1.4.1.260315

What's Changed

• Accept | in config values, emit actual value by @gahr in #1485
• bootstrap: fix Linux bootstrap by @tschettervictor in #1489
• create: allow using /var/db/zoneinfo for timezone setting by @tschettervictor in #1493
• template: remove skip arg logic by @tschettervictor in #1494
• bootstrap: don't print validated checksum as it is redundant by @tschettervictor in #1495
• rename: first pass renaming passthrough interface by @tschettervictor in #1497
• rename: fix passthrough interface by @tschettervictor in #1499
• config: allow hyphen by @tschettervictor in #1500
• config: fix supported value by @tschettervictor in #1501
• Add --tags to create by @tschettervictor in #1504
• export: fix live mode by @tschettervictor in #1506
• migrate: fix event sequence by @tschettervictor in #1507
• bump to version 1.4.1 by @tschettervictor in #1508

Full Changelog: 1.4.0.260219...1.4.1.260315

1.4.0.260219

What's Changed

• Update README.md, MAC addresses part + small typo by @voipmeister in #1434
• Fix every export is reported as RAW image by @JRGTH in #1435
• Fix subnet if set manually by @tschettervictor in #1437
• Don't set/inherit mountpoint if no alt mountpoint by @JRGTH in #1438
• migrate: missing var by @tschettervictor in #1442
• list: -p should imply -j by @tschettervictor in #1443
• manpages: fix missing argument for migrate by @tschettervictor in #1446
• common: also use interface name for static Mac by @tschettervictor in #1441
• Update template.rst with more details of advanced RDR use by @tobybryans in #1444
• Allow line_in_file to create a file by @gahr in #1448
• template: support mandatory ARG and conditional by @tschettervictor in #1449
• bootstrap: only cleanup if first bootstrap by @tschettervictor in #1450
• template: better skip arg handling by @tschettervictor in #1452
• network: error on no interface by @tschettervictor in #1457
• network: fix logic by @tschettervictor in #1459
• Accept IPv6 addresses as destination option in redirects by @anparker in #1461
• network: filter out comments from rc.conf by @tschettervictor in #1458
• create: fix linux releases verification by @tschettervictor in #1467
• cp: create directory if missing by @tschettervictor in #1474
• network: fix adding vlan logic by @tschettervictor in #1465
• config: hardening by @tschettervictor in #1469
• Redirect Bastille statements to &2 by @tschettervictor in #1463
• template: fix skipping args by @tschettervictor in #1476
• add noip to create by @tschettervictor in #1475
• Fix ip6 subnet by @tschettervictor in #1479
• limits: fix spacing by @tschettervictor in #1480
• update to 1.4.0 by @tschettervictor in #1481

New Contributors

• @voipmeister made their first contribution in #1434
• @tobybryans made their first contribution in #1444
• @anparker made their first contribution in #1461

Full Changelog: 1.3.2.251225...1.4.0.260219

1.3.2.251225 Christmas Day

This is a minor release adding one feature for the edit subcommand and fixing a bug in the new monitor subcommand.

What's Changed

• monitor: fix healthcheck trigger by @tschettervictor in #1390
• edit: allow editing resolv.conf by @tschettervictor in #1432

Full Changelog: 1.3.1.251223...1.3.2.251225

1.3.1.251223

Bugfix release for the new monitor sub-command.

The monitor sub-command was checking the state of the jail too early, causing any service additions to fail.

1.3.0.251222

What's Changed

• Man pages update by @tschettervictor in #1344
• deprecate legacy templates by @tschettervictor in #1346
• Fix mount test by @tschettervictor in #1347
• create: fix vlan template by @tschettervictor in #1349
• Update pkgbase.rst: mention bastille_pkgbase_packages by @adriel-tech in #1354
• Add "monitor" subcommand by @tschettervictor in #1325
• list: fix listing STABLE by @tschettervictor in #1353
• setup: antispoof 4/6 for pf by @tschettervictor in #1351
• bootstrap: support trixie/fix bookworm by @tschettervictor in #1357
• sysrc: support host command by @tschettervictor in #1358
• list: fix list release by @tschettervictor in #1359
• edit: allow editing rc.conf by @tschettervictor in #1360
• docs: pkgbase: update for --jail by @tschettervictor in #1362
• Update README.md by @unixbeer in #1363
• Create subnet fix by @tschettervictor in #1364
• create: fix ip6 and ip4 by @tschettervictor in #1365
• fix epair list for multi-config by @tschettervictor in #1367
• use lowercase camelcase for all local vars and uppercase for global by @tschettervictor in #1369
• export: support AUTO_RESTART of jail was auto-stopped by @tschettervictor in #1371
• common: camel_case for local vars by @tschettervictor in #1372
• bootstrap: only remove repo, not templates by @tschettervictor in #1376
• template: use eval to parse arg value by @tschettervictor in #1379
• template: get IP for vnet jails by @tschettervictor in #1378

New Contributors

• @unixbeer made their first contribution in #1363

Full Changelog: 1.2.2.251204...1.3.0.251222

1.2.2.251204

What's Changed

• pkgbase: document using --rootdir better by @tschettervictor in #1326
• bootstrap: also rm directories by @tschettervictor in #1327
• bootstrap: print full release by @tschettervictor in #1328
• pkgbase: fix fingerprints directory by @tschettervictor in #1329
• upgrade: use pkgbase if jail is pkgbasified by @tschettervictor in #1331
• list now displays all jails, not just only running ones by @metalefty in #1334
• pkgbase: fix pkg keys dir for base_latest/weekly by @tschettervictor in #1338
• update to 1.2.2 by @tschettervictor in #1339

DEPRECATION:

Legacy Templates - Bastille started out with a template style where each hook would be its own file, and the args for that hook would be listed inside the file. So PKG would be a file called PKG and the contents would be the packages to install. Version 1.2.2 will be the last Bastille version to include this functionality. The template structure has evolved to where we now use only a single file called a Bastillefile making it much easier to write templates. See the documentation for details.

To convert these older style templates, you can run bastille template convert project/template

Full Changelog: 1.2.0.251201...1.2.2.251204

1.2.0.251201

What's Changed

• add tests by @tschettervictor in #1297
• template: fix LIF by @tschettervictor in #1299
• docs: networking: update vlan by @tschettervictor in #1301
• docs: networking: add tip (gateway,nameserver) by @tschettervictor in #1302
• docs: networking: add proper shell tags by @tschettervictor in #1303
• rename: fix renaming epair in rc.conf by @tschettervictor in #1307
• clone: fix epair name in rc.conf by @tschettervictor in #1308
• docs: networking: document ipv6 more thoroughly by @tschettervictor in #1309
• docs: networking: clarify VNET by @tschettervictor in #1310
• Feat: support zstd compression for export/import by @tschettervictor in #1305
• Setup improvements for netgraph by @JRGTH in #1312
• setup: move linux setup to setup command by @tschettervictor in #1313
• fix bootstrap with pkgbase by @Fneufneu in #1314
• Add deeper support for HBSD by @tschettervictor in #1315
• Pkg base fixes by @tschettervictor in #1316
• docs: document support for HBSD by @tschettervictor in #1317
• stop: supress rdr list by @tschettervictor in #1319
• v1.2.0 by @tschettervictor in #1323

New Contributors

• @Fneufneu made their first contribution in #1314

Full Changelog: 1.1.2.251119...1.2.0.251201

1.1.2.251119

What's Changed

• clone: fix missing var CLONE_INTERFACE_COUNT by @tschettervictor in #1293
• destroy: allow destroying custom releases by @tschettervictor in #1294
• setup: set some vars only on bridge setup by @tschettervictor in #1295

Full Changelog: 1.1.1.251118...1.1.2.251119

1.1.1.251118

What's Changed

• list: fix listing jails with DHCP by @tschettervictor in #1256
• Epair naming by @tschettervictor in #1257
• migrate: detect id_* for key file by @tschettervictor in #1262
• rdr: allow comma separated interfaces by @tschettervictor in #1260
• document workaround for Netgraph of Proxmox VM by @tschettervictor in #1273
• vnet: set jail descr + fix vnet number by @tschettervictor in #1278
• Better handling of jailing a zfs dataset by @tschettervictor in #1282
• Initial support for pkgbase by @tschettervictor in #1272
• setup: Configure sysctl for VNET by @tschettervictor in #1284
• Update readme, and organize docs by @tschettervictor in #1286
• doc updates by @tschettervictor in #1289

Full Changelog: 1.1.0.251001...1.1.1.251118

1.1.0.251001

What's Changed

This release adds initial support for Ubuntu Noble jails, introduces the ability to target jails by tags, and adds a VNET passthrough option. The parallel execution mode has been deprecated. This release also brings numerous improvements to ZFS management, networking, command validation, and listing output. A large number of bug fixes have been implemented to increase stability and reliability, also the documentation has been significantly updated. Read it completely for all the details:

‼️ Deprecations

• deprecate parallel mode by @tschettervictor in #1209
• parallel mode: Remove cmd and service by @tschettervictor in #1188

🗞️ New features

• bootstrap: initial support for Ubuntu Noble jail by @yaazkal in #1202
• common: Add option to use “tags” as TARGET by @tschettervictor in #1191
• create: Add -P allowing passthrough for VNET jails by @tschettervictor in #1246

🔧 Improvements

• cp: eliminate redundant “_option” by @tschettervictor in #1222
• create: Don’t allow -|_ in VNET jail names by @tschettervictor in #1187
• create: exit if dataset creation failed by @tschettervictor in #1206
• common: Show warning when updating jail.conf > v1 by @tschettervictor in #1199
• common: Suppress unwanted errors, we use spaces for ident by @JRGTH in #1229
• config: Set compress to “on” for zfs compression by @tschettervictor in #1237 and #1239
• list: properly list jail type by @tschettervictor in #1251
• network: don't allow dots in interface name if -V by @tschettervictor in #1216
• rdr: Wrap $RDR_IF in double quotes by @dougmacnerland in #1210
• setup: update default firewalls to support ipv6 by default by @cedwards in #1200
• zfs: Bastille zfs command improvements by @JRGTH in #1164
• zfs: Cleanup zfs subcommand and add docs by @tschettervictor in #1190
• init avoid epair name clash by @tschettervictor in #1250
• Don't quote ${SH} by @michael-o in #1241
• Apply version (natural) sort to listings by @michael-o in #1253

🐞 Bug fixes

• convert: fix typo for newline by @tschettervictor in #1232
• cp: Properly copy resolv.conf file from host by @JRGTH in #1221
• create: fix creation of jails with alias IP by @JRGTH in #1192
• create: Fix error message for DHCP on non-VNET jails by @tschettervictor in #1193
• destroy: Fix destroy single digit on major version releases by @JRGTH in #1228
• list: Fix listing of IPv6 addresses by @tschettervictor in #1198
• list: fix listing jail type on UFS by @tschettervictor in #1213
• list: fix JAIL_TYPE on zfs by @tschettervictor in #1220
• network: Fix adding VNET interface by @tschettervictor in #1186
• network: fix default interface being removed on new interface add by @tschettervictor in #1204
• rename: Fix netgraph interface suffix by @pmarr in #1226
• restart: error if jail is not restarted by @tschettervictor in #1249
• update: fix updating an EOL jail by @tschettervictor in #1248

📓 Documentation

• Move breaking changes to README by @tschettervictor in #1197
• Update breaking change notes by @tschettervictor in #1196
• Update template.rst template link by @pmarr in #1214
• Update man page by @metalefty in #1218
• Move man to /usr/local/share by @tschettervictor in #1224
• Upgrading: Fix update > install by @tschettervictor in #1230
• Better network documentation by @tschettervictor in #1225

Other

• make devel bastille version format: branch-hash by @cedwards in #1194
• Trim trailing whitespace by @michael-o in #1238
• Release review by @yaazkal in #1254

New Contributors

• @dougmacnerland made their first contribution in #1210
• @pmarr made their first contribution in #1214

Full Changelog: 1.0.1.250714...1.1.0.251001