2026.35

Changes

Prevent private networks from SSHGuard block

Requests from networks 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 will no longer be blocked by SSHGuard.

V4 essentials: Fix default.vcl is overwritten by stacker

For an essentials server, the file /etc/vinyl/default.vcl is meant to be populated by the stack and made writable by the dev group on initial install and then not touched afterward. Instead, it was being treated as a template and overwritten on each execution of stacker and without the permissions being set correctly. This change corrects the handling to install the file only on the initial run.

V4: Fix core server root disk fills up

As images are changed and used as part of dev or cron execution, they are not pruned by the default image pruner because it only functions if docker is installed. This creates a core server pruner that runs hourly that prunes all unused images except the one currently in use.

Fix logrotate package mistakenly omitted

Since 2026.29 logrotate was not automatically included in the web-server and nfs-server builds because “recommended” packages are no longer automatically installed. This change updates the server init script so that all images will now contain logrotate.

Add eu-west-3 as a sharing region for images

Add OpenSearch plugin support

Adds support for installing OpenSearch plugins at container startup via a custom entrypoint script. Plugins listed in OPENSEARCH_PLUGINS in /etc/opensearch/env are installed on startup if not already present.

Artifacts matrix

Last modified on August 11, 2026