LordOS

An update for 0.8.8 to 0.8.8.5 through Store → Updates and apt (no new ISO: the 0.8.8 live image stays the current one), with Voice: text to speech on the computer, without the internet (say, read aloud anywhere with a player, Live Speech, voices you choose in Standard or HD quality, and a Personal Voice made from your own recording); Monitor → GPU; the menu bar and the taskbar on every display; and the 34 issues reported on GitHub since 0.8.8.4 (#42 to #75), with the fixes found while checking them.

Added

• Monitor → GPU (new tab): each graphics card drawn live (its fans turn with the real fan and stop at 0 RPM), load, temperature and fan history (Cooling's chart), the apps using it (each engine's share, their graphics memory and the APIs they use, from the kernel's DRM usage stats of your own processes), graphics memory, clocks, power, the graphics APIs installed for the card (Vulkan, OpenGL, OpenCL, video decoding, CUDA/NVENC on NVIDIA, ROCm on AMD, WebGPU through browsers), and LordOS's AI engines (the voice on the graphics card through Vulkan or on the processor, its quality and language, speaking or saving: lord-say leaves a status note in ~/.cache/lordos/say/<pid>; lord-tts stays sandboxed, so its memory shows as hidden). The Overview shows the main GPU, the AI status and running virtual machines. Administrators can set an AMD card's fan by hand (30–100 %, GPUFAN through lord-fand only): it goes back to automatic above 85 °C, after repeated errors, when the session that set it ends, and on lord-fand's stop, restart or crash, and it is never saved. Everything is read without root, about once a second, only while the tab or the Overview is on screen. Tests: gpustat-test (63), gpu_model_test.mjs (69), fan-test (4224).
• Menu bar on every display (Lord Flow). Each display now has its own full menu bar: the L menu, the app's menus, the status items (Cleaner, keyboard layout, on-screen keyboard, Search, Control Center, the bell) and the clock. The app's menus are lit on the display with the window you're using and dimmed on the others; a click there lights that bar and opens the menu on that display. The Control Center, the clock's notifications and calendar panel, and Search open on the display whose bar you clicked, under the item. Menus stay inside one display. Maximized and snapped windows on every display stay below its bar. A monitor you plug in gets its bar, and one you unplug takes its bar and any panel open on it. All the bars share one clock timer (sdk/ticker.js). On by default; turn it off in Settings → Desktop & Dock → Menu Bar → "Show the menu bar on every display" (the same switch as Displays → "Show menu bar on all displays", whose choice is kept if you had turned it off).
• Lord Classic: the taskbar on every display, on by default (Settings → Desktop & Dock → Taskbar → "Show the taskbar on every display", the same menuBarAllDisplays as Lord Flow's menu bar; one bar when off or mirrored). Each bar is whole: start, pinned and running apps (all apps on every bar), Trash, tray and clock. The start menu, power menu, quick settings, notifications and calendar open on the clicked bar's display and stay inside it; ❖, ❖A and ❖N open them on the display under the pointer. Each display's work area reserves its bar, monitors plugged or unplugged add or remove bars, and jump lists stay inside their display. One clock timer and one network poll serve every bar, and pins can be dropped on any bar (registerDockTarget takes several targets). Tested by server/tests/classic_taskbar_test.mjs over three monitors.
• the first community hardware report in the tested-hardware catalogue: a Dell Latitude 7480 (Intel Core i5-7300U, Intel HD Graphics 620 on i915, Intel Wireless 8265, LordOS 0.8.8.4-beta, installed). It was validated by tools/hwreport/validate.mjs (report:valid) and committed unchanged to web/content/hardware/reports/ with its issue number in index.json. assets/hwre

An update for 0.8.8 to 0.8.8.4 through Store → Updates and apt, with two new parts of the system: Cloud, your cloud storage accounts in Settings and in Files, built on rclone (which ships in its own package, lordos-rclone, rclone's official release, MIT), and Machines, virtual machines with their own app, from a downloaded system that installs without questions to snapshots, clones and migrating a machine from another app. Thanks to rclone's authors: Cloud talks to rclone only, over a socket no network can reach.

Added

• Cloud, the core (docs/CLOUD.md; the interface comes separately). lord-server runs rclone's remote control for the session on a Unix socket only ($XDG_RUNTIME_DIR/lordos/cloud/rc.sock, in a 0700 folder), with a random user and password per start given through a memory file, its configuration in memory, in a scope and firewall app of its own (desktop:lordos-cloud), restarted by itself after a crash (at most 5 times a minute). It is rclone's only client, and it can only send the 28 methods of a fixed table: nothing in LordOS can ask rclone to run a command or hand out its stored credentials. lord.cloud offers accounts (sign-in in the browser through rclone authorize, servers and object storage with their fields checked against rclone's own schema), mounts in ~/Cloud/<account>, each file's status, Keep on This Computer and Free Up Space (never for a file that is open, changed here, waiting to go up or kept), freeing space by itself below a threshold, links where the provider has them, Pause and Resume, bandwidth limits and Restart. Tokens and passwords live in the keyring; the files in ~/.config/lordos/cloud hold none. Signing in again, or adding with an existing account's name, updates that account. Add Account lists every provider the shipped rclone has, under rclone's own names, asked each time; rclone's own setup questions (a choice, a code) reach the person through cloud.answer; Empty Trash where the provider has one, Measure for providers without a quota, and deleting under ~/Cloud removes in the cloud through the mount instead of making a .Trash folder there. Accounts waiting for a locked keyring (as after an automatic login) connect as soon as it is unlocked, without a restart; a folder kept busy by an open file is still unmounted (lazily) and a dead mount is cleared before mounting again; renaming an account and then signing in again updates it instead of saying the name is taken. An account only counts once it answers (a wrong password, port or address is said at once, and nothing is left behind); an SFTP server's host key and an https server's untrusted certificate are shown before the account is added and checked afterwards; no account option can run a program or name a local file; Recents and search no longer walk into cloud mounts, so a cloud server that stops answering can't freeze the desktop; renaming and moving work inside cloud folders; S3 links can be long and say they can't be withdrawn early. With a cloud server down, a file that isn't on this computer fails within seconds and the account says offline until the server answers again; logging out unmounts every cloud folder; a file changed both here and in the cloud keeps the cloud's version next to it as "name (cloud copy)" before ours goes up. SFTP accounts no longer probe the server's key again and again (OpenSSH locked people out after a few tries), a second account on the same server uses the key the first trusts, and the owner can accept a server's new key when signing in again; searching inside a cloud folder works without blocking the desktop. A file edited while the server was really down no longer overwrites what changed on the server meanwhile: every retry of an upload goes through the same check, and the server's version is kept as the cloud copy.
• lordos-rclone: rclone's official release binary v1.75.2 for amd64 and arm64, unmodified, at `/usr/lib/lordos/rclone/rclone

An update for 0.8.8 to 0.8.8.3 through Store → Updates and apt: the lordos package changes, with the 13 issues reported on GitHub since 0.8.8.3 (#28 to #40), a redesigned Remote Desk with sound, single sign-on for Fortinet VPNs and a Balance control for sound. Thanks to everyone who opened an issue. The installer's manual partitioning (#31) lives in the ISO and reaches people with the next one.

Added

• Calendar and Contacts: Add Account… (#32). Under the calendar list and the address books, it opens Mail's account sheet in CalDAV / CardDAV mode with a Service choice: Other server (server URL, an optional separate contacts URL, user name, password, and Calendars / Contacts switches) or a built-in preset for a large provider's calendars and contacts, which asks only for the account's email and an app-specific password and fills in both addresses. A provider that allows its calendars and contacts only over OAuth is listed as not available yet, with Add Account disabled, until LordOS has a registered sign-in (what to register is in docs/MAIL.md). Passwords go to the keyring, as for mail accounts.
• Calendar and contacts sync: contacts on their own address (an account's carddav URL, with /.well-known/carddav discovery), and calendar and address book homes given as absolute URLs on another host of the provider (pNN-… hosts with an explicit :443), which the earlier discovery ignored. Accounts added before from Mail's preset for that provider get the contacts address once, so their contacts start syncing.
• Calendar and contacts sync: conflicts keep your version. When an event, to-do or contact changed both here and on the server (412), or the server refuses a change for good, the server's version stays in the synced calendar or address book and yours is saved, with a new UID, in a calendar, reminders list or address book on this computer; a notification ("Changed on another device too") names the item and where the copy is. A server that answers 401, 408, 429 or 5xx to an upload no longer drops the change: it waits for the next sync. Tested against Radicale 3.5: offline edits of an event and a contact that changed on the server meanwhile, a new event uploaded, a contact deleted on the server, a cache from 0.8.8.3 updated without downloading anything again. mail-test adds checks for href resolution with hostile input, discovery answers, the sync plan, upload outcomes and the copy's new UID on a repeating event with a moved occurrence.
• Settings → Sound: a Balance control for stereo outputs (left ↔ right, with Center), for a weak channel on a headset adapter or one-sided hearing; it is kept with the output's volume and survives restarts.
• Remote Desk, redesigned: a sidebar with Favorites and Devices, cards with a picture of each computer's last session (taken a few seconds after every connection, kept only on this computer) or a list, sections by group, sort, a filter, search, and a ⋯ menu and a star on each card. Each connection opens its own window.
• Remote Desk: saved credentials (user name, optional domain and display name; the password only in the keyring) chosen per computer, or "Ask When Required"; a password typed at sign-in is saved only once the computer accepts it. Remote Desk Settings (❖,) with General, Resolutions, Credentials and Groups.
• Remote Desk: sound from the remote computer over RDP, played on this computer (or left on the remote one, or none), through LordOS's own audio path; the helper stays sandboxed.
• Remote Desk: reconnect when an RDP connection drops, administrative sessions, the remote desktop's scale, color quality, custom resolutions, swapped mouse buttons, and import and export of .rdp files (never with a password).
• Fortinet VPN with single sign-on: Settings → Network → VPN → Fortinet has an Authentication choice, Username and password or **Single sign-

An update for 0.8.8, 0.8.8.1 and 0.8.8.2 through Store → Updates and apt: only the lordos package changes, with the fixes and ideas reported on GitHub since 0.8.8. Thanks to everyone who opened an issue. It also brings everything in 0.8.8.2 (Italian, preferred languages, the Raspberry Pi 500 in the Imager), which was not published on its own.

Added

• The system file dialog has a List / Thumbnails switch in its toolbar, so pictures can be chosen by how they look (Settings → Wallpaper, Notes' images and every other app that uses the dialog). A dialog that takes only pictures opens in Thumbnails; the choice is remembered. Thumbnails load in the background for the files in sight, and other files show their type icon (#22)
• Desktops: rename a desktop by double-clicking its name in the Overview, from its right-click menu (Rename…) or in Settings → Desktop & Dock → Names; the name shows in the indicator, the Overview, Move to Desktop and the window lists, and an empty name goes back to "Desktop N". Reorder desktops by dragging them along the Overview's strip (or Move Left / Move Right in the same menu); their windows move with them. Names and order are kept across sessions (#15)
• An on-screen level indicator for the volume, mute, screen brightness and keyboard-light keys: a rounded translucent panel near the bottom of the screen with an icon and a segmented bar, shown for 1.5 s after each press (a held key keeps it up), in Lord Flow and Lord Classic, light and dark. With Reduce motion it appears and goes without a fade (#24).
• Settings → Energy: shorter sleep times, 10 and 20 min on the power adapter and 5 and 10 min on battery (#17).

Fixed

• Screenshots: a window picked with ❖⇧4 then Space, or an area, came out cropped at a display scale above 100 % (the selection was in logical pixels and the capture is at the display's full resolution). The whole window is captured now, at any scale (#19).
• A maximized window clicked to bring it forward shrank to its own size: the slightest pointer movement during the click counted as dragging it out. It now has to move a few pixels with the button held first, in both themes and for apps that draw their own title bar (#19).
• A full-screen screenshot showed a GPU-drawn app's window (a third-party browser, for example) as an empty frame with its shadow: its content is now read back from the GPU for the capture (#19).
• Mail: some messages, mostly newsletters, didn't open and showed bad-json. Their HTML layout nests tables several levels deep, and the check that lord-server makes on every reply of the mail helper stopped at 32 levels. It now accepts the depth the HTML view can produce. Also: a NUL byte can no longer cut a message's text short, a reply too large to show says so ("This message is too large to show here") instead of breaking the event queue, and a message that still can't be shown says so in your language (#18).
• A black screen after logging in again when the screen had locked by itself: the session missed the notice that it had left the screen (it arrived together with the closed connection) and then ignored the screen when it was lent back. The notice is now read before the connection is closed, and a session lent the screen again while it thinks it is still shown leaves the old one first.
• After an update that changes the Store's package list format (0.8.8.2 did, for Italian names), the Store showed only the LordOS catalog until the next check, up to 5 minutes later and only with automatic checks on. The list is now rebuilt 20 seconds after logi