Highlights
-
Added
start-cli auth token create --name <name>, which creates a StartOS bearer token for API clients and prints it once. -
Add
--trustto package installation and OS-update commands to explicitly override signer trust. On StartOS 0.4.1 and later, these operations require an enabled trusted signer by default; signature and integrity verification remain mandatory with the override. -
Diagnostic updates no longer require a registry argument that had no effect.
-
start-cli auth session killtakes--pubkey <key>and--token <id>for the sessions to end, in place of positional session IDs. -
Add
disk formatto erase a drive and prepare it as a single Btrfs partition for StartOS backups. -
Preserve multiline image environment values in JSON metadata for packages using Start SDK 3.1.2 or later.
-
WireGuard configs can use a separate endpoint on NAT'd StartTunnel hosts.
tunnel device show-config --endpointsupplies an IPv4, IPv6, or DNS endpoint
independently of the local WAN assignment. Requires StartTunnel 1.5.0 or later.
Security
- Backup mount, backup information, package restore, and CIFS target add/update commands read passwords from a hidden prompt instead of positional arguments. Update automation to supply
BACKUP_PASSWORDorCIFS_PASSWORD;PASSWORDremains the separate CLI authentication credential.
Full changelog
[2.6.0]
Added
-
Added
start-cli auth token create --name <name>, which creates a StartOS bearer token for API clients and prints it once. -
Publish and promote localized OS release notes by passing a JSON locale map to
registry os version add. -
Add
--trustto package installation and OS-update commands to explicitly override signer trust. On StartOS 0.4.1 and later, these operations require an enabled trusted signer by default; signature and integrity verification remain mandatory with the override. -
Diagnostic updates no longer require a registry argument that had no effect.
-
Add
disk formatto erase a drive and prepare it as a single Btrfs partition for StartOS backups. -
OS registry publishing accepts a build Git hash and a security-update flag, and promotion preserves both. Release operations can reject a source image that changed while a release was being prepared.
Changed
start-cli auth session killtakes--pubkey <key>and--token <id>for the sessions to end, in place of positional session IDs.
Fixed
-
Preserve multiline image environment values in JSON metadata for packages using Start SDK 3.1.2 or later.
-
WireGuard configs can use a separate endpoint on NAT'd StartTunnel hosts.
tunnel device show-config --endpointsupplies an IPv4, IPv6, or DNS endpoint
independently of the local WAN assignment. Requires StartTunnel 1.5.0 or later.
Security
- Backup mount, backup information, package restore, and CIFS target add/update commands read passwords from a hidden prompt instead of positional arguments. Update automation to supply
BACKUP_PASSWORDorCIFS_PASSWORD;PASSWORDremains the separate CLI authentication credential.
start-cli Checksums
SHA-256
7cd3e9bd557a51d142fd2406324ddfb45c12ac45c40d2322240f4cb0c3b29b8e start-cli_aarch64-linux
5a1456fe683fb73c85e81e1e4360612b93ef6afdb129c3ccc73e9652e28a5a38 start-cli_aarch64-macos
e850af7bbc129056b404b616c475c8768c21b6488514c0929ded64c5c525443c start-cli_riscv64-linux
b13c65a49055d96fc578e837ecb5c37516bf1a2b241282d41ee291cd56e772e5 start-cli_x86_64-linux
61e5953c227c301f0bc5b576176010c3e0b46568ca765eec6048fb1931ee4388 start-cli_x86_64-macos
BLAKE-3
940accd065a4fe525a56923ee320b983ffd0d9a9652f1b2406c7d50eecba495d start-cli_aarch64-linux
17c61125079fcde730aa85986e99316f47ee807febb2a24353b6ace463a7ac57 start-cli_aarch64-macos
e7f129d772f8561ba2be0b3a9b80cdb799a79aef2888edc00d2eabdd30a09b41 start-cli_riscv64-linux
665afde75b400ac74bee4f1032710447709c7ac96275a2315a887c000bc2dcb2 start-cli_x86_64-linux
6780bb03f34be5f8bb49e86c318497b7b29173486458897d738bce612256f92a start-cli_x86_64-macos
start-cli packages Checksums
SHA-256
11098e5330f22d8cd43f87b3f9e6787368fc7a08c103f424aac8c4c9fbec91f3 start-cli_2.6.0_amd64.deb
fc208a1b43e881fa76b14d241316f077f4a93970ccd5828bf19e1f04331ae9ce start-cli_2.6.0_arm64.deb
3b875d9fc67e61f48a588b11953d99b9b8354ab75cb2e31fa4f3099e2e4a01af start-cli_2.6.0_riscv64.deb
BLAKE-3
cf63d91181d8b1be6295f68056635ade9543eecc7c472a12c3446fd12ea08690 start-cli_2.6.0_amd64.deb
12cc19ac352f6203a43a0daf68be7fec6ba0ac8d981e8bf1dc2068bebca89722 start-cli_2.6.0_arm64.deb
7d73e8f644b96b440fa48c6b0dcb91c70ecf94e69c7aecff8afa106eb8ad2c00 start-cli_2.6.0_riscv64.deb