Warewulf Pro 1.3.0 (Aug 2026)
Released 2026-08-06.
Changes
- Added a new
kdumpconfiguration overlay (warewulf-overlays-kdump) for crash kernel configuration on cluster nodes. - The
chronyoverlay is now provided by upstream Warewulf (added in v4.7.0) and is no longer shipped as a separate Warewulf Pro overlay. The upstream overlay adds support for multiple NTP servers, drift tracking, RTC synchronization, and automatic fallback to the Warewulf controller IP. - Pinned the x86_64 microarchitecture level (
GOAMD64) to baseline (v1) when building Warewulf binaries, ensuringwwclientruns on all x86_64 CPUs including older models (e.g., SandyBridge, Westmere). - Fixed the web interface to show an inline validation error when creating an overlay that already exists, instead of returning a generic server error.
- Updated web interface dependencies to address CVE-2026-33532 (yaml), GHSA-fv7c-fp4j-7gwp (@babel), and lodash.
- Updates Warewulf to v4.7.0. This is a feature release with significant changes
relative to the v4.6.x series. Warewulf changes include:
- New
wwctl unsetcommand for clearing node and profile fields. - Server TLS support.
- New
/files/route for serving individual files and templates. - Refactored server routes (URLs).
- New
chronyandmig(NVIDIA Multi-Instance GPU) overlays. - Fixed whitespace handling around template functions.
- Documentation audit.
- Security fixes, including updated Go and library versions.
- Removed support for fetching individual overlays and individual files from overlays.
- New
- Updates Apptainer to v1.5.3 (from v1.4.5). This is a feature release;
Apptainer changes include:
- Support for the Container Device Interface (CDI) standard through new
--deviceand--cdi-dirsoptions. - Support for selective mounting of Intel Gaudi accelerators via the
--intel-hpuoption and theHABANA_VISIBLE_DEVICESenvironment variable. - New
buildkit:bootstrap for building SIF images directly from a Dockerfile without Docker or Podman. - Reproducible SIF images via the
SOURCE_DATE_EPOCHenvironment variable and a new--reproduciblebuild/pull flag. - Preservation of file ownership in OCI-downloaded containers for unprivileged users.
- New
--no-envoption andAPPTAINER_NOENVenvironment variable for selective exclusion of host environment variables. PREPEND_LD_LIBRARY_PATHandAPPEND_LD_LIBRARY_PATHsupport for controlling library search order in containers.- Improved GPU library precedence: container libraries now take priority over
host libraries bound into
/.singularity.d/libs. - Fix for CVE-2026-48785: incorrect path matching for the
limit container pathsdirective in setuid installations. - Skip using PRoot when
ptrace()is unavailable while building images as an unprivileged user, printing an informational message instead of failing. - Bind
getoptfrom the host when using fakeroot command mode, to support EL10 and Fedora base containers which no longer include getopt by default.
- Support for the Container Device Interface (CDI) standard through new