Release 2025_008 (2025-03-31)

Impact

24.11

  • rabbitmq servers will be restarted.

NixOS 24.11 platform

  • platform: ensure that IPv4 forwarding is properly disabled by default, and is only enabled by roles which explicitly require it (PL-133557).

  • Add support for Ubuntu VMs (and pave the way for general cloud-init based distributions) (PL-133325, PL-133372)

    Fetch users of all resource groups in qemu scrub to local filesystem.

    Fetch Ubuntu VM images from the ubuntu namespace in Ceph.

  • Ensure the IPMI administrator username is always ADMIN and does not deviate depending on the vendor/integrator. (PL-133527)

  • Add anti-spam DNS blocklist option with sensu checks and default to bl.spamcop.net. (PL-133519)

  • rabbitmq: provide metrics from native prometheus exporter as well (PL-133391)

    • the existing metrics remain in place for now, this is in preparation for a later deprecation of management_metrics_collection in rabbitmq

  • Improve test stability of our internal Qemu tooling. (PL-133300)

  • Pull upstream NixOS changes, security fixes and package updates:

    • firefox: 136.0.1 -> 136.0.2

Detailed Changes