Posts tagged sovereignty on Freedom.Tech.
Service packages can now run CI on self-hosted Forgejo and validate StartOS types at runtime; Relevant for package maintainers
Packs container images into less disk space; Useful for storage-constrained StartOS hosts
Start-cli 2.4.1 enables packing services with container images that use absolute or relative layer paths, expanding compatibility with third-party services like Tailscale
Adds local OCI image sources and built-in SquashFS support, useful for offline or air-gapped StartOS package builds
Mobile layout fixes plus a simpler SeedQR view, minor follow-up with no functional seed-handling changes
Type-checking fix for manifests and container addresses matching 3.0.4 behavior; Relevant if building on Start SDK
Fixes input actions during service init and a manifest-read failure for uninstalled packages
Restores multi-architecture image packing and adds registry admin options for start-registry 1.1.1
Keeps all package revisions indexed while filtering client-visible versions, plus dependency security fixes
SDK config files now preserve user-added keys and YAML tags through writes, and setupPrimaryUrl gains filtering, SSL options, and fallback control
Single-fix patch: package migrations now run correctly after a flavor switch. Relevant only if building StartOS packages
Emulated service images now run across CPU architectures, useful for cross-arch StartOS deployments
Fixes vulnerabilities in the router management interface. Apply promptly if exposing StartWRT admin panels
Adds Wi-Fi regulatory country setting for channel and power compliance
UmbrelOS 2.0 adds Photos, multi-user accounts, GPU acceleration, RAID storage, AI agent integration, VM support, and cloud sync for self-hosted infrastructure
Second beta build; Available only to users enrolled in the Beta Program
Fixes flashing to internal storage from a microSD card whose partition table was altered after image write
Adds scanning, XOR split, backup sheets, seed safety fixes
Devices can open their own port forwards, unnamed-device identification, eMMC boot firmware provisioning for microSD-less DIY boards
Registries can now declare a description
Devices can request SNI hostname routes over UPnP, not only PCP
StartTunnel 1.3.0 closes UPnP device fingerprinting, adds hostname routing over UPnP, and enables third-party UPnP clients as gateway users
First beta of umbrelOS 2.0; Available now for beta program participants
StartOS SDK's getBridgeAddress now correctly types results as non-null when fallbackPort is provided, fixing compilation errors in packages like Bitcoin and LND
Backup and restore progress tracking now weights actual data transfer far above pre/post hooks, making progress bars accurately reflect copy time instead of jumping at the end
Web UI and CLI authentication moved from session cookies to per-device signing keys
StartOS start-tunnel now allows bare public IPs and named domains to share one external port, with TLS SNI routing requests to their respective devices
StartOS start-sdk 2.0.6 fixes git repository initialization blocking builds and corrects version range comparison logic that was silently dropping downstream revisions from migration metadata
StartOS start-tunnel 1.1.1 fixes automatic port forwarding persistence across network changes and improves mobile UX dialogs from stealing focus
HTTP-to-HTTPS redirects now enabled on port 80
First stable release. Security profiles assigned port, WiFi password, or inbound VPN; WireGuard VPN chaining supported
Fixes Tor remote-access and app connectivity failures
StartOS SDK 2.0.3 fixes daemon wedging when dependencies flap pause from teardown and serializing dependency-driven transitions
Start-cli 1.0.1 relaxes git requirements for packaging, allows nested workspaces, and improves error messages for developers building StartOS packages
StartOS start-sdk 2.0.2 validates build dependencies upfront, failing fast with current documentation links instead of mid-build errors
Fixes bundled lint.mjs in the published package
Adds package --force flag
The toolkit more than doubles in scope. Worth evaluating if seed workflows need the new standalone tools or education layer
Patches Linux kernel DirtyFrag vulnerabilities and improves Raspberry Pi 4 storage reliability
UmbrelOS 1.7.2 patches CVE-2026-31431 kernel vulnerability and fixes USB boot drive detection and static IP setup issues
