# PGSTY SILO Documentation

> Documentation entry point for SILO 20261109, Console 2.7.0, mcli 20261109, silo-pkg 3.16.0, and KES 20261026.

---

LLMS index: [llms.txt](/llms.txt)

---

Use the sidebar to browse [Operations](/operations/), [Administration](/administration/), [Developers](/developers/), [Command & Settings Reference](/reference/), [Compatibility](/compatibility/), and [Release Notes](/blog/release/), or start with the [Download & Install](/download/) matrix.

<p>This site documents <strong><a href="/blog/release/silo-20261109/">SILO 20261109</a></strong>, embedded and standalone <strong><a href="/blog/release/console-2.7.0/">Console 2.7.0</a></strong>, <strong><a href="/blog/release/mcli-20261109/">mcli 20261109</a></strong>, <strong><a href="/blog/release/pkg-3.16.0/">silo-pkg 3.16.0</a></strong>, and the optional external key service <strong><a href="/blog/release/silo-20261026/#kes">KES 20261026</a></strong>, all built with Go 1.27.3. Review the <a href="/compatibility/versions/">component matrix</a> and <a href="/compatibility/server/#maintenance-20261109">20261109 upgrade checks</a> before upgrading (updating standalone <code>mcli</code> or Console does not replace components embedded in an older Server binary).</p>
<div class="td-callout td-callout--warning" role="note">
  <div class="td-callout__title"><i class="td-callout__icon fa-solid fa-triangle-exclamation" aria-hidden="true"></i><span class="td-callout__label">Warning</span></div>
  <div class="td-callout__body">
<p><strong>SILO is a MinIO fork maintained by the Pigsty community.</strong> It is not affiliated with, endorsed by, or sponsored by MinIO, Inc. “MinIO” is a trademark of MinIO, Inc., used here only to identify the upstream project. See <a href="/about/attribution/">Attribution</a> for source and licensing details.</p>
  </div>
</div><p>SILO gives existing MinIO deployments an open release and security-maintenance path while preserving the S3 API, configuration, and on-disk storage contracts that make migration practical. This site covers installation, migration, administration, development, releases, and compatibility boundaries.</p>
<h2 id="quickstart">Quickstart<a class="td-heading-self-link" href="#quickstart" aria-label="Link to this heading"></a>
</h2>
**Docker**

The commands below pin [Server 20261109](/blog/release/silo-20261109/#delivery). Example credentials are for local evaluation only.

<h3 id="quickstart-start">Start SILO<a class="td-heading-self-link" href="#quickstart-start" aria-label="Link to this heading"></a>
</h3>
<div class="td-code td-code--untitled" id="td-code-7e884e68-fence-0" data-td-code data-td-code-auto-id
     data-td-language="shell" data-td-line-count="7">
  <div class="td-code__viewport" id="td-code-7e884e68-fence-0-viewport" data-td-code-viewport><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">docker run -d --name silo <span class="se">\
</span></span></span><span class="line"><span class="cl">  -p 9000:9000 -p 9001:9001 <span class="se">\
</span></span></span><span class="line"><span class="cl">  -e <span class="nv">MINIO_ROOT_USER</span><span class="o">=</span>silo-admin <span class="se">\
</span></span></span><span class="line"><span class="cl">  -e <span class="nv">MINIO_ROOT_PASSWORD</span><span class="o">=</span>replace-with-a-strong-secret <span class="se">\
</span></span></span><span class="line"><span class="cl">  -v silo-data:/data <span class="se">\
</span></span></span><span class="line"><span class="cl">  docker.io/pgsty/silo:RELEASE.2026-11-09T00-00-00Z <span class="se">\
</span></span></span><span class="line"><span class="cl">  server /data --console-address :9001</span></span></code></pre></div></div>
</div>
<h3 id="quickstart-check">Check readiness<a class="td-heading-self-link" href="#quickstart-check" aria-label="Link to this heading"></a>
</h3>
<div class="td-code td-code--untitled" id="td-code-7e884e68-fence-1" data-td-code data-td-code-auto-id
     data-td-language="shell" data-td-line-count="3">
  <div class="td-code__viewport" id="td-code-7e884e68-fence-1-viewport" data-td-code-viewport><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">docker <span class="nb">exec</span> silo silo healthcheck ready
</span></span><span class="line"><span class="cl">docker <span class="nb">exec</span> silo mcli <span class="nb">alias</span> <span class="nb">set</span> <span class="nb">local</span> http://127.0.0.1:9000 silo-admin replace-with-a-strong-secret
</span></span><span class="line"><span class="cl">docker <span class="nb">exec</span> silo mcli mb local/demo</span></span></code></pre></div></div>
</div>
<p><code>silo healthcheck ready</code> confirms the local HTTP listener (plus KMS and etcd when configured), and can return <code>0</code> before storage or IAM finishes loading; see <a href="/operations/monitoring/healthcheck-probe/#native-probe">healthcheck probes</a>. Creating or reading a bucket through <code>mcli</code> confirms the S3 data path.</p>
<h3 id="quickstart-console">Open the Console<a class="td-heading-self-link" href="#quickstart-console" aria-label="Link to this heading"></a>
</h3>
<p>Open <a href="http://127.0.0.1:9001">http://127.0.0.1:9001</a> and sign in with the root credentials above. Before production use, enable TLS, configure unique credentials, pin a verified image tag or digest, and test backup restoration.</p>


See the [container deployment guide](/operations/deployments/baremetal-deploy-minio-as-a-container/) for persistent host paths, distroless images, service management, and production considerations.

**Linux packages**

Use [Download & Install](/download/#server) to select the RPM, DEB, APK, or standalone archive for your architecture. Published release assets include SHA-256 checksums, SPDX SBOMs, Sigstore bundles, and build-provenance attestations.

Native packages install the server as `/usr/bin/silo`; the service retains the `MINIO_*` environment-variable contract. Review the [binary and package compatibility notes](/compatibility/binary/) before replacing an existing `minio` package.

**Existing MinIO**

Read the [migration guide](/compatibility/migration/) and [20261109 upgrade checks](/compatibility/server/#maintenance-20261109) before changing images or binaries. Preserve data volumes and configuration, drain active batch jobs, stop every node running the old binary, and start every node on the same pinned SILO release. Never run `docker compose down -v` on volumes you intend to keep.

**Kubernetes**

Deploy SILO with the maintained standalone [`helm/silo` chart (`7.0.4`)](https://github.com/pgsty/silo/tree/RELEASE.2026-11-09T00-00-00Z/helm/silo), which defaults to `pgsty/silo:RELEASE.2026-11-09T00-00-00Z` and `pgsty/mc:RELEASE.2026-11-09T00-00-00Z` (pass `--set image.tag=RELEASE.2026-11-09T00-00-00Z` explicitly when running `helm upgrade --reuse-values`). Alternatively, override the tenant image in the archived MinIO Operator `v7.1.1` chart following the [Tenant Helm guide](/operations/deployments/k8s-deploy-minio-tenant-helm-on-kubernetes/), treating that Operator release as a frozen compatibility baseline.
