Skip to content

v1.21.0

Latest
Latest

Choose a tag to compare

View all tags
@underdarknl underdarknl released this 05 Mar 14:26
v1.21.0
5a6e206
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

OpenKAT 1.21 - Lapjeskat

In this release we have primarily focused on patching dependencies, and fixing all issues related to our move from MinVWS to SSC-ICT-Innovatie.
Our last release from MinVWS was 1.20 in August, and since then many of our dependencies required patching, either because of security issues (so we do strongly recommend upgrading), or because of other general improvements. The move from one Github Repository, while being gracefully supported on both sides, did still create a series of issues regarding naming and container storage.
While we have finished all those steps, it would be great to make those naming issues disappear altogether by making them dynamic. This would allow other forks of OpenKAT to also seamlessly build packages
and containers, which in turn makes it easier to collaborate and keep in sync with others (and this repo).
Besides these changes, we have also included a new docker container that sets up a local (automatically updating) CVE API. This service makes sure you never leak any discovered CVEs from your assets to an outside party or even continent.
Work on a Performance release, addressing many of the localized issues is well underway and will be released as 1.22 soon.

New Features

Bug fixes

Upgrading

The normal instructions for upgrading Debian packages or upgrading containers should be followed.

There is a migration script available in the scripts folder named migrate-openkat.sh which will migrate any data on your system from the older docker volumes into the new volumes required by the new openkat packages.
More in depth details can be found in its documentation.

https://github.com/SSC-ICT-Innovatie/nl-kat-coordination/blob/main/scripts/migrate.md

Be sure to use the backup option and dry-run options before attempting a full migration.

Boefje container images

The boefje container images of 1.20 are still hosted by MinVWS, and as such can still be reached on their original URIs.
They are also compatible, but might miss out on some dependency upgrades. To upgrade to the new container registry their urls need to be changed in the katalogus database.
Docker will then subsequently download the new images. Older images can be deleted by telling docker to do so using a command similar to the one below.

docker images | grep 'ghcr.io/minvws/openkat' | awk '{print $3}' | xargs -r docker rmi
# optionally remove dangling layers to free up disk-space
docker image prune -f

Full Changelog

The full changelog can be found on Github v1.20.1...v1.21.0

New Contributors

What's Changed

New Contributors

Full Changelog: v1.20.1...v1.21.0

Contributors

cookiemonster, dekkers, and 8 other contributors
Assets 5
Loading