Olares Files

We are thrilled to announce the release of Olares v1.12.2!🎉 This release focuses on streamlining system deployment and management, enhancing network flexibility, and expanding the application ecosystem.

Highlights

Networking & Connectivity - Added support for direct local network access via .local domains. (#1957 @eball) - Integrated the reverse proxy setup into the activation process. (#1935 @dkeven)

System Management & Configuration - Added a CLI command for user activation to support headless servers. (#1972 @eball) - Centralized the management of environment variables including system-wide credentials and API keys. (#1881, #1900, #1915, #1918, #1920, #1921, #1923, #1924, #1929, #1939, #1941, #1943, #1951, #1954, #1959 @dkeven, @icebergtsn, @LittleLollipop, @aby913) - Added a cookie management feature to store and import cookies for maintaining authenticated sessions. ( #1948 @aby913) - Exposed a new Daemon API to support resetting Olares One's SSH password. (#1864 @eball)

Application Ecosystem & Developer Experience - Enabled the assignment of multiple GPUs to a single application to scale demanding workloads.(#1872, #1885 @dkeven) - Expanded middleware support to include MongoDB, MinIO, RabbitMQ, Elasticsearch, and MySQL 8. (#1834, #1882, #1893, #1899, #1906 @hysyeah)

Enhancements

System & OS - Updated OS compatibility to support installation on Debian 13 and Ubuntu 25.04, while removing support for end-of-life distributions (Debian 11, Ubuntu 20.04). (#1817, #1870 @dkeven) - Assigned a higher priority class to critical system services to prevent eviction when system resources are limited. (#1843 @eball) - Implemented auto-suspension for applications whose pods are evicted or become stuck in a long-pending state. (#1975 @dkeven)

App Market & Services - Enhanced the App Market to allow configuration of environment variables during installation and to support mobile-specific UI layouts. (#1896, #1907 @LittleLollipop @icebergtsn) - Optimized file proxy authentication, refactored the download service to a DaemonSet, and resolved associated permission and mirror cache issues. (#1942, #1961 @aby913, @0x7fffff92)

Core & Backend - Improved authentication handling by prioritizing cookie-based tokens and adding nonce-based authentication for public RBAC policies. (#1835, #1837, #1888 @eball) - Optimized GPU performance by reducing the metrics collection interval and updating the Hami-core dependency. (#1857, #1934 @eball @dkeven) - Upgraded the JuiceFS dependency to v1.3.0 and switched the storage notification backend to inotify for better performance. (#1989, #1993 @eball)

Bug Fixes

• Unified the apt tool installation check to improve robustness on both Ubuntu and Debian. (#1889 @dkeven)
• Resolved an issue where disk size could not be determined for LVM devices, causing installation to hang. (#1996 @dkeven)
• Pinned the nvidia-container-toolkit to a stable version to prevent compatibility issues with recent updates. (#1971 @dkeven)
• Improved CLI performance by changing the DID cache database to load on-demand instead of on every execution. (#1977 @dkeven)
• Fixed several bugs within the CLI user activation and account initialization flow. (#1992 @eball)
• Ensured KubeBlocks CRDs are correctly applied during system upgrades to maintain middleware consistency. (#1880 @dkeven)
• Resolved a race condition by adding a retry mechanism when applying new Custom Resources (CRs) immediately after CRD registration. (#1887 @dkeven)
• Modified the upgrade precheck to log warnings for system errors instead of blocking the process, improving recovery flexibility. (#1909 @dkeven)
• Corrected the handling of OCI-type images in the chart repository to ensure architecture information is properly included. (#1980 @LittleLollipop)
• Fixed an issue where MinIO multi-bucket policies were incorrectly overridden. (#1945 @hysyeah)
• Set the recreate parameter to false during Helm upgrades to prevent unintended resource recreation. (#1988 @hysyeah)
• Fixed a bug that could cause account imports in the Vault to fail. (#1866 @qq815776412)
• Made the application-to-GPU binding process idempotent to prevent errors on repeated requests. (#1973 @dkeven)
• Improved the stability of intranet access and refined proxy behavior for local domains. (#1973 @eball)

How to Update to 1.12.2

From v1.12, system updates are managed on LarePass. Follow these simple steps:

[!IMPORTANT] Upgrade your LarePass to the latest version (1.5.14) from your app store first. 1. Open the LarePass app, and navigate to Settings > My Olares > System > System update. 2. Verify that a new version is available and tap Upgrade. 3. Select a preferred update method, for example, Download and upgrade. 4. Confirm to start the download and installation.

What's Changed

• olares: bump version to 1.12.2 by @eball in #1815
• docs: update Developer Guide and Concepts sections in Olares by @Meow33 in #1816
• feat(cli): support installation on Debian 13 and remove no longer supported distros by @dkeven in #1817
• fix: files image and pdf preview, and /api/mount response for choosing path by @lovehunter9 in #1818
• settings, authelia, tapr: settings provider permission and cookie config bug by @eball in #1819
• market, settings: fix some ui bugs by @icebergtsn in #1820
• fix(upgrade): add migration task from system-frontend to olares-app by @dkeven in #1821
• fix: preview,delete,download files with special characters by @aby913 in #1823
• systemserver: clean up user-service-provider.yaml and fix cookie path by @eball in #1825
• Replace larepass link by @Meow33 in #1822
• feat: Supports Google Drive, S3, and Dropbox cloud video playback by @0x7fffff92 in #1827
• Reset official link by @Meow33 in #1826
• feat: update system frontend version to v1.4.28 by @icebergtsn in #1828
• feat(system-frontend): update olares-app version to v1.4.27 by @qq815776412 in #1824
• feat: refactor monitor by @bleachzou3 in #1830
• feat(system-frontend): upgrade system frontend version to v1.4.29 by @qq815776412 in #1829
• fix: files, settings forwarding configuration by @aby913 in #1832
• fix: files nginx and relative changed for improving by @lovehunter9 in #1831
• fix(system-frontend): settings backup bug by @qq815776412 in #1833
• authelia, systemserver: authenticate the request with public policy in rbac proxy by @eball in #1835
• lldap: invalidate refresh token after reset password by @hysyeah in #1836
• system-server: get user token from cookie in priority by @eball in #1837
• feat(system-frontend): release new version to v1.4.31 by @qq815776412 in #1838
• fix: Optimizing task execution by @LittleLollipop in #1839
• authelia: fix aesdecrypt unpadding panic by @hysyeah in #1840
• fix: fix fail delete, fix fail exit when pod exit by @bleachzou3 in #1841
• fix(cli): distinguish exit code when checking status of terminated containers by @dkeven in #1842
• olares: add priority class to some system services by @eball in #1843
• system frontend: update system frontend to v1.4.33 by @icebergtsn in #1845
• files: optimize error message by @aby913 in #1848
• fix: do not update random-key when exists by @hysyeah in #1846
• authelia: unsafe pointer thread-safe bug by @eball in #1849
• fix:Market defending against abnormal data by @LittleLollipop in #1850
• app-serivce: fix v2 uninstall all wait ns be deleted by @hysyeah in #1851
• bfl: must reconcile when files pod ip assigned by @aby913 in #1852
• feat(system-frontend): release new version to v1.4.35 by @qq815776412 in #1854
• fix: market initialization skipped by @LittleLollipop in #1856
• feat: allow search3 search3monitor receiver os.users nats message by @bleachzou3 in #1855
• feat(system-frontend): release new version to v1.4.37 by @qq815776412 in #1860
• hami: bump hami-core version by @eball in #1857
• backup: backup cache path invalid, password get failed by @aby913 in #1862
• docs: updates on Settings-My Olares by @Meow33 in #1844
• docs: restore the cloud drive related topics and lines by @cal-weng in #1847
• docs: add doc for video settings by @cal-weng in #1858
• docs: add note for multi-node display for cluster physical resources by @cal-weng in #1859
• docs: add iso activation method for LarePass by @cal-weng in #1861
• fix: query snapshot failed from Cache directory by @aby913 in #1863
• daemon: ssh password apis by @eball in #1864
• bfl: set auth upstream header to files proxy by @eball in #1865
• Fix: Use CORS for all request methods, not just OPTIONS by @0x7fffff92 in #1867
• fix(vault): import account bug by @qq815776412 in #1866
• feat: support installation on Ubuntu 25.04 by @dkeven in #1870
• docs: update iso install on pve by @Meow33 in #1868
• docs: update market doc with multi-source switch by @cal-weng in #1869
• update instructions on Install on PVE section by @Meow33 in #1871
• app-service,tapr,cli: support kubeblocks middleware mongodb minio by @hysyeah in #1834
• feat(gpu): support many to many GPU bindings based on App policy by @dkeven in #1872
• docs: add note for GPU support by @cal-weng in #1873
• image-serivce: fix avoid panic with invalid image ref by @hysyeah in #1874
• authelia: remove authentication with backend nonce by @eball in #1876
• olares: avoid requesting backend service directly by @eball in #1875
• system frontend: update version to v1.5.2 by @icebergtsn in #1877
• fix(upgrade): apply KubeBlocks CRDs when upgrading by @dkeven in #1880
• infisical: move namespace to os-protected by @eball in #1878
• app-service,tapr: add support for rabbitmq and elasticsearch middleware by @hysyeah in #1882
• feat: support declaration and apply of system and user envs by @dkeven in #1881
• system frontend: update system frontend to v1.5.3 by @icebergtsn in #1884
• feat(app-service): support declaration of GPU consume policy in app manifest by @dkeven in #1885
• fix(cli): add retry with delay before applying CR of new kind by @dkeven in #1887
• cli: stripped-down kubeblocks crds by @hysyeah in #1886
• authelia: mark request from cluster pods as internal by @eball in #1888
• fix(cli): unify apt tool installation check for both Ubuntu & Debian by @dkeven in #1889
• cli: change did-gate-url to a variable by @eball in #1890
• daemon: get did-gate-url from environment by @eball in #1891
• olares: change kube-rbac-proxy image repo by @eball in #1892
• app-service,tapr: add support for mariadb middleware by @hysyeah in #1893
• daemon: did-gate-url bug by @eball in #1894
• cli: add kubeproxy image to vfs by @hysyeah in #1895
• refactor(cli): move upgrader registration of different versions to seperate files by @dkeven in #1897
• app-service: add namespace selector to bfl pod selector by @eball in #1898
• feat: market support mobile key by @LittleLollipop in #1896
• app-service,tapr: add support for mysql8 middleware by @hysyeah in #1899
• user-service: support displaying environment variables in settings by @icebergtsn in #1900
• app-service: add desktop provider roles and bug fix by @eball in #1901
• feat(olares-app): remove cloud drive config by @qq815776412 in #1904
• authelia: mark requests from master node internal network as internal by @eball in #1905
• app-serivce: add option images for middleware that create with cr by @hysyeah in #1906
• feat: support configuring app environment variables during installation in the app market. by @icebergtsn in #1907
• fix(daemon): log warnings upon system error in upgrade precheck by @dkeven in #1909
• cli: use constant for DIDCachePath and improve directory handling by @eball in #1912
• daemon: update cli dependency version in go.mod and go.sum by @eball in #1913
• refactor: unify various SystemEnvs; migrate BFL to new env framework by @dkeven in #1915
• feat: update files cdn address by @qq815776412 in #1916
• cli: simplify error handling for database opening by @eball in #1917
• chore: update cli dependency version in go.mod and go.sum by @eball in #1919
• refactor(app-service): watch sysenvs as svc addrs; migrate sysenv based on sys domain by @dkeven in #1921
• feat: market support new env key by @LittleLollipop in #1918
• refactor(daemon): watch systemenvs as service addresses by @dkeven in #1920
• system-server: add RBAC permissions for media server and hami services by @eball in #1922
• refactor(nodeinit): watch systemenvs as service addresses by @dkeven in #1923
• feat: support new env by @0x7fffff92 in #1910
• refactor(backup): watch systemenvs as service addresses by @aby913 in #1924
• app-service: fix middleware check by @hysyeah in #1925
• system frontend: update version to v1.5.5 by @icebergtsn in #1926
• feat(gpu): export and serve GPU power limit metrics by @dkeven in #1927
• system-server: support https provider by @eball in #1928
• feat(app-service): also sync type from referred envs by @dkeven in #1929
• feat(olares-app): update olares-app version to 1.5.6 by @qq815776412 in #1930
• cli: refactor error handling for jws cache directory checks by @eball in #1933
• fix: add addon charts image by @hysyeah in #1931
• refactor: choose reverse proxy config during activation if enabled by @dkeven in #1935
• system-server: fix websocket rbac proxy tls bug by @eball in #1932
• gpu(optimize): lower metrics collect interval to reduce lag by @dkeven in #1934
• feat(olares-app): update olares-app version to v1.5.7 by @qq815776412 in #1937
• system-server: add notification provider by @eball in #1938
• docs: add storage expansion guide by @Meow33 in #1914
• docs: add iso install guide and move back all supported install methods in get started by @cal-weng in #1911
• chore: get rid of legacy env injection for tailscale by @dkeven in #1939
• olares: remove kubectl container from Olares.yaml by @eball in #1940
• chore(manifests): clean up legacy env rendering in all files by @dkeven in #1941
• fix(app-service): retain legacy env rendering for migration by @dkeven in #1943
• system-server: fix rbac https provider bug by @eball in #1944
• tapr: fix minio policy was override when set multi bucket by @hysyeah in #1945
• chore: clean up and migrate from legacy envs by @dkeven in #1946
• feat(olares-app): update olares-app version to v1.5.8 by @qq815776412 in #1947
• refactor: change download to DaemonSet and migrate to os-framework by @aby913 in #1942
• feat(integration): integration server by @aby913 in #1948
• fix: unify shell env name of cdn service with sysenv by @dkeven in #1951
• chore(manifests): add required userenvs and remove currently unused ones by @dkeven in #1954
• docs: update links and note for ISO install guides by @cal-weng in #1953
• docs: update license badge in ReadMe to AGPL-3 by @cal-weng in #1955
• docs: remove unused vertical bar by @pengpeng in #1956
• daemon: access from intranet via domain olares.local by @eball in #1957
• feat: update system frontend to v1.5.9 by @qq815776412 in #1958
• feat: update L4 proxy image version to v0.3.6 in deployment configurations by @eball in #1960
• daemon: run proxy server in a goroutine by @eball in #1962
• chore(manifests): SMTP-related modifications to user env by @dkeven in #1959
• fix: Increase permissions and resolve mirror cache issues by @0x7fffff92 in #1961
• fix: support nodes, add download env by @kaki-admin in #1963
• backup(fix): access integration by @aby913 in #1964
• app-service: rename envoy sidecar name by @hysyeah in #1965
• fix: intranet server bugs by @eball in #1966
• daemon: update dependencies and improve WebSocket handling in proxy server by @eball in #1967
• feat: add service for search3monitor rest api by @bleachzou3 in #1968
• backup(fix): check suffix of path by @aby913 in #1969
• download(fix): fix role, path match by @aby913 in #1970
• fix(cli): install a stable version of nvidia container tool by @dkeven in #1971
• cli: add user activation command by @eball in #1972
• fix(gpu): make App and GPU binding request idempotent by @dkeven in #1973
• chore(bfl): rename fields in olares info API by @dkeven in #1974
• feat(app-service): auto-suspend app upon evicted or long-pending pod by @dkeven in #1975
• feat(olares-app): update olares-app new version to v1.5.11 by @qq815776412 in #1976
• fix(cli): lazy load DID cache db upon invoke by @dkeven in #1977
• fix: chartrepo support oci type in image manifest by @LittleLollipop in #1980
• files(fix): optimize the return value of the accounts query by @aby913 in #1981
• feat(olares-app): update system-frontend version to v1.5.12 by @qq815776412 in #1983
• app-sevice: fix upgrade chart context in setupdomain cause release failed by @hysyeah in #1984
• fix(image-service): watch whole config dir to tolerate file removal by @dkeven in #1979
• feat: refactor disk utility functions to improve disk size retrieval by @eball in #1985
• app-service: fix helm upgrade set recreate to false by @hysyeah in #1988
• refactor: change the backend of JuiceFS notify daemon to inotify by @eball in #1989
• feat(olares-app): update system-frontend version to v1.5.13 by @qq815776412 in #1990
• fix(bfl): use dynamical variable endpoint in cert manager by @dkeven in #1991
• cli: fix some user activation bugs by @eball in #1992
• juicefs: bump version to v1.3.0 in Olares.yaml by @eball in #1993
• fix(daemon): handle LVM device when getting disksize by @dkeven in #1996
• app-service: upgrade chart via appmgr controller in setup domain by @hysyeah in #1997
• system-frontend: update system-frontend to v1.5.14 by @icebergtsn in #1998
• fix: avoid glob parsing for special-char filenames by @aby913 in #1999