Skip to content

v1.4.4

Latest

Choose a tag to compare

@github-actions github-actions released this 22 Jun 11:04
· 1 commit to main since this release
1022fa3

ProxCenter v1.4.4

Maintenance release: stability and security hardening, shared migration tasks, plus MSP per-tenant dashboards.

MSP & dashboards

  • Header tenant switcher. Switch the active tenant from the navbar; dashboards are scoped to the selected tenant, so the provider can review each tenant's view without leaving the dashboard.

Migration

  • Shared migration tasks. In-flight migrations now appear in the footer for every user, so the whole team sees what is running, with a link to the warm-migration setup docs.
  • Correct stream exit code. A failed block-device transfer is now reported as a failure instead of being masked as success.
  • Bounded thick-target zero-fill. Warm migration to a thick target bounds the zero-fill so it can no longer exit on a false ENOSPC on the destination volume.

Backups

  • Real gateway errors. The Backups tab now surfaces the underlying gateway error instead of failing with "Unexpected token '<'" when a reverse proxy returns an HTML error page.

RBAC & access

  • OIDC role re-sync on login. OIDC users re-sync their role from IdP group membership on every login, so group changes take effect immediately.
  • Resource-scoped performance graphs. RRD performance graphs are scoped to the individual resource rather than the whole connection, closing an RBAC scope leak.

Reliability

  • Stable performance chart axes. RRD charts show dates on the axes for multi-day timeframes, not just times.
  • Stable inventory NETWORK section. The NETWORK section stays in place when a connection briefly blips instead of collapsing.
  • Real errors surfaced. Guest and node API routes no longer swallow underlying errors, so failures are reported instead of showing empty data.
  • Faster console previews. VM console screenshots are served as JPEG instead of raw PPM, for lighter and faster previews.
  • Writable cache for the runtime user. The container creates a writable .next/cache for the non-root runtime user, fixing a startup EACCES behind some deployments.
  • Safer DR config writes. Replication writes the DR config with cp -f on pmxcfs, avoiding a transient failure window during the write.

Security

  • Reduced image surface. The unused npm binary is removed from the runtime image, clearing the bundled undici advisories.
  • Patched CVEs. Dependency CVEs are patched (including OpenSSL on the orchestrator image), a feature-route error log is sanitized, and front-end dependencies are refreshed (postcss, tailwindcss, @novnc/novnc, next-intl, nanoid, ws).

Docker Images

docker pull ghcr.io/adminsyspro/proxcenter-frontend:v1.4.4
docker pull ghcr.io/adminsyspro/proxcenter-orchestrator:v1.4.4
docker pull ghcr.io/adminsyspro/proxcenter-weasyprint:v1.4.4