Reference documentation for warewulf4.
Provides
Requires
License
BSD-3-Clause
Changelog
* Fri Oct 30 2026 Christian Goll <cgoll@suse.com>
- removed fix-CVE-2026-84303.patch as grpc 1.84.0 is now set
in the service file which fixes:
* CVE-2026-84445 (bsc#1278760)
* Mon Oct 12 2026 Christian Goll <cgoll@suse.com>
- fix CVE-2026-84303 (bsc#1279257) and only update with host values
on fresh install
* Wed Sep 16 2026 Christian Goll <cgoll@suse.com>
- updating to v4.7.1 with the following changes
* wwctl power no longer falls back to the local BMC for nodes with no
ipmi: ipaddr:, which could power off the Warewulf server itself
* wwclient is built with GOAMD64=v1 and no longer fails with an illegal
instruction on older nodes
* prevent image and overlay corruption from 64-bit inode numbers
truncating in cpio
* fix kernel version detection for releases with a version-like suffix
after the dist tag
* several fixes for IPv6-only servers and nodes: dracut boot,
wwctl node status, dnsmasq, NetworkManager
* remove dsa from the default ssh: key types, which could leave nodes
with no usable host keys on EL9
* mount non-root filesystems before image extraction during
provision-to-disk
* overlay template fixes for parent directories and symbolic links
* dependency updates, including go-jose 4.1.4 for CVE-2026-34986
* updated go-chi to v5.3.2 to fix CVE-2026-72815, CVE-2026-72816 and
CVE-2026-72817 (IP spoofing: authentication bypass, authorization
override, and log forgery) (bsc#1276100)
* Tue Jul 28 2026 Christian Goll <cgoll@suse.com>
- updated golang.org/x/text to v0.40.0 to fix CVE-2026-56852
(bsc#1272014)
* Tue Jun 23 2026 Christian Goll <cgoll@suse.com>
- adding correct flag --update-overlays fixing (bsc#1268790)
* Fri Jun 19 2026 Christian Goll <cgoll@suse.com>
- updated go-jose to fix CVE-2026-34986 (bsc#1262810)
- chi is fixed in the upstream project
* Mon Jun 15 2026 Christian Goll <cgoll@suse.com>
- updating to v4.7.0 with following security fixes
* fixed CVE-2026-39821 (bsc#1266483)
* fixed CVE-2026-33814 (bsc#1265653)
- v4.7.0 with significant changes relative to the v4.6.x series which are:
* New wwctl unset command
* Refactored server routes (URLs)
* New /files/ route for serving individual files and templates
* Server TLS support
* Removed support for fetching individual overlays and individual files from overlays
* Fixed whitespace handling around template functions
* Security fixes, including updated Go and library versions
- changes from v4.6.5:
* new wwctl overlay info command
* fixed wwctl image import --update option
* cross-arch support for wwclient
* improved IPv6 support
* improved support for bonded interfaces
* renamed debian.interfaces overlay to ifupdown
* new systemd-networkd overlay
* warewulf-dracut fixes, including "provision-to-disk" fixes
- remove slurm-overlay package
* Mon Feb 23 2026 Christian Goll <cgoll@suse.com>
- fix CVE-2025-69725 (bsc#1258511) by updating chi
added _service for module fixing
* Mon Jan 19 2026 Christian Goll <cgoll@suse.com>
- updated to v4.6.5 with following changes:
* new wwctl overlay info command
* fixed wwctl image import --update option (bsc#1254470)
* cross-arch support for wwclient
* improved IPv6 support
* improved support for bonded interfaces
* renamed debian.interfaces overlay to ifupdown
* new systemd-networkd overlay
* warewulf-dracut fixes, including "provision-to-disk" fixes
- default to dnsmasq instead of dhcpd and tftp
- Removed fix-CVE-2025-58058.patch as updated upstream
- Removed switched-to-dnsmasq-as-default-dhcp-and-tftp-service.patch
preferring editing conf with yq
* Mon Sep 08 2025 Christian Goll <cgoll@suse.com>
- Update to version 4.6.4:
* v4.6.4 release updates
* Convert disk booleans from wwbool to *bool which allows bools in
disk to be set to false via command line (bsc#1248768)
* Update NetworkManager Overlay
* Disable ipv4 in NetworkManager if no address or route is specified
* fix(wwctl): Create overlay edit tempfile in tmpdir
* Add default for systemd name for warewulf in warewulf.conf
* Atomic overlay file application in wwclient
* Simpler names for overlay methods
* Fix warewulfd api behavior when deleting distribution overlay
- renamed siwtched-to-dnsmasq-as-default-dhcp-and-tftp-service.patch
to switched-to-dnsmasq-as-default-dhcp-and-tftp-service.patch
- added fix-CVE-2025-58058.patch (bsc#1248906)
* Mon Aug 04 2025 Christian Goll <cgoll@suse.com>
- Update to version 4.6.3:
* v4.6.3 release
* IPv6 iPXE support
* Fix a syntax error in the RPM specfile
* Fix a race condition in wwctl overlay edit
* Fixed handling of comma-separated mount options in `fstab` and `ignition` overlays
* Move reexec.Init() to beginning of wwctl
* Add documentation for using tmpfs to distribute across numa nodes
* added warewuld configure option
* Fix wwctl upgrade nodes to handle kernel argument lists (bsc#1227686 bsc#1227465)
* Address copilot review from #1945
* Refactor wwapi tests for proper isolation
* Bugfix: cloning a site overlay when parent dir does not exist
* Clone to a site overlay when adding files in wwapi
* Consolidated createOverlayFile and updateOverlayFile to addOverlayFile
* Support for creating and updating overlay file in wwapi
* Only return overlay files that refer to a path within the overlay
* add overlay file deletion support
* DELETE /api/overlays/{id}?force=true can delete overlays in use
* Restore idempotency of PUT /api/nodes/{id}
* Simplify overlay mtime api and add tests
* add node overlay buildtime
* Improved netplan support
* Rebuild overlays for discovered nodes
* Restrict userdocs from building during pr when not modified
* Update to v4.6.2 GitHub release notes
* Thu Jul 24 2025 Christian Goll <cgoll@suse.com>
- moved project provided overlays to /usr/share/warewulf/overlays,
user created overlays go to /var/lib/warewulf/overlays
- added switched-to-dnsmasq-as-default-dhcp-and-tftp-service.patch
which switches to dnsmasq as default dhcp and tftp provider
- warewulf.conf will now be replaced, as old dhcpd config won't work
any more
* Thu Jul 10 2025 cgoll@suse.com
- update to 4.6.2 which contains the (preview) support for
provisioning to local disk
- incoperated from 4.6.1
* rest api which is disabled in the default configuration
- removed following files as fixed upstream:
* fixup-pdf-build.patch
* security-fixes.patch
* udev-regression.patch
- marked slurm as recommeneded in the warewulf4-overlay-slurm
package bsc#1246082
* Fri Mar 28 2025 Christian Goll <cgoll@suse.com>
- SUSEConnect is now correctly mounted into the images
* Wed Mar 26 2025 Egbert Eich <eich@suse.com>
- Fix typo in %post script.
* Wed Mar 19 2025 Christian Goll <cgoll@suse.com>
- added security-fixes.patch which fixes
* CVE-2025-22869 bsc#1239322
* CVE-2025-22870 bsc#1238611
- added udev-regression.patch to take care of bsc#1226654
- renamed package warewulf-reference to warewulf-reference-doc
for better package description
* Mon Mar 03 2025 cgoll@suse.com
- updated to 4.6.0 which is without any functional changes to 4.6.0rc3
- removed WWWORKER-overwrites-runtime.NumCPU.patch as upstream
- added fixup-pdf-build.patch to build pdf which is published now
in the warewul4-reference package
* Wed Feb 26 2025 Christian Goll <cgoll@suse.com>
- added WWWORKER-overwrites-runtime.NumCPU.patch for reproducible
builds
* Tue Feb 25 2025 Christian Goll <cgoll@suse.com>
- Update to version 4.6.0rc3 what is a major upgrade with following
highlights:
* renamed container to images
* "sprig" functions in overlays
* support for yaml and json formatted output
* completely re-designed kernel selection support
* nested profiles
* arbitrary node and profile data in new "resources" structure
* moved NFS mount options to resources / fstab overlay
* split overlays by function
* split overlays, site vs distribution
* replaced defaults.conf with settings on default profile
* improved tabular output
* parallel overlay build
* improved networking functionality (static route, vlans, and bonds)
* kernel arguments as a list
* non-zero exit codes on wwctl errors
* fixed argument parsing for wwctl image exec
* Defined menu for ipxe boot
* Re-order SSH key types to make ed25519 default.
- The configuation files nodes.conf and warewulf.conf will be updated
on upgrade and the unmodified configuration files will be saved
as nodes.conf.4.5.x and warewulf.conf.4.5.x
* Fri Feb 21 2025 Egbert Eich <eich@suse.com>
- Provide an overlay package for the cluster-wide configuration
of an RKE2 cluster. This allows to share the connection token
across all node and sthe first server endpoint across all agents.
* Tue Oct 22 2024 Christian Goll <cgoll@suse.com>
- removing build rules for sle12 and fixing logrotate name
* Mon Oct 14 2024