## 0.75.3

- **The documented install could not finish unattended.** The first administrator's password is
  typed at a `getpass` prompt, and under `curl ... | sh` stdin is the pipe carrying the script, so
  it raised `EOFError` from inside the container: the install reached a running deployment, a
  migrated database and four healthy services, then died on the last step. It now reads
  `/dev/tty`, the controlling terminal whatever stdin happens to be, and only when stdin is not
  already one. A session with no controlling terminal inherits stdin as before and is told the
  command to finish by hand.
- **A flag given no value named the flag.** It aborted with the shell's own `2: parameter not
  set`, a line number inside a file the operator piped from a URL and cannot read. A wrapped paste
  is enough to reach it.
- **An unwritable `--dir` is refused in the first second**, not after the 303 MB download and both
  image loads. The default `/opt/anchorpoint` needs root on every distribution this supports.
- **The fingerprint prompt is opt in**, behind `--verify-fingerprint`. TLS authenticates the
  download host and the signature still proves the bundle arrived intact, so tampering in transit
  is still caught; neither establishes that the signing key is ours, which is the only thing the
  fingerprint closes. Air-gapped installs, which have no TLS in their path, should always pass it.
  Its absence is printed rather than left to be inferred.
- **The installer prints how to reach the console.** Both ports bind to loopback, so on a remote
  host there is no URL to open until one is forwarded.