OpenShell Development Build

This build is automatically published on every commit to main that passes CI.

NOTE: This is a development build, not a tagged release, and may be unstable.

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=dev sh

OpenShell v0.0.59

OpenShell v0.0.59

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.59 sh

What's Changed

• test(cli): avoid browser launch in auth rollback test by @elezar in #1808
• docs: document DCO commit sign-off requirement by @elezar in #1811
• refactor: deduplicate OCSF builder setters and persistence helpers by @ericcurtin in #1800
• feat(vm): add vm life cycle extensions by @cheese-head in #1583
• feat(cli): add generic output formatter to eliminate --output flag duplication by @jeffmaury in #1753
• feat(cli): add --env flag to sandbox create/exec and fix env var passthrough by @russellb in #1730
• chore(snap): remove early snap packaging by @zyga in #1648
• fix(cli): fall back to regular upload when git filtering excludes all files by @russellb in #1783

New Contributors

• @jeffmaury made their first contribution in #1753

Full Changelog: v0.0.58...v0.0.59

OpenShell v0.0.58

OpenShell v0.0.58

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.58 sh

What's Changed

• refactor(tui): extract shared setting edit overlay by @ericcurtin in #1776
• feat(kubernetes): support driver config passthrough by @elezar in #1744
• fix(sandbox): stop log push after auth failure by @johntmyers in #1787
• feat(providersv2): add path auth_style by @Cali0707 in #1622
• refactor(tui): extract shared draw_text_field and draw_confirm_popup helpers by @ericcurtin in #1790
• feat(inference): allow local embeddings route by @shiju-nv in #1774

Full Changelog: v0.0.57...v0.0.58

OpenShell v0.0.57

OpenShell v0.0.57

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.57 sh

What's Changed

• fix(grpc): allow credential rotation when legacy provider.type exceeds current limit by @latenighthackathon in #1350
• fix(cli): respect gateway name for mTLS lookup by @alexclewontin in #1626
• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1739
• chore(k8s): use upstream agent-sandbox manifest in CI/e2e by @rmalani-nv in #1657
• fix(bootstrap): set docker build platform args by @shiju-nv in #1761
• fix(kubernetes): configure sandbox apparmor profile by @TaylorMutch in #1767
• fix(server): resume unspecified sandbox phase by @shiju-nv in #1765

New Contributors

• @alexclewontin made their first contribution in #1626
• @rmalani-nv made their first contribution in #1657
• @shiju-nv made their first contribution in #1761

Full Changelog: v0.0.56...v0.0.57

OpenShell v0.0.56

OpenShell v0.0.56

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.56 sh

What's Changed

• chore(mise): refresh tool lockfile by @krishicks in #1712
• ci(release): authenticate snap canary artifact download by @krishicks in #1711
• docs(container-gateway): fix Docker driver setup for containerized gateway by @ericcurtin in #1419
• refactor(server): deduplicate test helpers and grpc utilities by @ericcurtin in #1708
• fix(gateway): allow local sandbox jwt to not expire by @TaylorMutch in #1721
• fix(helm): create sandbox JWT secret when cert-manager is enabled by @TaylorMutch in #1700
• feat(k8s-driver): add default_runtime_class_name config for sandbox pods by @sjenning in #1729
• docs: Add Hermes Agent to supported agents by @shannonsands in #1735
• fix(cli): roll back gateway registration when auth fails during gateway add by @zanetworker in #1538
• refactor: deduplicate shared driver and TUI helpers by @ericcurtin in #1741
• feat(cli): support multiple --upload flags on sandbox create (#1635) by @feloy in #1645

New Contributors

• @shannonsands made their first contribution in #1735
• @feloy made their first contribution in #1645

Full Changelog: v0.0.55...v0.0.56

OpenShell v0.0.55

OpenShell v0.0.55

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.55 sh

What's Changed

• feat(providers): add Google Vertex AI inference provider by @maxamillion in #1568
• fix: correct example paths in local-inference README by @mesutoezdil in #1676
• ci(release): bring Fedora RPM canary to parity by @krishicks in #1688
• fix: update RFC link in agent-driven-policy-management README by @mesutoezdil in #1677
• feat(providers): add profile-backed policy visibility by @johntmyers in #1640
• ci(release): fix Ubuntu Snap canary install and registration by @krishicks in #1699
• feat(snap): add OpenShell icon to meta/gui/ by @zyga in #1693
• fix(sandbox): restore GPU procfs baseline by @elezar in #1522
• fix(gateway): try harder to detect Podman by @krishicks in #1536

Full Changelog: v0.0.54...v0.0.55

OpenShell v0.0.54

OpenShell v0.0.54

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.54 sh

What's Changed

• feat(telemetry): add anonymous opt-out OpenShell usage telemetry by @kirit93 in #1433
• ci(release): gate helm/oci artifact publishing on release by @krishicks in #1662
• ci(kubernetes): stabilize HA e2e setup by @TaylorMutch in #1659
• fix(gateway): place supervisor_image under podman driver TOML table by @jhjaggars in #1661
• refactor: deduplicate shared utilities across driver crates by @ericcurtin in #1660
• fix(config): reject unknown fields in nested gateway config tables by @pimlock in #1666
• feat(kubernetes): support sandbox image pull secrets by @TaylorMutch in #1671
• refactor(driver): trim compute capability response by @elezar in #1402

New Contributors

• @jhjaggars made their first contribution in #1661

Full Changelog: v0.0.53...v0.0.54

OpenShell v0.0.53

OpenShell v0.0.53

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.53 sh

What's Changed

• refactor(proto): move phase and current_policy_version into status by @derekwaynecarr in #1565
• feat(python-sdk): support OIDC Bearer auth on SandboxClient by @mrunalp in #1621
• fix(helm): vendor chart dependencies before release packaging by @TaylorMutch in #1627
• fix(driver-podman): bind gateway to 0.0.0.0 in rootless mode by @jewzaam in #1623
• docs(providers): note that ANTHROPIC_API_KEY requires an API account, not a subscription by @mesutoezdil in #1542
• fix(podman): avoid host-gateway on macOS machines by @TaylorMutch in #1637
• generalize crate for multi-device PCIe passthrough by @cheese-head in #1573
• fix(sandbox): trust exact declared private endpoints by @mjamiv in #1560
• feat(policy): add agentic approval loop by @zredlined in #1528
• fix(e2e): clean up temp files in sandbox-runner on exit by @mesutoezdil in #1647
• ci(kubernetes): add HA e2e workflow by @TaylorMutch in #1598
• ci(release): use bundled Z3 for macOS gateway build by @pimlock in #1658
• fix(gateway): align package TLS bootstrap path by @TaylorMutch in #1601
• feat(tui): add PageUp/PageDown scrolling to all panes by @major in #1656

New Contributors

• @jewzaam made their first contribution in #1623
• @cheese-head made their first contribution in #1573
• @major made their first contribution in #1656

Full Changelog: v0.0.52...v0.0.53

OpenShell v0.0.52

OpenShell v0.0.52

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.52 sh

What's Changed

• docs: refresh landing terminal demo and apply NVIDIA fern theme by @aschilling-nv in #1615
• build(macos): remove unused import of tracing::warn by @Cali0707 in #1619
• chore: align .python-version with mise.toml by @Cali0707 in #1618
• feat(helm): add optional PostgreSQL backing store by @sauagarwa in #1579
• docs(config): update gateway config reference by @TaylorMutch in #1624
• feat(flake): add Nix development shell by @SDAChess in #1592

New Contributors

• @aschilling-nv made their first contribution in #1615
• @Cali0707 made their first contribution in #1619
• @SDAChess made their first contribution in #1592

Full Changelog: v0.0.51...v0.0.52

OpenShell v0.0.51

OpenShell v0.0.51

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.51 sh

What's Changed

• docs(kubernetes): note that Sandbox volumeClaimTemplates is immutable by @mesutoezdil in #1543
• fix(sandbox): use succinct endpoint denial reason by @krishicks in #1584
• feat(docker): add provisioning progress events by @drew in #1567
• docs(kubernetes): add RBAC section to setup page by @mesutoezdil in #1540
• Make sandbox child nproc limit configurable by @mjamiv in #1497
• fix(gateway): make readiness health checks dependency-aware by @alangou in #1328
• fix(vm): scope rootfs cache by openshell version by @drew in #1587
• fix(cli): preserve symlinks during sandbox upload by @johntmyers in #1595
• fix(core): preserve SSH gateway default ports by @TaylorMutch in #1602
• feat(server): declare gRPC auth (mode + scope + role) at the handler, enforce at the router by @mrunalp in #1596
• ci(snap): add snap release pipeline by @drew in #1600

Full Changelog: v0.0.50...v0.0.51