View source for OPENWEBUI UPGRADE v0.6.34.md

OPENWEBUI_UPGRADE_v0.6.34.md

Ledger ID: OPENWEBUI_UPGRADE_v0.6.34

Date: 2025-10-16

Operator: aiadmin@helix

Scope: Upgrade Open WebUI to v0.6.34 (Ollama unchanged) and verify Knowledge file hashes + JWT 4-week default.
----

== Components ==
Service | From | To | Notes

openwebui | v0.6.33 | v0.6.34 | New: per-file hash, JWT 4w default

ollama | (unchanged: latest) | (unchanged: latest) | No change

Compose project: /home/aiadmin/ai (services: ollama, openwebui, qdrant, memory)
----

== Change Summary ==

# Pinned Open WebUI to v0.6.34 via compose override.
# Enabled API Key auth (already ON).
# Created & used a user API key to access APIs.
# Verified Knowledge API file hash by uploading a file and attaching it to a KB.
# Captured a snapshot + proof JSON for the ledger.

----

== Pre-Checks ==
cd /home/aiadmin/ai

docker compose ls

docker compose config --services

docker inspect ai-openwebui-1 --format '<nowiki>{{.Config.Image}}</nowiki>'

= Expect ghcr.io/open-webui/open-webui:v0.6.34 after upgrade =
----

== Upgrade Steps ==

=== 1) Pin Open WebUI to v0.6.34 ===
cp docker-compose.override.yml docker-compose.override.yml.bak.$(date +%s)

cat > docker-compose.override.yml <<'YAML'

services:

openwebui:

image: ghcr.io/open-webui/open-webui:v0.6.34

YAML

docker compose pull openwebui

docker compose up -d openwebui

=== 2) Confirm running version ===
docker inspect ai-openwebui-1 --format '<nowiki>{{.Config.Image}}</nowiki>'

docker inspect ai-openwebui-1 --format '<nowiki>{{index .Config.Labels "org.opencontainers.image.version"}}</nowiki>' || true

docker exec -it ai-openwebui-1 sh -lc 'printf "%s\n" "$APP_VERSION"'

Expected: v0.6.34
----

== API Key setup ==
Ensure “Enable API Key” is ON in Admin → Authentication.

Retrieve or generate a user API key from Account → API Keys or User Info.

export OWUI_URL="<nowiki>http://localhost:3000</nowiki>"

export OWUI_TOKEN="sk-<your_user_api_key>"

curl -s -H "Authorization: Bearer $OWUI_TOKEN" -H "Accept: application/json" "$OWUI_URL/api/models" | jq '.data[0]'
----

== Feature Verification — Knowledge File Hash ==
Knowledge Base: Helix TTD

KBID: 87e10de1-f19e-4da3-955b-b0ca642b7990

=== A) Upload file → get file_id ===
echo "hello from helix" > /tmp/helix_test.txt

export FILE=/tmp/helix_test.txt

curl -s -f -H "Authorization: Bearer $OWUI_TOKEN" -H "Accept: application/json" -F "file=@$FILE" "$OWUI_URL/api/v1/files/" | tee /tmp/owui_upload.json

export FILE_ID=$(jq -r '.id // .file.id' /tmp/owui_upload.json)

echo "FILE_ID=$FILE_ID"

=== B) Attach file to KB ===
export KBID="87e10de1-f19e-4da3-955b-b0ca642b7990"

curl -s -f -H "Authorization: Bearer $OWUI_TOKEN" -H "Content-Type: application/json" -d "{"file_id":"$FILE_ID"}" "$OWUI_URL/api/v1/knowledge/$KBID/file/add" | jq .

=== C) Verify per-file hash ===
curl -s -H "Authorization: Bearer $OWUI_TOKEN" "$OWUI_URL/api/v1/knowledge/$KBID" | jq '.files | map({name,hash,id})'

Expected example:

[ { "name": "helix_test.txt", "hash": "0527936a20d7ee725e70d38ca4569dae651ca87dc75d91b78ed47b1c5a60d876", "id": "e273b2ee-006c-4548-b1e5-1d294ad40b84" } ]
----

== Snapshot & Proof ==
TS=$(date +%F_%H%M%S)

mkdir -p "$HOME/helix_backups"

curl -s -H "Authorization: Bearer $OWUI_TOKEN" "$OWUI_URL/api/v1/knowledge/$KBID" | jq '.files | map({name,hash}) | sort_by(.name)' > "$HOME/helix_backups/kb_${KBID}''$TS.json"''

''echo "Saved: $HOME/helix_backups/kb''${KBID}_$TS.json"

cat > "$HOME/helix_backups/OPENWEBUI_0.6.34_proof_${TS}.json" <<JSON

{

"component": "open-webui",

"version": "0.6.34",

"timestamp": "$TS",

"kb_checked": "$KBID",

"verified_hashes": ["0527936a20d7ee725e70d38ca4569dae651ca87dc75d91b78ed47b1c5a60d876"],

"notes": "Upgrade verified. JWT default expiry = 4 weeks. Ollama unchanged; MinerU available."

}

JSON
----

== Post-Checks ==
JWT Expiration: Admin → Authentication shows “4w” and warnings on “-1”.

UI/UX: Sidebar expansion reduces redundant API calls; thicker scrollbar visible.

Health:

docker ps --format 'table <nowiki>{{.Names}}</nowiki>\t<nowiki>{{.Image}}</nowiki>\t<nowiki>{{.Status}}</nowiki>' | grep -E 'openwebui|ollama'
----

== Rollback (if needed) ==
cp docker-compose.override.yml.bak.* docker-compose.override.yml

docker compose pull openwebui

docker compose up -d openwebui
----

== Signature ==
ledger_anchor: OPENWEBUI_UPGRADE_v0.6.34

executed_by: aiadmin@helix

signature: <ed25519 placeholder>