v0.8.6

[github-actions[bot]]

Levelrail v0.8.6 is a self-hosted deployment platform: one control plane for Docker apps, databases, TLS, logs, metrics and rollback across your own servers. A lightweight alternative to Coolify, Dokploy and Kubernetes for small teams.

What's changed

Features

• web: show failure class and copyable error excerpt on deploys (4ceea67) by @thegdsks

Bug fixes

• cli: deploy exits right after the summary (94f3bef) by @thegdsks
• deploy: show why a build failed, stop claiming services run early (cb58273) by @thegdsks
• security: keep the first-run setup token out of the service log (9fd4616) by @thegdsks
• deploy: rollback no longer leaves older releases running (846fee4) by @thegdsks
• install: one copy-pasteable CLI login sequence after install (a27f396) by @thegdsks
• cli: clearer errors for up without git and a non-numeric match (61fff3b) by @thegdsks
• deploy: overlapping deploys no longer cut a release mid-drain (11213b4) by @thegdsks
• install: keep the setup token out of cloud-init and CI logs (9fef9a0) by @thegdsks
• deploy: classify failed build steps correctly and link full docs URLs (c6c8158) by @thegdsks
• podman: OIDC endpoint waits for the bridge instead of failing to bind (a0c4425) by @thegdsks
• reconcile: drain each release from when traffic left it (c73a286) by @thegdsks
• reconcile: drain replicas removed by a scale-down (4dab2bd) by @thegdsks
• agent: keep container creation time from remote nodes (c1cc5d1) by @thegdsks
• deploy: a serving release keeps its drain after a restart (834a465) by @thegdsks
• podman: a zero OIDC retry interval no longer spins (f7b25a9) by @thegdsks
• security: strip terminal control codes from build errors (4513331) by @thegdsks

Documentation

• install: setup-token command that works on the server (fe0be5f) by @thegdsks

Maintenance, CI, and dependency updates (3)

• reconcile: prove superseded releases retire once the hold ends (5948b11) by @thegdsks
• Merge pull request fix: stability fixes from real-host QA on Docker and Podman #1397 from glincker/release/v0.8.7 (40648b1) by @thegdsks
• Merge pull request chore: release main #1398 from glincker/release-please--branches--main (04f73f0) by @thegdsks

Install

Fresh install on a Linux host, pinned to this release:

curl -fsSL https://raw.githubusercontent.com/glincker/levelrail/main/install.sh | sudo env LEVELRAIL_VERSION=v0.8.6 sh

Upgrade an existing install in place (keeps the unit file and data):

curl -fsSL https://raw.githubusercontent.com/glincker/levelrail/main/install.sh | sudo env LEVELRAIL_VERSION=v0.8.6 sh -s upgrade

Docker Compose: pin the image tag in docker-compose.yml:

services:
  levelrail:
    image: ghcr.io/glincker/levelrail:v0.8.6

Downloads

File	What it is
checksums.txt.sigstore.json	Control plane
levelrail-agent-linux-amd64	Node agent
levelrail-agent-linux-amd64.deb	Node agent
levelrail-agent-linux-amd64.rpm	Node agent
levelrail-agent-linux-arm64	Node agent
levelrail-agent-linux-arm64.deb	Node agent
levelrail-agent-linux-arm64.rpm	Node agent
levelrail-cli-darwin-amd64	Command line tool
levelrail-cli-darwin-arm64	Command line tool
levelrail-cli-linux-amd64	Command line tool
levelrail-cli-linux-arm64	Command line tool
levelrail-cli-windows-amd64.exe	Command line tool
levelrail-cli-windows-arm64.exe	Command line tool
levelrail-linux-amd64	Control plane
levelrail-linux-arm64	Control plane
release-manifest.json	Control plane
checksums.txt	SHA-256 of every file

Container images

Multi-arch (linux/amd64, linux/arm64), signed with cosign, SBOM and provenance attached. Also tagged v0.8, latest at release time (moving tags).

Image	Tag	Digest
ghcr.io/glincker/levelrail	v0.8.6	sha256:8590d5f3b32e6d884edc7c28daf3ecc22f7f0ae22064f4dc4db7e7cb05a096ec
ghcr.io/glincker/levelrail-agent	v0.8.6	sha256:1cdb55fa8caa882e0275dfb6fa66e8c960a5290ed340499c0f50e894a249b8c2

Verify

Binaries: check downloads against checksums.txt:

gh release download v0.8.6 --repo glincker/levelrail --pattern 'levelrail-linux-amd64' --pattern checksums.txt
sha256sum --ignore-missing -c checksums.txt

Images: verify the keyless signature was made by this repository's release workflow:

cosign verify ghcr.io/glincker/levelrail@sha256:8590d5f3b32e6d884edc7c28daf3ecc22f7f0ae22064f4dc4db7e7cb05a096ec \
  --certificate-identity-regexp '^https://github\.com/glincker/levelrail/\.github/workflows/release\.yml@refs/(heads/main|tags/v.+)$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Contributors

Thanks to @thegdsks.

Full changelog: v0.8.5...v0.8.6 | Release page | Installing | Upgrading | Verifying signatures

---

This discussion was created from the release v0.8.6.