13.8.0

What's Changed

• [GH actions] Upgrade codeql version by @dautovri in #4451
• vsock: set read/write timeout on the accepted connection by @shjala in #4450
• memory-monitor: Fix memory monitor config update for debug container. by @OhmSpectator in #4453
• PR4408 and networking changes for Clustering by @milan-zededa in #4454
• Re-execute full validation for AppNetworkConfig once pending NIs are ready by @milan-zededa in #4458
• Add missing nil check for DPC when processing wwan status update by @milan-zededa in #4459
• Bump Eden version to 1.0.0 in GHA by @europaul in #4464
• wwan: Do not change initial bearer config and properly clear unused default bearers by @milan-zededa in #4401
• Add support for user-defined network interface order (kvm only) by @milan-zededa in #4452
• eden.yaml: checkout Eden 1.0.1 by @europaul in #4470
• Support remote log level by @europaul in #4413

Full Changelog: 13.7.0...13.8.0

13.4.0-rc6

Fixes for a few issues found during testing of 13.4.0-rc5 plus some other items which are getting backported to stable releases.

What's Changed

• [13.4-stable] memory-monitor: Fix memory monitor config update for debug container. by @OhmSpectator in #4456
• [13.4 stable] Re-execute full validation for AppNetworkConfig once pending NIs are ready by @milan-zededa in #4461
• [13.4] enable vfio multifunc by @christoph-zededa in #4457
• [13.4 stable] Add missing nil check for DPC when processing wwan status update by @milan-zededa in #4463
• [13.4-stable] wwan: Do not change initial bearer config and properly clear unused default bearers by @milan-zededa in #4465

Full Changelog: 13.4.0-rc5...13.4.0-rc6

13.7.0

What's Changed

• Initial set of pillar types related files for cluster multi-node mode by @naiming-zededa in #4387
• [master] update: switch assets.yml to use GitHub API for artifact upload by @yash-zededa in #4406
• fix: assets upload to use the correct variable name. by @yash-zededa in #4411
• Install Descheduler, fix startup readywait by @andrewd-zededa in #4363
• memory-monitor: Add error tolerance to memory allocation logging by @OhmSpectator in #4415
• Testing and Integrating new qemu_thread_set_affinity definition by @roja-zededa in #4212
• pillar/devicenetwork: fix goroutine leak by @christoph-zededa in #4409
• Update liburing source URL to kernel.org by @shjala in #4422
• vTPM communication and error handling refactoring by @shjala in #4400
• Add support for OnLogic FR201 device by @dpoulios in #4382
• Add volumeattach/volumedetach API by @zedi-pramodh in #4359
• Blocking kube container logs to be sent and some minor changes by @naiming-zededa in #4412
• Node Drain Request/Status API by @andrewd-zededa in #4366
• Fix app discovery endpoint by @uncleDecart in #4421
• Introduce ADOPTERS.md by @eriknordmark in #4431
• [downloader.go] Revert accidental file change by @eriknordmark in #4433
• uefi : fix broken build due to missing edk2 submodule by @shjala in #4432
• Add Goroutine leak detection with unit tests by @OhmSpectator in #4416
• Update Eden verison to 0.9.13 and set debug log level for eden test workflows by @europaul in #4381
• eden.yml: checkout Eden 0.9.13 by @europaul in #4436
• Enable Vfio multifunction devices by @christoph-zededa in #4394
• Enable the vhost backend for the virtio-net interfaces in the KVM hypervisor by @milan-zededa in #4438
• Disable iptables for L2-only traffic when everything is allowed by ACLs by @milan-zededa in #4437
• Fix/update ADOPTERS.md by @eriknordmark in #4442
• All-Ones netmask is not needed for ACLs or flow logging by @milan-zededa in #4440
• Allow to use network port with VLAN-subinterfaces for untagged traffic by @milan-zededa in #4444
• Document network performance considerations by @milan-zededa in #4446
• Implement packet sniffing with less overhead using tc-mirred by @milan-zededa in #4439
• Bump eve-api by @christoph-zededa in #4447
• Add new types and functions to pillar needed by newlog and edge-view by @europaul in #4449
• Main changes for kube/cluster-init.sh for multi-node cluster handling by @naiming-zededa in #4385
• Base cluster-update.sh to define needed link_multus_into_k3s by @andrewd-zededa in #4445
• Add monitor application to EVE by @rucoder in #4410

New Contributors

• @dpoulios made their first contribution in #4382

Full Changelog: 13.6.0...13.7.0

12.0.5-lts

What's Changed

The most critical fix in this LTS release is the goroutine leak. If a device is operating in a network where the DHCP server provides more than one DNS server address (or the device is configured to have a static/manual network with more than one DNS server), then there is a slow leak of goroutines inside the zedbox process which will lead to running out of memory and an OOM crash. In some environments and configurations we've seen that as often as one day.

There are also important memory garbage collection fixes to make sure the golang GC kicks in fast enough when there is a burst of memory allocations.

• [12.0 stable] Enhance LinuxCollector to support detecting multiple app VIF IPs by @milan-zededa in #4256
• [12.0-stable] pillar/assignableadapters: clear error strings by @christoph-zededa in #4240
• [12.0-stable] mkimage-raw-efi: Find persist partition when installing into another disk by @rene in #4283
• [12.0 stable] Properly initialize AppNetworkStatus after invalid config was fixed by @milan-zededa in #4285
• [12.0-stable] Configure Go GC based on pillar memory limit or global config by @rouming in #4275
• [12.0-stable] pkg/pillar: make ioBundleError deepcopy-able by @christoph-zededa in #4302
• [12.0-stable] pillar: Use hard memory limit for EVE memory management. by @OhmSpectator in #4306
• [12.0-stable] zedbox: force GC on cgroups memory pressure events by @rouming in #4309
• [12.0-stable] Allow EVE memory limits above 4GB. by @OhmSpectator in #4313
• [12.0-stable] eve labelling and assets fix by @yash-zededa in #4418
• [12.0-stable] liburing source update by @shjala in #4427
• [12.0-stable] pillar/devicenetwork: fix goroutine leak by @christoph-zededa in #4424

Full Changelog: 12.0.4-lts...12.0.5-lts

11.0.9-lts

What's Changed

• [11.0 stable] Make table index part of the IP-rule definition. by @milan-zededa in #4156
• [backport 11.0-stable] Fix cgroup name mismatches and add missing service by @OhmSpectator in #4179
• [11.0-stable] Cleanup /persist/pubsub-large on boot by @eriknordmark in #4232
• [11.0 stable] Enhance LinuxCollector to support detecting multiple app VIF IPs by @milan-zededa in #4257
• [11.0-stable] installer: Find persist partition when installing into another disk by @rene in #4282
• [11.0-stable] Configure Go GC based on pillar memory limit or global config by @rouming in #4274
• [11.0-stable] pillar: Use hard memory limit for EVE memory management. by @OhmSpectator in #4305
• [11.0-stable] zedbox: force GC on cgroups memory pressure events by @rouming in #4310
• [11.0-stable] Use eden from the branch EVE-11.0-stable by @milan-zededa in #4317
• [11.0-stable] Allow EVE memory limits above 4GB. by @OhmSpectator in #4312
• [11.0-stable] liburing source update by @shjala in #4426
• [11.0-stable] pillar/devicenetwork: fix goroutine leak by @christoph-zededa in #4423

Full Changelog: 11.0.7-lts...11.0.9-lts

12.0.5-rc1

What's Changed

• [12.0 stable] Enhance LinuxCollector to support detecting multiple app VIF IPs by @milan-zededa in #4256
• [12.0-stable] pillar/assignableadapters: clear error strings by @christoph-zededa in #4240
• [12.0-stable] mkimage-raw-efi: Find persist partition when installing into another disk by @rene in #4283
• [12.0 stable] Properly initialize AppNetworkStatus after invalid config was fixed by @milan-zededa in #4285
• [12.0-stable] Configure Go GC based on pillar memory limit or global config by @rouming in #4275
• [12.0-stable] pkg/pillar: make ioBundleError deepcopy-able by @christoph-zededa in #4302
• [12.0-stable] pillar: Use hard memory limit for EVE memory management. by @OhmSpectator in #4306
• [12.0-stable] zedbox: force GC on cgroups memory pressure events by @rouming in #4309
• [12.0-stable] Allow EVE memory limits above 4GB. by @OhmSpectator in #4313
• [12.0-stable] eve labelling and assets fix by @yash-zededa in #4418
• [12.0-stable] liburing source update by @shjala in #4427
• [12.0-stable] pillar/devicenetwork: fix goroutine leak by @christoph-zededa in #4424

Full Changelog: 12.0.4-lts...12.0.5-rc1

13.4.0-rc5

Key changes from rc4

• Ensure that multiple containers running in their shim-VM do not accidentally share mounts
• Fix a goroutine leak which appears under certain external network and EVE adapter configurations
• Improve the vTPM error handling and robustness
• Make the app discovery meta-data server follow the API specification in terms of who can do discovery

What's Changed

• 13.4 stable assets port by @yash-zededa in #4417
• [13.4-stable] memory-monitor: Add error tolerance to memory allocation logging in handler script by @OhmSpectator in #4419
• [13.4-stable] better isolation for eve user apps by @europaul in #4420
• [13.4-stable] liburing source update by @shjala in #4428
• [13.4-stable] pillar/devicenetwork: fix goroutine leak by @christoph-zededa in #4425
• [13.4-stable] vTPM communication and error handling refactoring by @shjala in #4429
• [13.4-stable] Fix app discovery endpoint by @uncleDecart in #4434

Full Changelog: 13.4.0-rc4...13.4.0-rc5

13.4.0-rc4

What's Changed

• [13.4-stable] Fix deadlock when Debug Server startup fails. by @OhmSpectator in #4332
• [13.4-stable] apparmor: allow swtpm to receive term signal from vtpm by @shjala in #4338
• [13.4-stable] pillar: Fix OVMF binary file for ARM64 by @rene in #4339
• [13.4-stable] memory-monitor: Fix log files clean up to prevent storage overflow. by @OhmSpectator in #4336
• [13.4 stable] Make sure ethernet interface is DOWN before renaming and changing MAC by @milan-zededa in #4344
• [13.4 stable] App-shared port without DNS server is not necessarily an issue by @milan-zededa in #4345
• [13.4-stable] fix: update lts-release.sh to create the lts tag from the latest rc tag by @yash-zededa in #4361
• [13.4-stable] Enhance memory-monitor with improved logging, cleanup, and task handling by @OhmSpectator in #4365
• [13.4-stable] Include ZFS in installer by @andrewd-zededa in #4367
• fix: update lts-release.sh to create the lts tag from the latest rc tag by @yash-zededa in #4368
• [13.4-stable] Set WType even for wireless ports without network config by @milan-zededa in #4369
• [13.4-stable] memory-monitor: Restore output limit to 100 MB after refactor mistake. by @OhmSpectator in #4373
• [13.4-stable] Naiming backport3 PR 4352 by @naiming-zededa in #4377
• [13.4-stable] Wait for 15 seconds for the qmp listener by @eriknordmark in #4379
• [13.4-stable] memory-monitor: Improve resilience of handler to missing processes. by @OhmSpectator in #4383
• [13.4 stable] Update kernel to latest 6.1.112 by @milan-zededa in #4389
• [13.4-stable] fix: update publish.yml to use the correct glob pattern by @yash-zededa in #4388
• [13.4 stable] Backport fix to COM passthrough issue by @roja-zededa in #4392
• [13.4-stable] Simplify assets.yml by using wildcards and loops by @yash-zededa in #4399
• [13.4-stable] Kernel update - Driver addition and BUG fix by @rene in #4396
• [13.4-stable] fix: update regex in Makefile to correctly handle rc and lts tags by @yash-zededa in #4398
• Update pkg/eve/runme.sh for installer net to match what was one in makenet.sh by @eriknordmark in #4403

Full Changelog: 13.4.0...13.4.0-rc4

13.6.0

What's Changed

• Fix deadlock in Go tests when Debug Server startup fails. by @OhmSpectator in #4316
• App-shared port without DNS server is not necessarily an issue by @milan-zededa in #4315
• Update pkg/eve/runme.sh for installer net to match what was one in makenet.sh by @deitch in #4320
• xen-tools/init-initrd: Enable clock synchronization by default by @rene in #4319
• pkg/pillar: reduce test memory usage by @christoph-zededa in #4326
• Make sure ethernet interface is DOWN before renaming and changing MAC by @milan-zededa in #4321
• Fix Dockerfile in pkg/debug by @rucoder in #4328
• Reduce VTPM container size by @rucoder in #4324
• Enhance scripts and Makefile targets for RC and LTS release support by @yash-zededa in #4323
• apparmor: allow SWTPM to receive term signal from vTPM by @shjala in #4333
• pillar: Fix OVMF binary file for ARM64 by @rene in #4327
• memory-monitor: Fix log files clean up to prevent storage overflow. by @OhmSpectator in #4331
• Move Proxy TPM (ptpm) to its own directory by @shjala in #4335
• tools: introduce dockerfile-from-checker by @christoph-zededa in #4341
• Makefile: remove circular dependency warning by @christoph-zededa in #4347
• add missing dependencies packages by @deitch in #4340
• build(deps): bump github.com/docker/docker from 25.0.1+incompatible to 25.0.6+incompatible in /tools/dockerfile-from-checker by @dependabot in #4343
• build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /tools/dockerfile-from-checker by @dependabot in #4342
• Makefile : allow overriding MEDIA_SIZE and QEMU_MEMORY by @shjala in #4349
• More missing alpine packages for tpm2 by @deitch in #4350
• Still more packages missing from alpine by @deitch in #4353
• Replace: Deprecated qemu param by @roja-zededa in #4354
• Bump alpine installer by @deitch in #4348
• Increase rootfs size to 270Mb by @rucoder in #4329
• Fix an issue in Edgeview not getting App interface IP address by @naiming-zededa in #4352
• Dockerfiles: bump eve-alpine image, eve-cross-compilers and eve-dom0-ztools by @christoph-zededa in #4334
• Set WType even for wireless ports without network config by @milan-zededa in #4346
• Include ZFS in installer by @andrewd-zededa in #4362
• Enhance memory-monitor with improved logging, cleanup, and task handling by @OhmSpectator in #4357
• Add hv:kubevirt platform:generic arch:amd64 to builds. by @andrewd-zededa in #4364
• memory-monitor: Restore output limit to 100 MB after refactor mistake. by @OhmSpectator in #4372
• Implement cluster-wide deterministic MAC generator by @milan-zededa in #4371
• Wait for 15 seconds for the qmp listener by @eriknordmark in #4330
• memory-monitor: Improve resilience of handler to missing processes. by @OhmSpectator in #4376
• Rework IP rules/routing for Kubernetes clustering by @milan-zededa in #4370
• Update kernel to latest 6.1.112 by @milan-zededa in #4380
• fix: update publish.yml to use the correct glob pattern by @yash-zededa in #4386
• start user apps from image instead of rootfs by @europaul in #4304
• Fix: tty not found error for COM passthrough by @roja-zededa in #4391
• Update lagging installer docs by @deitch in #4390
• Simplify assets.yml by using wildcards and loops by @deitch in #4397
• fix: update regex in Makefile to correctly handle rc and lts tags by @yash-zededa in #4393
• pkg/uefi : Update amd64 EDK2 to 202408 by @shjala in #4351
• Kernel update - Driver addition and BUG fix by @rene in #4395

Full Changelog: 13.4.0...13.6.0

Release 9.4.17-lts

Note: this is a point release not intended for general usage since it dedicates more memory to EVE. Hence it show only be used to devices with sufficient memory.

What's Changed

• [9.4-stable] Rised hard limit for /eve and /eve/services cgroups by @rouming in #4291

Full Changelog: 9.4.16-lts...9.4.17-lts