Release 2025_025 (2025-07-21)¶
General Improvements¶
We have improved IO throttling on our hypervisors. These performance gains are available to all running VMs, irrespectively of their platform version:
HDD-class VMs can burst from their baseline of 250 IOPS up to 2.500 IOPS for 60 seconds and have an explicit bandwidth limit of 250 MiB/s.
SSD-class VMs can burst from their baseline of 10000 IOPS up to 20.000 IOPS for 60 seconds and have an explicit bandwidth limit of 500 MiB/s.
Reads and writes are now throttled separately, so all VMs can use their IOPS limit separately for reading and writing at the same time.
Impact¶
25.05¶
The following services may be restarted: postgresql.service, redis.service
NixOS 25.05 platform¶
devhost: switch to kea as dhcp server (PL-133857)
We had seen issues with DHCP packets having an invalid checksum. Kea handles this better and seems to resolve provisioning issues. We continue to monitor the issues.
postgresql: add role
postgresql17
for newest major release. All existing versions of the postgresql role remain available.Make XFS upgrades at boot-time optional and disable it by default. (PL-133864)
We introduced the XFS upgrade code in the 25.05 cycle to allow long-living filesystems enable features like “bigtime” which makes the filesystem year 2038 compatible. The implementation chose robustness over performance but the tradeoff ended up with boot times of tens of minutes even for small or medium VMs. We’re taking this feature back to the drawing board, but provide a knob so it can be used in situations where it’s really needed.
Pull upstream NixOS changes, security fixes, and package updates:
chromedriver: 138.0.7204.92 -> 138.0.7204.100
chromium: 138.0.7204.92 -> 138.0.7204.100
firefox: 140.0.2 -> 140.0.4
gitaly: 18.1.1 -> 18.1.2
gitlab: 18.1.1 -> 18.1.2
gitlab-container-registry: 4.23.1 -> 4.24.0
gitlab-ee: 18.1.1 -> 18.1.2
gitlab-pages: 18.1.1 -> 18.1.2
gitlab-workhorse: 18.1.1 -> 18.1.2
go_1_23: 1.23.10 -> 1.23.11
keycloak: 26.1.4 -> 26.2.5
linuxKernelStable: 6.12.35 -> 6.12.37
linuxKernelVerify: 6.12.35 -> 6.12.37
postgresql13Packages.postgis: 3.5.2 -> 3.5.3
postgresql14Packages.postgis: 3.5.2 -> 3.5.3
postgresql15Packages.postgis: 3.5.2 -> 3.5.3
postgresql16Packages.postgis: 3.5.2 -> 3.5.3
postgresql17Packages.postgis: 3.5.2 -> 3.5.3
postgresqlPackages.postgis: 3.5.2 -> 3.5.3
promtail: 3.4.4 -> 3.4.5
python3Packages.structlog: 25.3.0 -> 25.4.0
redis: 7.2.9 -> 7.2.10
uv: 0.7.19 -> 0.7.20
Documentation¶
updated NAT endpoint IP addresses used by outbound traffic from machines with no public IPv4 address: Outbound connectivity from VMs
Detailed Changes¶
NixOS 25.05: platform code, nixpkgs/upstream changes, metadata, channel url