Looking for Beta Testers — Anvil Server Management Panel


Recommended Posts

Posted (edited)

I'm looking for beta testers for Anvil, a lightweight, single-binary Linux server management panel. If you're running an Ubuntu-based distro and want an easy way to manage your server from a browser, I'd love your feedback.

What is Anvil?

Anvil gives you a clean web UI for managing your Linux server — services, packages, Docker, files, logs, cron jobs, users, firewall, DNS, endpoint monitoring, and a web terminal. It's a single Go binary with no database, no containers, and no dependencies to install. It authenticates against your system's PAM accounts, so there's no separate user setup.

Screenshots

home.thumb.png.c7e32f085ebdd1a7a470734169fa4211.png

dashboard.thumb.png.9b0205fab7dbe2cc328a54c5648572fb.png

docker.thumb.png.91992e3496ba86efa7e81a175bab21cf.png

packages.thumb.png.ed6d22afca7bf95080dfcfd2f85eca6e.png

sshkeys.thumb.png.84cdf8cfbf6546c5011d314794709b83.pngusers.thumb.png.4a9c50dc83efda29b737af35b71d9bf3.png

 

 

 

Prerequisites

Ubuntu, Debian, Linux Mint, Pop!_OS, or any Ubuntu-derived distribution

PAM development library — required for authentication:

sudo apt install libpam0g-dev

Go 1.24+ — required to build from source:

sudo apt install golang-go

Or install from https://go.dev/dl/ if your distro's version is too old

A user account on the system (Anvil uses your existing Linux login credentials)

How to Install & Run

I will send you a link to the latest binary

Run on any free port

PORT=9005 ./anvil

Then open http://your-server-ip:9005 and log in with your Linux username and password.

What I'm Looking For

  • Does it build and run cleanly on your distro?
  • Any pages that error or don't display correctly?
  • Features that don't work as expected?
  • General UI/UX feedback

 

"any Ubuntu-derived distribution"

That should be any Debian-derived distro. Debian isn't based off Ubuntu. :laugh: 

Anyway, it looks closely like Webmin. But yeah, I don't have a spare computer to run this, sorry.

Ah i just said Ubuntu as thats all i have personally tested on, it should work on any distro really including distros using DNF and Arch based

 

My friend is borrowing my spare laptop for the moment while he moves house, but when he hands it back I'll be sure to take a look. I plan on converting it into a media hub for the house so this could be very useful!

Anvil v0.20-beta — A lightweight, self-hosted Linux server management panel built in Go.

Download: https://gitlab.com/Haggistech/anvil/-/releases/v0.20-beta

Features

  • System Monitoring
  • Real-time dashboard with CPU, memory, disk gauges and system info
  • Live telemetry strip on every page (CPU / Memory / Disk / Uptime)
  • Connection health indicator with red pulse on server disconnect
  • Network overview — interfaces, active connections, open ports, routing table, public IP
  • Service & Container Management
  • Systemd service viewer with start/stop/restart/enable/disable
  • Docker container management with icon actions, logs viewer, image list
  • Process-level control from the web terminal
  • File & Package Management
  • File browser with upload, download, edit, rename, delete
  • Package manager with update detection and install/remove
  • Cron job editor — add, edit, delete scheduled tasks

Security & Access

  • PAM-based authentication with remember username
  • Session idle timeout with countdown warning (auto-logout at 30min)
  • Sudo toggle for privileged operations
  • Firewall (UFW) rule management
  • SSH authorized key management
  • Full audit log — who did what and when

Infrastructure

  • SSL/TLS certificate viewer with expiry tracking and Let's Encrypt/certbot integration
  • Disk management — partitions, SMART health, directory usage scanner
  • DNS management — /etc/hosts and /etc/resolv.conf editor
  • Endpoint monitoring — host:port checks with 12h uptime bars (5min granularity)

Alerts & Backups

  • Notification system — webhook, Discord, Slack, and email (SMTP) channels
  • Alert rules for endpoint down, certificate expiring, and disk full
  • Backup manager — tar and rsync jobs with scheduling, gzip compression, exclude patterns, and one-click restore

UI & Experience

  • Blueprint-style dark theme with JetBrains Mono + Outfit fonts
  • Light theme toggle
  • Quick navigation (Ctrl+K)
  • Custom confirmation modals and toast notifications
  • Right-click context menus on all data pages
  • Web-based terminal

Deployment

  • Single binary, no dependencies (just drop and run)
  • systemd service file included
  • Makefile with build/install/uninstall
  • HTTPS/TLS support
  • Default port: 9006

Anvil v0.21-beta — A lightweight, self-hosted Linux server management panel built in Go.

Download: https://gitlab.com/Haggistech/anvil/-/releases/v0.21-beta

What's new in v0.21-beta

System info page — New /sysinfo page with neofetch-style overview: hostname, OS, kernel, architecture, CPU model, RAM/swap, network interfaces, storage, temperatures, virtualization type, timezone, uptime, and boot time

Config export/import — New /config page to download all Anvil settings (endpoints, notification channels, alert rules, backup jobs) as a single JSON file. Import on another instance with replace or merge mode for easy migration

Alert timeline chart — 30-day stacked bar chart on the Notifications history tab showing alert frequency by type (endpoint down, cert expiring, disk full) with hover tooltips for pattern detection

Anvil v0.22-beta — A lightweight, self-hosted Linux server management panel built in Go.

Download: https://gitlab.com/Haggistech/anvil/-/releases/v0.22-beta

What's new in v0.22-beta

This release is focused entirely on security fixes found during an internal audit.

  • Password injection fix — Newlines are now stripped from passwords before being passed to chpasswd, preventing an authenticated panel user from injecting extra username:password pairs and changing other accounts' passwords
  • Username validation hardened — The regex already used when creating users is now also enforced on delete, modify, lock/unlock, and password change operations, blocking argument injection via crafted usernames
  • GID validated as numeric — Group GID input is now checked to be a valid integer before being passed to groupadd
  • CSRF protection — All authenticated routes now validate the Origin or Referer header on non-GET requests. Logout is enforced as POST-only with the same check, and the logout button and idle auto-logout timer updated accordingly
  • DNS resolv.conf injection fix — Search domain input is now validated against a hostname regex before being written to /etc/resolv.conf, preventing newline injection of fake nameserver entries

 

  • 4 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Windows 11 KB5094126 BSODing, freezing, forcing BitLocker lockout, breaks OneDrive, and more by Sayan Sen Microsoft released Windows 11 KB5094126 and KB5093998 last week as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. While Microsoft has so far not acknowledged any major problems with the release, some users online are running into problems. These range from OneDrive and Dropbox access issues, BitLocker recovery lockouts, to blue screens and BSODs. The most common one seems to be happening with HP systems wherein affected users say they hit 0xc0430001 BSOD (blue screen of death) error code after the KB5094126 update. We wonder if this could be related to the recent bug we covered on HP devices wherein the ongoing Secure Boot certificate updates are leading to similar issues. While we are not certain, users affected by this issue likely need to ensure that the boot.stl file is included on the installation media (such as a USB installer or ISO), if the above-mentioned dynamic updates are deployed. If this file is missing, computers may fail to boot from the installation media and could display the error 0xc0430001. This STL file is used by Secure Boot to verify that the boot files are trusted, so it must match the same Windows version and system architecture. To ensure the file is included, Microsoft recommends using the Update WinPE script, which automatically updates the image and handles the required files. Alternatively, you can manually copy the boot.stl file from the Windows\Boot\EFI folder on a Windows device and place it in the matching folder on your installation media before deploying the updated image. Aside from blue screening some users also note their systems have been freezing following the update. In the case of the OneDrive and Dropbox access issues, a user figured out that there could be a conflict with UAC. He explained: "Okay, so I did some digging, and in our environment KB5094126 breaks OneDrive and Dropbox in Explorer. I went through all our GPOs and found out that the combination of disabling UAC and having my user being a local admin breaks OneDrive in Explorer. ... If I enable UAC again, then it works, even with KB5094126 still installed." Hopefully, Microsoft will look into these issues. Source: Microsoft forum (link1, link2, link3, link4), Reddit (link1, link2, link3)
    • It is when it's a desktop in my house though for a PC that's lightly used and not really important when it is. If it was a laptop, it would be a different story. The real solution is varied and begins starting at post #22 in that thread.
    • Win11Debloat 2026.06.14 by Razvan Serea Win11Debloat is a lightweight, easy to use PowerShell script that allows you to quickly declutter and customize your Windows experience. It can remove pre-installed bloatware apps, disable telemetry, remove intrusive interface elements and much more. The script also includes many features that system administrators and power users will enjoy. Such as a powerful command-line interface, support for Windows Audit mode and the option to make changes to other Windows users. All changes made by Win11Debloat can be easily reversed, and most removed apps can be restored via the Microsoft Store. A full guide on how to undo the changes is available here. Win11Debloat features: Below is an overview of the key features and functionality offered by Win11Debloat. Please refer to the wiki for more information about the default settings preset. Remove a wide variety of preinstalled apps. Click here for more info. Disable telemetry, diagnostic data, activity history, app-launch tracking & targeted ads. Disable tips, tricks, suggestions & ads across Windows. Disable Windows location services & app location access. Disable Find My Device location tracking. Disable 'Windows Spotlight' and tips & tricks on the lock screen. Disable 'Windows Spotlight' desktop background option. Disable ads, suggestions and the MSN news feed in Microsoft Edge. Hide Microsoft 365 ads on the Settings 'Home' page, or hide the 'Home' page entirely. Disable & remove Microsoft Copilot. Disable Windows Recall. Disable Click to Do, AI text & image analysis tool. Prevent AI service (WSAIFabricSvc) from starting automatically. Disable AI Features in Edge. Disable AI Features in Paint. Disable AI Features in Notepad. Disable the Drag Tray for sharing & moving files. Restore the old Windows 10 style context menu. Turn off Enhance Pointer Precision, also known as mouse acceleration. Disable the Sticky Keys keyboard shortcut. Disable Storage Sense automatic disk cleanup. Disable fast start-up to ensure a full shutdown. ...and more. Once you’ve downloaded the Win11Debloat file (Get.ps1), just follow these quick steps: Locate the Get.ps1 script file. Right-click the file and select Run with PowerShell from the context menu. If prompted by User Account Control (UAC), select Yes to grant the script the necessary administrative permissions. Win11Debloat 2026.06.14 changes: This is a minor release that hopefully addresses the false positives in Windows Defender and Bitdefender that prevented users from downloading and/or running Win11Debloat. Refactor Get-RegFileOperations.ps1 to address false positives by @Raphire in #626 Add logging around WinGet app retrieval and increase timeout to 20s by @Raphire Download: Win11Debloat 2026.06.14 | Open Source View: Win11Debloat Home Page | Screenshots 1| 2 Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Still using Microsoft Money 2005 in 2026 here!
  • Recent Achievements

    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      508
    2. 2
      +Edouard
      198
    3. 3
      PsYcHoKiLLa
      139
    4. 4
      ATLien_0
      90
    5. 5
      Steven P.
      82
  • Tell a friend

    Love Neowin? Tell a friend!