Proxmox Backup Server 3.3.3 → 3.3.7
4 releases · 2 breaking changes · 0 security fixes · 0 advisories fixed
0security2breaking0deprecated9feature8fix
Breaking changes
- breaking fix #4382: api: access control: remove permissions of token on deletion. in 3.3.7
- breaking fix #3336: datastore: remove group if the last snapshot is removed to avoid confusing situations where the group directory still exists and blocks re-creating a group with another owner even though the empty group was not visible in the web UI. in 3.3.5
Security changes
None in the release notes.
Every release in between
3.3.7 Apr 5, 2025
fixfix #5982: garbage collection: add a check to ensure that the underlying file system supports and honors file access time (atime) updates. The check is performed once on datastore creation and on start of every garbage collection (GC) task, just to be sure. It can be disabled in the datastore…
othergarbage collection: support setting a custom access time cutoff, overriding the default of one day and five minutes.
otherui: expose flag for GC access time support safety check and the access time cutoff override in datastore tuning options.
otherdocs: describe rationale for new GC access time update check setting and the access time cutoff check in tuning options.
featureaccess control: add support to mark a specific authentication realm as default selected realm for the login user interface.
breakingfix #4382: api: access control: remove permissions of token on deletion.
fixfix #3887: api: access control: allow users to regenerate the secret of an API token without changing any existing ACLs.
fixfix #6072: sync jobs: support flags to limit sync to only encrypted and/or verified snapshots.
featureui: datastore tuning options: expose overriding GC cache capacity so that admins can either restrict the peak memory usage during GC or allow GC to use more memory to reduce file system IO even for huge (multiple TiB) referenced data in backup groups.
otherui: datastore tuning options: increase width and rework labels to provide a tiny bit more context about what these options are.
otherui: sync job: increase edit window width to 720px to make it less cramped.
otherui: sync job: small field label casing consistency fixes.
3.3.6 Apr 3, 2025
otherdatastore: ignore group locking errors when removing snapshots, they normally happen only due to old-locking, and the underlying snapshot is deleted in any case at this point, so it's no help to confuse the user.
featureapi: datastore: add error message on failed removal due to old locking and tell any admin what they can do to switch to the new locking.
featureui: only add delete parameter on token edit, not when creating tokens.
featurepbs-client: allow reading fingerprint from system credential.
otherdocs: client: add section about system credentials integration.
3.3.5 Apr 2, 2025
otherapi: config: use guard for unmounting on failed datastore creation
otherclient: align description for backup specification to docs, using archive-name and type over label and ext.
featureclient: read credentials from CREDENTIALS_DIRECTORY environment variable following the "System and Service Credentials" specification. This allows users to use native systemd capabilities for credential management if the proxmox-backup-client is used in systemd units or, e.g., through a wrapper…
fixfix #3935: datastore/api/backup: move datastore locking to '/run' to avoid that lock-files can block deleting backup groups or snapshots on the datastore and to decouple locking from the underlying datastore file-system.
fixapi: fix race when changing the owner of a backup-group.
breakingfix #3336: datastore: remove group if the last snapshot is removed to avoid confusing situations where the group directory still exists and blocks re-creating a group with another owner even though the empty group was not visible in the web UI.
featurenotifications: clean-up and add dedicated types for all templates as to allow declaring that interface stable in preparation for allowing overriding them in the future (not included in this release).
featuretape: introduce a tape backup job worker-thread option for restores. Depending on the underlying storage using more threads can dramatically improve the restore speed. Especially fast storage with low penalty for random access, like flash-storage (SSDs) can profit from using more worker threads.…
othergarbage collection: generate index file list via datastore iterators in a structured manner.
fixfix #5331: garbage collection: avoid multiple chunk atime updates by keeping track of the recently marked chunks in phase 1 of garbage to avoid multiple atime updates via relatively expensive utimensat (touch) calls. Use a LRU cache with size 32 MiB for tracking already processed chunks, this…
featurelogging helper: use new builder initializer – not functional change intended.
3.3.4 Mar 13, 2025
fixfix #6185: client/docs: explicitly mention archive name restrictions
otherdocs: using-the-installer: adapt to raised root password length requirement
otherdisks: wipe: replace dd with write_all_at for zeroing disk
fixfix #5946: disks: wipe: ensure GPT header backup is wiped
otherdocs: fix hash collision probability comparison