Changelog

What's new in Verlocx.

Every change to the portal and the agent — 65 so far, newest first.

October 2026Latest

Security hardening, live updates and lease fixes

NewLive updates: after an update, open tabs show “A new version of the portal is available” with a Reload button — and a quiet “reconnecting” note while the server restarts, instead of error messages. The user menu shows the build in use.
ImprovedThe portal authenticates to the backend with its own secret, on a separate listener guests can't reach. The agents' bootstrap secret only enrolls agents — a VM can no longer pose as the portal.
ImprovedAn enrolled agent identity can't be taken over: enrolling again with a different key needs the agent offboarded first.
NewOffline-signed agent updates: releases are signed on your own machine with a dedicated release key that agents pin (release_pubkey). The server can no longer sign updates, and the portal offers a build only when its signed release.json matches it.
NewOne-time enrollment tokens: each cloned VM gets its own single-use token in SMBIOS, so templates no longer carry a shared secret. The backend's allow_bootstrap_enrollment switches the old secret off once you've migrated.
ImprovedCustom roles take effect everywhere permissions are checked — server, UI and API — and editing one needs every permission it grants.
ImprovedLists are scoped to what you may see: VMs, users, groups, owner overrides, project settings, grants and the VMs inside shared backup jobs. Fleet and cluster views show other projects' guests as “in another project”.
ImprovedGrant protection: you can only create, change or delete a grant — or change a group's members — if you hold every permission it changes for each affected user; touching an organization admin needs organization admin rights.
ImprovedProxmox state sync: a VM switched off directly in Proxmox shows as stopped within about 30 seconds, with or without an agent.
ImprovedCluster, onboarding, import and deletion-protection controls are shown only to people the server would allow.
ImprovedThe REST API returns a VM's current owner, including owner changes made in the portal.
FixedDomain join with a computer name that already exists in AD: new VMs check for the object first and report its path (or replace a stale one, per template), and a guest that already joined under another name is renamed instead of joined again.
ImprovedRoles meant for owned VMs (Operator, Viewer, Backup user) can act only on the VMs they own — consoles, power, snapshots, backups, remote commands, firewall, network and leases — in the UI and the API alike.
ImprovedThe role preview in the navbar is enforced by the server too: what the previewed role can't do is refused, not just hidden.
ImprovedCreating a VM checks cluster, template, sizes and owner against the project's rules on every path, and only real templates can be cloned. Adopting existing guests needs project settings rights.
ImprovedChanging a cluster's endpoints or TLS verification asks for its secret again, and cluster changes need organization admin rights. Changing the join domain or account asks for the join password again.
ImprovedLeases and power schedules need the right for the action they will perform; clearing deletion protection needs the delete right; API keys can only create keys with equal or fewer rights.
ImprovedCommand output and audit details are visible only to people who may see that VM or hold the audit right.
ImprovedEvery lease mail records its outcome — sent to whom, or why not — in the lease and the activity log.
FixedGroup-lease stages skipped while “apply stages already overdue” was off now catch up once it's switched on.
FixedActivity entries whose guest output arrives as UTF-16 (e.g. PowerShell start-up errors) are stored again.
Fixed“Delete agent” and “Offboard agent” now actually reach the backend.
AgentAgent 0.0.35: values placed into PowerShell commands are escaped for every quote character PowerShell accepts.
AgentAgent 0.0.36: installs only updates signed with your release key, enrolls with the one-time token from SMBIOS, and checks domain membership (DNS or NetBIOS name) before each join attempt — stopping with a clear message when the AD object already exists.

October 2026

Executable workflows, the Database tab and a sharper UI

NewDeployment workflows actually run: each template can pick a workflow — clone, boot, rename, domain join, local admins, scripts, reboots and waits — and the VM page shows it live.
NewConfiguration runs: Ansible-style building blocks (files, registry, services, Windows features, IPv6, certificates, firewall rules) on many VMs at once, with check mode and a Runs view of every VM × step.
New“Lock VMs while running”: a VM under a configuration run shows the run's flow, and power, delete, snapshots and resizing wait until it's done.
NewRun again, run for real after a dry run, check again, and retry only the failed VMs — on the same VMs, with the current workflow.
NewWait action with quick presets, and a canvas view of workflows next to the builder and the JSON.
NewDatabase tab for database VMs: schema tree, ER diagram, data with inline editing, structure with clickable foreign keys, and an SQL editor with highlighting, linting and autocomplete. Every query is audited.
NewProtected Platform project for the servers Verlocx itself runs on, and workload types (LXC, MariaDB/MySQL, PostgreSQL).
NewFeature flags per organisation with per-user overrides, including the switch between the new and the classic interface.
NewMigrate a VM to another host from its details — the HA rule and the backup job follow it.
NewA name that carries a number is binding: web-prod-252 gets VMID 252 or is refused with the reason (in use, recently freed, outside the template's range) — checked before the VM is created.
ImprovedSnapshot trees (qcow2 chains) and the “current” marker are correct right after create, delete and rollback, instead of after the next sync.
ImprovedLive deployment timers count from the server's clock and update without delay, independent of other requests on the page.
ImprovedDetail pages for users, groups, roles, clusters, HA groups, backup jobs, templates and the consoles use the new layout.
ImprovedDeployments tabs keep their state when you switch between them — no reloading, no lost edits.
ImprovedConfirmations use the portal's own dialogs everywhere.
ImprovedNew sign-in page and logo.
FixedA snapshot deleted while a background sync was running could reappear.
FixedA VM could be created on a different VMID than its name when the requested one was blocked.
Agent0.0.33 — workflow protocol: scripts with expected exit codes and output, reboots and waits that resume after a restart.
Agent0.0.34 — local administrators checked by group SID: owners who are already members no longer fail the step.

September 2026

Scale, imports and project-wide leases

NewProject-wide lease rules with conditions and staged actions — notify, suspend, delete — enforced by the scheduler.
NewOrganisation SMTP settings for owner notifications.
NewCSV import of existing VMs and their owners from another portal; Proxmox stays the source of truth.
NewCluster Rescan, and an Onboard action for VMs that exist on the hypervisor but not yet in Verlocx.
ImprovedMany tabs open and bulk API callers no longer slow the UI: live updates are coalesced and the activity feed loads incrementally.
ImprovedCPU, memory and disk come from the agent only; disk alerts look at the fullest volume.

July 2026

The foundation

NewHostname rename and Active Directory domain join that survive reboots, with encrypted join credentials.
NewRemote commands: scripts and presets run in the guest, output kept in the VM's activity.
NewFull REST API with API keys, scopes and project limits.
NewDisk-usage scanner: a tree and top files of the guest's disks.
NewAgent self-update from the portal, with signed manifests.
NewTwo snapshot backends — Proxmox snapshots and LVM snapshots over SSH — kept in sync by the scheduler.
NewAutomatic backup-job and HA placement on deploy, per template.
NewIn-browser SSH console for Linux VMs, next to VNC.
NewReal suspend (hibernate) and resume, also for HA VMs.
NewScheduler, leases, alerts, cost showback and per-VM firewall.
NewPer-template provisioning rules: allowed sizes, VMID range, naming, network.
ImprovedDeleting a VM really destroys it on the hypervisor and removes its computer object from Active Directory; running guests are protected.
ImprovedFreed VMIDs are blocked for a while, so a new VM never inherits old backups.
ImprovedLive resizing and real deletion protection.
Agent0.0.4 — reboot-safe deployments · 0.0.5 rolling log files · 0.0.7 self-update · 0.0.15 deferred local admins until domain join · 0.0.17 live progress and sysprep support.