opsi 4.3 August Release
Verfasst: 27 Aug 2025, 07:24
Dear opsi community,
we are pleased to announce the official release of the latest version of opsi today.
New Boot Image
The opsi-linux-bootimage has been fundamentally revised and updated to the latest state.
It is now based on the current Linux kernel 6.16 and offers numerous improvements in terms of stability, flexibility, and configurability.
A key element of the modernization concerns network configuration.
This is now handled via systemd-networkd.
All wired network interfaces are automatically configured via DHCP.
The boot image waits until at least one device reaches the routable state.
For diagnostics and management, the `networkctl` command is available, which allows querying and adjusting the status of individual network devices.
The opsi-specific processes of the boot procedure have also been simplified.
There is now only one central opsi service (`opsi.service`), which is automatically enabled at system startup.
This service first launches the script opsimain.sh (formerly master.sh), which performs preparatory tasks and then calls the Python script opsimain (formerly master).
The latter establishes the connection to the opsi service and processes the netboot product.
The display on virtual terminals is now clearly separated:
On TTY 1, kernel and systemd messages appear, or alternatively a splash screen.
The opsimain script runs on TTY 2.
TTYs 3 to 6 provide gettys for direct login to the system.
As usual, switching between terminals is possible via <Ctrl>+<Alt>+<F1–F6>.
There are also innovations regarding the bootloader: the boot image now uses GRUB 2.12-52.1.
The configurations have been fundamentally revised and significantly simplified.
The included ISO image, which can be used for booting via CD/DVD or USB stick – both in EFI and legacy BIOS mode – now also relies entirely on GRUB.
The opsi-specific kernel parameters have been thoroughly revised and structured more clearly. This provides a wide range of options to flexibly adapt the boot image to different environments and requirements. The following parameters can be used:
Work on further development continues: in one of the upcoming releases, modernization will be carried on and the boot image will gain support for the arm64 architecture.
opsi-cli
The functionality of opsi-cli has been expanded and issues have been fixed.
A new command group, `opsi-cli package meta-edit`, allows automated editing of metadata in opsi source packages. Currently, the commands `add-product-dependency` and `remove-product-dependency` are available, enabling the creation and removal of package dependencies. In the following example, a dependency for the `setup` action on the product `firefox` is added and then removed:
The new option `--include-netboot` for the `client-action set-action-request` command now makes it possible to set actions for Netboot products.
With `client-action reboot`, a new command is available that allows clients to be restarted directly from the command line.
Finally, an issue with handling network addresses in the `client-action` command group has been resolved.
opsiconfd
The focus of the new opsiconfd is on improving stability.
In addition to several new features, many existing functions have been revised and minor issues resolved.
The health check and diagnostic data have been adjusted and enhanced for greater accuracy and reliability.
It is now also possible to store configuration files on file systems that only provide lockf support instead of flock support, such as when using NFS.
Another improvement concerns the configuration parameters `networks` and `admin-networks`.
These now also accept hostnames, making configuration more flexible and easier to adapt to different environments.
Encrypted root Partition for Debian and Mint
A new mode, `partition_method "crypto"`, is now available for the Debian and Mint Netboot products.
This makes it possible to perform installations with an encrypted root partition.
opsi-client-agents
An error in the handling of WAN configurations has been fixed in the opsi-client-agents.
Debian 13
Support for Debian 13 has been expanded.
Server-side packages are now available, along with a dedicated Netboot package.
In addition, the general Debian Netboot package now includes the trixie option.
The tool `l-debuntu-upgrade` can also be used to upgrade systems to Debian 13 or Mint 22-1.
opsi-configed
The administration tool opsi-configed has been visually refined and improved through minor corrections.
Warning messages about exceeded opsi modules now specifically target active clients.
In the context menu, visible columns are sorted in the same order as in the tables.
Furthermore, product properties and configuration entries can now be displayed and edited in multi-line editors, which is particularly convenient via the context menu.
Packages for opsi 4.3 stable:
== OPSI_PACKAGE ==
we are pleased to announce the official release of the latest version of opsi today.
New Boot Image
The opsi-linux-bootimage has been fundamentally revised and updated to the latest state.
It is now based on the current Linux kernel 6.16 and offers numerous improvements in terms of stability, flexibility, and configurability.
A key element of the modernization concerns network configuration.
This is now handled via systemd-networkd.
All wired network interfaces are automatically configured via DHCP.
The boot image waits until at least one device reaches the routable state.
For diagnostics and management, the `networkctl` command is available, which allows querying and adjusting the status of individual network devices.
The opsi-specific processes of the boot procedure have also been simplified.
There is now only one central opsi service (`opsi.service`), which is automatically enabled at system startup.
This service first launches the script opsimain.sh (formerly master.sh), which performs preparatory tasks and then calls the Python script opsimain (formerly master).
The latter establishes the connection to the opsi service and processes the netboot product.
The display on virtual terminals is now clearly separated:
On TTY 1, kernel and systemd messages appear, or alternatively a splash screen.
The opsimain script runs on TTY 2.
TTYs 3 to 6 provide gettys for direct login to the system.
As usual, switching between terminals is possible via <Ctrl>+<Alt>+<F1–F6>.
There are also innovations regarding the bootloader: the boot image now uses GRUB 2.12-52.1.
The configurations have been fundamentally revised and significantly simplified.
The included ISO image, which can be used for booting via CD/DVD or USB stick – both in EFI and legacy BIOS mode – now also relies entirely on GRUB.
The opsi-specific kernel parameters have been thoroughly revised and structured more clearly. This provides a wide range of options to flexibly adapt the boot image to different environments and requirements. The following parameters can be used:
- `hn`: Sets the system hostname.
- `dn`: Defines the system domain name.
- `service`: Specifies the address of the opsi service to which the boot image should connect.
- `pckey`: The opsi host key used for authentication.
- `otp`: A one-time password for authentication; can be used as an alternative to `pckey`.
- `opsi_ui`: Selects the opsi user interface. Supported options are `splash` (graphical splash screen) and `tui` (text-based). Default is `tui`.
- `lang`: Defines the system language and locale. Possible formats are `<language>[territory][.codeset]`, e.g. `en`, `enUS`, or `en_US.UTF8`.
- `tz`: Sets the system time zone. A typical example is `Europe/Berlin`. Default is `UTC`.
- `pwh`: Allows setting a password or password hash for the `root` user. Supported is the hash format `$<hash-type>$<salt>$<hash>`.
- `macaddress`: Assigns a custom MAC address to a network device.
- `nodhcp`: Disables automatic DHCP configuration for network interfaces.
- `splash`/`nosplash`: Enables or disables the graphical splash screen at system startup.
- `tcpdump`: Starts network packet capture in the file `/tmp/tcpdump.pcap`. Additional parameters can be passed here, which are forwarded directly as options to `tcpdump`.
- `opsi_loglevel`: Defines the opsi log level (0–9).
- `product`: Specifies the product ID to be processed by the boot image.
- `ask_conf`: Instructs the system to interactively prompt or confirm certain configuration values.
Work on further development continues: in one of the upcoming releases, modernization will be carried on and the boot image will gain support for the arm64 architecture.
opsi-cli
The functionality of opsi-cli has been expanded and issues have been fixed.
A new command group, `opsi-cli package meta-edit`, allows automated editing of metadata in opsi source packages. Currently, the commands `add-product-dependency` and `remove-product-dependency` are available, enabling the creation and removal of package dependencies. In the following example, a dependency for the `setup` action on the product `firefox` is added and then removed:
Code: Alles auswählen
opsi-cli package meta-edit add-product-dependency --product-action setup --required-product-id firefox --required-action setup
opsi-cli package meta-edit remove-product-dependency --product-action setup --required-product-id firefoxWith `client-action reboot`, a new command is available that allows clients to be restarted directly from the command line.
Finally, an issue with handling network addresses in the `client-action` command group has been resolved.
opsiconfd
The focus of the new opsiconfd is on improving stability.
In addition to several new features, many existing functions have been revised and minor issues resolved.
The health check and diagnostic data have been adjusted and enhanced for greater accuracy and reliability.
It is now also possible to store configuration files on file systems that only provide lockf support instead of flock support, such as when using NFS.
Another improvement concerns the configuration parameters `networks` and `admin-networks`.
These now also accept hostnames, making configuration more flexible and easier to adapt to different environments.
Encrypted root Partition for Debian and Mint
A new mode, `partition_method "crypto"`, is now available for the Debian and Mint Netboot products.
This makes it possible to perform installations with an encrypted root partition.
opsi-client-agents
An error in the handling of WAN configurations has been fixed in the opsi-client-agents.
Debian 13
Support for Debian 13 has been expanded.
Server-side packages are now available, along with a dedicated Netboot package.
In addition, the general Debian Netboot package now includes the trixie option.
The tool `l-debuntu-upgrade` can also be used to upgrade systems to Debian 13 or Mint 22-1.
opsi-configed
The administration tool opsi-configed has been visually refined and improved through minor corrections.
Warning messages about exceeded opsi modules now specifically target active clients.
In the context menu, visible columns are sorted in the same order as in the tables.
Furthermore, product properties and configuration entries can now be displayed and edited in multi-line editors, which is particularly convenient via the context menu.
Packages for opsi 4.3 stable:
== OPSI_PACKAGE ==
- debian11 4.3.0.3-3 Changelog
- debian12 4.3.0.3-3 Changelog
- debian13 4.3.0.3-3 Changelog
- l-debuntu-upgrade 4.3.0.2-1 Changelog
- l-opsi-server 4.3.0.9-4 Changelog
- mint21 4.3.0.2-3 Changelog
- mint21-1 4.3.0.2-3 Changelog
- mint21-2 4.3.0.2-3 Changelog
- mint21-3 4.3.0.2-3 Changelog
- mint22 4.3.0.2-3 Changelog
- mint22-1 4.3.0.2-3 Changelog
- opsi-cli 4.3.27.1-1 Changelog
- opsi-client-agent 4.3.13.8-1 Changelog
- opsi-configed 4.3.13.2-1 Changelog
- opsi-linux-client-agent 4.3.13.8-1 Changelog
- opsi-local-image-win10 4.3.0.2-13 Changelog
- opsi-local-image-win10-capture 4.3.0.2-13 Changelog
- opsi-local-image-win10-x64 4.3.0.2-13 Changelog
- opsi-local-image-win10-x64-capture 4.3.0.2-13 Changelog
- opsi-local-image-win11-x64 4.3.0.2-13 Changelog
- opsi-local-image-win11-x64-capture 4.3.0.2-13 Changelog
- opsi-mac-client-agent 4.3.13.8-1 Changelog
- opsi-vhd-win10-x64 4.3.0.2-13 Changelog
- opsi-vhd-win11-x64 4.3.0.2-13 Changelog
- sles15-1 4.3.0.0-1 Changelog
- sles15-2 4.3.0.0-1 Changelog
- sles15-3 4.3.0.0-1 Changelog
- sles15-4 4.3.0.0-1 Changelog
- sles15-5 4.3.0.0-1 Changelog
- sles15-6 4.3.0.0-1 Changelog
- sles15-7 4.3.0.0-1 Changelog
- ubuntu 4.3.0.3-3 Changelog
- ubuntu22-04 4.3.0.2-7 Changelog
- ubuntu24-04 4.3.0.2-7 Changelog
- win10 4.3.0.2-13 Changelog
- win10-captured 4.3.0.2-13 Changelog
- win10-x64 4.3.0.2-13 Changelog
- win10-x64-captured 4.3.0.2-13 Changelog
- win11-x64 4.3.0.2-13 Changelog
- win11-x64-captured 4.3.0.2-13 Changelog
- win2012-r2 4.3.0.2-13 Changelog
- win2016 4.3.0.2-13 Changelog
- win2019 4.3.0.2-13 Changelog
- win2022 4.3.0.2-13 Changelog
- win2025 4.3.0.2-13 Changelog