Stable-20250926

This is a feature and bugfix release:

• Clean up after lustrequota build to reduce resulting image size (#123)
• Adjust SFTP service error verbosity by patching paramiko slightly (#124)
• Switch to github mirror for lustre code in lustrequota (#125)
• Fuse commands in Dockerfile to reduce layer count and avoid hitting hard-coded 127 limit (#126)
• Retire long obsolete image preview support (#127)
• Integrate new janitor service to handle various clean up and account request pruning tasks (#128)

IMPORTANT this may be the last release supporting the Rocky 8 container flavor, as that OS version is out of general support. We no longer maintain the python2 branch of migrid and it will gradually get more painful even to maintain the package dependencies for the python3 branch of migrid there. Please prepare for switching to the Rocky 9 container flavor if you haven't already done so.

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Stable-20250724

This is a minor feature and bugfix release:

• repair UPGRADE_PARAMIKO support on Rocky9 (#115, #116)
• Integrate verifyarchives, importdoi, indexdoi and acctexpire cron jobs (#117)
• Integrate FREEZE_TO_TAPE in build (#118)
• Add missing ENABLE_FREEZE variable used to decide on cron job inclusion (#119)
• Integrate freeze_tape in persistent state (#121)
• Integrate migstats weekly cronjob to populate migadmin Site Stats (#122)

IMPORTANT this may be the last release supporting the Rocky 8 container flavor, as that OS version is out of general support. We no longer maintain the python2 branch of migrid and it will gradually get more painful even to maintain the package dependencies for the python3 branch of migrid there. Please prepare for switching to the Rocky 9 container flavor if you haven't already done so.

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Stable-20250703-rc1

This is a minor bugfix pre-release:

• repair UPGRADE_PARAMIKO support on Rocky9 (#115, #116)

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Stable-20250625

This is a bugfix and feature release:

• repair sftp/webdavs/ftps access to r+w sharelinks (PR #110)
• drop support for long EoL CentOS 7 (PR #99)
• persist mig_system_files and user_cache (PR #112)
• added rsyslog service management without the need for systemd (PR #113)
• fix typo in the mig-server-extconfs volume (#114)

Additional details are available in the complete changelog since last release for further elaboration in the real release.

Stable-20250606

This is a bugfix and feature release:

• fix and expand on lustre quota work (PR #100, #101, #102, #104)
• more build in setup of helper pages and files like policies where available (PR #103)
• integrate include_sections config overrides with config snippets in mig-server-extconfs (PR #106)
• integrate Jupyter SSL/TLS proxy config (PR #107)
• simplify Cloud jumphost setup (PR #108)
• ensure the common usage of OS_CA_CERT_SOURCE_PATH (PR #109)

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life overdue we strongly recommend migrating to Rocky 9 or 8 where not already done. This will be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support.

Stable-20250514

This is a bugfix and feature release:

• More adjustments to better fit the file system layout with separate persistent state
• Automatic selection of site-conf.js and certain wwwpublic helpers to match site where applicable
• Split log folders into miglog shared between containers and syslog with individual per-container system logs
• Adjust init helper paths to include e.g. the pdf generator used in gdp-mode (issue #86)
• Update nodocs workaround for Rocky to include e.g. the hgweb helper required for mercurial integration
• Replace nested volume mounts with bind mounts and add init volume helper for consistent race-free init (PR #55)
• Fix missing user DB in pristine production deployments (issue #89)
• Fix sender email address domain in containers for proper mail delivery e.g. from cron jobs there
• Upgrade the Apache OpenID Connect auth module to recent 2.4.16.11 release with security and bug fixes
• Minor quota adjustments with persistent quota_home and explicit ENABLE_QUOTA off in envs (PR #96)
• Toggle the UPGRADE_PARAMIKO flag off for Rocky 8+ where the distro version is already recent enough (PR #97)

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life overdue we strongly recommend migrating to Rocky 9 or 8 where not already done. This will most likely be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support.

Stable-20250430-rc4

This is a bugfix and feature pre-release in preparation for next actual release:

• More adjustments to better fit the file system layout with separate persistent state
• Automatic selection of site-conf.js and certain wwwpublic helpers to match site where applicable
• Split log folders into miglog shared between containers and syslog with individual per-container system logs
• Adjust init helper paths to include e.g. the pdf generator used in gdp-mode (issue #86)
• Update nodocs workaround for Rocky to include e.g. the hgweb helper required for mercurial integration
• Replace nested volume mounts with bind mounts and add init volume helper for consistent race-free init (PR #55)
• Fix missing user DB in pristine production deployments (issue #89)
• Fix sender email address domain in containers for proper mail delivery e.g. from cron jobs there
• Upgrade the Apache OpenID Connect auth module to recent 2.4.16.11 release with security and bug fixes

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This will likely be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support.

Stable-20250407-rc3

This is a bugfix and feature pre-release in preparation for next actual release:

• Change details will be added here in time for the actual release

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support.

Stable-20250401-rc2

This is a bugfix and feature pre-release in preparation for next actual release:

• Change details will be added here in time for the actual release

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.

Stable-20250319-rc1

This is a bugfix and feature pre-release in preparation for next actual release:

• Change details will be added here in time for the actual release

Additional details are available in the complete changelog since last release for further elaboration in the real release.

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.