Stable-20250121-rc3

This is a bugfix and feature release candidate for the next proper release. It extends the previous release candidates:

• Fix EPEL repo setup on Rocky to make mod_auth_openid build and install again
• Added more self-tests in CI to also test basic user web page access and sftpsubsys
• Restructure file system layout to avoid container init issues of state (PR75)
• Add mail setup support in containers to allow delivery of cron mail, etc.
• Added cron job to notify migoid (i.e. external) users about approaching access expiry
• Fix a pyftpdlib dependency which broke on python 2.x and some early 3.x versions
• Upgrade mod auth OpenID Connect dependency a.o. for a security fix
• Formally switched default to Rocky9 containers
• Formally switched to the main and next branches of migrid
• Fixes to allow build while e.g. Lustre is mounted
• Key+certificate improvements to allow fully automatic fingerprint updates e.g. with LetsEncrypt (PR77+78)
• Added PUBLIC_ALIAS_DOMAIN variable to support also exposing front page e.g. on base FQDN
• Added OPENSTACKSDK_VERSION_OVERRIDE variable to allow integration with legacy OpenStack installations (PR79)
• Make sure migrid services run with same locale settings as the rest (PR80) to avoid some ascii vs utf8 encoding issues.
• Added some more documentation on variables

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.

Stable-20250110-rc2

This is a bugfix and feature release candidate for the next proper release. It extends the previous release candidate:

• Fix EPEL repo setup on Rocky to make mod_auth_openid build and install again
• Added more self-tests in CI to also test basic user web page access and sftpsubsys
• Restructure file system layout to avoid container init issues of state (PR75)
• Add mail setup support in containers to allow delivery of cron mail, etc.
• Added cron job to notify migoid (i.e. external) users about approaching access expiry
• Fix a pyftpdlib dependency which broke on python 2.x and some early 3.x versions
• Upgrade mod auth OpenID Connect dependency a.o. for a security fix
• Formally switched default to Rocky9 containers
• Formally switched to the main and next branches of migrid
• Fixes to allow build while e.g. Lustre is mounted
• Key+certificate improvements to allow fully automatic fingerprint updates e.g. with LetsEncrypt (PR77+78)
• Added PUBLIC_ALIAS_DOMAIN variable to support also exposing front page e.g. on base FQDN
• Added some more documentation on variables

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.

This pre-release is compatible and tested with the corresponding migrid BRANCH-20241213 pre-releases.

Stable-20241213-rc1

This is a minor bugfix and feature release candidate for the next proper release.

• Fix EPEL repo setup on Rocky to make mod_auth_openid build and install again
• Added more self-tests in CI to also test basic user web page access and sftpsubsys
• Restructure file system layout to avoid container init issues of state (PR75)
• Add mail setup support in containers to allow delivery of cron mail, etc.
• Added cron job to notify migoid (i.e. external) users about approaching access expiry
• Fix a pyftpdlib dependency which broke on python 2.x and some early 3.x versions
• Upgrade mod auth OpenID Connect dependency a.o. for a security fix
• Formally switched default to Rocky9 containers
• Formally switched to the main and next branches of migrid
• Added some more documentation on variables

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.

This pre-release is compatible and tested with the corresponding migrid BRANCH-20241213 pre-releases.

Stable-20241023

Minor feature release.

• Exposed WWWSERVE_MAX_BYTES env to enforce a limit on the size of responses served with in-memory caching
• Exposed STORAGE_PROTOCOLS env to specify which protocols to advertize (sftp, ftps, webdavs)
• Added some more documentation on variables

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.

This release is compatible and tested with the corresponding migrid BRANCH-20241023 releases.

Stable-20240917

Minor bugfix release.

• Fix build on Rocky 8 (and deprecated CentOS 7) : address pyftpdlib-2.x python2 incompatibility
• More OpenStack Cloud integration exposed
• Fix an OpenID Connect issue in the integration with Jupyter
• Fix format of FTPS_PASV_PORTS to avoid build error now that it's actually used
• Exposed PERMANENT_FREEZE env to select Archive flavors to write-protect upon Finalize
• Added some more documentation on variables

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.

This release is compatible and tested with the corresponding migrid BRANCH-20240808 releases and should also be fit for the upcoming September release.

Stable-20240917-RC1

Minor bugfix release.

• Fix build on Rocky 8 (and deprecated CentOS 7) : address pyftpdlib-2.x python2 incompatibility
• More OpenStack Cloud integration exposed
• Fix an OpenID Connect issue in the integration with Jupyter
• Fix format of FTPS_PASV_PORTS to avoid build error now that it's actually used
• Added some more documentation on variables

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.

This release is compatible and tested with the corresponding migrid BRANCH-20240808 releases and should also be fit for the upcoming September release.

Stable-20240808

Feature and bugfix release.

• Initial Lustre quota integration with modern Lustre backend storage
• Integrate status-events.json for status pop-up on user pages and status page linked from default front page
• Expose fundamental OpenStack cloud integration to let users manage instances on any stand-alone OpenStack
• Fix: make sure to install proper dnspython for email validation in python2
• Flexible docker registry in order to allow setups with a local registry e.g. to split up container build and run hosts
• Integrate signing user certificates at your own custom CA when users request it through certificate sign up form
• Docker and docker compose plug in updates to improve support for the various podman and docker compose combos
• New AUTO_ADD_USER_PERMIT option to control which IDP-authenticated users can sign up without operator interaction
• Several updates in relation to keeping legacy CentOS 7 container mostly functional even after EoL
• Drop redundant gdp.log and add rsyslog-gnutls for encrypted remote syslogging from containers
• Removed postfix container - mail should be handled by the container host

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.

This release is compatible and tested with the corresponding migrid BRANCH-20240808 releases.

Stable-20240611

Minor feature and bugfix release.

1. expose new sign up handlers for unsupported characters
2. proper docker/podman clean up when using implicit migrid branch select though Dockerfile

Stable-20240605

Bugfix release to address recent issues with:

1. pip certificate errors crashing build of pdfkit
2. New rsyslog imjournal conf option in RockyX breaking the rsyslog setup

(Note: this was originally incorrectly released as Stable-20240505)

Stable-20240521

Feature and bugfix release to mainly address recent issues with pip certificate errors crashing build. Explicitly point pip to the system installed ca-certificates in order to correctly verify authenticity of default python package index (pypi) hosts.
Prevent issues with Lustre mounts locking up during podman (and possibly docker) restarts by using 'host' network for the recent volume init container, too. It doesn't really need net at all for now, but the default virtual container network interferes with LNet.

Added initial Lustre quota support on user and vgrid/workgroup/project folders.

Add fundamental WAYF OpenID Connect integration as documented on
https://docker-migrid.readthedocs.io/en/latest/sections/getting-started/case-studies/rocky8.html#wayf-openid-connect-sign-up-and-log-in