{ "release_id": "4.3-20260128062749", "date": "2026-01-28T06:27:49.927042+00:00", "type": "feature", "major_version": "4.3", "urgency": "medium", "text": { "de": "Das Januar-Release 2026 bringt zahlreiche Verbesserungen in Stabilität, Sicherheit und Bedienbarkeit.\n\n# opsiconfd\n\nIm opsiconfd lag der Fokus dieses Releases auf Stabilität und Sicherheit.\n\nDer Standardbenutzer für den Betrieb des opsiconfd ist jetzt `opsiconfd`.\n\nDie datenbankbasierte Authentifizierung unterstützt nun zusätzlich Argon2id als neuen Hashing-Algorithmus für die Benutzer-Passwörter.\nArgon2id wurde auch als neuer Standard-Wert gesetzt.\nDer verwendeten Hashing-Algorithmus kann jederzeit geändert werden, die Passwörter werden dann bei einer Passwort-basierten Benutzer-Anmeldung automatisch migriert.\nAußerdem können Benutzerkonten aus externer Authentifizierung in die datenbankbasierte Authentifizierung migriert werden.\nZusätzlich wird nun die Authentifizierung über Bearer-Tokens unterstützt.\n\nDer opsiconfd wird nun auch mit eine SBOM-Datei ausgeliefert, die unter `/usr/share/doc/opsiconfd` zu finden ist.\n\nZeitstempel werden nun durchgängig in UTC geführt, unter anderem für Werte wie `host.lastSeen`.\n\nFür die Host-Steuerung wird jetzt ausschließlich der Messagebus verwendet, wodurch nicht erreichbare Clients schneller erkannt werden und die Server-Last reduziert wird.\n\nDie Metriken wurden um Informationen zu Redis-Verbindungen erweitert.\n\nIm Hardware-Audit stehen neue BIOS-Informationen zur Verfügung: `UEFIBootActive`, `SecureBootActive` und `SecureBootWindowsCA2023`.\n\n\n# opsi-client-agent\n\nDer opsi-client-agent profitiert von mehreren Stabilitätsverbesserungen, insbesondere im Umgang mit Netzwerkproblemen während der Installation.\nDie Widerstandsfähigkeit gegenüber langsamen oder instabilen Verbindungen wurde deutlich erhöht.\n\nDas Product-Caching kann nun automatisch unterbrochen werden, wenn eine getaktete Netzwerkverbindung erkannt wird.\n\nZudem wurde das Debugging bei CIFS-Mount-Fehlern des Typs 1219 erweitert, was die Analyse von Problemen mit mehrfachen Verbindungen zu Netzwerkfreigaben erleichtert.\n\nEin weiteres Highlight ist die Einführung eines neuen Notifiers mit überarbeitetem Funktionsumfang und modernem Design.\nDieser kann optional über die Konfiguration aktiviert werden.\n\n# opsi-cli\nAuch opsi-cli wurde umfassend überarbeitet und hat neben einigen Fehlerbehebungen und Verbesserungen auch neue Feature erhalten.\n\nMinuszeichen sind in Plugin-Verzeichnisnamen nicht mehr zulässig und werden automatisch durch Unterstriche ersetzt.\nDiese Änderung ist erforderlich, da Python-Paket- und Modulnamen keine Minuszeichen enthalten dürfen.\nBitte aktualisieren Sie Ihre Plugin-Verzeichnisse entsprechend; benennen Sie zum Beispiel das Plugin-Verzeichnis von `my-plugin` in `my_plugin` um.\nDie Plugin-ID in den Metadaten darf weiterhin Minuszeichen enthalten und kann unverändert bleiben.\n\nBeim Entfernen von Paketen können Metadaten vollständig gelöscht werden (`package uninstall --purge`).\n\nMit dem neuen Kommando `package info` können Paketinformationen aus opsi-Paketen abgefragt werden.\n\nDarüber hinaus unterstützt die opsi-cli jetzt Datei-Uploads und -Downloads über den Messagebus.\nDie entsprechenden Funktionen stehen über die Kommandos `messagebus upload` und `messagebus download` bereit.\n\nDie Kommandos zur Anzeige von Konfigurations- und Produkteigenschaften im Bereich `datastore` wurden ebenfalls überarbeitet und sind nun übersichtlicher und konsistenter in der Ausgabe.\n\n# opsi-linux-bootimage\n\nDas opsi-linux-bootimage basiert nun auf Ubuntu 24.04 LTS.\nDieser Wechsel sorgt für eine bessere Stabilität sowie eine langfristige Wartbarkeit.\n\n# opsipxeconfd\n\nIm opsipxeconfd wurde GRUB auf Version 2.12-9 aktualisiert und mit den aktuellen Debian-Patches versehen.\nDamit ist eine bessere Kompatibilität und Sicherheit im PXE-Boot-Umfeld gewährleistet.\n\n# opsi-script\n\nFür opsi-script enthält das Release vor allem Fehlerbehebungen.\nZusätzlich wurde das neue Kommando `exitScript` eingeführt, das eine gezieltere Steuerung des Skriptabbruchs und der Rückmeldung an den Server ermöglicht.\n\n# opsi-configed\n\nIm opsi-configed werden Zeitstempel nun korrekt in die konfigurierte lokale Zeit umgerechnet.\nDie Remote-Control-Funktion kann wieder wie gewohnt mit der Taste F7 gestartet werden.\nDie Benutzerführung wurde verbessert: Wenn kein Depot oder kein Client ausgewählt ist, zeigen die entsprechenden Tabs nun eine klare Hinweismeldung an. Auch an anderen Stellen gibt es kleine Veränderungen, die die Bedienbarkeit verbessern sollen. Mehr Infos dazu gibt es in den Changelogs.\n\nDarüber hinaus wurden diverse kleinere Fehler behoben.\n\n# WebGUI\n\nAuch in der WebGUI erfolgt die Anzeige von Zeitstempeln jetzt in der konfigurierten Zeit.\nErgänzend dazu wurden mehrere Bugs behoben.\n\n# Linux-Netboot-Produkte\n\nDie Linux-Netboot-Produkte installieren nun keinen SSH-Server mehr installiert.\nZusätzlich wurden verschiedene Fehler korrigiert.\n", "en": "The January 2026 release brings numerous improvements in stability, security, and usability.\n\n# opsiconfd\n\nIn this release, the focus for opsiconfd was on stability and security.\n\nThe default user for operating opsiconfd is now `opsiconfd`.\n\nDatabase-based authentication now additionally supports Argon2id as a new hashing algorithm for user passwords.\nArgon2id has also been set as the new default value.\nThe hashing algorithm in use can be changed at any time; passwords will then be automatically migrated upon a password-based user login.\nIn addition, user accounts from external authentication can be migrated to database-based authentication.\nAuthentication via bearer tokens is now also supported.\n\nopsiconfd is now delivered with an SBOM file, which can be found at `/usr/share/doc/opsiconfd`.\n\nTimestamps are now consistently handled in UTC, including values such as `host.lastSeen`.\n\nFor host control, only the message bus is now used. This allows unreachable clients to be detected more quickly and reduces server load.\n\nMetrics have been extended to include information about Redis connections.\n\nThe hardware audit now provides new BIOS information: `UEFIBootActive`, `SecureBootActive`, and `SecureBootWindowsCA2023`.\n\n# opsi-client-agent\n\nThe opsi-client-agent benefits from several stability improvements, particularly when handling network issues during installation.\nResilience against slow or unstable connections has been significantly increased.\n\nProduct caching can now be automatically interrupted when a metered network connection is detected.\n\nIn addition, debugging for CIFS mount errors of type 1219 has been extended, making it easier to analyze issues with multiple connections to network shares.\n\nAnother highlight is the introduction of a new notifier with a revised feature set and a modern design.\nIt can be optionally enabled via configuration.\n\n# opsi-cli\nopsi-cli has also been extensively revised and, in addition to several bug fixes and improvements, has gained new features.\n\nMinus signs are no longer permitted in plugin directory names and will be automatically replaced with underscores.\nThis change is required because Python package and module names cannot contain minus signs.\nPlease update your plugin directories accordingly; for example, rename the plugin directory from `my-plugin` to `my_plugin`.\nThe plugin ID in the metadata may still contain minus signs and can remain unchanged.\n\nWhen removing packages, metadata can now be completely deleted (`package uninstall --purge`).\n\nWith the new `package info` command, package information can be queried from opsi packages.\n\nFurthermore, opsi-cli now supports file uploads and downloads via the message bus.\nThe corresponding functions are available via the commands `messagebus upload` and `messagebus download`.\n\nThe commands for displaying configuration and product properties in the `datastore` area have also been revised and are now clearer and more consistent in their output.\n\n\n# opsi-linux-bootimage\n\nThe opsi-linux-bootimage is now based on Ubuntu 24.04 LTS.\nThis change ensures better stability and long-term maintainability.\n\n# opsipxeconfd\n\nIn opsipxeconfd, GRUB has been updated to version 2.12-9 and patched with the latest Debian updates.\nThis ensures improved compatibility and security in PXE boot environments.\n\n# opsi-script\n\nFor opsi-script, this release mainly includes bug fixes.\nIn addition, the new `exitScript` command has been introduced, enabling more precise control over script termination and feedback to the server.\n\n# opsi-configed\n\nIn opsi-configed, timestamps are now correctly converted to the configured local time.\nThe remote control function can once again be started as usual using the F7 key.\nUser guidance has been improved: if no depot or no client is selected, the corresponding tabs now display a clear informational message. We also improved usability on other places. More information can be found in the changelogs.\n\nIn addition, various smaller bugs have been fixed.\n\n# WebGUI\n\nIn the WebGUI, timestamps are now also displayed in the configured time.\nIn addition, several bugs have been fixed.\n\n# Linux netboot products\n\nThe Linux netboot products no longer install an SSH server.\nIn addition, various bugs have been fixed.\n" }, "components": [ { "name": "alma10", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/alma10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "alma8", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/alma8/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "alma9", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/alma9/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "debian", "type": "OPSI_PACKAGE", "version": "4.3.0.6-3", "removal": false, "changelog_url": "OPSI_PACKAGE/debian/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "debian11", "type": "OPSI_PACKAGE", "version": "4.3.0.4-3", "removal": false, "changelog_url": "OPSI_PACKAGE/debian11/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "debian12", "type": "OPSI_PACKAGE", "version": "4.3.0.4-3", "removal": false, "changelog_url": "OPSI_PACKAGE/debian12/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "debian13", "type": "OPSI_PACKAGE", "version": "4.3.0.4-3", "removal": false, "changelog_url": "OPSI_PACKAGE/debian13/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "hwaudit", "type": "OPSI_PACKAGE", "version": "4.3.2.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/hwaudit/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21", "type": "OPSI_PACKAGE", "version": "4.3.0.6-2", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21-1", "type": "OPSI_PACKAGE", "version": "4.3.0.6-2", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21-1/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21-2", "type": "OPSI_PACKAGE", "version": "4.3.0.6-2", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21-2/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21-3", "type": "OPSI_PACKAGE", "version": "4.3.0.6-2", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21-3/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint22", "type": "OPSI_PACKAGE", "version": "4.3.0.6-2", "removal": false, "changelog_url": "OPSI_PACKAGE/mint22/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint22-1", "type": "OPSI_PACKAGE", "version": "4.3.0.6-2", "removal": false, "changelog_url": "OPSI_PACKAGE/mint22-1/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint22-2", "type": "OPSI_PACKAGE", "version": "4.3.0.6-2", "removal": false, "changelog_url": "OPSI_PACKAGE/mint22-2/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opensusel15-5", "type": "OPSI_PACKAGE", "version": "4.3.0.4-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opensusel15-5/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opensusel15-6", "type": "OPSI_PACKAGE", "version": "4.3.0.4-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opensusel15-6/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "OPSI_PACKAGE", "version": "4.3.35.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "TOOL", "version": "4.3.35.1", "removal": false, "changelog_url": "TOOL/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "OPSI_PACKAGE", "version": "4.3.35.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "TOOL", "version": "4.3.35.1", "removal": false, "changelog_url": "TOOL/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-client-agent", "type": "OPSI_PACKAGE", "version": "4.3.17.4-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-client-agent/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-client-agent-msi", "type": "TOOL", "version": "4.3.17.4", "removal": false, "changelog_url": "TOOL/opsi-client-agent-msi/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-configed", "type": "OPSI_PACKAGE", "version": "4.3.19.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-configed/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-configed-portable", "type": "TOOL", "version": "4.3.19.3", "removal": false, "changelog_url": "TOOL/opsi-configed-portable/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-linux-bootimage", "type": "SERVER_PACKAGE", "version": "20260121", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-linux-bootimage/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-linux-bootimage.iso", "type": "TOOL", "version": "20260121", "removal": false, "changelog_url": "TOOL/opsi-linux-bootimage.iso/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-linux-client-agent", "type": "OPSI_PACKAGE", "version": "4.3.17.4-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-linux-client-agent/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-logviewer-portable", "type": "TOOL", "version": "4.3.19.3", "removal": false, "changelog_url": "TOOL/opsi-logviewer-portable/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-mac-client-agent", "type": "OPSI_PACKAGE", "version": "4.3.17.4-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-mac-client-agent/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-script", "type": "OPSI_PACKAGE", "version": "4.12.19.0-8", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-script/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-utils", "type": "SERVER_PACKAGE", "version": "4.3.21.2", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-utils/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-webgui", "type": "SERVER_PACKAGE", "version": "4.3.47.3", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-webgui/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-webgui.zip", "type": "TOOL", "version": "4.3.47.3", "removal": false, "changelog_url": "TOOL/opsi-webgui.zip/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsiconfd", "type": "SERVER_PACKAGE", "version": "4.3.48.4", "removal": false, "changelog_url": "SERVER_PACKAGE/opsiconfd/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsipxeconfd", "type": "SERVER_PACKAGE", "version": "4.3.15.2", "removal": false, "changelog_url": "SERVER_PACKAGE/opsipxeconfd/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "oraclelinux10", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/oraclelinux10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "oraclelinux8", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/oraclelinux8/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "oraclelinux9", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/oraclelinux9/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "redhat10", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/redhat10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "redhat8", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/redhat8/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "redhat9", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/redhat9/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "relution-enrollment", "type": "OPSI_PACKAGE", "version": "1.0-1", "removal": false, "changelog_url": "OPSI_PACKAGE/relution-enrollment/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "rocky10", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/rocky10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "rocky8", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/rocky8/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "rocky9", "type": "OPSI_PACKAGE", "version": "4.3.0.3-1", "removal": false, "changelog_url": "OPSI_PACKAGE/rocky9/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-3", "type": "OPSI_PACKAGE", "version": "4.3.0.1-2", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-3/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-4", "type": "OPSI_PACKAGE", "version": "4.3.0.1-2", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-4/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-5", "type": "OPSI_PACKAGE", "version": "4.3.0.1-2", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-5/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-6", "type": "OPSI_PACKAGE", "version": "4.3.0.1-2", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-6/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "sles15-7", "type": "OPSI_PACKAGE", "version": "4.3.0.1-2", "removal": false, "changelog_url": "OPSI_PACKAGE/sles15-7/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ubuntu", "type": "OPSI_PACKAGE", "version": "4.3.0.6-3", "removal": false, "changelog_url": "OPSI_PACKAGE/ubuntu/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ubuntu22-04", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/ubuntu22-04/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ubuntu24-04", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/ubuntu24-04/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win10", "type": "OPSI_PACKAGE", "version": "4.3.0.4-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win10-captured", "type": "OPSI_PACKAGE", "version": "4.3.0.4-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win10-captured/changelog.txt", "version_text_de": "", "version_text_en": "" } ] }