https://raw.githubusercontent.com/OrcVole/lore-cloudron/main/CloudronVersions.json
Description
0.10.0
Lore is a centralised, content-addressed version control system built by Epic Games for very large binary assets: the kind of files that make ordinary version control fall over. It is written in Rust, MIT licensed, and designed for teams working with game and entertainment content measured in gigabytes rather than kilobytes.
This is a headless server
Lore has no web interface, and this package does not pretend otherwise. The server is driven entirely by the lore command-line client and the language SDKs. If you are looking for something to click around in, this is not it. What you get is a fast, authenticated-optional data plane that a machine can drive.
That is the correct shape for this kind of service rather than a shortcoming. Upstream's roadmap does list a web client as committed for 2027, with a VS Code plugin in progress before that, so a browser surface is coming; it simply is not here yet.
How clients reach it
Two public endpoints share port 41337, one over TCP and one over UDP, because they are different protocols:
- QUIC over UDP 41337 is the high-performance data plane, used for pushing and cloning content.
- gRPC over TCP 41337 is the full service API: administration, storage, revisions, repositories, environments, locks and notifications.
Both terminate their own TLS using the certificate Cloudron manages for this application, so an ordinary lore client trusts the server with no manual configuration and no certificate wrangling.
A third port, HTTP 41339, serves only a health check and is what the Cloudron dashboard talks to.
What it stores, and where
Content is addressed by BLAKE3 hash and compressed with Zstandard. The package pins all three stores (immutable content fragments, mutable branch pointers, and locks) inside the application's data directory, so everything is captured by Cloudron's backups. This matters more than it sounds: left unconfigured, Lore writes its stores into the system temporary directory, which a reboot can clear.
Before you install
The data plane ships without authentication. Lore supports JWT verification against a JWKS endpoint, but it is disabled in every configuration upstream ships, and this package does not invent credentials for you. Anyone who can reach port 41337 can read and write your repositories. Read the post-installation notes before exposing this to an untrusted network.
Lore is pre-1.0. Upstream commits that content you commit now stays readable by every future release, so your history is not at risk, but APIs and protocols can still change before 1.0.
Recent Changes
Upstream EpicGames/lore 0.9.0 to 0.10.0.
Client-facing breaking change: partial-hash revision identifiers are refused as
NotSupported. Name revisions by their full 64-character hash,[branch]@<number>,[branch]@LATESTor<branch>@<hash>Renamed setting:
connection_message_limitunder[server.quic]and[server.quic_internal]is nowstream_message_limitand applies per stream. This package does not set it; if you set it in your own configuration, rename it or it is silently ignoredAuth: authorisation moves to OIDC and OAuth 2.0;
[server.auth]gains new fields (permission_claim, resource_claim, identity_claim, resource_id_template, resource_wildcard, baseline_access) withjwt_issuernow accepting a list. Opt-in only, no action required if auth is not configuredConfig:
lock_service.max_encoding_message_sizemoves under[server.grpc_public_services.lock_service.general]. No action needed as our local.toml does not customise this keyStorage: Oodle is refused for new fragments; existing Oodle content still reads with lazy re-encoding to Zstd
New settings with sensible defaults:
permit_timeout_ms(default 100ms) under[server.quic]and[server.quic_internal], andconnection_inflight_limitBase image cloudron/base 5.0.0 to 5.1.0: the Ubuntu 24.04.4 point release, with its OS security
updates. Same Ubuntu 24.04 release and glibc 2.39.