⬆️ Update ghcr.io/linuxserver/kasm Docker digest to 742cda9 #419

Merged

mafyuh merged 1 commit from renovate/ghcr.io-linuxserver-kasm into main

2024-11-19 17:38:30 -05:00

renovatebot commented

2024-11-19 17:01:05 -05:00

Collaborator

This PR contains the following updates:

Package	Update	Change
ghcr.io/linuxserver/kasm	digest	`0cf4860` -> `742cda9`

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/linuxserver/kasm | digest | `0cf4860` -> `742cda9` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovatebot added 1 commit 2024-11-19 17:01:06 -05:00

⬆️ Update ghcr.io/linuxserver/kasm Docker digest to 742cda9

Lint on PR / Lint YAML files (pull_request) Successful in 10s

Details

Deploy to Hosts / deploy (pull_request) Successful in 54s

Details

b139ecd5f0

CD-Bot reviewed 2024-11-19 17:01:07 -05:00

CD-Bot left a comment

Collaborator

Linux Server Release Notes - 1.16.0-ls47

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.16.0-ls47/index.html

LinuxServer Changes:

Add base users in docker build logic to survive container upgrades.

kasm-install-wizard Changes:

What's new in Kasm 1.16.0

Highlights

Added Harvester and KubeVirt Providers to support autoscaling Virtual Machines inside a K8s cluster.
Added ability to add inline help to fields to make it easier to understand what the field is for and to point to our docs if more context is needed.
Added standalone workspace PWAs. This allows individual workspaces to be installed as remote apps.
Added RDP gateway capability to provide RDP client access to Kasm Windows servers.
Added Egress Providers to Kasm Container Workspaces to allow routing network traffic through Egress Gateways.
Added support for path based reverse proxies.
Added support for running the Kasm services in Kubernetes.

Features

Usability Enhancements
- Added a group setting for the default language of the application user interface, users can still override the setting in their profile.
- Added improved support for using rclone crypt wrappers in Custom Storage Mappings. Encryption Keys are automatically generated for all users.
- Added improved support for {ref}storage-provider-variable-substitution to Storage Mappings.
- Added the ability to set the background image on casting links
- Added editable columns to the workspace list view for cores, memory, docker image and persistant profile path to make bulk editing easier.
- Added a selection dropdown for the CAPTCHA type in Server Settings and added Cloudflare Turnstile and hCaptcha to the currently supported Google reCAPTCHA v2.
- Made the user dashboard more keyboard accessible, this is a work in progress but the improvements include, tiles are now focusable and interactive, all actions on open sessions are now accessible, Search, Categories and User profile are now usable. Across the application toggle buttons are now usable via keyboard.
- GCP Provider updates: now supports expanded startup script types including Windows scripting via powershell, batch file or command shell. If you are updating existing GCP Providers please see this note
- When launching a workspace, the document title and favicon now update to match that of the workspace being launched.
- Updated registry schema to 1.1, this adds the ability for individual registries to have "channels" in order to give users an idea of which tags are available and allow them to choose which to use.
- Added resolution and scaling options to Guac based workspaces, similar to those available in container based workspaces under Streaming Quality / Advanced.
- Removed display of Kasm Guac Token from installer since it is no longer needed.
Infrastructure Support Enhancements
- Upgrade Kasm Database to use PostgreSQL 14.x
- Improve functionality of Kasm Manager health check to guard against managers stuck on provisioning and ensure Primary Manager does not change when many Servers are provisioned at once.
- Improve behavior of autoscaling, allow multiple autoscale configs to be scaled up and down concurrently. Improve concurrency of orphan server cleanup.
- Added Microsoft RemoteApp support at the Workspace Image level for easier administration of Windows RemoteApps.
- Added support to specify maximum simultaneous sessions and maximum simultaneous users independently for RDP servers, allowing for greater flexibility for RemoteApps and scenarios in Windows RDS and terminal services environments.
- Windows server health is now tracked for servers with the Kasm Service installed. Sessions will not be assigned to servers that are not reporting in, enhancing reliability of created sessions.
- Add support for installing on Ubuntu Noble 24.04.
- Managers and Connection Proxy components automatically register as stopped when the containers are stopped for normal deployments and in Kubernetes will automatically deregister themselves.
- Connection Proxy components perform health checks and will automatically register as missing if they fail to check in within Component Missing Expiration. If configured to do so, Kasm can automatically remove these components if they fail to check in within Component Dead Expiration.
- Removed support for Slim (Alpine) based service images.
- Added support for Kasm to manage Active Directory users.
- Added support for Managed Egress Providers.
- Added support for Red Hat Enterprise Linux 8 and Red Hat Enterprise Linux 9
Kasm Image Enhancements
- Added Forensic OSINT image for amd64.
- Added watermark support for RDP sessions with default global and per server settings.
- Added Fedora 40 Desktop images for x86_64/aarch64
- Added Fedora 40 Core images for x86_64/aarch64
- Added Ubuntu Noble Desktop images for x86_64/aarch64
- Added Ubuntu Noble Core images for x86_64/aarch64
- Added Alpine 3.20 Desktop images for x86_64/aarch64
- Added Alpine 3.20 Core images for x86_64/aarch64
- Added Ubuntu Noble DinD images for x86_64/aarch64
- Added Ubuntu Noble DinD Rootless images for x86_64/aarch64
- Retroarch rebased to Ubuntu Jammy from Focal
Kasm Desktop Service
- Simplified Windows Service installation and registration process.
- Enhanced logging for easier troubleshooting and auditing.
- The Windows service reports health to the Kasm deployment, failed check-ins will result in the server changing to a missing status. Servers in a missing status will not get assigned user sessions.
- Installer includes Windows Firewall rules for both domain, private, and public profiles.
- Guac web-native RemoteApp wrapper, allows for better web-native RemoteApp support.
- Support for multiple concurrent RemoteApp sessions per user, per server, when users connect via RDP through the Kasm RDP Gateway.

Bugfixes

Fixed bug where kasm autogenerated docker networks were not being cleaned up properly
Fixed issue that caused S3 persistent profiles to not store files if there are a large number of very small files.
Fixed bug that caused Agents that stopped checking in, to not get marked as missing in accordance with the Host Missing Expiration global setting.
Fixed issue that prevented the 'allow_totp_2fa' setting from being enabled by default on new installs.
Fixed issue with windows sessions not being redirected after time limit finishes if the countdown is hidden.
Fixed an issue with storage providers where the name of a provider wasn't updateable after it was created.
Fixed issue that caused the wget command to not work on Ubuntu, Oracle and AlamaLinux images when Web Filtering is enabled.
Fixed issue where windows workspaces with the agent installed would sometimes generate error logs about calls to an unknown /style/ url
Fixed kasm_guac not purging old log files.
Fixed sessions Agent field showing the wrong value for the hostname.
Fixed issue with public API not returning new JWT formatted session tokens.
Fixed configuration of KasmVNC to block container user from making changes with vncconfig cli tool or other methods.
Fixed issue where requesting a Kasm on behalf of a default user that has never logged in fails.
Cloning workspaces and autoscale configs is done server side to prevent hidden fields saving incorrect data which is then hard to debug to find the cause of issues.
Fixed vulnerability KASM-2024-0001.
Fixed issue where SAML and OIDC configurations could not be disabled.
Fixed issue where connection errors for Workspace Registries and Update Checks could be generated in offline deployments.
Fixed issue where Windows Single Sign-On stops working after the period of time defined by the "Session Lifetime" Server Setting.

Link to Github release: https://github.com/linuxserver/docker-kasm/releases/tag/1.16.0-ls47

## Linux Server Release Notes - 1.16.0-ls47 **CI Report:** https://ci-tests.linuxserver.io/linuxserver/kasm/1.16.0-ls47/index.html **LinuxServer Changes:** Add base users in docker build logic to survive container upgrades. **kasm-install-wizard Changes:** # What's new in Kasm 1.16.0 ## Highlights - Added [Harvester and KubeVirt Providers](https://www.kasmweb.com/docs/develop/guide/compute/vm_providers.html#kubevirt-settings) to support autoscaling Virtual Machines inside a K8s cluster. - Added ability to add inline help to fields to make it easier to understand what the field is for and to point to our docs if more context is needed. - Added [standalone workspace PWAs](https://www.kasmweb.com/docs/develop/user_guide/pwa.html#standalone-pwa-apps). This allows individual workspaces to be installed as remote apps. - Added RDP gateway capability to provide RDP client access to Kasm Windows servers. - Added [Egress Providers](https://www.kasmweb.com/docs/develop/guide/egress.html) to Kasm Container Workspaces to allow routing network traffic through Egress Gateways. - Added support for [path based reverse proxies](https://www.kasmweb.com/docs/develop/how_to/reverse_proxy.html#proxy-via-path). - Added support for running the Kasm services in [Kubernetes](https://www.kasmweb.com/docs/develop/install/kubernetes.html). ## Features - **Usability Enhancements** - Added a group setting for the default language of the application user interface, users can still override the setting in their profile. - Added improved support for using rclone crypt wrappers in [Custom Storage Mappings](../guide/storage_providers/custom.md). Encryption Keys are automatically generated for all users. - Added improved support for {ref}`storage-provider-variable-substitution` to Storage Mappings. - Added the ability to set the background image on [casting](https://www.kasmweb.com/docs/develop/guide/casting.html) links - Added editable columns to the workspace list view for cores, memory, docker image and persistant profile path to make bulk editing easier. - Added a selection dropdown for the CAPTCHA type in [Server Settings](https://www.kasmweb.com/docs/develop/guide/settings.html#captcha-settings) and added Cloudflare Turnstile and hCaptcha to the currently supported Google reCAPTCHA v2. - Made the user dashboard more keyboard accessible, this is a work in progress but the improvements include, tiles are now focusable and interactive, all actions on open sessions are now accessible, Search, Categories and User profile are now usable. Across the application toggle buttons are now usable via keyboard. - [GCP Provider](https://www.kasmweb.com/docs/develop/guide/compute/vm_providers.html#google-cloud-gcp-settings) updates: now supports expanded startup script types including Windows scripting via powershell, batch file or command shell. If you are updating existing `GCP Providers` please see this [note](https://www.kasmweb.com/docs/develop/guide/compute/vm_providers.html#note-on-updating-existing-google-cloud-providers-gcp) - When launching a workspace, the document title and favicon now update to match that of the workspace being launched. - Updated registry schema to 1.1, this adds the ability for individual registries to have "channels" in order to give users an idea of which tags are available and allow them to choose which to use. - Added resolution and scaling options to Guac based workspaces, similar to those available in container based workspaces under Streaming Quality / Advanced. - Removed display of Kasm Guac Token from installer since it is no longer needed. - **Infrastructure Support Enhancements** - Upgrade Kasm Database to use PostgreSQL 14.x - Improve functionality of Kasm Manager health check to guard against managers stuck on provisioning and ensure Primary Manager does not change when many Servers are provisioned at once. - Improve behavior of autoscaling, allow multiple autoscale configs to be scaled up and down concurrently. Improve concurrency of orphan server cleanup. - Added Microsoft RemoteApp support at the [Workspace Image](https://www.kasmweb.com/docs/develop/guide/workspaces.html#remoteapp) level for easier administration of Windows RemoteApps. - Added support to specify maximum simultaneous sessions and maximum simultaneous users independently for RDP servers, allowing for greater flexibility for RemoteApps and scenarios in Windows RDS and terminal services environments. - Windows server health is now tracked for servers with the [Kasm Service](https://www.kasmweb.com/docs/develop/guide/windows/windows_service.html) installed. Sessions will not be assigned to servers that are not reporting in, enhancing reliability of created sessions. - Add support for installing on Ubuntu Noble 24.04. - Managers and Connection Proxy components automatically register as stopped when the containers are stopped for normal deployments and in Kubernetes will automatically deregister themselves. - Connection Proxy components perform health checks and will automatically register as missing if they fail to check in within [Component Missing Expiration](https://www.kasmweb.com/docs/develop/guide/settings.html#scale). If configured to do so, Kasm can automatically remove these components if they fail to check in within [Component Dead Expiration](https://www.kasmweb.com/docs/develop/guide/settings.html#scale). - Removed support for Slim (Alpine) based service images. - Added support for Kasm to [manage Active Directory users](https://www.kasmweb.com/docs/develop/guide/ldap.html#ad-sync). - Added support for [Managed Egress Providers](https://www.kasmweb.com/docs/develop/guide/egress.html#managed-egress-providers). - Added support for Red Hat Enterprise Linux 8 and Red Hat Enterprise Linux 9 - **Kasm Image Enhancements** - Added [Forensic OSINT](https://hub.docker.com/r/kasmweb/forensic-osint) image for amd64. - Added watermark support for RDP sessions with default [global](https://www.kasmweb.com/docs/develop/guide/settings.html#rdp-session-watermarking) and per server settings. - Added [Fedora 40 Desktop](https://hub.docker.com/r/kasmweb/fedora-40-desktop) images for x86_64/aarch64 - Added [Fedora 40 Core](https://hub.docker.com/r/kasmweb/core-fedora-40) images for x86_64/aarch64 - Added [Ubuntu Noble Desktop](https://hub.docker.com/r/kasmweb/ubuntu-noble-desktop) images for x86_64/aarch64 - Added [Ubuntu Noble Core](https://hub.docker.com/r/kasmweb/core-ubuntu-noble) images for x86_64/aarch64 - Added [Alpine 3.20 Desktop](https://hub.docker.com/r/kasmweb/alpine-320-desktop) images for x86_64/aarch64 - Added [Alpine 3.20 Core](https://hub.docker.com/r/kasmweb/core-alpine-320) images for x86_64/aarch64 - Added [Ubuntu Noble DinD](https://hub.docker.com/r/kasmweb/ubuntu-noble-dind) images for x86_64/aarch64 - Added [Ubuntu Noble DinD Rootless](https://hub.docker.com/r/kasmweb/ubuntu-noble-dind-rootless) images for x86_64/aarch64 - [Retroarch](https://hub.docker.com/r/kasmweb/retroarch) rebased to Ubuntu Jammy from Focal - **Kasm Desktop Service** - Simplified Windows Service installation and registration process. - Enhanced logging for easier troubleshooting and auditing. - The Windows service reports health to the Kasm deployment, failed check-ins will result in the server changing to a missing status. Servers in a missing status will not get assigned user sessions. - Installer includes Windows Firewall rules for both domain, private, and public profiles. - Guac web-native RemoteApp wrapper, allows for better web-native RemoteApp support. - Support for multiple concurrent RemoteApp sessions per user, per server, when users connect via RDP through the Kasm RDP Gateway. ## Bugfixes - Fixed bug where kasm autogenerated docker networks were not being cleaned up properly - Fixed issue that caused S3 persistent profiles to not store files if there are a large number of very small files. - Fixed bug that caused Agents that stopped checking in, to not get marked as missing in accordance with the Host Missing Expiration global setting. - Fixed issue that prevented the 'allow_totp_2fa' setting from being enabled by default on new installs. - Fixed issue with windows sessions not being redirected after time limit finishes if the countdown is hidden. - Fixed an issue with storage providers where the name of a provider wasn't updateable after it was created. - Fixed issue that caused the wget command to not work on Ubuntu, Oracle and AlamaLinux images when Web Filtering is enabled. - Fixed issue where windows workspaces with the agent installed would sometimes generate error logs about calls to an unknown `/style/` url - Fixed `kasm_guac` not purging old log files. - Fixed sessions Agent field showing the wrong value for the hostname. - Fixed issue with public API not returning new JWT formatted session tokens. - Fixed configuration of KasmVNC to block container user from making changes with vncconfig cli tool or other methods. - Fixed issue where requesting a Kasm on behalf of a default user that has never logged in fails. - Cloning workspaces and autoscale configs is done server side to prevent hidden fields saving incorrect data which is then hard to debug to find the cause of issues. - Fixed vulnerability [KASM-2024-0001](https://kasmweb.atlassian.net/servicedesk/customer/portal/3/topic/30ffee7f-4b85-4783-b118-6ae4fd8b0c52/article/70942771). - Fixed issue where SAML and OIDC configurations could not be disabled. - Fixed issue where connection errors for Workspace Registries and Update Checks could be generated in offline deployments. - Fixed issue where Windows Single Sign-On stops working after the period of time defined by the "Session Lifetime" [Server Setting](https://www.kasmweb.com/docs/develop/guide/settings.html#authentication). Link to Github release: https://github.com/linuxserver/docker-kasm/releases/tag/1.16.0-ls47