OpenShell v0.0.80

OpenShell v0.0.80

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.80 sh

What's Changed

• fix(driver-podman): gate Linux-only Path import by @krishicks in #2188
• docs: fix Docker version format from 28.04 to 28.0 by @mesutoezdil in #2136
• docs: update man page date to 2026 by @mesutoezdil in #2135
• fix(sandbox): acknowledge initial policy revision; expose SDK labels/selectors by @KyleZheng1284 in #2170
• chore(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 by @dependabot[bot] in #2191

New Contributors

• @KyleZheng1284 made their first contribution in #2170

Full Changelog: v0.0.79...v0.0.80

OpenShell Development Build

This build is automatically published on every commit to main that passes CI.

NOTE: This is a development build, not a tagged release, and may be unstable.

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=dev sh

OpenShell v0.0.79

OpenShell v0.0.79

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.79 sh

What's Changed

• docs: fix STYLEGUIDE heading to match filename by @mesutoezdil in #2134
• docs(kubernetes): bump cert-manager to v1.20.3 by @mesutoezdil in #2129
• docs: fix article before OpenShell in sync-files by @mesutoezdil in #2133
• docs: warn to redact credentials from log output before sharing by @elezar in #2124
• fix(podman): deliver sandbox JWTs as secrets by @maxamillion in #2156
• chore: remove deprecated --keep flag from docs, scripts, and e2e tests by @Ygnas in #2126
• chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 by @dependabot[bot] in #2160

New Contributors

• @Ygnas made their first contribution in #2126

Full Changelog: v0.0.77...v0.0.79

OpenShell v0.0.78

OpenShell v0.0.78

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.78 sh

What's Changed

• docs: fix STYLEGUIDE heading to match filename by @mesutoezdil in #2134
• docs(kubernetes): bump cert-manager to v1.20.3 by @mesutoezdil in #2129
• docs: fix article before OpenShell in sync-files by @mesutoezdil in #2133
• docs: warn to redact credentials from log output before sharing by @elezar in #2124
• fix(podman): deliver sandbox JWTs as secrets by @maxamillion in #2156
• chore: remove deprecated --keep flag from docs, scripts, and e2e tests by @Ygnas in #2126

New Contributors

• @Ygnas made their first contribution in #2126

Full Changelog: v0.0.77...v0.0.78

OpenShell v0.0.77

OpenShell v0.0.77

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.77 sh

What's Changed

• docs: add Hermes Agent to supported agents table by @mesutoezdil in #2131
• rfc-0006: add driver config passthrough proposal by @elezar in #1589
• chore(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #2146

Full Changelog: v0.0.76...v0.0.77

OpenShell v0.0.76

OpenShell v0.0.76

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.76 sh

What's Changed

• feat(docker,podman): add SELinux label support for bind mounts by @bergmannf in #2092
• test(e2e): run rootless podman on ubuntu host by @elezar in #2119
• feat(policy): accept numeric UIDs for sandbox process identity by @sjenning in #1973

New Contributors

• @bergmannf made their first contribution in #2092

Full Changelog: v0.0.75...v0.0.76

OpenShell v0.0.75

OpenShell v0.0.75

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.75 sh

What's Changed

• feat(helm): add TLS termination for Envoy Gateway ingress by @zhaohuabing in #2015
• feat(agents): add manifest-driven gator agent by @johntmyers in #1826

Full Changelog: v0.0.74...v0.0.75

OpenShell v0.0.74

OpenShell v0.0.74

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.74 sh

What's Changed

• fix(helm): generate namespace-aware SANs in certgen and cert-manager templates by @akram in #2062
• refactor(core): remove unused extra bind addresses by @elezar in #2059
• docs(mcp): fix granular policy lifecycle examples by @shiju-nv in #2066
• feat(kubernetes): add combined topology config surface by @TaylorMutch in #2074
• fix(drivers): reject whitespace in mount fields by @elezar in #2086
• refactor(api): remove SandboxTemplate.volume_claim_templates by @elezar in #2088

New Contributors

• @akram made their first contribution in #2062

Full Changelog: v0.0.73...v0.0.74

OpenShell v0.0.73

OpenShell v0.0.73

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.73 sh

What's Changed

• fix(supervisor): drop sandbox child capability bounding set by @alangou in #2001
• refactor(server): normalize compute driver config acquisition by @elezar in #1974
• test(e2e): run gpu workloads from manifest by @elezar in #1709
• fix(providers): reserve credential placeholder revisions by @johntmyers in #2049
• fix(CONTRIBUTING): update label format for good first issues by @jgarciao in #2056

New Contributors

• @jgarciao made their first contribution in #2056

Full Changelog: v0.0.72...v0.0.73

OpenShell v0.0.72

OpenShell v0.0.72

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.72 sh

What's Changed

• fix(policy): reserve provider rule namespace by @johntmyers in #1991
• fix(openshell-network-supervisor): gate proxy accept on symlink resolution readiness by @Cali0707 in #1968
• feat(sandbox): proxy-side AWS SigV4 credential signing for CONNECT tunnels by @jhjaggars in #1638
• feat(kubernetes): support agent-sandbox v1beta1 by @TaylorMutch in #2009
• fix(server): prevent exec relays from hanging on idle connections by @Gal-Zaidman in #1992
• fix(build): use zig archive tools for cross builds by @TaylorMutch in #2014
• fix(python): include generated proto stubs in Linux wheels by @maxdubrinsky in #2029
• feat(l7): add JSON-RPC and MCP policy enforcement by @krishicks in #1865
• chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #2038
• chore(deps): bump actions/attest from 4.1.0 to 4.1.1 by @dependabot[bot] in #2037
• chore(deploy): use OCI registry for cert-manager Helm chart by @lunarwhite in #2041

New Contributors

• @Gal-Zaidman made their first contribution in #1992

Full Changelog: v0.0.71...v0.0.72