v0.4.44

Signedpublished September 21, 2026

What changed

View and manage all workspaces without truncation. Accounts with more than 20 containers previously only saw the first 20 on the Containers page, because the dashboard requested a single page from the API. The Containers page and the API key editor now automatically fetch all containers across pages, displaying every workspace in both grid and list views grouped by project. Editing an API key also displays all containers in the grant picker and preserves existing grants on containers across all pages.

Container images

devgrail-container

registry build 33

amd64812 MB

sha256:d428e5a83022c8da67b23a9b689349c23594a7b420f1e5621c9036ea7aa85695

Download

arm64678 MB

sha256:47ff37339c4dd3d23643e033192dd905c93e777035f26b3456430920df4769f4

Download

devgrail-server

registry build 65

amd6446 MB

sha256:38df884d9790c17e0db0f70dc7ed29861adf29d4200eb7ca920e873f298457e4

Download

arm6445 MB

sha256:2a52a48b5fa1c2a479464f63d6640ed234534242d74b219b231c8cf62b3fe780

Download

Installer files

docker-compose.yml21 KBsha256:3d2782acc8a2d405964feb3ef7ea3d71ac85285445e20ead88368dea1420c1ba

install.sh176 KBsha256:ee5052c1552dd5c34c2d33716aa92f6384ca7464b59ff224785ab986a102f466

traefik-dynamic-http.yml5 KBsha256:e344c8efd13c7d84996e2ebfbc75dcee2d995d8538c8a245c89c0e44fad0089b

traefik-dynamic.yml6 KBsha256:d18fa561b8eb7d53b015284e0246b2d05953bf281b65269c1fae3d6883530db6

uninstall.sh60 KBsha256:ce0fc4bf3d7e6cd0a00489ca0ac40b94ff000595f88e07d47c72f6261ebb4e02

Signature

ecdsa-p256-sha256key f1f1eaf642454d65

One signature covers every artifact above. It is made off this host, and neither this site nor the registry behind it can check it — that is the point, and it is why verifying it catches things a checksum from the same server cannot. How to verify it.

Verify devgrail-container (amd64)

curl -fsSL https://web-dev.trixibot.com/api/registry/releases/v0.4.44 -o release.json

# -j, not -r: -r appends a newline the signer never saw, and the check fails.
jq -j '.signature.payload'   release.json > payload
jq -r '.signature.signature' release.json | base64 -d > payload.sig

openssl dgst -sha256 -verify devgrail-release.pem -signature payload.sig payload
# -> Verified OK

# The payload must name this release, so an older signed one cannot be replayed.
head -2 payload

# ...and it must name this exact file. -qxF: whole line, literal.
grep -qxF 'image devgrail-container 33 amd64 d428e5a83022c8da67b23a9b689349c23594a7b420f1e5621c9036ea7aa85695' payload && echo "digest is covered by the signature"

The signed payload — shown for reading, not for verifying

Copy this from the manifest with jq -j, never from this page: the signature covers exact bytes, and rendering here drops the trailing newline the signer included.

devgrail-release-signature-v1
release v0.4.44
asset docker-compose.yml 52 3d2782acc8a2d405964feb3ef7ea3d71ac85285445e20ead88368dea1420c1ba
asset install.sh 52 ee5052c1552dd5c34c2d33716aa92f6384ca7464b59ff224785ab986a102f466
asset traefik-dynamic-http.yml 51 e344c8efd13c7d84996e2ebfbc75dcee2d995d8538c8a245c89c0e44fad0089b
asset traefik-dynamic.yml 52 d18fa561b8eb7d53b015284e0246b2d05953bf281b65269c1fae3d6883530db6
asset uninstall.sh 52 ce0fc4bf3d7e6cd0a00489ca0ac40b94ff000595f88e07d47c72f6261ebb4e02
image devgrail-container 33 amd64 d428e5a83022c8da67b23a9b689349c23594a7b420f1e5621c9036ea7aa85695
image devgrail-container 33 arm64 47ff37339c4dd3d23643e033192dd905c93e777035f26b3456430920df4769f4
image devgrail-server 65 amd64 38df884d9790c17e0db0f70dc7ed29861adf29d4200eb7ca920e873f298457e4
image devgrail-server 65 arm64 2a52a48b5fa1c2a479464f63d6640ed234534242d74b219b231c8cf62b3fe780