What's Changed

• [storage-init.sh] recreate /persist correctly for eve-k by @eriknordmark in #5313
• spec.sh -v - print valid json by @christoph-zededa in #5312
• eve-k: reduce idle logging, ignore api outage during failover by @andrewd-zededa in #5314
• Allow node uuid label to be repleaced in cluster by @naiming-zededa in #5320
• Bump eden version to 1.0.13 by @europaul in #5323

Full Changelog: 16.0.0...16.1.0

Changelog

• Fixed the thres column in the SMART info report of physical storage devices in the storage tab of edge nodes. by @jsfakian (#5166)
• Improved WiFi adapter handling by ensuring EVE waits for WLAN rfkill unblock before bringing up the interface. This prevents failures during interface setup (e.g., wlan0 staying down and missing IP) when toggling WiFi between disabled and enabled states. by @milan-zededa (#5167)
• Reduce the edgeview keepalive interval by @naiming-zededa (#5178)
• Provide collect-info command for LOC by @christoph-zededa (#5205)
• Add support for IPv6 addresses and manual proxy configuration for TUI by @rucoder (#5207)
• Improve upgrade reliability. This prevents stale checkpoints that could lead to unnecessary downloads or unintended downgrade after a reboot (notably for upgrades initiated via Terraform provider 1.0.6). by @OhmSpectator (#5224)
• Validate nonce length against the TPMT_HA size limit before TPM quote requests to prevent tpm2.Quote failures. by @shjala (#5243)
• Fixed bug in newlogd, when settings were applied to late to some log entries. by @europaul (#5253)
• Added support for simultaneous use of Switch NI (with access/trunk ports) and VLAN sub-interfaces for management or Local NIs on the same physical port. by @milan-zededa (#5264)
• Fix riscv build by @christoph-zededa (#5265)
• Remote endpoints used to assess connectivity when the controller is unreachable are now configurable via properties diag.probe.remote.http.endpoint and diag.probe.remote.https.endpoint. These probes are used only for diagnostics and can be disabled by setting the properties to an empty string. by @milan-zededa (#5269)

What's Changed

• Update to MAINTAINERS by @eriknordmark in #5301
• Handle EINVAL when enabling VLAN filtering on Linux 6.12 by @milan-zededa in #5304
• Fix TPM Issues in Kernel 6.12.49 LTS by @shjala in #5303
• Makefile: Fix eve-k build for nvidia-jp6 by @rene in #5308
• Update EVE kernel to 6.12.49 LTS by @rucoder in #5287
• Kernel update - [arm64-generic] by @rene in #5309
• Add tpm eventlog by @shjala in #5275
• tools: update_kernel_commits.py: Add support for next branches by @rucoder in #5295
• Copy manifests after k3s starts so dest dir exists by @andrewd-zededa in #5305
• Kernel update - [amd64-next] by @rucoder in #5310
• Join Bootstrap node and get Cluster-ID for verify by @naiming-zededa in #5306

Full Changelog: 15.12.0-rc1...16.0.0-rc1

What's Changed

• Added check to prevent accidental EVE kvm to EVE-k upgrade by @eriknordmark in #5277
• Tie Breaker Node Support for clustering by @andrewd-zededa in #5257
• Add a flag to recreate multus link by @mrangana in #5280
• Kernel update - [amd64-generic] by @rucoder in #5278
• eve-k + pillar: Fix mount points for Nvidia by @rene in #5284
• Detect and report unpushed Linux kernel tags in update_kernel_commits.py by @rucoder in #5286
• Update Edgeview vendor for pillar/base eve-k change by @naiming-zededa in #5281
• Kernel update: bump arm64 kernel version by @rene in #5285
• fix eve-k arm64 builds by @zedi-pramodh in #5288
• Atomicity and consistency in the resume procedure of the downloader. by @jsfakian in #5254
• docs: add min & max config params values by @europaul in #5297
• eve persist on second disk fix: don't init P3 partition by @andrewd-zededa in #5289
• newlog: get rid of Fatal's in vector.go by @europaul in #5292
• Bump eden version to 1.0.12 by @milan-zededa in #5299
• Stop publishing deprecated ZInfoDevice.Network by @milan-zededa in #5283
• Update monitor TUI to v0.6.1 by @rucoder in #5300
• bump eve-libs: switch EVE to nettrace offload tracing by @kperakis-zededa in #5282
• k3s-base mode should uninstall any remaining longhorn storage classes by @andrewd-zededa in #5294
• newlog: refactor getMemlogMsg and add testing by @europaul in #5293

New Contributors

• @mrangana made their first contribution in #5280

Full Changelog: 15.11.0...15.12.0-rc1

What's Changed

• zedagent: refactor LPS handling into LocalCmdAgent component by @milan-zededa in #5191
• tpmmgr: validate nonce length by @shjala in #5229
• fix: newlog: init counter and filter vars by @europaul in #5234
• [gha] Add support for feature/* branches to workflows by @rucoder in #5236
• kubevirt: Handle Base k3s mode expansion, add nodes by @andrewd-zededa in #5197
• get-deps: fix automatic hashes by @christoph-zededa in #5227
• kubevirt: fix BaseOs Update defer check, ensure drain is requested by @andrewd-zededa in #5169
• kubevirt: detect and attempt to fix inconsistent nodeDeploymentMap by @andrewd-zededa in #5188
• [gha] disable publishing for feature/* branches by @rucoder in #5239
• get-deps: Update go modules by @rene in #5238
• reportinfo: fix copy&paste error by @christoph-zededa in #5240
• .gitignore: Add pkg/eve/Dockerfile by @rene in #5244
• S3 compatible object stores by @jsfakian in #5241
• Add null key verfication to detect TPM reset attacks by @shjala in #5214
• Collect NestedAppRuntimeStorageMetric and report to controller. by @andrewd-zededa in #5208
• Fast VM failover for unreachable node. by @andrewd-zededa in #5211
• pillar/Makefile: only run lkt when build-args need by @christoph-zededa in #5228
• Bpftrace compiler bump components by @christoph-zededa in #5201
• pubsub interface: improve comments by @europaul in #5250
• fix: newlog: read global config before processing logs by @europaul in #5242
• Some fixes based on a security-audit run on edgeview by @naiming-zededa in #5203
• Decrease log severity for some periodic log messages by @milan-zededa in #5249
• vcomLink communication refactoring by @shjala in #4502
• kubevirt: fix node name used in ndm verification by @andrewd-zededa in #5252
• Create bridge between VLAN parent port and its sub-interfaces by @milan-zededa in #5246
• pubsub: ensure subscription persistence consistency & remove double activation by @uncleDecart in #5235
• get-deps: fix empty platforms by @christoph-zededa in #5251
• Implement part 1/2 of LPS "network" endpoint in zedagent by @milan-zededa in #5237
• dom0-ztools: Replace pre-cooked UEFI settings by @rene in #5215
• diag: make Internet probe endpoints configurable by @milan-zededa in #5258
• Fix riscv debug build by @christoph-zededa in #5263
• Implement part 2/2 of LPS "network" endpoint in zedagent by @milan-zededa in #5259
• Bump eden version to 1.0.11 by @shjala in #5271
• diag: restore setting of ctx.globalConfig in handleGlobalConfigImpl by @milan-zededa in #5270
• newlog: Improve golangci-lint configuration and code comments by @europaul in #5262
• Collect-info upload noform by @christoph-zededa in #5260
• kubevirt: all_components_initialized may be missing, add it in conversion back to single node by @andrewd-zededa in #5272
• Rename eve-kubevirt image to eve-k by @eriknordmark in #5261
• Fix regression in cellular metricPollInterval initialization by @milan-zededa in #5276

Full Changelog: 15.10.0...15.11.0

Bug Fixes & Reliability Improvements

• Prevent unintended OS downgrades after upgrades
  Resolved an issue where upgrading to a new BaseOS could trigger a downgrade after reboot if configuration updates were skipped. The system now reads the BaseOS activation status directly from zboot and persists the latest configuration even when skipping updates, avoiding stale checkpoints.

• Proper cleanup of removed BaseOS configurations
  When the controller removes all BaseOS configurations, the device now correctly deletes these from its local configuration, preventing inconsistencies.

Upgrade Stability

• Improved reliability for upgrades initiated via Terraform provider 1.0.6
  Fixes scenarios where skipped configuration updates during an upgrade could lead to repeated downloads or rollback to an older OS version on reboot.

Full Changelog: 11.0.11-lts...11.0.12-lts

What's Changed

• kubevirt: cluster config deletion missing node drain/delete by @andrewd-zededa in #5195
• Update eve-api and adjust imports after netcmn.proto was moved to evecommon in eve-api by @milan-zededa in #5196
• pillar: report device name to controller/LOC by @christoph-zededa in #5186
• Expand USB diag log collection by @andrewd-zededa in #5194
• Update kubernetes components to latest stable versions by @zedi-pramodh in #5181
• kubevirt: Fix cluster volume replica reporting, skip not fully created. by @andrewd-zededa in #5189
• Fix the replicated volume status by @zedi-pramodh in #5199
• implement DhcpOptionsIgnore for IP, DNS, and Gateway by @milan-zededa in #5198
• Simplify a build process for ./pkg/external-boot-image by @rucoder in #5193
• Integrate monitor-rs version v0.6.0 by @rucoder in #5200
• ASCII!!! by @europaul in #5204
• dockerize the build of vector package by @europaul in #5171
• .gitignore: Fix pkg/external-boot-image build by @rene in #5212
• Provide more options to configure periodic messages by @europaul in #5213
• pkg/pillar: no more package bumping - switch to beautiful new Linuxkit feature to use automatic hashes by @christoph-zededa in #5190
• grub: add support for dynamic kernel cmdline via EFI variables by @rucoder in #5216
• pillar/zedagent: persist lastconfig even when skipping config update. by @OhmSpectator in #5217
• Refactor zboot partition API for evaluation platform by @rucoder in #5222
• vector: add apparmor profile by @europaul in #5230
• Kernel update - [amd64-generic] by @rucoder in #5232

Full Changelog: 15.9.0...15.10.0

What's Changed

• [11.0-stable] Take baseos activation status from zboot by @sultatos in #5221
• [11.0-stable] Cleanup BaseOsConfig if controller removes it by @sultatos in #5223
• [11.0-stable] pillar/zedagent: persist lastconfig even when skipping config update. by @OhmSpectator in #5226

Full Changelog: 11.0.11-lts...11.0.12-rc1

What's Changed

• [14.5-stable] mmagent: apply errIsUseless logic to LTE attach config errors by @milan-zededa in #4991
• [14.5-stable] pillar/zedagent: Check BaseOS Content Tree by @rene in #4999
• [14.5-stable] Support ICMP cellular connectivity probe with undefined host IP by @milan-zededa in #4987
• [14.5-stable] Makefile: Fix pkg/kube build by @rene in #5020
• [14.5-stable] .github: Use DockerHub pull-only credentials to avoid rate limits. by @OhmSpectator in #5040
• [14.5-stable] DPCManager patches: RemoteTemporaryFailure loop fix; more aggressive DPCL compression by @milan-zededa in #5034
• [14.5-stable] Separate Eden CI into untrusted Gate and trusted Runner workflows by @OhmSpectator in #5051
• [14.5-stable] Update Eden to version 1.0.5. by @OhmSpectator in #5055
• [14.5-stable] Backport all bug fixes to Makefile by @rucoder in #5064
• [14.5-stable] Fix "PR Gate" WF to identify build runs correctly. by @OhmSpectator in #5058
• [14.5-stable] Remove leftover from custom linuxkit-builde by @OhmSpectator in #5069
• [14.5-stable] Update Eden to 1.0.6 that fixes Dockerhub 429 error by @OhmSpectator in #5070
• [14.5-stable] vault: Check policyID exist before indexing by @shjala in #5049
• [14.5-stable] forward disabling the apps logs correctly by @europaul in #5082
• [14.5-stable] Kernel update - [amd64-generic]: Fix boot hang on Lenovo ThinkStation P3 Tiny Gen 2 by @rene in #5090
• [14.5-stable] Fixes in the S.M.A.R.T. report by @jsfakian in #5096
• [14.5-stable] Fix an Edgeview proxy operation issue by @naiming-zededa in #5095
• [14.5-stable] Fix image size of kubevirt docker run installer_raw by @andrewd-zededa in #5100
• [14.5-stable] Refactor pillar/zedcloud into pillar/controllerconn with improved structure and testing by @milan-zededa in #5098
• [14.5-stable] Tune parameters for quicker failovers by @zedi-pramodh in #5103
• [14.5-stable] Handle isreplicated flag for the volumes by @zedi-pramodh in #5104
• [14.5-stable] Handle error IsAlreadyExists by @zedi-pramodh in #5105
• [14.5-stable] Move LastResort DPC handling fully into DPCManager by @milan-zededa in #5109
• [14.5-stable] Return unknown error if k3s is not reachable by @zedi-pramodh in #5108
• [14.5-stable] Updated the AWS and Azure SDKs by @jsfakian in #5097
• [14.5-stable] Makefile: Add linuxkit parameters to missing places by @rene in #5121
• [14.5-stable] Backport arm64 runners related PRs by @rene in #5126
• [14.5-stable] Simplify "Build PR" workflow by removing matrix.os. by @OhmSpectator in #5130
• [14.5-stable] Cleanup replica sets by @zedi-pramodh in #5106
• [14.5-stable] "Update Hailo TPU FW to 4.21.0" by @rucoder in #5136
• [14.5-stable] Integrate monitor v0.5.0 by @rucoder in #5133
• [14.5-stable] u-boot: Add OnLogic FR201 sysinfo driver by @rene in #5137
• [14.5-stable] Properly handle device IPv6 connectivity by @milan-zededa in #5143
• [14.5-stable] Return isLowerUp directly from the link attributes lower up by @sultatos in #5145
• [14.5-stable] Backport #4781 #5085 by @rucoder in #5154
• [14.5-stable] musl mirror by @christoph-zededa in #5152
• [14.5-stable] spec sh wwan assigngrp by @christoph-zededa in #5149

Full Changelog: 14.5.0-lts...14.5.1-lts