2025.1 Epoxy Series Release Notes

stackhpc/18.4.0.32

New Features

  • Uses the StackHPC Ironic fork to include diskless boot support and architecture-specific virtual media ESP bootloader selection.

stackhpc/18.4.0.30

New Features

  • Bumps Ceph to Squid v19.2.4.

stackhpc/18.4.0.28

New Features

  • Adds Cinder support for VAST storage backends and Manila support for VAST multitenancy.

stackhpc/18.4.0.27

Security Issues

  • Fixes CVE-2026-42998, CVE-2026-42999, CVE-2026-43000, CVE-2026-43001 and CVE-2026-44394 with updated Keystone images.

stackhpc/18.4.0.26

New Features

  • Adds Rocky Linux aarch64 all-in-one CI jobs.

stackhpc/18.4.0.24

New Features

  • The smartmon exporter now treats historical SMART temperature and airflow threshold breaches as non-critical when calculating the smartmon_device_smart_healthy metric. This prevents disks with only a past over-temperature event from being reported as actively unhealthy.

    A new smartmon_device_historical_temperature_failure metric is exported so these historical temperature or airflow threshold breaches can still be viewed and alerted on separately as a warning if required.

stackhpc/18.4.0.21

Bug Fixes

  • Support use of pulp_enable_tls in combination with the newer pulp collection by configuring requests to use CA bundle where internal PKI is configured.

stackhpc/18.4.0.20

New Features

  • Updates to IPA image selection to continue using the CentOS Stream 9 images with Rocky 10, until Rocky 10 IPA images are stable.

  • IPA building now uses the Kayobe ipa_build_distro and ipa_build_release overrides to build, in preparation for building pure Rocky IPA images.

stackhpc/18.4.0.18

Bug Fixes

  • Fix for pulp artifact promotion playbook following on from updates to pulp.squeezer collection - the base_path attribute cannot be used when querying a file distribution.

stackhpc/18.4.0.14

Bug Fixes

  • Updates Nova container images to fix LP#2140347, where persistent disk detach could incorrectly log a failure warning.

stackhpc/18.4.0.13

New Features

  • Adds support for the Rocky Linux security repository. This repository is disabled by default, like in Rocky Linux. It can be enabled by setting dnf_enable_rocky_security to true.

stackhpc/18.4.0.11

New Features

  • Container images for Epoxy can now be built on Rocky 10.

stackhpc/18.4.0.10

New Features

  • Added four playbooks for migrating secret store from Hashicorp Vault to OpenBao.

    vault-bao-migration-seed.yml does Vault to OpenBao migration on seed node. This is single node migration, so API calls to seed secret-store can be disruptive for short period of time.

    vault-bao-migration-overcloud.yml does Vault to OpenBao migration on overcloud. (Default: controller nodes) This is HA migration, so no downtime is expected.

    vault-bao-migration-change-config.yml automatically update SKC to target OpenBao. It is recommended to use this playbook after all Vault deployments are migrated to OpenBao.

    vault-bao-migration-all.yml runs all other three playbooks in order.

    As Hashicorp Vault will no longer be supported from OpenStack 2026.1, it is strongly recommended to migrate to OpenBao before upgrading.

stackhpc/18.4.0.9

New Features

  • The pulp.squeezer collection has been updated to the latest version (0.3.0), with dependencies added and updated as required. The stackhpc.pulp collection has also been updated to it’s latest version (0.6.0). Combined, these two updates drastically improve the time taken for artifacts to be pushed to and pulled from Ark.

Upgrade Notes

  • New versions of pulp.squeezer (0.3.0) and stackhpc.pulp (0.6.0) are available, these collections and their dependencies can be updated by running a control host bootstrap.

stackhpc/18.4.0.7

Bug Fixes

  • DNF repository URLs now use $basearch instead of kolla_base_arch so hosts and build containers resolve the repository architecture locally.

stackhpc/18.4.0.3

Security Issues

  • Bumps repository versions to includes fixes for CVE-2026-31431 (Copy Fail).

stackhpc/18.4.0.2

New Features

  • Adds support for syncing x86_64 and aarch64 RPM repositories from StackHPC Ark into local Pulp using stackhpc_pulp_rpm_architectures.

stackhpc/18.4.0.1

New Features

  • Added support for DOCA OFED on Rocky Linux 9 aarch64.