Back to Changelog
Panel Backend
v1.0.460
Docker template deployment endpoints added to the external API, with tightened privilege handling for the billing integration path.
New Feature
1- Added external API endpoints for Docker template catalog browsing, template detail lookup, and one-click template deployment (GET /v1/docker/templates, GET /v1/docker/templates/:slug, POST /v1/docker/templates/:slug/deploy), reusing the same owner resolution, plan container limits, cgroup slice isolation, and ownership tagging as the panel UI.
Security Fix
1- Hardened the external API Docker path: even though billing integration authenticates as an operator key with a ROOT role, container creation and template deployment now always strip privileged mode, added capabilities, sysctls, and run-as-root, and enforce the host-path bind restriction \u2014 closing a gap where a compromised or misbehaving billing integration could previously have requested a privileged container or a host bind mount.