Stable-20240808

Feature and bugfix release.

• Initial Lustre quota integration with modern Lustre backend storage
• Integrate status-events.json for status pop-up on user pages and status page linked from default front page
• Expose fundamental OpenStack cloud integration to let users manage instances on any stand-alone OpenStack
• Fix: make sure to install proper dnspython for email validation in python2
• Flexible docker registry in order to allow setups with a local registry e.g. to split up container build and run hosts
• Integrate signing user certificates at your own custom CA when users request it through certificate sign up form
• Docker and docker compose plug in updates to improve support for the various podman and docker compose combos
• New AUTO_ADD_USER_PERMIT option to control which IDP-authenticated users can sign up without operator interaction
• Several updates in relation to keeping legacy CentOS 7 container mostly functional even after EoL
• Drop redundant gdp.log and add rsyslog-gnutls for encrypted remote syslogging from containers
• Removed postfix container - mail should be handled by the container host

With the CentOS 7 End-of-Life we recommend migrating to Rocky 9 or 8 as soon as possible. This may be the last release where we include CentOS 7 since it is getting really old and crumbling in a number of areas, including OpenID Connect authentication support unless you buy or compile the Apache module yourself at least.

This release is compatible and tested with the corresponding migrid BRANCH-20240808 releases.

Stable-20240611

Minor feature and bugfix release.

1. expose new sign up handlers for unsupported characters
2. proper docker/podman clean up when using implicit migrid branch select though Dockerfile

Stable-20240605

Bugfix release to address recent issues with:

1. pip certificate errors crashing build of pdfkit
2. New rsyslog imjournal conf option in RockyX breaking the rsyslog setup

(Note: this was originally incorrectly released as Stable-20240505)

Stable-20240521

Feature and bugfix release to mainly address recent issues with pip certificate errors crashing build. Explicitly point pip to the system installed ca-certificates in order to correctly verify authenticity of default python package index (pypi) hosts.
Prevent issues with Lustre mounts locking up during podman (and possibly docker) restarts by using 'host' network for the recent volume init container, too. It doesn't really need net at all for now, but the default virtual container network interferes with LNet.

Added initial Lustre quota support on user and vgrid/workgroup/project folders.

Add fundamental WAYF OpenID Connect integration as documented on
https://docker-migrid.readthedocs.io/en/latest/sections/getting-started/case-studies/rocky8.html#wayf-openid-connect-sign-up-and-log-in

Stable-20240424

Minor bugfix release to work around issue #57. Simply forces the containers to use cheroot 10.0.0 rather than the problematic recent 10.0.1 release.
Please refer to (https://github.com/ucphhpc/docker-migrid/releases/tag/v1.0.6) for additional release notes.

Stable-20240423

Changelog

This is a minor feature release with the following highlights:

• configurable MFA client app list
• ajustments to allow increased migrid service distribution
• fix for missing wsgi handler in python2 at rocky8
• easier LetsEncrypt support on container host
• skip account renewal in password reset

Stable-20240403

Another update to mainly fix the now broken download link for the CentOS/RHEL 7 version of the mod-auth-openidc package used if UPGRADE_MOD_AUTH_OPENIDC is requested. The Rocky versions are updated accordingly to include the same upstream bugfixes and for consistency.

This release additionally includes reworking of the container launch sequence for consistent volume initialization, adjustments to the read-only mounts, integration of optional host-provided tmpfs mounts and doc updates.

We also continue the work to stabilize the Rocky9 version before CentOS 7 goes EoL in a few months. So all testing and feedback is welcome.

Stable-20240315

Another update to mainly fix the now broken download link for the CentOS/RHEL 7 version of the mod-auth-openidc package used if UPGRADE_MOD_AUTH_OPENIDC is requested. The Rocky versions are updated accordingly to include the same upstream bugfixes and for consistency.

We continue the work to stabilize the Rocky9 version before CentOS 7 goes EoL in a few months - testing and feedback is welcome.

Stable-20240312

Another update to mainly fix the now broken download link for the CentOS/RHEL 7 version of the mod-auth-openidc package used if UPGRADE_MOD_AUTH_OPENIDC is requested. The Rocky versions are updated accordingly to include the same upstream bugfixes and for consistency.

We continue the work to stabilize the Rocky9 version before CentOS 7 goes EoL in a few months - testing and feedback is welcome.

Stable-20240201

Another update to mainly fix the now broken download link for the CentOS/RHEL 7 version of the mod-auth-openidc package used if UPGRADE_MOD_AUTH_OPENIDC is requested. The Rocky versions are updated accordingly to include the same upstream bugfixes and for consistency.

Work on Rocky9 is progressing nicely - testing and feedback is welcome.