Skip to content

Bastille Day 2023

Pre-release
Pre-release
Compare
Choose a tag to compare
@cedwards cedwards released this 15 Jul 04:20
· 92 commits to master since this release
0.10.20230714
61e7084
This commit was created on github.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

0.10.20230714 - Bastille Day 2023

This release is long overdue but I couldn't let another Bastille Day come and go without publishing the latest fixes and features. Changes in this release include nearly a years worth of fixes, feedback and features. Thank you to everyone that contributed to this project including the sixteen first-time contributors. I appreciate your time and effort to improve Bastille!

Dual Stack Networking

Support now added to create containers with ip4 and ip6 stack. DHCP also supported.

bastille setup command

New bastille setup command automates the initial configuration of firewall, networking and ZFS storage.
You can use this for individual components (zfs, pf, bastille0) or use without arguments for all options.
Hopefully this simplifies the process of configuring new Bastille hosts.

note: For best results, check and define configuration in your bastille.conf before running setup.
Usage: bastille setup [pf|bastille0|zfs|vnet]

Extended Linux Support

Bastille continues to support experimental Linux containers. This has now been extended with two more releases.

  • Ubuntu Jammy (2204) support added.
  • Debian 12 "Bookworm" support added.
  • Support for Debian 9 "Stretch" was dropped.

bastille bootstrap jammy (Ubuntu 2204)
bastille bootstrap bookworm (Debian 12)

Misc:

  • Using make install method to install Bastille from source code will now rewrite the bastille version variable to match the commit hash.
  • Added new tags sub-command for tagging containers.
  • pkg sub-command can now be used with -H or --host to use host pkg manager instead of in-jail pkg binary.
  • fixed regressions in cmd and VNET creation
  • lots of documentation improvements

What's Changed

  • bugfix for cmd when using ALL target by @cedwards in #531
  • Update the exec.* with uniq_epair when cloning jails by @JRGTH in #530
  • update versions from 12.x to 13.x by @cedwards in #532
  • Enable colour only when writing to a tty by @cqexbesd in #533
  • Updated "export" sub-command docs (0.9.20220216) by @tofazzz in #543
  • [WIP] [feedback required] Improve dualstack and IPv6 support on jail creation by @evilham in #435
  • Advanced Mount Types Support by @JartX in #549
  • PKG::ADDED:: return error code and print error message when 'bastille pkg' fails by @frikilax in #553
  • Fixed typo in README.md by @Stormle in #550
  • Document Bastille VNET on GCP by @patmaddox in #539
  • Minor Changes by @cqexbesd in #536
  • Makefile install target updates version to match git rev of HEAD by @cedwards in #554
  • fixes #389 regarding shutdown order by @cedwards in #556
  • fixing regression in create.sh for Linux containers by @cedwards in #558
  • Updating the Docs for Clouds with IPV6 networking. by @PythonLinks in #546
  • Use "bastille config" to get ipv4.addr. by @chriswells0 in #559
  • Make pf table name and external interface configurable. by @chriswells0 in #560
  • Fix bug in ip-in-use test by @web-vertalo in #561
  • Make parsing on jail.conf more robust by @cqexbesd in #534
  • Accept ssh git addresses in bootstrap by @nwisemanII in #566
  • Rename command now affects name of created vnet interfaces by @UrsusDominatus in #572
  • Added zfs_destroy_snapshot functionality by @Efiartes in #564
  • Fix link by @drbrain in #573
  • Add "tags" subcommand to add /delete / list tags by @bsdlme in #578
  • Sort bastille usage ouput and update README.md for newer FreeBSD releases by @bsdlme in #579
  • add ipv6 rdr support by @android-ucet in #580
  • Updates for HardenedBSD Installer URL updates by @shirkdog in #581
  • Fix missing version by @JRGTH in #585
  • Add missing spaces for consistency by @JRGTH in #586
  • [FIX] Support ALL in pkg command when using the -H or --host option. by @yaazkal in #588
  • fix rdr issue detecting IP6 when disabled or not set by @cedwards in #592
  • /etc/pf.conf path for rdr.sh set by a variable in bastille configuration by @skenizen in #595
  • Updated supported Linux releases by @gqgunhed in #593
  • Added initial upgrading documentation. by @tobiastom in #590
  • list cmd enhancement by @JRGTH in #587
  • 2023 release by @cedwards in #596

New Contributors

Full Changelog: 0.9.20220714...0.10.20230101

Contributors

patmaddox, drbrain, and 21 other contributors
Assets 2
Loading