devuan-6-excalibur-ECS01_6-1.6.3_amd64.manifest.txt
    0c8972bc2ff9196abf83579da491d695729d64c460287485fcfd44e4a37c6d88  devuan-6-excalibur_6-1.6.3_amd64.manifest.txt
    44a432f6c3dd21ae41e2b7cf09c4bdb4d30a3123db3f586e25c6bf5bd3c1b079  ubuntu-24.04-noble-ECS01_24.04-1.6.3_amd64.manifest.txt
    

    Pull

    forgejo-curl -sLO https://git.cloudoffice.co.za/api/packages/ECS-Public-Infra/generic/lxc-templates/1.6.3/<file>     # or .../latest/<file>
    
    Downloads