NuGet proxy hardening, TTL race condition fix, real RED OS and Astra Linux base images.
Fixed
- TTL race condition — unified TTL semantics across registries; repo_index invalidation no longer races with concurrent publishes (#266)
- NuGet autocomplete leak —
SearchAutocompleteServiceURLs in service index now rewrite to NORA instead of leaking toazuresearch-*.nuget.org. New/nuget/v3/autocompleteproxy endpoint with graceful fallback (#262) - NuGet gallery leak —
SearchGalleryQueryServiceroot URLs (azuresearch-{usnc,ussc}.nuget.org/) now rewrite to NORA. Zero azuresearch URLs remain in service index - NuGet 429 during cache warming — registry proxy routes no longer double-limited by
general_limiter+upload_limiter. Removes 429 errors duringdotnet restorewith many packages while keeping auth rate limiting active - E2E test paths — NuGet smoke tests used wrong paths (
/v3/flat/→/v3/flatcontainer/,/v3/search→/v3/query)
Added
- NuGet search fallback — local search from repo index when upstream is unavailable, download tracking for proxied packages (#261)
- 910 total tests (up from 898)
Changed
- Docker base images switched to real RED OS and Astra Linux base images (#260)
- NuGet autocomplete config: env var
NORA_NUGET_AUTOCOMPLETE, config fieldautocomplete
Install
curl -fsSL https://getnora.io/install.sh | shOr download directly:
curl -LO https://github.com/getnora-io/nora/releases/download/v0.8.2/nora-linux-amd64
chmod +x nora-linux-amd64
sudo mv nora-linux-amd64 /usr/local/bin/noraDocker
docker pull getnora/nora:0.8.2| Variant | Image |
|---|---|
| Alpine (default) | getnora/nora:0.8.2
|
| RED OS | getnora/nora:0.8.2-redos
|
| Astra Linux SE | getnora/nora:0.8.2-astra
|
| GHCR | ghcr.io/getnora-io/nora:0.8.2
|
Changelog
See CHANGELOG.md