Keel-Linux/keel-web
1
0
Fork 0
Code Issues 3 Pull requests Projects Releases 7 Packages Wiki Activity Actions
7 releases 7 tags
  • testing-19.0-1-step7-20261001-2 3caf759108

    Keel Web 19.0-1, testing build 2026-10-01, second (unsigned) Pre-release

    marcos-mendez released this 2026-10-01 18:28:00 -03:00 | 18 commits to master since this release

    Superseded by testing-19.0-1-step8-20261002. Use that build instead.

    Test image of Keel Web, Phase 3 of the roadmap (Keel-Linux/tracker#46) and step 7 of handbook decision 0041, built in isolation from this commit (master after keel-web#1) on the Core layer of keel-core master, with keel 0.15.0 (Keel-Linux/keel#63), common 19.x after common#25 (keel-overlay-coraza 0.1.1), and the step 5 packages from their keel/trixie heads, libnginx-mod-http-coraza 0.21.0-0keel2 among them (libnginx-mod-http-coraza#3 and #4). Not for production and not signed. Verify with the .sha512 file. Supersedes testing-19.0-1-step7-20261001.

    Proxmox: copy to /var/lib/vz/template/cache and create a container from it. Plain LXC: extract into the rootfs.

    What it was tested for, in an LXC container on the build host:

    • Simple installation: plain Nginx serves the default page (200), Coraza not loaded (a Core Rule Set payload gets 200), Anubis disabled and inactive; Monit watches sshd, Webmin, postfix and nginx; a second apply changes nothing.
    • keel manifest validate passes and keel manifest show web --resolved prints the Web table of 0041.
    • Cloud simple, through the spec and keel spec apply --system (17 changes, Coraza's and keel-web's state hooks included): CRS payload 403; a browser gets Anubis's challenge; Googlebot from 2001:4860:4801:10::1 gets the page (simulated: a test-only set_real_ip_from the test client with real_ip_header X-Forwarded-For), from any other address it is challenged; a static page asked for with gzip is whole (625 of 625 bytes) through Anubis and on the socket; Monit adds crowdsec, firewall-bouncer, anubis and waf-blocks; a second apply changes nothing.
    • Back to simple through the spec: Debian's default site and plain Nginx again.
    • No SSH host keys, Anubis key, CrowdSec identity, machine-id or hook record in the image.
    Downloads