Dnevnik promjena

Objavljeno 15. jula 2026

• +Dodaje keš memoriju, proxy i metapodatke za analizu odgovora zasnovanih na standardima
• +Dokazuje autentičnost ponovnog učitavanja snimka uživo, vraćanja, provjere integriteta i postojanost ponovnog pokretanja
• +Dodaje ponovljive dokaze za FIPS pozadinske sisteme i opsežno ojačavanje izvornog izvršnog okruženja

Objavljeno 14. jula 2026

• +Dodaje vremenski ograničeno uredno dovršavanje postojećih veza i primopredaju bez prekida rada nakon potvrde spremnosti
• +Dodaje strogu aktivaciju systemd soketa s preciznom provjerom naslijeđenih soketa za prihvat veza
• +Završava sigurnosno ojačavanje HTTP/1 parsera i poboljšava upravljanje životnim ciklusom pozadinskih servisa

Objavljeno 13. jula 2026

• +Dodaje opcione HTTP profile sigurnosti odgovora i validirane CORS-ove koji su svjesni zahtjeva
• +Stabilizira izvodljive primjere Wasm politike i testove koje zahtijeva izlazna kapija
• +Jača proslijeđena zaglavlja identiteta, raščlanjivanje zaglavlja i smjernice za ponovni pokušaj za ograničenja kapaciteta

Objavljeno 12. jula 2026

• +Dodaje izvodljive primjere migracije za iRules, OpenResty, HAProxy/SPOE i poslove politike u stilu VCL
• +dodaje ograničeni ACME transport, ARI zakazivanje, dijagnostiku životnog ciklusa i eksplicitno prihvatanje uslova
• +Učvršćuje povratne transakcije ACME naloga i certifikata, granice skladištenja i objavljivanje snimaka

Objavljeno 11. jula 2026.

• +Pokreće opt-in WASI Preview 1 granicu sa eksplicitnim dozvolama za sat i nasumičnost te zabrana-importova po zadanim postavkama.
• +Vraća pouzdani GeoIP klijent i podržava CIRCL kombinovane baze podataka za Zemlju i ASN.
• +Učvrsti stream SSRF i kopiranje, autentifikovane snimke, TLS, PHP-FPM, statičko slanje i granice Wasm resursa.

Objavljeno 10. jula 2026.

• +Dodaje opcionalni pregled Proxy-Wasm ABI-ja s izričitom provjerom prostora imena poziva hosta
• +Deterministički odbija nepodržane pozive pregleda prije nego što stignu do upstreama
• +Učvršćuje strogo usmjeravanje hosta, ograničeni prihvat, pouzdanost konfiguracije, cache pohranu, GeoIP i kompresiju

Objavljeno 9. jula 2026.

• +Dodaje eksplicitne identitete kompajliranih WebAssembly module kroz plugin digest, ABI, hook feature surface i verziju Fluxheim
• +Dodaje cache-hook admission budgets po vhostu ispod process-wide cache-hook ceiling
• +Proširuje ograničene Wasm metrics, vidljivost admin statusa i cross-family live-chain regression pokrivenost

Objavljeno 8. jula 2026.

• +Dodaje ograničene host calls za komponente cache-key za varijante klase uređaja mobile i desktop
• +Dodaje fiksni cache-store TTL, tag i stored-header metadata bez proizvoljne mutacije response-header
• +Dodaje live listener pokrivenost za izolaciju varijanti, range-cache slices, istek TTL-a i fail-closed ograničenja metadata

Objavljeno 7. jula 2026.

• +Dodaje live native HTTP/1 cache-lookup i cache-store Wasm hooks pod ograničenim fluxheim_policy_v1 preview ABI-jem
• +Dodaje cache ishode za continue, pass, bypass, skip-store i deny bez izlaganja raw cache keys, TTLs, tags ili stored metadata
• +Razdvaja admission limite za cache hooks i zadržava cache-store agregaciju po principu most-restrictive-wins

Objavljeno 6. jula 2026.

• +Dodaje žive native HTTP/1 route-decision Wasm hookove pod ograničenim fluxheim_policy_v1 preview ABI-jem
• +Dodaje simbolički odabir konfigurisanih grana za canary i mirror rute bez dinamičkog upstream ili shadow-target pristupa
• +Zadržava provedbu Fluxheim ACL-ova, rate limita, concurrency limita, body limita, redirecta i header-policyja nakon odabira rute

Objavljeno 5. jula 2026.

• +Dodaje žive native HTTP/1 Wasm hookove za request-header i response-header za vhost i route priključke
• +Zadržava header-hook ABI simboličnim s dozvoljenim sintetičkim mutacijama umjesto sirovog pristupa headerima ili bodyju
• +Primjenjuje vhost-level Wasm header-hookove i fallback response header policy na PHP-FPM fallback odgovore

Objavljeno 4. jula 2026.

• +Povezuje live native HTTP/1 access-decision hookove s prioritetnim redoslijedom, first-deny-wins sastavljanjem i fail-closed ponašanjem
• +Provodi limite prijema izvršavanja na nivou procesa, plugina i attachmenta

Objavljeno 3. jula 2026.

• +Dodaje opcioni workspace crate fluxheim-wasm za Wasm sandbox liniju
• +feature gateovi wasm, wasm-proxy-abi i wasm-wasi zadano su isključeni i nisu kompatibilni s privacy-modeom
• +Učitava Wasm plugin datoteke samo iz odobrenih apsolutnih rootova; symlinkovi, neregularne datoteke i preveliki moduli se odbijaju
• +Tipizirani Wasm manifesti dodataka validiraju ABI, fazu, fail-mode, putanju i sandbox ograničenja prije učitavanja
• +Dodaje ograničeno Wasmtime izvršavanje s limitima za fuel, memory, table, instance, compile-timeout, compile-worker i per-call watchdog
• +Dodaje stvarnu Wasm sandbox smoke pokrivenost za uspješno izvršavanje, traps, odbijanje table-growth i odbijanje nesigurnog fail-open manifesta

Objavljeno 30. juna 2026

• +Preimenuje privremeni sloj kompatibilnosti izvornog proxyja u native_proxy i uklanja stari ponovni izvoz kompatibilnosti proxyja iz uobičajenih buildova
• +Premješta DTO-e zahtjeva i rezultata administracije load balancera u crate fluxheim-load-balancer
• +Briše neaktivne korijenske adaptere iz doba Pingore i zastarjeli onemogućeni runtime i testni kod koji uobičajeni buildovi više ne koriste
• +Objedinjuje pohranu konfiguracije izvornog proxyja kako bi ponovno učitavanje osvježilo isti snapshot koji koriste administracijske putanje cachea i load balancera
• +Dodaje izvorne regresijske testove prekoračenja HTTP/1 chunked tijela i veže observability smoke slike uz determinističke oznake

Objavljeno 30. juna 2026

• +Zadržava normalan runtime na stazama Fluxheim-owned listener, TLS, HTTP/1, HTTP/2, WebSocket, cache, load-balancer, admin, metrics, stream i background service
• +Pomiče auth, metrics, OpenBao cache, discovery, load-balancer kolačić i TLS private-key secret buffers prema sanitization crate
• +Učvršćuje PHP-FPM/static rezervno rutiranje, izvorno disk-cache zaključavanje čišćenja, same-key disk-cache mutaciju serijalizaciju i izvorno HTTP/2 upstream authority rukovanje
• +Dodaje podršku za peer-fill shared-secret i zahtijeva je za non-loopback otvoreni tekst peer-fill URLs
• +Proširuje pokrivenost testova privacy, observability, WordPress, load-balancer, smoke-image, randomized-port i release-gate za liniju stabilization

Objavljeno 29. juna 2026.

• +Uklanja konačni Pingora runtime/listener/TLS adapter crates od normalnog Fluxheim build profiles
• +Zadržava izvorni HTTP/1 i HTTP/2 proxy runtime kao normalnu putanju za podržane route, cache, load-balancer, TLS, WebSocket, admin i metrics konfiguracije
• +Povezuje izvorno admin cache čišćenje, stale disk-cache čišćenje, cache traženje objekata i žive load-balancer statistike/mutacije rukovaoce na Fluxheim-owned runtime ručke
• +Ažuriranja dependency-policy oslobađaju kapije tako da normalne zadane, pune, rubne, PHP, privatnosti, RPM, izvorne i kontejnerske gradnje ne uspijevaju ako kompajliraju Pingora crates
• +Učvršćuje izvorne admin cache preglede i čistke uz normalizirano podudaranje hosta, regex-route preglede, izbjegavanje zaključavanja stale čišćenja, stanje konfiguracije fail-closed uživo i ukucane kontekste izgradnje route-proxy

Objavljeno 29. juna 2026.

• +Dodaje izvorni proxy-cache paritet za memoriju, disk sistem datoteka, storage-bin, šifrirani disk, OpenBao Transit i memory+disk nivoe
• +Podržava varijante Vary i request-header, zastarjelo posluživanje, zaključavanja keša, keš isječaka raspona, peer-fill i budžete za zaštitu porijekla
• +Učvršćuje pristup keš memoriji za Authorization, HEAD bypass, upstream Age skidanje, provjerenu aritmetiku isteka i only-if-cached promašaja
• +Dodaje izvorni paritet čišćenja predmemorije za indekse memorije i diska plus točna, bulk, prefiks, oznaka, zamjenski znak, route-scope i zastarjela čišćenja
• +Dodaje mogućnost promatranja izvorne keš memorije za proxy brojače, mjerenje memorije/diska, histograme pretraživanja u keš memoriji i regenerirane traceparent ID-ove raspona

Objavljeno 28. juna 2026.

• +Adds native runtime dispatch for proxy, admin, metrics, stream, UDP, and load-balancer refresh tasks
• +Adds metrics token-file loading with zeroizing storage and constant-time bearer-token checks
• +Adds native HTTP/1 proxy runtime startup for plaintext, rustls, OpenSSL, and trusted downstream PROXY protocol listeners
• +Usmjerava odabrane downstream HTTP/2 TLS veze u nativni multi-stream adapter
• +Ojačava nativne WebSocket nadogradnje, HTTP/2 stream-local greške, rate-limit sharding i zeroizing pohranu tijela zahtjeva

Objavljeno 24. juna 2026.

• +Moves cache request policy and local-static cache keys into the Pingora-independent fluxheim-cache crate
• +Moves PHP-FPM parsing, params, path mapping, static offload, error-page policy, and keep-alive pooling into fluxheim-php-fpm
• +Adds native memory local-static cache adapters for route and vhost static-web serving
• +Adds native upstream PROXY protocol v1/v2 send support and native Host router construction
• +Adds native runtime manifest and launch-plan evidence for services, listeners, background tasks, and policy rows

Objavljeno 23. lipnja 2026.

• +Premješta plaintext upstream HTTP/2 forwarding u native HTTP/1 proxy path za h2c/prior-knowledge origin
• +Dodaje pooled native upstream H2 connections s bounded stream capacity i safe-method retry nakon pre-response pooled-handle failure
• +Podržava TLS ALPN-negotiated upstream HTTP/2 s postojećom upstream TLS/SNI/CA policy
• +Dodaje eksplicitni, po defaultu isključeni h2c Upgrade fallback za plaintext http1-and-http2 origin
• +Ograničava native upstream H2 handshakes, stream-slot waits, keepalive pings i setup timeouts

Objavljeno 23. lipnja 2026.

• +Premješta inherited global/vhost compression policy u native HTTP/1 proxy i route proxy
• +Spaja root/vhost/route header-policy inheritance u native route proxy construction
• +Premješta safe forwarded-client-IP ownership, trusted-chain append, regex rewrites, ACL, concurrency i rate limits na native path
• +Dodaje native ACME HTTP-01 challenge serving, traffic mirroring, auth-request i route-scoped gRPC validation

Objavljeno 21. lipnja 2026.

• +Moves route-level native response compression onto the HTTP/1 route proxy through fluxheim-compression
• +Moves proxy.error_pages onto native HTTP/1 proxy fallback stranice podržane kroz fluxheim-web

Objavljeno 21. lipnja 2026.

• +Adds native HTTP/1 route static-web serving backed by fluxheim-web
• +Adds route request-header mutation, response rewrites, static upstream round-robin, and static upstream weights to the native route proxy

Objavljeno 21. lipnja 2026.

• +Adds native route redirect actions with safe {uri}, {path}, and {query} expansion
• +Moves route body limits and response-header overlays onto native HTTP/1 route proxy responses

Objavljeno 21. lipnja 2026.

• +Adds native HTTP/1 route-proxy execution for exact, prefix, and fallback routes with method filters and safe rewrite handling
• +Adds native-http1-proxy-candidate redove u runtime cutover evidence kako bi preostali compatibility blockers bili eksplicitni

Objavljeno 20. lipnja 2026.

• +Promiče native HTTP/2 downstream safety preview u cutover-ready nakon fokusiranih parity test
• +Čini representative native runtime cutover report blocker-free za jednostavne HTTP/1, HTTP/2, admin, metrics, stream i UDP konfiguracije

Objavljeno 20. lipnja 2026.

• +Cuts stream and UDP proxy service startup over to Fluxheim-owned native task boundaries
• +Adds cancellation-safe native shutdown waiting and abort-on-cancel background task joins

Objavljeno 20. lipnja 2026.

• +Starts native admin and metrics serving behind Fluxheim-owned server primitives
• +Ojačava nativne pozadinske handle tako da ispušteni kritični handle prekidaju rad umjesto da tiho odvoje zadatke

Objavljeno 20. lipnja 2026.

• +Adds NativeBackgroundSupervisor za Fluxheim-owned background task orchestration
• +Adds critical task watchdog support and hardens shutdown delivery edge cases

Objavljeno 20. lipnja 2026.

• +Adds native runtime cutover evidence gates and fluxheim-config-tester --runtime-cutover
• +Moves remaining Pingora exception targets to a documented multi-release exit plan while keeping policy gates active

Objavljeno 19. lipnja 2026.

• +Adds explicit pingora-compat feature gating za preostali compatibility runtime boundary
• +Moves rustls/OpenSSL downstream TLS SNI, certificate storage, reload, PEM parsing, and native HTTP/1 TLS listener previews into Fluxheim-owned code

Objavljeno 19. lipnja 2026.

• +Nastavlja Pingora-exit slice smanjujući preostali root compatibility surface za proxy, cache i runtime paths
• +Dijeli native health checks u HTTP/gRPC, database, exec i TCP/TLS transport helper modules sa strožim probe bounds

Objavljeno 19. lipnja 2026.

• +Uklanja izravnu Pingora dependency iz fluxheim-load-balancer
• +Dodaje Fluxheim-owned bounded HTTP/1.1 i h2 gRPC active health checks s policy coverage za sprječavanje povratka Pingora

Objavljeno 19. lipnja 2026.

• +Dodaje native HTTP/1.1 proxy cutover readiness planning na ServerPlan
• +Fails closed za compatibility-only proxy features kao auth subrequests, mirroring, redirects, strip/rewrite transforms i advanced load-balancer policy

Objavljeno 18. lipnja 2026.

• +Dodaje Fluxheim-owned native HTTP/2 upstream client primitive s bounded headers, bodies, trailers i deadlines
• +Dodaje h2 client/server test za trailer preservation, oversized responses, stream resets i flow-control timeout behavior

Objavljeno 18. lipnja 2026.

• +Dodaje native rustls/OpenSSL upstream TLS i mTLS podršku u staged HTTP/1.1 proxy path
• +Dodaje ordered static upstream failover za safe methods plus bounded no-follow TLS material reads i hostname-policy coverage

Objavljeno 18. lipnja 2026.

• +Dodaje ograničeno native HTTP/1.1 grupisanje upstream veza za sigurne content-length i origin odgovore bez bodyja
• +Dodaje keepalive pool sizing, upstream idle timeout handling, conservative no-reuse guards i real socket reuse/expiry tests

Objavljeno 18. lipnja 2026.

• +Dodaje reusable native HTTP/2 connection primitives s bounded request-body collection i response trailer support
• +Hardens HTTP/2 response lifetime, handler timeout, DATA capacity handling, prohibited headers/trailers i request-body zeroization

Objavljeno 17. lipnja 2026.

• +Dodaje native HTTP/2 runtime preview gate i h2 stack probe s bounded headers, URI, body, streams, frames, buffers i rapid reset policy
• +Dodaje HTTP/2 preview smoke coverage i proširuje native HTTP/1 behavior coverage za HTTP/1.0 keep-alive/close semantics

Objavljeno 17. lipnja 2026.

• +Dodaje ograničeni native HTTP/1 upstream client i pripremljeni native proxy handler za plain static upstream
• +Dodaje native proxy candidate inventory, Fluxheim-owned proxy headers, privacy-mode behavior i fail-closed eligibility za unsupported policy layers

Objavljeno 17. lipnja 2026.

• +Dodaje native HTTP/1 connection/listener runtime preko Tokio IO i staged native static-file adapter
• +Mapira server limits u native HTTP/1 policy i dodaje socket tests za keep-alive, body framing, shutdown, static files, slow clients i connection caps

Objavljeno 17. lipnja 2026.

• +Dodaje Fluxheim-owned HTTP/1.0/HTTP/1.1 request-head parsing, request-body framing classification, Host validation, persistence handling i chunked decoding
• +Dodaje downstream HTTP/1 policy defaults i hardened native parser boundaries za budući runtime cutover work

Objavljeno 16. lipnja 2026.

• +Moves server bootstrap planning, listener inventory, service intent, background-task intent, HTTP/2 policy, PROXY protocol policy, and private Unix socket planning into fluxheim-server
• +Drži trenutni runtime kao eksplicitni compatibility adapter dok se nastavlja native server/listener work

Objavljeno 16. lipnja 2026.

• +Adds fluxheim-tls kao downstream TLS listener planning i provider-policy boundary
• +Moves TLS listener plans, SNI selection, wildcard matching, ALPN/cipher/curve policy, and rustls/OpenSSL provider checks into the TLS crate
• +Hardens TLS feature gates, SNI fallback behavior, PROXY v2 signature validation i trusted PROXY CIDR validation

Objavljeno 16. lipnja 2026.

• +Dodaje prvi namjenski fluxheim-headers boundary za header policy helpers
• +Premješta rewrite algorithms, forwarded-header handling, hop-by-hop request policy i repeated-header joining u Fluxheim-owned header code
• +Premješta stream PROXY protocol byte parsers u fluxheim-protocol and tightens privacy/proxy CIDR validation

Objavljeno 15. lipnja 2026.

• +Premješta shared background task lifecycle primitives u fluxheim-runtime
• +Moves OTLP metrics export, ACME certificate reload control, admin snapshot validation state, and rollback decisions into Fluxheim-owned runtime/snapshot code
• +Hardens local certificate reload control socket i private backend filtering

Objavljeno 15. lipnja 2026.

• +Adds fluxheim-stream as the internal TCP stream proxy runtime boundary
• +Premješta stream upstream selection, PROXY protocol parsing/writing, source policy, DNS-rebinding guards, byte accounting i timeout handling iza Fluxheim-owned stream code

Objavljeno 14. lipnja 2026.

• +Moves cache key identity, object envelopes, disk index management, storage-bin helpers, tag handling, and cache storage interfaces into fluxheim-cache
• +Dodaje test i release gates koji enforced Pingora dependency removal targets tijekom normalnog cargo test izvođenja

Objavljeno 14. lipnja 2026.

• +Pokreće prvo konkretno 1.6.x implementation release nakon foundation tag
• +Removes pingora-load-balancing/pingora-ketama from full and load-balancer image profiles, restores 1.6 load-balancer image builds, and moves TCP health checks plus request-key extraction behind Fluxheim-owned boundaries

Objavljeno 14. lipnja 2026.

• +Pokrenuta 1.6.x Pingora-exit foundation linija uz nepromijenjen runtime behavior
• +Dodana modularity policy validation, legacy oversized-file exceptions, runtime baseline capture i performance evidence capture
• +Dodane release-gated Pingora dependency exceptions, runtime parity fixtures i extraction dependency graph
• +Added initial fluxheim-runtime and fluxheim-server boundary crates uz tipizirane policy proof primitive

lipanj 2026.

• +Introduced the enterprise HTTP/TCP load-balancer line with focused binaries, images, runtime member and weight controls, persistence, health checks, queueing, and migration docs
• +Expanded Fluxheim-owned runtime boundaries across HTTP, stream proxying, load balancing, background tasks, cache interfaces, observability, config, and shared crates
• +Dodani managed affinity cookies, service discovery, active i protocol-aware health checks, restart-persistent state i runtime backend mutation controls
• +Added UDP beta guardrails, cache origin-protection budgets, ARM/Linux and macOS developer assets, config tester archives, and broad proxy/cache/PHP-FPM security hardening

Objavljeno 25. svibnja 2026.

• +Production proxy parity release with trusted-proxy-aware ACLs, local rate limits, concurrency limits, bounded queues, and edge policy metrics
• +gzip, Zstandard, and Brotli response compression with vhost/route overrides and cache-safe Vary handling
• +Load-balancer resilience, TLS/protocol parity, PROXY protocol v1/v2, upstream mTLS, HTTP/2 controls i gRPC pass-through

Objavljeno 23. svibnja 2026.

• +Managed php-fpm process supervision under the existing php-fpm feature, while external php-fpm remains the default
• +Respawn watchdog, bounded backoff, SIGTERM-before-SIGKILL teardown, sanitized environment i private generated pool state
• +Auditable [vhosts.php.fpm] mode = "managed" config surface za private sockets, worker counts, process manager modes, slowlog, temp paths i pool files
• +Proširen WordPress PHP-FPM smoke coverage preko external, managed-static, managed-dynamic, managed-ondemand i managed-respawn modes
• +Recommended Wolfi PHP image now installs php-8.5-fpm and uses managed php-fpm container config by default

Objavljeno 23. svibnja 2026.

• +FIPS/ISO-required configs fail closed for unsupported internal cryptography, managed ACME, and local cache encryption
• +Provider-backed admin auth, numeric-local-loopback OTLP exception, and OpenBao Transit cache encryption evidence boundary
• +New compliance evidence template and release evidence package sections for regulated reviews

Objavljeno 22. svibnja 2026.

• +rustls/AWS-LC FIPS-capable candidate backend kroz tls-rustls-fips
• +FIPS i ISO/IEC 19790 rustls profile aliases, config examples, diagnostics i validation script

Objavljeno 21. svibnja 2026.

• +OpenSSL FIPS/ISO-capable TLS validation kroz tls-openssl-fips i provider diagnostics
• +FIPS deployment guide, config fixtures, validation script, release evidence i OWASP Top 10 2025 baseline

Objavljeno 20. svibnja 2026.

• +PHP-FPM keepalive pooling, upstream retry/failover i request body disk spooling za sigurniji rad pod opterećenjem
• +WordPress routing/cache preset plus PHP application recipes for common framework and forum deployments
• +PHP metrics i OpenTelemetry attributes, X-Accel-Redirect, X-Sendfile i X-Accel-Expires support

Objavljeno 18. svibnja 2026.

• +fluxheim-acme standalone companion binary za certificate renewal, status i ACME reload socket signalling
• +fluxheim-config-tester standalone binary za config validation u CI i container entrypoint bez pokretanja gateway
• +ACME reload Unix socket — live certificate pickup bez gateway restart
• +Novi profile-php build profile — proxy + web + php-fpm + tls-rustls + security
• +Security hardening improvements across the request pipeline

Objavljeno 16. svibnja 2026.

• +Opt-in PHP-FPM FastCGI bridge for WordPress-style front-controller applications
• +Strict script resolution i bounded FastCGI request/response handling
• +Browser-validated WordPress proxy/PHP cookie compatibility fixes
• +PHP-FPM može posluživati static assets iz istog root dok route PHP prema FPM
• +New php-fpm Cargo feature (implies proxy profil and web)

Objavljeno 14. svibnja 2026.

• +Shared ingress/TLS feature-graph split — focused cache and proxy profiles are now TLS/ACME-capable
• +New profile-cache-edge — cache without static web module
• +New profile-proxy-edge — focused reverse proxy edge
• +Official focused container images for cache and proxy profiles

svibanj 2026.

2026

• + TLS policy profili
• + Multi-certificate rustls SNI
• + Managed ACME certificate issuance i renewal
• + EAB-capable issuers (Actalis i drugi)
• + File-backed TLS secret
• + acme-init guided issuer bootstrap alat
• + Paketirani certificate renewal systemd units

2026

• + Virtual host routing po Host header s default-vhost fallback
• + Route-level static, proxy, and redirect actions
• + Static file serving with MIME detection, ETag, conditional 304, byte ranges
• + Whole-vhost and route-level reverse proxying
• + rustls TLS with SNI, static/bought certificate support
• + Siguran ACME HTTP-01 challenge forwarding
• + Admin control-plane with bearer-token auth and brute-force throttling
• + Secure request/response header policy pravila
• + Opcionalno HTTP→HTTPS preusmjeravanje sa sigurnom Host provjerom
• + Systemd unit i RPM packaging
• + Rootless Podman container images