History

This release matures the project from 0.6.x -> 0.7.x. Continued testing and bug fixes are proving Bastille capable for a range of use-cases. New (experimental) features are examples of innovation from community contribution and feedback. Thank you.

See the full release notes for details.

Thank you to everyone that submitted bug reports and/or fixes to this release. Your support has been amazing.

Primarily a bug-fix release addressing reported issues.

See the full release notes for details.

Bastille 0.6.20200412 release is dedicated to everyone around the world quarantined by the COVID-19 pandemic.

See the full release notes for details.

Bastille 0.6.20200202 is easily the biggest update we’ve ever had and it’s all thanks to the generous FreeBSD community. Your contributions have been amazing! I am sincerely thankful.

See the full release notes for details.

CHANGELOG: This is a minor bug-fix release that improves the reliability of containers when using loopback-based networking. It also adds some safeguards against invalid network configurations and other minor cosmetic improvements.

Features:

• standalone “thick” containers now available (create -T|--thick ...)
• Bastille Templates: now tested with GitLab CI/CD
• Bastille Documentation has been updated and extended
• bootstrap now supports optional update command to auto-patch release
• Network config validation added to avoid disconnected containers

Fixes:

• #49
• #50
• #53
• #54
• container target matching improved

Features:

• Added support for FreeBSD 11.3-RELEASE, 12.1-RC1, 12.1-RC2 and 12.1-RELEASE.
• Added option to assign network interface during container creation, if empty bastille obeys config file.
• Added NIC validation.
• Improved IP validation.
• Added ability to destroy regex-matching base releases, cache content not affected.
• Added validation for the ZFS parameters.

Fixes:

• Fix for container and releases output listing.
• Fix for prevent double distfile.txz file extraction on bootstrap.
• Fix for missing subsequent directory creation for cache/*-RELEASE.
• Fix for missing subsequent directory creation for releases/*-RELEASE.
• Fix for chflags removal and container/release directory deletion if exist.
• Minor code fixes.

Happy Bastille Day! (Of course we had a release to celebrate)

Features:

• [email protected] syntax now (optionally) supported during bastille create.
• template system now supports INCLUDE and SERVICE.
• /usr/local/bastille now 0750 to avoid unprivileged users from accessing Bastille files, container, releases, etc.
• template hook CONFIG renamed to OVERLAY.
• support for listing container(s), template(s), log(s), release(s).
• only reload firewall on start/stop if loopback networking used.
• ZFS sub-command additions of get|set|snapshot.

Fixes:

• fixes bootstrap regression in non-zfs installs
• makes cp sub-command verbose (cp -av)
• adds support for cloning templates from GitLab
• code cleanup and formatting service sub-command added for managing services within container
• verify sub-command documented properly

Features:

• This release adds initial (basic) support for HardenedBSD as a platform
• Bastille now works on HardenedBSD and should work on OPNsense

Notes:

• This release supports basic templates in Bastille. See README for details.

Notes:

• this release should be “good ‘nuf” for others to use

Notes:

• alpha quality.
• no guarantees.
• basic proof of concept.
• startup script included