Updates that stage, verify, and roll back
NexaPanel treats upgrades as a first-class, reversible operation — not a re-install.
1 · Check
The panel shows installed-vs-latest from a trusted release manifest, with the release date and artifact checksums.
2 · Prepare
The agent fetches the trusted manifest, backs up first, downloads and SHA-256-verifies artifacts, and stages them offline. The live panel stays online.
3 · Apply
A controlled swap of the panel tree, idempotent migrations, restart and health-check — with automatic rollback on failure.
Why it's safe
Daemon is the upgrade authority
The agent derives every artifact URL and checksum from its own fetch of the fixed release endpoint — a caller-supplied URL or checksum is never honored.
Reversible, with retained assets
Apply keeps the previous tree as a rollback asset and auto-rolls-back on any failure. Rollback assets are retained, not deleted.
Never a force reinstall
install.sh --force is not used for upgrades — prepare verifies checksums and stages offline; apply performs a controlled swap.
Operator-gated activation
Privileged agent activation stays under explicit operator control.
Updates you can trust
See the Update Center flow in the docs, or watch it in the live demo.