opsi 4.3 January 2026 Release
Verfasst: 28 Jan 2026, 07:48
Dear opsi community,
we are pleased to announce the official release of the latest version of opsi today.
The January 2026 release brings numerous improvements in stability, security, and usability.
opsiconfd
In this release, the focus for opsiconfd was on stability and security.
The default user for operating opsiconfd is now `opsiconfd`.
Database-based authentication now additionally supports Argon2id as a new hashing algorithm for user passwords.
Argon2id has also been set as the new default value.
The hashing algorithm in use can be changed at any time; passwords will then be automatically migrated upon a password-based user login.
In addition, user accounts from external authentication can be migrated to database-based authentication.
Authentication via bearer tokens is now also supported.
opsiconfd is now delivered with an SBOM file, which can be found at `/usr/share/doc/opsiconfd`.
Timestamps are now consistently handled in UTC, including values such as `host.lastSeen`.
For host control, only the message bus is now used. This allows unreachable clients to be detected more quickly and reduces server load.
Metrics have been extended to include information about Redis connections.
The hardware audit now provides new BIOS information: `UEFIBootActive`, `SecureBootActive`, and `SecureBootWindowsCA2023`.
opsi-client-agent
The opsi-client-agent benefits from several stability improvements, particularly when handling network issues during installation.
Resilience against slow or unstable connections has been significantly increased.
Product caching can now be automatically interrupted when a metered network connection is detected.
In addition, debugging for CIFS mount errors of type 1219 has been extended, making it easier to analyze issues with multiple connections to network shares.
Another highlight is the introduction of a new notifier with a revised feature set and a modern design.
It can be optionally enabled via configuration.
opsi-cli
opsi-cli has also been extensively revised and, in addition to several bug fixes and improvements, has gained new features.
Minus signs are no longer permitted in plugin directory names and will be automatically replaced with underscores.
This change is required because Python package and module names cannot contain minus signs.
Please update your plugin directories accordingly; for example, rename the plugin directory from `my-plugin` to `my_plugin`.
The plugin ID in the metadata may still contain minus signs and can remain unchanged.
When removing packages, metadata can now be completely deleted (`package uninstall --purge`).
With the new `package info` command, package information can be queried from opsi packages.
Furthermore, opsi-cli now supports file uploads and downloads via the message bus.
The corresponding functions are available via the commands `messagebus upload` and `messagebus download`.
The commands for displaying configuration and product properties in the `datastore` area have also been revised and are now clearer and more consistent in their output.
opsi-linux-bootimage
The opsi-linux-bootimage is now based on Ubuntu 24.04 LTS.
This change ensures better stability and long-term maintainability.
opsipxeconfd
In opsipxeconfd, GRUB has been updated to version 2.12-9 and patched with the latest Debian updates.
This ensures improved compatibility and security in PXE boot environments.
opsi-script
For opsi-script, this release mainly includes bug fixes.
In addition, the new `exitScript` command has been introduced, enabling more precise control over script termination and feedback to the server.
opsi-configed
In opsi-configed, timestamps are now correctly converted to the configured local time.
The remote control function can once again be started as usual using the F7 key.
User guidance has been improved: if no depot or no client is selected, the corresponding tabs now display a clear informational message. We also improved usability on other places. More information can be found in the changelogs.
In addition, various smaller bugs have been fixed.
WebGUI
In the WebGUI, timestamps are now also displayed in the configured time.
In addition, several bugs have been fixed.
Linux netboot products
The Linux netboot products no longer install an SSH server.
In addition, various bugs have been fixed.
Packages for opsi 4.3 stable:
== OPSI_PACKAGE ==
Your team at uib
we are pleased to announce the official release of the latest version of opsi today.
The January 2026 release brings numerous improvements in stability, security, and usability.
opsiconfd
In this release, the focus for opsiconfd was on stability and security.
The default user for operating opsiconfd is now `opsiconfd`.
Database-based authentication now additionally supports Argon2id as a new hashing algorithm for user passwords.
Argon2id has also been set as the new default value.
The hashing algorithm in use can be changed at any time; passwords will then be automatically migrated upon a password-based user login.
In addition, user accounts from external authentication can be migrated to database-based authentication.
Authentication via bearer tokens is now also supported.
opsiconfd is now delivered with an SBOM file, which can be found at `/usr/share/doc/opsiconfd`.
Timestamps are now consistently handled in UTC, including values such as `host.lastSeen`.
For host control, only the message bus is now used. This allows unreachable clients to be detected more quickly and reduces server load.
Metrics have been extended to include information about Redis connections.
The hardware audit now provides new BIOS information: `UEFIBootActive`, `SecureBootActive`, and `SecureBootWindowsCA2023`.
opsi-client-agent
The opsi-client-agent benefits from several stability improvements, particularly when handling network issues during installation.
Resilience against slow or unstable connections has been significantly increased.
Product caching can now be automatically interrupted when a metered network connection is detected.
In addition, debugging for CIFS mount errors of type 1219 has been extended, making it easier to analyze issues with multiple connections to network shares.
Another highlight is the introduction of a new notifier with a revised feature set and a modern design.
It can be optionally enabled via configuration.
opsi-cli
opsi-cli has also been extensively revised and, in addition to several bug fixes and improvements, has gained new features.
Minus signs are no longer permitted in plugin directory names and will be automatically replaced with underscores.
This change is required because Python package and module names cannot contain minus signs.
Please update your plugin directories accordingly; for example, rename the plugin directory from `my-plugin` to `my_plugin`.
The plugin ID in the metadata may still contain minus signs and can remain unchanged.
When removing packages, metadata can now be completely deleted (`package uninstall --purge`).
With the new `package info` command, package information can be queried from opsi packages.
Furthermore, opsi-cli now supports file uploads and downloads via the message bus.
The corresponding functions are available via the commands `messagebus upload` and `messagebus download`.
The commands for displaying configuration and product properties in the `datastore` area have also been revised and are now clearer and more consistent in their output.
opsi-linux-bootimage
The opsi-linux-bootimage is now based on Ubuntu 24.04 LTS.
This change ensures better stability and long-term maintainability.
opsipxeconfd
In opsipxeconfd, GRUB has been updated to version 2.12-9 and patched with the latest Debian updates.
This ensures improved compatibility and security in PXE boot environments.
opsi-script
For opsi-script, this release mainly includes bug fixes.
In addition, the new `exitScript` command has been introduced, enabling more precise control over script termination and feedback to the server.
opsi-configed
In opsi-configed, timestamps are now correctly converted to the configured local time.
The remote control function can once again be started as usual using the F7 key.
User guidance has been improved: if no depot or no client is selected, the corresponding tabs now display a clear informational message. We also improved usability on other places. More information can be found in the changelogs.
In addition, various smaller bugs have been fixed.
WebGUI
In the WebGUI, timestamps are now also displayed in the configured time.
In addition, several bugs have been fixed.
Linux netboot products
The Linux netboot products no longer install an SSH server.
In addition, various bugs have been fixed.
Packages for opsi 4.3 stable:
== OPSI_PACKAGE ==
- alma10 4.3.0.3-1 Changelog
- alma8 4.3.0.3-1 Changelog
- alma9 4.3.0.3-1 Changelog
- debian 4.3.0.6-3 Changelog
- debian11 4.3.0.4-3 Changelog
- debian12 4.3.0.4-3 Changelog
- debian13 4.3.0.4-3 Changelog
- hwaudit 4.3.2.3-1 Changelog
- mint21 4.3.0.6-2 Changelog
- mint21-1 4.3.0.6-2 Changelog
- mint21-2 4.3.0.6-2 Changelog
- mint21-3 4.3.0.6-2 Changelog
- mint22 4.3.0.6-2 Changelog
- mint22-1 4.3.0.6-2 Changelog
- mint22-2 4.3.0.6-2 Changelog
- opensusel15-5 4.3.0.4-1 Changelog
- opensusel15-6 4.3.0.4-1 Changelog
- opsi-cli 4.3.35.1-1 Changelog
- opsi-cli 4.3.35.1-1 Changelog
- opsi-client-agent 4.3.17.4-1 Changelog
- opsi-configed 4.3.19.3-1 Changelog
- opsi-linux-client-agent 4.3.17.4-1 Changelog
- opsi-mac-client-agent 4.3.17.4-1 Changelog
- opsi-script 4.12.19.0-8 Changelog
- oraclelinux10 4.3.0.3-1 Changelog
- oraclelinux8 4.3.0.3-1 Changelog
- oraclelinux9 4.3.0.3-1 Changelog
- redhat10 4.3.0.3-1 Changelog
- redhat8 4.3.0.3-1 Changelog
- redhat9 4.3.0.3-1 Changelog
- relution-enrollment 1.0-1 Changelog
- rocky10 4.3.0.3-1 Changelog
- rocky8 4.3.0.3-1 Changelog
- rocky9 4.3.0.3-1 Changelog
- sles15-3 4.3.0.1-2 Changelog
- sles15-4 4.3.0.1-2 Changelog
- sles15-5 4.3.0.1-2 Changelog
- sles15-6 4.3.0.1-2 Changelog
- sles15-7 4.3.0.1-2 Changelog
- ubuntu 4.3.0.6-3 Changelog
- ubuntu22-04 4.3.0.5-1 Changelog
- ubuntu24-04 4.3.0.5-1 Changelog
- win10 4.3.0.4-2 Changelog
- win10-captured 4.3.0.4-2 Changelog
- opsi-cli 4.3.35.1 Changelog
- opsi-cli 4.3.35.1 Changelog
- opsi-client-agent-msi 4.3.17.4 Changelog
- opsi-configed-portable 4.3.19.3 Changelog
- opsi-linux-bootimage.iso 20260121 Changelog
- opsi-logviewer-portable 4.3.19.3 Changelog
- opsi-webgui.zip 4.3.47.3 Changelog
- opsi-linux-bootimage 20260121 Changelog
- opsi-utils 4.3.21.2 Changelog
- opsi-webgui 4.3.47.3 Changelog
- opsiconfd 4.3.48.4 Changelog
- opsipxeconfd 4.3.15.2 Changelog
Your team at uib