We have introduced quite some configurable options. Some of them are new, and some other are merely additions to existing ones.
First of all, we have expanded the configuration for the mailer. We are now providing more options so administrators have more flexibility in regards to how they manage SSL/TLS. You can read the update documentation of the mailer here.
Moreover, the delete
option has now two new options:
- You can allow contributors to delete namespaces/repositories/etc. with the
delete.contributors
option (it's set tofalse
by default). - The background process can now automatically remove images that are older
than a certain date, or that match a given tag. This is disabled by default
and it's under the
delete.garbage_collector
option.
You can read more about this here.
LDAP has also seen some updates. First of all, this release includes the changes
described in the 2.3.3
release when it comes to encryption, but it also adds
the new timeout
option, in which you can tune the timeout in seconds for LDAP
lookups. You can read more about this
here.
We have also expanded the user_permission
section, so administrators can
further tune what regular users can do. In more details:
- We have added the
create_webhook
and themanage_webhook
options, in order to restrict webhook management (it is not restricted by default). - We have added the
push_images
option, which accepts three possible values under itspolicy
key:allow-teams
: the default policy, which works as how Portus used to work up until now: owners and contributors of teams can push.allow-personal
: team policy is removed, non-admin users will only be able to push into their personal namespaces.admin-only
: only administrators are allowed to push images.
You can read a summary of the user_permission.push_images
option
here.
Furthermore, you can now also tune the pagination
rule being applied to all UI
elements which contain a list (e.g. the list of repositories).
Last but not least, we have increased the default value for the JWT token expiration time, since it has been reported that the default value was just too small.
The portusctl
tool has been rewritten and moved into its own
project. This has allowed us to expand
its possibilities, since now it will mainly interact with your Portus instance
through the API. The interface of this tool has changed quite a lot, but we
kept the ability to execute commands inside of your Portus instance (i.e. the
existing exec
command). This new tool is already included in Docker images
based on this 2.4
version of Portus.
We have added new endpoints, as you will see on the list below. We would like to
highlight the bootstrap
endpoint. This endpoint allows an administrator of a
Portus instance to create the first admin user of Portus and to fetch an
application token that has been created for this same user. This way, you no
longer need the UI in order to perform the first steps of your instance.
Besides this, the Portus UI itself is using more and more this API, instead of using a more traditional approach. Last but not least, we have changed existing endpoints with more refined status codes, better response objects, etc. Make sure to visit the API documentation.
We have introduced a new concept: bots. Bots are regular users that are created by administrators, but with some subtleties:
- A bot doesn't own a personal namespace.
- A bot cannot login via web.
- A bot can only log in with application tokens (a token is generated automatically when creating a bot).
After much delay, we have implemented namespace deletion. You don't have to
change anything from your configuration in order to have this enabled (it
depends on the same delete.enabled
configuration).
- 20c7e04acdfb Local login form can be disabled (#1603)
- 23e455516156 webhooks: added the name column (#1581)
- 53ce8967395b Allow contributors to delete repositories/tags (#1696)
- 0c0d46b67f6c config: added option to generally disable push access to non-admin users (#1705)
- f0432d102b49 api: added bootstrap endpoint (#1681)
- 2fcbeda7edbb api: added update methods for namespaces and teams (#1794)
- c9e32324a848 Added permissions on webhooks (#1806)
- bf4e913552b8 config: removed the deprecated
ldap.method
key (#1821) - 7f82a44078c3 Added the possibility to create bots (#1856)
- 5ee93c4b1b96 background: implemented garbage collector (#1864)
- 94f78377e699 Implemented namespace deletion (#1938)
- 0b7a651e8114 api: take the relative url root into account (#1610)
- 7b28926a34b8 api: removed slash duplication from ajax calls (#1628)
- 57d1f93f9931 health: don't panic on malformed Clair URL (#1665)
- e85ed519974d Increased the text storage for vulnerabilities (#1670)
- 02d387363881 sync: rollback if events have happened (#1675)
- 7e60b7155429 sync: added sync-strategy as a config value (#1675)
- 459c1953a0f9 security: don't crash on clair timeouts (#1762)
- 640e48c7b9a4 security: fetch the manifest more safely (#1768)
- b97636183d0e sync: do not remove repositories on some errors (#1787)
- 83b4b3a9fa97 ui: fixed hostname copied to clipboard on tags (#1792)
- 4625761e8ede api: explicitly set 204 status instead of nothing (#1804)
- ae80df228db8 ldap: fixed a couple of bugs around SSL support (#1817)
- 4c25b2367349 health: catch all exceptions for registries (#1831)
- 291b049e1e8d ldap: fixed a crash when search fails (#1834)
- fc133a48787f user: do not allow the update of the portus user (#1896)
- cef7f4c506bd passwords: don't allow the portus user to reset (#1896)
- 67ba269d33ee user: skip validations when creating portus user (#1896)
- 9af3f2277d7b Restrict deletes into the repository (#1973)
- 9aa3ee218ffd api: added create and update methods to registries (#1663)
- aa3ccb19132e background: mark failed scans as re-schedulable (#1671)
- 54dade970964 api: added endpoints for re-scheduling scanning (#1672)
- cc6e5046a441 background: add the possibility to disable background tasks (#1679)
- e6683066f3d8 config: make reply_to setting optional (#1699)
- 07d33f4ad80b policies: added more fine-grained push policies (#1729)
- 02fec6da7996 teams: improved team creation form with owner (#1776)
- 10ab3456bc4d security: added a table for vulnerabilities (#1778)
- ee295ee896e0 ui: added users and registries into the sidebar (#1784)
- d2d90d424555 ui: splitted repositories into different panels (#1785)
- 6482ed7522f5 ui: unified admin page with regular page (#1783)
- 6cd886a4fad0 ui: show external hostname for registries (#1791)
- 49c6aefd1e76 authentication: use a more fine-grained scope for Github (#1800)
- c524f37461ff ui: added visibility to namespace edit form (#1826)
- a80fbaa0e880 ui: added enabled toggle to webhooks edit form (#1827)
- a6f6035d40b9 health: implemented check for LDAP (#1828)
- ccdbd31bea78 js: replaced typeahead.js w/ vue-multiselect (#1811)
- ec6adb71f521 ui: improved and refactored namespace#show page (#1837)
- 6cd0af5f4b93 js: reduced bundle size (#1891)
- f777a5effb16 oauth/gitlab: allow to use private gitlab server (#1903)
- f1e8a103dfa4 oauth/gitlab: be sure to load all groups (#1903)
- 10cb892b0b24 docker: allow Puma to bind to unix socket also in production (#1880)
- 4b57ad666846 docker: make it possible to connect to a database socket (#1880)
- 82199e9ade87 js: splitted into bundles and chunks (#1924)
- 990a04e36116 config: raise the default puma workers number (#1938)
- 688cb501f7cf config: expanded the mailer section (#1967)
- bef0fe19d3a5 config: added pagination options (#1815)
- 35ba42f2a4f1 config: added LDAP timeout option (#1821)
- 648450748bed Remind users to login again after password update (#1969)
- 914cc9ebfdee tasks: added portus:db:configure (#1970)
- bc28c049bd10 config: raised the value for JWT expiration time (#1979)
- 279de0a3762b Add "js()" to the bundled javascript libs (#1744)
- 66bcd6a58b28 Including gems as sources (#1948)
- e3ddaa042154 Require portusctl as a separate package (#1948)
- a6a3a36b00c6 Add automatic generation of bundled js files (#1948)
- 89566d7da334 Do not recommend mariadb (#1948)
- e350e0cae365 Define rb_suffix before its usage in fix_sheb (#1948)
- 556778b9f3aa Using the cpio strategy for adding/removing gems as sources (#1962)
- c97663be06cd Removed deprecated code from 2.3 (#1604)
- 3b912ebd1684 help: point to the API documentation on production (#1647)
- 190edbaea06c Introduced unit testing for Javascript components (#1592)
- ecca2d9c6336 js: added unit tests for vue components and utils (#1661)
- f297fd71618b Re-implemented from scratch integration tests (#1716)
- d534723aa762 spec: added chrome headless as default js runner (#1866)
- 7755c7201d61 Update sprockets to fix cve-2018-3760
- ced82ca92149 oauth/gitlab: be sure to load all groups (#1903)
- 23b7daef71e8 oauth/gitlab: fix for local servers (#1903)
- f2a3ef0eee62 fixed regression on registries not being created (#1911)
- 7da007a5e604 portusctl: improved the detection of containerized deployments (#1879)
- b1c803a70146 user: do not allow the update of the portus user (#1896)
- 1bd967039787 passwords: don't allow the portus user to reset (#1896)
- 7b54698625d4 user: skip validations when creating portus user (#1896)
- 58a2c3bd04dc config: allow Puma to bind to unix socket also in production (#1880)
- 7ac882a6ebbc config: make it possible to connect to a database socket (#1880)
- 93df51cce0da ldap: don't crash on search when guessing an email (#1832)
- 45814babef7e packaging: added new encryption options for LDAP
- 4892eb1dc5ce ldap: fixed a couple of bugs around SSL support (#1746, #1774, bsc#1073232)
- dc769adcddfe devise: use a more fine-grained scope for Github (#1790)
- ae07ec4ca2cd sync: do not remove repositories on some errors (#1293, #1599)
- 17e82c0791ba lib: be explicit on the exceptions to be rescued
- 88553b817552 portusctl: added Clair timeout to the options
- fed2818e8a96 security: fetch the manifest more safely (#1743)
- 943c7627feab security: don't crash on clair timeouts (#1751)
Commits 45814babef7e and 4892eb1dc5ce introduce some new options for LDAP. In
particular, the following options have been added inside of the ldap
configuration:
# Encryption options
encryption:
# Available methods: "plain", "simple_tls" and "start_tls".
method: ""
options:
# The CA file to be accepted by the LDAP server. If none is provided, then
# the default parameters from the host will be sent.
ca_file: ""
# Protocol version.
ssl_version: "TLSv1_2"
Notice that the old ldap.method
is getting deprecated and in later versions it
will be removed. Thus, you should use these options from now on.
- Upgraded loofah and rails-html-sanitizer to fix CVE-2018-3741
- Upgraded loofah rubygem so we avoid hitting CVE-2018-8048.
Portus is now able to scan security vulnerabilities on your Docker images. This is done with different backends, where the stable one is CoreOS Clair. You have to enable the desired backends and then Portus will use them to fetch known security vulnerabilities for your images.
Note: this version of Portus supports Clair v2 specifically (current
master
branch is not supported).
You can read the blog post for more info.
Commits: 4cd875c2aa9f, d3454cfb84f3, f19094b98737.
One of the main issues for Portus was that sometimes it took too long to
complete certain critical tasks. For this release we have moved these tasks
into a separate background process. This background process resides in the
bin/background.rb
file, and it can be enabled for containerized deployments
by setting the PORTUS_BACKGROUND
environment variable to true.
The following tasks have been moved into this new process:
- Security scanning: after testing security scanning more in depth, we noticed that sometimes it could block Portus when showing the main page for repositories. This was the first task moved into this new process. Commit: e0f7d53cb2b2.
- Registry events: before creating this process, we dealt with incoming registry events in the main Portus process. The problem with this was that after getting a push event, for example, Portus had to fetch manifests, which could take quite some time. This meant that Portus got blocked in some deployments. Now Portus will simply log the event, and then the background process will process it right away (by default this process will check for events every 2 seconds). This task can be disabled as documented here. Commit: 6a4f7d7dca60.
- Registry synchronization: we have removed the crono process in favor of this new process. Hence, the code that was executed in previous releases by crono has been merged as another task of this new process. Moreover, since it can be quite dangerous, we have added some configuration options: it can be disabled; and it can be tuned with a strategy (from a riskier approach to a safer one). All this has been documented in its documentation page. Commit: ced9b46a9064.
Note on deployment: this new background process has to have access to the same database as the main Portus process.
Portus will now allow anonymous users to search for public images. This is a configurable option which is enabled by default. You can read more about this in the documentation.
Commits: 274c0908a83c, 9d6cc25fd0b4.
Portus' authentication logic has been extended to allow OAuth & OpenID
Connect. For OAuth you are allowed to login through the following adapters:
Google, Github, Gitlab and Bitbucket. Check the config/config.yml
file for
more info on the exact configurable options.
Commit: 0a5fefdd14d9.
Thanks a lot to Vadim Bauer (@Vad1mo) and Andrei Kislichenko (@andrew2net) for working on this!
An effort to design and implement an API for Portus has been started. This is useful for CLI tools like portusctl among other user cases. We do not consider the API to be in a stable state, but it is useful already. We will continue this effort in forthcoming releases. Commits: 2129833f27f0, 28f77d3352ea, 5a9437bba42d, 451e508bd86a, 185f18e98638, a9bdab58d150, 8b42887f83a5, fbe7e8d4ef53, 4a79f222f93b, fbe7e8d4ef53.
Thanks a lot to Vadim Bauer (@Vad1mo) and Andrei Kislichenko (@andrew2net) for working on this!
The deployment of Portus has been simplified as much as possible. For this reason we have removed a lot of clutter on our official Docker image, and we have embraced best practices for deploying Ruby on Rails applications. For this reason we have set Puma as the web server for Portus.
Commits: 09b722f56221, 9fd61ba7bae0, 6a3b8ca74edb, 2488791f8f54.
We provide in the source code examples that illustrate how Portus is intended to
be deployed on production. These examples reside in the examples
directory. Some observations:
- As stated above, set the
PORTUS_BACKGROUND
environment variable to true for the background process. - You can set
RAILS_SERVE_STATIC_FILES
to true if you want Portus to serve the assets directly (e.g. if you don't want a load-balancer like NGinx or HAproxy to do this). - Use the new
PORTUS_DB_
environment variable prefix instead of the oldPORTUS_PRODUCTION_
one for database options. Moreover, in the database you can now specify more options likePORTUS_DB_POOL
for stating the DB pool. - Portus will complain if you provide old environment variables like
PORTUS_PRODUCTION_DATABASE
, or if you forgot to specify some relevant environment variables for production likePORTUS_MACHINE_FQDN_VALUE
. Commit: 06a405c4f5fd.
Commit: ba7b15ed42d0.
An official Helm Chart for deploying Portus in a Kubernetes cluster is being developed. It is expected to be released soon after this release.
Some tools like CoreOS Clair require PostgreSQL as their database. When developing support for security scanning we noticed that it was quite redundant to have two different databases running. For this reason, we have added PostgreSQL support, so you can use PostgreSQL for both Portus and Clair.
Commit: af1b8b6ca725.
Some features required an upgrade of Ruby. Since SLE 15 and Tumbleweed will most likely have Ruby 2.5 as their default version, we have anticipated this move. So, now Portus is supported for Ruby 2.5. If you try to run Portus on previous versions, it will error out during initialization (commit: ea02cab5c822).
Commits: a2407506ff5c, d86d46c9313c, 46a5a34fda40.
- Sort tags by updated_at date not by created_at. Commit: 90ad00a32f49.
- Copy
docker pull
command to clipboard when clicking a tag: acad5b6f442d. - Lots of small improvements on the UI. Commits (among others): 097e782ec1a3, bd4d9d8db5ad, 0ae8f5e2fae6, c891792742c0, 50d61606caa7.
- Properly check when the DB is ready, useful for containerized deployments. Commit: 564c3cb5d35c.
- Make the log level configurable on production. Useful for temporarily debugging a production deployment. Commit: db2403fd3311.
- Added rack-cors to prevent AJAX CORS attacks. Commit: 5a0402098428.
- Adding the X-UA-Compatible header so it works well for IE with compatibility mode on. Commit: 146076d543e8.
- Implemented timeout for requests targetting the registry. Commit: 9296f1eaa5bb, 56d2886e7f65.
- Added registry validation and status. Commits: a30c27071650, d0dd2f4aeba0.
- Add core-js pollyfills, so internet access is not needed. Commit: 02cf5212a28c.
- Fixed performance problems on the activities page. Commit: b5fd93bd9486.
- Fixed table pagination. Commit: f05aad9e6183.
- Fixed some issues on activities. Commit: db553f8d0bcc.
- Honor external_hostname in token generation. Commit: 802bb89b0ec4.
- Fixed Vagrant setup. Commit: 6ca35b1bc2e7.
- Read the TZ env variable to display dates correctly. Commit: e2eed1463aaa.
- LDAP: avoid clashes on emails. Commit: 1a57f0f7f95b.
- Fixed icons spacing/positioning. Commit: ab34bf9ebc5b.
- Fixed team name validation behavior. Commit: 86e72f88b20f.
- Fixed a render error on the search/index page. Commit: d12306daa47b.
- Fixed the namespace and team name clashes. Commit: eec31da471a7.
- Properly check SSL requirements. Commit: a86ec03923f8.
- Fixed tag name uniqueness validation. Commit: 83478b1911b0.
- Fixed crash on null author of a tag. Commit: 7f84fbc60307.
- Update tags by digest when scanning. Commit: 46065607fbc1.
- Fixed crash when vulnerabilities were not found. Commit: a904cef41cb2.
- Added some checks on mailer configuration to avoid crashes later on. Commit: c3ba1b50ca31.
- Catch exceptions on password resets creation. Commit: 9d2ba4748693.
- Registry Client should probe that the /v2/ path reachable and that we accept 200 responses as well. Commit: 2b0bf59a2601.
- Upgraded jQuery to 3.x to avoid security issues. Commit: 0505c177f5d2.
This release includes a fix for CVE-2017-14621. Thanks a lot Ricardo Sánchez for reporting this security issue! Commit: c21dfec24cfc.
- Our Rubocop rules are now as close as possible to the default style. This is an attempt to be closer to the decisions from the ruby community. Commit: 71ff67ae123b.
- Update the development environment for docker-compose v2.
- Many fixes went into the test suite. Commit (among others): af7d093cfdc2.
- The configuration management has been extracted into its own gem: cconfig. Commits: 9ce311a832ae, c8abbff3bd38.
- Introduced the
DeprecationError
exception. Commit: 3691273ebbd9. - Networking errors have been merged into a single point of entry. Commit: 944e50176c1a.
- Big changes on the Javascript side:
- Turbolinks has been removed. Commit: 2803e2962419.
- We have migrated from Coffeescript to Javascript: 79fb15164f32, d30bc2baef16.
- Javascript dependencies are now managed by yarn: 803829045ff3.
- Webpack is the responsible for building the assets: bc56035f9c5e.
- We have introduced VueJS to bring some order into the Javascript front: c3ad4bf97dbe, 3e145dc03c79, 3dd743fd610e.
- We have migrated to the latest Javascript standard (EcmaScript6). This has involved some refactoring. See commits (among others): efbff080ff82, c8fc5823f6b7, dc3b00dd3dbd, ad5da31283df, e70e78c75b89, a838cabc0720, 0428092a287f, 821595bc4c52, 6e8b57f4c531, 76909e9c931d, 0c3a003cf897, 9c223b7a5918, f1d47a6abda7, 1103a1ac3b55, 452ec54fc224.
In this section we want to detail some things that you might want to take into account when upgrading to 2.3:
- As explained above, Puma is now the HTTP server being used. Make sure to use
the
PORTUS_PUMA_TLS_KEY
and thePORTUS_PUMA_TLS_CERT
environment variables to point puma to the right paths for the certificates. Moreover, if you are not using the official Docker image, you will have to use thePORTUS_PUMA_HOST
environment variable to tell Puma where to bind itself (in containerized deployments it will bind by default to0.0.0.0:3000
). - The database environment variables have changed the prefix from
PORTUS_PRODUCTION_
toPORTUS_DB_
. Moreover, you will be able now to provide values for the following items: adapter (set it topostgresql
for PostgreSQL support), port, pool and timeout. All these values are prefixed byPORTUS_DB_
as well, so for example, to provide a value for the pool you need to setPORTUS_DB_POOL
.
Finally, we are not running migrations automatically anymore as we used to do
before. This is now to be done by the administrator by executing (on the Portus
context in /srv/Portus
or simply as part of a docker exec
command):
$ portusctl exec rake db:migrate
For more details on this check the commits 7fdfe9634180 and 1c4d2b6cf0e0.
Some configuration options that were soft-deprecated in 2.2 will now raise a
DeprecationError
. These are:
- The expiration time of the JWT token can no longer be expressed as a string
with a format:
x.minutes
. You have to provide now an integer representing the minutes for thejwt_expiration_time
configurable option. Users that have not touched this option since the 2.1 times will have to change this. - The
jwt_expiration_time
option was moved toregistry.jwt_expiration_time
in 2.2. Now, if you continue to provide the former rather than the latter, you'll get aDeprecationError
exception.
Besides this, Portus will also raise a DeprecationError
during initialization
in the case you provided the prefix PORTUS_PRODUCTION_
for database
configurable options instead of PORTUS_DB_
.
Finally, portusctl
as provided by Portus is getting deprecated in favor of
openSUSE/portusctl. This new
portusctl
has been built from scratch for the following reasons:
- Since 2.3 our main focus is the support containerized deployments. Therefore,
portusctl
's main task to setup the installation didn't make sense anymore. - Moreover, from experience we noticed lots of corner cases where the old portusctl was simply not effective.
- With the introduction of the API, we wanted to re-purpose the tool to be more
similar to tools like
kubectl
for Kubernetes. That is, a CLI interface to the API that administrators can use with ease.
Lots of issues regarding packaging were fixed. We want to highlight the following commits:
- Do not touch the Gemfile anymore. Commit: bd383fba329b.
- Change how we build dependencies. Commit: 0970b9903af5.
- Added bundled JS dependencies in the spec file. Commit: f08803be6fbc.
- Added a script to compare the gems on git and OBS. Commit: 291d172c12e3.
Alexander Block, banuchka, Ben Rexin, Diokuz, Fabian Baumanis, Hart Simha, James Maidment, Jordi Massaguer Pla, Lefnui, Maik Hinrichs, Maximilian Meister, Miquel Sabaté Solà, Ricardo Mateus, Robin Müller, Saurabh Surana, Shammah Chancellor, Soedarsono, Thorsten Schifferdecker, Vadim Bauer, Vítor Avelino.
... and many thanks to everyone that has contributed to Portus by leaving comments, sending emails, submitting issues, providing feedback, etc. Thanks!
- Portus will now properly update the image ID when a tag has been pushed. See PR #1054.
- Fixed how image updates are handled. See PR #1031.
- Follow a consistent order in the signup form. See PR #1119.
- Hide passwords stored in webhooks. See PR #1111.
- Removed reference of missing stylesheets. See PR #1114.
- Fixed a bunch of issues related to activities. See PR #1144.
- Fixed the pre-compilation of the cover.js asset. See PR #1157.
- portusctl: it will show a warning when using the
--local-registry
flag but the package has not been installed. See PR #1096. - Portus now supports Docker Distribution 2.5. See PR #1068.
- Allow docker-compose users to specify an alternative port. See PR #1094.
- Avoid the confusion on the hostnames to be used. See PR #1056.
- Clarified how the
--local-registry
flag works. PR #1052.
- Use the full repository name in the
portus:update_tags
task (see 005ec6503208) - Fixed a regression on assets handling (see fc6982a4bfe2 and fdb92fffb5fa)
- Fixed the handling of the "*" action from the registry (see 6afb1ac150e6)
- Notification messages are now more consistent (see 72e452b1fd20)
- Order users by username on the admin panel (see e92106cd951b)
- Fixes and improvements on Docker Distribution support (see f74eb2eac7d6, c8fc5ed6b337, 95ba4d83a539, 552df9caa341, 575d51b3b7d2, 4014a7c14487, e18310e6a2eb and 7494eeed2b88)
- Implemented user removal (see d9d6e3afa224)
- Implemented the removal of images and tags (see b63252ff07a8, 10c060e246ab, 7ae5179ba623, 85730266c9c4, 65a0624cd923, 612734339fa1 and c23758489c57)
- Also read our blog post on image/tag removal
- Showing the image ID and the digest of docker images (see 0f290526ad97, 960e7599d501, 28dae7f3fb23, ba32d140958a, 0b8d1bff5b85 and e57232b149b5)
- Implemented webhook support (see 4a4a67c62d52, 702356b006d8, 60354bb41ddc, 08918c5a91d2, 4b4d4c0ff70e and b3565d3ade0f)
- Also read our blog post on webhooks
- Introduce application tokens (see b399f90c0de5 and e38e7602f471)
- Better reflect updates on Docker images (see 89b9964c0f0e)
- General improvements and fixes on the UI/UX (see cb033f40898e, e7629b758055, fcfd6d3548aa, 933b86fbe9bf, c886e9009ee0, 818354d7d92c, 868abc65d286, f935d0ae79a5, 128c76febb06, 23da71c64c7c, 1ef1da2e9c70, 78a9d81965fa, a3ffe492d134)
- Allow the admin to provide extra filter options in LDAP lookup (see 99daa00d565b)
- Password length is no longer checked by Portus in LDAP (see 381fd61fb546)
- Relaxed the requirements for user names, and removed the conflicts of user names in LDAP (see a9d5a2646d0d and 215c681e65c2)
- Introduce the
display_name
option (see 5d8c7e4bec97) - Allow administrators to turn off smtp authentication (see d837160bbe3e)
- Added an external hostname field to allow for events to come from other named services (see 0d58ed1fce0b)
- Added a help section to the menu (see 40a18a04b1fe)
- Introduced more optional user restrictions (see cddfb5924fae)
- Added the registry.catalog_page option (see de4e4f4db74e)
- Added option to disable change of visibility (see 50fb319ded81)
- The signup form can now be disabled, and users can be created by the admin directly (see 9bbd75cacd935f888460669d77fa47c706a5dbaf, 79bac5c4f54b758831c867fc08b0b567418cae7d and fcf20d7534e2f1172713f82e06ef12abe14df046)
- Added internal policy for namespaces (see 46d1d0bc7251)
- Added namespaces and teams to search (see f1a9698657c8)
- Admins can now change the ownership of a namespace (see e4b137a92a96)
- Display the git tag, branch/commit or version when possible (see a7bfa8dde140)
- Now logs are redirected to the standard output (see dfc72b3d6abd)
- Added the ability to add comments on repositories (see 4d780d93950b)
- Virtual/hidden teams are no longer counted for the "number of teams"-column under admin/users (see 02722126cb92)
- Added rake tasks for creating a registry, updating digests and showing general information (see ec0d0063b781, 4566ea0607fd and 152ce27725f7)
- Added man pages for portusctl (8b4b31e1cfc3)
- Register more activities (see fd97edaf6bb6 and bee150287604)
- Various fixes in LDAP support (see b13dca7e207f, 7e3feabcc2bb and 377a59b66c16)
- Discard pagination for CSV activities (see 7f120349279f)
- Make sure that Portus admins are always team owners (see 2db13a3ae524)
- User names are no longer allowed to clash with teams (see b5b0896e78b3)
- Redirect back to accessed page on successful login (see fed27a5dcf6a)
- Fixes on the crono job (see efc33be00d2e and 08d60dd91a5e)
- Multiple fixes in portusctl (see 46b5f449263f, add79d790238, 2025da82f3e5, aa4997ab48a4, f8d473430ee1, 5d4eb85943ff and 78f8f949c46e)
- Multiple fixes in our RPM (see 919452db8507, 0019a65cad3b, 0be925085b30, 050d095b0887 and 3f56c4ae4f6d)
- Show the "I forgot my password" link when the signup is disabled (see 2a244c8160d0)
- Moved the machine FQDN from secrets.yml to config.yml (see 984671662ade)
- Deprecated the usage of "x.minutes" strings in configuration values. In future versions this syntax will be forbidden (see 53400181e439)
- All the improvements, features and bug fixes mentioned in the notes of 2.0.x releases.
- The FQDN can now be specified from the configuration too. This is meant to help users to transition from 2.0.x to 2.1. See commit.
- Portus is now more explicit on the allowed name format. See commit.
- Portus is now more friendly on errors based on the namespace name. See commit.
- Disable automatic generation of certificates. For this, now there are two new
flags:
--ssl-gen-self-signed-certs
and--ssl-certs-dir <dir>
. See commit. - Wrap crono with the
exec
command. See commit.
- Some fixes on the generation of the RPM in OBS.
- Automate Portus release. See commit.
- Rename Portus to portus on the RPM. See commit.
- Refactored RPM. See commit.
- Wrap crono with the exec command in the RPM. See commit.
- Require net-tools on the RPM. See commit.
- Use the proper
make_admin
task. See commit. - Don't configure mysql in Docker. See commit.
- Added the portus:info task. See commit.
- Better Sub-URI handling & configurable config-local.yml path. See PR.
- Update ruby versions on travis. See commit1 and commit2.
- Logout button and search repository are now appearing in small devices. See commit.
- Don't allow access to the hidden global team. See commit.
- Fixed crono job when a repository could not be found. See commit.
- Fixed more issues on docker 1.10 and distribution 2.3. See this and this commits.
- Handle multiple scopes in token requests. See commit.
- Add optional fields to token response. See commit.
- Fixed notification events for distribution v2.3. See commit.
- Paginate through the catalog properly. See commit.
- Do not remove all the repos if fetching one fails. See commit.
- Fixed SMTP setup. See commit.
- Don't let crono overflow the
log
column on the DB. See commit. - Show the actual LDAP error on invalid login. See commit.
- Fixed the location of crono logs. See commit.
- Always use relative paths. See commit.
- Set RUBYLIB when using portusctl. See commit.
- Don't count hidden teams on the admin panel. See commit.
- Warn developers on unsupported docker-compose versions. See commit.
- Directly invalidate LDAP logins without name and password. See commit.
- Don't show the "I forgot my password" link on LDAP. See commit.
- Small random fixes:
- Portus will now check whether a Registry is reachable or not. See PR #437.
- Namespaces and teams have a description field. See PR #383.
- Second UI iteration. See pull requests: #445, #447 and #462.
- Repositories contained in public namespaces are now pullable even for non-logged in users: PR #468.
- SUSE RPM: provide
portusctl
tool to simplify the initial setup of Portus - Portus will now lock users' accounts that have failed too many times on login. See PR #330.
- Added a mechanism of password recovery in case users forget about their password. See PR #325.
- Set admin user from a rake task and disable first-user is admin. See PR [#314] (SUSE#314)
- Added a configuration option to specify the expiration time for JWT tokens issued by Portus. See PR 518.
- Review requirements and provides in the RPM PR #277, PR #278, PR #280, PR #273,
- Add configure scripts for the RPM and use environment variables for production. See: PR #299, PR #298, PR #281
- Check run time requirements like ssl, secrets. See PR #297, PR #286
- Update uglifier gem for fixing a security issue (OSVDB-126747) PR #292
- Introduced LDAP support. See the initial PR #301. Multiple PRs followed to bring LDAP support to a proper state (see this).
- Users will not be able to create namespaces without a Registry currently existing.
- PhantomJS is now being used in the testing infrastructure. See the following pull requests: #193, #194, #213, #216, #219.
- The namespace page now shows the creation date. See PR #229.
- There have been some fixes on the search feature. See #223 and #224.
- Hidden teams are no longer able to create namespaces. See PR #220.
- Added the pagination feature. See PR #232.
- Some initial steps have been done towards running Portus inside docker. See PR #212.
- Added the appliance tests. See PR #208.
- Star/Unstar repositories. See PR #230 and #294.
- Now users can be enabled/disabled. See PR #240.
- Fixed the authentication process for Docker 1.8. See PR #282.
- Added icons to the following tables: teams and members. See PR #388.
- And some fixes here and there.
- Fixed regression where namespaces could not be created from team page (Fixes #165)
- Initial version