Skip to main content
March 2026

0.28.1

Bug fixes

  • Remove org slug references and use org ID for all API paths.

0.28.0

New commands

avocado connect auth

Authenticate with Peridio for fleet management and OTA. Supports multi-profile authentication for managing multiple organizations:

avocado connect auth login
avocado connect auth logout
avocado connect auth status

avocado connect upload

Upload runtime tarballs to Peridio for OTA distribution:

avocado connect upload -r dev

avocado connect keys

Manage cryptographic keys in the Peridio key registry for secure signing workflows:

avocado connect keys list
avocado connect keys create my-key --public-key ./key.pub

avocado connect trust status

View the trust posture and security level of your fleet:

avocado connect trust status

The output displays the current security_level for each device group.

avocado connect resources

Manage Peridio resources (projects, cohorts, device groups) from the CLI:

avocado connect resources list projects
avocado connect resources list cohorts

avocado rootfs and avocado initramfs

New top-level commands for building rootfs and initramfs images directly from packages:

avocado rootfs build
avocado initramfs build

These commands share a common code path and replace the internal avocado-build hooks with a stone bundle step in the runtime build pipeline.

Configuration changes

connect config section

Add a connect section to avocado.yaml for Peridio organization and project defaults:

connect:
  org: my-org
  project: my-project

This eliminates the need to pass --org and --project on every avocado connect command.

Improvements

  • Delegated TUF targets are now staged during avocado build and used by avocado deploy.
  • Prerequisite stamp checks prevent out-of-order builds.
  • Extension images now support erofs-lz4 and erofs-zst compression in addition to plain erofs and squashfs.
  • Delegate keys are org-scoped and support Level 1 content-only signing.
  • Trust level transitions: promote-root, rotate-server-key, and route migration are available via avocado connect trust.

Bug fixes

  • Fixed AVOCADO_OS_BUILD_ID not being injected into initrd-release.
  • Fixed build script ordering so the var image exists before the stone bundle step.
  • Fixed stale artifacts in the stone build directory by cleaning before bundle.
  • Fixed AVOCADO_OS_BUILD_ID not being written to the sysroot during rootfs package installation.