This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryAdded Podman support on RHEL-based distros with SELinux relabeling, a systemd Quadlet unit for autostart, and installer auto-detection of Docker or Podman.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds Podman support for RHEL-based distributions with SELinux :Z volume relabeling. Adds Podman support for RHEL-based distributions with SELinux :Z volume relabeling. Source: llm_adapter@2026-06-02 Confidence: high |
— |
| Feature | Medium |
Adds systemd Quadlet unit `tools/quadlet/oikos.container` for rootless Podman autostart. Adds systemd Quadlet unit `tools/quadlet/oikos.container` for rootless Podman autostart. Source: llm_adapter@2026-06-02 Confidence: high |
— |
| Feature | Medium |
Auto-detects container engine; prefers Docker, falls back to Podman or podman-compose. Auto-detects container engine; prefers Docker, falls back to Podman or podman-compose. Source: llm_adapter@2026-06-02 Confidence: high |
— |
| Feature | Medium |
Routes all container commands through detected engine instead of hard‑coded docker. Routes all container commands through detected engine instead of hard‑coded docker. Source: llm_adapter@2026-06-02 Confidence: high |
— |
| Feature | Low |
Updates documentation to cover Podman/SELinux install path, OIKOS_HTTP_BIND variable, and systemd autostart. Updates documentation to cover Podman/SELinux install path, OIKOS_HTTP_BIND variable, and systemd autostart. Source: llm_adapter@2026-06-02 Confidence: high |
— |
Full changelog
Added
- Podman support for RHEL-based distributions (RHEL, Fedora, CentOS Stream, Rocky, Alma): a dedicated
podman-compose.ymladds the SELinux:Zvolume relabel so rootless containers can access their data, and exposes a configurableOIKOS_HTTP_BINDhost bind address (default0.0.0.0). tools/quadlet/oikos.container— a systemd Quadlet unit for rootless Podman autostart, withEnvironmentFile,:Zvolumes, the same healthcheck as Compose, and boot persistence vialoginctl enable-linger.- Both the web installer and the CLI installer now auto-detect the container engine, preferring Docker and falling back to
podman compose(Podman 4.1+) orpodman-compose.
Changed
- Web and CLI installers route every container command (start, inspect, logs, prerequisite checks) through the detected engine instead of a hard-coded
docker; with Podman they usepodman-compose.ymlautomatically. - Documentation (README, installation guide, SPEC, MODULES, installer README, and the GitHub Pages landing/install pages) now covers the Podman/SELinux install path, the new
OIKOS_HTTP_BINDvariable, and rootless systemd autostart.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]