Warewulf Pro 1.1.0 (Sep 2025)

Released 2025-09-10.

Highlights

• Release notes introduced. This is the first version with formal release notes documenting what's included and what's changed.
• warewulf-cockpit published in a separate repository (warewulf-pro/warewulf-cockpit-el9). This supports the continued availability of upstream Warewulf for customers who haven't purchased Warewulf Pro.
• RLC-based node images split into a dedicated product: "RLC for Warewulf Pro." Access is granted to customers who have entitlements for both Warewulf Pro and RLC.
• Warewulf upgraded to v4.6.4. See Warewulf changes below.
• Apptainer upgraded to v1.4.2. See Apptainer changes below.

Fixed

• "Shebang" headers in overlay scripts are no longer altered by the packaging process.
• Web interface: tags and other fields can now be removed from nodes and profiles. (Earlier versions had a bug that prevented removal.)

Warewulf changes

Pro v1.1.0 ships Warewulf v4.6.4, which includes:

• Per-file atomic application of the runtime overlay.
• wwclient --once - apply the runtime overlay manually, once.
• Additional debug output via wwclient --debug.
• wwctl configure warewulfd for managing the warewulfd daemon configuration.
• Fixes to NetworkManager and ifcfg overlays for VLAN and bridging use cases.
• Fixed ability to set boolean values to false with wwctl.

Apptainer changes

Pro v1.1.0 ships Apptainer v1.4.2, which includes:

• Fixed use of libsubid which had been broken by the revision applied in v1.4.0-rc.2.
• Fixed a bug introduced in v1.4.0 that caused arm64 to be mis-converted to arm64v8, resulting in failures when pulling OCI containers.
• Fixed user database lookup in the master process, which prevented instance startup correctly on systems using winbind.
• Check for existence of /run/systemd/system when verifying cgroups can be used via systemd manager.
• Compile gocryptfs with the default GOAMD64 microarchitecture of the go compiler instead of always using GOAMD64=v2. (Old behavior could degrade performance on newer CPUs and force callers to override.)
• Clear error message when using privileged network options without setuid mode.
• Allow multi-arch oci-archive files that have a nested index with the manifest (the default format from nerdctl save).
• Detect Docker archives that are actually oci-archives (Docker version 25+) and use the OCI parser to avoid bugs in the Docker parser.
• Restored looking for registry mirrors in /etc/containers/registry.conf and related files. (Inadvertently dropped in v1.4.0.)
• Fixed use of the image cache when the home directory contains @ characters.
• Fixed signature verification failures on unsigned images.