FOG 1.6.0-RC-13 Available

[Tom Elliott]

The thirteenth release candidate for FOG 1.6.0 is available on the rc-1.6.0 branch. It reports version 1.6.0-RC-13.

Test it on a lab or non-production server first. The upgrade from 1.5 to 1.6 is one-way: it changes the database schema, and there is no down-migration.

Changed since RC-12

• Permissions: each task type is a permission (#1878, #1881). Before, a role that could start a task could start every task type: deploy, capture, wipe and debug. A role now also needs tasktype.<type> or tasktype.*. Set them on the new Task Types tab of the role edit page. The upgrade gives tasktype.* to every role that could already start a task, so no role loses access. iPXE quick image and full registration with a deploy now need the Deploy task type. This adds schema 441.
• New plugin: Directory Groups (#1879, #1883, #1885, #1888). It groups hosts by Active Directory OU, across one or more domains. A core FOG group backs each directory group. Core adds the hooks the plugin uses.
• Directory Domains: one join account per domain (#1887, #1897). A domain can hold the account its hosts use to join it. The FOG Client, the FOG Agent and FOS use it. The domain’s account takes precedence over the host’s own. This needs fog-plugins v1.6.27, which this RC installs.
• FOS gets the join password only for a host that joins (#1891). hostinfo.php sent the join account for every imaging task, also when domain join was off on the host. It now sends it only when domain join is on.
• API: plugin secrets are not returned (#1895). The API built its list of secret fields before the plugins loaded. Every earlier 1.6 RC returned plugin secrets to a signed-in API caller with read permission. Examples are the LDAP, OIDC and Directory Domain bind passwords. Update an RC server that runs those plugins.

Before you upgrade

• Back up your database and /opt/fog/.fogsettings.
• Read the release notes: https://github.com/FOGProject/fogproject/blob/rc-1.6.0/docs/release/1.6.0-release-notes.md
• 1.6 removes Display Manager, Directory Cleaner, User Cleanup, Client Updater, Green FOG and the persistentgroups plugin. Their data is dropped. The site and accesscontrol plugins move into core.
• PHP 7.4 or later is required. Plugins built for 1.5 do not load.

Install or update (as root)

• A 1.6 beta or RC server: run bin/updatefog.sh --channel rc from your FOG checkout.
• A 1.5 server installed from git: update to the current 1.5 stable, then run bin/updatefog.sh --channel rc from the checkout.
• A new server, or a 1.5 server installed from a tarball:
  curl -fsSL https://raw.githubusercontent.com/FOGProject/fogproject/working-1.6/bin/bootstrap.sh | bash -s -- --channel rc

Report problems

Open an issue at https://github.com/FOGProject/fogproject/issues. Include your FOG version, your OS, and the installer log from bin/error_logs/. Report a security problem through “Report a vulnerability” on the same repository, not in a public issue.