v1.4.4 (2026-06-18)

A patch release that fixes the dashboard build on the release-1.4 branch and ships a new talm v0.31.0 with stability and usability improvements.

Fixes

• fix(dashboard): pin UI source branch to release-1.4: Patch builds of Cozystack 1.4.x were cloning cozystack-ui@main instead of cozystack-ui@release-1.4, which could pull in unreleased UI features and break the patch release gate entirely. CONSOLE_BRANCH is now pinned to release-1.4 in the dashboard Makefile. The PR also adds documentation explaining that cutting a new minor release (vX.Y.0) requires creating the matching cozystack-ui/release-X.Y branch and pinning CONSOLE_BRANCH in the dashboard Makefile (@myasnikovdaniil in [#2945]).

Other repositories

talm v0.31.0

• [talm] feat(cozystack): add DRBD-oriented sysctl and etcd backend defaults: Adds a set of production-tested TCP sysctls (tcp_orphan_retries, tcp_fin_timeout, netdev_max_backlog, netdev_budget, netdev_budget_usecs) to the cozystack preset that prevent TCP port exhaustion during DRBD reconnect storms on node reboots or resyncs. An opt-in tcpKeepaliveTuning group is also available for deployments that need faster idle-socket failure detection across all long-lived TCP connections. The etcd backend quota is exposed as a configurable etcd.quotaBackendBytes value (default 8 GiB) so control planes holding many DRBD-resource CRDs do not trip etcd's 2 GiB NOSPACE alarm (@IvanHunters in cozystack/talm#131).

• [talm] fix(cli, engine): emit progress on stderr, enrich lookup error chain, retry transient failures: Fixes talm template -f X > Y producing YAML files with a stray progress line on stdout. Lookup failures now surface the resource kind, namespace, id, and dialed endpoints, with a six-class taxonomy of hints (TLS handshake, connection refused, deadline, auth, resource, unknown) so operators receive actionable guidance instead of a raw gRPC error. Transient connectivity classes (refused, deadline) are retried up to three times with exponential backoff; permanent errors fail immediately (@lexfrei in cozystack/talm#212).

• [talm] fix(engine): require a template before rendering the chart: Running talm template without --file/--template previously rendered the entire chart before checking that any template was actually requested, which in online mode triggered live node discovery and produced a misleading connection refused error instead of the actionable templates are not set message. The guard is now evaluated before any chart render or node dial (@lexfrei in cozystack/talm#217).

• [talm] fix(cozystack): exclude loop devices from LVM global_filter: Adds /dev/loop.* to the LVM global_filter in the generated Talos machine config so the host does not scan or activate volume groups inside loop-mounted images, preventing unexpected LVM activation on boot (@kvaps in cozystack/talm#215).

Documentation

• [website] feat(blog): add Cozystack vs OpenStack comparison post: Publishes a vendor-neutral blog post comparing Cozystack and OpenStack across seven dimensions — architecture, compute, networking, storage, managed services, operations, and multi-tenancy — for teams evaluating private cloud options (@tym83 in cozystack/website#580).

• [website] fix(layout): keep fixed-header offset after banner removal: Restores the correct top-offset for the fixed navigation header after the CozySummit banner was removed, preventing content from being obscured behind the navbar (@kvaps in cozystack/website#579).

• [website] chore(banner): remove CozySummit Virtual 2026 announcement: Removes the expired event banner from the website (@kvaps in cozystack/website#576).

Contributors

Thanks to everyone who contributed to this patch release:

• @IvanHunters
• @kvaps
• @lexfrei
• @myasnikovdaniil
• @tym83

Full Changelog: https://github.com/cozystack/cozystack/compare/v1.4.3...v1.4.4