Releases

Versions & downloads.

Generated automatically from the GitHub releases feed — versions, dates, and download assets are live; the notes are merged in from the changelog. For project announcements, see news.

221 versions · from the first to the latest
  1. v2.0.2 Aug 25, 2026 Blueprint registry fixes - Fix cardinal blueprint ls/list official: parse error — fetchURL now uses curl -fsSL with timeouts and proper HTTP…

    Blueprint registry fixes

    • Fix cardinal blueprint ls/list official: parse errorfetchURL now uses curl -fsSL with timeouts and proper HTTP error propagation instead of silent HTML return.
    • Improve fetchBlueprintRegistry diagnostics: include real json.Unmarshal error, 300-char preview, and hint for HTML/empty response; add hint to final error about cardinal blueprint repo list and raw.githubusercontent.com connectivity.
    • Auto-migrate legacy blueprint repository URLs (dck-organization/dck-blueprints, animesao/dck-blueprintscardinal-organization/cardinal-blueprints) and normalize URLs on load; fix corrupted/empty ~/.cardinal/blueprint-repos.json handling.
  2. v2.0.1 Aug 25, 2026 Full Changelog: https://github.com/animesao/cardinal/compare/v1.61.1...v2.0.1
  3. v1.61.1 Aug 25, 2026 Full Changelog: https://github.com/animesao/cardinal/compare/v1.61.0...v1.61.1
  4. v1.61.0 Aug 25, 2026 Full Changelog: https://github.com/animesao/cardinal/compare/v1.60.12...v1.61.0
  5. v1.60.12 Aug 25, 2026 Full Changelog: https://github.com/animesao/cardinal/compare/v1.60.11...v1.60.12
  6. v1.60.11 Aug 18, 2026 Backup restore - Fix path traversal check that incorrectly rejected root directory entries during backup restore.

    Backup restore

    • Fix path traversal check that incorrectly rejected root directory entries during backup restore.
  7. v1.60.10 Aug 18, 2026 Backup restore - Fix cardinal backup restore --rebind flag parsing when invoked through Cobra subcommands.

    Backup restore

    • Fix cardinal backup restore --rebind flag parsing when invoked through Cobra subcommands.
  8. v1.60.9 Aug 18, 2026 Backup restore safety - Skip overlayfs whiteout files, character/block devices, fifos, and sockets during backup restore instead of aborting…

    Backup restore safety

    • Skip overlayfs whiteout files, character/block devices, fifos, and sockets during backup restore instead of aborting.
  9. v1.60.8 Aug 18, 2026 Test fix - Fix backup restore regression test to correctly mark the root data directory entry as a tar directory type.

    Test fix

    • Fix backup restore regression test to correctly mark the root data directory entry as a tar directory type.
  10. v1.60.7 Aug 18, 2026 CLI help and CI stability - Handle cardinal run --help and cardinal serve --help before forwarding arguments to legacy flag parsers. - Preve…

    CLI help and CI stability

    • Handle cardinal run --help and cardinal serve --help before forwarding arguments to legacy flag parsers.
    • Prevent the legacy flag parser from calling os.Exit(0) during Cobra smoke tests.
    • Add regression coverage for help handling on commands with disabled Cobra flag parsing.
  11. v1.60.6 Aug 18, 2026 Backup restore safety - Accept the explicit root data directory entry produced by CARDINAL backup archives during restore. - Keep archive na…

    Backup restore safety

    • Accept the explicit root data directory entry produced by CARDINAL backup archives during restore.
    • Keep archive namespace, traversal, absolute-path, and symlink safety checks enabled.
    • Add regression coverage for restoring a backup containing data and data/... entries.
  12. v1.60.5 Aug 18, 2026 Backup and transfer support - Add cardinal backup restore --rebind so verified backup data can be restored into a newly created container du…

    Backup and transfer support

    • Add cardinal backup restore --rebind so verified backup data can be restored into a newly created container during cross-machine transfers.
    • Include persistent bind-mount data in backups under a target-scoped archive namespace while retaining symlink and host-path safety checks.
    • Add cardinal backup remove (with rm and delete aliases) for removing an archive and its checksum sidecar safely.
    • Support CARDINAL Desktop backup management and container transfer with configuration, volumes, writable data, and lifecycle state preserved.
  13. v1.60.4 Aug 18, 2026 Desktop integration - Document the current container inspection and mount metadata used by CARDINAL Desktop to scope per-container SFTP acce…

    Desktop integration

    • Document the current container inspection and mount metadata used by CARDINAL Desktop to scope per-container SFTP access.
    • Keep the CARDINAL API mount targets as the source of truth for integrations that expose container filesystems.

    <p align="center">

    <img src="img/cardinal.png" alt="cardinal logo" width="100">

    </p>

    Changelog

  14. v1.60.3 Aug 18, 2026 Interactive console fixes - Preserve the container stdin when running startup scripts, so Paper, Minecraft, and other interactive servers re…

    Interactive console fixes

    • Preserve the container stdin when running startup scripts, so Paper, Minecraft, and other interactive servers receive commands from cardinal attach and the desktop console.
    • Restore command responses such as tps, pl, and help instead of leaving the console with input-only output.
  15. v1.60.2 Aug 18, 2026 Container startup and file management fixes - Select the first mounted container directory as the default working directory when the image d…

    Container startup and file management fixes

    • Select the first mounted container directory as the default working directory when the image does not define one, so relative commands such as java -jar server.jar run from the application mount.
    • Recover older containers that still use /home/container by detecting referenced startup files in mounted directories.
    • Improve desktop binary uploads with remote-size verification, destination-size verification, cleanup, and bounded SSH/SFTP timeouts.
  16. v1.60.1 Aug 18, 2026 Runtime and networking fixes - Gate startup scripts behind network namespace setup so bridge containers always receive their veth, address,…

    Runtime and networking fixes

    • Gate startup scripts behind network namespace setup so bridge containers always receive their veth, address, and route before application startup.
    • Add an init-to-supervisor network readiness handshake and regression coverage for its environment setup.
    • Check the network handshake gate close error so the release passes errcheck in CI.
  17. v1.60.0 Aug 18, 2026 Runtime and networking fixes - Ignore exited or zombie init processes while resolving a container startup target. - Retry moving the veth pe…

    Runtime and networking fixes

    • Ignore exited or zombie init processes while resolving a container startup target.
    • Retry moving the veth peer into the container network namespace during namespace setup races.
    • Include the underlying ip error output so network startup failures are actionable.
  18. v1.25.9 Aug 18, 2026 Runtime fixes - Resolve the container init process through /proc process metadata and an exact cardinal init command-line fallback, preventi…

    Runtime fixes

    • Resolve the container init process through /proc process metadata and an exact cardinal init command-line fallback, preventing valid stopped containers from failing to start on some kernels.
    • Add regression coverage for safe init-process matching.
  19. v1.25.8 Aug 18, 2026 Runtime fixes - Pass image-provided environment variables to startup scripts so Java and other tools from image-defined PATH values are avai…

    Runtime fixes

    • Pass image-provided environment variables to startup scripts so Java and other tools from image-defined PATH values are available.
    • Avoid misleading ip warnings and unnecessary interface polling for minimal images without iproute2.
    • Apply device restrictions before dropping mount capabilities, reducing avoidable mount warnings.

    API and CLI

    • Add container startup-command updates through POST /containers/<id>/update.
    • Add cardinal set <container> --startup with inline and @file script support.
    • Accept canonical and compatibility JSON field names for startup scripts.

    > Current release: v2.0.3. Detailed release notes below are maintained manually.

  20. v1.25.7 Aug 18, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.25.3...v1.25.7
  21. v1.25.3 Aug 17, 2026 Improvements - Full codebase audit: 0 FAIL, 52 cobra commands verified. - Clean go vet, go build, and golangci-lint with no warnings. - Vers…

    Improvements

    • Full codebase audit: 0 FAIL, 52 cobra commands verified.
    • Clean go vet, go build, and golangci-lint with no warnings.
    • Version synchronized across all documentation files.
  22. v1.25.2 Aug 17, 2026 Bug fixes - Fix cardinal ps -a / cardinal ps --all flag parsing: register -a/--all via cobra instead of DisableFlagParsing so the flag is co…

    Bug fixes

    • Fix cardinal ps -a / cardinal ps --all flag parsing: register -a/--all via cobra instead of DisableFlagParsing so the flag is correctly handled.
    • Fix cardinal cp stdin support: cardinal cp - <container>:/path now works as source.
    • Restore Ps(args []string) function signature for audit compliance.
  23. v1.25.1 Aug 17, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.25.0...v1.25.1
  24. v1.25.0 Aug 17, 2026 API fixes - Clean up ghost containers: if container.Start() fails after container.Save(), the container is now removed so it does not appear…

    API fixes

    • Clean up ghost containers: if container.Start() fails after container.Save(), the container is now removed so it does not appear permanently in the container list.
    • Container lookup fallback: containers/<id> API now scans the full container list when the direct ID lookup fails, matching by prefix or name.
    • Auto-fix relative mount targets: volume bind targets that are not absolute (e.g. app instead of /app) are automatically prefixed with /.
  25. v1.24.27 Aug 17, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.26...v1.24.27
  26. v1.24.26 Aug 17, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.25...v1.24.26 Full Changelog: https://github.com/animesao/dck/compare/v1.24.25…
  27. v1.24.25 Aug 16, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.24...v1.24.25 Full Changelog: https://github.com/animesao/dck/compare/v1.24.24…
  28. v1.24.24 Aug 16, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.23...v1.24.24 Full Changelog: https://github.com/animesao/dck/compare/v1.24.23…
  29. v1.24.23 Aug 16, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.22...v1.24.23 Full Changelog: https://github.com/animesao/dck/compare/v1.24.22…
  30. v1.24.22 Aug 16, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.21...v1.24.22 Full Changelog: https://github.com/animesao/dck/compare/v1.24.21…
  31. v1.24.21 Aug 16, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.20...v1.24.21 Full Changelog: https://github.com/animesao/dck/compare/v1.24.20…
  32. v1.24.20 Aug 16, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.19...v1.24.20 Full Changelog: https://github.com/animesao/dck/compare/v1.24.19…
  33. v1.24.18 Aug 16, 2026 Builder fixes - Parse long Dockerfile continuation chains in linear time, preventing fuzz smoke timeouts caused by repeated string concatena…

    Builder fixes

    • Parse long Dockerfile continuation chains in linear time, preventing fuzz smoke timeouts caused by repeated string concatenation.
    • Add a regression test covering thousands of continued lines.
  34. v1.24.17 Aug 16, 2026 API fixes - Preserve CPU, memory, and disk resource limits in container inspection and stats responses. - Return a clear conflict response w…

    API fixes

    • Preserve CPU, memory, and disk resource limits in container inspection and stats responses.
    • Return a clear conflict response when a requested container name is already in use instead of allowing ambiguous creation state.

    Desktop integration

    • Added support for live resource reporting consumed by CARDINAL Desktop.
  35. v1.24.16 Aug 16, 2026 CI/CD - Patch release: full drop-in support for Nix / NixOS, Gentoo, and Void Linux under contrib/, plus GH-Actions artifact fallback so nfp…

    CI/CD

    • Patch release: full drop-in support for Nix / NixOS, Gentoo, and Void Linux under contrib/, plus GH-Actions artifact fallback so nfpm packages still land when the GitHub Release publish step hiccups. Identical upstream build flags across every contributor format so binaries are byte-equivalent.
  36. v1.24.15 Aug 16, 2026 CI/CD - Patch release: same code body as v1.24.14 with a refreshed tag so consumers can pin a green build of the goreleaser v2 release pipel…

    CI/CD

    • Patch release: same code body as v1.24.14 with a refreshed tag so consumers can pin a green build of the goreleaser v2 release pipeline.
  37. v1.24.14 Aug 16, 2026 CLI - Migrated the top-level dispatch from a hand-rolled switch / flag-parser in cmd/root.go to spf13/cobra v1.8.1 with spf13/pflag v1.0.5.…

    CLI

    • Migrated the top-level dispatch from a hand-rolled switch / flag-parser in cmd/root.go to spf13/cobra v1.8.1 with spf13/pflag v1.0.5. Every previously-working invocation (52 commands + 7 backup sub-commands + security check) is preserved as a thin cobra wrapper around the legacy free function, so existing tests and call sites stay green.
    • New global flags on every sub-command: --log-level debug|info|warn|error, --json, --quiet.
    • cardinal completion now generates shell scripts for bash / zsh / fish / powershell out of the box; installation instructions added to docs/en/commands.md and docs/ru/commands.md.
    • Discovered and fixed a regression where cardinal run --rm --network none alpine:latest … exited silently with empty stderr. The legacy flag-parsing path inside Run() is reachable again via DisableFlagParsing: true on the run cobra command. A regression test (TestRunCommand_DisablesFlagParsing) guards against future removal of that knob.
    • Surfaced cobra's runtime errors to stderr in cmd/cobra.go (Execute()), guaranteeing that any future unknown-flag / wrong-arity error is at least actionable instead of leaving a single newline and exit code 1.

    CI/CD

    • Rebuilt the GitHub Actions pipeline around a single build.yml orchestrator that runs the full lint → test → build matrix → SBOM → cosign → GitHub Release flow. Replaces nine reusable workflows plus five orchestrators with three files: build.yml, e2e.yml, scheduled.yml.
    • Pinned action versions to known-good majors (actions/checkout@v4, actions/setup-go@v5, actions/upload-artifact@v4, anchore/sbom-action@v0, softprops/action-gh-release@v2); dependabot now ignores semver-major bumps in .github/dependabot.yml so the pipeline does not silently flip to a breaking major.
    • build.yml runs golangci-lint, go vet, govulncheck, shellcheck, scripts/sync-docs-version.sh --check, and bash scripts/audit.sh --strict on every push and PR; the build matrix produces reproducible linux/amd64 and linux/arm64 artefacts with -trimpath -buildid=, sha256 sidecars, SPDX-JSON SBOM, optional cosign signing, and a GitHub Release on tag pushes.
    • e2e.yml (privileged) now always uploads a diagnostic bundle (cardinal-e2e-diag-<run-id>) with the captured stdout/stderr buffer, preflight dump of id / env / mount / cgroup / overlay / data-dir / df, and if: always() artifact upload so a future maintainer can post-mortem a failed run without re-executing it.
    • scheduled.yml runs daily govulncheck + gitleaks + scripts/audit.sh; dependabot.yml groups minor+patch bumps and ignores major version updates.

    Documentation

    • Added docs/COMMANDS.md mapping every cobra-registered command to its runtime requirements (kernel feature, network, state) and verification path (cobra, unit-test, e2e-linux, audit, audit-by-design).
    • Expanded SECURITY.md with a deployment-checklist and a hardening section including: host-path blocklist (internal/container/hostpath.go), log-injection protection for line-delimiter / control-character payloads, registry allow-list, image authentication, and dangerous-capability gating (--allow-dangerous-caps, --allow-root).
    • Added docs/AUDIT.md summarising every change above with a per-feature rationale and the known design debt.
    • Added regression tests: Dockerfile parser fuzz (internal/builder/fuzz_test.go), internal/image/allowlist_test.go, internal/log/logger_test.go, cmd/security_test.go, OCI-layer traversal and hardlink/symlink-loop extraction.

    Removed

    • Removed the unreachable internal/ftp/ package (398 lines of plain-TCP FTP server with a single shared password). SECURITY.md records the decision; scripts/audit.sh carries a prevention check so future regressions are caught at audit time.
  38. v1.24.13 Aug 14, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.12...v1.24.13
  39. v1.24.12 Aug 14, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.24.11...v1.24.12
  40. v1.23.30 Aug 13, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.29...v1.23.30
  41. v1.23.29 Aug 13, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.28...v1.23.29
  42. v1.23.28 Aug 13, 2026 Runtime fixes - Fixed cardinal run options placed after the image, including --workdir, being passed to the container command. - Preserved t…

    Runtime fixes

    • Fixed cardinal run options placed after the image, including --workdir, being passed to the container command.
    • Preserved the safe default Linux capability set so standard images such as nginx:alpine can perform required startup filesystem operations while dangerous capabilities remain dropped.
    • Cleaned up container resources when the init process exits before namespace registration.
  43. v1.23.27 Aug 13, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.26...v1.23.27
  44. v1.23.26 Aug 13, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.25...v1.23.26
  45. v1.23.25 Aug 13, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.24...v1.23.25
  46. v1.23.23 Aug 13, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.22...v1.23.23
  47. v1.23.22 Aug 13, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.21...v1.23.22
  48. v1.23.21 Aug 13, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.20...v1.23.21
  49. v1.23.20 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.19...v1.23.20
  50. v1.23.19 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.18...v1.23.19
  51. v1.23.18 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.17...v1.23.18
  52. v1.23.17 Aug 12, 2026 Documentation and release automation - Added a single-source documentation version marker synchronized from VERSION across every Markdown fi…

    Documentation and release automation

    • Added a single-source documentation version marker synchronized from VERSION across every Markdown file.
    • Added scripts/sync-docs-version.sh --check and CI validation so stale documentation versions fail before release.
    • Updated installation, AppImage, update, backup, verification, restart, and multi-architecture guidance in English and Russian.
    • Removed unreliable third-party download mirror instructions and replaced unsafe manual binary replacement examples with install -D.
    • Fixed duplicate help/bootstrap documentation entries.
  53. v1.23.16 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.15...v1.23.16
  54. v1.23.15 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.14...v1.23.15
  55. v1.23.14 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.13...v1.23.14
  56. v1.23.11 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.10...v1.23.11
  57. v1.23.9 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.8...v1.23.9
  58. v1.23.4 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.3...v1.23.4
  59. v1.23.3 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.2...v1.23.3
  60. v1.23.2 Aug 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.23.1...v1.23.2
  61. v1.23.1 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.42...v1.23.1
  62. v1.23.0 Aug 11, 2026 Highlights since 1.22.0 - Persistent restart supervisor: detached always and unless-stopped containers are recovered after reboot or crash v…

    Highlights since 1.22.0

    • Persistent restart supervisor: detached always and unless-stopped containers are recovered after reboot or crash via systemd, with configurable --restart-delay and crash-loop protection (--restart-max-attempts, --restart-window, restart_blocked).
    • Per-container scheduled backups with cardinal backup enable/disable/status, configurable intervals and retention, safe destinations, and checksum verification with cardinal backup verify.
    • Offline image verification with cardinal verify IMAGE[:TAG] — config and layer digests are checked against the locally stored manifest.
    • Reliable cardinal update: five-minute download timeout, per-method error reporting, bounded curl/wget fallbacks.
    • Runtime hardening: zombie-exit detection, cardinal rm tombstones against supervisor restart races, safe OCI layer extraction (path traversal, absolute and symlink targets), protected bind sources, and volume mount modes (:ro/:rw, propagation, tmpfs, NFS).
    • Instant startup for --network none/host containers (no eth0 wait).
    • Docker-compatible REST API with optional HTTPS and bearer-token auth, cluster orchestration, FaaS, services, blueprints, and Compose support.
    • Complete bilingual (EN/RU) documentation: command references, usage guides, practical examples, and per-application guides, including the pull → verify → run workflow and a fully synchronized Russian websites guide.
  63. v1.22.42 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.41...v1.22.42
  64. v1.22.41 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.40...v1.22.41
  65. v1.22.40 Aug 11, 2026 CLI - cardinal --help no longer duplicates the backup, inspect, doctor, and security check entries in the System section (they remain listed…

    CLI

    • cardinal --help no longer duplicates the backup, inspect, doctor, and security check entries in the System section (they remain listed under Container).

    Documentation

    • Documented the previously undocumented cardinal verify IMAGE[:TAG] (offline config and layer digest verification) and cardinal backup verify FILE.tar.gz (checksum verification) commands, plus -v SRC:DST mount modes (:ro/:rw, propagation flags, tmpfs and NFS specs).
  66. v1.22.39 Aug 11, 2026 Documentation - The README and running guides document crash-loop protection with --restart-max-attempts and --restart-window and the restar…

    Documentation

    • The README and running guides document crash-loop protection with --restart-max-attempts and --restart-window and the restart_blocked state.
  67. v1.22.38 Aug 11, 2026 Update reliability - cardinal update now allows up to five minutes for the release download instead of timing out after ten seconds, which w…

    Update reliability

    • cardinal update now allows up to five minutes for the release download instead of timing out after ten seconds, which was too short for multi-megabyte binaries on slow links.
    • The opaque all methods failed message is gone: each download method (Go HTTP client, curl, wget) now reports its own error so a failure can be diagnosed.
    • The curl/wget fallbacks get explicit connect and max-time limits so the updater can never hang indefinitely.
  68. v1.22.37 Aug 11, 2026 Runtime fixes - Container startup no longer spends up to 20 seconds polling for an eth0 address. The wait is skipped entirely for --network…

    Runtime fixes

    • Container startup no longer spends up to 20 seconds polling for an eth0 address. The wait is skipped entirely for --network none (no interface exists) and --network host (the host interface is already up), and capped at five seconds for bridge mode. Crash-loop restart cycles now run on schedule, and simple containers such as sh -c sleep 5 start immediately after cardinal run -d returns.
  69. v1.22.36 Aug 11, 2026 Runtime fixes - Detached container processes that become zombies (defunct, reparented to systemd after the CLI exits) are now detected as de…

    Runtime fixes

    • Detached container processes that become zombies (defunct, reparented to systemd after the CLI exits) are now detected as dead: process liveness reads /proc/<pid>/stat and treats Z/X states as exited. A plain /proc/<pid> existence check counted zombies as alive, stalling exit detection — containers stuck on running, cgroup/network cleanup not running, and crash-loop restarts almost never firing.
    • cardinal rm writes a tombstone marker as its first action, so a supervisor automatic restart racing a slow removal can no longer resurrect a container mid-delete.
    • The supervisor re-loads fresh container state before an automatic restart and skips containers being removed; cardinal start aborts cleanly (killing spawned processes and releasing the DNS record) if the state file vanished or a removal is in progress.
  70. v1.22.35 Aug 11, 2026 Documentation - Added complete English and Russian CLI command references with syntax prefixes, positional arguments, aliases, every user-fa…

    Documentation

    • Added complete English and Russian CLI command references with syntax prefixes, positional arguments, aliases, every user-facing option, and internal-command notes.
    • Added separate English and Russian practical command examples for applications, databases, bots, Minecraft, restart recovery, volumes, backups, Compose, registries, clusters, services, and functions.
    • Linked the new references and examples from the README and documentation index.

    CI and release workflow

    • CI runs Go tests only on the native amd64 runner; arm64 is cross-compiled without executing an incompatible test binary.
    • The architecture matrix uses fail-fast: false, so one architecture cannot cancel the other job.
    • Build & Release checks out the newly created version tag before building amd64, arm64, and armv6 artifacts.
    • Build and manual release workflows are serialized to avoid concurrent version and tag updates.

    Added

    • Added configurable automatic restart delays with --restart-delay / cardinal set --restart-delay (for example, 10s or 1m).
    • Added a persistent systemd supervisor for detached always and unless-stopped containers; on-failure remains a foreground-process policy and is not adopted after the detached CLI exits.
    • Added per-container scheduled backups with cardinal backup enable/disable/status, configurable intervals, retention, safe destinations, and supervisor-based recovery after reboot.
  71. v1.22.34 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.33...v1.22.34
  72. v1.22.33 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.32...v1.22.33
  73. v1.22.32 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.31...v1.22.32
  74. v1.22.31 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.30...v1.22.31
  75. v1.22.30 Aug 11, 2026 Documentation - Added complete bilingual CLI references and command examples. - Updated documentation navigation and current release referen…

    Documentation

    • Added complete bilingual CLI references and command examples.
    • Updated documentation navigation and current release references.
  76. v1.22.29 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.28...v1.22.29
  77. v1.22.28 Aug 11, 2026 Documentation - Updated English and Russian guides with the current version, automatic backups, supervisor behavior, restart delays, protect…

    Documentation

    • Updated English and Russian guides with the current version, automatic backups, supervisor behavior, restart delays, protected bind mounts, log rotation, and CI/build workflow.
  78. v1.22.27 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.26...v1.22.27
  79. v1.22.26 Aug 11, 2026 Documentation - Added complete English and Russian running guides covering installation, image/tag syntax, protected bind mounts, .env files…

    Documentation

    • Added complete English and Russian running guides covering installation, image/tag syntax, protected bind mounts, .env files, Python bots, Java/Minecraft servers, logs, restart policies, updates, and troubleshooting.
    • Updated the README, documentation index, command reference, storage notes, and version references.

    Runtime fixes documented

    • Container cardinal stdout/stderr logs start fresh on every new container run instead of accumulating across restarts.
    • OCI extraction accepts forward symlink targets and standard root entries while preserving traversal protection.
    • Bind mounts reject protected host paths and require absolute container targets.
  80. v1.22.25 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.24...v1.22.25
  81. v1.22.24 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.23...v1.22.24
  82. v1.22.23 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.22...v1.22.23
  83. v1.22.22 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.21...v1.22.22
  84. v1.22.21 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.20...v1.22.21
  85. v1.22.20 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.19...v1.22.20
  86. v1.22.19 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.18...v1.22.19
  87. v1.22.18 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.17...v1.22.18
  88. v1.22.17 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.16...v1.22.17
  89. v1.22.16 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.15...v1.22.16
  90. v1.22.15 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.14...v1.22.15
  91. v1.22.14 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.13...v1.22.14
  92. v1.22.13 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.12...v1.22.13
  93. v1.22.12 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.11...v1.22.12
  94. v1.22.11 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.10...v1.22.11
  95. v1.22.10 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.9...v1.22.10
  96. v1.22.9 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.8...v1.22.9
  97. v1.22.8 Aug 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.7...v1.22.8
  98. v1.22.7 Jul 26, 2026 - Isolated tests with CARDINALDATADIR and made JSON state writes atomic. - Secured API defaults, Bearer authentication, and image metadata s…
    • Isolated tests with CARDINAL_DATA_DIR and made JSON state writes atomic.
    • Secured API defaults, Bearer authentication, and image metadata storage.
    • Standardized Go 1.25 across CI and release tooling.
  99. v1.22.6 Jul 26, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.5...v1.22.6
  100. v1.22.5 Jul 14, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.22.4...v1.22.5
  101. v1.22.4 Jul 14, 2026 - CI auto-bump after install script fix - Single VERSION source of truth (removed cmd/VERSION) - Removed //go:embed VERSION, injected via -X…
    • CI auto-bump after install script fix
    • Single VERSION source of truth (removed cmd/VERSION)
    • Removed //go:embed VERSION, injected via -X cardinal/cmd.version only
  102. v1.22.3 Jul 14, 2026 - CI auto-bump after release.yml fix
    • CI auto-bump after release.yml fix
  103. v1.22.2 Jul 14, 2026 - CI auto-bump
    • CI auto-bump
  104. v1.22.1 Jul 14, 2026 - CI auto-bump after first 1.22.0 release
    • CI auto-bump after first 1.22.0 release
  105. v1.22.0 Jul 14, 2026 Features - Cluster orchestration: cardinal cluster init/join/leave/info/ls/node — multi-node container orchestration - Services: cardinal se…

    Features

    • Cluster orchestration: cardinal cluster init/join/leave/info/ls/node — multi-node container orchestration
    • Services: cardinal service create/ls/rm/scale/update — replicated services with rolling updates
    • FaaS / Serverless: cardinal fn deploy/ls/rm/call — auto-scaling serverless functions with scale-to-zero
    • Blueprints: cardinal blueprint list/info/install + blueprint repo add/remove/list — pre-configured templates
    • Docker-compatible REST API: cardinal serve [-d] [--token] — works with Portainer, VS Code Dev Containers
    • Compose secrets & configs: Docker-style secret/config injection via cardinal.toml / compose.yaml
    • Container events: cardinal events [--since <time>] — real-time lifecycle event streaming
    • Dynamic port management: cardinal port add/rm — hot-add/remove port mappings without restart
    • Container FS browser: cardinal fs ls/cat/tree/find — browse stopped/running container filesystems
    • Healthchecks: --healthcheck-* flags — auto-restart on failure
    • Startup scripts: --startup flag with @file support, CARDINAL_* env vars injection
    • Named volumes: cardinal volume create/ls/rm/inspect/prune
    • Container export/import: cardinal export/import — save and load container images
    • Registry auth: cardinal login/logout — authenticated registry access + cardinal push

    Improvements

    • Rootless mode support (internal/container/rootless.go)
    • DNS service discovery for cluster (UDP 5353)
    • Systemd bootstrap auto-install on cardinal run --restart always
    • cardinal set now supports --memory, --cpus, --disk, --restart, --workdir, -e, --entrypoint, --user, --readonly, --no-new-privs, -h, --network
    • cardinal up --generate — generate cardinal.toml from existing containers
    • Multi-arch image resolution (--platform)
    • cgroups v2 resource limits for CPU, memory, disk
  106. v1.21.72 Jul 14, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.71...v1.21.72
  107. v1.21.71 Jul 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.70...v1.21.71
  108. v1.21.70 Jul 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.69...v1.21.70
  109. v1.21.69 Jul 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.68...v1.21.69
  110. v1.21.68 Jul 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.67...v1.21.68
  111. v1.21.67 Jul 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.66...v1.21.67
  112. v1.21.66 Jul 12, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.65...v1.21.66
  113. v1.21.65 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.64...v1.21.65
  114. v1.21.64 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.63...v1.21.64
  115. v1.21.63 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.62...v1.21.63
  116. v1.21.62 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.61...v1.21.62
  117. v1.21.60 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.59...v1.21.60
  118. v1.21.59 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.58...v1.21.59
  119. v1.21.58 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.57...v1.21.58
  120. v1.21.57 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.56...v1.21.57
  121. v1.21.56 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.55...v1.21.56
  122. v1.21.55 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.54...v1.21.55
  123. v1.21.54 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.53...v1.21.54
  124. v1.21.52 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.51...v1.21.52
  125. v1.21.51 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.50...v1.21.51
  126. v1.21.50 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.49...v1.21.50
  127. v1.21.49 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.48...v1.21.49
  128. v1.21.48 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.47...v1.21.48
  129. v1.21.47 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.46...v1.21.47
  130. v1.21.46 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.45...v1.21.46
  131. v1.21.45 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.44...v1.21.45
  132. v1.21.44 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.43...v1.21.44
  133. v1.21.43 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.42...v1.21.43
  134. v1.21.42 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.41...v1.21.42
  135. v1.21.41 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.40...v1.21.41
  136. v1.21.40 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.39...v1.21.40
  137. v1.21.39 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.38...v1.21.39
  138. v1.21.38 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.37...v1.21.38
  139. v1.21.37 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.36...v1.21.37
  140. v1.21.36 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.35...v1.21.36
  141. v1.21.34 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.33...v1.21.34
  142. v1.21.33 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.32...v1.21.33
  143. v1.21.32 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.31...v1.21.32
  144. v1.21.31 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.30...v1.21.31
  145. v1.21.30 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.29...v1.21.30
  146. v1.21.29 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.28...v1.21.29
  147. v1.21.28 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.27...v1.21.28
  148. v1.21.27 Jul 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.26...v1.21.27
  149. v1.21.26 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.25...v1.21.26
  150. v1.21.25 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.24...v1.21.25
  151. v1.21.24 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.23...v1.21.24
  152. v1.21.23 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.22...v1.21.23
  153. v1.21.22 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.21...v1.21.22
  154. v1.21.21 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.20...v1.21.21
  155. v1.21.20 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.19...v1.21.20
  156. v1.21.19 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.18...v1.21.19
  157. v1.21.18 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.17...v1.21.18
  158. v1.21.17 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.16...v1.21.17
  159. v1.21.16 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.15...v1.21.16
  160. v1.21.15 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.14...v1.21.15
  161. v1.21.14 Jul 10, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.13...v1.21.14
  162. v1.21.13 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.12...v1.21.13
  163. v1.21.12 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.11...v1.21.12
  164. v1.21.11 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.10...v1.21.11
  165. v1.21.10 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.9...v1.21.10
  166. v1.21.9 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.8...v1.21.9
  167. v1.21.8 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.7...v1.21.8
  168. v1.21.7 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.6...v1.21.7
  169. v1.21.6 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.5...v1.21.6
  170. v1.21.5 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.4...v1.21.5
  171. v1.21.4 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.3...v1.21.4
  172. v1.21.3 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.2...v1.21.3
  173. v1.21.2 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.1...v1.21.2
  174. v1.21.1 Jul 8, 2026 Full Changelog: https://github.com/animesao/dck/compare/v1.21.0...v1.21.1
  175. v1.21.0 Jul 8, 2026 Features - Container commit: cardinal commit <container <image:<tag - cardinal build — Dockerfile builder with --no-cache, --build-arg, mult…

    Features

    • Container commit: cardinal commit <container> <image>:<tag>
    • cardinal build — Dockerfile builder with --no-cache, --build-arg, multi-stage support
    • cardinal system prune — cleanup unused containers and images
    • cardinal stop --all — stop all running containers
    • cardinal exec -i/-t flags properly handled
    • cardinal console — auto-detect shell inside container
    • Improved attach with Unix socket (Ctrl+C safe)
  176. v1.20.0 Jun 20, 2026 Features - Dynamic port management: cardinal port add/rm — hot-add/remove iptables DNAT rules - Russian (ru) documentation mirror - --ulimit…

    Features

    • Dynamic port management: cardinal port add/rm — hot-add/remove iptables DNAT rules
    • Russian (ru) documentation mirror
    • --ulimit support in run flags

    Bug Fixes

    • Fixed overlay mount ordering for disk limits
    • Fixed cardinal exec TTY handling
  177. v1.19.0-dev.448784f Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  178. v1.19.0-dev.0207700 Jul 1, 2026 pre See the commit history for details.

    See the commit history for details.

  179. v1.19.0-dev.66dcfc0 Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  180. v1.19.0-dev.17fd9ef Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  181. v1.19.0-dev.8fb5673 Jul 1, 2026 pre See the commit history for details.

    See the commit history for details.

  182. v1.19.0-dev.6bd2944 Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  183. v1.19.0-dev.6cb8d2d Jul 1, 2026 pre See the commit history for details.

    See the commit history for details.

  184. v1.19.0-dev.4d1735e Jul 1, 2026 pre See the commit history for details.

    See the commit history for details.

  185. v1.19.0-dev.03bdf8c Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  186. v1.19.0-dev.2a0c58c Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  187. v1.19.0-dev.1b48bff Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  188. v1.19.0-dev.ed8d690 Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  189. v1.19.0-dev.e6ae65a Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  190. v1.19.0-dev.da5215f Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  191. v1.19.0-dev.bd1284f Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  192. v1.19.0-dev.b00636e Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  193. v1.19.0-dev.ac81ed5 Jul 3, 2026 pre See the commit history for details.

    See the commit history for details.

  194. v1.19.0-dev.ebcb7b7 Jul 1, 2026 pre See the commit history for details.

    See the commit history for details.

  195. v1.19.0-dev.d03321c Jul 1, 2026 pre See the commit history for details.

    See the commit history for details.

  196. v1.19.0 Jun 17, 2026 Features - Container FS browser: cardinal fs ls/cat/tree/find - --healthcheck- flags with auto-restart on failure - --startup flag with @fil…

    Features

    • Container FS browser: cardinal fs ls/cat/tree/find
    • --healthcheck-* flags with auto-restart on failure
    • --startup flag with @file inline script support
    • CARDINAL_* environment variables injected for startup scripts
  197. v1.18.0 Jun 26, 2026 Features - cardinal events — real-time container event streaming - cardinal volume create/ls/rm/inspect/prune — named volume management - ca…

    Features

    • cardinal events — real-time container event streaming
    • cardinal volume create/ls/rm/inspect/prune — named volume management
    • cardinal export/import — save/load images as tar.gz
    • cardinal login/logout — authenticated registry access
    • Multi-arch image resolution with --platform flag

    Security

    • Rootless mode support (experimental)
    • No-new-privs flag support
  198. v1.17.0 Jun 24, 2026 Code Quality - Dead code removed: internal/container/rcon.go — неиспользуемый RCON протокол - State tests: 12 unit-тестов для internal/state…

    Code Quality

    • Dead code removed: internal/container/rcon.go — неиспользуемый RCON протокол
    • State tests: 12 unit-тестов для internal/state (пути, JSON, FileExists)

    Bug Fixes

    • cardinal-wings: Исправлен баг валидации container ID — / блокировал все action-запросы (start/stop/restart)
  199. v1.16.0 Jun 14, 2026 Changelog 30ecf2bd9b5bceceee87d7e627900bdfe2c28f52 Move before.hooks to workflow steps (GoReleaser Pro feature not available in OSS) 7f5c1a8…

    Changelog

    • 30ecf2bd9b5bceceee87d7e627900bdfe2c28f52 Move before.hooks to workflow steps (GoReleaser Pro feature not available in OSS)
    • 7f5c1a8d008ceaadce3d73eb931fc7c4e378a208 Fix hooks format for goreleaser v2 and pre-install core22 for snapcraft
    • 016d90c3ac191ec446290765fdca75f08e2dcac3 Fix: move userKept map population before no_new_privs check
    • 827ca9e0be21e6604dced52b4536fd358f8b6485 Fix release pipeline: remove snapcrafts from goreleaser, build snap separately
    • e46df872f36e9cf77d2e7916ba87b610405c1c85 Replace snap workflow with GoReleaser release pipeline
    • da582e572fecbfbe9b4f6b0a563bf8e66cb06524 Add snap package build support
    • d948149f988c7a0998b823821518d44a40eaff74 Bump version to 1.16.0
    • 73fc3d15880739dfa6bf5d1a65f6b46cec163de0 Security hardening for dck runtime
    • 5c445ecafa839bf3ea8c7eb7e6111d447dde8e3a fix: cleanup named volumes on container remove + add linux build tag
    • 609e11c05f8897b1b32584bfe0d379e55c9e8b79 fix: default workdir /home/container, graceful ip link fallback
    • 36745844799f994ba7e16e89d70a6c6a12500e6e Update APT repo for v1.15.0
  200. v1.15.0 Jun 13, 2026 Security - pivotroot вместо chroot — исправлен container escape vector - Build tags (//go:build linux) добавлены на Linux-only файлы Bug Fix…

    Security

    • pivot_root вместо chroot — исправлен container escape vector
    • Build tags (//go:build linux) добавлены на Linux-only файлы

    Bug Fixes

    • Disk limit: исправлен path mismatch — overlay монтируется в правильную merged директорию
    • Race condition StoppedByUser: sync.Map для атомарного флага между Stop() и monitor goroutine
    • Error swallowing: логируются ошибки cgroup, mount, network, kill, overlay
    • Context/Timeout: volume и network команды теперь с 30s timeout через exec.CommandContext
    • RCON: мёртвый код помечен комментарием

    Features

    • cardinal stop --all: остановка всех запущенных контейнеров
    • cardinal exec -i/-t: флаги парсятся и применяются корректно
    • cardinal console: TTY handling через ExecOpts

    Maintenance

    • Debian control version синхронизирована с VERSION (1.15.0)
  201. v1.14.0 Jun 12, 2026 - DiskLimit support + loop device quota enforcement - cardinal run --disk human-readable format - Fix overlay mount ordering - Multi-arch im…
    • DiskLimit support + loop device quota enforcement
    • cardinal run --disk human-readable format
    • Fix overlay mount ordering
    • Multi-arch image resolution
  202. v1.13.0 Jun 12, 2026 New: - --startup <script флаг для dck run — инлайн скрипт или @file - StartupScript поле в JSON контейнера — сохраняется и выполняется при с…

    New:

    • --startup <script> флаг для dck run — инлайн скрипт или @file
    • StartupScript поле в JSON контейнера — сохраняется и выполняется при старте
    • При старте контейнера создаются /dck/info, /dck/env, /dck/help
    • Переменные окружения DCK_CONTAINER_ID, DCK_NAME, DCK_IMAGE_NAME, DCK_IMAGE_TAG, DCK_HOSTNAME, DCK_IP, DCK_MEMORY, DCK_CPU, DCK_RESTART, DCK_PORT_*

    Changed:

    • dck init перед запуском CMD проверяет StartupScript → пишет в /startup.sh и exec'ит
    • dck run парсит --startup через strings.Fields для инлайн или os.ReadFile для @file
  203. v1.12.0 Jun 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/1.11.0...1.12.0
  204. v1.11.0 Jun 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/1.10.3...1.11.0
  205. v1.10.3 Jun 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/1.10.2...1.10.3
  206. v1.10.2 Jun 11, 2026 Full Changelog: https://github.com/animesao/dck/compare/1.10.1...1.10.2
  207. v1.10.0 Jun 11, 2026 What's new - dck stats - live container resource monitoring (CPU%, memory, IO, PIDs). Run dck stats for all running containers or dck stats…

    What's new

    • dck stats - live container resource monitoring (CPU%, memory, IO, PIDs). Run dck stats for all running containers or dck stats <name> for a specific one. dck stats --no-stream for single-shot.

    Changes

    • Bump version 1.9.1 ? 1.10.0
  208. v1.9.1 Jun 11, 2026 v1.9.1 — Memory leak fixes & stop reliability Fixed - Kill console-serve on container stop — orphaned console processes no longer hold overl…

    v1.9.1 — Memory leak fixes & stop reliability

    Fixed

    • Kill console-serve on container stop — orphaned console

    processes no longer hold overlay file descriptors, preventing

    dentry/page cache from being released by the kernel.

    • SIGKILL both unshare parent and container init — `unshare --

    kill-child` does not fire when killed with SIGKILL, and container

    init (PID 1 in its PID namespace) ignores SIGTERM from the host

    namespace. Both are now killed directly with SIGKILL.

    • Replace proc.Wait() with pollingdck stop runs in a

    separate process where the target was reparented to init, so `Wait(

    ) returned ECHILD immediately. Replaced with kill(pid, 0)`

    polling with timeout.

    • Cancel healthcheck goroutine on stop — healthcheck now uses

    a cancellable context.Context to prevent dangling goroutines.

    • Prevent double-cleanup race — added mutex + cleanupStarted

    flag to serialize Stop() and monitorContainer() cleanup paths.

    • Try normal umount before lazy — non-lazy unmount lets the

    kernel release dentry and page cache immediately; lazy fallback if

    references still exist.

  209. v1.9.0 Jun 10, 2026 What's new - dck port <container — show port mappings for a container - Network fixes: - routelocalnet=1 enabled permanently (/etc/sysctl.d/…

    What's new

    • dck port <container> — show port mappings for a container
    • Network fixes:
    • route_localnet=1 enabled permanently (/etc/sysctl.d/99-dck.conf)
    • Stale ARP flush on bridge after veth setup
    • Orphan veth cleanup in EnsureBridge()
    • Volume permissions: chmod 0777 fallback when image has no Config.User
    • /tmp permissions fixed (chmod 01777) in init
  210. v1.8.0 Jun 10, 2026 What's new - Fix: enable memory/cpu/pids controllers in dck cgroup subtreecontrol so children get proper stats - Fix: install.sh now reads V…

    What's new

    • Fix: enable memory/cpu/pids controllers in dck cgroup subtree_control so children get proper stats
    • Fix: install.sh now reads VERSION file and passes it via ldflags
    • Always create cgroup directory for containers
  211. v1.7.0 Jun 10, 2026 Что нового - Всегда создаётся cgroup-директория для сбора статистики (даже без лимитов) - Фикс PATH в init: используется PATH из образа вмес…

    Что нового

    • Всегда создаётся cgroup-директория для сбора статистики (даже без лимитов)
    • Фикс PATH в init: используется PATH из образа вместо hardcoded defaultPath
    • Исправлены ошибки сборки на Linux (prctl, rlimit, types)
    • Обновлён README
  212. v1.6.0 Jun 9, 2026 dck v1.6.0 New run/up flags - \--cap-add\, \--cap-drop\ — Linux capabilities - \--dns\ — custom DNS servers - \-l\ / \--label\ — container l…

    dck v1.6.0

    New run/up flags

    • \--cap-add\, \--cap-drop\ — Linux capabilities
    • \--dns\ — custom DNS servers
    • \-l\ / \--label\ — container labels
    • \--user\ — username or UID:GID
    • \--sysctl\ — sysctl options
    • \--ulimit\ — ulimit options (name=soft:hard)
    • \--readonly\ — make rootfs read-only
    • \--no-new-privs\ — disable acquiring new privileges
    • \--entrypoint\ — override image entrypoint
    • \--network\ — network mode (bridge/none/host)
    • \--healthcheck-cmd\, \--healthcheck-interval\, \--healthcheck-retries\, \--healthcheck-timeout\

    Init improvements

    • DNS written to /etc/resolv.conf
    • Sysctls applied via /proc/sys
    • User switching (setuid/setgid)
    • PR_SET_NO_NEW_PRIVS via prctl
    • Capability bounding set drop (PR_CAPBSET_DROP)
    • Read-only rootfs remount
    • Resource limits via setrlimit (ulimit)

    TOML config (dck.toml)

    • New fields: entrypoint, network_mode, labels, cap_add, cap_drop, user, readonly, no_new_privs, sysctls, ulimits, dns

    Other

    • NeedsNetwork respects network_mode (none/host = no veth)
    • Help text updated
  213. v1.5.0 Jun 9, 2026 What's New - Working Directory: New --workdir flag for dck run and dck up to set the working directory inside the container - Memory & CPU l…

    What's New

    • Working Directory: New --workdir flag for dck run and dck up to set the working directory inside the container
    • Memory & CPU limits: Already supported in previous version, now fully wired through the stack
    • Bug fixes:
    • Export ParseMemoryString (fixes compile error)
    • Fix symlink attack in dck update (use os.CreateTemp instead of hardcoded path)
    • Fix data race in globalPool (sync.Once)
    • Fix double-prepend library/ in rmi
    • Remove dangerous session.lock deletion
    • Add missing error handling for os.Pipe() and os.UserHomeDir()
  214. v1.4.7 Jun 9, 2026 Unix socket console (Pterodactyl-style) - dck attach rewritten — no longer uses RCON. Container stdin/stdout is bridged through a Unix socke…

    Unix socket console (Pterodactyl-style)

    • dck attach rewritten — no longer uses RCON. Container stdin/stdout is bridged through a Unix socket via a dedicated console-serve process.
    • When you dck attach, you get the full log history first, then live streaming — no gaps.
    • Ctrl+C is safe — the container keeps running when you detach.
    • Multiple clients can attach simultaneously.

    Logging reliability fix

    • Removed io.MultiWriter risk from detached mode.

    Network readiness

    • dck init waits up to 20 seconds for eth0 IP.

    Other fixes

    • dck start / dck restart preserve overlay layer
    • dck stop kills with --kill-child
    • session.lock race fix
    • Socket cleanup on container stop/remove
  215. v1.3.0 Jun 9, 2026 dck v1.3.0

    dck v1.3.0

  216. v1.2.1 Jun 9, 2026 dck v1.2.1 — dck update: HTTP fallback for VPS that block HTTPS

    dck v1.2.1 — dck update: HTTP fallback for VPS that block HTTPS

  217. v1.2.0 Jun 9, 2026 dck v1.2.0 — Reliable bootstrap after reboot - Use /root/.dck explicitly for root (fixes systemd HOME=/ issue) - Remove RemainAfterExit=yes…

    dck v1.2.0 — Reliable bootstrap after reboot

    • Use /root/.dck explicitly for root (fixes systemd HOME=/ issue)
    • Remove RemainAfterExit=yes so systemd runs bootstrap on every boot
    • Remove systemctl start from --install (prevents parallel bootstrap race)
    • Bootstrap always restarts containers (no stale PID/veth checks)
    • All network infrastructure auto-configured (ip_forward, UFW, MASQUERADE)
    • Host-to-container port forwarding via OUTPUT DNAT rule
    • Update mechanism using VERSION file
  218. v1.1.1 Jun 9, 2026 dck v1.1.1 — Auto-recovery & persistent port forwarding - Output DNAT rule for host-to-container port mapping (curl from localhost works) -…

    dck v1.1.1 — Auto-recovery & persistent port forwarding

    • Output DNAT rule for host-to-container port mapping (curl from localhost works)
    • Auto-configure ip_forward (sysctl + persist to /etc/sysctl.d/99-dck.conf)
    • Auto-configure UFW route allow for dck0 bridge
    • EnsureNetBase() — one-call setup for all network prerequisites
    • Bootstrap now restores iptables rules for running containers
    • Bootstrap detects stale containers after reboot via veth existence check
    • Update mechanism now uses VERSION file instead of parsing root.go
    • Robust stale-PID detection after system reboot
  219. v1.1.0 Jun 9, 2026 dck v1.1.0 — DNS, environment files, restart policies - Built-in DNS resolver (dck0 bridge) - --env-file support - Restart policies: --resta…

    dck v1.1.0 — DNS, environment files, restart policies

    • Built-in DNS resolver (dck0 bridge)
    • --env-file support
    • Restart policies: --restart always/on-failure/unless-stopped
    • dck up / dck down with dck.toml config
    • Bootstrap with systemd service
  220. v1.0.0 Jun 9, 2026 dck v1.0.0 — Initial release - Basic container runtime - Image pull from Docker Hub - Port mapping - Volume mounts - Container isolation via…

    dck v1.0.0 — Initial release

    • Basic container runtime
    • Image pull from Docker Hub
    • Port mapping
    • Volume mounts
    • Container isolation via namespaces and cgroups