pve-cluster (8.0.10) bookworm; urgency=medium * cfs: add 'sdn/mac-cache.json' to observed files in a similar spirit as adding 'sdn/pve-ipam-state.json' recently. -- Proxmox Support Team Mon, 18 Nov 2024 22:19:58 +0100 pve-cluster (8.0.9) bookworm; urgency=medium * cfs: add 'sdn/pve-ipam-state.json' to observed files so that the overly restricted 'priv/ipam.db' can be migrated to a path that does not requires root privileges for reading it. This is just a state file and thus more in line with our various configs, not as secret like actual passwords or keys. -- Proxmox Support Team Mon, 18 Nov 2024 16:30:06 +0100 pve-cluster (8.0.8) bookworm; urgency=medium * fix #5728: pmxcfs: allow bigger writes than 4k by using the fuse big_writes option. This reduces write-amplification in the sqlite DB for writes bigger than 4 KiB, especially if paired with a recent change to the file_set_contents helper from pve-common to write as much as possible in one go. -- Proxmox Support Team Wed, 16 Oct 2024 19:10:29 +0200 pve-cluster (8.0.7) bookworm; urgency=medium * fix #5461: pvecm: use ssh_info_to_command for intra cluster ssh * notify: use named template instead of passing template strings -- Proxmox Support Team Tue, 04 Jun 2024 10:58:47 +0200 pve-cluster (8.0.6) bookworm; urgency=medium * cfs_write_file: fix accidental UTF-8 re-encoding * ssh: default to 4096 bit keys when generating * datacenter config: mark notification settings as deprecated/unused * fix #4886: write node SSH hostkey to pmxcfs * fix #4886: SSH: pin node's host key if available * pvecm: stop merging SSH known hosts by default -- Proxmox Support Team Mon, 25 Mar 2024 18:02:24 +0100 pve-cluster (8.0.5) bookworm; urgency=medium * datacenter config: fix descriptions for user-tag-access schema * datacenter config: add missing language short-codes and comment what actual language each refers too. * fix # 4764: datacenter config: default MAC prefix to official Proxmox OUI * datacenter config: avoid writing out default MAC prefix * pmxcfs: track changes for new priv/macs.db ant virtual-guests/profiles.cfg files * notify: adapt to matcher based notification system -- Proxmox Support Team Fri, 17 Nov 2023 14:40:32 +0100 pve-cluster (8.0.4) bookworm; urgency=medium * fix #4937: force UTF-8 encoding when writing notification configuration files to avoid issues with certain characters like 'ΓΌ'. -- Proxmox Support Team Mon, 11 Sep 2023 13:55:07 +0200 pve-cluster (8.0.3) bookworm; urgency=medium * add libpve-notify-perl package * add configuration files for notifications to observed files * add notification configuration for APT, fencing and replication to datacenter config -- Proxmox Support Team Mon, 24 Jul 2023 15:06:08 +0200 pve-cluster (8.0.2) bookworm; urgency=medium * datacenter config: turn shutdown policy into a standard option * pmxcfs: check all addresses from getaddrinfo to find non-loopback one * pmxcfs: log resolved IP and improve log on failure to resolve * pvecm: updatecerts: wait for the quorum and always report if it fails to ensure that the base hierarchy and certificates exists -- Proxmox Support Team Sat, 01 Jul 2023 19:22:59 +0200 pve-cluster (8.0.1) bookworm; urgency=medium * pvecm: fix cluster join over ssh with newer rsync * add configuration files for resource mapping to observed files -- Proxmox Support Team Mon, 05 Jun 2023 12:04:37 +0200 pve-cluster (8.0.0) bookworm; urgency=medium * re-build for Debian 12 Bookworm based Proxmox VE 8.x series -- Proxmox Support Team Fri, 19 May 2023 17:14:04 +0200 pve-cluster (7.3-3) bullseye; urgency=medium * pvecm add: require user to navigate out of `/etc/pve` to avoid issues due to the pmxcfs mountpoint vanishing (restarting) on join * datacenter config: mark HA CRS scheduler sub-property optional * crs: add `ha-rebalance-on-start` sub-option to datacenter config -- Proxmox Support Team Mon, 20 Mar 2023 11:17:00 +0100 pve-cluster (7.3-2) bullseye; urgency=medium * fix #1295: add config schema to control pending update notifications -- Proxmox Support Team Tue, 03 Jan 2023 16:32:14 +0100 pve-cluster (7.3-1) bullseye; urgency=medium * datacenter config: remove typos in "user-tag-access" description * datacenter config: add 'case-sensitive' option for 'tag-styles' -- Proxmox Support Team Mon, 21 Nov 2022 08:34:10 +0100 pve-cluster (7.2-3) bullseye; urgency=medium * add 'allow-subdomains' to webauthn schema * pmxcfs: add IPC call to get multiple guest config properties at once including a `get_guest_config_properties` perl wrapper * datacenter config: add tag-style property and options to control tag usage rights * datacenter config: add 'ordering' property to 'tag-style' option * datacenter config: add cluster resource scheduling (crs) options * register the `firewall/cluster.fw` file so that we can adapt the firewall code for config caching -- Proxmox Support Team Thu, 17 Nov 2022 13:04:33 +0100 pve-cluster (7.2-2) bullseye; urgency=medium * datacenter cfg: clarify that the next-id's upper boundary is exclusive and adapt the max value accordingly * cluster config: mark qdevice end point as protected to ensure we always can get its status * corosync.conf sync: add heuristic to wait for propagation of change to all nodes before triggering a cluster wide config reload -- Proxmox Support Team Thu, 14 Jul 2022 07:36:07 +0200 pve-cluster (7.2-1) bullseye; urgency=medium * fix #439: datacenter config: add infrastructure for next-id range configuration * fix #3957: spell 'occurred' correctly * parse datacenter config: remove "\s*" from comment regex -- Proxmox Support Team Thu, 28 Apr 2022 17:11:10 +0200 pve-cluster (7.1-3) bullseye; urgency=medium * cluster log: fix a segfault / wrong iteration bounds in ringbuffer -- Proxmox Support Team Wed, 15 Dec 2021 15:24:22 +0100 pve-cluster (7.1-2) bullseye; urgency=medium * fix #3596: handle delnode of offline node * datacenter.cfg: avoid warning due to broken fallback if no config file exists -- Proxmox Support Team Mon, 15 Nov 2021 14:31:56 +0100 pve-cluster (7.0-5) bullseye; urgency=medium * add WebAuthn configuration to datacenter.cfg * sysctl snippet: move from /etc to /usr/lib and prefix with `10-` to allow for grasping ordering easier * sysctl: disable net.ipv4.igmp_link_local_mcast_reports to reduce ICMPv3 broadcasts to the network when a guest interface is plugged into their firewall bridge -- Proxmox Support Team Thu, 11 Nov 2021 17:20:23 +0100 pve-cluster (7.0-4) bullseye; urgency=medium * datacenter config: add notes property to allow documenting clustert- wide comments/notes * api: join info: return explicit HTTP status error-code (424) for no-cluster instead of generic 500 one * add 'jobs.cfg' to observed files -- Proxmox Support Team Tue, 09 Nov 2021 18:30:10 +0100 pve-cluster (7.0-3) bullseye; urgency=medium * pmxcfs: bump basic FS limits, 1 MiB per-file, 128 MiB total and 256k inodes -- Proxmox Support Team Thu, 01 Jul 2021 12:42:52 +0200 pve-cluster (7.0-2) bullseye; urgency=medium * get tasklist: unpack null-terminated C string before decoding as JSON for compatibillity with the JSON perl-module shipped in Bullseye -- Proxmox Support Team Thu, 20 May 2021 11:21:02 +0200 pve-cluster (7.0-1) bullseye; urgency=medium * re-build for Debian 11 Bullseye based releases -- Proxmox Support Team Sun, 09 May 2021 17:55:48 +0200 pve-cluster (6.4-1) pve; urgency=medium * pmxcfs: do not grant LXC configs o+r permissions by default anymore * add various tech-preview SDN configuration files * rename sdn/.version to sdn/.running-config * pmxcfs: db: use SQLITE_STATIC when writing FS updates to the DB to avoid memory copies * pmxcfs: db: tell query planner that our prepared statement are long living * cfs lock: avoid confusing lock prefix on error from the executed code -- Proxmox Support Team Mon, 26 Apr 2021 16:01:04 +0200 pve-cluster (6.2-1) pve; urgency=medium * pvecm: print correct nodename when finishing join, to avoid confusion * fix #2727: pass correct format for linkX * pmxcfs sync: properly check for corosync error * pmxcfs: protect CPG operations with mutex -- Proxmox Support Team Wed, 30 Sep 2020 13:48:59 +0200 pve-cluster (6.1-8) pve; urgency=medium * add ACME plugin config file to cluster files * add firewall config locking helper * ensure base directories of observed files is created in a central way * drop SDN .new files and add .version mechanism -- Proxmox Support Team Sun, 03 May 2020 18:19:28 +0200 pve-cluster (6.1-5) pve; urgency=medium * improve and add to corosync configuration sanity checking on join with more tests. * Enable support for up to 8 corosync links * pvecm: qdevice setup: fix check for unsupported odd node count * Add cluster join API version check -- Proxmox Support Team Wed, 25 Mar 2020 17:38:46 +0100 pve-cluster (6.1-4) pve; urgency=medium * pmxcfs: add verify_token IPC request -- Proxmox Support Team Tue, 28 Jan 2020 15:24:42 +0100 pve-cluster (6.1-3) pve; urgency=medium * fix #2553: ensure status and memdb mutex locking is always the same order to avoid a possible deadlock when accessing the cluster resources status API endpoing while doing snapshots or renames of VMID.conf files frequently * add "cpu-models.conf" to observed files -- Proxmox Support Team Fri, 17 Jan 2020 10:30:10 +0100 pve-cluster (6.1-2) pve; urgency=medium * allow full-mesh routed setup for cluster join * describe 'migrate' HA shutdown policy in datacenter.cfg man-page -- Proxmox Support Team Wed, 27 Nov 2019 17:19:45 +0100 pve-cluster (6.1-1) pve; urgency=medium * allow one to set 'migrate' HA shutdown policy in datacenter.cfg * change certificate lifetime to two years, some newer browsers complain on longer lifetime * mtunnel migration IP: allow the same IP to be configured multiple times, fixes, among others, routed full-mesh setups -- Proxmox Support Team Tue, 26 Nov 2019 15:09:58 +0100 pve-cluster (6.0-9) pve; urgency=medium * pvecm: fix weirdly spaced double-prompt for password on join * fix #2479: use correct sub in create_conf -- Proxmox Support Team Fri, 22 Nov 2019 16:30:21 +0100 pve-cluster (6.0-8) pve; urgency=medium * fix #1380: pvecm status: add general cluster information * dc.conf: sort languages for easier finding one * dc.conf: add missing entries to default language property (he, da) * use PVE::Certificate to read fingerprint * move CertCache to pve-manager * datacenter.cfg: parse/print u2f property string * split package into a pve-cluster/pmxcfs one and a perl modules library one * pve-cluster.service: move pvecm call to pveproxy.service -- Proxmox Support Team Mon, 18 Nov 2019 11:27:27 +0100 pve-cluster (6.0-7) pve; urgency=medium * pmxcfs: ensure dcdb returns correct buffer again on parsing the FUSE message. Fixes a regression from 6.0-6. -- Proxmox Support Team Mon, 02 Sep 2019 11:07:59 +0200 pve-cluster (6.0-6) pve; urgency=medium * pmxcfs: code cleanup to allow enabling additional, stricter, compiler checks * cfs-utils cluster_config_version: actually enforce config_length when doing the regex match * pmxcfs: get config properties: ensure we do not read beyond the in-memory config * pmxcfs server: fix off-by-one error when ensuring string NULL termination -- Proxmox Support Team Fri, 30 Aug 2019 14:45:19 +0200 pve-cluster (6.0-5) pve; urgency=medium * join: better error handling -- Proxmox Support Team Wed, 7 Aug 2019 10:47:52 +0200 # Older entries have been removed from this changelog. # To read the complete changelog use `apt changelog libpve-cluster-perl`.