OpenNebula Apps 7.0.0

We’re excited to announce the release of OpenNebula Apps 7.0.0, the companion release to OpenNebula 7.0. This version includes updated base operating systems and several enhancements to existing service appliances.

AI-Driven Inference Appliances

This release introduces some new appliances that enable managed AI inference workloads in your OpenNebula environments:

Deprecation notice: The Ray and NVIDIA Dynamo appliances have been deprecated in favor of the vLLM appliance.

• Ray – Distributed AI Framework
• NVIDIA Dynamo – Optimized Inference Appliance
• vLLM – High-performance Inference Engine

Kubernetes at Scale with Rancher & CAPI
We've also added a new Rancher/CAPI appliance, designed to streamline the deployment and lifecycle management of OpenNebula-based RKE2 clusters through Rancher's powerful web interface. This integration ensures full compatibility with Cluster API (CAPI) tooling.

Expanding ARM Architecture Support
We're continuing to expand our support for ARM-based architectures. This release brings updated base OS and service appliances for ARM, with additional improvements planned in the coming weeks.

Context Linux Packages

• Embedded onegate clients has been updated to properly handle HTTP headers. This is needed to interface with latest version of the server (#238)

Supported guests:

	x86_64	aarch64
AlmaLinux 8, 9, 10	✅	✅
Alpine Linux: 3.18, 3.19, 3.20, 3.21	✅	✅
Amazon Linux: 2, 2023	✅
Debian: 11, 12 , 13	✅	✅
Devuan: 5	✅
Fedora: 39, 40, 41, 42	✅	✅
FreeBSD: 13, 14	✅
openSUSE: 15	✅	✅
Oracle Linux: 8, 9	✅
Red Hat Enterprise Linux: 8, 9	✅	✅
Rocky Linux: 8, 9, 10	✅	✅
Ubuntu: 20.04, 22.04, 24.04	✅	✅

Note

AlmaLinux 10, Debian 13 and Rocky 10 was added later (2025-11-12)

Context Windows Packages

• no changes

Supported guests:

• Windows10
• Windows11
• Windows2022

Service appliances

All appliances have been updated to include the latest context packages in this release.

VRouter

• Fixes onegate client vm update method (problem with parameter encoding)

OneKE

• Increase base image size to 3G (#215)
• Add missing proxy config for joined masters (#217)
• Adds ONEAPP_K8S_SERVICE_CIDR configuration parameter for specifying kubernetes cluster services IP CIDR block. Defaults to '10.43.0.0/16'. Also, it is added automatically to the ONEAPP_K8S_NO_PROXY parameter (HTTP/S proxy exceptions list). #206 More info: https://docs.rke2.io/reference/server_config#networking
• Pins OneKE ubuntu base image

Update September 10th, 2025 (version 7.0.0-0-20250909)

• Released OneKE 1.33 (rke2 1.31.3->1.33.4, helm 3.16.3->3.18.6, longhorn 1.7.2->1.9.1, metallb 0.14.8->0.15.2, traefik 28.0.0->37.1.0 ruby 3.3-alpine3.18->3.3-alpine3.22)

Rancher CAPI appliance

This release includes the first beta version of the Rancher CAPI appliance, an integration that enables users to manage OpenNebula CAPI RKE2 clusters directly from the Rancher web interface:

• Rancher running on a lightweight K3s cluster, along with the Turtles extension.
• CAPONE imported as an infrastructure provider.
• RKE2 and Kubeadm charts to simplify cluster deployments.

Harbor Appliance

• no changes

MinIO Appliance

• no changes

Ray Appliance for Managed Inference

Deprecation notice: The Ray appliance have been deprecated in favor of the vLLM appliance.

• Allows pinning of Ray and dependencies versions
• Implements the packaging of the nvidia driver from an url or a local path.
• Renames ONEAPP_RAY_MAX_NEW_TOKENS to ONEAPP_RAY_MODEL_MAX_NEW_TOKENS for being consistent with the standard.
• Changes the default for ONEAPP_RAY_MODEL_MAX_NEW_TOKENS from 512 to 1024 for being consistent with the documentation.
• Fixes an issue when the model application tries to download the language model from hugging face, if the ONEAPP_RAY_MODEL_TOKEN is empty or not set, the authorization fails against Hugging Face API.
• Fixes netplan conflict with network manager #244

Dynamo Appliance

Deprecation notice: The Dynamo appliance have been deprecated in favor of the vLLM appliance.

• New AI inference appliance based on NVIDIA Dynamo appliance. Refer to the appliance documentation for more details:
  • Overview & Release Notes
  • Quick Start
  • Features and usage

vLLM Appliance

• New AI appliance based on vLLM, a fast and easy-to-use library for LLM inference and serving.
  • Overview & Release Notes
  • Quick Start
  • Features and usage

Acknowledgements

Some of the software features included in this repository have been made possible through the funding of the following innovation projects: ONEnextgen and ONEedge5G.

OpenNebula Apps v6.10.0-3

Context Linux Packages

• Include Arm64 variants for images subset
• Support for Cloud-config scripts modules (write_files and runcmd) - #129
• Update OneKE version from 1.29 to 1.31 - #153
• Support for Alma Linux 10 (beta) - #164
• Alpine OS is now build from cloud images
• All OS appliances has been updated to the latest versions
• Fix udev rules path - #184
• Updated marketplace templates for improving ONEAPP_K8S_NO_PROXY documentationhttps://github.com/OpenNebula/marketplace/pull/125

Supported guests:

	x86_64	aarch64
AlmaLinux 8,9	✅	✅
Alpine Linux: 3.18, 3.19, 3.20, 3.21	✅	✅
ALT Linux: p10	✅
Amazon Linux: 2, 2023	✅
Debian: 11, 12	✅	✅
Devuan: 5	✅
Fedora: 39, 40, 41	✅	✅
FreeBSD: 13, 14	✅
openSUSE: 15	✅	✅
Oracle Linux: 8, 9	✅
Red Hat Enterprise Linux: 8, 9	✅	✅
Rocky Linux: 8, 9	✅
Ubuntu: 20.04, 22.04, 24.04	✅	✅

Context Windows Packages

• Allow inbound echo requests, configure SSH keys only if needed, and add ENABLE_SSH variable #181
• Reformat the script to align with the style guide defined by Microsoft #180
• Enable SSH in context-windows #156
• Fix excessive error logs because of failing authorizeSSHKeyAdmin function calls #154
• Fix authorization of standard SSH keys #150
• Fix log rotation #146
• Fix incorrect assumption about Windows partition drive letter #142

Supported guests:

• Windows10
• Windows11
• Windows2022

Service appliances

All appliances have been updated to include the latest context packages in this release.

VRouter

• no changes

Update April 24th, 2025 (version 6.10.0-3-20250424)

• Add ability to select VR by ID on LB backends #234 + Fix and simplify VR LB backend cleanup #235
• VR prefixlen is not correctly inferred for VIPs and IPs #200

OneKE

• Updates oneke rke2 version to 1.31 - #153
• Adapts cilium code to v1.16
  • The kube-proxy-replacement option’s values strict, partial and disabled are deprecated and removed in v1.15. They are replaced by true and false. true corresponds to strict, i.e. enables all kube-proxy replacement features. false disables kube-proxy replacement but allows users to selectively enable each kube-proxy replacement feature individually.
  • The CiliumLoadBalancerIPPool.spec.cidrs field has been deprecated in v1.15 favor of CiliumLoadBalancerIPPool.spec.blocks. As of v1.15 both fields have the same behavior. The cidrs field have been removed in v1.16.
• Adds rke2 http proxy settings
• Changes cilium bgp control plane behavior and ip pool management. Disabled by default, it will be enabled if specifying ONEAPP_K8S_CILIUM_BGP_ENABLED = "YES".
• Adds ONEAPP_K8S_METALLB_CLASS for letting MetalLB ignore k8s services without that parameter value defined in .spec.loadBalancerClass.
• Adds ONEAPP_RKE2_CLOUD_CONTROLLER_ENABLED flag, by default set to true, enabling rke2 cloud controller.
• It's possible now to replace the default rke2 cloud controller with the OpenNebula Cloud Provider. New provider enables LoadBalancer service support (beta).

Update March 14th, 2025 (version 6.10.0-3-20250314)

• Add missing proxy config for joined masters #217
• Add cluster/service CIDRs #206

Harbor Appliance

• no changes

MinIO Appliance

• no changes

Ray Appliance for Managed Inference

This release includes the first beta version of a Ray appliance to provide a managed inference solution to OpenNebula clouds:

• Ray framework installed to deploy inference applications
• Integration with Hugging Face
• Support for custom applications or use the default included in the appliance to easily deploy LLMs
• The appliance can be used for more advanced usages like training, fine tuning…
• Pre-integrated with GPU (you may need to install proprietary drivers)

More features planned for this appliance in the following weeks (#188)

Acknowledgements

We sincerely appreciate the efforts of the following contributors:

• Lukáš Fázik (@lukasfazik): Enhanced the Packer scripts for Windows OS, improving the automation and reliability of Windows image builds.
• Elkhan Mammadli (@LKHN): Added initial support for AlmaLinux 10.
• @DeBuXer: Improved SSH support in Windows.
• @veesiom: Resolved log rotation issues in Windows context packages.

OpenNebula Apps 6.10.0-2

Context Linux Packages

This is a minor release of the OpenNebula contextualization packages. This release is compatible with OpenNebula 6.4+.

Main purpose of this minor release is to update the images with the recent upstream and add some newly released images versions:

• Alpine Linux 3.20
• Amazon 2023

Supported guests:

• AlmaLinux: 8, 9
• Alpine Linux: 3.17, 3.18, 3.19, 3.20
• ALT Linux: p10
• Amazon Linux: 2, 2023
• Debian: 11, 12
• Devuan: 4, 5
• Fedora: 39, 40
• FreeBSD: 13, 14
• openSUSE: 15
• Oracle Linux: 8, 9
• Red Hat Enterprise Linux: 8, 9
• Rocky Linux: 8, 9
• Ubuntu: 20.04, 22.04, 24.04

Context Windows Packages

Supported guests:

• Windows10
• Windows11
• Windows2022

Service appliances

All appliances have been updated to include the latest context packages in this release.

VRouter

• Added VIP readiness check for Keepalived / Failover - #110
• Added embedded OneGate client - #111
• Wait for one-context to be fully started - #117
• Wait for one-context to be fully started - #118

Update December 3rd, 2024 (version 6.10.0-2-20241203)

• Erase servers.cfg to allow HAProxy start after VIP removal (fix) - #141

OneKE

• no changes

Harbor Appliance

• no changes

MinIO Appliance

• no changes

Update October 18th, 2024 (version 6.10.0-2-20241018)

• Add support for multi-node multi-drive configurations (#127). For more information check the MinIO documentation
• Updates MinIO version to RELEASE.2024-10-02T17-50-41Z

OpenNebula Apps 6.10.0

Context Linux Packages

This is a stable release of the OpenNebula contextualization packages. This release is compatible with OpenNebula 6.4+.

New features

• Automatically enable offline CPU - #56
• Adds support for custom report READY script - #47

Change log:

• Fix an issue that checks network-scripts are actually present in guest - #75
• Fix NIX clean up for RedHat/Debian-like - #71
• Added troubleshooting documentation - #69
• Added a note about route preferences in Linux context guide - #74

Supported guests:

• AlmaLinux: 8, 9
• Alpine Linux: 3.17, 3.18, 3.19
• ALT Linux: p10
• Amazon Linux: 2
• Debian: 11, 12
• Devuan: 4, 5
• Fedora: 39, 40
• FreeBSD: 13, 14
• openSUSE: 15
• Oracle Linux: 8, 9
• Red Hat Enterprise Linux: 8, 9
• Rocky Linux: 8, 9
• Ubuntu: 20.04, 22.04, 24.04

Context Windows Packages

Change log

• Added troubleshooting documentation - #69

Supported guests:

• Windows10
• Windows11
• Windows2022

Service appliances

All appliances have been updated to include the latest context packages in this release.

VRouter

• Support for WireGuard VPN - #68

OneKE

• A new version of the appliance based on RKE2 1.29.4 is available. This appliance is CNCF certified - #83
• Pre-processed kubeconfig file can now be dowloaded from master VM user templates - #82
• Documentation for longhorn has been extended to include Web UI configuration - #96
• With the new Traefik 3.0.0 the apiVersion field in all CRD objects should be replaced with apiVersion: traefik.io/v1alpha1.

Harbor Appliance - #79

• Added new Harbor appliance, a container image repository for Docker and Kubernetes.
• Current features of the appliance:
  • Zero-touch deployment and configuration of:
    • service IP address
    • internal database password
    • Harbor admin user password
    • service SSL certificate
  • Registry data can be placed in a separated virtual disk
• Documentation:
  • Quick start
  • Features and usage

MinIO Appliance - #103

• Added new MinIO appliance, an object storage solution compatible with AWS S3.
• Current features of the appliance:
  • Based on the latest MinIO release on Ubuntu 22.04 LTS
  • TLS enabled by default
  • Single-Drive and Multi-Drive deployment
• Documentation:
  • Quick start
  • Features and usage

v6.8.1

This is a stable release of the Linux contextualization packages, which comes along with OpenNebula 6.8 Rosette.

Together with the v6.8.1 context packages we also release the toolchain for the images build. See: one-apps readme for details.

Context Linux

the main difference in this release is the changed default for the network configuration tools:

• for Ubuntu from interfaces to networkd
• for AlmaLinux/CentOS/Fedora/OracleLinux/RedHat/Rocky from scripts to NetworkManager

This change was introduced to better align with the upstream default network tool, it is potentially breaking change as some configuration tools could assume the old default. In any case, you can rollback to the previous behavior by setting NETCFG_TYPE="interfaces" for Ubuntu and NETCFG_TYPE="scripts" for the RedHat-like distribution in the CONTEXT section of the VM template.

Change log:

• B OpenNebula/addon-context-linux#309 workaround
• F #-: Remove deprecated systemd-udev-settle
• B #-: Fix check when networkd_version is not defined
• M #-: Update default netowork renderer
• B OpenNebula/addon-context-linux#309 networkd

Supported guests:

• AlmaLinux: 8, 9
• Alpine Linux: 3.16, 3.17, 3.18
• ALT Linux: p9, p10
• Amazon Linux: 2
• CentOS: 7, 8 Stream
• Debian: 10, 11, 12
• Devuan: 3, 4
• Fedora: 37, 38
• FreeBSD: 13
• openSUSE: 15
• Oracle Linux: 8, 9
• Red Hat Enterprise Linux: 8, 9
• Rocky Linux: 8, 9
• Ubuntu: 20.04, 22.04

Context Windows

no changes

Supported guests:

• Windows10
• Windows11
• Windows2022

Service appliances

OneKE

Change log (version 1.27.2-6.8.1-1-20240131)

• This release introduces the VRouter Appliance that has been used in OneKE to replace the legacy VNF Appliance.
• F #-: Update OneKE, use new VR and service scripts
• M #-: oneke: GW/DNS/Convergence optimizations
• Both ONEAPP_VROUTER_ETH0_VIP0 and ONEAPP_VROUTER_ETH1_VIP0 are optional now, when left blank OneKE assumes non-HA operation and tries to use regular IPs from the VRouter VM.
• The ONEAPP_VNF_KEEPALIVED_VRID parameter has been removed as the VRouter VM tries to derive it from SERVICE_ID.
• The DNS recursor is now enabled by default ONEAPP_VNF_DNS_ENABLED (this adds local-zone domain names).

Update February 13th, 2024 (version 1.27.2-6.8.1-1-20240213)

• Fix for access lists in unbound: M #-: VR: Infer netmasks when computing subnets

VRouter

Change log (version 6.8.1-1-20240131)

This is a complete drop-in replacement for the VNF Appliance. The context interface is mostly identical with some key differences:

• Keepalived cannot be disabled.
• Keepalived tries to infer / guess virtual_router_id when unconfigured.
• Load balancers LVS and HAProxy now work in both Virtual Router and OneFlow Service scenarios.
• NIC alias support for the DHCP4 feature has been removed.
• DNS feature auto-generates now local-zone domain names ipY.ethX.vr, vipY.ethX.vr and epY.ethX.vr .
• Custom config snippets have been removed.

Update February 15th, 2024 (version 6.8.1-1-20240215)

• Fix for one-failover service: M #-: VR: Support multiline values in load_env

Update February 22th, 2024 (version 6.8.1-1-20240222)

• LVS: Allow for forwarding all LVS ports in Virtual Router in the static scenario
• NAT4: VR: Add simple port-forwarding for the NAT4 module (DNAT)
• LVS: VR: undefined method `upcase' for nil:NilClass (NoMethodError) if protocol is missing

WordPress

Change log (version 6.8.1-1-20240131)

• B #-: service_wordpess: add missing php-json
• Bump WordPress to 6.4.2