Skip to Content
Release notesWarewulf Pro 1.3.0 (Aug 2026)

Warewulf Pro 1.3.0 (Aug 2026)

Released 2026-08-06.

Changes

  • Added a new kdump configuration overlay (warewulf-overlays-kdump) for crash kernel configuration on cluster nodes.
  • The chrony overlay is now provided by upstream Warewulf (added in v4.7.0) and is no longer shipped as a separate Warewulf Pro overlay. The upstream overlay adds support for multiple NTP servers, drift tracking, RTC synchronization, and automatic fallback to the Warewulf controller IP.
  • Pinned the x86_64 microarchitecture level (GOAMD64) to baseline (v1) when building Warewulf binaries, ensuring wwclient runs on all x86_64 CPUs including older models (e.g., SandyBridge, Westmere).
  • Fixed the web interface to show an inline validation error when creating an overlay that already exists, instead of returning a generic server error.
  • Updated web interface dependencies to address CVE-2026-33532 (yaml), GHSA-fv7c-fp4j-7gwp (@babel), and lodash.
  • Updates Warewulf to v4.7.0. This is a feature release with significant changes relative to the v4.6.x series. Warewulf changes include:
    • New wwctl unset command for clearing node and profile fields.
    • Server TLS support.
    • New /files/ route for serving individual files and templates.
    • Refactored server routes (URLs).
    • New chrony and mig (NVIDIA Multi-Instance GPU) overlays.
    • Fixed whitespace handling around template functions.
    • Documentation audit.
    • Security fixes, including updated Go and library versions.
    • Removed support for fetching individual overlays and individual files from overlays.
  • Updates Apptainer to v1.5.3 (from v1.4.5). This is a feature release; Apptainer changes include:
    • Support for the Container Device Interface (CDI) standard through new --device and --cdi-dirs options.
    • Support for selective mounting of Intel Gaudi accelerators via the --intel-hpu option and the HABANA_VISIBLE_DEVICES environment variable.
    • New buildkit: bootstrap for building SIF images directly from a Dockerfile without Docker or Podman.
    • Reproducible SIF images via the SOURCE_DATE_EPOCH environment variable and a new --reproducible build/pull flag.
    • Preservation of file ownership in OCI-downloaded containers for unprivileged users.
    • New --no-env option and APPTAINER_NOENV environment variable for selective exclusion of host environment variables.
    • PREPEND_LD_LIBRARY_PATH and APPEND_LD_LIBRARY_PATH support for controlling library search order in containers.
    • Improved GPU library precedence: container libraries now take priority over host libraries bound into /.singularity.d/libs.
    • Fix for CVE-2026-48785: incorrect path matching for the limit container paths directive in setuid installations.
    • Skip using PRoot when ptrace() is unavailable while building images as an unprivileged user, printing an informational message instead of failing.
    • Bind getopt from the host when using fakeroot command mode, to support EL10 and Fedora base containers which no longer include getopt by default.