Vapor Release Notes

This log tracks updates, new features, and bug fixes for the Vapor host agent.

---

Version 3.0.1 (July 2026)

Adds warm migration support — a Vapor host can now be the destination for a live, minimal-downtime migration of a running VM — along with OS package management in the UI and general reliability improvements.

New Features:

• Warm migration target: A Vapor host can now receive a live migration of a running VM. The guest keeps serving during the transfer and pauses only briefly at cut-over. Works together with Condensa and Cockpit to bring running Proxmox VMs into Awanio.
• OS Libraries & Packages Management: Browse and manage the host's OS libraries and packages from the System tabs.

Enhancements:

• Updater: Now tells you when a new major version is available, instead of reporting "up to date".

Fixes:

• A failed login now returns a clear error instead of a server error.
• Security and reliability hardening across the host agent.

---

Version 3.0.0 (July 2026)

A major release that adds NVIDIA vGPU support, a VDDK-based migration data plane for importing VMs from other platforms, far more resilient incremental backups, clustered storage (OCFS2/O2CB) management, and a hardened, fail-closed security posture.

Breaking change — action required

The Vapor agent now fails closed: it will not authenticate without a configured signing secret, and it derives permissions from the authenticated identity. Configure the JWT secret on every host before upgrading.

New Features:

• NVIDIA vGPU (Mediated Devices): Full support for slicing a physical GPU into virtual GPUs — host-side orchestration and API endpoints, a guided NVIDIA vGPU Manager installer with pre-flight checks, a host-level device management view, and awareness of how many instances each profile has free.
• Warm/Cold Migration Data Plane (VDDK): A disk-import engine for bringing VMs in from VMware, including incremental (changed-block/CBT) transfers, a modern nbdkit + VDDK plugin build, plugin auto-detection, and management of installed VDDK builds. Import progress is tracked live.
• Third-Party Library Management: Install and manage VDDK and NVIDIA vGPU components from the System tabs, with resumable (TUS) uploads for large files.
• Guest Agent API: A general QEMU guest-agent interface (raw command and exec), plus endpoints to ensure the agent channel and to remove cloud-init seed files.
• O2CB / OCFS2 Cluster Management: Maintenance mode with persistent boot configuration, a heartbeat/network timeout management API, explicit cluster selection when creating OCFS2 pools, and cluster bootstrapping — all with host-namespace-aware safety checks.

Enhancements:

• Safer migrations: The migration UI now requires acknowledging destructive actions, and the migration store is pruned automatically while always reporting the newest status.
• Better restores: Choose a target storage pool, restore into an independent disk copy, and attach existing disks with clear dependency warnings for incremental/differential chains.
• Storage browser: Rename, move, and track VM attachments for files in the browser.
• VM editing: Custom CPU mode validation, and firmware/machine settings are preserved for running VMs so edits aren't rejected.
• Operations: A deploy-peers build target distributes the binary to peer hosts and restarts the service.

Security:

• Fail-closed authentication with signing-algorithm pinning and permissions derived from the authenticated identity.
• Rate-limiting on login endpoints, trusted proxy-header handling, and SSRF guards on Ansible-driven operations.
• Authorization-coverage re-audit follow-ups across handlers.

Bug Fixes:

• Incremental backups: Deletion and retention no longer destroy incremental chains; silent rebase-delta failures are detected; qemu-img no longer creates the destination image; and interrupted jobs no longer corrupt incremental targets.
• Libvirt performance & stability: Optimized pool listing, periodic connection recycling, request timeouts, event-loop initialization, and resource-leak fixes address prior lag; metric sweeps are throttled via single-flight and caching.
• Fixed a WebSocket metrics-pump goroutine leak on unsubscribe/resubscribe.
• Fixed a duplicate-column failure (migration 21) on databases that never ran migration 20.
• Corrected VM metadata format after metadata updates, and added a default VNC graphics device so restores boot cleanly.
• License validation tolerates an expired control-plane heartbeat lease during the refresh window.
• Sessions no longer time out during long-running background tasks and uploads.
• Fixed Windows BIOS migration and refreshed the v2v tooling.