v0.4.0-beta.8

[dr-bonez]

StartOS v0.4.0

v0.4.0 is a complete rewrite of StartOS. After six years of building, we believe we have arrived at the correct architecture and foundation to deliver on the promise of sovereign computing.

⚠️ Before You Update

Everyone is welcome to participate in the public beta! However, the only way to update is by following the 0.4.0 Update Guide precisely. This is a sensitive update between two essentially distinct operating systems — skipping steps or improvising can result in data loss.

👉 Read the full update guide before proceeding

If anything goes wrong, stop and contact support — do not attempt to troubleshoot on your own.

Highlights

• Redesigned UI — faster, more intuitive, mobile-friendly, with a real-time system metrics dashboard
• Completely new networking stack — LAN port forwarding, Wireguard VPN gateways, private and public domains (clearnet), Let's Encrypt, built-in DNS, and Tor as an optional plugin
• StartTunnel — free, open-source reverse tunnel to expose services on a public domain without revealing your home IP
• LXC container runtime — replacing Docker/Podman with a reliable, nested container architecture supporting hardware acceleration and multi-container setups
• Improved backups — differential backups, cross-server restore, and a new FUSE module for cross-platform reliability
• Internationalization — multiple languages and keyboard layouts for StartOS and services
• TypeScript SDK — build and ship a StartOS package in minutes
• New S9PK format — signature verification, partial downloads, and multi-architecture support
• SMTP notifications — email alerts from StartOS and services via Gmail, SES, or any SMTP provider

Important

Previous backups are incompatible with v0.4.0. After updating, immediately update all services and create a fresh backup.

What's Changed

• fix(tunnel/web): allow non-ECDSA leaves in import-certificate by @helix-nine in fix(tunnel/web): allow non-ECDSA leaves in import-certificate #3199
• docs(contributing): drop --branch next/major from clone snippet; clarify PR target by @helix-nine in docs(contributing): drop --branch next/major from clone snippet; clarify PR target #3198
• feat(net): reverse-proxy auth gate (Bearer / Basic) with X-Forwarded-User by @helix-nine in feat(net): reverse-proxy auth gate (Bearer / Basic) with X-Forwarded-User #3190
• fix(net/acme): honor Retry-After after failed ACME orders by @helix-nine in fix(net/acme): honor Retry-After after failed ACME orders #3194
• feat(core): drive setup mode from start-cli for unattended bring-up by @helix-nine in feat(core): drive setup mode from start-cli for unattended bring-up #3196
• perf(net/vhost): skip cert resolution for TLS passthrough by @helix-nine in perf(net/vhost): skip cert resolution for TLS passthrough #3191
• refactor(core/net): expose CertBranding for downstream cert issuance by @dr-bonez in refactor(core/net): expose CertBranding for downstream cert issuance #3200
• feat(core): limited os update via diagnostic api by @dr-bonez in feat(core): limited os update via diagnostic api #3192
• fix(setup): deduplicate install-os calls via shared future by @dr-bonez in fix(setup): deduplicate install-os calls via shared future #3193
• chore: bump StartOS to 0.4.0-beta.8 and SDK to 1.3.4 by @helix-nine in chore: bump StartOS to 0.4.0-beta.8 and SDK to 1.3.4 #3201
• feat(sdk): yaml file helper accepts options for custom-tag round-trip by @MattDHill in feat(sdk): yaml file helper accepts options for custom-tag round-trip #3205
• fix(sdk): pin zod to 4.3.6 by @MattDHill in fix(sdk): pin zod to 4.3.6 #3206
• fix(ui): preserve marketplace search query when opening service drawer by @helix-nine in fix(ui): preserve marketplace search query when opening service drawer #3195
• fix(cifs): use vers=3 to support older SMB servers by @helix-nine in fix(cifs): use vers=3 to support older SMB servers #3202
• fix(net/acme): validate contact entries on init by @helix-nine in fix(net/acme): validate contact entries on init #3203
• fix(i18n): break language-change restart-banner loop by @MattDHill in fix(i18n): break language-change restart-banner loop #3204

New Contributors

• @helix-nine made their first contribution in fix(tunnel/web): allow non-ECDSA leaves in import-certificate #3199

Full Changelog: v0.4.0-beta.7...v0.4.0-beta.8

---

This discussion was created from the release v0.4.0-beta.8.

[waltzWaltz]

Installing this version has a known problem

https://community.start9.com/t/update-to-startos-0-4-0/5114/4

[MattDHill]

Correct. Flash beta.7, then update to beta.8. Or you can wait for beta.9, coming today/tomorrow