Doppler On-Prem: v22.06.2s

Version 22.06.2s of Doppler On-Prem has been released.

Downloads

An OVA without a manifest (marked legacy) has been provided for compatibility with VMware administration interfaces that don’t support SHA256 checksums.

We recommend verifying the integrity of the installation images. Our PGP keyring used for signing releases has recently been updated.

Changes in 22.06.2s

This update contains significant database changes, remember to run update-database to update the database schema, as well as the migrate-legacy-data and delete-legacy-data commands to migrate your database. The migration can be done while the system is running.

Please note that this release has a preconfigured 3 month data retention policy for sample data.

We recommend ensuring you have a recent backup of the database available before proceeding to update.

Security

Linux base images and dependencies have been updated to the latest patch levels as of 2022-06-23.
IP Block: Block entire IPv6 Network Prefix. (#993)

Features

API: Added ability to create, remove, enable and disable router objects. (#995/1002/1031/1042/1043)
API: Allow changing labels via the API (#1152)
ACL: Allow user with Router Admin privileges to create RTasks. (g604ca226)
Auto Block: Increase size of IPv6 subnet from /64 to /48
Bulk CSV: Added support for setting the router name when creating routers. (#1032/1035)
Config/Check: Add confirmation step before applying configuration patch (#1228)
DAL: The Interactive Terminal is now default, and not Beta anymore (#1285)
Dark Mode: Using the settings in the operating system, if any. Can be overriden in user profile. (#900/1022/1025/1026/1041)
Documentation: Add help text to config templates (#1011)
DX/DAL: Updated to v4.5.14
- Implement backup and restore capabilities (d-dx/7c04ce0d)
- Ability to update legacy DX clients via Router Details and RTask pages. (c5f908a4b)
- Includes and enables by default updated CA bundle independent of firmware version. (5a9234a3)
- Support for DAL 22.02 and newer (6145c9df)
- Dixes bug where options not being read on DAL 22.02 and newer (7945a506)
- Allow cacert files to be optional when enrolling and upgrading the DX client.
DX/SarOS: Updated to v3.2.14
- Improve stability when collecting telemetry by allowing for certain partial failures (d-dx/6312db18)
- Add compatibility check for ca cert verification, disabling it on firmware older than 5.2.17.1 (d-dx/11b84a83)
- Add support for certain legacy SarOS 5 routers without a built in json library (#1189)
- Add slightly larger random reconnect delay (d-dx/f7677bf3)
- Fix bug where configuration updates could be sent twice (d-dx/4fea06e3a)
Enroll/SarOS: A custom NTP server can be provided which will be configured on the router when enrolled
Enroll/SarOS: Re-enable downloads of cacert.pem to SarOS that was temporarily disabled in v22.04 (#1172)
Enroll/SarOS: Deploys an updated CA certificate bundle, enforcing certificate verification
Firmware/Router: Add support for EX50 (#1140)
Firmware/Router: Add more verbose error messages for firmware uploads (#1248)
Firmware/Summary: Add firmware summary page showing breakdowns of different firmware versions
Help popups: Blur the background (main window). (#968)
Labels: Enable users to set custom labels on routers
Location Override: Added script to set location override from “snmp 0 location”. (#1030)
Modem/Firmware: Add support for updating Telit and Sierra Wireless modem firmware via RTask on Digi SarOS (#1179)
Rconfig Check: Removed skipped routers from the list, and made ‘Changes’ the default tab. (#1008)
Rmap: Add previously deleted group notes. (#1034)
Router/Type: Add support for Digi IX20W (#1234)
Router/Type: Add support for Digi IX30 (#1272)
RTask: Add stopped and expired categories for RTasks, with configurable expiry time (#1202, #1222)
RTask: Add aditional self-test to ensure correct number of tasks are created (#1200)
RTask: Perform a dx update before a firmware update if required (#1138)
Security Log: Added logging of missing block message on wrong password. (#989)
Security Log: Throttle repeated entries, using an occurence counter instead. (#994)
Security Log: Drill down entries by user and IP address (#1139)
User/ACL: More fine grained access control: (#1216)
- The “admin” role has been removed.
- The new “agent” role can be given specific privileges on routers and groups.
- Two-factor authentication is now required for all, except “reader”-users.
User Interface:
- Add gravatar icons in user menu (#1245)
- Update styles for login pages (#1233)
- Redirect back to origin page when Cancel buttons are used (#1156)
- Router/Index: Improved sample list, fixed incorrect highlighting of certain changed values (#1213)
- Fixed styles on “Danger” buttons (#1208)

Bugfixes

ACL: Config Apply button was visible for Reader users (#1259)
Change Password: Failed on logging the change. (#981)
Dashborad: Fix redundant selection counts in the action menu (#1171)
Dashboard/Search: Fix bug where group selectors didn’t work in some cases (#1144)
Data Limits: Preventing negative values, both in frontend and backend. (#991)
Enroll/SarOS: Temporarily disable downloading cacert.pem to SarOS as workaround for SarOS 5.x (af18e86a)
Firmware/Modem: Fix broken uploads and downloads of Sierra Wireless firmware files (#1197)
Firmware/Router: Fixed bug where metadata was not included during schema upgrades (#1141)
Firmware/Router: Fix bug where firmware update buttons didn’t show for SarOS (#1159)
Firmware/Summary: Fix bug where modem firmware was not displaying correctly in detail list, and was not searchable in dashboard (#1133)
Firmware/Summary: Fix issue with group dropdown selector (#1143)
Firmware/Summary: Fix sum issue with “unknown” rows (#1145)
Firmware/Summary: Fixed incorrect links for SarOS firmware versions (#1167)
Firmware Update: Increased firmware update reboot timeout from 5 to 10 min. (976e5bab)
Log: Fixed inconsistent log message when router name was changed (#1211)
Program Warnings: Removed run time warnings triggered by the test suite. (#999)
Rconfig Check: Handle quoted variables (the fourth column) and newlines on comparison. (#975/977)
Router Type: Refactor the type system to fix situations where routers could be misclassified
Rtask: Selecting a limit of 100 entries in the table caused a runtime error. (#988)
Rtask: Fix incorrect counts in Group dropdowns in lists (#1249)
Rtask: Fixed bug where RTasks triggered an unneeded DX client update under some circumstances. (563edf8b)
Samples: Better handling of samples received in wrong order (a1107b71)
Samples: Fixed problem where reboot/ppp-up detection wouldn’t trigger in some cases (#1206)
Security Log: The json handler did not respect limits, so everything was shown. (#998)
Terminal: Fixed bug where the terminal would render incorrectly on some platforms. (#1010)
Terminal: Fix stability issues with the “Interactive Terminal” feature. (gd7609248)
System Settings: Fix problem with incorrect default values for RTask expiry (207e8296)
UI: Fix styling issues on Firmware Update (#1157), Dashboard (#1148), Enroll (#1147), TOTP auto-block (#1142)
UI: Fixed misc. styling and UI issues (#1135, #1134, #1131, #1130)