Tags: bsdci/libioc
Tags
Release v0.8.1 Security - devfs is mounted with proper devfs_ruleset Bugs - fix package installation with Pkg - mount fdescfs when mount_fdescfs is enabled - sendmail is disabled via periodic.conf Enhancements - automatically set enforce_statfs=1 when allowing mounts in jails - improved error handling of Jail.fork_exec
Release v0.8.0 Breaking - events during start and fork_exec have changed and are fine grained now Enhancements - increased Jail start performance due to usage of [py-jail](https://github.com/gronke/py-jail) - improve handling of invalid IP address configuration - strict JailConfig property validation, but permissive reading of existing invalid config (with warnings) Bugs - fix support for multiple resource limits - <VNET_NIC>_mac is a known JailConfig property - install py36-ucl to fix issues importing libucl.so.6 - always open fstab files with UTF-8 encoding - properly setup and teardown non-VNET network - support multiple IPv4 and IPv6 addresses when using non-VNET network
Release v0.7.1 Enhancements - utilize libc to unmount and remove jails - run prestop, stop and poststop hooks individually - propagate individual events for stop sub-tasks - Fstab files may contain UTF-8 characters - Open text files with hardcoded UTF-8 encoding (not related to the host setting) Chores - refactor Fstab into JailFstab inheriting a more generic Fstab class Fixes - disable IPFW on both persistent and non-persistent jails - force value validation when cloning config from dict - output nested JSON to config.json - VNET MAC JailConfig properties with dynamic name can be order independent
Release v0.7.0 Breaking - The JailState is no longer available as JailGenerator.state - 'Jail.state[jid]' was the only item used, which is now queried with [py-jail](https://github.com/gronke/py-jail) transparently - ZFS basejail datasets are no longer created by default - Setting 'ioc_legacy_support=YES' in /etc/rc.conf re-enables the compatibility feature Features - Check 'hostid' when 'hostid_strict_check' is enabled - Support for '' env variable for fetching releases and updates Enhancements - Use native Python [py-freebsd_sysctl](https://github.com/gronke/py-freebsd_sysctl) libc bindings to read supported 'security.jail.param' sysctls - Lookup jail state (jid) with [py-jail](https://github.com/gronke/py-jail) - Always query jail state when accessing the JailGenerator.running property, but de-bounce JailGenerator.jid - remove IP addresses from non-VNET interfaces after stopping a jail Fixes - Add missing ix-plugins provisioner errors - Fix fetching of packets for releases not matching the host release (via ABI= env variable) - Allow backup importer to read nested JSON config - Handling of boolean value jail_zfs is fixed and consistent Chores - Test automation with Cirrus Ci (pass is mandatory merge criteria) - Release and Update mirror cache for testing with asset cache - Refactor jail parameters into JailParams class
Release v0.6.0
Breaking
- The Jail Config namespace 'provisioning' was renamed to 'provision'
Fixes
- FreeBSD 12 release updates by using a virtual basedir for freebsd-update
Enhancements
- Validate BaseConfig when cloning
- Pass through ZFS /dev/zvol devices when sharing ZFS datasets with a jail
Features
- Bhyve VMs in Jails ('allow.vmm')
- Puppet provisioning of jails from local and remote control repos
- refactor and simplify Config classes - provide special config properties of defaults as property instance - access dicts of nested config properties - ignore_source_config property has desired effect and is renamed - optimize config handling performance - rename classes to ioc namespace - IocageEvent → IocEvent - IocageError → IocError Bugs - Properly ignore global user defaults [#602] - FreeBSD Release download of lib32.txz release asset [#600] - Secure VNET bridge interfaces were detected as invalid on start [#603]
PreviousNext