Information about the IMPEX release 5.1.0
Release date: 2025-01-23
The IMPEX 5.1.0 release
This release perform two different tasks: add new features to Impex, upgrades the underlying OS and its components.
This release upgrades the underlying Sysctl Linux version from 39 to 40 but also brings in some fixes and improvements. Note that this is a two-stage upgrade. 5.0.2 is released for Sysctl Linux 39 and enables it to upgrade to Sysctl Linux 40 which it will in the next upgrade window.
Important For those planning to perform the controlled upgrade (i.e., pull, not automatic push upgrade) from the Impex 4.1.x branch, this, the 5.1.0 ISO, is the ISO file to use as the basis for that migration.
ICC changes
- The station token and station ssh key (for datalocks) are now shown in a modal windows instead of opening in a separate browser tab
- Fixed color on error texts on input-fields when using dark mode
- Fields on the station card view have been moved around a bit to improve usability. For example the “retire station” button has been moved to the detailed view and is now less easy to accidentally press
- Collected Logout, Password changing and Dark/Light mode in a new user setting panel
- Added a “Help Mode” to the new user setting panel which adds links to all configuration fields that directly leads to the documentation for that input field
- Certificate creation helper script was improved, among others it now supports adding more Subject Alternative Names
- Add config option for allowing users of a Station to select which file system to use when formatting and shredding
ICC fixes
- There was a missing proxypass rule for the
/certsdirectory which made the backup signify procedure where stations could handle ICC switching CA stop working. Fixed.
Station changes
- Network status got refactored and now also includes checking of proxy connectivity
- Add file systems select option when formatting or shredding. This is only shown if enabled in the ICC configuration for that station
Station/Datalock fixes
- Signify bundles would still be valid even if files were missing. This had no security implication but could be confusing if not all files from a bundle were copied to a USB drive which would lead to a failed signify operation although it verified as ok
ICC, Station and Datalock changes
- The upgrader services was updated to also bump the underlying operating system version if needed
Information
Operating system packages
General packages updates. Of specific interest is the following:
- Update Golang to 1.22
- Update to kernel 6.12.8
Documentation
- This release contains newly written upgrade instructions. All 5.x.x versions will automatically get the new version.
SBOM
- The ISO and VHD releases have a software bill of materials (SBOM) to make introspection of the release easy to integrate with a number of security tools.
Links
Sysctl portal
Sysctl RSS/Atom