-
Notifications
You must be signed in to change notification settings - Fork 10
/
changelog
437 lines (286 loc) · 14.7 KB
/
changelog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
turnkey-rails-18.1 (1) turnkey; urgency=low
* v18.1 rebuild - includes latest Debian & TurnKey packages.
* Update Ruby: v3.3.5 and Rails: 7.2.1.
* fix DB corruption on reboot - closes #1983.
* Adds 'mariadb_admin' DB user - exclusively for use in the Webmin MariaDB
module. Part of #1945.
* Configuration console (confconsole) - v2.1.6:
- Bugfix broken DNS-01 Let's Encrypt challenge - closes #1876 & #1895.
Fixed in v2.1.5 - already included in some appliances.
- Let's Encrypt/Dehydrated - bugfix cron failure - closes #1962.
- General dehydrated-wrapper code cleanup - now passes shellcheck.
* Reduce log noise by creating ntpsec log dir - closes #1952.
* Apache mod_evasive config improvements:
- Bump DOSPageCount from (default) 2 -> 5 - closes #1951.
- DOSLogDir - use default log dir & fix permissions - closes #1950.
- Add DOSWhitelist example - commented out.
-- Jeremy Davis <jeremy@turnkeylinux.org> Wed, 25 Sep 2024 03:52:56 +0000
turnkey-rails-18.0 (1) turnkey; urgency=low
* Install Ruby v3.3.0 (via rbenv) & Rails v7.1.3.
[Zhenya Khvorostian <zhenya@turnkeylinux.org>]
* Configure bundler to fall back to IPv4 if IPv6 fails.
* Ensure hashfile includes URL to public key - closes #1864.
* Include webmin-logviewer module by default - closes #1866.
* Upgraded base distribution to Debian 12.x/Bookworm.
* Configuration console (confconsole):
- Support for DNS-01 Let's Encrypt challenges.
[ Oleh Dmytrychenko <dmytrychenko.oleh@gmail.com> github: @NitrogenUA ]
- Support for getting Let's Encrypt cert via IPv6 - closes #1785.
- Refactor network interface code to ensure that it works as expected and
supports more possible network config (e.g. hotplug interfaces & wifi).
- Show error message rather than stacktrace when window resized to
incompatable resolution - closes #1609.
[ Stefan Davis <stefan@turnkeylinux.org> ]
- Bugfix exception when quitting configuration of mail relay.
[ Oleh Dmytrychenko <dmytrychenko.oleh@gmail.com> github: @NitrogenUA ]
- Improve code quality: implement typing, fstrings and make (mostly) PEP8
compliant.
[Stefan Davis <stefan@turnkeylinux.org> & Jeremy Davis
* Firstboot Initialization (inithooks):
- Refactor start up (now hooks into getty process, rather than having it's
own service).
[ Stefan Davis <stefan@turnkeylinux.org> ]
- Refactor firstboot.d/01ipconfig (and 09hostname) to ensure that hostname
is included in dhcp info when set via inithooks.
- Package turnkey-make-ssl-cert script (from common overlay - now packaged
as turnkey-ssl). Refactor relevant scripts to leverage turnkey-ssl.
- Refactor run script - use bashisms and general tidying.
- Show blacklisted password characters more nicely.
- Misc packaging changes/improvements.
- Support returning output from MySQL - i.e. support 'SELECT'. (Only
applies to apps that include MySQL/MariaDB).
* Web management console (webmin):
- Upgraded webmin to v2.105.
- Removed stunnel reverse proxy (Webmin hosted directly now).
- Ensure that Webmin uses HTTPS with default cert
(/etc/ssl/private/cert.pem).
- Disabled Webmin Let's Encrypt (for now).
* Web shell (shellinabox):
- Completely removed in v18.0 (Webmin now has a proper interactive shell).
* Backup (tklbam):
- Ported dependencies to Debian Bookworm; otherwise unchanged.
* Security hardening & improvements:
- Generate and use new TurnKey Bookworm keys.
- Automate (and require) default pinning for packages from Debian
backports. Also support non-free backports.
* IPv6 support:
- Adminer (only on LAMP based apps) listen on IPv6.
- Nginx/NodeJS (NodeJS based apps only) listen on IPv6.
* Misc bugfixes & feature implementations:
- Remove rsyslog package (systemd journal now all that's needed).
- Include zstd compression support.
- Enable new non-free-firmware apt repo by default.
- Improve turnkey-artisan so that it works reliably in cron jobs (only
Laravel based LAMP apps).
* Set mod_evasive log location - makes debugging easier.
[ Jeremy Davis <jeremy@turnkeylinux.org> ]
* Include and enable mod_evasive and mod_security2 by default in Apache.
[ Stefan Davis <Stefan@turnkeylinux.org> ]
* Use MariaDB (MySQL replacement) v10.11.3 (from debian repos).
-- Jeremy Davis <jeremy@turnkeylinux.org> Tue, 23 Jan 2024 05:11:13 +0000
turnkey-rails-17.1 (1) turnkey; urgency=low
* Updated all Debian packages to latest.
[ autopatched by buildtasks ]
* Patched bugfix release. Closes #1734.
[ autopatched by buildtasks ]
-- Jeremy Davis <jeremy@turnkeylinux.org> Mon, 27 Mar 2023 01:16:58 +0000
turnkey-rails-17.0 (1) turnkey; urgency=low
* Update for Rails 7.
* Install NodeJS (now necessary for Rails).
* Replace obsolete webpacker gem with shakapacker.
* Note: Please refer to turnkey-core's 17.0 changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Anton Pyrogovskyi <anton@turnkeylinux.org> Tue, 14 Mar 2023 18:53:51 +0000
turnkey-rails-16.1 (1) turnkey; urgency=low
* Rebuild on latest Debian Buster.
* Note: Please refer to turnkey-core's 16.1 changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Stefan Davis <stefan@turnkeylinux.org> Wed, 28 Apr 2021 00:26:45 +1000
turnkey-rails-16.0 (1) turnkey; urgency=low
* Update to latest stable Ruby on Rails - v6.0.3.3.
* Update other relevant dependencies/tools:
- ruby: v2.6.6
- rbenv: v1.1.2
- yarn: v1.22.5
* Explcitly disable TLS<1.2 (i.e. SSLv3, TLSv1, TLSv1.1). (v15.x
TurnKey releases supported TLS 1.2, but could fallback as low as TLSv1).
* Update SSL/TLS cyphers to provide "Intermediate" browser/client support
(suitable for "General-purpose servers with a variety of clients,
recommended for almost all systems"). As provided by Mozilla via
https://ssl-config.mozilla.org/.
* Updated version of mysqltuner script - now installed as per upstream
recommendation.
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Zhenya Hvorostian <zhenya@turnkeylinux.org> Wed, 08 Sep 2020 11:47:06 +0300
turnkey-rails-15.1 (1) turnkey; urgency=low
* Rebuild to resolve inadvertent removal of mariadb during sec-updates
- part of #1246.
-- Jeremy Davis <jeremy@turnkeylinux.org> Thu, 22 Nov 2018 14:39:30 +1100
turnkey-rails-15.0 (1) turnkey; urgency=low
* Update ruby to 2.3.6.
* Latest upstream version of Rails and gems.
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Zhenya Hvorostian <zhenya@turnkeylinux.org> Thu, 15 Feb 2017 03:12:00 +0300
turnkey-rails-14.2 (1) turnkey; urgency=low
* Install rbenv and ruby 2.3.3 from upstream source.
* Latest upstream version of Rails and gems.
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Zhenya Hvorostian <zhenya@turnkeylinux.org> Mon, 26 Jun 2017 09:15:42 +0030
turnkey-rails-14.1 (1) turnkey; urgency=low
* Improved regen-rails-secrets inithook [#591].
* Fixed broken example app by pre-compiling webcp assests [#593].
* Installed security updates.
* Installed updated packages from TurnKey repo
- includes relevant Webmin packages (v1.780)
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Jeremy Davis <jeremy@turnkeylinux.org> Tue, 01 Mar 2016 04:11:33 +0000
turnkey-rails-14.0 (1) turnkey; urgency=low
* Latest upstream version of Rails and gems.
* Bugfix for log permissions issue [#235].
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Anton Pyrogovskyi <anton@turnkeylinux.org> Fri, 28 Aug 2015 11:51:43 +0300
turnkey-rails-13.0 (2) turnkey; urgency=low
* Regenerate Rails 4 hardwired secret in /var/www/railsapp
-- Liraz Siri <alon@turnkeylinux.org> Fri, 20 Jun 2014 11:22:43 +0300
turnkey-rails-13.0 (1) turnkey; urgency=low
* Rails:
- Latest upstream version of Rails and gems.
- Replaced ruby-enterprise with stock ruby from Debian [#102].
- Bugfix: mysql needs to be running when generating controller.
- Bugfixes for package transitions [#58, #59].
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Alon Swartz <alon@turnkeylinux.org> Fri, 11 Oct 2013 10:59:44 +0300
turnkey-rails-12.1 (1) turnkey; urgency=low
* Rails:
- Latest version of Rails and gems will be installed at build time.
- Added execjs and therubyracer gems (LP#1084235).
* Upstream source component versions:
rubyenterprise 1.8.7-2012.02_i386_ubuntu10.04
1.8.7-2012.02_amd64_debian6
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Alon Swartz <alon@turnkeylinux.org> Sun, 07 Apr 2013 08:00:00 +0200
turnkey-rails-12.0 (1) turnkey; urgency=low
* Rails
- Upgraded to latest upstream rails archive.
- Upgraded to latest upstream ruby-enterprise and passenger.
- Added libv8 and other useful gems.
- Rewrite of example control-panel (cp) app for Rails 3 (new features, layout).
* Major component versions
rails 3.2.3
ruby-enterprise 1.8.7-2012.02
apache2 2.2.16-6+squeeze7
mysql-server 5.1.63-0+squeeze1
build-essential 11.5
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Alon Swartz <alon@turnkeylinux.org> Wed, 01 Aug 2012 08:00:00 +0200
turnkey-rails-11.3 (1) turnkey; urgency=low
* Installed security updates.
* Enabled etckeeper garbage collection by default.
* Upgraded to latest inithooks version (adhoc re-initialization via turnkey-init)
-- Alon Swartz <alon@turnkeylinux.org> Mon, 05 Dec 2011 10:48:44 +0000
turnkey-rails-11.2 (1) turnkey; urgency=low
* Installed security updates.
* Added HubDNS package and firstboot configuration.
-- Alon Swartz <alon@turnkeylinux.org> Fri, 15 Jul 2011 07:47:08 +0000
turnkey-rails-11.1 (1) turnkey; urgency=low
* Replaced Ruby with Ruby Enterprise (performance).
* Set MySQL root password on firstboot (convenience, security).
* Force MySQL to use Unicode/UTF8.
* Set postfix MTA myhostname to localhost (bugfix).
* Included libreadline-dev so rails console works (bugfix).
* Major component versions:
ruby-enterprise 1.8.7-2010.02_i386_ubuntu10.04
mysql-server 5.1.41-3ubuntu12.8
apache2 2.2.14-5ubuntu8.4
build-essential 11.4build1
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Alon Swartz <alon@turnkeylinux.org> Sun, 19 Dec 2010 15:01:05 +0200
turnkey-rails-2009.10 (2) hardy; urgency=low
* Installed all security updates (see manifest for package versions).
* Install security updates on firstboot (except when running live).
* Trick webmin into not checking for upgrades (managed by apt).
* Updated di-live mysql mechanism and secret regeneration.
* Included latest version of inithooks and updated scripts.
* Included wget as per common request.
-- Alon Swartz <alon@turnkeylinux.org> Mon, 29 Mar 2010 09:02:11 +0200
turnkey-rails-2009.10 (1) hardy; urgency=low
* Switched to Phusion Passenger for Apache (mod_rails) instead of
mongrel_cluster (simpler to configure and maintain).
* Including git version control (convenience).
* Regenerates all secrets during installation / firstboot (security).
* Added Turnkey web control panel (replaces welcome page). Also provides
example Rails application using controller, views, etc.
* Upgraded Ruby on Rails gems:
- rails 2.3.4
- actionmailer 2.3.4
- actionpack 2.3.4
- activerecord 2.3.4
- activeresource 2.3.4
- rake 0.8.7
- fastthread 1.0.7
* Major component versions:
mysql-server 5.0.51a-3ubuntu5.4
apache2 2.2.8-1ubuntu0.11
ruby 4.1
build-essential 11.3ubuntu1
git-core 1:1.5.4.3-1ubuntu2.1
rubygems 1.3.5
rails 2.3.4
rake 0.8.7
passenger 2.2.5
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Alon Swartz <alon@turnkeylinux.org> Tue, 29 Sep 2009 15:39:41 +0200
turnkey-rails-2009.03 (1) hardy; urgency=low
* upgraded ruby on rails gems
- rails 2.3.2
- actionmailer 2.3.2
- actionpack 2.3.2
- activerecord 2.3.2
- activeresource 2.3.2
- rake 0.8.4
- fastthread 1.0.5
* bugfix: apache not proxying requests to the mongrel cluster (LP#348899)
* improved rails passwords and secrets generation mechanism (security)
- database password is now randomly generated, and regenerated
during installation
- regenerate more secure secret key during installation
* major component versions
mysql-server 5.0.51a-3ubuntu5.4
apache2 2.2.8-1ubuntu0.5
ruby 4.1
build-essential 11.3ubuntu1
rubygems 1.3.1
rails 2.3.2
rake 0.8.4
mongrel 1.1.5
mongrel_cluster 1.0.5
-- Alon Swartz <alon@turnkeylinux.org> Thu, 26 Mar 2009 11:55:02 +0200
turnkey-rails-2009.02 (1) hardy; urgency=low
* added SSL support
* regenerate rails secret key during installation (security)
* support configuring mysql root password during installation
* added webmin administration modules for apache and mysql (convenience)
* set empty mysql root password in live/demo mode (for convenience)
* major component versions
mysql-server 5.0.51a-3ubuntu5.4
apache2 2.2.8-1ubuntu0.3
ruby 4.1
build-essential 11.3ubuntu1
rubygems 1.3.1
rails 2.2.2
rake 0.8.3
mongrel 1.1.5
mongrel_cluster 1.0.5
* note: please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Alon Swartz <alon@turnkeylinux.org> Thu, 29 Jan 2009 14:31:46 +0200