2026.39

Changes

Always build containers with latest New Relic

Previously, the New Relic PHP agent installed on container images was fixed at a specific version and periodically updated, last to 12.4.0.29. This change updates the agent install to always use the latest version, currently 12.9.0.38.

Manage service dependencies within stacker

For the V4 web server image family, this change moves the responsibility for managing /share/www mount dependencies from a systemd stacker service declaration to a stack resource definition using a new required_services declaration. During resource configuration, a required resource is started as necessary until it becomes active. This occurs in an infinite loop with a small delay to recover from transient that might occur during unit start. This creates the possibility for a stack based on a web server image that does not require a /share/www directory.

Essentials: Fix file descriptor exhaustion

The php-fpm relay ran out of file descriptors on an essentials system after enabling Vinyl, repeating the messsage dial unix /run/php-fpm.sock: connect: resource temporarily unavailable in the php-fpm unit logs. Two factors contributed to this problem. First, poor tuning of the Vinyl proxy led to connections to the Vinyl server being closed almost immediately after use, leading to port exhaustion as connections were held in TIME_WAIT. Second, a deadlock could occur when a client closed a connection early without waiting for a complete response, leaving a connection and its associated file descriptors forever held. Both of these issues have been addressed in this change.

Essentials: Vinyl client commands

Commands varnishadm, varnishhist, varnishlog, varnishstat, and varnishtop are now available on the core server.

Support for web-server stack

Two new services added to webscale-web-server package: web-server and relay. The web server service simply launches the container provided in the cluster server metadata. The relay service, in this case, runs on the host and routes port 80 traffic to the container listening on port 3000. Providing a value for metadata key CONTAINER_HTTP_PORT is used to override the container port.

Add Elasticsearch plugin support

When the webscale-opensearch is installed and configured for the elasticsearch variant, OPENSEARCH_PLUGINS can be used to install plugins at startup as is already supported for OpenSearch.

Component upgrades

Artifacts matrix

Last modified on August 21, 2026