release-notes.xml

<article xmlns="http://docbook.org/ns/docbook"
         xmlns:xlink="http://www.w3.org/1999/xlink">

<title>NixOps Release Notes</title>

<!--==================================================================-->

<section xml:id="ssec-relnotes-1.7"><title>Release 1.7 (April 17, 2019)</title>
<itemizedlist>

  <listitem><para>General</para>
    <itemizedlist>
      <listitem><para>Mitigation for ssh StrictHostKeyChecking=no issue.</para></listitem>
      <listitem><para>Fix nixops info --plain output.</para></listitem>
      <listitem><para>Documentation fixes: add AWS VPC resources and fix some outdated command outputs.</para></listitem>
      <listitem><para>Addition of Hashicorp's Vault AppRole resource.</para></listitem>
      <warning>
        <para>
          Azure backend is now disabled after the updates to Azure's Python libraries in NixOS 19.03.
          Please see <link xlink:href="https://github.com/NixOS/nixops/pull/1131">PR#1131</link> for
          more details.
        </para>
        <para>
          Existing Azure deployments should use NixOps release 1.6.1. We hope to revive the Azure
          support in the future once the API compatibility issues are resolved.
        </para>
      </warning>
    </itemizedlist>
  </listitem>

  <listitem><para>AWS</para>
    <itemizedlist>
      <listitem><para>Add more auto retries to api calls to prevent eventual consistency issues.</para></listitem>
      <listitem><para>Fix <code>nixops check</code> with NVMe devices.</para></listitem>
      <listitem><para>Route53: normalize DNS hostname.</para></listitem>
      <listitem><para>S3: support bucket lifecycle configuration as well as versioning.</para></listitem>
      <listitem><para>S3: introduce persistOnDestroy for S3 buckets which allows keeping the bucket during a destroy for later usage</para></listitem>
      <listitem><para>Fix backup-status output when backup is performed on a subset of devices.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Datadog</para>
    <itemizedlist>
      <listitem><para>add tags for Datadog monitors</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>GCE</para>
    <itemizedlist>
      <listitem><para>Fix machines being leaked when running destroy after a stop operation.</para></listitem>
      <listitem><para>make sure the machine exists before attempting a destroy.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Hetzner</para>
    <itemizedlist>
      <listitem>
        <para>
          Remove usage of local commands for network configuration.
        </para>
        <warning>
          <para>
            Note that this is incompatible with NixOS versions prior to 18.03, see <link xlink:href="https://nixos.org/nixos/manual/release-notes.html#sec-release-18.03-notable-changes">release-notes.</link>
          </para>
        </warning>
      </listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>VirtualBox</para>
    <itemizedlist>
      <listitem><para>added NixOS 18.09/19.03 images.</para></listitem>
      <listitem><para>handle deleted VMs from outside NixOps.</para></listitem>
    </itemizedlist>
  </listitem>

</itemizedlist>

<para>
    This release has contributions from Amine Chikhaoui, Assassinkin,  aszlig, Aymen Memni,
    Chaker Benhamed, Chawki Cheikch, David Kleuker, Domen Kožar, Dorra Hadrich, dzanot,
    Eelco Dolstra, Jörg Thalheim, Kosyrev Serge,  Max Wilson,  Michael Bishop, Niklas Hambüchen,
    Pierre Bourdon, PsyanticY, Robert Hensing.
</para>

</section>


<section xml:id="ssec-relnotes-1.6.1"><title>Release 1.6.1 (Sep 14, 2018)</title>
<itemizedlist>

  <listitem><para>General</para>

    <itemizedlist>
      <listitem><para>Fix the deployment of machines with a large number of keys.</para></listitem>
      <listitem><para>Show exit code of configuration activation script, when it is non-zero.</para></listitem>
      <listitem><para>Ignore evaluation errors in destroy and delete operations.</para></listitem>
      <listitem><para>Removed top-level Exception catch-all</para></listitem>
      <listitem><para>Minor bugfixes.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>AWS</para>

    <itemizedlist>
      <listitem><para>Automatically retry certain API calls.</para></listitem>
      <listitem><para>Fixed deployment errors when <code>deployment.route53.hostName</code> contains uppercase letters.</para></listitem>
      <listitem><para>Support for GCE routes.</para></listitem>
      <listitem><para>Support attaching NVMe disks.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>GCE</para>

    <itemizedlist>
      <listitem><para>Add labels for GCE volumes and snapshots.</para></listitem>
      <listitem><para>Add option to enable IP forwarding.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>VirtualBox</para>

    <itemizedlist>
      <listitem><para>Use images from nixpkgs if available.</para></listitem>
    </itemizedlist>
  </listitem>


</itemizedlist>

<para>
    This release has contributions from Amine Chikhaoui, aszlig, Aymen Memni,
    Chaker Benhamed, Domen Kožar, Eelco Dolstra, Justin Humm, Michael Bishop,
    Niklas Hambüchen, Rob Vermaas, Sergei Khoma.
</para>

</section>

<section xml:id="ssec-relnotes-1.6"><title>Release 1.6 (Mar 28, 2018)</title>
<itemizedlist>

  <listitem><para>General</para>

    <itemizedlist>
      <listitem><para>JSON output option for <code>show-option</code> command.</para></listitem>
      <listitem><para>Added experimental <code>--show-plan</code> to <code>deploy</code> command. Only works for VPC resources currently.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: libvirtd</para>
    <itemizedlist>
      <listitem><para>Added support for custom kernel/initrd/cmdline, for easier kernel testing/developing.</para></listitem>
      <listitem><para>Fail early when defining domain.</para></listitem>
      <listitem><para>Support NixOS 18.03</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: AWS/EC2</para>

    <itemizedlist>
      <listitem><para>Allow changing security groups for instances that were deployed with a default VPC (no explicit subnetId/vpc)</para></listitem>
      <listitem><para>Make sure EC2 keypair not destroyed when it is in use, instead produce error.</para></listitem>
      <listitem><para>Support for separate Route53 resources.</para></listitem>
      <listitem><para>Support CloudWatch metrics and alarms.</para></listitem>
      <listitem><para>Support updating IAM instance profile of an existing instance.</para></listitem>
      <listitem><para>Support VPC resources.</para></listitem>
      <listitem><para>RDS: allow multiple security groups.</para></listitem>
      <listitem><para>Allow S3 buckets to be configured as websites.</para></listitem>
      <listitem><para>Fix issue where S3 bucket policy was only set on initial deploy.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Datadog</para>
    <itemizedlist>
      <listitem><para>Support sending start/finish of deploy and destroy events.</para></listitem>
      <listitem><para>Support setting downtime during deployment.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Azure</para>
    <itemizedlist>
      <listitem><para>Fix Azure access instructions.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Google Compute</para>

    <itemizedlist>
      <listitem><para>Add support for labelling GCE instances</para></listitem>
      <listitem><para>Minor fixes to make GCE backend more consistent with backends such as EC2.</para></listitem>
      <listitem><para>Fix attaching existing volumes to instances.</para></listitem>
      <listitem><para>Implemented <code>show-physical --backup</code> for GCE, similar to EC2.</para></listitem>
      <listitem><para>Prevent google-instance-setup service from replacing the host key deployed by NixOps.</para></listitem>
      <listitem><para>Allow instances to be created inside VPC subnets.</para></listitem>
    </itemizedlist>
  </listitem>

</itemizedlist>

<para>
    This release has contributions from Adam Scott, Amine Chikhaoui, Anthony Cowley, Brian Olsen,
    Daniel Kuehn, David McFarland, Domen Kožar, Eelco Dolstra, Glenn Searby, Graham Christensen,
    Masato Yonekawa, Maarten Hoogendoorn, Matthieu Coudron, Maximilian Bosch, Michael Bishop,
    Niklas Hambüchen, Oussama Elkaceh, Pierre-Étienne Meunier, Peter Jones, Rob Vermaas,
    Samuel Leathers, Shea Levy, Tomasz Czyż, Vaibhav Sagar.
</para>

</section>



<section xml:id="ssec-relnotes-1.5.2"><title>Release 1.5.2 (Oct 29, 2017)</title>

<itemizedlist>

  <listitem><para>General</para>

    <itemizedlist>
      <listitem><para>This release has various minor bug and documentation fixes.</para></listitem>
      <listitem><para>#703: don't ask for known host if file doesn't exist.</para></listitem>
      <listitem><para>Deprecated --evaluate-only for --dry-run.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: libvirtd</para>
    <itemizedlist>
      <listitem><para>Added domainType option.</para></listitem>
      <listitem><para>Make the libvirt images readable only by their owner/group.</para></listitem>
      <listitem><para>Create "persistent" instead of "transient" domains, this ensures that nixops deployments/VMs survive a reboot.</para></listitem>
      <listitem><para>Stop using disk backing file and use self contained images.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: EC2</para>

    <itemizedlist>
      <listitem><para>#652, allow securityGroups of Elastic File System mount target to be set.</para></listitem>
      <listitem><para>#709: allow Elastic IP resource for security group sourceIP attribute.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Azure</para>

    <itemizedlist>
        <listitem><para>Use Azure images from nixpkgs, if they are available.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Google Compute</para>

    <itemizedlist>
        <listitem><para>Use Google Compute images from nixpkgs, if they are available.</para></listitem>
    </itemizedlist>
  </listitem>

</itemizedlist>

<para>
    This release has contributions from  Andreas Rammhold, Bjørn Forsman, Chris Van Vranken,
    Corbin, Daniel Ehlers, Domen Kožar, Johannes Bornhold, John M. Harris, Jr, Kevin Quick,
    Kosyrev Serge, Marius Bergmann, Nadrieril, Rob Vermaas, Vlad Ki.
</para>

</section>

<section xml:id="ssec-relnotes-1.5.1"><title>Release 1.5.1 (Jul 5, 2017)</title>

<itemizedlist>

  <listitem><para>General</para>

    <itemizedlist>
      <listitem><para>This release has various minor bug and documentation fixes.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: None</para>

    <itemizedlist>
        <listitem><para>#661: Added <emphasis>deployment.keys.*.keyFile</emphasis> option to provide keys from local files, rather than from text literals.</para></listitem>
        <listitem><para>#664: Added <emphasis>deployment.keys.*.destDir</emphasis> and <emphasis>deployment.keys.*.path</emphasis> options to give more control over where the deployment keys are stored on the deployed machine.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Datadog</para>
    <itemizedlist>
      <listitem><para>Show URL for dashboards and timeboards in info output.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Hetzner</para>

    <itemizedlist>
      <listitem><para>Added option to disable creation of sub-accounts.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Google Compute</para>

    <itemizedlist>
        <listitem><para>Added option to set service account for an instance.</para></listitem>
        <listitem><para>Added option to use preemptible option when creating an instance.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Digital Ocean</para>

    <itemizedlist>
      <listitem><para>Added option to support IPv6 on Digital Ocean.</para></listitem>
    </itemizedlist>
  </listitem>

</itemizedlist>

<para>
    This release has contributions from Albert Peschar, Amine Chikhaoui, aszlig,
    Clemens Fruhwirth, Domen Kožar, Drew Hess, Eelco Dolstra, Igor Pashev,
    Johannes Bornhold, Kosyrev Serge, Leon Isenberg, Maarten Hoogendoorn,
    Nadrieril Feneanar, Niklas Hambüchen, Philip Patsch, Rob Vermaas, Sven Slootweg.
</para>

</section>


<section xml:id="ssec-relnotes-1.5"><title>Release 1.5 (Feb 16, 2017)</title>

<itemizedlist>

  <listitem><para>General</para>

    <itemizedlist>
      <listitem><para>Various minor documentation and bug fixes</para></listitem>
      <listitem><para>#508: Implementation of SSH tunnels has been rewritten to use iproute in stead of netttools</para></listitem>
      <listitem><para>#400: The ownership of keys is now implemented after user/group creation</para></listitem>
      <listitem><para>#216: Added <emphasis>--keep-days</emphasis> option for cleaning up backups</para></listitem>
      <listitem><para>#594: NixOps statefile is now created with stricter permissions</para></listitem>
      <listitem><para>Use types.submodule instead of deprecated types.optionSet</para></listitem>
      <listitem><para>#566: Support setting deployment.hasFastConnection</para></listitem>
      <listitem><para>Support for "nixops deploy --evaluate-only"</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: None</para>

    <itemizedlist>
        <listitem><para>Create /etc/hosts</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Amazon Web Services</para>

    <itemizedlist>
      <listitem><para>Support for Elastic File Systems</para></listitem>
      <listitem><para>Support latest EBS volume types</para></listitem>
      <listitem><para>Support for Simple Notification Service</para></listitem>
      <listitem><para>Support for Cloudwatch Logs resources</para></listitem>
      <listitem><para>Support loading credentials from ~/.aws/credentials (AWS default)</para></listitem>
      <listitem><para>Use HVM as default virtualization type (all new instance types are HVM)</para></listitem>
      <listitem><para>#550: Fix sporadic error "Error binding parameter 0 - probably unsupported type"</para></listitem>
  </itemizedlist>
  </listitem>

  <listitem><para>Backend: Datadog</para>

    <itemizedlist>
        <listitem><para>Support provisioning Datadog Monitors</para></listitem>
        <listitem><para>Support provisioning Datadog Dashboards</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Hetzner</para>

    <itemizedlist>
        <listitem><para>#564: Binary cache substitutions didn't work because of certificate errors</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: VirtualBox</para>

    <itemizedlist>
      <listitem><para>Support dots in machine names</para></listitem>
      <listitem><para>Added vcpu option</para></listitem>

    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Libvirtd</para>

    <itemizedlist>
      <listitem><para>Documentation typo fixes</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Digital Ocean</para>

    <itemizedlist>
      <listitem><para>Initial support for Digital Ocean to deploy machines</para></listitem>
    </itemizedlist>
  </listitem>

</itemizedlist>

<para>
    This release has contributions from Amine Chikhaoui, Anders Papitto, aszlig, Aycan iRiCAN,
    Christian Kauhaus, Corbin Simpson, Domen Kožar, Eelco Dolstra, Evgeny Egorochkin, Igor Pashev,
    Maarten Hoogendoorn, Nathan Zadoks, Pascal Wittmann, Renzo Carbonaram, Rob Vermaas,
    Ruslan Babayev, Susan Potter and Danylo Hlynskyi.
</para>

</section>


<section xml:id="ssec-relnotes-1.4"><title>Release 1.4 (Jul 11, 2016)</title>

<itemizedlist>

  <listitem><para>General</para>

    <itemizedlist>
      <listitem><para>Added <emphasis>show-arguments</emphasis> command to query nixops arguments that are defined in the nix expressions</para></listitem>
      <listitem><para>Added <emphasis>--dry-activate</emphasis> option to the deploy command, to see what services will be stopped/started/restarted. </para></listitem>
      <listitem><para>Added <emphasis>--fallback</emphasis> option to the deploy command to match the same flag on nix-build. </para></listitem>
      <listitem><para>Added <emphasis>--cores</emphasis> option to the deploy command to match the same flag on nix-build. </para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: None</para>

    <itemizedlist>
    </itemizedlist>
  </listitem>

  <listitem><para>Amazon EC2</para>

    <itemizedlist>
      <listitem><para>Use hvm-s3 AMIs when appropriate</para></listitem>
      <listitem><para>Allow EBS optimized flag to be changed (needs --allow-reboot)</para></listitem>
      <listitem><para>Allow to recover from spot instance kill, when using external volume defined as resource (resources.ebsVolumes)</para></listitem>
      <listitem><para>When disassociating an elastic IP, make sure to check the current instance is the one who is currently associated with it, in case someone else has 'stolen' the elastic IP</para></listitem>
      <listitem><para>Use generated list for deployment.ec2.physicalProperties, based on Amazon Pricing listing</para></listitem>
      <listitem><para>EC2 AMI registry has been moved the the nixpkgs repository</para></listitem>
      <listitem><para>Allow a timeout on spot instance creation</para></listitem>
      <listitem><para>Allow updating security groups on running instances in a VPC</para></listitem>
      <listitem><para>Support x1 instances</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: Azure</para>

    <itemizedlist>
      <listitem><para>New Azure Cloud backend contributed by Evgeny Egorochkin</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: VirtualBox</para>

    <itemizedlist>
      <listitem><para>Respect deployment.virtualbox.disks.*.size for images with a baseImage</para></listitem>
      <listitem><para>Allow overriding the VirtualBox base image size for disk1</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Libvirt</para>

    <itemizedlist>
      <listitem><para>Improve logging messages</para></listitem>
      <listitem><para>#345: Use qemu-system-x86_64 instead of qemu-kvm for non-NixOS support</para></listitem>
      <listitem><para>add extraDomainXML NixOS option</para></listitem>
      <listitem><para>add extraDevicesXML NixOS option</para></listitem>
      <listitem><para>add vcpu NixOS option</para></listitem>
    </itemizedlist>
  </listitem>

</itemizedlist>

<para>
    This release has contributions from Amine Chikhaoui, aszlig, Cireo, Domen Kožar, Eelco Dolstra,
    Eric Sagnes, Falco Peijnenburg, Graham Christensen, Kevin Cox, Kirill Boltaev, Mathias Schreck,
    Michael Weiss, Brian Zach Abe, Pablo Costa, Peter Hoeg, Renzo Carbonara, Rob Vermaas,
    Ryan Artecona, Tobias Pflug, Tom Hunger, Vesa Kaihlavirta, Danylo Hlynskyi.
</para>

</section>

<section xml:id="ssec-relnotes-1.3.1"><title>Release 1.3.1 (January 14, 2016)</title>

<itemizedlist>

  <listitem><para>General</para>

    <itemizedlist>
        <listitem><para>#340: "too long for Unix domain socket" error</para></listitem>
        <listitem><para>#335: Use the correct port when setting up an SSH tunnel</para></listitem>
        <listitem><para>#336: Add support for non-machine IP resources in /etc/hosts</para></listitem>
        <listitem><para>Fix determining system.stateVersion</para></listitem>
        <listitem><para>ssh_util: Reconnect on dead SSH master socket</para></listitem>
        <listitem><para>#379: Remove reference to `jobs` attribute in NixOS</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Backend: None</para>

    <itemizedlist>
        <listitem><para>Pass deployment.targetPort to ssh for none backend</para></listitem>
        <listitem><para>#361: don't use _ssh_private_key if its corresponding public key hasn't been deployed yet</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Amazon EC2</para>

    <itemizedlist>
        <listitem><para>Allow specifying assumeRolePolicy for IAM roles</para></listitem>
        <listitem><para>Add vpcId option to EC2 security group resources</para></listitem>
        <listitem><para>Allow VPC security groups to refer to sec. group names (within the same sec. group) as well as group ids</para></listitem>
        <listitem><para>Prevent vpc calls to be made if only security group ids are being used (instead of names)</para></listitem>
        <listitem><para>Use correct credentials for VPC API calls</para></listitem>
        <listitem><para>Fix "creating EC2 instance (... region ‘None’)" when recreating missing instance</para></listitem>
        <listitem><para>Allow keeping volumes while destroying deployment</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>VirtualBox</para>

    <itemizedlist>
      <listitem><para>#359: Change sbin/mount.vboxsf to bin/mount.vboxsf</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Hetzner</para>

    <itemizedlist>
      <listitem><para>#349: Don't create /root/.ssh/authorized_keys</para></listitem>
      <listitem><para>#348: Fixup and refactor Hetzner backend tests</para></listitem>
      <listitem><para>hetzner-bootstrap: Fix wrapping Nix inside chroot</para></listitem>
      <listitem><para>hetzner-bootstrap: Allow to easily enter chroot</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Libvirt</para>

    <itemizedlist>
      <listitem><para>#374: Add headless mode</para></listitem>
      <listitem><para>#374: Use more reliable method to retrieve IP address</para></listitem>
      <listitem><para>#374: Nicer error message for missing images dir</para></listitem>
      <listitem><para>#374: Be able to specify xml for devices</para></listitem>
    </itemizedlist>
  </listitem>


</itemizedlist>

<para>
    This release has contributions from
    aszlig, Bas van Dijk, Domen Kožar, Eelco Dolstra, Kevin Cox,
    Paul Liu, Robin Gloster, Rob Vermaas, Russell O'Connor, Tristan Helmich
    and Yves Parès (Ywen)
</para>

</section>

<section xml:id="ssec-relnotes-1.3"><title>Release 1.3 (September 28, 2015)</title>

<itemizedlist>

  <listitem><para>General</para>

    <itemizedlist>
        <listitem><para>NixOps now requires NixOS 14.12 and up.</para></listitem>
        <listitem><para>
            Machines in NixOps network now have access to the deployment name,
            uuid and its arguments, by means of the <code>deployment.name</code>,
            <code>deployment.uuid</code> and <code>deployment.arguments</code> options.
        </para></listitem>.
        <listitem><para>
            Support for &lt;...> paths in network spec filenames, e.g. you
            can use: <code>nixops create '&lt;nixops/templates/container.nix>'</code>.
        </para></listitem>
        <listitem><para>Support ‘username@machine’ for <code>nixops scp</code></para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Amazon EC2</para>

    <itemizedlist>
        <listitem><para>Support for the latest EC2 instance types, including t2 and c4 instance.</para></listitem>
        <listitem><para>Support Amazon EBS SSD disks.</para></listitem>
        <listitem><para>
             Instances can be placed in an EC2 placement group. This allows
             instances to be grouped in a low-latency 10 Gbps network.
        </para></listitem>
        <listitem><para>Allow starting EC2 instances in a VPC subnet.</para></listitem>
        <listitem><para>More robust handling of spot instance creation.</para></listitem>
        <listitem><para>Support for setting bucket policies on S3 buckets created by NixOps.</para></listitem>
        <listitem><para>Route53 support now uses CNAME to public DNS hostname, in stead of A record to the public IP address.</para></listitem>
        <listitem><para>Support Amazon RDS instances.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Google Cloud</para>

    <itemizedlist>
        <listitem><para>New backend for Google Cloud Platform. It includes support for the following resources:</para></listitem>
        <itemizedlist>
            <listitem><para>Instances</para></listitem>
            <listitem><para>Disks</para></listitem>
            <listitem><para>Images</para></listitem>
            <listitem><para>Load balancer, HTTP health check, Target pools and forwarding rules.</para></listitem>
            <listitem><para>Static IPs</para></listitem>
        </itemizedlist>
    </itemizedlist>
  </listitem>

  <listitem><para>VirtualBox</para>

    <itemizedlist>
      <listitem><para>VirtualBox 5.0 is required for the VirtualBox backend.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>NixOS container</para>

    <itemizedlist>
      <listitem><para>New backend for NixOS containers.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Libvirt</para>

    <itemizedlist>
        <listitem><para>New backend for libvirt using QEMU/KVM.</para></listitem>
    </itemizedlist>
  </listitem>



</itemizedlist>

<para>
    This release has contributions from
    Andreas Herrmann, Andrew Murray, aszlig, Aycan iRiCAN, Bas van Dijk, Ben Moseley,
    Bjørn Forsman, Boris Sukholitko, Bruce Adams, Chris Forno, Dan Steeves, David Guibert,
    Domen Kožar, Eelco Dolstra, Evgeny Egorochkin, Leroy Hopson, Michael Alyn Miller,
    Michael Fellinger, Ossi Herrala, Rene Donner, Rickard Nilsson, Rob Vermaas, Russell O'Connor,
    Shea Levy, Tomasz Kontusz, Tom Hunger, Trenton Strong, Trent Strong, Vladimir Kirillov, William Roe.
</para>

</section>


<section xml:id="ssec-relnotes-1.2"><title>Release 1.2 (April 30, 2014)</title>

<itemizedlist>

  <listitem><para>General</para>

    <itemizedlist>
      <listitem><para>NixOps now requires NixOS 13.10 and up.</para></listitem>
      <listitem><para>Add <code>--all</code> option to <code>nixops destroy</code>, <code>nixops
      delete</code> and <code>nixops ssh-for-each</code>.</para></listitem>
      <listitem><para>The <code>-d</code> option now matches based on prefix for convenience
      when the specified uuid/id is not found.</para></listitem>
      <listitem><para>Resources can now be accessed via direct reference, i.e. you can use
      <code>securityGroups = [ resources.ec2SecurityGroups.foo ];</code> in stead of
      <code>securityGroups = [ resources.ec2SecurityGroups.foo.name ];</code>.
      </para></listitem>
      <listitem><para>Changed default value of <code>deployment.storeKeysOnMachine</code> to false,
      which is the more secure option. This can prevent unattended reboot from finishing, as keys will
      need to be pushed to the machine.</para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Amazon EC2</para>

    <itemizedlist>
      <listitem><para>Support provisioning of elastic IP addresses.</para></listitem>
      <listitem><para>Support provisioning of EC2 security groups.</para></listitem>
      <listitem><para>Support all HVM instance types.</para></listitem>
      <listitem><para>Support <code>ap-southeast-1</code> region.</para></listitem>
      <listitem><para>Better handling of errors in pushing Route53 records.</para></listitem>
      <listitem><para>Support using ARN's for applying instance profiles to EC2 instances. This
      allows cross-account API access.</para></listitem>
      <listitem><para>Base HVM image was updated to allow using all emphemeral devices.</para></listitem>
      <listitem><para>Instance ID is now available in
      nix through the <code>deployment.ec2.instanceId</code> option, set by nixops.</para></listitem>
      <listitem><para>
      Support independent provisioning of EBS volumes. Previously, EBS volumes could only be
      created as part of an EC2 instance, meaning their lifetime was tied to the instance and
      they could not be managed separately.  Now they can be provisioned independently, e.g.:

      <programlisting>
      resources.ebsVolumes.bigdata =
        { name = "My Big Fat Data";
          region = "eu-west-1";
          zone = "eu-west-1a";
          accessKeyId = "...";
          size = 1000;
        };
      </programlisting>
      </para></listitem>

      <listitem><para>To allow cross-account API access, the <emphasis>deployment.ec2.instanceProfile</emphasis>
      option can now be set to either a name (previous behaviour) or an Amazon Resource Names (ARN) of the
      instance profile you want to apply.
      </para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>Hetzner</para>

    <itemizedlist>
      <listitem><para>Always hard reset on destroying machine.</para></listitem>
      <listitem><para>Support for Hetzner vServers.</para></listitem>
      <listitem><para>Disabled root password by default.</para></listitem>
      <listitem><para>Fix hard reset for rebooting to rescue mode.. This is particularly useful
      if you have a dead server and want to put it in rescue mode. Now it's possible to do that
      simply by running:

      <programlisting>
      nixops reboot --hard --rescue --include=deadmachine
      </programlisting>
      </para></listitem>
    </itemizedlist>
  </listitem>

  <listitem><para>VirtualBox</para>

    <itemizedlist>
      <listitem><para>Require VirtualBox >= 4.3.0.</para></listitem>
      <listitem><para>Support for shared folders in VirtualBox. You can mount host folder on the guest by setting the
      deployment.virtualbox.sharedFolders option.</para></listitem>
      <listitem><para>Allow destroy if the VM is gone already</para></listitem>
    </itemizedlist>
  </listitem>


</itemizedlist>

<para>
  This release has contributions from aszlig, Corey O'Connor, Domen Kožar, Eelco Dolstra,
  Michael Stone, Oliver Charles, Rickard Nilsson, Rob Vermaas, Shea Levy and Vladimir Kirillov.
</para>

</section>

<section xml:id="ssec-relnotes-1.1.1"><title>Release 1.1.1 (October 2, 2013)</title>

<para>This a minor bugfix release.</para>

<itemizedlist>

  <listitem><para>Added a command-line option <emphasis>--include-keys</emphasis> to allow
  importing SSH public host keys, of the machines that will be imported, to the
  <emphasis>.ssh/known_hosts</emphasis> of the user.
  </para></listitem>

  <listitem><para>Fixed a bug that prevented switching the <emphasis>deployment.storeKeysOnMachine</emphasis>
  option value.
  </para></listitem>

  <listitem><para>On non-EC2 systems, NixOps will generate ECDSA SSH
  host key pairs instead of DSA from now on.</para></listitem>

  <listitem><para>VirtualBox deployments use generated SSH host keypairs.
  </para></listitem>

  <listitem><para>For all machines which nixops generates an SSH host keypair for, it
  will add the SSH public host key to the known_hosts configuration of all machines
  in the network.</para></listitem>

  <listitem><para>For EC2 deployments, if the nixops expression specifies a set of
  security groups for a machine that is different from the security groups applied to
  the existing machine, it will produce a warning that the change cannot be made.
  </para></listitem>

  <listitem><para>For EC2 deployments, disks that are not supposed to be attached to the
  machine are detached only after system activation has been completed. Previously this
  was done before, but that could lead to volumes not being able to detach without
  needing to stop the machine.
  </para></listitem>

  <listitem><para>Added a command-line option <emphasis>--repair</emphasis> as a convient
  way to pass this option, which allows repairing of broken or changed paths in the nix store,
  to nix-build calls that nixops performs. Note that this option only works in nix setups
  that run without the nix daemon.
  </para></listitem>


</itemizedlist>

<para>
  This release has contributions from aszlig, Ricardo Correia,
  Eelco Dolstra, Rob Vermaas.
</para>

</section>

<section xml:id="ssec-relnotes-1.1"><title>Release 1.1 (September 9, 2013)</title>

<itemizedlist>

  <listitem><para>Backend for <link
  xlink:href="http://hetzner.de">Hetzner</link>, a German data center
  provider. More information and a demo video can be found <link
  xlink:href="https://github.com/NixOS/nixops/pull/119">here</link>.
  </para></listitem>

  <listitem><para>When using the <code>deployment.keys.*</code> options, the
  keys in /run/keys are now created with mode 600.</para></listitem>

  <listitem><para>Fixed bug where EBS snapshots name tag was overridden by the
  instance name tag.</para></listitem>

  <listitem><para>The nixops executable now has the default OpenSSH from nixpkgs
  in its PATH now by default, to work around issues with left-over SSH master
  connections on older version of OpenSSH, such as the version that is installed
  by default on CentOS.</para></listitem>

  <listitem><para>A new resource type has been introduced to generate sets of SSH
  public/private keys.</para></listitem>

  <listitem><para>Support for spot instances in the EC2 backend. By specifying
    the <code>deployment.ec2.spotInstancePrice</code> option for a machine,
    you can set the spot instance price in cents. NixOps will wait 10
    minutes for a spot instance to be fulfilled, if not, then it will error
    out for that machine.</para></listitem>


</itemizedlist>


</section>

<section xml:id="ssec-relnotes-1.0.1"><title>Release 1.0.1 (July 11, 2013)</title>

<para>This is a minor bugfix release.</para>

<itemizedlist>

  <listitem><para>Reduce parallelism for running EC2 backups, to
  prevent hammering the AWS API in case of many
  disks.</para></listitem>

  <listitem><para>Propagate the instance tags to the EBS volumes
  (except for Name tag, which is overriden with a detailed description
  of the volume and its use).</para></listitem>

</itemizedlist>


</section>

<section xml:id="ssec-relnotes-1.0"><title>Release 1.0 (June 18, 2013)</title>

<para>Initial release.</para>

</section>


</article>