Turnkey Linux

Changes: Install latest stable SilverStripe from upstream (v4.1.1). Install Adminer directly from stretch/main repo Provide "adminer" root-like user for Adminer MySQL access Replace MySQL with MariaDB (drop-in MySQL replacement) Updated version of ... [More] mysqltuner script Includes PHP7.0 (installed from Debian repos) Updated PHP default settings Remove phpsh (no longer maintained) Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest) [Less]

Changes: Upgraded to the latest upstream source version Improve default permissions - closes #1043 Install Adminer directly from stretch/main repo Provide "adminer" root-like user for Adminer MySQL access Replace MySQL with MariaDB (drop-in MySQL ... [More] replacement) Updated version of mysqltuner script Includes PHP7.0 (installed from Debian repos) Updated PHP default settings Remove phpsh (no longer maintained) Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest) [Less]

Changes: Updated Drupal8 to latest stable upstream Updated Drush to latest upstream Install Adminer directly from stretch/main repo Provide "adminer" root-like user for Adminer MySQL access Replace MySQL with MariaDB (drop-in MySQL replacement) ... [More] Updated version of mysqltuner script Includes PHP7.0 (installed from Debian repos) Updated PHP default settings Remove phpsh (no longer maintained) Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest) [Less]

Changes: Upgraded base distribution to Debian 9.4/Stretch. TurnKey Backup and Migration (tklbam): package and dependencies are now reproducible (security) [ Chris Lamb ] backup update fix - new dependency for Stretch; gnupg (closes #962) [ Ken ... [More] Robinson ] restore update fix - ensure patches are applied to tklbam-squid source code (TurnKey squid fork) (closes #970) [ Ken Robinson (troubleshooting) & Chris Lamb (fix) ] Installer (di-live): package is now reproducible (security) [ Chris Lamb ] fix di-live failing to install from live system (closes #1041) [ Stefan Davis ] Live environment (casper): package is now reproducible (security) [ Chris Lamb ] update to support overlayFS (default layering filesystem in stretch) [ Stefan Davis ] Configuration console (confconsole): general: - package is now reproducible (security) [ Chris Lamb ] Networking: - fix for static IP not sticking (since upgrade to stretch base) (closes #952) Let's Encrypt plugin: - install 'dehydrated' (ACME client) from Debian main repo (previously installed from jessie-backports) - significant refatoring of plugin - support for multiple domains (closes #843) - fix for updated ACME ToS; including dynamically discovered latest ToS; inc dialog display of url for current ToS (closes #976) - update dialog and readme for Debian Stretch (closes #1061) [ Stefan Davis ] Firstboot Initialization (inithooks): Updates for headless builds especially LXC/Proxmox & Xen: - include specific inithooks-lxc.service file - initialization SystemD service that works reliably inside an LXC container (and doesn't effect other builds) (closes #1071) - include specific inithooks-xen.service file - initialization SystemD service that works reliably with the Xen console (and doesn't effect other builds) - force non-interactive dpkg-reconfigure of openssh-server (closes #1085) - updated initfence index page to note that webshell not avaialble (closes #1087) - fix edge case bug where turnkey-sudoadmin would incorrectly adjust services.txt (closes #1124) Web management console (webmin): upgraded webmin to v1.881 package is reproducible (no changes required) (security) resolve stretch related install problem (closes #920) [ Ken Robinson ] new default theme, uses upstream default; 'Authentic' (closes #781) TurnKey theme customizations; TurnKey logos, default to show TKLBAM module on login remove webmin-file (java based filemanager) module (closes #965) remove webmin-texteditor module (upstream) include webmin-fail2ban module add convience symlinks to useful Webmin logs (in /var/log/webmin) reconfigure webmin-raid & webmin-lvm modules during build (workaround for #1091) TurnKey AMQ (tklamq) - only applies to Hub builds: python-carrot deprecated, move to dependency on python-kombu Web shell (shellinabox): install v2.20 direct from Debian main repo (no longer maintaining our own fork) (closes #918) version from Debian displays ncurses dialog properly (closes #317) white on black default webshell (aka shellinabox) theme (closes #1060) Security hardening: [ John Carver ] default config mods for: - postfix - ssh - kernel sysctl variables - inc easy option to override (via /etc/sysctl.conf) Optimized builds (buildtasks): VM builds (OVA & VMDK): - include open-vm-tools-dkms & linux-headers-amd64 in base builds (closes #1001) [ Stefan Davis ] Miscellaneous: update to support overlayFS (default layering filesystem in stretch) default to SystemD init system for all builds use traditional network interface names, e.g. 'eth0' (disable stretch default of "Predictable Network Interface Names") 'dpkg-vendor --query Vendor' now returns 'TurnKey` (closes #196) include fail2ban in all appliances (closes #630 & #991) - MVP uses default Debian conf, protects SSH only use http://deb.debian.org as Debian url in sources.list - as recommended by Debian (closes #927) upstream fix for MOTD not being updated dynamically (closes #1024) [ Stefan Davis ] Links Release meta-files (signature, manifest) [Less]

Changes: Upgraded to the latest upstream source version (2.15.0) Install Adminer directly from stretch/main repo Provide "adminer" root-like user for Adminer MySQL access Replace MySQL with MariaDB (drop-in MySQL replacement) Updated version of ... [More] mysqltuner script Includes PHP7.0 (installed from Debian repos) Updated PHP default settings Remove phpsh (no longer maintained) Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest) [Less]

Changes: Upgraded to the latest upstream source version of Collabtive (3.1) Install Adminer directly from stretch/main repo Provide "adminer" root-like user for Adminer MySQL access Replace MySQL with MariaDB (drop-in MySQL replacement) Updated ... [More] version of mysqltuner script Includes PHP7.0 (installed from Debian repos) Updated PHP default settings Remove phpsh (no longer maintained) Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest) [Less]

Changes: Upgraded to latest stable version of Redmine (3.4.6) Install Adminer directly from stretch/main repo Replace MySQL with MariaDB Mercurial (hg) & Bazaar (bzr) support removed (related to #1050) [ Anton Pyrogovskyi Add workaround for ... [More] MariaDB 10.1 Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest) [Less]

Changes: Remove Bazaar (bzr) & Mercurial (hg) (part of #1050). Replace WebSVN with ViewVC (part of #1050). Install git-web theme properly (closes #979). Update git config and documentation (closes #980). Change default user and /srv/repos owner ... [More] to 'vcs'. Provide tkl-webcp in Perl (so PHP no longer required). [ Anton Pyrogovskyi ] Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest) [Less]

Changes: Upgraded to the latest upstream source version (2.6.1) Download source from GitHub (conf.d/download) [ Vlad Kuzmenko Install Adminer directly from stretch/main repo Provide "adminer" root-like user for Adminer MySQL access Replace MySQL ... [More] with MariaDB (drop-in MySQL replacement) Updated version of mysqltuner script Includes PHP7.0 (installed from Debian repos) Updated PHP default settings Remove phpsh (no longer maintained) Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest) [Less]

Changes: Updated roundup to 1.5.1 [ Stefan Davis ] Install Roundup via pip into roundup user's home Replace MySQL with MariaDB (drop-in MySQL replacement) Updated version of mysqltuner script Note: Please refer to turnkey-core's changelog for ... [More] changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest) [Less]