-
LOGAR Release v0.3.6.0-rc1
Pre-ReleaseCI Test Suite / Run Component Tests & Pipeline Verification (push) Failing after 4m56sRelease Binaries & Packages / Build & Release Standalone Binaries (Linux & Windows Cross-Compilation) (push) Successful in 5m40sBuild and Push LOGAR Runner / Build & Push Runner Image (push) Successful in 11m54sme0nline released this
2026-10-11 14:37:33 +00:00 | 1 commits to main since this releaseLOGAR Release Notes
[v0.3.5.2] - 2026-10-03
🚀 Fleet Hub Client Update Caching & Distribution
- Local Package Caching: The Fleet Hub automatically caches edge client binaries and packages locally on startup and upon scheduled refresh, minimizing external upstream traffic.
- Edge Pull Mechanism: Forwarder nodes retrieve validated update payloads directly from the local Fleet Hub.
🛡️ Windows Defender Firewall Automation (Fixes Issue #1)
- Automated Port Exemptions: Inno Setup (
installer_server.iss) and NSIS (installer_server.nsi) server installers automatically configure inbound Windows Defender Firewall rules for WebUI (TCP 8443) and mTLS log ingestion (TCP 9443). - Clean Uninstallation: Uninstallers automatically remove the created firewall rules cleanly upon server decommissioning.
📊 Forwarder Liveness, Silent Server Detection & System Telemetry (Fixes Issue #2)
- Silent Node & Crash Detection: Resolved the "Silent Server Down Bug" by tracking forwarder heartbeats (
last_seen). Hermes reporting (GET /api/hermes/report) automatically flags edge nodes that have gone silent for >15 minutes asCRITICALNODE_OFFLINEalerts. - Troubleshooting System Telemetry: Cross-platform system telemetry metrics (CPU utilization %, Memory load %, and Free Disk space %) are collected and attached to client heartbeats and Hermes anomaly records without external dependencies.
- Benign Service Noise Suppression: Filtered routine repetitive Windows and Linux background service lifecycle events (e.g.,
sppsvc,edgeupdate,trustedinstaller,wuauserv,backgroundTaskHost) from false-positive anomaly alert fatigue.
🔑 Dynamic Enrollment Key Rotation & WebUI Key Management
- Automatic Key Invalidation: Clicking "Download Client Config" (
GET /api/client/export-profile) automatically generates a fresh enrollment secret and invalidates previous secrets, preventing reuse of leaked keys. - WebUI Reset Shared Key: Added "🔄 Reset Shared Key" controls in the WebUI header, Fleet tab, and Export Modal, backed by
POST /api/server/reset-enrollment-secretto rotate keys and update quick-deploy command snippets on demand.
🔒 Security Hardening & Modular Architecture
- Decoupled CI & Test Execution: Clean modularization across server, client, and authority services with fully autonomous unit and integration test suites.
- API Robustness & Validation: Added cryptographic CSR validation endpoints and request sanitization.
[v0.3.5.1] - 2026-09-30
🗄️ Multi-Engine Storage Architecture
- Dynamic Backend Switching: LOGAR Server Hub supports runtime switching between lightweight Local SQLite (WAL Mode) and Enterprise SQL servers (PostgreSQL and MySQL / MariaDB) via SQLAlchemy.
- Automated Schema Provisioning: Database switching automatically verifies connectivity, provisions normalized tables (
telemetry_events,client_seats,license_config,admin_users), and generates optimized query indices. - Config Isolation: Runtime backend parameters are stored persistently in
server_config.jsonunderdb_engineand safely isolated from ephemeral test runs.
⚡ Ingestion Ring Buffer & Burst Protection
- In-Memory Queue Buffering: Built-in ring buffer with an asynchronous background flusher decoupled from mTLS socket I/O.
- Cache Mode: High-velocity log spikes are absorbed in memory without blocking incoming mTLS 1.3 frame streams.
- Configurable Batching: Configurable flush interval (
buffer_flush_interval_sec, default 2.0s) and batch size (buffer_batch_size, default 100). - Graceful Shutdown: Unflushed queue items are flushed and committed cleanly during server shutdown.
- Opt-In Security Policy: Buffering remains an explicit administrative choice and is not auto-enabled upon license activation.
🔐 Zero-Knowledge OpenPGP Data Encryption at Rest
- Public-Key Envelope Encryption: External SQL payloads (
event_data) can be encrypted at rest using the server's X.509 RSA-2048 / OpenPGP public key with AES-256-GCM symmetric session keys. - Zero-Knowledge on Database Host: External DBAs or compromised database hosts cannot read plaintext telemetry without the server's private key.
- Opt-In Security Policy: Payload encryption is strictly opt-in and configurable per compliance requirements.
📜 Dynamic Licensing Introspection & Clean Dashboard WebUI
- Modular Capability Introspection: PKI X.509 extension OID
1.3.6.1.4.1.58888.1.3and persistent license records are dynamically parsed to display active modules (enterprise_db, etc.) in a dedicated card on the 📜 Sub-CA & Licensing tab. - Distraction-Free Tab Navigation: Cleaned all dashboard tab headers to remove redundant item counts and visual badges for a streamlined administrative interface.
- Graceful Feature Locking: Unlicensed enterprise controls remain visible but gracefully disabled in the WebUI and rejected by backend API validation.
🛠️ Dynamic Installer Context Versioning & Streamlined CI/CD
- Context-Aware Installer Builds: NSIS and Inno Setup compiler scripts dynamically derive version information directly from build context/tags (
v0.3.5.1) without hardcoded version strings. - Pre-Integrated Builder Runner: Streamlined CI/CD workflows to rely directly on pre-installed container tools and libraries without runtime
apt/pipoverhead.
📖 WebUI Administrator Guide & 51 Automated Tests
- WebUI Administrator Guide: Published comprehensive WebUI management guide on the Gitea Wiki covering console access, telemetry filtering, seat management, licensing, database switching, queue tuning, zero-knowledge crypto, Hermes AI, and 2FA.
- Expanded Test Suite: 51 automated unit and integration tests passing with 100% test coverage.
Downloads
-
LOGAR Release v0.3.5.2
Pre-ReleaseCI Test Suite / Run Component Tests & Pipeline Verification (push) Successful in 4m25sRelease Binaries & Packages / Build & Release Standalone Binaries (Linux & Windows Cross-Compilation) (push) Successful in 6m13sBuild and Push LOGAR Runner / Build & Push Runner Image (push) Successful in 12m45s2026-10-03 23:06:28 +00:00 | 19 commits to main since this releaseLOGAR Release Notes
[v0.3.5.2] - 2026-10-03
🚀 Fleet Hub Client Update Caching & Distribution
- Local Package Caching: The Fleet Hub automatically caches edge client binaries and packages locally on startup and upon scheduled refresh, minimizing external upstream traffic.
- Edge Pull Mechanism: Forwarder nodes retrieve validated update payloads directly from the local Fleet Hub.
🛡️ Windows Defender Firewall Automation (Fixes Issue #1)
- Automated Port Exemptions: Inno Setup (
installer_server.iss) and NSIS (installer_server.nsi) server installers automatically configure inbound Windows Defender Firewall rules for WebUI (TCP 8443) and mTLS log ingestion (TCP 9443). - Clean Uninstallation: Uninstallers automatically remove the created firewall rules cleanly upon server decommissioning.
📊 Forwarder Liveness, Silent Server Detection & System Telemetry (Fixes Issue #2)
- Silent Node & Crash Detection: Resolved the "Silent Server Down Bug" by tracking forwarder heartbeats (
last_seen). Hermes reporting (GET /api/hermes/report) automatically flags edge nodes that have gone silent for >15 minutes asCRITICALNODE_OFFLINEalerts. - Troubleshooting System Telemetry: Cross-platform system telemetry metrics (CPU utilization %, Memory load %, and Free Disk space %) are collected and attached to client heartbeats and Hermes anomaly records without external dependencies.
- Benign Service Noise Suppression: Filtered routine repetitive Windows and Linux background service lifecycle events (e.g.,
sppsvc,edgeupdate,trustedinstaller,wuauserv,backgroundTaskHost) from false-positive anomaly alert fatigue.
🔑 Dynamic Enrollment Key Rotation & WebUI Key Management
- Automatic Key Invalidation: Clicking "Download Client Config" (
GET /api/client/export-profile) automatically generates a fresh enrollment secret and invalidates previous secrets, preventing reuse of leaked keys. - WebUI Reset Shared Key: Added "🔄 Reset Shared Key" controls in the WebUI header, Fleet tab, and Export Modal, backed by
POST /api/server/reset-enrollment-secretto rotate keys and update quick-deploy command snippets on demand.
🔒 Security Hardening & Modular Architecture
- Decoupled CI & Test Execution: Clean modularization across server, client, and authority services with fully autonomous unit and integration test suites.
- API Robustness & Validation: Added cryptographic CSR validation endpoints and request sanitization.
[v0.3.5.1] - 2026-09-30
🗄️ Multi-Engine Storage Architecture
- Dynamic Backend Switching: LOGAR Server Hub supports runtime switching between lightweight Local SQLite (WAL Mode) and Enterprise SQL servers (PostgreSQL and MySQL / MariaDB) via SQLAlchemy.
- Automated Schema Provisioning: Database switching automatically verifies connectivity, provisions normalized tables (
telemetry_events,client_seats,license_config,admin_users), and generates optimized query indices. - Config Isolation: Runtime backend parameters are stored persistently in
server_config.jsonunderdb_engineand safely isolated from ephemeral test runs.
⚡ Ingestion Ring Buffer & Burst Protection
- In-Memory Queue Buffering: Built-in ring buffer with an asynchronous background flusher decoupled from mTLS socket I/O.
- Cache Mode: High-velocity log spikes are absorbed in memory without blocking incoming mTLS 1.3 frame streams.
- Configurable Batching: Configurable flush interval (
buffer_flush_interval_sec, default 2.0s) and batch size (buffer_batch_size, default 100). - Graceful Shutdown: Unflushed queue items are flushed and committed cleanly during server shutdown.
- Opt-In Security Policy: Buffering remains an explicit administrative choice and is not auto-enabled upon license activation.
🔐 Zero-Knowledge OpenPGP Data Encryption at Rest
- Public-Key Envelope Encryption: External SQL payloads (
event_data) can be encrypted at rest using the server's X.509 RSA-2048 / OpenPGP public key with AES-256-GCM symmetric session keys. - Zero-Knowledge on Database Host: External DBAs or compromised database hosts cannot read plaintext telemetry without the server's private key.
- Opt-In Security Policy: Payload encryption is strictly opt-in and configurable per compliance requirements.
📜 Dynamic Licensing Introspection & Clean Dashboard WebUI
- Modular Capability Introspection: PKI X.509 extension OID
1.3.6.1.4.1.58888.1.3and persistent license records are dynamically parsed to display active modules (enterprise_db, etc.) in a dedicated card on the 📜 Sub-CA & Licensing tab. - Distraction-Free Tab Navigation: Cleaned all dashboard tab headers to remove redundant item counts and visual badges for a streamlined administrative interface.
- Graceful Feature Locking: Unlicensed enterprise controls remain visible but gracefully disabled in the WebUI and rejected by backend API validation.
🛠️ Dynamic Installer Context Versioning & Streamlined CI/CD
- Context-Aware Installer Builds: NSIS and Inno Setup compiler scripts dynamically derive version information directly from build context/tags (
v0.3.5.1) without hardcoded version strings. - Pre-Integrated Builder Runner: Streamlined CI/CD workflows to rely directly on pre-installed container tools and libraries without runtime
apt/pipoverhead.
📖 WebUI Administrator Guide & 51 Automated Tests
- WebUI Administrator Guide: Published comprehensive WebUI management guide on the Gitea Wiki covering console access, telemetry filtering, seat management, licensing, database switching, queue tuning, zero-knowledge crypto, Hermes AI, and 2FA.
- Expanded Test Suite: 51 automated unit and integration tests passing with 100% test coverage.
Downloads
-
LOGAR Release v0.3.5.1
Stable2026-09-30 16:37:56 +00:00 | 41 commits to main since this releaseLOGAR Release Notes
[v0.3.5.1] - 2026-09-30
🗄️ Multi-Engine Storage Architecture
- Dynamic Backend Switching: LOGAR Server Hub supports runtime switching between lightweight Local SQLite (WAL Mode) and Enterprise SQL servers (PostgreSQL and MySQL / MariaDB) via SQLAlchemy.
- Automated Schema Provisioning: Database switching automatically verifies connectivity, provisions normalized tables (
telemetry_events,client_seats,license_config,admin_users), and generates optimized query indices. - Config Isolation: Runtime backend parameters are stored persistently in
server_config.jsonunderdb_engineand safely isolated from ephemeral test runs.
⚡ Ingestion Ring Buffer & Burst Protection
- In-Memory Queue Buffering: Built-in ring buffer with an asynchronous background flusher decoupled from mTLS socket I/O.
- Cache Mode: High-velocity log spikes are absorbed in memory without blocking incoming mTLS 1.3 frame streams.
- Configurable Batching: Configurable flush interval (
buffer_flush_interval_sec, default 2.0s) and batch size (buffer_batch_size, default 100). - Graceful Shutdown: Unflushed queue items are flushed and committed cleanly during server shutdown.
- Opt-In Security Policy: Buffering remains an explicit administrative choice and is not auto-enabled upon license activation.
🔐 Zero-Knowledge OpenPGP Data Encryption at Rest
- Public-Key Envelope Encryption: External SQL payloads (
event_data) can be encrypted at rest using the server's X.509 RSA-2048 / OpenPGP public key with AES-256-GCM symmetric session keys. - Zero-Knowledge on Database Host: External DBAs or compromised database hosts cannot read plaintext telemetry without the server's private key.
- Opt-In Security Policy: Payload encryption is strictly opt-in and configurable per compliance requirements.
📜 Dynamic Licensing Introspection & Clean Dashboard WebUI
- Modular Capability Introspection: PKI X.509 extension OID
1.3.6.1.4.1.58888.1.3and persistent license records are dynamically parsed to display active modules (enterprise_db, etc.) in a dedicated card on the 📜 Sub-CA & Licensing tab. - Distraction-Free Tab Navigation: Cleaned all dashboard tab headers to remove redundant item counts and visual badges for a streamlined administrative interface.
- Graceful Feature Locking: Unlicensed enterprise controls remain visible but gracefully disabled in the WebUI and rejected by backend API validation.
🛠️ Dynamic Installer Context Versioning & Streamlined CI/CD
- Context-Aware Installer Builds: NSIS and Inno Setup compiler scripts dynamically derive version information directly from build context/tags (
v0.3.5.1) without hardcoded version strings. - Pre-Integrated Builder Runner: Streamlined CI/CD workflows to rely directly on pre-installed container tools and libraries without runtime
apt/pipoverhead.
📖 WebUI Administrator Guide & 51 Automated Tests
- WebUI Administrator Guide: Published comprehensive WebUI management guide on the Gitea Wiki covering console access, telemetry filtering, seat management, licensing, database switching, queue tuning, zero-knowledge crypto, Hermes AI, and 2FA.
- Expanded Test Suite: 51 automated unit and integration tests passing with 100% test coverage.
Downloads
-
LOGAR Release v0.3.5.0
Stable2026-09-30 15:18:04 +00:00 | 58 commits to main since this releaseLOGAR Release Notes
[v0.3.4.2] - 2026-09-30
🔒 Exclusive Hardware Host-Binding & Reassignment Controls
- Automated Host Binding on First Activation: Licenses now automatically lock to the specific server hardware fingerprint (
server_fingerprint) and hostname upon first activation/enrollment, preventing multi-host cloning or license hijacking. - Manual Host Reassignment Control: Added
🔓 Reset Host Bindingbutton to the Master License Authority dashboard (licenseDetailsModal), allowing administrators to unbind a license so it can be cleanly transferred or reassigned to a new server instance. - REST & CLI Management: Added
POST /api/license/reset-bindingand CLI argument--reset-binding LIC_IDfor automated provisioning pipelines.
[v0.3.4.1] - 2026-09-27
🎨 Installer Dialog UI Spacing & Branding Enhancements
- NSIS Client Config Profile Dialog Fix: Adjusted vertical coordinates and label boundaries in the Windows Client NSIS installer (
installer_client.nsi) to prevent input field overlap and ensure multi-line instructional text renders without visual clipping. - Installer Footer Branding Clean-Up: Escaped ampersands in Windows installer branding labels (
BrandingText) to avoid character truncation in native win32 footer panels. - License Authority UI Clean-Up: Simplified table ACTIONS column in the Licensing Authority portal to exclusively display
⚙️ Manage, keeping secondary actions (Reinstate,Delete) inside the dedicated management modal.
[v0.3.4] - 2026-09-27
🔄 In-Place Installer Upgrades & Mutual Exclusion Guards
- Seamless In-Place Upgrades: Windows (Inno Setup & NSIS) and Linux installers now detect existing installations automatically. In upgrade mode, installers stop background services, update core binaries and runtime in-place, and restart services without overwriting configuration files (
server_config.json,client_config.json), database state (logar_state.db), state tracking (client_state.json), or mTLS certificates. - Host Mutual Exclusion Validation: Added pre-installation validation across all installers to prevent accidental co-installation of LOGAR Server and LOGAR Client on the same host, showing descriptive guidance to administrators.
🛡️ WebUI 2FA & Telemetry Stability
- Server Hub TOTP Two-Factor Authentication: Implemented RFC 6238 TOTP 2FA for the LOGAR Server Hub web portal (
:8443), featuring interactive QR code setup, secret generation, and secure session validation. - Telemetry Stream UI Buffer Capping: Limited the live verified telemetry stream view to the latest 50 events in the Server Hub dashboard for enhanced browser performance and UI stability.
🔑 Licensing Authority Management & Registry Tooling
- Revocation, Reinstatement & License Deletion: Enhanced the Master Licensing Authority (
logar.eibl.tech) with instant license revocation, reinstatement of revoked licenses, and conditional permanent deletion of revoked records. - Interactive Capability Explorer: Added interactive implementation breakdown modals across core capabilities on the public project landing page.
- Automated Gitea Container Pruning: Added
prune_images.pyutility to maintain clean container registries by keeping only the latest active image versions.
[v0.3.3] - 2026-09-27
🎨 Brand Identity, Centralized Asset Library & Design System
- Centralized
/assetsRepository: Added official vector graphics (logo.svg,logo_transparent.svg,logo_dark.svg,logo_banner.svg), high-resolution master PNGs (16px to 512px), multi-resolution Windows ICOs (logo.ico,favicon.ico), and installer dialog bitmaps (wizard_header.bmp,wizard_small.bmp,wizard_sidebar.bmp). - Official Wiki Branding Guide: Published comprehensive visual identity standards on the Gitea Wiki at
https://gitea.eibl.tech/me0nline/LOGAR/wiki/Branding-Guidedetailing logo anatomy, color palettes (Cyber Cyan#00E5FF, Emerald#00FFA3, Dark Navy#0E1A2E), typography, clear-space rules, dos and don'ts, and strict non-SIEM positioning. - Unified Interface & Tab Branding: Implemented transparent vector logos on all web navigation bars and browser tabs across both the LOGAR Server Hub (
:8443) and Master Licensing Authority (logar.eibl.tech). - Clean Installer Bitmaps: Regenerated 24-bit RGB header bitmaps with seamless white backgrounds (
#FFFFFF) matching native Windows Inno Setup wizard dialogs. - Automated Asset Pipeline: Enhanced
compilation/generate_branding_assets.pyto deterministically compile and distribute assets across main repo, compilation subdirectories, and the licensing submodule without third-party graphics dependencies.
[v0.3.2] - 2026-09-27
🪟 Windows Installer & Web Portal Enhancements
- Project Showcase Landing Page: Deployed high-impact public homepage at
GET /on the licensing authority with architecture diagrams, quickstart commands, and direct navigation to Gitea, Wiki, and the Licensing Portal (/licensing). - Standalone Windows Binaries & Python Runtime: Resolved issues with standalone Windows executable execution and bundled runtime paths.
- Data Directory Selection & Permissions: Added custom data directory selection during setup and fixed permissions for background Windows services.
- Service Lifecycle & Clean Uninstallation: Resolved service startup issues and ensured complete cleanup of state files upon uninstallation.
Downloads
- Automated Host Binding on First Activation: Licenses now automatically lock to the specific server hardware fingerprint (
-
LOGAR Release v0.3.4.2
Stable2026-09-30 13:40:31 +00:00 | 65 commits to main since this releaseLOGAR Release Notes
[v0.3.4.2] - 2026-09-30
🔒 Exclusive Hardware Host-Binding & Reassignment Controls
- Automated Host Binding on First Activation: Licenses now automatically lock to the specific server hardware fingerprint (
server_fingerprint) and hostname upon first activation/enrollment, preventing multi-host cloning or license hijacking. - Manual Host Reassignment Control: Added
🔓 Reset Host Bindingbutton to the Master License Authority dashboard (licenseDetailsModal), allowing administrators to unbind a license so it can be cleanly transferred or reassigned to a new server instance. - REST & CLI Management: Added
POST /api/license/reset-bindingand CLI argument--reset-binding LIC_IDfor automated provisioning pipelines.
[v0.3.4.1] - 2026-09-27
🎨 Installer Dialog UI Spacing & Branding Enhancements
- NSIS Client Config Profile Dialog Fix: Adjusted vertical coordinates and label boundaries in the Windows Client NSIS installer (
installer_client.nsi) to prevent input field overlap and ensure multi-line instructional text renders without visual clipping. - Installer Footer Branding Clean-Up: Escaped ampersands in Windows installer branding labels (
BrandingText) to avoid character truncation in native win32 footer panels. - License Authority UI Clean-Up: Simplified table ACTIONS column in the Licensing Authority portal to exclusively display
⚙️ Manage, keeping secondary actions (Reinstate,Delete) inside the dedicated management modal.
[v0.3.4] - 2026-09-27
🔄 In-Place Installer Upgrades & Mutual Exclusion Guards
- Seamless In-Place Upgrades: Windows (Inno Setup & NSIS) and Linux installers now detect existing installations automatically. In upgrade mode, installers stop background services, update core binaries and runtime in-place, and restart services without overwriting configuration files (
server_config.json,client_config.json), database state (logar_state.db), state tracking (client_state.json), or mTLS certificates. - Host Mutual Exclusion Validation: Added pre-installation validation across all installers to prevent accidental co-installation of LOGAR Server and LOGAR Client on the same host, showing descriptive guidance to administrators.
🛡️ WebUI 2FA & Telemetry Stability
- Server Hub TOTP Two-Factor Authentication: Implemented RFC 6238 TOTP 2FA for the LOGAR Server Hub web portal (
:8443), featuring interactive QR code setup, secret generation, and secure session validation. - Telemetry Stream UI Buffer Capping: Limited the live verified telemetry stream view to the latest 50 events in the Server Hub dashboard for enhanced browser performance and UI stability.
🔑 Licensing Authority Management & Registry Tooling
- Revocation, Reinstatement & License Deletion: Enhanced the Master Licensing Authority (
logar.eibl.tech) with instant license revocation, reinstatement of revoked licenses, and conditional permanent deletion of revoked records. - Interactive Capability Explorer: Added interactive implementation breakdown modals across core capabilities on the public project landing page.
- Automated Gitea Container Pruning: Added
prune_images.pyutility to maintain clean container registries by keeping only the latest active image versions.
[v0.3.3] - 2026-09-27
🎨 Brand Identity, Centralized Asset Library & Design System
- Centralized
/assetsRepository: Added official vector graphics (logo.svg,logo_transparent.svg,logo_dark.svg,logo_banner.svg), high-resolution master PNGs (16px to 512px), multi-resolution Windows ICOs (logo.ico,favicon.ico), and installer dialog bitmaps (wizard_header.bmp,wizard_small.bmp,wizard_sidebar.bmp). - Official Wiki Branding Guide: Published comprehensive visual identity standards on the Gitea Wiki at
https://gitea.eibl.tech/me0nline/LOGAR/wiki/Branding-Guidedetailing logo anatomy, color palettes (Cyber Cyan#00E5FF, Emerald#00FFA3, Dark Navy#0E1A2E), typography, clear-space rules, dos and don'ts, and strict non-SIEM positioning. - Unified Interface & Tab Branding: Implemented transparent vector logos on all web navigation bars and browser tabs across both the LOGAR Server Hub (
:8443) and Master Licensing Authority (logar.eibl.tech). - Clean Installer Bitmaps: Regenerated 24-bit RGB header bitmaps with seamless white backgrounds (
#FFFFFF) matching native Windows Inno Setup wizard dialogs. - Automated Asset Pipeline: Enhanced
compilation/generate_branding_assets.pyto deterministically compile and distribute assets across main repo, compilation subdirectories, and the licensing submodule without third-party graphics dependencies.
[v0.3.2] - 2026-09-27
🪟 Windows Installer & Web Portal Enhancements
- Project Showcase Landing Page: Deployed high-impact public homepage at
GET /on the licensing authority with architecture diagrams, quickstart commands, and direct navigation to Gitea, Wiki, and the Licensing Portal (/licensing). - Standalone Windows Binaries & Python Runtime: Resolved issues with standalone Windows executable execution and bundled runtime paths.
- Data Directory Selection & Permissions: Added custom data directory selection during setup and fixed permissions for background Windows services.
- Service Lifecycle & Clean Uninstallation: Resolved service startup issues and ensured complete cleanup of state files upon uninstallation.
Downloads
- Automated Host Binding on First Activation: Licenses now automatically lock to the specific server hardware fingerprint (
-
LOGAR Release v0.3.4.1
Stable2026-09-27 17:30:56 +00:00 | 67 commits to main since this releaseLOGAR Release Notes
[v0.3.4.1] - 2026-09-27
🎨 Installer Dialog UI Spacing & Branding Enhancements
- NSIS Client Config Profile Dialog Fix: Adjusted vertical coordinates and label boundaries in the Windows Client NSIS installer (
installer_client.nsi) to prevent input field overlap and ensure multi-line instructional text renders without visual clipping. - Installer Footer Branding Clean-Up: Escaped ampersands in Windows installer branding labels (
BrandingText) to avoid character truncation in native win32 footer panels. - License Authority UI Clean-Up: Simplified table ACTIONS column in the Licensing Authority portal to exclusively display
⚙️ Manage, keeping secondary actions (Reinstate,Delete) inside the dedicated management modal.
[v0.3.4] - 2026-09-27
🔄 In-Place Installer Upgrades & Mutual Exclusion Guards
- Seamless In-Place Upgrades: Windows (Inno Setup & NSIS) and Linux installers now detect existing installations automatically. In upgrade mode, installers stop background services, update core binaries and runtime in-place, and restart services without overwriting configuration files (
server_config.json,client_config.json), database state (logar_state.db), state tracking (client_state.json), or mTLS certificates. - Host Mutual Exclusion Validation: Added pre-installation validation across all installers to prevent accidental co-installation of LOGAR Server and LOGAR Client on the same host, showing descriptive guidance to administrators.
🛡️ WebUI 2FA & Telemetry Stability
- Server Hub TOTP Two-Factor Authentication: Implemented RFC 6238 TOTP 2FA for the LOGAR Server Hub web portal (
:8443), featuring interactive QR code setup, secret generation, and secure session validation. - Telemetry Stream UI Buffer Capping: Limited the live verified telemetry stream view to the latest 50 events in the Server Hub dashboard for enhanced browser performance and UI stability.
🔑 Licensing Authority Management & Registry Tooling
- Revocation, Reinstatement & License Deletion: Enhanced the Master Licensing Authority (
logar.eibl.tech) with instant license revocation, reinstatement of revoked licenses, and conditional permanent deletion of revoked records. - Interactive Capability Explorer: Added interactive implementation breakdown modals across core capabilities on the public project landing page.
- Automated Gitea Container Pruning: Added
prune_images.pyutility to maintain clean container registries by keeping only the latest active image versions.
[v0.3.3] - 2026-09-27
🎨 Brand Identity, Centralized Asset Library & Design System
- Centralized
/assetsRepository: Added official vector graphics (logo.svg,logo_transparent.svg,logo_dark.svg,logo_banner.svg), high-resolution master PNGs (16px to 512px), multi-resolution Windows ICOs (logo.ico,favicon.ico), and installer dialog bitmaps (wizard_header.bmp,wizard_small.bmp,wizard_sidebar.bmp). - Official Wiki Branding Guide: Published comprehensive visual identity standards on the Gitea Wiki at
https://gitea.eibl.tech/me0nline/LOGAR/wiki/Branding-Guidedetailing logo anatomy, color palettes (Cyber Cyan#00E5FF, Emerald#00FFA3, Dark Navy#0E1A2E), typography, clear-space rules, dos and don'ts, and strict non-SIEM positioning. - Unified Interface & Tab Branding: Implemented transparent vector logos on all web navigation bars and browser tabs across both the LOGAR Server Hub (
:8443) and Master Licensing Authority (logar.eibl.tech). - Clean Installer Bitmaps: Regenerated 24-bit RGB header bitmaps with seamless white backgrounds (
#FFFFFF) matching native Windows Inno Setup wizard dialogs. - Automated Asset Pipeline: Enhanced
compilation/generate_branding_assets.pyto deterministically compile and distribute assets across main repo, compilation subdirectories, and the licensing submodule without third-party graphics dependencies.
[v0.3.2] - 2026-09-27
🪟 Windows Installer & Web Portal Enhancements
- Project Showcase Landing Page: Deployed high-impact public homepage at
GET /on the licensing authority with architecture diagrams, quickstart commands, and direct navigation to Gitea, Wiki, and the Licensing Portal (/licensing). - Standalone Windows Binaries & Python Runtime: Resolved issues with standalone Windows executable execution and bundled runtime paths.
- Data Directory Selection & Permissions: Added custom data directory selection during setup and fixed permissions for background Windows services.
- Service Lifecycle & Clean Uninstallation: Resolved service startup issues and ensured complete cleanup of state files upon uninstallation.
Downloads
- NSIS Client Config Profile Dialog Fix: Adjusted vertical coordinates and label boundaries in the Windows Client NSIS installer (
-
LOGAR Release v0.3.4
Pre-Release2026-09-27 17:13:25 +00:00 | 69 commits to main since this releaseLOGAR Release Notes
[v0.3.4] - 2026-09-27
🔄 In-Place Installer Upgrades & Mutual Exclusion Guards
- Seamless In-Place Upgrades: Windows (Inno Setup & NSIS) and Linux installers now detect existing installations automatically. In upgrade mode, installers stop background services, update core binaries and runtime in-place, and restart services without overwriting configuration files (
server_config.json,client_config.json), database state (logar_state.db), state tracking (client_state.json), or mTLS certificates. - Host Mutual Exclusion Validation: Added pre-installation validation across all installers to prevent accidental co-installation of LOGAR Server and LOGAR Client on the same host, showing descriptive guidance to administrators.
🛡️ WebUI 2FA & Telemetry Stability
- Server Hub TOTP Two-Factor Authentication: Implemented RFC 6238 TOTP 2FA for the LOGAR Server Hub web portal (
:8443), featuring interactive QR code setup, secret generation, and secure session validation. - Telemetry Stream UI Buffer Capping: Limited the live verified telemetry stream view to the latest 50 events in the Server Hub dashboard for enhanced browser performance and UI stability.
🔑 Licensing Authority Management & Registry Tooling
- Revocation, Reinstatement & License Deletion: Enhanced the Master Licensing Authority (
logar.eibl.tech) with instant license revocation, reinstatement of revoked licenses, and conditional permanent deletion of revoked records. - Interactive Capability Explorer: Added interactive implementation breakdown modals across core capabilities on the public project landing page.
- Automated Gitea Container Pruning: Added
prune_images.pyutility to maintain clean container registries by keeping only the latest active image versions.
[v0.3.3] - 2026-09-27
🎨 Brand Identity, Centralized Asset Library & Design System
- Centralized
/assetsRepository: Added official vector graphics (logo.svg,logo_transparent.svg,logo_dark.svg,logo_banner.svg), high-resolution master PNGs (16px to 512px), multi-resolution Windows ICOs (logo.ico,favicon.ico), and installer dialog bitmaps (wizard_header.bmp,wizard_small.bmp,wizard_sidebar.bmp). - Official Wiki Branding Guide: Published comprehensive visual identity standards on the Gitea Wiki at
https://gitea.eibl.tech/me0nline/LOGAR/wiki/Branding-Guidedetailing logo anatomy, color palettes (Cyber Cyan#00E5FF, Emerald#00FFA3, Dark Navy#0E1A2E), typography, clear-space rules, dos and don'ts, and strict non-SIEM positioning. - Unified Interface & Tab Branding: Implemented transparent vector logos on all web navigation bars and browser tabs across both the LOGAR Server Hub (
:8443) and Master Licensing Authority (logar.eibl.tech). - Clean Installer Bitmaps: Regenerated 24-bit RGB header bitmaps with seamless white backgrounds (
#FFFFFF) matching native Windows Inno Setup wizard dialogs. - Automated Asset Pipeline: Enhanced
compilation/generate_branding_assets.pyto deterministically compile and distribute assets across main repo, compilation subdirectories, and the licensing submodule without third-party graphics dependencies.
[v0.3.2] - 2026-09-27
🪟 Windows Installer & Web Portal Enhancements
- Project Showcase Landing Page: Deployed high-impact public homepage at
GET /on the licensing authority with architecture diagrams, quickstart commands, and direct navigation to Gitea, Wiki, and the Licensing Portal (/licensing). - Standalone Windows Binaries & Python Runtime: Resolved issues with standalone Windows executable execution and bundled runtime paths.
- Data Directory Selection & Permissions: Added custom data directory selection during setup and fixed permissions for background Windows services.
- Service Lifecycle & Clean Uninstallation: Resolved service startup issues and ensured complete cleanup of state files upon uninstallation.
Downloads
- Seamless In-Place Upgrades: Windows (Inno Setup & NSIS) and Linux installers now detect existing installations automatically. In upgrade mode, installers stop background services, update core binaries and runtime in-place, and restart services without overwriting configuration files (
-
LOGAR Release v0.3.3
Stable2026-09-27 16:04:11 +00:00 | 76 commits to main since this releaseLOGAR Release Notes
[v0.3.3] - 2026-09-27
🎨 Brand Identity, Centralized Asset Library & Design System
- Centralized
/assetsRepository: Added official vector graphics (logo.svg,logo_transparent.svg,logo_dark.svg,logo_banner.svg), high-resolution master PNGs (16px to 512px), multi-resolution Windows ICOs (logo.ico,favicon.ico), and installer dialog bitmaps (wizard_header.bmp,wizard_small.bmp,wizard_sidebar.bmp). - Official Wiki Branding Guide: Published comprehensive visual identity standards on the Gitea Wiki at
https://gitea.eibl.tech/me0nline/LOGAR/wiki/Branding-Guidedetailing logo anatomy, color palettes (Cyber Cyan#00E5FF, Emerald#00FFA3, Dark Navy#0E1A2E), typography, clear-space rules, dos and don'ts, and strict non-SIEM positioning. - Unified Interface & Tab Branding: Implemented transparent vector logos on all web navigation bars and browser tabs across both the LOGAR Server Hub (
:8443) and Master Licensing Authority (logar.eibl.tech). - Clean Installer Bitmaps: Regenerated 24-bit RGB header bitmaps with seamless white backgrounds (
#FFFFFF) matching native Windows Inno Setup wizard dialogs. - Automated Asset Pipeline: Enhanced
compilation/generate_branding_assets.pyto deterministically compile and distribute assets across main repo, compilation subdirectories, and the licensing submodule without third-party graphics dependencies.
[v0.3.2] - 2026-09-27
🪟 Windows Installer & Web Portal Enhancements
- Project Showcase Landing Page: Deployed high-impact public homepage at
GET /on the licensing authority with architecture diagrams, quickstart commands, and direct navigation to Gitea, Wiki, and the Licensing Portal (/licensing). - Standalone Windows Binaries & Python Runtime: Resolved issues with standalone Windows executable execution and bundled runtime paths.
- Data Directory Selection & Permissions: Added custom data directory selection during setup and fixed permissions for background Windows services.
- Service Lifecycle & Clean Uninstallation: Resolved service startup issues and ensured complete cleanup of state files upon uninstallation.
Downloads
- Centralized
-
LOGAR Release v0.3.2
Stable2026-09-27 15:10:29 +00:00 | 89 commits to main since this releaseLOGAR Release v0.3.2
🪟 Windows Installer Fixes
- Standalone Windows Binaries & Python Runtime: Resolved issues with standalone Windows executable execution and bundled runtime paths.
- Data Directory Selection & Permissions: Added custom data directory selection during setup and fixed permissions for background Windows services.
- Service Lifecycle & Clean Uninstallation: Resolved service startup issues and ensured complete cleanup of state files upon uninstallation.
Downloads
-
LOGAR Release v0.3.1
Stable2026-09-26 18:50:57 +00:00 | 103 commits to main since this releaseLOGAR Release v0.3.1
🛡️ Security Fixes & Defensive Hardening
- Mandatory Admin Authentication: Enforced strict administrator authentication across all fleet management endpoints (
/api/clients,/api/clients/approve,/api/clients/revoke,/api/clients/delete,/api/client/export-profile) and license management APIs. - Brute-Force Mitigation & Rate Limiting: Implemented thread-safe sliding-window IP rate limiting on
/login(10 attempts/min) and/api/client/enroll(15 attempts/min) with progressive delays andHTTP 429throttling. - Cookie Security Flags: Session cookies now enforce
HttpOnly=True,SameSite="Lax", and dynamicSecure=Truefor HTTPS connections and reverse-proxy deployments (X-Forwarded-Proto). - Cryptographic Random Secrets: Server Hub and License Authority session secrets are now generated with 256-bit CSPRNG (
secrets.token_hex(32)) on initialization. - License Renewal Validation: Hardened
/api/license/renewwith explicit PEM structure and database validation, preventing unhandled exceptions.
⚡ Operational Improvements & Modernization
- FastAPI Lifespan Handlers: Migrated legacy startup events to modern ASGI lifespan context managers.
- OpenPGP Compression Preferences: Aligned Server public key compression algorithms (
ZIP,ZLIB,BZ2,Uncompressed) with client preferences. - Cross-Platform Compilation: Unified automated packaging for standalone Windows and Linux binaries.
Downloads
- Mandatory Admin Authentication: Enforced strict administrator authentication across all fleet management endpoints (