Hash for bronze beaver

[MorningLightMountain713]

Features:

• Base image now Ubuntu 25.10
• Much better fluxd database verification (including bootstrap sha256 sums)
• Now utilizes geo based CDN for bootstrap downloads
• Now shows what CDN node is being used for the download
• Chain downloads (CDN) are now resumable and stream multiple chunks simultaneously
• Latest packages and security updates
• Split configuration monolith into frontend / backend and dropped privileges
• New d-bus privileged service for secure system configuration and auditability
• Migrated configure api backend from Quart to fastapi
• Migrated from mongodb to sqlite3 for config database (removed dependency on mongodb)
• Gravity now shows installation state
• Fluxd now displays daemon state
• Fluxbenchd now displays bench state
• New Fluxbenchd ZMQ subscriptions for real time bench updates
• Both fluxd and fluxbenchd metrics are now clickable / selectable, and show full output
• Start node directly from the node itself with encrypted delegate key (option at install)
• New AppArmor profiles including custom ssh profiles for enhanced security
• TUI is now available over ssh via new user with same pubkey as operator. (New user is fluxtui)
• New dracut initrd build for live ISO
• Remove legacy bios option and grub, use pure UEFI boot
• Custom Intrusion Detection System (IDS) with automatic blacklisting
• New service to manage NodeJS modules (match system version) for nodeJS updates
• Update to NodeJS 24.x
• Retire multitoolbox
• Now use systemd-pcrlock to seal encryption keys against PCRs 4,7,11. (Prior was only 7) VMWare incompatible nodes are excluded
• System now sets local timezone on boot, and will only upgrade during the hours of midnight to 6:00am.
• Remove blocked repositories and ports from user config
• Reworked UPnP builder (tidy old UPnP mappings etc)
• On network failure at boot - it now listens for interface / network events and polls connectivity endpoints to determine connectivity
• Add ability to reconfigure multiple (all) nodes under the same pubkey simultaneously. Excludes updating fluxd data (txid, private key etc)
• Add ability to remove a VLAN interface
• Improved startup network connectivity checks (and dismiss on reconnection)
• Improved warning messages if CPU type has changed (non AVX) on a running system

Bugfix:

• Patched several minor security vulnerabilities related to the config webserver
• No longer break dpkg / apt on fluxd / fluxbenchd runtime updates and node rebooting
• Remove files / old data from overlay
• Fixed issue where on node crash / power cut, xinit may not start if lock files present
• Fixed issue where changing a public ip would crash configure app (same with VLAN)
• Fixed issue where curtin (installer) would crash occasionally when installing over the top


Known Issues:

• Installer network screen still has bugs. These will be fixed on the next release. (Reconfigure network screen is fixed in main runtime)
• When Zero Touch installing on Proxmox… fluxbenchd starts before it's meant to, it will fail benchmarks to start. (Then pass once fluxos is running)
• The Start node text mentions you can create a delegate key in the frontend - you can't
• There might be some rough edges around the reconfiguring multiple nodes at once

[Cabecinha84]

ack