v4.1.67

Update qemux/qemu-docker Docker tag to v5.18

.github/workflows/tests.yml

@@ -73,13 +73,13 @@ jobs:
       name: ${{ matrix.target }}
 
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+    - uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08
 
     # https://github.com/unfor19/install-aws-cli-action
     - name: Setup awscli
       uses: unfor19/install-aws-cli-action@e8b481e524a99f37fbd39fdc1dcb3341ab091367 # v1
 
-    - uses: aws-actions/configure-aws-credentials@12e3392609eaaceb7ae6191b3f54bbcb85b5002b
+    - uses: aws-actions/configure-aws-credentials@55f725fcb586ca16a5ed5b0d75d464defbfa831b
       with:
         aws-region: ${{ vars.AWS_REGION || 'us-east-1' }}
         role-session-name: github-${{ github.job }}-${{ github.run_id }}-${{ github.run_attempt }}
@@ -798,6 +798,14 @@ jobs:
                 && rm -f "\${tmphosts}" \
                 && getent hosts api.${{ matrix.subdomain }}.${{ matrix.dns_tld }} | grep 127.0.1.1
 
+              sshd -T
+              service ssh restart
+
+          # https://forums.docker.com/t/docker-compose-through-ssh-failing-and-referring-to-docker-example-com/115165/18
+          - path: /etc/ssh/sshd_config.d/00-cloud-init
+            content: |
+              MaxStartups 100:0:100
+
         # cloud-init runs as root
         # (e.g.) https://cloudinit.readthedocs.io/en/latest/reference/merging.html#example-cloud-config
         runcmd:
@@ -839,6 +847,10 @@ jobs:
         aws ec2 wait instance-running --instance-ids "${instance_id}"
         with_backoff aws ec2 wait instance-status-ok --instance-ids "${instance_id}"
 
+        private_ip="$(aws ec2 describe-instances --instance-id "${instance_id}" \
+          | jq -r .Reservations[].Instances[].PrivateIpAddress)"
+        echo "private_ip=${private_ip}" >>"${GITHUB_OUTPUT}"
+
       env:
         ATTEMPTS: 2
         AWS_DEFAULT_REGION: ${{ vars.AWS_REGION || 'us-east-1' }}
@@ -876,10 +888,20 @@ jobs:
         trap 'log_output' EXIT
 
         # https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started-enable-ssh-connections.html
+        mkdir -p "${HOME}/.ssh/controlmasters"
         cat << EOF > "${HOME}/.ssh/config"
+        host *
+            StrictHostKeyChecking no
+            UserKnownHostsFile /dev/null
+
         host i-*
             StrictHostKeyChecking no
             UserKnownHostsFile /dev/null
+            TCPKeepAlive yes
+            ServerAliveInterval 5
+            ControlPath "${HOME}/.ssh/controlmasters/%r@%h:%p"
+            ControlMaster auto
+            ControlPersist 5m
             ProxyCommand sh -c "aws ssm start-session --target %h --document-name AWS-StartSSHSession --parameters 'portNumber=%p'"
         EOF
 
@@ -998,6 +1020,16 @@ jobs:
         with_backoff balena keys | grep ${{ steps.provision-ssh-key.outputs.key_id }} \
           | awk '{print $1}' | xargs --no-run-if-empty balena key rm --yes
 
+    - name: remove AWS/EC2 key-pair
+      if: always() && matrix.target == 'compose-private-pki'
+      continue-on-error: true
+      run: |
+        set -ue
+
+        [[ '${{ vars.VERBOSE }}' =~ on|On|Yes|yes|true|True ]] && set -x
+
+        aws ec2 delete-key-pair --key-name ${{ steps.generate-key-pair.outputs.key_name }}
+
     - name: delete balenaOS test device
       if: always() && matrix.target == 'balena-public-pki'
       continue-on-error: true

.versionbot/CHANGELOG.yml

@@ -1,3 +1,239 @@
+- commits:
+    - subject: Update qemux/qemu-docker Docker tag to v5.18
+      hash: 7210ea0ad80c8fe7ee470a7f85bd7436f91f0411
+      body: |
+        Update qemux/qemu-docker from 5.16 to 5.18
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.67
+  title: ""
+  date: 2024-08-19T19:11:51.804Z
+- commits:
+    - subject: SSH reliability settings
+      hash: 539adade50241c6f9d20bcf08cb028c3026d8f37
+      body: >
+        * enable SSHD multiplexing, KeepAlive and relax throttling
+
+
+        Thank you for the hint:
+
+        https://forums.docker.com/t/docker-compose-through-ssh-failing-and-referring-to-docker-example-com/115165/18?u=ab77
+
+               MaxStartups
+                       Specifies the maximum number of concurrent
+                       unauthenticated connections to the SSH daemon.
+                       Additional connections will be dropped until
+                       authentication succeeds or the LoginGraceTime expires for
+                       a connection.  The default is 10:30:100.
+
+                       Alternatively, random early drop can be enabled by
+                       specifying the three colon separated values
+                       start:rate:full (e.g. "10:30:60").  sshd(8) will refuse
+                       connection attempts with a probability of rate/100 (30%)
+                       if there are currently start (10) unauthenticated
+                       connections.  The probability increases linearly and all
+                       connection attempts are refused if the number of
+                       unauthenticated connections reaches full (60).
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+    - subject: SSH reliability settings
+      hash: 758c52b7bab371d6f5d8abfe05927b7b18f90be0
+      body: >
+        SSH connections keep breaking between Hetzner EU DCs and AWS us-east-1
+        for no particular reason. Suspect Hetzner local network saturation
+        and/or a function of trans-atlantic routing/peering/time of day. Adding
+        connection multiplexing and keepalive to test this theory.
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.66
+  title: ""
+  date: 2024-08-19T18:22:02.557Z
+- commits:
+    - subject: "patch: Add Table of Contents"
+      hash: b414f262c0adae9014d1589be64276785efecbbd
+      body: ""
+      footer:
+        Signed-off-by: Vipul Gupta (@vipulgupta2048) <vipulgupta2048@gmail.com>
+        signed-off-by: Vipul Gupta (@vipulgupta2048) <vipulgupta2048@gmail.com>
+      author: Vipul Gupta (@vipulgupta2048)
+      nested: []
+  version: 4.1.65
+  title: ""
+  date: 2024-08-15T21:13:54.244Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 55f725f
+      hash: 2f141a4e4e5f7e782bbecc12dab9ecd30f9fda0a
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.64
+  title: ""
+  date: 2024-08-13T16:51:55.472Z
+- commits:
+    - subject: Cleanup AWS/EC2 key pairs
+      hash: b4efd6345448975b1871645b83546ab6bf2284d8
+      body: ""
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.63
+  title: ""
+  date: 2024-08-12T17:47:56.854Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.41.1
+      hash: b8717d5fbec46cf41cc748c98d83f850a9f1ad3d
+      body: |
+        Update balena/open-balena-registry from 2.39.65 to 2.41.1
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.62
+  title: ""
+  date: 2024-08-12T17:25:37.250Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.2.2
+      hash: bafc9c02ab31711beb8f2220abb9b1ea421ebb34
+      body: |
+        Update balena/open-balena-api from 26.1.6 to 26.2.2
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.61
+  title: ""
+  date: 2024-08-12T16:14:26.855Z
+- commits:
+    - subject: Update redis Docker tag to v7.4
+      hash: 24925320f84095ba6ade3f857718abb6a8b48205
+      body: |
+        Update redis from 7.2 to 7.4
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.60
+  title: ""
+  date: 2024-08-10T06:16:57.031Z
+- commits:
+    - subject: Update balena/open-balena-s3 Docker tag to v2.28.52
+      hash: 6b4682ece6e4c8b0c7519d5529421289512308e7
+      body: |
+        Update balena/open-balena-s3 from 2.28.50 to 2.28.52
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.59
+  title: ""
+  date: 2024-08-10T05:13:58.126Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.34
+      hash: b3d0f53bdbe02df906cc7e1bdb4c207757f35d41
+      body: |
+        Update balena-io/balena-cli from 18.2.33 to 18.2.34
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.58
+  title: ""
+  date: 2024-08-10T04:17:16.064Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.1.6
+      hash: d3694bbd6e14403dc6581b47c4879e1b1c29a1c7
+      body: |
+        Update balena/open-balena-api from 26.1.5 to 26.1.6
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.57
+  title: ""
+  date: 2024-08-10T03:18:52.046Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 39228ca
+      hash: bb47956aa66a79fd31dc96810dee2ce2431a824c
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.56
+  title: ""
+  date: 2024-08-10T02:34:34.556Z
+- commits:
+    - subject: Update balena/open-balena-vpn Docker tag to v11.30.31
+      hash: 2ba2d6aadd2c7e36c1fb849d4476423c004bf7f7
+      body: |
+        Update balena/open-balena-vpn from 11.30.27 to 11.30.31
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.55
+  title: ""
+  date: 2024-08-06T14:52:02.295Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.1.5
+      hash: 6742366dbb25f966b9aa86d0fe1430cf522df443
+      body: |
+        Update balena/open-balena-api from 26.1.3 to 26.1.5
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.54
+  title: ""
+  date: 2024-08-05T22:16:49.357Z
+- commits:
+    - subject: Update actions/checkout digest to 9a9194f
+      hash: b122b301fdb8cf132bddd54ae8b063b8c8436d2e
+      body: |
+        Update actions/checkout
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.53
+  title: ""
+  date: 2024-08-05T21:02:28.674Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.65
+      hash: a068dafe1cd6c694885435dc2af90309f3ec0bac
+      body: |
+        Update balena/open-balena-registry from 2.39.63 to 2.39.65
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.52
+  title: ""
+  date: 2024-08-01T19:27:14.377Z
 - commits:
     - subject: Update balena/open-balena-api Docker tag to v26.1.3
       hash: eceb7deb864ef77b21902f9be1571a37110c292b

CHANGELOG.md

@@ -4,6 +4,87 @@ All notable changes to this project will be documented in this file
 automatically by Versionist. DO NOT EDIT THIS FILE MANUALLY!
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+# v4.1.67
+## (2024-08-19)
+
+* Update qemux/qemu-docker Docker tag to v5.18 [Self-hosted Renovate Bot]
+
+# v4.1.66
+## (2024-08-19)
+
+* SSH reliability settings [Anton Belodedenko]
+* SSH reliability settings [Anton Belodedenko]
+
+# v4.1.65
+## (2024-08-15)
+
+* patch: Add Table of Contents [Vipul Gupta (@vipulgupta2048)]
+
+# v4.1.64
+## (2024-08-13)
+
+* Update aws-actions/configure-aws-credentials digest to 55f725f [Self-hosted Renovate Bot]
+
+# v4.1.63
+## (2024-08-12)
+
+* Cleanup AWS/EC2 key pairs [Anton Belodedenko]
+
+# v4.1.62
+## (2024-08-12)
+
+* Update balena/open-balena-registry Docker tag to v2.41.1 [Self-hosted Renovate Bot]
+
+# v4.1.61
+## (2024-08-12)
+
+* Update balena/open-balena-api Docker tag to v26.2.2 [Self-hosted Renovate Bot]
+
+# v4.1.60
+## (2024-08-10)
+
+* Update redis Docker tag to v7.4 [Self-hosted Renovate Bot]
+
+# v4.1.59
+## (2024-08-10)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.52 [Self-hosted Renovate Bot]
+
+# v4.1.58
+## (2024-08-10)
+
+* Update dependency balena-io/balena-cli to v18.2.34 [Self-hosted Renovate Bot]
+
+# v4.1.57
+## (2024-08-10)
+
+* Update balena/open-balena-api Docker tag to v26.1.6 [Self-hosted Renovate Bot]
+
+# v4.1.56
+## (2024-08-10)
+
+* Update aws-actions/configure-aws-credentials digest to 39228ca [Self-hosted Renovate Bot]
+
+# v4.1.55
+## (2024-08-06)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.31 [Self-hosted Renovate Bot]
+
+# v4.1.54
+## (2024-08-05)
+
+* Update balena/open-balena-api Docker tag to v26.1.5 [Self-hosted Renovate Bot]
+
+# v4.1.53
+## (2024-08-05)
+
+* Update actions/checkout digest to 9a9194f [Self-hosted Renovate Bot]
+
+# v4.1.52
+## (2024-08-01)
+
+* Update balena/open-balena-registry Docker tag to v2.39.65 [Self-hosted Renovate Bot]
+
 # v4.1.51
 ## (2024-07-23)
 

README.md

@@ -16,6 +16,23 @@ images to your devices.
 
 To learn more about openBalena, visit [balena.io/open][open-balena-website].
 
+- [Features](#features)
+- [Getting Started](#getting-started)
+- [Compatibility](#compatibility)
+- [Documentation](#documentation)
+- [Getting Help](#getting-help)
+- [Contributing](#contributing)
+- [Roadmap](#roadmap)
+- [Differences between openBalena and balenaCloud](#differences-between-openbalena-and-balenacloud)
+- [License](#license)
+- [FAQ](#faq)
+  - [How do you ensure continuity of openBalena? Are there security patches on openBalena?](#how-do-you-ensure-continuity-of-openbalena-are-there-security-patches-on-openbalena)
+  - [How do you ensure the "Join" command actually works between openBalena and](#how-do-you-ensure-the-join-command-actually-works-between-openbalena-and)
+  - [Is it "production ready"?](#is-it-production-ready)
+  - [Can a new device type be added to openBalena?](#can-a-new-device-type-be-added-to-openbalena)
+  - [Are there open-source UI dashboards from the community for openBalena?](#are-there-open-source-ui-dashboards-from-the-community-for-openbalena)
+
+
 
 ## Features
 
@@ -159,7 +176,7 @@ While we actually have some rather large fleets using openBalena, we consider it
 perpetually in "beta". This means potentially introducing breaking changes between
 releases.
 
-### Can new device type be added to openBalena?
+### Can a new device type be added to openBalena?
 openBalena imports the following public [device-types] "out of the box". You can specify
 your own contracts repository by overriding `CONTRACTS_PUBLIC_REPO_NAME`,
 `CONTRACTS_PUBLIC_REPO_OWNER` and `IMAGE_STORAGE_BUCKET` environment variables on the API

VERSION

@@ -1 +1 @@
-4.1.51
+4.1.67

balena.yml

@@ -23,4 +23,4 @@ data:
     - generic-amd64
     - genericx86-64-ext
     - intel-nuc
-version: 4.1.51
+version: 4.1.67

docker-compose.yml

@@ -79,7 +79,7 @@ services:
       *with-default-privileges,
       *with-default-volumes,
     ]
-    image: balena/open-balena-api:v26.1.3
+    image: balena/open-balena-api:v26.2.2
     depends_on:
       - db
       - redis
@@ -119,7 +119,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-registry:v2.39.63
+    image: balena/open-balena-registry:v2.41.1
     volumes:
       - certs-data:/certs
       - resin-data:/balena
@@ -146,7 +146,7 @@ services:
       *with-network-privileges,
       *with-default-privileges,
     ]
-    image: balena/open-balena-vpn:v11.30.27
+    image: balena/open-balena-vpn:v11.30.31
     depends_on:
       - api
     environment:
@@ -175,7 +175,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-s3:v2.28.50
+    image: balena/open-balena-s3:v2.28.52
     volumes:
       - s3-data:/export
       - certs-data:/certs
@@ -189,7 +189,7 @@ services:
   redis:
     <<: *base-service
     # https://redis.io/blog/what-redis-license-change-means-for-our-managed-service-providers/
-    image: redis:7.2-alpine
+    image: redis:7.4-alpine
     volumes:
       - redis-data:/data
     healthcheck:

src/balena-tests/Dockerfile

@@ -1,7 +1,7 @@
 FROM ubuntu:24.04
 
 # renovate: datasource=github-releases depName=balena-io/balena-cli
-ARG BALENA_CLI_VERSION=v18.2.33
+ARG BALENA_CLI_VERSION=v18.2.34
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	bash \

src/test-device/Dockerfile

@@ -1,6 +1,6 @@
 # https://hub.docker.com/r/qemux/qemu-docker
 # https://github.com/qemus/qemu-docker
-FROM qemux/qemu-docker:5.16
+FROM qemux/qemu-docker:5.18
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	minicom \