mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-16 05:20:22 +08:00
44 lines
2.3 KiB
Plaintext
44 lines
2.3 KiB
Plaintext
---
|
|
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
title: "NVIDIA OpenShell Release Notes"
|
|
sidebar-title: "Release Notes"
|
|
description: "Track the latest changes and improvements to NVIDIA OpenShell."
|
|
keywords: "Generative AI, Cybersecurity, Release Notes, Changelog, AI Agents"
|
|
position: 6
|
|
---
|
|
|
|
NVIDIA OpenShell follows a frequent release cadence. Use the following GitHub resources directly.
|
|
|
|
## 0.1.0 migration notes
|
|
|
|
### Workload images
|
|
|
|
The default workload image is now `nvcr.io/nvidia/base/ubuntu:24.04`. It is a
|
|
minimal Ubuntu Noble environment and does not include agent CLIs or an
|
|
image-baked OpenShell policy. OpenShell applies its built-in restrictive policy
|
|
when no explicit policy is supplied.
|
|
|
|
The CLI no longer expands bare catalog names or supports the former catalog
|
|
registry override. Build or select an OCI image and pass its explicit reference:
|
|
|
|
```shell
|
|
openshell sandbox create --from registry.example.com/agents/my-agent:1.0 -- my-agent
|
|
```
|
|
|
|
Gateway operators can replace the default with the driver configuration or the
|
|
Helm `server.sandboxImage` value.
|
|
|
|
### Network policy binaries
|
|
|
|
OpenShell 0.1.0 removes the deprecated `NetworkBinary.harness` protobuf field and reserves its field number and name. Generated protobuf decoders ignore the unknown value. When the gateway loads policy history written by an older version, it migrates binaries marked by the former field into endpoint-provenance-marked rules so the upgrade cannot widen private-address access.
|
|
|
|
Remove `harness` from sandbox policies and provider profiles before upgrading. Policy and profile YAML now reject the property. Provider profiles should list binaries as scalar paths, such as `- /usr/bin/curl`; the transitional object form `- path: /usr/bin/curl` remains accepted and is exported as a scalar.
|
|
|
|
| Resource | Description |
|
|
|---|---|
|
|
| [Releases](https://github.com/NVIDIA/OpenShell/releases) | Versioned release notes and downloadable assets. |
|
|
| [Release comparison](https://github.com/NVIDIA/OpenShell/compare) | Diff between any two tags or branches. |
|
|
| [Merged pull requests](https://github.com/NVIDIA/OpenShell/pulls?q=is%3Apr+is%3Amerged) | Individual changes with review discussion. |
|
|
| [Commit history](https://github.com/NVIDIA/OpenShell/commits/main) | Full commit log on `main`. |
|