Merge remote-tracking branch 'origin/main' into codex/release-prep-20260916

Author: Vonng

AGENTS.md

@@ -16,6 +16,12 @@ silo.pgsty.com —— SILO 官网（Hugo）。给 AI agent 的项目约定，改
 
 看到它指向 `pgsty/silo` 时，那是回归，改回 `pgsty/minio`。
 
+## 容器分发
+
+SILO 官方容器镜像统一使用 Docker Hub：`docker.io/pgsty/silo`、
+`docker.io/pgsty/mc`、`docker.io/pgsty/silo-console`。发布说明、安装命令与链接
+统一指向 Docker Hub。
+
 ## 兼容性与依赖口径
 
 保留 SILO、SILO Console、mcli 与上游 MinIO/MC 的兼容性说明，兼容目标是

content/blog/release/console-2.0.0.md

@@ -32,7 +32,7 @@ This console originated as MinIO Console and was carried forward by the [Alevsk/
 The version jumps from v1.9.1 to v2.0.0 because these public contracts change together:
 
 - the product is now uniformly **SILO Console**, with the primary repository at [`pgsty/silo-console`](https://github.com/pgsty/silo-console);
-- the release binary changes from `console` to `silo-console`, and the container image moves to `ghcr.io/pgsty/silo-console`;
+- the release binary changes from `console` to `silo-console`;
 - release assets, checksums, package metadata, CLI descriptions, and project links all switch to SILO;
 - in-product identity, help entry points, copyright attribution, source offers, and trademark notices are re-established.
 
@@ -45,11 +45,12 @@ The migration strategy is "clear external identity, restrained internal compatib
 | Product          | Console / legacy MinIO Console    | **SILO Console**                            |
 | Repository       | `georgmangold/console`            | `pgsty/silo-console`                        |
 | Release binary   | `console`                         | `silo-console`                              |
-| Container image  | `ghcr.io/georgmangold/console`    | `ghcr.io/pgsty/silo-console`                |
 | Binary assets    | `console-<os>-<arch>`             | `silo-console-<os>-<arch>`                  |
 | Checksums        | `console_<version>_checksums.txt` | `silo-console_<version>_checksums.txt`      |
 | Website and docs | upstream / previous maintainer    | `silo.pgsty.com` and `silo.pgsty.com/docs/` |
 
+For container deployments, use [`pgsty/silo-console` on Docker Hub](https://hub.docker.com/r/pgsty/silo-console). See the [Console v2.4.1 release notes](/blog/release/console-2.4.1/#delivery) for the current version and pull command.
+
 CLI authorship, usage text, and project descriptions now identify Pigsty and SILO Console. DEB/RPM/APK vendor, maintainer, homepage, description, and license metadata are updated accordingly; the executable installs to `/usr/local/bin/silo-console`.
 
 ## Deliberately Retained Compatibility Identifiers {#retained-compatibility-contracts}

content/blog/release/console-2.0.0.zh.md

@@ -32,7 +32,7 @@ SILO Console 2.0.0 是这套对象存储管理控制台以独立项目身份发
 版本号从 v1.9.1 提升到 v2.0.0，主要是因为以下对外契约同时发生变化：
 
 - 产品名称统一为 **SILO Console**，主仓库迁移到 [`pgsty/silo-console`](https://github.com/pgsty/silo-console)；
-- 正式发布二进制从 `console` 改为 `silo-console`，容器镜像迁移到 `ghcr.io/pgsty/silo-console`；
+- 正式发布二进制从 `console` 改为 `silo-console`；
 - 发布资产、校验和、软件包元数据、命令行说明与项目链接全部切换到 SILO；
 - 界面中的项目身份、帮助入口、版权归属、源代码供应与商标说明重新建立。
 
@@ -45,11 +45,12 @@ SILO Console 2.0.0 是这套对象存储管理控制台以独立项目身份发
 | 产品             | Console / MinIO Console 的遗留表述     | **SILO Console**                          |
 | 源码仓库           | `georgmangold/console`            | `pgsty/silo-console`                      |
 | 正式二进制          | `console`                         | `silo-console`                            |
-| 容器镜像           | `ghcr.io/georgmangold/console`    | `ghcr.io/pgsty/silo-console`              |
 | 二进制资产          | `console-<os>-<arch>`             | `silo-console-<os>-<arch>`                |
 | 校验和文件          | `console_<version>_checksums.txt` | `silo-console_<version>_checksums.txt`    |
 | 网站与文档          | 上游或前维护者入口                         | `silo.pgsty.com` 与 `silo.pgsty.com/docs/` |
 
+容器部署使用 [Docker Hub 的 `pgsty/silo-console`](https://hub.docker.com/r/pgsty/silo-console)，当前版本及拉取命令见 [Console v2.4.1 发布说明](/zh/blog/release/console-2.4.1/#delivery)。
+
 命令行程序的作者、用途、帮助文本和项目描述已切换为 Pigsty 与 SILO Console。DEB/RPM/APK 软件包的厂商、维护者、主页、描述与许可证元数据相应更新，可执行文件安装到 `/usr/local/bin/silo-console`。
 
 ## 刻意保留的兼容标识 {#retained-compatibility-contracts}

content/blog/release/console-2.4.1.md

@@ -83,13 +83,19 @@ MinIO/MC compatibility is best effort.
 
 ## Packages and verification {#delivery}
 
+The official container image is on [Docker Hub](https://hub.docker.com/r/pgsty/silo-console), with Linux amd64 and arm64 support:
+
+```sh
+docker pull docker.io/pgsty/silo-console:v2.4.1
+```
+
 The release contains **44 assets**: binaries and bundles, DEB/RPM/APK packages,
 source, legal notices, SPDX SBOMs, a checksum manifest and its Sigstore bundle.
 Checksums and the OCI image use keyless Cosign signatures; GitHub provenance
-binds artifacts to the tagged source and release workflow. The image's `latest`
+records the build workflow and tagged release inputs. The image's `latest`
 tag advances only after the published release passes signature, provenance,
 SBOM and anonymous-access checks. See the
-[release contract](https://github.com/pgsty/silo-console/blob/v2.4.1/docs/release-contract.md)
+[release contract](https://github.com/pgsty/silo-console/blob/8ba8a266a503f13037931747256c5a349af09124/docs/release-contract.md)
 for online and offline verification.
 
 Linux packages retain `minio-console.service`, `console-user` and
@@ -98,7 +104,7 @@ Linux packages retain `minio-console.service`, `console-user` and
 **Before restarting an existing installation**, migrate certificates with the
 documented ownership or retain the old path through `CONSOLE_OPTS`. The installer
 preserves old certificates and keys and does not restart the service for you.
-See the [package upgrade instructions](https://github.com/pgsty/silo-console/blob/v2.4.1/systemd/README.md#upgrading-an-installation-with-existing-certificates).
+See the [package upgrade instructions](https://github.com/pgsty/silo-console/blob/6a1802261c6a6f6972b42f347d8d4420ad5d1248/systemd/README.md#upgrading-an-installation-with-existing-certificates).
 
 The exact release source passed the [complete CI matrix](https://github.com/pgsty/silo-console/actions/runs/35071257392),
 [vulnerability checks](https://github.com/pgsty/silo-console/actions/runs/35071257306)

content/blog/release/console-2.4.1.zh.md

@@ -60,15 +60,21 @@ Go 不继承依赖模块的 replacement，需同时复制[标签 README](https:/
 
 ## 软件包与验证 {#delivery}
 
+官方容器镜像发布在 [Docker Hub](https://hub.docker.com/r/pgsty/silo-console)，支持 Linux amd64 与 arm64：
+
+```sh
+docker pull docker.io/pgsty/silo-console:v2.4.1
+```
+
 本次发布有 **44 个附件**：二进制及归档、DEB/RPM/APK 软件包、源码、法律声明、SPDX SBOM、校验清单及 Sigstore 签名包。
-校验清单和 OCI 镜像使用无长期密钥的 Cosign 签名，GitHub 构建溯源将制品绑定到标签源码与发布工作流。
+校验清单和 OCI 镜像使用无长期密钥的 Cosign 签名，GitHub 构建溯源记录构建工作流与对应标签的发布输入。
 镜像的 `latest` 仅在正式 Release 通过签名、溯源、SBOM 和匿名访问检查后推进。
-在线与离线验证方法见[发布契约](https://github.com/pgsty/silo-console/blob/v2.4.1/docs/release-contract.md)。
+在线与离线验证方法见[发布契约](https://github.com/pgsty/silo-console/blob/8ba8a266a503f13037931747256c5a349af09124/docs/release-contract.md)。
 
 Linux 软件包保留 `minio-console.service`、`console-user` 和 `/etc/default/console`。
 服务状态目录为 `/var/lib/silo-console`，证书目录改为 `/etc/silo-console/certs`，停止服务最多等待 90 秒。
 **已有安装重启前**，请按要求迁移证书和权限，或通过 `CONSOLE_OPTS` 保留旧证书路径。
-安装过程保留旧证书与私钥，不会自动重启服务。具体见[软件包升级说明](https://github.com/pgsty/silo-console/blob/v2.4.1/systemd/README.md#upgrading-an-installation-with-existing-certificates)。
+安装过程保留旧证书与私钥，不会自动重启服务。具体见[软件包升级说明](https://github.com/pgsty/silo-console/blob/6a1802261c6a6f6972b42f347d8d4420ad5d1248/systemd/README.md#upgrading-an-installation-with-existing-certificates)。
 
 精确发布源码通过[完整 CI 矩阵](https://github.com/pgsty/silo-console/actions/runs/35071257392)、
 [漏洞检查](https://github.com/pgsty/silo-console/actions/runs/35071257306)和

content/compatibility/console.md

@@ -69,6 +69,8 @@ require pkg downgrades or duplicate APIs.
 
 ## Migration {#migration}
 
+The official image is [`docker.io/pgsty/silo-console`](https://hub.docker.com/r/pgsty/silo-console). Pin `:v2.4.1` for a specific release; `latest` advances after publication and image verification.
+
 An existing MinIO Console deployment upgrades in place. The service unit, service account, and configuration file keep their names, and every `CONSOLE_*` variable is read unchanged, so the usual path is to install the `silo-console` package over the old one and restart.
 
 Two behaviors change on first start and are worth expecting:

content/compatibility/console.zh.md

@@ -65,6 +65,8 @@ colorjson 带入的历史 minio/pkg 传递依赖与维护中的 silo-pkg 策略
 
 ## 迁移 {#migration}
 
+官方容器镜像为 [`docker.io/pgsty/silo-console`](https://hub.docker.com/r/pgsty/silo-console)。固定版本使用 `:v2.4.1`；`latest` 通过正式发布与镜像验证后更新。
+
 已有的 MinIO Console 部署可以原地升级。服务单元、服务账号与配置文件名称都不变，全部 `CONSOLE_*` 变量按原样读取，因此通常的做法是用 `silo-console` 软件包覆盖安装后重启。
 
 有两处行为会在首次启动后改变，值得提前预期：

data/home/metrics.yaml

@@ -1,7 +1,7 @@
 # Remote counters; refresh with: bin/metrics.py
 # docker_pulls sums pgsty/minio (archived, pre-rename) and pgsty/silo.
-github_stars: 3116
-docker_pulls: 808945
+github_stars: 3118
+docker_pulls: 810518
 
 # Editorial counters; maintain these values here.
 security_fixes: 14