Headline · OpenStack guest support

Nova manages JefeOS as an ordinary instance

  • Proven lifecycle. Upload the ISO through Glance, launch it with Nova, and inspect state and console output through normal OpenStack and Horizon workflows.
  • Native config-drive support. The bounded read-only ISO 9660 reader consumes the config-2 volume, including nested paths and ISO filename version suffixes.
  • Cloud identity at boot. Nova metadata applies the instance hostname and authorized SSH keys before the shell prompt; network metadata is discovered and parsed.
  • Compatible storage and networking. ATAPI READ CAPACITY(10)/READ(10) lets the boot ISO and metadata CD-ROM coexist, while E1000 polling brings DHCP and SSH up without an IRQ flood.
  • Repeatable proof. The OpenStack smoke uploads a private image, creates a config-drive-backed server, checks metadata/DHCP/boot markers, rejects fatal output, and cleans up its disposable resources.

Security and fault containment

  • SMAP is enabled with CPUID gating and audited stac/clac windows, complementing SMEP.
  • Native and Linux-ABI user-pointer paths fail with -EFAULT instead of exposing kernel memory or panicking on hostile addresses.
  • Reentry guards, ownership checks, and abnormal-death cleanup were tightened across sockets, capture sinks, pipes, shared memory, IPC, and task address spaces.
  • HTTP metadata and other diagnostics fail closed when backing attributes cannot be read.

Filesystem, network, runtime and test reliability

  • JefeRust's NTFS writer advanced through large-directory growth/collapse, resident promotion, repair paths, crafted-volume bounds checks, and a shared-VHD cross-kernel rig.
  • TCP/UDP recovery gained connect-slot caps and reserves, keepalive, real select timeouts, abandoned-SYN cleanup, and abnormal-task cleanup.
  • SSH command execution recovers when a client disconnects mid-program, with shell/SSH dispatch kept in parity.
  • Empty or artifact-missing smoke runs no longer report success; ISO packaging, VM refresh, Linux-compat manifests, security checks, and OpenStack validation now fail closed.
⚑ Honest framing

What 1.1.1 does not claim

  • This is a progress point release, not 1.2. The complete 1.2 evidence, independent-build, QEMU, security-queue and cross-vessel failover gates remain.
  • Use BIOS + IDE + E1000 image properties. Native virtio-net and virtio-blk remain roadmap work.
  • Networking is DHCP in the proven path. JefeOS recognizes Nova network metadata but does not claim arbitrary static network_data.json application.
  • Guest support is not controller support. This proves OpenStack managing JefeOS, not JefeOS acting as an OpenStack REST client or controller.
  • SMP remains off by default, full Alpine/OpenRC login remains unfinished, and JefeRust still has higher-tier parity gaps.

Getting JefeOS 1.1.1

The soaked release ISO is 7,401,472 bytes. Boot it in QEMU, Hyper-V Gen 1, VirtualBox, or upload it to Glance with the compatibility profile above.

⬇  Download jefeos-1.1.1.iso (7.1 MB · ISO)

SHA-256 398952b50a4beefc3055ac719f30e3c131b61cf974f2c36408dc4ed11b82f6c1 — verify with sha256sum jefeos-1.1.1.iso or download the checksum file.