Production ready releases? #1317

alexhass · 2019-01-01T12:57:10Z

I‘m confused why releases are still marked as non-production test releases, but Windows 2019 has a production ready OpenSSH server version embedded?

Why is this production ready version not available for older windows versions?

I need to run a sftp server in production on Windows 2016 and try to understand what is wrong with the releases here.

Please document the differences.

manojampalam · 2019-01-02T04:08:17Z

These releases on GitHub are not officially serviced. If a security issue gets uncovered, a fix may be included in a later release on GitHub, but a patch wont necessarily be issued for a specific version you may be relying on.

alexhass · 2019-01-02T08:01:37Z

How can I install an „officially serviced“ release on Windows 2016?

gwojan · 2019-01-02T18:56:06Z

How can I install an „officially serviced“ release on Windows 2016?

Why can't we at least get builds later than last July? 😄

jborean93 · 2019-01-02T22:35:26Z

Does that mean OpenSSH installed through Add-WindowsCapability is not based on the GitHub releases and can contain newer changes?

manojampalam · 2019-01-03T06:43:40Z

@gwojan we have a couple of features in pipeline and will do a release this month. OpenSSH base has moved to 7.9 and there are some significant changes that we had to get in and ensure Windows support hasn't regressed.

@jborean93 GitHub releases are done more often and should have the latest changes. OpenSSH installed through Add-WindowsCapability is version the comes as part of Windows will typically be based off a previous version of Github release.

jborean93 · 2019-01-03T06:48:15Z

@manojampalam thanks for the update, excited for the new release. While I know we would have to manually update installs from a GitHub zip, do you know if Add-WindowsCapability (or Windows Feature) installs are updated through Windows Update when a new release is available?

alexhass · 2019-01-03T08:54:42Z

@manojampalam: That sounds now like the complete opposite of what you said first.

These releases on GitHub are not officially serviced. If a security issue gets uncovered, a fix may be included in a later release on GitHub, but a patch wont necessarily be issued for a specific version you may be relying on.

compared to

GitHub releases are done more often and should have the latest changes. OpenSSH installed through Add-WindowsCapability is version the comes as part of Windows will typically be based off a previous version of Github release.

First you said Add-WindowsCapability is newer and may contain security fixes that github does not have and on the other side you say github is updated more often. For me an update also means uncovered security issues are fixed.

Using Add-WindowsCapability - I get an "OpenSSH.Client~~~~0.0.1.0". That is totally different from 7.7.x or 7.9.x. A version like 0.0.1.0 sound like the first DEV build ever and not like a stable one. I'm also not sure this is really the same and if this can be installed on Windows 2016 or earlier.

Finally why are github releases not production ready if they are based on same code?

manojampalam · 2019-01-03T17:58:20Z

Consider this sample release train above. The latest GiHub release will typically be experimental with new features. Windows official releases are based on stable and thoroughly tested versions of GitHub releases with additional fixes that may go in as needed. These will be officially serviced, so you'll automatically get any security fixes via Windows update.

If you are basing yourself on a V3 version of GitHub release, you wouldn't, automatically, get any patches for any relevant security issues. The hypothetical security fix could make it to V5 of Github release, but you wouldn't want to keeping rev'ing up OpenSSH in your production based on experimental releases of GitHub. HTH.

alexhass · 2019-01-04T08:20:05Z

I cannot find a 2.x or 3.x branch at https://github.com/PowerShell/Win32-OpenSSH/releases. There is a 1.0 Beta and than it jumps to 7.6.x and 7.7.x. No idea where 2.x and 3.x is. Maybe v7.7.2.0p1-Beta is the version embedded into Windows 2019?

I'm not sure if "OpenSSH.Client~~~~0.0.1.0" is really https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v0.0.1.0 ? Has Microsoft embedded this 3 years old release marked as This is a pre-release (non-production ready) into Windows 2019? I cannot believe this.

What Github version is the version that Microsoft distributes with Windows 2019 - that is serviced and fully supported aka production ready? I'd like to install this production ready version on Windows 2016 and it should be updatable via Windows Update / WSUS for sure.

manojampalam · 2019-01-04T15:49:21Z

Those were just sample versions. The intent is to explain what it means to say that GitHub releases are not serviced. You're right, 7.7.2.0 is the GitHub release that Windows 2019 version is based on. You will observe that Windows 2019 will have 7.7.2.X to account for any patches on top of 7.7.2.0.

Now the point I was trying to make is that if you rely on 7.7.2.0 on Windows 2016, there is no official install vehicle and servicing pipeline for downlevel Windows platforms, so there is no way you can expect updates via WU/WSUS.

alexhass · 2019-01-05T01:50:23Z

Now we know that v7.7.2.0 is the official production use version of Windows 2019. On Github it is marked as non-production version. This is not logic.

Still not clear to me how I can install the version available for Windows 2019 on Windows 2016 and earlier in a supported way that also allow me to use WU/WSUS to keep it up to date. Can you share details how to install it on Windows 2016, please?

rodion-m · 2019-04-23T08:42:07Z

This is a pre-release (non-production ready) label is really confusing. It's sad that Microsoft even not recommend what version should we install on Windows Server 2016.

anusanraj · 2019-09-13T06:51:58Z

I have the same concern, Want to find stable version to install OpenSSH on Windows server 2012R12. But most of the releases in https://github.com/PowerShell/Win32-OpenSSH/releases are beta versions

MythreyaK · 2019-11-26T10:38:50Z

I'm on 1909 and still on the outdated version OpenSSH_for_Windows_7.7p1, LibreSSL 2.6.5. I don't see any updates either! When can I expect the updates? Many bugs are still present, that actively degrade the user experience, for example, ssh-add's different signature error and many more!

MythreyaK · 2020-02-11T13:51:27Z

Any updates on how official releases are serviced now? I still see the older version in Get-WindowsCapability -Online | ? Name -like 'OpenSSH*'.

bagajjal · 2020-02-11T17:57:23Z

Next windows update will have OpenSSH V8.1, LibreSSL 3.0.2.

MythreyaK · 2020-02-11T19:48:53Z

How is it going to be serviced? Windows update or store would be perfect.

bagajjal · 2020-02-11T19:51:32Z

Through windows update.

MythreyaK · 2020-02-14T16:36:21Z

Ahh perfect. Thank you for the info!

MythreyaK · 2020-04-15T20:25:22Z

I think what he meant was that from 20H1, this package will be serviced through windows update. For now, (even on 1909), you must update manually. See #1317 (comment) and the replies below.

Flightkick · 2020-04-27T11:47:17Z

@bagajjal Any ETA for the update pushing OpenSSH V8.1, LibreSSL 3.0.2?
On the 11th of February you mentioned next Windows update. Still haven't received an update by now.

maertendMSFT · 2020-05-12T21:29:10Z

The next update for in-box Win32-OpenSSH will come in 20H2.

MythreyaK · 2020-06-02T08:04:55Z

Ahh 20H2, I just installed 20H1 and was looking eagerly for the updated release!

Thanks for the update!

lmayorga1980 · 2020-07-19T20:48:10Z

Any updated on the Production Release Readiness?

bagajjal · 2020-07-20T19:04:28Z

All our GitHub releases are mostly stable releases. Most of the time we ship the same release with few additional fixes (security fixes/bug fixes) depending on the timeline difference between windows inbox release vs GitHub release.

We explicitly call our GitHub releases as a beta. We don't have servicing channels for security fixes for GitHub releases. We don't have any plan to support in the future for GitHub releases.

OpenSSH (server, client) comes as two different windows (windows 10+,windows server 2019+) inbox packages. OpenSSH client package comes by default. OpenSSH server is an optional component, which you need to install on a need basis. For down-level OS, we do support azure VM extensions (which has servicing channel)which you can download by using the below AZ CLI cmdlets,

C:> az vm extension set --publisher "Microsoft.Azure.OpenSSH" -n WindowsOpenSSH --resource-group myrg --vm-name myvm

C:> az vm open-port --resource-group myrg --name myvm --port 22

bagajjal · 2020-07-20T19:05:59Z

Hope this addresses all the concerns raised / future concerns.
I'm closing this issue.

mgkuhn · 2020-10-21T12:12:57Z

@maertendMSFT wrote on 12 May 2020:

The next update for in-box Win32-OpenSSH will come in 20H2.

Did anyone here get “the next update for in-box Win32-OpenSSH” in 20H2? I upgraded to 20H2 this morning and I still get OpenSSH_for_Windows_7.7p1, LibreSSL 2.6.5 and OpenSSH.Client~~~~0.0.1.0, see also #1646.

coocooman3 · 2020-10-21T20:10:47Z

@maertendMSFT wrote on 12 May 2020:

The next update for in-box Win32-OpenSSH will come in 20H2.

Did anyone here get “the next update for in-box Win32-OpenSSH” in 20H2? I upgraded to 20H2 this morning and I still get OpenSSH_for_Windows_7.7p1, LibreSSL 2.6.5 and OpenSSH.Client~~~~0.0.1.0, see also #1646.

Updated to 20H2 this morning. Still on OpenSSH_for_Windows_7.7p1, LibreSSL 2.6.5 even after uninstalling and reinstalling through the optional features menu.

ofer-dev · 2020-10-25T17:39:02Z

@maertendMSFT wrote on 12 May 2020:

The next update for in-box Win32-OpenSSH will come in 20H2.

Did anyone here get “the next update for in-box Win32-OpenSSH” in 20H2? I upgraded to 20H2 this morning and I still get OpenSSH_for_Windows_7.7p1, LibreSSL 2.6.5 and OpenSSH.Client~~~~0.0.1.0, see also #1646.

Same on my PC. Windows 10 20h2, OpenSSH_for_Windows_7.7p1, LibreSSL 2.6.5

maertendMSFT · 2020-10-27T22:56:17Z

Hi folks, please see #1693 for information regarding updates into Windows

manojampalam added the Issue-Discussion-Deprecated/use GitHub discussions label Jan 2, 2019

jrohbock mentioned this issue Jan 25, 2020

ChrootDirectory in sshd_config randomly ignored for Windows server #1544

Closed

maertendMSFT self-assigned this May 12, 2020

bagajjal closed this as completed Jul 20, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Production ready releases? #1317

Production ready releases? #1317

alexhass commented Jan 1, 2019

manojampalam commented Jan 2, 2019

alexhass commented Jan 2, 2019 •

edited

gwojan commented Jan 2, 2019

jborean93 commented Jan 2, 2019

manojampalam commented Jan 3, 2019

jborean93 commented Jan 3, 2019

alexhass commented Jan 3, 2019 •

edited

manojampalam commented Jan 3, 2019 •

edited

alexhass commented Jan 4, 2019

manojampalam commented Jan 4, 2019 •

edited

alexhass commented Jan 5, 2019 •

edited

rodion-m commented Apr 23, 2019

anusanraj commented Sep 13, 2019

MythreyaK commented Nov 26, 2019

MythreyaK commented Feb 11, 2020

bagajjal commented Feb 11, 2020

MythreyaK commented Feb 11, 2020

bagajjal commented Feb 11, 2020

MythreyaK commented Feb 14, 2020

MythreyaK commented Apr 15, 2020

Flightkick commented Apr 27, 2020

maertendMSFT commented May 12, 2020

MythreyaK commented Jun 2, 2020

lmayorga1980 commented Jul 19, 2020

bagajjal commented Jul 20, 2020 •

edited

bagajjal commented Jul 20, 2020

mgkuhn commented Oct 21, 2020

coocooman3 commented Oct 21, 2020

ofer-dev commented Oct 25, 2020 •

edited

maertendMSFT commented Oct 27, 2020

Production ready releases? #1317

Production ready releases? #1317

Comments

alexhass commented Jan 1, 2019

manojampalam commented Jan 2, 2019

alexhass commented Jan 2, 2019 • edited

gwojan commented Jan 2, 2019

jborean93 commented Jan 2, 2019

manojampalam commented Jan 3, 2019

jborean93 commented Jan 3, 2019

alexhass commented Jan 3, 2019 • edited

manojampalam commented Jan 3, 2019 • edited

alexhass commented Jan 4, 2019

manojampalam commented Jan 4, 2019 • edited

alexhass commented Jan 5, 2019 • edited

rodion-m commented Apr 23, 2019

anusanraj commented Sep 13, 2019

MythreyaK commented Nov 26, 2019

MythreyaK commented Feb 11, 2020

bagajjal commented Feb 11, 2020

MythreyaK commented Feb 11, 2020

bagajjal commented Feb 11, 2020

MythreyaK commented Feb 14, 2020

MythreyaK commented Apr 15, 2020

Flightkick commented Apr 27, 2020

maertendMSFT commented May 12, 2020

MythreyaK commented Jun 2, 2020

lmayorga1980 commented Jul 19, 2020

bagajjal commented Jul 20, 2020 • edited

bagajjal commented Jul 20, 2020

mgkuhn commented Oct 21, 2020

coocooman3 commented Oct 21, 2020

ofer-dev commented Oct 25, 2020 • edited

maertendMSFT commented Oct 27, 2020

alexhass commented Jan 2, 2019 •

edited

alexhass commented Jan 3, 2019 •

edited

manojampalam commented Jan 3, 2019 •

edited

manojampalam commented Jan 4, 2019 •

edited

alexhass commented Jan 5, 2019 •

edited

bagajjal commented Jul 20, 2020 •

edited

ofer-dev commented Oct 25, 2020 •

edited