Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps - Status | Demo | Docs | Install
  1. Cloudron Forum
  2. Announcements
  3. What's coming in 9.1

What's coming in 9.1

Scheduled Pinned Locked Moved Announcements
64 Posts 21 Posters 5.6k Views 25 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • jamesJ james

    Hello @DualOSWinWiz
    Yes you can also run custom apps that are just databases.

    D Offline
    D Offline
    DualOSWinWiz
    wrote on last edited by
    #7

    @james said in What's coming in 9.1:

    Hello @DualOSWinWiz
    Yes you can also run custom apps that are just databases.

    So this meant their will be a port mapping facility as well great i dont know if its already their. I am anxious to see how backups and restore will handle the active connection to database.

    jamesJ 1 Reply Last reply
    0
    • C Offline
      C Offline
      creative567145
      wrote on last edited by
      #8

      Congratz Team Cloudron 🙌
      Is there an approximate timeline for 9.1?

      The Custom app build & deploy + Community packages are something that the majority of us have been looking forward to for a long time 😁

      humptyH 1 Reply Last reply
      3
      • C creative567145

        Congratz Team Cloudron 🙌
        Is there an approximate timeline for 9.1?

        The Custom app build & deploy + Community packages are something that the majority of us have been looking forward to for a long time 😁

        humptyH Offline
        humptyH Offline
        humpty
        wrote on last edited by
        #9

        @creative567145 in the meantime, give ccai a try

        1 Reply Last reply
        2
        • D DualOSWinWiz

          @james said in What's coming in 9.1:

          Hello @DualOSWinWiz
          Yes you can also run custom apps that are just databases.

          So this meant their will be a port mapping facility as well great i dont know if its already their. I am anxious to see how backups and restore will handle the active connection to database.

          jamesJ Online
          jamesJ Online
          james
          Staff
          wrote on last edited by
          #10

          Hello @dualoswinwiz

          @DualOSWinWiz said in What's coming in 9.1:

          So this meant their will be a port mapping facility as well great i dont know if its already their. I am anxious to see how backups and restore will handle the active connection to database.

          This needs to be addressed by custom app packager.

          1 Reply Last reply
          0
          • nebulonN nebulon referenced this topic on
          • fbartelsF fbartels

            I'm curious how the implementation for the community packages will look like. Are you saying you will monitor a manifest file and inside of the manifest would be a container tag, and when the manifest or the tag changes the app will be updated with this?

            The custom app build and deploy functionality sounds quite neat. Since you mention it will be cli driven I suppose it is the responsiblity for the person running the cli to make sure that the right branch/tag is checked out?

            girishG Offline
            girishG Offline
            girish
            Staff
            wrote on last edited by girish
            #11

            cc @fbartels @timconsidine

            For the custom app build and deploy - cloudron install uploads the package's source and there is a docker build running on the server. The source is part of the app backup. This means that when you restore back , it can rebuild from the source pacakge at that point in time and deploy it again. The design requires Dockerfiles to work reliably since the images are not "backed up" .

            Wanted to check if anyone had a concern that builds can be done on the server? For example, in theory, a build of some mega package can affect the existing apps. Should this feature be opt-in? Of course, every switch and configuration setting adds complexity.

            Community packages - the plan here is to have a file called CloudronVersions.json (or maybe CloudronVersions.json.gz). This is an array of "version" -> "manifest with dockerImage" mapping. This is how it is stored in the database in cloudron.io also. There will be a CLI command cloudron versions add , cloudron versions publish etc to update that file (there is already a cloudron appstore subcommand, so this new one will loosely mirror that). This system allows: Listing versions of package, going back to old version, checking for new versions etc. Manifest is also saved per version allowing you to have icon/changelog/description/screenshots etc which is version specific. This single file has to be publicly hosted somewhere and doesn't need to be part of the package repo (though I imagine it would be).

            UI wise, there will be a button to "Install package" and you give a CloudronVersions.json URL and that's it.

            Community "app store" - this is a listing of community packages. currently, not planned for. I think we need the above two stable to see if we need this. For a start, we can maintain a page somewhere which has all the community apps. Either here in the forum or the cloudron.io website or somewhere else . Ideally, this has to be self-editing/self-managed and shouldn't require cloudron.io team to add/edit stuff. Open to ideas.

            LanhildL fbartelsF 2 Replies Last reply
            4
            • girishG girish referenced this topic on
            • girishG girish

              cc @fbartels @timconsidine

              For the custom app build and deploy - cloudron install uploads the package's source and there is a docker build running on the server. The source is part of the app backup. This means that when you restore back , it can rebuild from the source pacakge at that point in time and deploy it again. The design requires Dockerfiles to work reliably since the images are not "backed up" .

              Wanted to check if anyone had a concern that builds can be done on the server? For example, in theory, a build of some mega package can affect the existing apps. Should this feature be opt-in? Of course, every switch and configuration setting adds complexity.

              Community packages - the plan here is to have a file called CloudronVersions.json (or maybe CloudronVersions.json.gz). This is an array of "version" -> "manifest with dockerImage" mapping. This is how it is stored in the database in cloudron.io also. There will be a CLI command cloudron versions add , cloudron versions publish etc to update that file (there is already a cloudron appstore subcommand, so this new one will loosely mirror that). This system allows: Listing versions of package, going back to old version, checking for new versions etc. Manifest is also saved per version allowing you to have icon/changelog/description/screenshots etc which is version specific. This single file has to be publicly hosted somewhere and doesn't need to be part of the package repo (though I imagine it would be).

              UI wise, there will be a button to "Install package" and you give a CloudronVersions.json URL and that's it.

              Community "app store" - this is a listing of community packages. currently, not planned for. I think we need the above two stable to see if we need this. For a start, we can maintain a page somewhere which has all the community apps. Either here in the forum or the cloudron.io website or somewhere else . Ideally, this has to be self-editing/self-managed and shouldn't require cloudron.io team to add/edit stuff. Open to ideas.

              LanhildL Offline
              LanhildL Offline
              Lanhild
              App Dev
              wrote on last edited by
              #12

              @girish Should be opt-in. In cases where a Cloudron server has multiple developers, I don't want my developers to upload code to be built on my server

              1 Reply Last reply
              6
              • girishG girish

                cc @fbartels @timconsidine

                For the custom app build and deploy - cloudron install uploads the package's source and there is a docker build running on the server. The source is part of the app backup. This means that when you restore back , it can rebuild from the source pacakge at that point in time and deploy it again. The design requires Dockerfiles to work reliably since the images are not "backed up" .

                Wanted to check if anyone had a concern that builds can be done on the server? For example, in theory, a build of some mega package can affect the existing apps. Should this feature be opt-in? Of course, every switch and configuration setting adds complexity.

                Community packages - the plan here is to have a file called CloudronVersions.json (or maybe CloudronVersions.json.gz). This is an array of "version" -> "manifest with dockerImage" mapping. This is how it is stored in the database in cloudron.io also. There will be a CLI command cloudron versions add , cloudron versions publish etc to update that file (there is already a cloudron appstore subcommand, so this new one will loosely mirror that). This system allows: Listing versions of package, going back to old version, checking for new versions etc. Manifest is also saved per version allowing you to have icon/changelog/description/screenshots etc which is version specific. This single file has to be publicly hosted somewhere and doesn't need to be part of the package repo (though I imagine it would be).

                UI wise, there will be a button to "Install package" and you give a CloudronVersions.json URL and that's it.

                Community "app store" - this is a listing of community packages. currently, not planned for. I think we need the above two stable to see if we need this. For a start, we can maintain a page somewhere which has all the community apps. Either here in the forum or the cloudron.io website or somewhere else . Ideally, this has to be self-editing/self-managed and shouldn't require cloudron.io team to add/edit stuff. Open to ideas.

                fbartelsF Offline
                fbartelsF Offline
                fbartels
                App Dev
                wrote on last edited by
                #13

                @girish said in What's coming in 9.1:

                The design requires Dockerfiles to work reliably since the images are not "backed up" .

                I think for reliability it would probably be easier to backup the docker images instead of counting on well written Dockerfiles. But on the other hand even for these apps I would think the Cloudron base image will be used most commonly, so the chaos might be minimal.

                Personally I would then rather use the community packages where I can have a pre built docker image that i can (more) easily deploy to Cloudron.

                girishG 1 Reply Last reply
                2
                • fbartelsF fbartels

                  @girish said in What's coming in 9.1:

                  The design requires Dockerfiles to work reliably since the images are not "backed up" .

                  I think for reliability it would probably be easier to backup the docker images instead of counting on well written Dockerfiles. But on the other hand even for these apps I would think the Cloudron base image will be used most commonly, so the chaos might be minimal.

                  Personally I would then rather use the community packages where I can have a pre built docker image that i can (more) easily deploy to Cloudron.

                  girishG Offline
                  girishG Offline
                  girish
                  Staff
                  wrote on last edited by
                  #14

                  @fbartels I should clarify further. The two features are for different use cases.

                  The custom app deployment was primarily to help people writing and deploy their own custom apps. There are many who are forking packages and adding some minor patches (because we don't allow customizations with readonly fs). This new mechanism will help people build+deploy easily. This does not require CloudronVersions.json. Only implemented in CLI. I think the CLI workflow gives the right messaging that they have to keep it updated themselves.

                  The community package always has a docker image associated and requires CloudronVersions.json. It was for people who want to share their packages with others and provide updates.

                  There is no plan to give a source URL in the UI and "build" from source. While technically possible, don't want people to expect "builds", "deployments" etc like a code deploy/PaaS. It's something for the future, if a use case exists.

                  Hope that clarifies!

                  1 Reply Last reply
                  5
                  • fbartelsF Offline
                    fbartelsF Offline
                    fbartels
                    App Dev
                    wrote on last edited by
                    #15

                    Ah yes, I did not have the "i want this existing app, but with .." use case in mind.

                    1 Reply Last reply
                    0
                    • necrevistonnezrN Offline
                      necrevistonnezrN Offline
                      necrevistonnezr
                      wrote on last edited by
                      #16

                      Request: Passkeys support for the Cloudron login

                      1 Reply Last reply
                      9
                      • girishG girish referenced this topic on
                      • nebulonN Offline
                        nebulonN Offline
                        nebulon
                        Staff
                        wrote on last edited by
                        #17

                        We have finally implemented Passkey support. Will be part of 9.1 then

                        nostrdevN 1 Reply Last reply
                        10
                        • T Offline
                          T Offline
                          Teiluj
                          wrote on last edited by
                          #18

                          Any chance to have some VPN per App or S3-as-a-service in there as well?

                          1 Reply Last reply
                          3
                          • nebulonN nebulon

                            We have finally implemented Passkey support. Will be part of 9.1 then

                            nostrdevN Offline
                            nostrdevN Offline
                            nostrdev
                            wrote on last edited by
                            #19

                            @nebulon what about FIDO2 or WebAuthN?

                            jdaviescoatesJ 1 Reply Last reply
                            1
                            • nostrdevN nostrdev

                              @nebulon what about FIDO2 or WebAuthN?

                              jdaviescoatesJ Offline
                              jdaviescoatesJ Offline
                              jdaviescoates
                              wrote on last edited by
                              #20

                              @nostrdev said in What's coming in 9.1:

                              @nebulon what about FIDO2

                              I think that's already done

                              I use Cloudron with Gandi & Hetzner

                              1 Reply Last reply
                              2
                              • J Offline
                                J Offline
                                joseph
                                Staff
                                wrote on last edited by
                                #21

                                FIDO2 is the broad name of the standard. passkeys is the (marketing) name of the FIDO2 "key" . WebAuthn is the standard for server to browser/client communication and is part of FIDO2. That is my understanding.

                                1 Reply Last reply
                                3
                                • nostrdevN Offline
                                  nostrdevN Offline
                                  nostrdev
                                  wrote on last edited by
                                  #22

                                  so long as we can use an external signing device (like Trezor), and not trust some foreign spyware company like Google or Microsoft or Apple, that would be great.

                                  1 Reply Last reply
                                  1
                                  • jamesJ Online
                                    jamesJ Online
                                    james
                                    Staff
                                    wrote on last edited by
                                    #23

                                    Hello @nostrdev
                                    We have tested the passkey support with the Bitwarden browser extension, YubiKey 5, Nitrokey and native support from some browsers and operating systems like Windows, Apple and Linux.
                                    Please note, we implemented passkey support and not the full WebAuthn/FIDO2 specification available options.

                                    nostrdevN 1 Reply Last reply
                                    6
                                    • nebulonN Offline
                                      nebulonN Offline
                                      nebulon
                                      Staff
                                      wrote on last edited by
                                      #24

                                      To support passkey login via the cloudron cli, we will move to oidc login for the cli in 9.1

                                      Basically the cli will open a browser window to login and obtain an access token. For everyone using the cli in some automated pipeline, one can still use it with a pre-obtained api key from the dashboard.

                                      1 Reply Last reply
                                      6
                                      • girishG girish

                                        We will be working on the following for 9.1:

                                        • Custom app build and deploy - You can git-clone any package repository and run cloudron install directly. This builds the app locally on the Cloudron instance and installs it. This simplifies building and maintaining custom packages. The workflow is primarily CLI-driven and targets developers building custom apps as well as users who want to apply patches on top of existing packages.
                                        • Community packages - can be installed from a URL via the dashboard. Cloudron will track the upstream URL and automatically check for and apply updates. Will allow people to publish outside Cloudron App store and users can easily install these packages and keep them automatically updated. For discovery, we will maintain a list either on the forum or in the documentation (TBD).
                                        • Separate notifications view
                                        • Mongodb 8, Redis 8.4, Nodejs 24.x
                                        • Acme ARI support
                                        • Backup Integrity verification UI
                                        • Improved progress reporting - show percentage complete and elapsed/estimated time for backups and app installations.
                                        • Convert backup site creation dialog to a view
                                        • Better eventlog UI
                                        girishG Offline
                                        girishG Offline
                                        girish
                                        Staff
                                        wrote on last edited by
                                        #25

                                        said in What's coming in 9.1:

                                        Improved progress reporting - show percentage complete and elapsed/estimated time for backups and app installations.
                                        Convert backup site creation dialog to a view

                                        Save these two, other features are implemented. Work has started on getting 9.1 release out.

                                        1 Reply Last reply
                                        5
                                        • jamesJ james

                                          Hello @nostrdev
                                          We have tested the passkey support with the Bitwarden browser extension, YubiKey 5, Nitrokey and native support from some browsers and operating systems like Windows, Apple and Linux.
                                          Please note, we implemented passkey support and not the full WebAuthn/FIDO2 specification available options.

                                          nostrdevN Offline
                                          nostrdevN Offline
                                          nostrdev
                                          wrote on last edited by nostrdev
                                          #26

                                          @james

                                          Using Bitwarden means keeping your secret on a potentially compromised device. Better to use a hardware key.

                                          The problem with both Yubikey and Nitrokey is that if you lose the device, you lose the key. Big problem.

                                          The fact you cannot recover a passkey, make those devices a pass, from us. Or at least, they must be used in a far more careful and limited fashion - ie, fallback to email recovery - than what would otherwise be the case (sovereign recovery).

                                          With Trezor - and other hardware wallets that use deterministic webAuthN - you can recover from a seed. This means that the loss of a device is not catastrophic.

                                          EDIT: Am reading the Trezor forums and apparently they do support Passkeys, it's just that the Resident Key is encrypted with the seed, and not deterministically generated. So for recovery, you just back up the file using regular cloud storage.

                                          Looking forward to testing it on cloudron, and letting you all know the results.

                                          https://trezor.io/guides/bonus-tools/what-is-fido2

                                          1 Reply Last reply
                                          5
                                          • jamesJ james referenced this topic on

                                          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                                          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                                          With your input, this post could be even better 💗

                                          Register Login
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • Bookmarks
                                          • Search