Infix v25.10.0

Note

Noteworthy changes and additions in this release:

🛡️ Zone-Based Firewall (ZBF): Protect your network with our zone-based firewall powered by firewalld. Define security zones, set policies between them, and enable masquerading.

📊 System & Hardware Monitoring: CLI show system, show services, and show hardware now give you instant visibility into CPU temperature, fan speeds, memory, running services, and sensor data from SFP modules, WiFi radios, and more. All operational data also available over NETCONF and RESTCONF.

🚀 Expanded Hardware Support: The NanoPi R2S is now included in the default Aarch64 build, which also adds support for Raspberry Pi 3B, and Raspberry Pi CM4 variants. All boards now benefit from automatic /var partition expansion on first boot.

Changes

• Upgrade Buildroot to 2025.02.7 (LTS)

• Upgrade Linux kernel to 6.12.56 (LTS)

• Extend NETCONF and RESTCONF scripting documentation with operational data examples, discovery patterns, and common workflow examples, issue #1156

• Initial support for a zone-based firewall, based on firewalld, issue #448

• Add validate option to CLI copy command. This can be used before doing a restore of a backup, or when having edited configuration files manually. With the validate flag (-n from the shell) the file is only loaded and validated against the YANG models, it is not rolled in if validation is successful, issue #373. Example:

    copy /media/backup/old.cfg running-config validate
  

• Automatically expand /var partition at first boot on all MMC-based devices

• New upgrade RPC (action) for containers using images with mutable tags

• Optimize startup of preexisting containers by adding metadata to track all OCI archives loaded into container store, and all container configurations used to create container instances. Instances are now only recreated when metadata from an existing instance does not match either the configuration or the image — because of configuration changes or image upgrades

• Updated container documentation on volumes, image tags, and image upgrade

• Add new show services command to display running system services

• Add new show system command with comprehensive system overview including hostname, uptime, load average, CPU/fan temperatures, memory, disk usage

• Add hardware sensor monitoring support in show hardware with hierarchical display of temperature, fan, voltage, current, and power sensors

• Add support for NanoPi R2S router platform to the default Aarch64 build, bumping it to Tier 2 support (SD-card images built separately)

• Add support for Raspberry Pi 3B (BCM2837)

• Add support for Raspberry Pi Compute Module 4 IoT Router Board Mini

• Add support for Raspberry Pi Compute Module 4 NVME NAS box

• Add reboot option to CLI upgrade command for automatic system restart

Fixes

• Fix #981: copying any file, including running-config, to the persistent back-end store for startup-config, does not take
• Fix #1121: Ensure DHCP server does not crash if no address pool is set. This change infers a pool range (only) for /24 networks, and only when a pool is enabled. YANG validation for this and other use-cases is also included. As an unforeseen bonus, Infix now also support non-pool (static lease) setups
• Fix #1122: Add YANG validation for consistency, IP addresses are not allowed on bridge port (interfaces). Even though Infix previously allowed this, but disregarded it operationally, it is no longer supported in the configuration
• Fix #1146: Possible to set longer containers names than the system supports. Root cause, a limit of 15 characters implicitly imposed by the service mgmt daemon, Finit. The length has not been increased to 64 characters (min: 2) and the YANG model now properly warns if the name is outside of these limits
• Fix #1147: Use container metadata to clean up lingering old container images instead of using the too broad podman image prune -af command
• Fix #1148: Only retry container instance create on remote images
• Fix #1149: Increase podman stop timeout, from 10 to 30 seconds, needed with bigger containers on heavily loaded systems
• Fix #1194: CLI text-editor command does not do proper input sanitation
• Fix #1197: RPi4 no longer boots after BPi-R3 merge, introduced in v25.09
• Upgrade fixes for containers with mutable images, e.g., :latest. Infix now always tries to fetch a new version of the OCI archive, for remote images, regardless of the transport. After upgrade the old image is pruned
• Fix #1203: copying any file, including startup-config, to running-config does not take

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v25.08.1

Changes

• N/A

Fixes

• Fix #1150: show-legacy wrapper permissions
• Fix #1155: show ospf commands regression
• Fix #1169: Expected OSPF neighbors not shown in sysrepocfg when the system has at least one non-OSPF interface

Infix v25.08.1-rc1

Changes

• N/A

Fixes

• Fix #1150: show-legacy wrapper permissions
• Fix #1155: show ospf commands regression
• Fix #1169: Expected OSPF neighbors not shown in sysrepocfg when the system has at least one non-OSPF interface

Infix v25.09.0

Changes

• Upgrade Buildroot to 2025.02.6 (LTS)
• Upgrade Linux kernel to 6.12.49 (LTS)
• Upgrade libyang to 3.13.5
• Upgrade sysrepo to 3.7.11
• Upgrade netopeer2 (NETCONF) to 2.4.5
• Upgrade rousette (RESTCONF) to v2
• Add support for Banana Pi R3, a 7 port switch with 2 WiFi chip
• Add neofetch system information tool for system introspection, issue #1143
• Add mtr and iperf3 network diagnostic tools, issue #1144
• Improve default bash settings with better history handling and tab completion
• cli: new terminal reset and terminal resize convenience commands

Fixes

• Fix #1080: Error message in log from rauc, deprecated 'Install' D-Bus method
• Fix #1100: Reduce DHCP client logging verbosity by 70% and include interface
  names in log messages for easier troubleshooting
• Fix #1119: CLI UX regression, restore proper behavior for no enabled command
• Fix #1155: show ospf commands regression
• Fix #1150: show-legacy wrapper permissions
• Fix #1161: error in log during boot about unsupported command
• Fix #1169: Expected neighbors not shown in sysrepocfg
• Fixes for unicode translation in log and pager outputs as well as syslogd

Infix v25.09.0-rc1

Changes

• Upgrade Buildroot to 2025.02.6 (LTS)
• Upgrade Linux kernel to 6.12.49 (LTS)
• Upgrade libyang to 3.13.5
• Upgrade sysrepo to 3.7.11
• Upgrade netopeer2 (NETCONF) to 2.4.5
• Upgrade rousette (RESTCONF) to v2
• Add support for Banana Pi R3, a 7 port switch with 2 WiFi chip
• Add neofetch system information tool for system introspection, issue #1143
• Add mtr and iperf3 network diagnostic tools, issue #1144
• Improve default bash settings with better history handling and tab completion
• cli: new terminal reset and terminal resize convenience commands

Fixes

• Fix #1080: Error message in log from rauc, deprecated 'Install' D-Bus method
• Fix #1100: Reduce DHCP client logging verbosity by 70% and include interface names in log messages for easier troubleshooting
• Fix #1119: CLI UX regression, restore proper behavior for no enabled command
• Fix #1155: show ospf commands regression
• Fix #1150: show-legacy wrapper permissions
• Fix #1161: error in log during boot about unsupported command
• Fix #1169: Expected neighbors not shown in sysrepocfg
• Fixes for unicode translation in log and pager outputs as well as syslogd

Infix v25.08.0

Changes

• Upgrade Buildroot to 2025.02.5 (LTS)
• Upgrade Linux kernel to 6.12.44 (LTS)
• Raspberry Pi 4 is now a part of the aarch64 image.
• Add support for Raspberry Pi touch display on Raspberry Pi 4

Fixes

• Fix #1098: Prune dangling container images to reclaim disk space
• Fix #1123: Disabling or removing a container may cause podman to hang
• Fix #1124: Container setup with unreachable remote image spawns
  excessive ip monitor processes
• Fix #1127: Silence libyang Obsolete schema node warnings in log

Infix v25.08.0-rc2

Changes

• Upgrade Buildroot to 2025.02.5 (LTS)
• Upgrade Linux kernel to 6.12.44 (LTS)
• Raspberry Pi 4 is now a part of the aarch64 image.
• Add support for Raspberry Pi touch display on Raspberry Pi 4

Fixes

• Fix #1098: Prune dangling container images to reclaim disk space
• Fix #1123: Disabling or removing a container may cause podman to hang
• Fix #1124: Container setup with unreachable remote image spawns
  excessive ip monitor processes
• Fix #1127: Silence libyang Obsolete schema node warnings in log

Infix v25.08.0-rc1

Changes

• Upgrade Buildroot to 2025.02.5 (LTS)
• Upgrade Linux kernel to 6.12.44 (LTS)
• Raspberry Pi 4 is now a part of the aarch64 image.
• Add support for Raspberry Pi touch display on Raspberry Pi 4

Fixes

• Fix #1098: Prune dangling container images to reclaim disk space
• Fix #1123: Disabling or removing a container may cause podman to hang
• Fix #1124: Container setup with unreachable remote image spawns
  excessive ip monitor processes
• Fix #1127: Silence libyang Obsolete schema node warnings in log

Latest build of bootloaders

This is the latest/nightly/daily build of Infix bootloaders, not the latest release.
Releases are always versioned, e.g., rpi4-boot-2025.01-1.tar.gz

Note

The latest-boot tag is set somewhere in history and has no connection to the
artifacts here. It is just a placeholder to create a fixed reference for distributing
bootloaders suitable for loading Infix. So please ignore the auto-generated links
to "Source code" downloads, below.

Infix v25.06.0

Changes

• Upgrade Buildroot to 2025.02.4 (LTS)
• Upgrade Linux kernel to 6.12.35 (LTS)
• Upgrade curiOS built-in containers to v25.06.0
• Add support for setting mode of a container content mount, issue #1070
• Add Wi-Fi client support and add support for some USB-Wi-Fi cards
• New slogan: Infix OS — Immutable.Friendly.Secure

Fixes

• cli: fix by-word movement, detect word barrier using non-alphanum chars
• cli: fix delete word left/right, make sure to save word in kill buffer