Stable-20260702

This is a minor feature and bugfix release:

• Update Apache OpenID Connect module and deps to pull in important security fixes ( #161, #164)
• Harden by only installing library dependencies for enabled features (#158, #162, #163)
• Sync state dir with upstream (#159)
• Implicitly upgrades WebDAVS wsgidav dependency to 4.3.4+ with an important security fix

IMPORTANT: Please note that it is currently necessary to downgrade bcrypt to a 3.x version in the migrid container in order to prevent the return of #116. An example hotfix script to handle exactly that is included in the comments for that issue.

Additional details are available in the complete changelog since last release.

Stable-20260625-rc1

This is a bugfix and feature pre-release in preparation for next actual release:

• Change details will be added here in time for the actual release

Additional details are available in the complete changelog since last release.

Stable-20260502

This is a minor feature and bugfix release:

• Install latest TracTags and skip pytest if Trac is enabled in build (#145)
• License clarification (GPLv2 or later)
• Only include certificate for CA in the OS_CA_CERT_SOURCE_PATH (#153)
• Retire legacy vmachines and vmproxy grid resource support
• Retire legacy sandbox and SSS grid resource support (#154)
• Default to wsgidav-3.x+ for WebDAVS service (#152)
• Integrate trivy image vulnerability scanner in make dockerlint target (#155)
• Retire legacy SVN repo support (#157)

Additional details are available in the complete changelog since last release.

Stable-20260209

This is a feature and bugfix release:

• Drops Rocky 8 and Python 2 support (#133)
• Fix gocryptfs-xray path in containers
• Rework gpg key import to try keyserver protocols in turn for robust handling (#131, #132)
• Implement hotfix integration as outlined in milestone (#130)
• Individual per-container hotfix logs for patching provenance (#136)
• Move storage quota handling into a daemon inside a dedicated container (#137)
• Update Apache OpenID Connect auth module to pull in some recent bugfixes (#138)
• Adjust Trac integration to drop graphviz to make wiki fully functional again (#141)
• Integrate new storage accounting daemon inside a dedicated container (#142)
• Integrate apache mod reqtimeout to foil slowloris-like attacks etc. (#139)

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Stable-20250926

This is a feature and bugfix release:

• Clean up after lustrequota build to reduce resulting image size (#123)
• Adjust SFTP service error verbosity by patching paramiko slightly (#124)
• Switch to github mirror for lustre code in lustrequota (#125)
• Fuse commands in Dockerfile to reduce layer count and avoid hitting hard-coded 127 limit (#126)
• Retire long obsolete image preview support (#127)
• Integrate new janitor service to handle various clean up and account request pruning tasks (#128)

IMPORTANT this may be the last release supporting the Rocky 8 container flavor, as that OS version is out of general support. We no longer maintain the python2 branch of migrid and it will gradually get more painful even to maintain the package dependencies for the python3 branch of migrid there. Please prepare for switching to the Rocky 9 container flavor if you haven't already done so.

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Stable-20250724

This is a minor feature and bugfix release:

• repair UPGRADE_PARAMIKO support on Rocky9 (#115, #116)
• Integrate verifyarchives, importdoi, indexdoi and acctexpire cron jobs (#117)
• Integrate FREEZE_TO_TAPE in build (#118)
• Add missing ENABLE_FREEZE variable used to decide on cron job inclusion (#119)
• Integrate freeze_tape in persistent state (#121)
• Integrate migstats weekly cronjob to populate migadmin Site Stats (#122)

IMPORTANT this may be the last release supporting the Rocky 8 container flavor, as that OS version is out of general support. We no longer maintain the python2 branch of migrid and it will gradually get more painful even to maintain the package dependencies for the python3 branch of migrid there. Please prepare for switching to the Rocky 9 container flavor if you haven't already done so.

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Stable-20250703-rc1

This is a minor bugfix pre-release:

• repair UPGRADE_PARAMIKO support on Rocky9 (#115, #116)

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Stable-20250625

This is a bugfix and feature release:

• repair sftp/webdavs/ftps access to r+w sharelinks (PR #110)
• drop support for long EoL CentOS 7 (PR #99)
• persist mig_system_files and user_cache (PR #112)
• added rsyslog service management without the need for systemd (PR #113)
• fix typo in the mig-server-extconfs volume (#114)

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Stable-20250606

This is a bugfix and feature release:

• fix and expand on lustre quota work (PR #100, #101, #102, #104)
• more build in setup of helper pages and files like policies where available (PR #103)
• integrate include_sections config overrides with config snippets in mig-server-extconfs (PR #106)
• integrate Jupyter SSL/TLS proxy config (PR #107)
• simplify Cloud jumphost setup (PR #108)
• ensure the common usage of OS_CA_CERT_SOURCE_PATH (PR #109)

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life overdue we strongly recommend migrating to Rocky 9 or 8 where not already done. This will be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support.

Stable-20250514

This is a bugfix and feature release:

• More adjustments to better fit the file system layout with separate persistent state
• Automatic selection of site-conf.js and certain wwwpublic helpers to match site where applicable
• Split log folders into miglog shared between containers and syslog with individual per-container system logs
• Adjust init helper paths to include e.g. the pdf generator used in gdp-mode (issue #86)
• Update nodocs workaround for Rocky to include e.g. the hgweb helper required for mercurial integration
• Replace nested volume mounts with bind mounts and add init volume helper for consistent race-free init (PR #55)
• Fix missing user DB in pristine production deployments (issue #89)
• Fix sender email address domain in containers for proper mail delivery e.g. from cron jobs there
• Upgrade the Apache OpenID Connect auth module to recent 2.4.16.11 release with security and bug fixes
• Minor quota adjustments with persistent quota_home and explicit ENABLE_QUOTA off in envs (PR #96)
• Toggle the UPGRADE_PARAMIKO flag off for Rocky 8+ where the distro version is already recent enough (PR #97)

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life overdue we strongly recommend migrating to Rocky 9 or 8 where not already done. This will most likely be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support.