Platform release 0.7
We are happy to release the next iteration of the LEAP Platform, and its associated components! This release started small, and then grew as more core pieces were cleaned up and polished and improved. We ended up chewing through over 110 issues to get use to a well tested and oiled machine!
- Download 0.7.0 signed tag: https://leap.se/git/leap_platform.git
- Changelog: https://leap.se/git/leap_platform.git/shortlog/refs/tags/0.7.0
- Issues fixed: https://leap.se/code/versions/168
- Known issues: https://leap.se/en/docs/platform/troubleshooting/known-issues
- Requires leap_cli version >= 1.7.3
- Requires bitmask client version >= 0.7
- Previous releases supported cookies when using the provider API. Now, only tokens are supported.
- leap_mx 0.7.0
- tapicero 0.7
- webapp 0.7
- soledad 0.7
gem install leap_cli --version 1.7.3.
cd leap_platform; git pull; git checkout 0.7.0.
leap db destroy --db sessions,tokensYou can ignore message about needing to redeploy (since, in this case, we just want to permanently delete those databases).
leap testto make sure everything is working
- rotating couchdb databases: CouchDB is not designed to handle ephemeral data, like sessions, because documents are never really deleted (a tombstone document is always kept to record the deletion). To overcome this limitation, we now rotate the
tokensdatabases monthly. The new database names are
sessions_XXXwhere XXX is a counter since the epoch that increments every month (not a calendar month, but a month’s worth of seconds). Additionally, nagios checks and
leap test runnow will create and destroy test users in the
tmp_usersdatabase, which will get periodically deleted and recreated.
- deployment logging: information on every deploy is logged to
/var/log/leapon the node, including the user, leap_cli version, and platform version.
- you must now run
leap deploy --downgradeif you want to deploy an older version over a newer platform version.
- the install source for each custom daemons (e.g. tapicero, etc) can now configured in
- you can configure apt sources in common.json
- improved nagios graphs integration (with pnp4nagios)
- default MTU was reduced to 1400 for better overall compatibility
- install haveged for some minimal entropy on depleted systems
- switch to release branches for webapp, tapicero
- implement weakdh recommendations, and update minimal cipher lists for web TLS connections
- many bug bugfixes, security improvements, and tests