Releases: stackhpc/ansible-slurm-appliance
Release list
v2.23.0
Contributors
Assets 3
v2.22.0
What's Changed
- Support running HPC tests in a Slurm reservation by @priteau in #1002
- Bump pulp snapshots to fix CVE-2026-64600 by @jovial in #1006
Images
Two new images are available:
- RockyLinux 8: openhpc-RL8-260724-1046-3267c585
- RockyLinux 9: openhpc-RL9-260724-1045-3267c585
Full Changelog: v2.21.2...v2.22.0
Contributors
Assets 3
v2.21.2
What's Changed
Security and Updates
Full Changelog: v2.21.1...v2.21.2
Images
A new image is available:
- RockyLinux 8: openhpc-RL8-260717-1018-bcd59178
See v2.21 for the unchanged RockyLinux 9 image.
Contributors
Assets 3
v2.21.1
What's Changed
Shortly after v2.21 was released, NVIDIA released a version of DOCA-OFED compatible with EL9.8. This release can be used for RockyLinux 9.8 site image builds which require the doca group.
Security and Updates
Full Changelog: v2.21...v2.21.1
Images
There are no new images at this release, see v2.21.
Contributors
Assets 3
v2.21
What's Changed
Updates all dnf packages to latest snapshots. This includes a fix for CVE-2026-43499 (ghostlock) in the RockyLinux 9 image only.
Important
NVIDIA doca-ofed is currently not compatible with the latest RockyLinux 9.8 kernel. Upgrades to this appliance version should not include doca in any site image builds.
Kernel updates:
- RL9: 5.14.0-687.25.1.el9_8.x86_64 (was 5.14.0-687.12.1.el9_8.x86_64)
- RL8: 4.18.0-553.141.1.el8_10.x86_64 (was 4.18.0-553.137.1.el8_10.x86_64)
Security and Updates
Full Changelog: v2.20...v2.21
Images
Two new images are available:
- RockyLinux 8: openhpc-RL8-260715-0828-72b8075d
- RockyLinux 9: openhpc-RL9-260715-0828-72b8075d
Contributors
Assets 3
v2.20
Caution
This release is NOT the latest, GitHub release page ordering is broken!
What's Changed
Important
This release is generally backward-compatible for configuration but includes Slurm major version upgrades and kernel updates (not necessarily to the latest available upstream versions). Please see the PR notes linked from the security section below for full details before upgrading.
If using the squid functionality as a general proxy (not purely for EESSI) note that the default ACLs are now more restrictive - see PR993 below.
In summary:
- RockyLinux 8.10: Slurm v23.11.10 -> v25.05.8. A Slurm database upgrade is required and will happen on first run of the
site.ymlplaybook at this release. - RockyLinux 9.7 -> RockyLinux 9.8: Slurm v24.11.5 -> v25.11.4. No database upgrade is required.
Security and Updates
- Update RockyLinux 9.8 / OpenHPC v3.5 & mitigate CVE-2026-43037 by @JasleenKaurSethi in #979
- Upgrade jupyter to v2.20.0 to fix CVE-2026-44727 by @sjpb in #995
- Squid - limit default acl ports by @axelsimon in #993
- Update RockyLinux 8.10 inc. OpenHPC v2.10, disable act_pedit by @elelaysh in #994
General enhancements and fixes
- Fix ood file shortcuts by @technowhizz in #990
- Fix nhc timeouts on /proc/cpuinfo with large cpu count by @elelaysh in #989
- Fix typo in mounts role causing a missing directory to never be created by @elelaysh in #997
- Support attaching pre-existing volumes to node groups by @sjpb in #998
StackHPC CI & development tools
- Update github actions for node 24 by @elelaysh in #992
- Apply azimuth-cloud repos ruff rules by @elelaysh in #928
Full Changelog: v2.19...v2.20
Images
Two new images are available:
- RockyLinux 8: openhpc-RL8-260709-1110-095e2432
- RockyLinux 9: openhpc-RL9-260709-1110-095e2432
New Contributors
- @JasleenKaurSethi made their first contribution in #979
- @axelsimon made their first contribution in #993
Contributors
Assets 3
v2.19
What's Changed
This update is expected to be backward-compatible.
- For RockyLinux 8, the updated kernel includes patches for CVE-2026-46333 (ssh-keysign-pwn), for which mitigations were provided in v2.17
- For RockyLinux 9, this will be the final RockyLinux 9.7 update before RockyLinux 9.8.
Security & Updates
- Update OS packages for RockyLinux 8.10 and 9.7 by @sjpb in #980. This provides kernels as follows:
- RL8: kernel-4.18.0-553.126.1.el8_10
- RL9: kernel-5.14.0-611.55.1.el9_7
General enhancements and fixes
- Fix image build post-filesystems hook by @sjpb in #970
- Use all ansible connection properties for dev/ansible-ssh by @sjpb in #977
StackHPC CI & development tools
- Use ephemeral keys for CI image build and refactor CI ssh configuration by @sjpb in #971
- Update node20 actions by @sjpb in #972
- Allow setting keypair name for stackhpc CI by @sjpb in #976
Full Changelog: v2.18...v2.19
Images
Two new images are available:
- RockyLinux 8: openhpc-RL8-260603-0842-b38bb57d
- RockyLinux 9: openhpc-RL9-260603-0842-b38bb57d
Contributors
Assets 3
v2.18
What's Changed
This update is expected to be backward-compatible. It mostly upstreams client-specific code on top of v2.17:
- Add pkinit support to freeipa integration by @sjpb in #966
- Add post-filesystems hook by @sjpb in #968
- Fix galaxy validation for non-symmetric difference filter by @sjpb in #969
Full Changelog: v2.17...v2.18
Images
No new images are provided at this release, see v2.17.
Contributors
Assets 3
v2.17
What's Changed
This update is expected to be backward-compatible.
Important
Users should upgrade to this release where possible to get mitigation for CVE-2026-46333 (ssh-keysign-pwn).
Security & Updates
- Bump DOCA OFED to 3.2.2 LTS by @priteau in #936
- Mitigate ssh-keysign-pwn exploits by @elelaysh in #965
General enhancements and fixes
- Fix mounts role failing to create directories by @MoteHue in #957
- Fix mounts role changes permissions on mounted contents by @elelaysh in #963
- Add support for setting minimum UID for users defined via basic_users by @sjpb in #942
- Fix logic in build for desktop and lustre installs by @sjpb in #964
StackHPC CI & development tools
Full Changelog: v2.16...v2.17
Images
Two new images are available:
- RockyLinux 8: openhpc-RL8-260515-1509-ce6c64e9
- RockyLinux 9: openhpc-RL9-260515-1436-ce6c64e9
Contributors
Assets 3
v2.16
What's Changed
This update is expected to be backward-compatible.
Important
Users should upgrade to this release where possible to get fixes/mitigations for:
- CVE-2026-31431 "copyfail"
- CVE-2026-43284 "dirtyfrag"
- CVE tbd "copyfail 2"
Consider reviewing #946 and making similar changes to your environment/$ENV/activate scripts so that there is no need to cd environments/$ENV/tofu to run OpenTofu commands.
Security & Updates
- Scan images using grype scanner by @sjpb in #937
- Bump tornado package for Jupyter to v6.5.5 by @wtripp180901 in #944
- Upgrade prometheus stack to latest LTS versions by @elelaysh in #943
- Bump CUDA to 13.2.1 and NVIDIA driver to 595.71.05 by @priteau in #939
- Update OS packages in images to get kernels with copy fail resolved by @sjpb in #956
- Add dirtyfrag mitigation to images by @sjpb in #961
General enhancements and fixes
- Validate ansible-galaxy installs are up to date in build by @sjpb in #921
- Sort NHC elements to ensure repeatable ordering by @priteau in #915
- Improve hpctests: account and qos options and allowance for reserved cores for HPL by @elelaysh in #924
- Use pam_slurm_adopt instead of pam_slurm by @elelaysh in #905
- Support Let's Encrypt for Open OnDemand by @priteau in #714
- Make ondemand server config idempotent by @sjpb in #929
- Fix hpctests script templates by @elelaysh in #933
- doca: fix rare failure when Waiting for process by @elelaysh in #930
- basic_users role: Prevent user changes to skeleton-templated files being lost by @sjpb in #941
- Run tofu from anywhere by @jovial in #946
- Fix node health checks failure for auto mounted filesystems by @jovial in #913
- Host Slurm logo image and reference it in ui-meta by @m-bull in #950
- Fixup inventory retrieval adhoc playbook for current OpenTofu config by @sjpb in #951
- Fix pulp sync on RL8 by @sjpb in #958
- Fix cvmfs config templating in eessi role by @MoteHue in #960
- Fix no sssd_packages installed if not sssd_install_ldap by @elelaysh in #959
StackHPC CI & development tools
- Use only ruff for python linting and only black for python formatting by @sjpb in #927
- Add script to run linters locally by @elelaysh in #932
- Deactivate trivy and rotate CI creds by @sjpb in #934
- Enable and fix GitHub action warnings by @elelaysh in #935
- Add a do-nothing scan.yml workflow so can run workflow_dispatch by @sjpb in #938
- Fix typos in linter command references by @jovial in #945
- Add pins from github-actions-list @ e6fd9c5 by @sjpb in #947
- Update GitHub actions versions for organisation allowlist by @sjpb in #954
Full Changelog: v2.15.1...v2.16
Images
Two new images are available:
- RockyLinux 8: openhpc-RL8-260508-1119-0374764b
- RockyLinux 9: openhpc-RL9-260508-1119-0374764b
