Firmware v2.22.0

bmcd v2.29.0 → v2.30.0: a proxy holding a certificate from a trusted CA can name the human it authenticated.

Firmware v2.22.0, 11 September 2026. Every item below is the repository's own changelog entry, taken apart; the whole entry is a click away under each one.

New

bmcd v2.29.0 → v2.30.0: a proxy holding a certificate from a trusted CA

can name the human it authenticated

(SQU-136). tls.client_ca turns it on and is absent by default, so a board that never gets one behaves exactly as before. tls.identity_header says which header carries the name.

The whole entry

A name without a certificate is nobody, and that rule has a test.

This is what makes a fleet interface possible without giving anything a password to every board.

---

Every release of the firmware · the roadmap · follow by feed