v2.5.0-beta.1

[whikernel]

This is a beta version - do not use in production

Introduces heavy improvements in the backend and API v2.

What's Changed

• [ADD] DevContainer Configuration by @lowlandghost in [ADD] DevContainer Configuration #507
• Architecture improvements by @c8y3 in Architecture improvements #528
• Import coding rule by @c8y3 in Import coding rule #529
• add-feature: add resources limits by @lelianthorel in add-feature: add resources limits #540
• Rest improvement by @c8y3 in Rest improvement #545
• Link IOC directly to case by @Matthijsy in Link IOC directly to case #486
• [ADD] option to select Number of child processes processing the queue by @lelianthorel in [ADD] option to select Number of child processes processing the queue #541
• Git workflow description by @c8y3 in Git workflow description #559
• Homogenizing blueprints structure by @c8y3 in Homogenizing blueprints structure #564
• Fixing regression on POST /user/update and adding a test by @c8y3 in Fixing regression on POST /user/update and adding a test #560
• Rest improvement assets by @c8y3 in Rest improvement assets #562
• Set development dockers version to develop. by @c8y3 in Set development dockers version to develop. #565
• [IMP] Added security contexts, changed values file and resource confi… by @temmishy in [IMP] Added security contexts, changed values file and resource confi… #566
• Removed pin down of cheerio by @c8y3 in Removed pin down of cheerio #568
• Fix missing form feedbacks on case creation by @c8y3 in Fix missing form feedbacks on case creation #569
• Split UI backend by @c8y3 in Split UI backend #574
• Svelte setup by @DevCyberT in Svelte setup #578
• Added endpoint GET /api/v2/cases/{identifier}/iocs and other REST related improvements by @c8y3 in Added endpoint GET /api/v2/cases/{identifier}/iocs and other REST related improvements #587
• Create customer should not require administrator rights by @c8y3 in Create customer should not require administrator rights #589
• Rest finalization by @c8y3 in Rest finalization #597
• Feature/OIDC auth by @lukerosser in Feature/OIDC auth #591
• Refuse duplicate iocs creation by @c8y3 in Refuse duplicate iocs creation #600
• Api v2 regression fixes by @c8y3 in Api v2 regression fixes #603
• Apiv2 new dir by @whikernel in Apiv2 new dir #611
• More fine tuning by @c8y3 in More fine tuning #614
• Added customer ID to table by @sandervandegeijn in Added customer ID to table #618
• Add config hint for OIDC by @sandervandegeijn in Add config hint for OIDC #621
• Api v2 tweaks by @c8y3 in Api v2 tweaks #622
• Deleted asset should not be accessible via REST by @c8y3 in Deleted asset should not be accessible via REST #623
• Small cleanups provided by ruff by @c8y3 in Small cleanups provided by ruff #643
• [647][IMP] alert_owner_id autofill by @BogatikovM in [647][IMP] alert_owner_id autofill #648
• [[BUG] IRIS_SESSION_TIMEOUT is being interpreted as a string #665][ADD] Load IRIS_SESSION_TIMEOUT as an integer by @FideliusFalcon in [#665][ADD] Load IRIS_SESSION_TIMEOUT as an integer #667
• [sveltekit_support] py3.12 related bug fixes; rest improvements by @lowlandghost in [sveltekit_support] py3.12 related bug fixes; rest improvements #671
• Ruff by @c8y3 in Ruff #685
• Issue 678 api v2 cases put by @c8y3 in Issue 678 api v2 cases put #690
• Temporarily unplug unfinished endpoints by @c8y3 in Temporarily unplug unfinished endpoints #695
• Api v2 update task by @c8y3 in Api v2 update task #698
• Fixed regression on GET /user/tasks/list by @c8y3 in Fixed regression on GET /user/tasks/list #700
• Update frontend in dev compose to use env keys by @lowlandghost in Update frontend in dev compose to use env keys #701
• [FIX] UI logout was not working anymore by @c8y3 in [FIX] UI logout was not working anymore #704
• Api v2 get paginated tasks by @c8y3 in Api v2 get paginated tasks #705
• Api v2 update asset by @c8y3 in Api v2 update asset #709
• Api v2 paginated assets by @c8y3 in Api v2 paginated assets #715
• Hotfix 2.4.20 by @whikernel in Hotfix 2.4.20 #716
• [[BUG] case timeline date badge off by 1 #722][IMP]Fix date parsing bug in case timeline (time badge) by @slw07g in [#722][IMP]Fix date parsing bug in case timeline (time badge) #724

New Contributors

• @lowlandghost made their first contribution in [ADD] DevContainer Configuration #507
• @lelianthorel made their first contribution in add-feature: add resources limits #540
• @temmishy made their first contribution in [IMP] Added security contexts, changed values file and resource confi… #566
• @DevCyberT made their first contribution in Svelte setup #578
• @lukerosser made their first contribution in Feature/OIDC auth #591
• @sandervandegeijn made their first contribution in Added customer ID to table #618
• @BogatikovM made their first contribution in [647][IMP] alert_owner_id autofill #648
• @FideliusFalcon made their first contribution in [#665][ADD] Load IRIS_SESSION_TIMEOUT as an integer #667
• @slw07g made their first contribution in [#722][IMP]Fix date parsing bug in case timeline (time badge) #724

Full Changelog: v2.4.20...v2.5.0-beta.1

---

This discussion was created from the release v2.5.0-beta.1.

[fernandobsouza]

Hi,

I don't know if only with me, but when I tried upgrade dfir-iris from 2.4.19 to 2.4.20, but my environment was upgrade to v2.5.0-beta.1 instead v2.4.20.

I follow steps from documentation:

`teste-dfir:# cd iris-web/
teste-dfir:/iris-web# docker container list
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
de72539a27a8 ghcr.io/dfir-iris/iriswebapp_app:latest "./wait-for-irisweba…" 8 weeks ago Up 5 minutes iriswebapp_worker
da7d02690158 ghcr.io/dfir-iris/iriswebapp_app:latest "nohup ./iris-entryp…" 8 weeks ago Up 5 minutes iriswebapp_app
95e3e96eef0e rabbitmq:3-management-alpine "docker-entrypoint.s…" 8 weeks ago Up 5 minutes 4369/tcp, 5671-5672/tcp, 15671-15672/tcp, 15691-15692/tcp, 25672/tcp iriswebapp_rabbitmq
2644ee0fd4ce ghcr.io/dfir-iris/iriswebapp_nginx:latest "/entrypoint.sh" 8 weeks ago Up 5 minutes (healthy) 80/tcp, 0.0.0.0:443->443/tcp iriswebapp_nginx
a2404ace9679 ghcr.io/dfir-iris/iriswebapp_db:latest "docker-entrypoint.s…" 8 weeks ago Up 5 minutes 5432/tcp iriswebapp_db
teste-dfir:/iris-web# docker exec iriswebapp_db pg_dump -U postgres iris_db | gzip > ../iris_db_backup.gz
teste-dfir:/iris-web# docker compose stop
[+] Stopping 5/5
✔ Container iriswebapp_db Stopped 0.4s
✔ Container iriswebapp_app Stopped 10.5s
✔ Container iriswebapp_worker Stopped 10.4s
✔ Container iriswebapp_nginx Stopped 0.4s
✔ Container iriswebapp_rabbitmq Stopped 1.7s
teste-dfir:/iris-web# docker-compose rm app worker
-sh: docker-compose: not found
teste-dfir:/iris-web# docker compose rm app worker
? Going to remove iriswebapp_worker, iriswebapp_app Yes
[+] Removing 2/0
✔ Container iriswebapp_app Removed 0.1s
✔ Container iriswebapp_worker Removed 0.1s
teste-dfir:~/iris-web# git pull
remote: Enumerating objects: 3173, done.
remote: Counting objects: 100% (1270/1270), done.
remote: Total 3173 (delta 1270), reused 1270 (delta 1270), pack-reused 1903 (from 1)
Receiving objects: 100% (3173/3173), 735.81 KiB | 7.83 MiB/s, done.
Resolving deltas: 100% (2560/2560), completed with 211 local objects.
From https://github.com/dfir-iris/iris-web

• [new branch] api_v2_create_evidence -> origin/api_v2_create_evidence

• [new branch] auth_login -> origin/auth_login
  fdb2d1d..a74d7a3 develop -> origin/develop

• [new branch] hotfix_2.4.20 -> origin/hotfix_2.4.20
  00de6cc..a4bfeda master -> origin/master

• [new tag] v2.4.20 -> v2.4.20

• [new tag] v2.5.0-beta.1 -> v2.5.0-beta.1
  You are not currently on a branch.
  Please specify which branch you want to merge with.
  See git-pull(1) for details.

  git pull

teste-dfir:/iris-web# git checkout v2.4.20
Previous HEAD position was 220b54d Bump version: 2.4.18 → 2.4.19
HEAD is now at 56ef91b Bump version: 2.4.19 → 2.4.20
teste-dfir:/iris-web# docker compose pull
[+] Pulling 70/22
✔ worker Skipped - Image is already being pulled by app 0.0s
✔ nginx Pulled 31.1s
✔ rabbitmq Pulled 74.1s
✔ db Pulled 74.4s
✔ app Pulled 72.5s
teste-dfir:~/iris-web# docker compose up
[+] Running 5/5
✔ Container iriswebapp_rabbitmq Recreated 0.1s
✔ Container iriswebapp_db Recreated 0.1s
✔ Container iriswebapp_app Created 0.1s
✔ Container iriswebapp_worker Created 0.1s
✔ Container iriswebapp_nginx Recreated 0.1s `

Print of my version after upgrade

I try this process several times in different VMs and always with same behavior.

I don't know if I did some mistake or if are a problem on upgrade process.

[c8y3]

Thank you for reporting this behavior. I checked on my side. And I found a potential explanation.
In the .env file there are 3 variables which define the image tag, they are all set to latest. After commenting out these lines, it seems to work for me:

#NGINX_IMAGE_TAG=latest
...
#DB_IMAGE_TAG=latest
...
#APP_IMAGE_TAG=latest

I hope this solves it on your side, too. Let us know.

[fernandobsouza]

Thank you!

After commenting out these lines, I could upgrade correctly.