forked from omega8cc/boa
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG.txt
8376 lines (6772 loc) · 380 KB
/
CHANGELOG.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
### Stable BOA-4.1.3 Release - Full Edition
### Date: Thu Sep 24 18:51:49 CEST 2020
### Milestone URL: https://github.com/omega8cc/boa/milestones/4.1.3
# Release Notes:
This BOA release is a second transitional release before switching to rolling
release policy. Detailed changelog will follow.
This BOA update provides latest PHP versions, system updates, including
security fixes, many bug fixes, latest Aegir version ..but no Aegir platforms
are installed by default anymore, unless their keywords are listed in the file
~/static/control/platforms.info (please read further below for details)
TL;DR
* Yes, blazing fast site clone/migrate mode is available even for giant sites!
* Yes, BOA still supports Pressflow 6 (LTS version only!)
* No, we no longer install any supported distros as platforms by default.
@=> Super fast site cloning and migration mode (NEW!)
It is now possible to enable blazing fast migrations and cloning even sites
with complex and giant databases with this empty control file:
~/static/control/MyQuick.info
By the way, how fast is the super-fast? It's faster than you would expect!
We have seen it speeding up the clone and migrate tasks normally taking
1-2 hours to... even 3-6 minutes! Yes, that's how fast it's!
This file, if exists, will enable a super fast per table and parallel DB
dump and import, although without leaving a conventional complete database
dump file in the site archive normally created by Aegir when you run
not only the backup task, but also clone, migrate and delete tasks, hence
also restore task will not work anymore.
We need to emphasise this again: with this control file present all normally
super slow tasks will become blazing fast, but at the cost of not keeping
an archived complete database dump file in the archive of the site directory
where it would be otherwise included.
Of course the system still maintains nightly backups of all your sites
using the new split sql dump archives, but with this control file present
you won't be able to use restore task in Aegir, because the site archive
won't include the database dump -- you can still find that sql dump split
into per table files in the backups directory, though, in the subdirectory
with timestamp added, so you can still access it manually, if needed.
@=> Drupal platforms and Composer support
We no longer install any supported Drupal distros as platforms by default, but
you can customize Octopus platform list via control file, which will be used
on the next Octopus upgrade (you can request it individually if you are on
hosted Aegir service):
~/static/control/platforms.info
This file, if exists and contains a list of symbols used to define supported
platforms, allows to control/override the value of _PLATFORMS_LIST variable
normally defined in the /root/.${_USER}.octopus.cnf file, which can't be
modified by the Aegir instance owner with no system root access.
IMPORTANT: If used, it will replace/override the value defined on initial
instance install and all previous upgrades. It takes effect on every future
Octopus instance upgrade, which means that you will miss all newly added
distributions, if they will not be listed also in this control file.
Supported values which can be written in this file, listed in a single line
or one per line:
Drupal 9 based
THR ----------- Thunder
Drupal 8 based
LHG ----------- Lightning
OPG ----------- Opigno LMS
SOC ----------- Social
VBE ----------- Varbase
Drupal 7 based
D7P D7S D7D --- Drupal 7 prod/stage/dev
AGV ----------- aGov
CME ----------- Commerce v.2
CS7 ----------- Commons
DCE ----------- Commerce v.1
GDR ----------- Guardr
OA7 ----------- OpenAtrium
OAD ----------- OpenAid
OLS ----------- OpenLucius
OOH ----------- OpenOutreach
OPC ----------- OpenPublic
OPO ----------- Opigno LMS
PPY ----------- Panopoly
RST ----------- Restaurant
UC7 ----------- Ubercart
Drupal 6 based
D6P D6S D6D --- Pressflow (LTS) prod/stage/dev
DCS ----------- Commons
UCT ----------- Ubercart
You can also use special keyword 'ALL' instead of any other symbols to have
all available platforms installed, including newly added in all future BOA
system releases.
Examples:
ALL
LHG VBE D7P D7S D7D
Composer will now use PHP 7.3 by default, and you can find many useful hints at:
https://github.com/omega8cc/boa/blob/master/docs/COMPOSER.txt
IMPORTANT: You must switch your ~/static/control/cli.info to 7.2 or newer
PHP version (BOA hosted on Omega8.cc comes with 7.4, 7.3 and 7.2), because
D8 based distros require at least PHP 7.2 -- this also means that to run
the sites installed after switching cli.info to 7.2 or newer, you will also
need to either switch your ~/static/control/fpm.info to 7.2 or newer, or
more probably, to not break any existing sites not compatible with PHP 7.2+
you will need to list these D8 sites names in ~/static/control/multi-fpm.info
Please check for more information:
https://learn.omega8.cc/how-to-quickly-switch-php-to-newer-version-330
BOA supports Drupal 8 codebases both with classic directory structure like
in Drupal 7 and also Drupal 8 distros you can download from Drupal.org, but
if you use Composer based codebase with different structure, the platform path
is not the codebase root directory, but the subdirectory where you see the
Drupal own index.php and "core" subdirectory. It can be platform-name/web or
platform-name/docroot or something similar depending on the distro design.
### Stable BOA-4.1.2 Release - Full Edition
### Date: Tue Sep 22 05:30:08 CEST 2020
### Milestone URL: https://github.com/omega8cc/boa/milestones/4.1.2
# Release Notes:
This BOA release is a transitional release before switching to rolling
release policy. Detailed changelog will follow.
### Stable BOA-4.0.1 Release - Full Edition
### Date: Mon May 6 01:14:59 CEST 2019
### Milestone URL: https://github.com/omega8cc/boa/milestones/4.0.1
# Release Notes:
This BOA release provides three new PHP versions, system updates, including
security fixes, many bug fixes, latest Aegir version, plus all included
Drupal distributions updated to latest versions, and supplied with latest
Drupal 7 or Drupal 8 core, if possible. Yes, BOA still supports Pressflow 6.
Yes, Debian Stretch is supported. No newer Ubuntu releases are supported yet.
Yes, we have added Solr 7 support and every 5 minutes updates!
Four Drupal 8 based popular distributions have been included by default,
plus much improved Composer support and automatic permissions-fix-magic
on Platform and Site Verify tasks. No more manual fixes!
By the way, Composer will now use PHP 7.3 by default, and you can find
many useful hints at:
https://github.com/omega8cc/boa/blob/master/docs/COMPOSER.txt
Big improvements and changes are coming to (auto)managing Solr cores too!
Solr cores are are now created every 5 minutes if needed, instead of during
the nightly procedure only, and Solr 7 is used by default. Existing Solr 4
cores will continue to work as before, but the system will create new Solr 7
cores for all compatible sites, and will update the sites/foo.com/solr.php
accordingly. For existing Solr 4 cores there can be namespace conflicts,
so please make sure to check the updated sites/foo.com/solr.php file and
adjust your site configuration if needed.
Note: If you are using WinSCP and/or Putty on Windows, or Transmit/Coda
by Panic on a Mac, please check the Known Issues section at the bottom of this
BOA-4.0.1 release notes.
@=> Solr 7 and Solr 4 support changes and improvements
Both Solr 7 and Solr 4 powered by Jetty 9 server are available. Supported
integration modules are limited to latest versions of either search_api_solr
(D8/Solr7 and D7/Solr7 ) or apachesolr (D7/Solr4 and D6/Solr4).
Currently supported versions are listed below:
https://ftp.drupal.org/files/projects/search_api_solr-8.x-2.7.tar.gz
https://ftp.drupal.org/files/projects/search_api_solr-7.x-1.14.tar.gz
https://ftp.drupal.org/files/projects/apachesolr-7.x-1.11.tar.gz
https://ftp.drupal.org/files/projects/apachesolr-6.x-3.1.tar.gz
Note that you still need to add preferred integration module along with
any its dependencies in your codebase since this feature doesn't modify
your platform or site - it only creates Solr core with configuration
files provided by integration module: schema.xml and solrconfig.xml etc.
Important: search_api_solr-8.x-2.x is different from all previous versions,
as it requires Composer to install the module and its dependencies, then
you will need to configure it, and only then you will be able to generate
customized Solr core config files, which you should upload in the path:
sites/foo.com/files/solr/ and wait 5-10 minutes to have them activated
on the Solr 7 core the system will create for you.
This will affect the running every 5 minutes auto-installer, hence
no need to wait until next morning to be able to use new Solr core. Win!
Once the Solr core is ready to use, you will find a special file in your
site directory: sites/foo.com/solr.php with details on how to access
your new Solr core with correct credentials.
Side note: the sites/foo.com/solr.php will be automatically deleted on every
site Verify task in Aegir, to prevent copying it across with incorrect
access credentials when you clone the site. As soon as the site is verified,
its sites/foo.com/solr.php will get re-created automatically within 5-10 min.
and the cloned site will also get its own Solr core created.
For more details please check the docs at:
https://github.com/omega8cc/boa/blob/master/docs/SOLR.txt
@=> Drupal 8.7.0 platforms and Composer support
Since BOA-4.0.1 new Drupal 8.7.0 based platforms are included:
Lightning 3.3.0 -------------- https://drupal.org/project/lightning
Thunder 8.2.39 --------------- https://drupal.org/project/thunder
Varbase 8.6.8 ---------------- https://drupal.org/project/varbase
Social 8.5.1 (8.6.15 core) --- https://drupal.org/project/social
IMPORTANT: You must switch your ~/static/control/cli.info to 7.1 or newer
PHP version (BOA hosted on Omega8.cc comes with 7,1, 7.2 and 7.3), because
D8 based distros require at least PHP 7.1 -- this also means that to run
the sites installed after switching cli.info to 7.1 or newer, you will also
need to either switch your ~/static/control/fpm.info to 7.1 or newer, or
more probably, to not break any existing sites not compatible with PHP 7.1+
you will need to list these D8 sites names in ~/static/control/multi-fpm.info
Please check for more information:
https://learn.omega8.cc/how-to-quickly-switch-php-to-newer-version-330
BOA supports Drupal 8 codebases both with classic directory structure like
in Drupal 7 and also Drupal 8 distros you can download from Drupal.org, but
if you use Composer based codebase with different structure, the platform path
is not the codebase root directory, but the subdirectory where you see the
Drupal own index.php and "core" subdirectory. It can be platform-name/web or
platform-name/docroot or something similar depending on the distro design.
As you have discovered if you have already tried, the path you should use
in Aegir when adding Composer based codebase as a platform is the directory
where index.php resides, so effectively anything above that directory is not
available for web requests and thus safely protected.
The information from Aegir project docs saying "When verifying a platform,
Aegir runs composer install if a composer.json file is found." doesn't apply
to BOA. We have disabled this. There are several reasons, most importantly:
a/ having this feature enabled is actually against the codebase management
workflow in Aegir, because it may modify codebase on a live site,
b/ some tasks launch verify many times during clone and migrate, which
results with giant overhead and conflicts if we allowed it to run composer
install many times in parallel,
c/ from our experience, having this poorly implemented feature enabled breaks
clone and migration tasks between platforms when both have the composer.json
file. It just doesn't make any sense in our opinion. The implementation
should be improved to make it actually work similarly to Drush Makefiles.
You should think about Composer like it was Drush Make replacement, and you
should not re-build nor upgrade the codebase on a platform with sites already
hosted. Just use it to build new codebases and then add them as platforms
when the build works without errors.
@=> Important PHP versions availability changes
Still on PHP 5.6? You should switch to PHP 7.3 — It’s twice as fast as 5.6!
But don't switch blindly -- even sites already running on PHP 7.0 before
are most probably not ready for PHP 7.2 or 7.3 without proper fixes.
Note: BOA-4.0.1 release removes PHP 5.3, 5.4 and 5.5, if installed.
In addition to still supported, even if officially deprecated 5.6 and 7.0
versions, this release adds support for PHP 7.3, 7.2 and 7.1
Please check the PHP officially supported versions list at:
http://php.net/supported-versions.php
In our limited testing Drupal 7 core version included in this release works
without noticeable issues with both PHP 7.2 and 7.3, although many contrib
modules may not be ready to switch your instance to 7.3 or 7.2 just yet,
especially if you have not used PHP 7.0 already.
We recommend to test your sites clones with newer PHP versions using BOA
multi-PHP-version support via ~/static/control/multi-fpm.info before
switching your instance to use 7.3 or 7.2 by default.
Please check for more information:
https://learn.omega8.cc/how-to-quickly-switch-php-to-newer-version-330
We still include Pressflow 6 platforms, because in the meantime the LTS
community support made the latest Pressflow 6 version compatible with PHP 7.2
If you still have a reason to use Drupal 6 core, we recommend to use
our version: https://github.com/omega8cc/pressflow6/tree/pressflow-plus
@=> BOA release policy changes
In over 15 months since BOA-3.2.2 release we have tested a more agile
approach with Rolling Release policy for BOA system part known as Barracuda.
We have implemented many changes and updates only in BOA HEAD and used
carefully tested HEAD in production. This worked flawlessly and allowed us
to keep all BOA hosted and maintained systems continuosly updated without
waiting for stable release.
BOA project is very complex, build atop of many packages and individually
built from sources components, plus other projects like Aegir, Drush and
Drupal core and distributions -- each of them with their own release policy.
After years of efforts to keep healthy balance between providing necessary
upgrades and avoiding BOA users maintenance fatigue due to frequent releases,
which usually results with skipping releases which has many adverse effects,
including requirement to keep new versions backward compatible with 2-3 years
old releases, we have decided that it's time to introduce Rolling Release
policy for Barracuda while still using standard point releases policy for
Octopus installer, which covers Aegir, Drush and Drupal platforms updates.
We will still use point releases for Barracuda when there will be major
changes introduced, like deprecating old PHP versions or changing components
like Let's Encrypt integration agents or methods.
BOA project docs will be updated to reflect these changes once another
standard point release is made either for Octopus, Barracuda or both.
The docs will explain how to run Barracuda system continuous updates properly.
# New features:
* Add auto-cleanup for empty old platforms in /var/aegir
* Add experimental support for autoslave and cache_consistent
* Add initial Composer docs
* Add jsmin support for PHP7 #1250
* Add mongodb extension for PHP 7 and Drupal 8.2.x support #1127
* Add redis_oom_check() to monitoring
* Add set_composer_manager_vendor_dir INI variable
* Add support for include/exclude filelist for duplicity. #1159
* Add support for Percona 5.7 and use MariaDB 10.1 by default
* Add UTF8MB4 Convert Drush extension #1047
* Automatically check and remove drush from codebase
* Debian Stretch support #1176
* Do not run Verify daily if ~/static/control/noverify.info exists
* Install ClamAV daemon by default
* PHP 7.3, 7.2 and 7.1 Support #1126
* Run manage_solr_config.sh every 5 minutes
* Update Solr with BOA #1305
* Use _DB_BACKUPS_TTL variable for local and cluster db backups rotation
# Changes:
* Add innodb_default_row_format = dynamic — fixes #1366
* Advanced Nginx microcaching to improve cache HITs #1271
* Change to dashes in bucket names and upgrade boto/duplicity #1247
* Create fpm.info and cli.info ctrl files on Octopus install
* Deprecate MariaDB 5.5 and force 10.1 instead
* Enable uploadprogress.so for testing on PHP 7+
* Force Composer to use PHP 7.2 if available #1213
* Higher PHP CLI limits to make Composer happy
* Increase default TTLs to make BOA more friendly for big sites
* Make DNS Cache Server pdnsd optional -- needs DCS keyword in _XTRAS_LIST
* Minimum 4 GB RAM and 2 CPU (with Solr minimum 8 GB RAM and 4+ CPU rec.)
* Re-verify LE enabled sites daily
* Refresh the tasks list more frequently
* Remove deprecated PHP versions #801
* Remove problematic opcache.fast_shutdown
* Remove ultimate_cron and background_process from the blacklist
* Replace Google DNS servers for Cloudflare DNS servers #1317
* Replace the complex public IP detection with an external API #1089
* Set PHP CLI to FPM version if only FPM is defined
* SQL: disable innodb_adaptive_hash_index by default
* Upgrade imagick to 3.4.3 for PHP7 support #1253
* Use /root/.backboa.autoupdate by default
* Use utf8mb4/utf8mb4_general_ci by default
# System upgrades:
* Adminer 4.7.0
* CSF/LFD 12.10
* Drush 8.2.3.1
* Galera 10.0.37
* Lshell 0.9.18.9
* MariaDB Server 10.1.39
* MariaDB Server 10.2.19
* MariaDB Server 10.3.14
* MySQLTuner 1.7.15
* Nginx 1.16.0
* Node.js v10.x LTS
* OpenSSH Server 8.0p1
* OpenSSL 1.0.2r for Nginx
* PHP 7.3.5, 7.2.18, 7.1.29, 7.0.33, 5.6.40
* PHP Redis extension 4.2.0
* Pure-FTPd 1.0.49
* Redis Module 8.x mod-05-02-2019
* Redis Server 4.0.14
* Ruby 2.6.0
* Use latest Duplicity and dependencies
# Fixes:
* Add fix_ping_perms()
* Add libzip-dev to satisfy PHP 7.3 requirements
* Add nginx config to mitigate SA-CORE-2018-002
* Add patches for CORE-2018-004 and SA-CORE-2018-002
* Add procedure satellite_fix_broken_entity_module()
* Add re_set_default_php_cli() procedure
* Add redis_slow_check()
* Ajax 200 parsererror on every Drupal site #1344
* Avoid potentially problematic --force-yes for apt-get
* Backboa AWS S3 backup integration no longer working #1138
* Backboa not installed #1310
* Backboa: Certificate error #1141
* Cannot switch php-cli, cannot create varbase composer project. #1308
* Check sshd not ssh version
* CiviCRM 4.7 not working under BOA #1223
* Crawlers see 403 on public path #1329
* Debian 9 (Stretch) _apt user + _STRICT_BIN_PERMISSIONS errors #1352
* Do not lock old/all hostmaster platforms automatically
* Downgrade MySecureShell until we can figure out compatibility issues
* Errors using site with CiviCRM #1304
* Extra cleanup for any codebase level drush copy
* Fix for empty old hostmaster platforms cleanup
* Fix for incomplete logic in multi-fpm mode
* Fix for jessie-backports
* Fix SA-CORE-2018-006 for D8 and D7
* Fix the site specific composer_manager dir also for D8
* Fix to include gitlab.com in ~/.ssh/known_hosts
* Improve gpg keys handling
* Improve pdnsd self-repair procedures
* Infinite loop on INFO: Retrieving F1656F24C74CD1D8 key.. #1323
* Known issues with contrib module Redirect in Drupal 8 and BOA #1239
* Make sure redis-server is up immediately after upgrade
* Make sure that ~/.rvmrc is fixed
* Make sure that composer permissions are fixed
* Make sure that the ownership on static/control is correct
* Make sure to fix Redis permissions
* Nginx: the "ssl" directive is deprecated since 1.15.0
* No live certificates from Let's Encrypt #1255
* No Web Server is added when BOA is installed locally #1306
* PSA-2018-003: Drupal core security release #1283
* Remove deprecated option UsePrivilegeSeparation if exists
* Restore Jessie default apt mode on Stretch+
* Solr dir is not defined in in setup_solr() #1370
* SSHD - use without-password for backward compatibility
* Switching out DNS servers caused breakage #1318
* Sync permissions fix on platform verify for D8, D7, D6
* Sync Solr 7 memory management logic
* The _PERMISSIONS_FIX var gets overridden to YES daily basis #1311
* The innodb_lazy_drop_table has been deprecated in Percona
* Update ~/static/control/README.txt if needed
* Update boa info [more] for current years #1248
* Update lshell.config to not break valid D8 specific Drush commands
* Update, sync and de-duplicate Zend OPcache config directives
* Updated default robots.txt #1172
* Use gpg2 directly instead of deprecated apt-key
* Use IP directly as a last fallback
* xboa migrate Solr 7 data #1376
# Known issues:
* SSH/SFTP WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!
In short, nothing to worry about, but please read on how to fix this:
https://learn.omega8.cc/2019-remote-host-identification-ssh-388
* PHP 7.1+ can't be installed w/ MariaDB 10.2+ until compatibility is fixed:
https://jira.mariadb.org/browse/MDEV-14555
* Existing Solr 4 cores may experience namespace conflicts.
Please make sure to check the updated sites/foo.com/solr.php file
and adjust your site configuration if needed.
* Error decoding SFTP packet -- affects WinSCP/Putty
We recommend to use CybderDuck for reliable SFTP access.
For known fix please check https://bit.ly/2HMGd6u -- quote below:
>>>>>
Basically we need to set the ‘Preferred SFTP protocol version’ to 3.
How to do this:
Edit the connection in WinSCP
Open the Advanced menu
Choose Advanced
This will bring up a new popup.
Under Environment click on SFTP
Change ‘Preferred SFTP protocol version’ to 3
Save the changes.
>>>>>
* SFTP connection doesn't work with Transmit nor Coda by Panic software.
We have not figured out the workaround yet, so we recommend using
working alternatives on a Mac, like Cyberduck or ForkLift.
* The filefield_nginx_progress module, which is deprecated for years,
no longer works and breaks upload fields. The module has been removed
from the supported modules list, and will be automatically disabled
if active in any D7 site daily, so we recommend to use the current
similar alternative (even if not so fancy) included now by default:
https://www.drupal.org/project/file_resup
### Stable BOA-3.2.2 Release - Full Edition
### Date: Sat Jan 20 11:03:34 PST 2018
### Milestone URL: https://github.com/omega8cc/boa/milestones/3.2.2
# Release Notes:
This BOA release provides system security upgrades, many bug fixes,
latest Aegir version, plus all supported Drupal distributions updated
to latest versions, and supplied with latest Drupal 7 core, if possible.
Thanks to Drush 8.1.15-dev we support also the newest Drupal 8.4.4 core.
@=> Important changes planned in the next BOA feature release
BOA-3.2.2 is the last release still supporting PHP 5.3, 5.4 and 5.5 versions.
These versions will be *removed* in the next release, and instead
there will be support for PHP 7.1 and 7.2 added.
Future releases will no longer include Pressflow 6 platforms, but Pressflow 6
will be fully supported, and can still use PHP 5.6 -- We recommend to use
our version: https://github.com/omega8cc/pressflow6/tree/pressflow-plus
# Changes:
* Add support for WOFF 2.0
* Commerce 2.51
* Guardr 2.40
* OpenAtrium 2.624
* Panopoly 1.49
# System upgrades:
* Adminer 4.3.1
* Galera 10.0.33
* MariaDB 10.1.30
* MariaDB 10.2.12
* MariaDB 5.5.59
* Nginx 1.13.8
* OpenSSL 1.0.2n (used only in Nginx)
* PHP 5.6.33
* PHP 7.0.27
* PHP extension for Redis 3.1.6
* Pure-FTPd 1.0.49
* Redis Server 4.0.6
* Ruby 2.4.2
* Use Redis integration mod-30-12-2017 (D7)
# Fixes:
* Add mongo to the list of permissions exceptions, if installed
* Do not delete empty platforms if ~/static/control/platforms.info is used
* Do not restart Redis daily if /root/.high_traffic.cnf exists
* Fix Drupal 8 detection for distros with vendor dir moved out of docroot
* Fix requirements for the latest compass version
* Hints config update
* LE not renewing expired certificates due to IPv6 DNS entries -- #1179
* Notifications about new BOA editions are sent to [email protected] -- #1219
* Override fastcgi_params to make geoip headers work again
* Redirect module conflict with manual cron execution in D8 -- #1215
* Remove hmac-ripemd160 MAC, deprecated in OpenSSH 7.6 -- #1217
* The _SSH_ARMOUR=YES not compatible with OpenSSH 7.6 -- #1218
* Update keys for rvm.io
* Update LE License to LE-SA-v1.2-November-15-2017.pdf
* Use advagg-7.x-2.30
* Use modified rvm-installer.sh for user-level installations
* Use reroute_email-7.x-1.3
* Use rvm_silence_path_mismatch_check_flag=1
### Stable BOA-3.2.1 Release - Full Edition
### Date: Sat Oct 7 19:58:53 PDT 2017
### Milestone URL: https://github.com/omega8cc/boa/milestones/3.2.1
# Release Notes:
This BOA release provides system security upgrades, many bug fixes,
latest Aegir version, plus all supported Drupal distributions updated
to latest versions, and supplied with latest Drupal 7 core, if possible.
Thanks to Drush 8.1.15-dev we support also the newest Drupal 8.4 core.
@=> Important changes planned in the next BOA release
BOA-3.2.1 is the last release still supporting PHP 5.3, 5.4 and 5.5 versions.
These versions will be *removed* in the next release, and instead
there will be support for PHP 7.1 and 7.2 added.
Future releases will no longer include Pressflow 6 platforms, but Pressflow 6
will be fully supported, and can still use PHP 5.6 -- We recommend to use
our version: https://github.com/omega8cc/pressflow6/tree/pressflow-plus
@=> Drupal 6 vanilla core is deprecated starting with BOA-3.2.1
Drupal 6 vanilla core is no longer supported. It was never really supported,
but could still work. Those running Drupal 6 instead of supported Pressflow 6
will notice that their site displays only the homepage and all links/menus
no longer display expected content. This change is a result of new rewrite
in the Nginx configuration, required to properly support both Drupal 8 and
Drupal 7. Time to migrate to latest, included in this release, Pressflow 6!
# Changes:
* Add chained commands to forbidden list in lshell
* Add Nginx Headers More module support
* Add support for --include/exclude-filelist for duplicity -- #1158
* Add support for upcoming MariaDB 10.2
* Auto-update duplicity if installed
* Deny bots on non-prod domains, not only on aliases -- #1178
* Do not pause the tasks queue during mysql backup
* Do not truncate queue and accesslog tables by default
* Enable New Relic integration for PHP 7.0
* Install ipset to improve CSF performance
* mongodb.so for D8.2 and PHP7.0 -- #1128
* Run 3 queue tasks in parallel by default
* Use redis_scan_enable = FALSE by default
# System upgrades:
* CSF 10.22
* Drush micro-8-07-10-2017
* Galera 10.0.32
* MariaDB 10.1.28
* MariaDB 10.2.9
* MariaDB 5.5.57
* Nginx 1.13.5
* Node 6.x version bump -- #1129
* OpenSSH 7.6p1
* OpenSSL 1.0.2l (used only in Nginx)
* PHP 5.6.31
* PHP 7.0.24
* PHP extension for Redis 3.1.4
* Pure-FTPd 1.0.46
* Redis Server 4.0.2
* Update Redis module for Drupal 8
* Upgrade drush to support Drupal 8.4 -- #1206
* Upgrade wkhtmltopdf and wkhtmltoimage to 0.12.4
# Fixes:
* Add SSH (RSA) keys how-to
* Add support for tar.xz archives
* Add symlink suggested in #999
* Allow a bit higher load limits for queue runner
* Barracuda is not installing ipset so csf doesn't work -- #1203
* Deprecate no longer working distros
* Disable innodb_corrupt_table_action in 10.2
* Do not enable entitycache in the Commons distro
* Exclude special https.* proxy vhosts from daily cleanup
* Fix permissions on password files for HTTP Basic Auth -- #1187
* Fix syntax and race conditions in fire/water
* Galera compatibility: do not edit mysql.user directly
* Improve CSF race conditions protection
* Improve default system cron queue
* Improve repo.psand.net/pubkey update
* Improved PHP OPCache default configuration
* Linux kernel CVE-2017-2636 hotfix
* Linux kernel CVE-2017-6074 hotfix
* Make sure that not supported tools are not re-installed on VServer
* Move excludes first as they are more specific than includes -- #1168
* PHP not installed after Wheezy to Jessie upgrade -- #999
* Redirect module breaks Drupal 8 sites in BOA if present -- #1061
* Remove --numeric-ids option from xboa -- #1146
* Restart DB server on upgrade only if config has changed
* Run fast enough fire.sh again
* Silence mysql cleanup output -- #1180
* Site in subdirectory cookie is not set correctly -- #1211
* Sync PHP disable_functions across all versions
* Update default robots.txt -- #1172
* Use --skip-add-locks — Galera Cluster compatibility
* Use absolutely graceful MySQLD restart procedure
* VServer 4.1.42-vs2.3.8.6-beng compatibility
* Wait for MySQLD availability before running DB backup
* Whitelist known search engines bots IPs
### Stable BOA-3.2.0 Release - Full Edition
### Date: Sun Feb 26 09:11:39 PST 2017
### Milestone URL: https://github.com/omega8cc/boa/milestones/3.2.0
# Release Notes:
This BOA release provides many new features, system security upgrades, many
improvements and bug fixes, latest Aegir version, plus all supported Drupal
platforms updated to latest versions, and supplied with latest Drupal 7 core,
if possible.
The reason we list here also new features and changes already listed in
previous BOA-3.1.4 version is that they were supposed to be included in this
(3.2.0) release, since we normally don't include new features in bugfix
releases, but we had to publish more bugfix/security releases in the 3.1.x
series than initially expected, while new features were already pushed to HEAD
in anticipation of delayed 3.2.0 release.
We have also moved some new features originally intended to be included
in the (3.2.0) release to the next 3.3.0 milestone, which is expected
in about one month after 3.2.0 release.
@=> Magic permissions fix now happens on-the-fly
The most interesting new Aegir feature is probably the ability to fix files
permissions and ownership on any site and platform, without waiting for
the running daily magic fix. Now it happens on-the-fly, when you run normal
platform and site Verify tasks.
@=> MariaDB 10.1 is now the new default version
If you are already running 10.0, BOA will upgrade it to _DB_SERIES=10.1
but if you still run _DB_SERIES=5.5 it will continue to use MariaDB 5.5
on your system (not recommended).
# New features and enhancements:
* Add Microsoft Hyper-V to supported virtualization systems
* Add support for _HOURLY_DB_BACKUPS=YES via Percona XtraBackup
* Add support for ‘boa version’ command
* Add support for /root/.my.batch_innodb.cnf weekly procedure
* Add support for /root/.my.restart_after_optimize.cnf procedure
* Add support for fix_ownership and fix_permissions on-the-fly
* Add support for latest 3.18.44-vs2.3.7.5-beng VS kernel
* Add support for latest 4.1.33-vs2.3.8.5.2-beng VS kernel
* Add support for the Open Lucius Distribution to Aegir —- #888
* Add support for the Opigno LMS Distribution to Aegir —- #953
* Automatically whitelist CloudFlare and Sucuri IPs (faster version)
* Bundle Opigno LMS dependencies: TinCanPHP and pdf.js
* Configure _INNODB_LOG_FILE_SIZE automatically
* Docs for Twig Debbuging in Drupal 8.2.x and BOA #1085
* Improve InnoDB performance
* Improve Let's Encrypt docs
* Include advagg, cdn, and robotstxt in o_contrib_eight -- #1096
* Install ClamAV and RKhunter by default —- #1019
* Make boost cache clearing configurable via _CLEAR_BOOST variable -- #1115
* MariaDB 10.1 support (new default version) -- #866
* Open LDAP ports 389 and 3268 for outgoing TCP connections
* Speed up mysql stop/start
* Update S3 regions list for backboa backups
* Use blazing fast Redis (SCAN) method on wildcard cache delete
* Use Redis_CacheCompressed mode, if available (saves a ton of RAM)
# Changes:
* Allow to run global OPTIMIZE only once per month, on the last Sunday
* Always update barracuda, boa and octopus wrappers, ignore _SKYNET_MODE=OFF
* Enable ARCHIVE Storage Engine in MariaDB 10.1
* Force _CUSTOM_CONFIG_SQL=NO on MariaDB major upgrade/reinstall
* Remove exception for cache_form bin in Redis configuration
* Remove no longer supported textile module
* Run db OPTIMIZE only weekly, if configured
* Use bzip2 also for standard db backups
* Use lower system load limit for queue runner
* Use MySQLTuner to configure SQL limits — enabled by default
# System upgrades:
* CSF/LFD 9.30
* Drupal 7.54.2
* Drush micro-8-07-02-2017
* Duplicity 0.7.11 (please run 'backboa install' to upgrade)
* MariaDB 10.1.21
* MariaDB 5.5.54
* MariaDB Galera Cluster 10.0.29
* Nginx 1.11.10
* OpenSSL 1.0.2k (used only in Nginx)
* PHP 5.6.30
* PHP 7.0.16
* Pure-FTPd 1.0.45
* Redis 3.2.8
* Redis D8/D7 integration mod-09-02-2017
* Use ImageMagick 7.0.4-6 if built from sources
* Use Redis integration mod-14-02-2017 (D7)
# Fixes:
* Can't add clients on BOA3 -- #926
* Do not add newer InnoDB settings when old server version is in use -- #1122
* Do not disable site_readonly daily on migrated instances
* Fix the not working hostmaster LE cert auto-update (typo)
* Force vnstat restart on version upgrade
* Improve disable_chattr() and enable_chattr() logic
* Improve docs/FAQ.txt as suggested in #1119
* Improve userprotect initial-only setup -- #926
* MariaDB server not running properly alert -- #1122
* Migration should re-use Let's Encrypt certs in HTTPS proxy vhosts -- #1106
* Randomize SQL backup schedule
* Rebuild hosting_custom_settings feature after enabling Redis on install
* Sync db server (optional) restart with optimize
* Sync max_execution_time for PHP-FPM
* Sync max_input_time for PHP-FPM
* Update docs/SSL.txt -- #1109
* Whitelist /dev/urandom in open_basedir
### Stable BOA-3.1.4 Release - Full Edition
### Date: Tue Dec 20 14:09:21 PST 2016
### Milestone URL: https://github.com/omega8cc/boa/milestones/3.1.4
### Latest hotfix added on: Wed Dec 21 12:44:58 PST 2016
# Release Notes:
This BOA release provides system security upgrades, many improvements
and bug fixes, latest Aegir version, plus all supported Drupal platforms
updated to latest versions, and supplied with latest Drupal 7 core,
if possible.
@=> Magic permissions fix now happens on-the-fly
The most interesting new Aegir feature included in this release is probably
the ability to fix files permissions and ownership on any site and platform,
without waiting for the running daily magic fix. Now it happens on-the-fly,
when you run normal platform and site Verify tasks.
@=> MariaDB 10.1 is now the new default version
If you are already running _DB_SERIES=10.0, this BOA release will upgrade it
to _DB_SERIES=10.1 -- but if you still run _DB_SERIES=5.5 it will continue
to use MariaDB 5.5 on your system.
# New features and enhancements:
* Add Microsoft Hyper-V to supported virtualization systems
* Add support for ‘boa version’ command
* Add support for fix_ownership and fix_permissions on-the-fly
* Add support for latest 3.18.44-vs2.3.7.5-beng VS kernel
* Add support for latest 4.1.33-vs2.3.8.5.2-beng VS kernel
* Automatically whitelist CloudFlare and Sucuri IPs (faster version)
* Configure _INNODB_LOG_FILE_SIZE automatically
* MariaDB 10.1 support (new default version) -- #866
* Use Redis_CacheCompressed mode, if available (saves a ton of RAM)
# Changes:
* Always update barracuda, boa and octopus wrappers, ignore _SKYNET_MODE=OFF
* Enable ARCHIVE Storage Engine in MariaDB 10.1
* Force _CUSTOM_CONFIG_SQL=NO on MariaDB major upgrade/reinstall
* Remove no longer supported textile module
* Run db OPTIMIZE only weekly, if configured
* Use MySQLTuner to configure SQL limits — enabled by default
# System upgrades:
* CSF 9.28
* Drush micro-8-17-12-2016
* MariaDB 10.1.20
* MariaDB Galera Cluster 10.0.28
* Nginx 1.11.7
* OpenSSH 7.4p1 (if installed from sources)
* OpenSSL 1.0.2j (used only in Nginx)
* PHP 5.6.29
* PHP 7.0.14
* PHPRedis 3.1.0
* Redis 3.2.6
* Use mydropwizard-6.x-1.6
* Use Redis module mod-20-12-2016
# Fixes:
* Allow to run downgrade to _DB_SERIES 5.5 (experimental, not recommended!)
* Always reinstall cURL from packages if broken
* AMP support -- #948
* Archive PHP logs in /var/backups/php-logs/
* Check if bind should be installed early enough
* Do not enable innodb-defragment — it may crash the server
* Fix for check_root_keys_pwd()
* Fix for disable_chattr()
* Fix for missing PHP config regression -- #1105
* Fix for VnStat sysconfdir
* Fix the check in detect_deprecated_php()
* Ignore search lines to avoid breaking pdnsd config -- #1069
* Improve SQL defaults
* Make sure innodb_buffer_pool_instances is always defined
* Migration between installation profiles -- #1076
* Monitor more lines when /root/.hr.monitor.cnf exists
* Multiply already high opcache.max_accelerated_files
* Nginx: Set Access-Control-Allow-Origin header only for static files
* Remove duplicate config updates and restarts
* Remove various tmp/dot files breaking du command
* Sync the new on-the-fly permissions magic with BOA daily.sh logic
* The .git/* files are downloadable -- #1091
* Triple check that all sql tables are upgraded
* Update JS module to 7.x-2.1 -- #586
* Update migrate docs to avoid issues with already migrated instances
* Use long enough wait times for big SQL servers restarts
* Use Open Atrium own patched Drupal core -- #1083
### Stable BOA-3.1.3 Release - Barracuda Edition
### Date: Mon Sep 12 17:54:50 PDT 2016
### Milestone URL: https://github.com/omega8cc/boa/milestones/3.1.3
# Release Notes:
This BOA release provides important security upgrades and bug fixes.
You should upgrade via 'barracuda up-stable system' immediately.
Note: Octopus upgrade is **not** included in this BOA release.
Technically, even by running normal system update with previous BOA release
you would apply all security upgrades, since they are provided by MariaDB
packages, and thus enforced no matter if we release new BOA version, or not,
so we are doing this purely to make sure that all users have been alerted
about the situation affecting their systems.
# Changes:
* Move Nginx cache cleanup to daily cleanup procedure
* Use standard hourly schedule for self-update in clear.sh
# System upgrades:
* Add all Tika versions from 1.1 to 1.13 in /opt/tika9/
* MariaDB 10.0.27 (critical security upgrade)
* MariaDB Galera Cluster 10.0.27 (critical security upgrade)
* MongoDB database driver 1.6.14 for all PHP versions < 7 -- fixes #981
* Pure-FTPd 1.0.43
# Fixes:
* Check if curl works and re-install if needed before running auto-update
* Log LE renewal attempts
* Log out all users after lshell em upgrade
* Make sure that cURL is always listed in packages
* Move permissions fix overrides check to the correct place
* Nginx: default FastCGI cache levels value may exhaust all inodes -- #2791885
# Known problems:
https://github.com/omega8cc/boa/milestones/3.1.x
### Stable BOA-3.1.2 Release - Full Edition
### Date: Sat Aug 20 14:43:43 PDT 2016
### Milestone URL: https://github.com/omega8cc/boa/milestones/3.1.2
### Latest hotfix added on: Thu Aug 25 09:17:59 PDT 2016
# Release Notes:
This BOA release provides system security upgrades, improvements
and bug fixes, plus all supported Drupal platforms updated to latest
versions, and supplied with latest Drupal 7 core.
@=> You can use NPM to install Grunt/Gulp/Bower -- #1028 by @pricejn2 (thanks!)
Now the same ~/static/control/compass.info file will activate not only
RVM, which can be used to install Compass Tools, but also NPM, which
can be used to install Grunt/Gulp/Bower.
You will need to re-initialize your account to have it added, by
deleting the control file, and adding it again after ~10 minutes.
More details: https://github.com/omega8cc/boa/blob/master/docs/RVM.txt
@=> Redis integration works with Drupal 8 -- with no effort on your side
We have added a smart activation procedure, to meet the D8 Redis module
requirements. The system will add Redis integration to your Drupal 8
sites automatically, but will keep it inactive, until the module will be
installed properly, during nightly system autonomous maintenance.
This means that Redis will start working in every existing and newly
installed Drupal 8 site with some initial delay, to get things installed
in the correct order, and still without any effort on your side.
# Other enhancements:
* Add mydropwizard to Drush extensions for Drush Make D6 support
* Add support for Drupal 8 specific development.services.yml file
* Allow to configure stable/head BOA auto-upgrades via _AUTO_VER variable
* Compatibility with Multi-byte UTF-8 support in Drupal 7
# Changes:
* Add Adminer database manager and deprecate Chive manager -- #1036
* Enable Let's Encrypt LIVE mode via ~/static/control/ssl-live-mode.info
* Force /root/.use.curl.from.packages.cnf to install cURL from packages
* Run db sqlmagic auto conversion also on test/dev sites, if activated
# System upgrades:
* CSF 9.11
* Drush micro-8-23-07-2016
* Lshell 0.9.18.8 (security update for shell escalation issues)
* MariaDB 10.0.26
* MariaDB 5.5.51
* Mysqltuner v1.6.15
* Nginx 1.11.3
* OpenSSH 7.3p1 (if installed from sources)
* PHP 5.5.38
* PHP 5.6.25
* PHP 7.0.10
* PHPRedis dev5-11-08-2016
* PHPRedis dev7-11-08-2016
* Redis 3.2.3
* Redis D8 integration mod-12-08-2016
* vnStat 1.15
# Fixes: