1.18.0-ls106

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.18.0-ls106/index.html

LinuxServer Changes:

Full Changelog: 1.18.0-ls105...1.18.0-ls106

Remote Changes:

What's new in Kasm 1.18.0

Highlights

• Updated Apache Guacamole to version 1.5.5. The changelog can be found at https://guacamole.apache.org/releases/1.5.5/ .
• Support for bulk imports of Users and Servers, through both the admin interface and developer API.
• Added support for applying labels to Servers, Agents, Server Pools and Zones.
• Added support for Including / Excluding Labels when Launching Container and Server Pool Workspaces.
• Added the ability to create a server template that can be used to enroll multiple servers using a single server enrollment token.
• User-Server Assignment in Server Pools. Users can be mapped to specific static Servers reserved for their Sessions. More here.
• Added support for Smart Card Pass-through in container-based workspaces using the Kasm Native Smartcard Client for Windows and macOS.

Features

• Usability Enhancements

  • Increased maximum supported clipboard size for RDP workspaces to 25MB.
  • Added the hostname to heartbeat logs to make it easier to identify which server or agent a log is related to.
  • Updated Docker Run Config to support variable substitution. Expanded variables for storage mapping and volume mapping to also support custom attributes 1, 2, and 3 defined for the user.
  • When deleting OpenID or SAML configs we now make it clear that this will delete any users associated with the config and include an indication of how many users will be affected. In addition you can now edit an OpenID or SAML config to see the list of users associated with the config.
  • Support for rolling tags for Kasm Docker Plugins. The Kasm start script now upgrades Kasm plugins that use rolling tags. This feature includes scripts for admin plugin management---more info here: Plugin Management.
  • Made User searching case-insensitive in both the main User list view and in Groups.
  • Servers can now be assigned to Pools from the Servers list table.
  • Added Pool (database) ID as a display column in the Pool list view. The column is visible by default.
  • Added the Experimental Features flag to global settings.
  • Added support for setting default RDP thick client properties in generated .rdp files. See "Setting RDP Thick Client Properties" under global Server Settings for supported fields and instructions.
  • Added support for injecting custom DPI and display scaling parameters (dpi, width, height) into connection_info.guac.settings during creation of RDP-based Guacamole sessions. When missing from Server connection_info settings, Kasm will auto-populate these values based on the user's browser display environment.
  • Improved /opt/kasm/bin/restart and /opt/kasm/bin/stop to remove containers by default when stopping services. Multiple mode flags are provided, use --help with each script for more information.
  • Added support docs for RHEL 10.
  • Allow admins to force persistent profiles on container Workspaces. See "Enable Workspace Persistent Profile" in Container Settings.
  • Added support for client-based automatic sizing and scaling in RDP Native client sessions. Enabled allow_scale_factor in RDP Gateway. Updated FAQ notes for forced settings: Why does the desktopscalefactor property in the .rdp file not seem to have an effect?. Note: the desktopscalefactor rdp thick client property is deprecated and will be removed soon.
  • Added general support for importing Ed25519 keys and made Ed25519 the default format for user SSH key generation.
  • Added the ability to capture logs generated from within a Kasm workspace to enable troubleshooting failure conditions. To use this feature set enable_container_logging to True in the Group Settings.
  • Added support for systemd integration. More here.

• Infrastructure Support Enhancements

  • Improved performance of orphan server cleanup on autoscale pools that have a large number of servers.
  • Added API Token Lifespan and API Token Refresh Leeway Server Settings.
  • Improved session launch times on deployments that have a large number of servers.
  • Increased the robustness of the autoscaling system and increased its efficiency when handling errors from Autoscale Providers.
  • Added authentication to improve security of Native Kasm Logging.
  • Removed the hardcoded Splunk prefix for HEC logging tokens, enabling integrations with logging endpoints that do not use the prefix. Note: extant Splunk tokens will have the prefix added if necessary during Kasm upgrade.
  • Updated the Docker Compose version used by the installer (2.38.1).
  • Added "Draining" mode to Kasm Agents.
  • Added automatic rotation of Autoscaled Kasm Agents.
  • Enhanced container healthcheck functionality with configurable timeout settings, backoffs and better error handling for service health validation.

• Kasm Image Enhancements

  • Updated all images to KasmVNC 1.4.0, providing major improvements to containerized session streaming.
  • Removed file manager on browser-based images to remove the avenue of accessing the file system and/or breaking out of the browser in browser isolation use cases.
  • Added support for Vulkan GPU acceleration for Chromium based browsers.
  • Added Debian Trixie Core image for x86_64/aarch64
  • Added Debain Trixie Desktop image for x86_64/aarch64
  • Added Fedora 41 Desktop image for x86_64/aarch64
  • Added Obsidian image for x86_64/aarch64
  • Updated GIMP to version 3, bringing the latest features and performance improvements to the GIMP workspace
  • Added Cyberbro image for x86_64/aarch64
  • Added back SuperTuxKart image to our registry

• Kasm Desktop Service

  • Fixed the installer to properly wait for existing service to stop before updating files, preventing partial upgrades.
  • Added automatic service version generation and reporting. The service version for each host is displayed in the admin UI Servers table, facilitating the management of large Windows deployments.
  • The installer now returns proper exit codes on failure, enabling autoscale scripts to detect failed deployments.
  • Fixed a bug where the service reported the system's FQDN instead of a hostname, which could cause the API service to throw an exception when the FQDN exceeded the hostname length limit of 64 characters.

• Deprecations

  • The Share Server was removed in this release, which caused several other changes beyond the removal of the share service:
    • The Redis service is no longer needed and has been removed.
    • Chat functionality has been removed from shared sessions.
      • disable_chat has been replaced with disable_viewers in the Developer API.
      • ChatSFX has been removed from the user profile.
      • chat_history_messages has been removed from group settings.
  • Removed linuxserver.io and Twingate spotlight registries as they are either no longer maintained or will be unmaintained in the near future.

• Custom Branding Enhancements

  • The label for the username input field ("Username Input Label") on the login page can now be customized through Application Branding.

• Bugfixes

  • Fixed the bug where, if a session times out on launch, the redirect to the dashboard removes the error message before it can be read.
  • Fixed the bug causing the db healthcheck to log an erro...

1.18.0-ls105

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.18.0-ls105/index.html

LinuxServer Changes:

• Pin docker to v28 to avoid API deprecation issues by @thespad in #101

Full Changelog: 1.18.0-ls104...1.18.0-ls105

Remote Changes:

What's new in Kasm 1.18.0

Highlights

• Updated Apache Guacamole to version 1.5.5. The changelog can be found at https://guacamole.apache.org/releases/1.5.5/ .
• Support for bulk imports of Users and Servers, through both the admin interface and developer API.
• Added support for applying labels to Servers, Agents, Server Pools and Zones.
• Added support for Including / Excluding Labels when Launching Container and Server Pool Workspaces.
• Added the ability to create a server template that can be used to enroll multiple servers using a single server enrollment token.
• User-Server Assignment in Server Pools. Users can be mapped to specific static Servers reserved for their Sessions. More here.
• Added support for Smart Card Pass-through in container-based workspaces using the Kasm Native Smartcard Client for Windows and macOS.

Features

• Usability Enhancements

  • Increased maximum supported clipboard size for RDP workspaces to 25MB.
  • Added the hostname to heartbeat logs to make it easier to identify which server or agent a log is related to.
  • Updated Docker Run Config to support variable substitution. Expanded variables for storage mapping and volume mapping to also support custom attributes 1, 2, and 3 defined for the user.
  • When deleting OpenID or SAML configs we now make it clear that this will delete any users associated with the config and include an indication of how many users will be affected. In addition you can now edit an OpenID or SAML config to see the list of users associated with the config.
  • Support for rolling tags for Kasm Docker Plugins. The Kasm start script now upgrades Kasm plugins that use rolling tags. This feature includes scripts for admin plugin management---more info here: Plugin Management.
  • Made User searching case-insensitive in both the main User list view and in Groups.
  • Servers can now be assigned to Pools from the Servers list table.
  • Added Pool (database) ID as a display column in the Pool list view. The column is visible by default.
  • Added the Experimental Features flag to global settings.
  • Added support for setting default RDP thick client properties in generated .rdp files. See "Setting RDP Thick Client Properties" under global Server Settings for supported fields and instructions.
  • Added support for injecting custom DPI and display scaling parameters (dpi, width, height) into connection_info.guac.settings during creation of RDP-based Guacamole sessions. When missing from Server connection_info settings, Kasm will auto-populate these values based on the user's browser display environment.
  • Improved /opt/kasm/bin/restart and /opt/kasm/bin/stop to remove containers by default when stopping services. Multiple mode flags are provided, use --help with each script for more information.
  • Added support docs for RHEL 10.
  • Allow admins to force persistent profiles on container Workspaces. See "Enable Workspace Persistent Profile" in Container Settings.
  • Added support for client-based automatic sizing and scaling in RDP Native client sessions. Enabled allow_scale_factor in RDP Gateway. Updated FAQ notes for forced settings: Why does the desktopscalefactor property in the .rdp file not seem to have an effect?. Note: the desktopscalefactor rdp thick client property is deprecated and will be removed soon.
  • Added general support for importing Ed25519 keys and made Ed25519 the default format for user SSH key generation.
  • Added the ability to capture logs generated from within a Kasm workspace to enable troubleshooting failure conditions. To use this feature set enable_container_logging to True in the Group Settings.
  • Added support for systemd integration. More here.

• Infrastructure Support Enhancements

  • Improved performance of orphan server cleanup on autoscale pools that have a large number of servers.
  • Added API Token Lifespan and API Token Refresh Leeway Server Settings.
  • Improved session launch times on deployments that have a large number of servers.
  • Increased the robustness of the autoscaling system and increased its efficiency when handling errors from Autoscale Providers.
  • Added authentication to improve security of Native Kasm Logging.
  • Removed the hardcoded Splunk prefix for HEC logging tokens, enabling integrations with logging endpoints that do not use the prefix. Note: extant Splunk tokens will have the prefix added if necessary during Kasm upgrade.
  • Updated the Docker Compose version used by the installer (2.38.1).
  • Added "Draining" mode to Kasm Agents.
  • Added automatic rotation of Autoscaled Kasm Agents.
  • Enhanced container healthcheck functionality with configurable timeout settings, backoffs and better error handling for service health validation.

• Kasm Image Enhancements

  • Updated all images to KasmVNC 1.4.0, providing major improvements to containerized session streaming.
  • Removed file manager on browser-based images to remove the avenue of accessing the file system and/or breaking out of the browser in browser isolation use cases.
  • Added support for Vulkan GPU acceleration for Chromium based browsers.
  • Added Debian Trixie Core image for x86_64/aarch64
  • Added Debain Trixie Desktop image for x86_64/aarch64
  • Added Fedora 41 Desktop image for x86_64/aarch64
  • Added Obsidian image for x86_64/aarch64
  • Updated GIMP to version 3, bringing the latest features and performance improvements to the GIMP workspace
  • Added Cyberbro image for x86_64/aarch64
  • Added back SuperTuxKart image to our registry

• Kasm Desktop Service

  • Fixed the installer to properly wait for existing service to stop before updating files, preventing partial upgrades.
  • Added automatic service version generation and reporting. The service version for each host is displayed in the admin UI Servers table, facilitating the management of large Windows deployments.
  • The installer now returns proper exit codes on failure, enabling autoscale scripts to detect failed deployments.
  • Fixed a bug where the service reported the system's FQDN instead of a hostname, which could cause the API service to throw an exception when the FQDN exceeded the hostname length limit of 64 characters.

• Deprecations

  • The Share Server was removed in this release, which caused several other changes beyond the removal of the share service:
    • The Redis service is no longer needed and has been removed.
    • Chat functionality has been removed from shared sessions.
      • disable_chat has been replaced with disable_viewers in the Developer API.
      • ChatSFX has been removed from the user profile.
      • chat_history_messages has been removed from group settings.
  • Removed linuxserver.io and Twingate spotlight registries as they are either no longer maintained or will be unmaintained in the near future.

• Custom Branding Enhancements

  • The label for the username input field ("Username Input Label") on the login page can now be customized through Application Branding.

• Bugfixes

  • Fixed the bug where, if a session times out on launch, the redirect to t...

1.18.0-ls104

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.18.0-ls104/index.html

LinuxServer Changes:

Full Changelog: 1.18.0-ls103...1.18.0-ls104

Remote Changes:

What's new in Kasm 1.18.0

Highlights

• Updated Apache Guacamole to version 1.5.5. The changelog can be found at https://guacamole.apache.org/releases/1.5.5/ .
• Support for bulk imports of Users and Servers, through both the admin interface and developer API.
• Added support for applying labels to Servers, Agents, Server Pools and Zones.
• Added support for Including / Excluding Labels when Launching Container and Server Pool Workspaces.
• Added the ability to create a server template that can be used to enroll multiple servers using a single server enrollment token.
• User-Server Assignment in Server Pools. Users can be mapped to specific static Servers reserved for their Sessions. More here.
• Added support for Smart Card Pass-through in container-based workspaces using the Kasm Native Smartcard Client for Windows and macOS.

Features

• Usability Enhancements

  • Increased maximum supported clipboard size for RDP workspaces to 25MB.
  • Added the hostname to heartbeat logs to make it easier to identify which server or agent a log is related to.
  • Updated Docker Run Config to support variable substitution. Expanded variables for storage mapping and volume mapping to also support custom attributes 1, 2, and 3 defined for the user.
  • When deleting OpenID or SAML configs we now make it clear that this will delete any users associated with the config and include an indication of how many users will be affected. In addition you can now edit an OpenID or SAML config to see the list of users associated with the config.
  • Support for rolling tags for Kasm Docker Plugins. The Kasm start script now upgrades Kasm plugins that use rolling tags. This feature includes scripts for admin plugin management---more info here: Plugin Management.
  • Made User searching case-insensitive in both the main User list view and in Groups.
  • Servers can now be assigned to Pools from the Servers list table.
  • Added Pool (database) ID as a display column in the Pool list view. The column is visible by default.
  • Added the Experimental Features flag to global settings.
  • Added support for setting default RDP thick client properties in generated .rdp files. See "Setting RDP Thick Client Properties" under global Server Settings for supported fields and instructions.
  • Added support for injecting custom DPI and display scaling parameters (dpi, width, height) into connection_info.guac.settings during creation of RDP-based Guacamole sessions. When missing from Server connection_info settings, Kasm will auto-populate these values based on the user's browser display environment.
  • Improved /opt/kasm/bin/restart and /opt/kasm/bin/stop to remove containers by default when stopping services. Multiple mode flags are provided, use --help with each script for more information.
  • Added support docs for RHEL 10.
  • Allow admins to force persistent profiles on container Workspaces. See "Enable Workspace Persistent Profile" in Container Settings.
  • Added support for client-based automatic sizing and scaling in RDP Native client sessions. Enabled allow_scale_factor in RDP Gateway. Updated FAQ notes for forced settings: Why does the desktopscalefactor property in the .rdp file not seem to have an effect?. Note: the desktopscalefactor rdp thick client property is deprecated and will be removed soon.
  • Added general support for importing Ed25519 keys and made Ed25519 the default format for user SSH key generation.
  • Added the ability to capture logs generated from within a Kasm workspace to enable troubleshooting failure conditions. To use this feature set enable_container_logging to True in the Group Settings.
  • Added support for systemd integration. More here.

• Infrastructure Support Enhancements

  • Improved performance of orphan server cleanup on autoscale pools that have a large number of servers.
  • Added API Token Lifespan and API Token Refresh Leeway Server Settings.
  • Improved session launch times on deployments that have a large number of servers.
  • Increased the robustness of the autoscaling system and increased its efficiency when handling errors from Autoscale Providers.
  • Added authentication to improve security of Native Kasm Logging.
  • Removed the hardcoded Splunk prefix for HEC logging tokens, enabling integrations with logging endpoints that do not use the prefix. Note: extant Splunk tokens will have the prefix added if necessary during Kasm upgrade.
  • Updated the Docker Compose version used by the installer (2.38.1).
  • Added "Draining" mode to Kasm Agents.
  • Added automatic rotation of Autoscaled Kasm Agents.
  • Enhanced container healthcheck functionality with configurable timeout settings, backoffs and better error handling for service health validation.

• Kasm Image Enhancements

  • Updated all images to KasmVNC 1.4.0, providing major improvements to containerized session streaming.
  • Removed file manager on browser-based images to remove the avenue of accessing the file system and/or breaking out of the browser in browser isolation use cases.
  • Added support for Vulkan GPU acceleration for Chromium based browsers.
  • Added Debian Trixie Core image for x86_64/aarch64
  • Added Debain Trixie Desktop image for x86_64/aarch64
  • Added Fedora 41 Desktop image for x86_64/aarch64
  • Added Obsidian image for x86_64/aarch64
  • Updated GIMP to version 3, bringing the latest features and performance improvements to the GIMP workspace
  • Added Cyberbro image for x86_64/aarch64
  • Added back SuperTuxKart image to our registry

• Kasm Desktop Service

  • Fixed the installer to properly wait for existing service to stop before updating files, preventing partial upgrades.
  • Added automatic service version generation and reporting. The service version for each host is displayed in the admin UI Servers table, facilitating the management of large Windows deployments.
  • The installer now returns proper exit codes on failure, enabling autoscale scripts to detect failed deployments.
  • Fixed a bug where the service reported the system's FQDN instead of a hostname, which could cause the API service to throw an exception when the FQDN exceeded the hostname length limit of 64 characters.

• Deprecations

  • The Share Server was removed in this release, which caused several other changes beyond the removal of the share service:
    • The Redis service is no longer needed and has been removed.
    • Chat functionality has been removed from shared sessions.
      • disable_chat has been replaced with disable_viewers in the Developer API.
      • ChatSFX has been removed from the user profile.
      • chat_history_messages has been removed from group settings.
  • Removed linuxserver.io and Twingate spotlight registries as they are either no longer maintained or will be unmaintained in the near future.

• Custom Branding Enhancements

  • The label for the username input field ("Username Input Label") on the login page can now be customized through Application Branding.

• Bugfixes

  • Fixed the bug where, if a session times out on launch, the redirect to the dashboard removes the error message before it can be read.
  • Fixed the bug causing the db healthcheck to log an erro...

1.18.0-ls103

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.18.0-ls103/index.html

LinuxServer Changes:

Full Changelog: 1.18.0-ls102...1.18.0-ls103

Remote Changes:

What's new in Kasm 1.18.0

Highlights

• Updated Apache Guacamole to version 1.5.5. The changelog can be found at https://guacamole.apache.org/releases/1.5.5/ .
• Support for bulk imports of Users and Servers, through both the admin interface and developer API.
• Added support for applying labels to Servers, Agents, Server Pools and Zones.
• Added support for Including / Excluding Labels when Launching Container and Server Pool Workspaces.
• Added the ability to create a server template that can be used to enroll multiple servers using a single server enrollment token.
• User-Server Assignment in Server Pools. Users can be mapped to specific static Servers reserved for their Sessions. More here.
• Added support for Smart Card Pass-through in container-based workspaces using the Kasm Native Smartcard Client for Windows and macOS.

Features

• Usability Enhancements

  • Increased maximum supported clipboard size for RDP workspaces to 25MB.
  • Added the hostname to heartbeat logs to make it easier to identify which server or agent a log is related to.
  • Updated Docker Run Config to support variable substitution. Expanded variables for storage mapping and volume mapping to also support custom attributes 1, 2, and 3 defined for the user.
  • When deleting OpenID or SAML configs we now make it clear that this will delete any users associated with the config and include an indication of how many users will be affected. In addition you can now edit an OpenID or SAML config to see the list of users associated with the config.
  • Support for rolling tags for Kasm Docker Plugins. The Kasm start script now upgrades Kasm plugins that use rolling tags. This feature includes scripts for admin plugin management---more info here: Plugin Management.
  • Made User searching case-insensitive in both the main User list view and in Groups.
  • Servers can now be assigned to Pools from the Servers list table.
  • Added Pool (database) ID as a display column in the Pool list view. The column is visible by default.
  • Added the Experimental Features flag to global settings.
  • Added support for setting default RDP thick client properties in generated .rdp files. See "Setting RDP Thick Client Properties" under global Server Settings for supported fields and instructions.
  • Added support for injecting custom DPI and display scaling parameters (dpi, width, height) into connection_info.guac.settings during creation of RDP-based Guacamole sessions. When missing from Server connection_info settings, Kasm will auto-populate these values based on the user's browser display environment.
  • Improved /opt/kasm/bin/restart and /opt/kasm/bin/stop to remove containers by default when stopping services. Multiple mode flags are provided, use --help with each script for more information.
  • Added support docs for RHEL 10.
  • Allow admins to force persistent profiles on container Workspaces. See "Enable Workspace Persistent Profile" in Container Settings.
  • Added support for client-based automatic sizing and scaling in RDP Native client sessions. Enabled allow_scale_factor in RDP Gateway. Updated FAQ notes for forced settings: Why does the desktopscalefactor property in the .rdp file not seem to have an effect?. Note: the desktopscalefactor rdp thick client property is deprecated and will be removed soon.
  • Added general support for importing Ed25519 keys and made Ed25519 the default format for user SSH key generation.
  • Added the ability to capture logs generated from within a Kasm workspace to enable troubleshooting failure conditions. To use this feature set enable_container_logging to True in the Group Settings.
  • Added support for systemd integration. More here.

• Infrastructure Support Enhancements

  • Improved performance of orphan server cleanup on autoscale pools that have a large number of servers.
  • Added API Token Lifespan and API Token Refresh Leeway Server Settings.
  • Improved session launch times on deployments that have a large number of servers.
  • Increased the robustness of the autoscaling system and increased its efficiency when handling errors from Autoscale Providers.
  • Added authentication to improve security of Native Kasm Logging.
  • Removed the hardcoded Splunk prefix for HEC logging tokens, enabling integrations with logging endpoints that do not use the prefix. Note: extant Splunk tokens will have the prefix added if necessary during Kasm upgrade.
  • Updated the Docker Compose version used by the installer (2.38.1).
  • Added "Draining" mode to Kasm Agents.
  • Added automatic rotation of Autoscaled Kasm Agents.
  • Enhanced container healthcheck functionality with configurable timeout settings, backoffs and better error handling for service health validation.

• Kasm Image Enhancements

  • Updated all images to KasmVNC 1.4.0, providing major improvements to containerized session streaming.
  • Removed file manager on browser-based images to remove the avenue of accessing the file system and/or breaking out of the browser in browser isolation use cases.
  • Added support for Vulkan GPU acceleration for Chromium based browsers.
  • Added Debian Trixie Core image for x86_64/aarch64
  • Added Debain Trixie Desktop image for x86_64/aarch64
  • Added Fedora 41 Desktop image for x86_64/aarch64
  • Added Obsidian image for x86_64/aarch64
  • Updated GIMP to version 3, bringing the latest features and performance improvements to the GIMP workspace
  • Added Cyberbro image for x86_64/aarch64
  • Added back SuperTuxKart image to our registry

• Kasm Desktop Service

  • Fixed the installer to properly wait for existing service to stop before updating files, preventing partial upgrades.
  • Added automatic service version generation and reporting. The service version for each host is displayed in the admin UI Servers table, facilitating the management of large Windows deployments.
  • The installer now returns proper exit codes on failure, enabling autoscale scripts to detect failed deployments.
  • Fixed a bug where the service reported the system's FQDN instead of a hostname, which could cause the API service to throw an exception when the FQDN exceeded the hostname length limit of 64 characters.

• Deprecations

  • The Share Server was removed in this release, which caused several other changes beyond the removal of the share service:
    • The Redis service is no longer needed and has been removed.
    • Chat functionality has been removed from shared sessions.
      • disable_chat has been replaced with disable_viewers in the Developer API.
      • ChatSFX has been removed from the user profile.
      • chat_history_messages has been removed from group settings.
  • Removed linuxserver.io and Twingate spotlight registries as they are either no longer maintained or will be unmaintained in the near future.

• Custom Branding Enhancements

  • The label for the username input field ("Username Input Label") on the login page can now be customized through Application Branding.

• Bugfixes

  • Fixed the bug where, if a session times out on launch, the redirect to the dashboard removes the error message before it can be read.
  • Fixed the bug causing the db healthcheck to log an erro...

1.18.0-ls102

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.18.0-ls102/index.html

LinuxServer Changes:

• Update build version output and maintainer by @thespad in #99

Full Changelog: 1.18.0-ls101...1.18.0-ls102

Remote Changes:

What's new in Kasm 1.18.0

Highlights

• Updated Apache Guacamole to version 1.5.5. The changelog can be found at https://guacamole.apache.org/releases/1.5.5/ .
• Support for bulk imports of Users and Servers, through both the admin interface and developer API.
• Added support for applying labels to Servers, Agents, Server Pools and Zones.
• Added support for Including / Excluding Labels when Launching Container and Server Pool Workspaces.
• Added the ability to create a server template that can be used to enroll multiple servers using a single server enrollment token.
• User-Server Assignment in Server Pools. Users can be mapped to specific static Servers reserved for their Sessions. More here.
• Added support for Smart Card Pass-through in container-based workspaces using the Kasm Native Smartcard Client for Windows and macOS.

Features

• Usability Enhancements

  • Increased maximum supported clipboard size for RDP workspaces to 25MB.
  • Added the hostname to heartbeat logs to make it easier to identify which server or agent a log is related to.
  • Updated Docker Run Config to support variable substitution. Expanded variables for storage mapping and volume mapping to also support custom attributes 1, 2, and 3 defined for the user.
  • When deleting OpenID or SAML configs we now make it clear that this will delete any users associated with the config and include an indication of how many users will be affected. In addition you can now edit an OpenID or SAML config to see the list of users associated with the config.
  • Support for rolling tags for Kasm Docker Plugins. The Kasm start script now upgrades Kasm plugins that use rolling tags. This feature includes scripts for admin plugin management---more info here: Plugin Management.
  • Made User searching case-insensitive in both the main User list view and in Groups.
  • Servers can now be assigned to Pools from the Servers list table.
  • Added Pool (database) ID as a display column in the Pool list view. The column is visible by default.
  • Added the Experimental Features flag to global settings.
  • Added support for setting default RDP thick client properties in generated .rdp files. See "Setting RDP Thick Client Properties" under global Server Settings for supported fields and instructions.
  • Added support for injecting custom DPI and display scaling parameters (dpi, width, height) into connection_info.guac.settings during creation of RDP-based Guacamole sessions. When missing from Server connection_info settings, Kasm will auto-populate these values based on the user's browser display environment.
  • Improved /opt/kasm/bin/restart and /opt/kasm/bin/stop to remove containers by default when stopping services. Multiple mode flags are provided, use --help with each script for more information.
  • Added support docs for RHEL 10.
  • Allow admins to force persistent profiles on container Workspaces. See "Enable Workspace Persistent Profile" in Container Settings.
  • Added support for client-based automatic sizing and scaling in RDP Native client sessions. Enabled allow_scale_factor in RDP Gateway. Updated FAQ notes for forced settings: Why does the desktopscalefactor property in the .rdp file not seem to have an effect?. Note: the desktopscalefactor rdp thick client property is deprecated and will be removed soon.
  • Added general support for importing Ed25519 keys and made Ed25519 the default format for user SSH key generation.
  • Added the ability to capture logs generated from within a Kasm workspace to enable troubleshooting failure conditions. To use this feature set enable_container_logging to True in the Group Settings.
  • Added support for systemd integration. More here.

• Infrastructure Support Enhancements

  • Improved performance of orphan server cleanup on autoscale pools that have a large number of servers.
  • Added API Token Lifespan and API Token Refresh Leeway Server Settings.
  • Improved session launch times on deployments that have a large number of servers.
  • Increased the robustness of the autoscaling system and increased its efficiency when handling errors from Autoscale Providers.
  • Added authentication to improve security of Native Kasm Logging.
  • Removed the hardcoded Splunk prefix for HEC logging tokens, enabling integrations with logging endpoints that do not use the prefix. Note: extant Splunk tokens will have the prefix added if necessary during Kasm upgrade.
  • Updated the Docker Compose version used by the installer (2.38.1).
  • Added "Draining" mode to Kasm Agents.
  • Added automatic rotation of Autoscaled Kasm Agents.
  • Enhanced container healthcheck functionality with configurable timeout settings, backoffs and better error handling for service health validation.

• Kasm Image Enhancements

  • Updated all images to KasmVNC 1.4.0, providing major improvements to containerized session streaming.
  • Removed file manager on browser-based images to remove the avenue of accessing the file system and/or breaking out of the browser in browser isolation use cases.
  • Added support for Vulkan GPU acceleration for Chromium based browsers.
  • Added Debian Trixie Core image for x86_64/aarch64
  • Added Debain Trixie Desktop image for x86_64/aarch64
  • Added Fedora 41 Desktop image for x86_64/aarch64
  • Added Obsidian image for x86_64/aarch64
  • Updated GIMP to version 3, bringing the latest features and performance improvements to the GIMP workspace
  • Added Cyberbro image for x86_64/aarch64
  • Added back SuperTuxKart image to our registry

• Kasm Desktop Service

  • Fixed the installer to properly wait for existing service to stop before updating files, preventing partial upgrades.
  • Added automatic service version generation and reporting. The service version for each host is displayed in the admin UI Servers table, facilitating the management of large Windows deployments.
  • The installer now returns proper exit codes on failure, enabling autoscale scripts to detect failed deployments.
  • Fixed a bug where the service reported the system's FQDN instead of a hostname, which could cause the API service to throw an exception when the FQDN exceeded the hostname length limit of 64 characters.

• Deprecations

  • The Share Server was removed in this release, which caused several other changes beyond the removal of the share service:
    • The Redis service is no longer needed and has been removed.
    • Chat functionality has been removed from shared sessions.
      • disable_chat has been replaced with disable_viewers in the Developer API.
      • ChatSFX has been removed from the user profile.
      • chat_history_messages has been removed from group settings.
  • Removed linuxserver.io and Twingate spotlight registries as they are either no longer maintained or will be unmaintained in the near future.

• Custom Branding Enhancements

  • The label for the username input field ("Username Input Label") on the login page can now be customized through Application Branding.

• Bugfixes

  • Fixed the bug where, if a session times out on launch, the redirect to the dashb...

1.18.0-ls101

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.18.0-ls101/index.html

LinuxServer Changes:

Full Changelog: 1.18.0-ls100...1.18.0-ls101

Remote Changes:

What's new in Kasm 1.18.0

Highlights

• Updated Apache Guacamole to version 1.5.5. The changelog can be found at https://guacamole.apache.org/releases/1.5.5/ .
• Support for bulk imports of Users and Servers, through both the admin interface and developer API.
• Added support for applying labels to Servers, Agents, Server Pools and Zones.
• Added support for Including / Excluding Labels when Launching Container and Server Pool Workspaces.
• Added the ability to create a server template that can be used to enroll multiple servers using a single server enrollment token.
• User-Server Assignment in Server Pools. Users can be mapped to specific static Servers reserved for their Sessions. More here.
• Added support for Smart Card Pass-through in container-based workspaces using the Kasm Native Smartcard Client for Windows and macOS.

Features

• Usability Enhancements

  • Increased maximum supported clipboard size for RDP workspaces to 25MB.
  • Added the hostname to heartbeat logs to make it easier to identify which server or agent a log is related to.
  • Updated Docker Run Config to support variable substitution. Expanded variables for storage mapping and volume mapping to also support custom attributes 1, 2, and 3 defined for the user.
  • When deleting OpenID or SAML configs we now make it clear that this will delete any users associated with the config and include an indication of how many users will be affected. In addition you can now edit an OpenID or SAML config to see the list of users associated with the config.
  • Support for rolling tags for Kasm Docker Plugins. The Kasm start script now upgrades Kasm plugins that use rolling tags. This feature includes scripts for admin plugin management---more info here: Plugin Management.
  • Made User searching case-insensitive in both the main User list view and in Groups.
  • Servers can now be assigned to Pools from the Servers list table.
  • Added Pool (database) ID as a display column in the Pool list view. The column is visible by default.
  • Added the Experimental Features flag to global settings.
  • Added support for setting default RDP thick client properties in generated .rdp files. See "Setting RDP Thick Client Properties" under global Server Settings for supported fields and instructions.
  • Added support for injecting custom DPI and display scaling parameters (dpi, width, height) into connection_info.guac.settings during creation of RDP-based Guacamole sessions. When missing from Server connection_info settings, Kasm will auto-populate these values based on the user's browser display environment.
  • Improved /opt/kasm/bin/restart and /opt/kasm/bin/stop to remove containers by default when stopping services. Multiple mode flags are provided, use --help with each script for more information.
  • Added support docs for RHEL 10.
  • Allow admins to force persistent profiles on container Workspaces. See "Enable Workspace Persistent Profile" in Container Settings.
  • Added support for client-based automatic sizing and scaling in RDP Native client sessions. Enabled allow_scale_factor in RDP Gateway. Updated FAQ notes for forced settings: Why does the desktopscalefactor property in the .rdp file not seem to have an effect?. Note: the desktopscalefactor rdp thick client property is deprecated and will be removed soon.
  • Added general support for importing Ed25519 keys and made Ed25519 the default format for user SSH key generation.
  • Added the ability to capture logs generated from within a Kasm workspace to enable troubleshooting failure conditions. To use this feature set enable_container_logging to True in the Group Settings.
  • Added support for systemd integration. More here.

• Infrastructure Support Enhancements

  • Improved performance of orphan server cleanup on autoscale pools that have a large number of servers.
  • Added API Token Lifespan and API Token Refresh Leeway Server Settings.
  • Improved session launch times on deployments that have a large number of servers.
  • Increased the robustness of the autoscaling system and increased its efficiency when handling errors from Autoscale Providers.
  • Added authentication to improve security of Native Kasm Logging.
  • Removed the hardcoded Splunk prefix for HEC logging tokens, enabling integrations with logging endpoints that do not use the prefix. Note: extant Splunk tokens will have the prefix added if necessary during Kasm upgrade.
  • Updated the Docker Compose version used by the installer (2.38.1).
  • Added "Draining" mode to Kasm Agents.
  • Added automatic rotation of Autoscaled Kasm Agents.
  • Enhanced container healthcheck functionality with configurable timeout settings, backoffs and better error handling for service health validation.

• Kasm Image Enhancements

  • Updated all images to KasmVNC 1.4.0, providing major improvements to containerized session streaming.
  • Removed file manager on browser-based images to remove the avenue of accessing the file system and/or breaking out of the browser in browser isolation use cases.
  • Added support for Vulkan GPU acceleration for Chromium based browsers.
  • Added Debian Trixie Core image for x86_64/aarch64
  • Added Debain Trixie Desktop image for x86_64/aarch64
  • Added Fedora 41 Desktop image for x86_64/aarch64
  • Added Obsidian image for x86_64/aarch64
  • Updated GIMP to version 3, bringing the latest features and performance improvements to the GIMP workspace
  • Added Cyberbro image for x86_64/aarch64
  • Added back SuperTuxKart image to our registry

• Kasm Desktop Service

  • Fixed the installer to properly wait for existing service to stop before updating files, preventing partial upgrades.
  • Added automatic service version generation and reporting. The service version for each host is displayed in the admin UI Servers table, facilitating the management of large Windows deployments.
  • The installer now returns proper exit codes on failure, enabling autoscale scripts to detect failed deployments.
  • Fixed a bug where the service reported the system's FQDN instead of a hostname, which could cause the API service to throw an exception when the FQDN exceeded the hostname length limit of 64 characters.

• Deprecations

  • The Share Server was removed in this release, which caused several other changes beyond the removal of the share service:
    • The Redis service is no longer needed and has been removed.
    • Chat functionality has been removed from shared sessions.
      • disable_chat has been replaced with disable_viewers in the Developer API.
      • ChatSFX has been removed from the user profile.
      • chat_history_messages has been removed from group settings.
  • Removed linuxserver.io and Twingate spotlight registries as they are either no longer maintained or will be unmaintained in the near future.

• Custom Branding Enhancements

  • The label for the username input field ("Username Input Label") on the login page can now be customized through Application Branding.

• Bugfixes

  • Fixed the bug where, if a session times out on launch, the redirect to the dashboard removes the error message before it can be read.
  • Fixed the bug causing the db healthcheck to log an erro...

1.18.0-ls100

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.18.0-ls100/index.html

LinuxServer Changes:

• Tweaks for 1.18.0 support by @thespad in #97

Full Changelog: 1.18.0-ls99...1.18.0-ls100

Remote Changes:

What's new in Kasm 1.18.0

Highlights

• Updated Apache Guacamole to version 1.5.5. The changelog can be found at https://guacamole.apache.org/releases/1.5.5/ .
• Support for bulk imports of Users and Servers, through both the admin interface and developer API.
• Added support for applying labels to Servers, Agents, Server Pools and Zones.
• Added support for Including / Excluding Labels when Launching Container and Server Pool Workspaces.
• Added the ability to create a server template that can be used to enroll multiple servers using a single server enrollment token.
• User-Server Assignment in Server Pools. Users can be mapped to specific static Servers reserved for their Sessions. More here.
• Added support for Smart Card Pass-through in container-based workspaces using the Kasm Native Smartcard Client for Windows and macOS.

Features

• Usability Enhancements

  • Increased maximum supported clipboard size for RDP workspaces to 25MB.
  • Added the hostname to heartbeat logs to make it easier to identify which server or agent a log is related to.
  • Updated Docker Run Config to support variable substitution. Expanded variables for storage mapping and volume mapping to also support custom attributes 1, 2, and 3 defined for the user.
  • When deleting OpenID or SAML configs we now make it clear that this will delete any users associated with the config and include an indication of how many users will be affected. In addition you can now edit an OpenID or SAML config to see the list of users associated with the config.
  • Support for rolling tags for Kasm Docker Plugins. The Kasm start script now upgrades Kasm plugins that use rolling tags. This feature includes scripts for admin plugin management---more info here: Plugin Management.
  • Made User searching case-insensitive in both the main User list view and in Groups.
  • Servers can now be assigned to Pools from the Servers list table.
  • Added Pool (database) ID as a display column in the Pool list view. The column is visible by default.
  • Added the Experimental Features flag to global settings.
  • Added support for setting default RDP thick client properties in generated .rdp files. See "Setting RDP Thick Client Properties" under global Server Settings for supported fields and instructions.
  • Added support for injecting custom DPI and display scaling parameters (dpi, width, height) into connection_info.guac.settings during creation of RDP-based Guacamole sessions. When missing from Server connection_info settings, Kasm will auto-populate these values based on the user's browser display environment.
  • Improved /opt/kasm/bin/restart and /opt/kasm/bin/stop to remove containers by default when stopping services. Multiple mode flags are provided, use --help with each script for more information.
  • Added support docs for RHEL 10.
  • Allow admins to force persistent profiles on container Workspaces. See "Enable Workspace Persistent Profile" in Container Settings.
  • Added support for client-based automatic sizing and scaling in RDP Native client sessions. Enabled allow_scale_factor in RDP Gateway. Updated FAQ notes for forced settings: Why does the desktopscalefactor property in the .rdp file not seem to have an effect?. Note: the desktopscalefactor rdp thick client property is deprecated and will be removed soon.
  • Added general support for importing Ed25519 keys and made Ed25519 the default format for user SSH key generation.
  • Added the ability to capture logs generated from within a Kasm workspace to enable troubleshooting failure conditions. To use this feature set enable_container_logging to True in the Group Settings.
  • Added support for systemd integration. More here.

• Infrastructure Support Enhancements

  • Improved performance of orphan server cleanup on autoscale pools that have a large number of servers.
  • Added API Token Lifespan and API Token Refresh Leeway Server Settings.
  • Improved session launch times on deployments that have a large number of servers.
  • Increased the robustness of the autoscaling system and increased its efficiency when handling errors from Autoscale Providers.
  • Added authentication to improve security of Native Kasm Logging.
  • Removed the hardcoded Splunk prefix for HEC logging tokens, enabling integrations with logging endpoints that do not use the prefix. Note: extant Splunk tokens will have the prefix added if necessary during Kasm upgrade.
  • Updated the Docker Compose version used by the installer (2.38.1).
  • Added "Draining" mode to Kasm Agents.
  • Added automatic rotation of Autoscaled Kasm Agents.
  • Enhanced container healthcheck functionality with configurable timeout settings, backoffs and better error handling for service health validation.

• Kasm Image Enhancements

  • Updated all images to KasmVNC 1.4.0, providing major improvements to containerized session streaming.
  • Removed file manager on browser-based images to remove the avenue of accessing the file system and/or breaking out of the browser in browser isolation use cases.
  • Added support for Vulkan GPU acceleration for Chromium based browsers.
  • Added Debian Trixie Core image for x86_64/aarch64
  • Added Debain Trixie Desktop image for x86_64/aarch64
  • Added Fedora 41 Desktop image for x86_64/aarch64
  • Added Obsidian image for x86_64/aarch64
  • Updated GIMP to version 3, bringing the latest features and performance improvements to the GIMP workspace
  • Added Cyberbro image for x86_64/aarch64
  • Added back SuperTuxKart image to our registry

• Kasm Desktop Service

  • Fixed the installer to properly wait for existing service to stop before updating files, preventing partial upgrades.
  • Added automatic service version generation and reporting. The service version for each host is displayed in the admin UI Servers table, facilitating the management of large Windows deployments.
  • The installer now returns proper exit codes on failure, enabling autoscale scripts to detect failed deployments.
  • Fixed a bug where the service reported the system's FQDN instead of a hostname, which could cause the API service to throw an exception when the FQDN exceeded the hostname length limit of 64 characters.

• Deprecations

  • The Share Server was removed in this release, which caused several other changes beyond the removal of the share service:
    • The Redis service is no longer needed and has been removed.
    • Chat functionality has been removed from shared sessions.
      • disable_chat has been replaced with disable_viewers in the Developer API.
      • ChatSFX has been removed from the user profile.
      • chat_history_messages has been removed from group settings.
  • Removed linuxserver.io and Twingate spotlight registries as they are either no longer maintained or will be unmaintained in the near future.

• Custom Branding Enhancements

  • The label for the username input field ("Username Input Label") on the login page can now be customized through Application Branding.

• Bugfixes

  • Fixed the bug where, if a session times out on launch, the redirect to the dashboard removes the e...

1.18.0-ls99

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.18.0-ls99/index.html

LinuxServer Changes:

Full Changelog: 1.17.0-ls98...1.18.0-ls99

Remote Changes:

What's new in Kasm 1.18.0

Highlights

• Updated Apache Guacamole to version 1.5.5. The changelog can be found at https://guacamole.apache.org/releases/1.5.5/ .
• Support for bulk imports of Users and Servers, through both the admin interface and developer API.
• Added support for applying labels to Servers, Agents, Server Pools and Zones.
• Added support for Including / Excluding Labels when Launching Container and Server Pool Workspaces.
• Added the ability to create a server template that can be used to enroll multiple servers using a single server enrollment token.
• User-Server Assignment in Server Pools. Users can be mapped to specific static Servers reserved for their Sessions. More here.
• Added support for Smart Card Pass-through in container-based workspaces using the Kasm Native Smartcard Client for Windows and macOS.

Features

• Usability Enhancements

  • Increased maximum supported clipboard size for RDP workspaces to 25MB.
  • Added the hostname to heartbeat logs to make it easier to identify which server or agent a log is related to.
  • Updated Docker Run Config to support variable substitution. Expanded variables for storage mapping and volume mapping to also support custom attributes 1, 2, and 3 defined for the user.
  • When deleting OpenID or SAML configs we now make it clear that this will delete any users associated with the config and include an indication of how many users will be affected. In addition you can now edit an OpenID or SAML config to see the list of users associated with the config.
  • Support for rolling tags for Kasm Docker Plugins. The Kasm start script now upgrades Kasm plugins that use rolling tags. This feature includes scripts for admin plugin management---more info here: Plugin Management.
  • Made User searching case-insensitive in both the main User list view and in Groups.
  • Servers can now be assigned to Pools from the Servers list table.
  • Added Pool (database) ID as a display column in the Pool list view. The column is visible by default.
  • Added the Experimental Features flag to global settings.
  • Added support for setting default RDP thick client properties in generated .rdp files. See "Setting RDP Thick Client Properties" under global Server Settings for supported fields and instructions.
  • Added support for injecting custom DPI and display scaling parameters (dpi, width, height) into connection_info.guac.settings during creation of RDP-based Guacamole sessions. When missing from Server connection_info settings, Kasm will auto-populate these values based on the user's browser display environment.
  • Improved /opt/kasm/bin/restart and /opt/kasm/bin/stop to remove containers by default when stopping services. Multiple mode flags are provided, use --help with each script for more information.
  • Added support docs for RHEL 10.
  • Allow admins to force persistent profiles on container Workspaces. See "Enable Workspace Persistent Profile" in Container Settings.
  • Added support for client-based automatic sizing and scaling in RDP Native client sessions. Enabled allow_scale_factor in RDP Gateway. Updated FAQ notes for forced settings: Why does the desktopscalefactor property in the .rdp file not seem to have an effect?. Note: the desktopscalefactor rdp thick client property is deprecated and will be removed soon.
  • Added general support for importing Ed25519 keys and made Ed25519 the default format for user SSH key generation.
  • Added the ability to capture logs generated from within a Kasm workspace to enable troubleshooting failure conditions. To use this feature set enable_container_logging to True in the Group Settings.
  • Added support for systemd integration. More here.

• Infrastructure Support Enhancements

  • Improved performance of orphan server cleanup on autoscale pools that have a large number of servers.
  • Added API Token Lifespan and API Token Refresh Leeway Server Settings.
  • Improved session launch times on deployments that have a large number of servers.
  • Increased the robustness of the autoscaling system and increased its efficiency when handling errors from Autoscale Providers.
  • Added authentication to improve security of Native Kasm Logging.
  • Removed the hardcoded Splunk prefix for HEC logging tokens, enabling integrations with logging endpoints that do not use the prefix. Note: extant Splunk tokens will have the prefix added if necessary during Kasm upgrade.
  • Updated the Docker Compose version used by the installer (2.38.1).
  • Added "Draining" mode to Kasm Agents.
  • Added automatic rotation of Autoscaled Kasm Agents.
  • Enhanced container healthcheck functionality with configurable timeout settings, backoffs and better error handling for service health validation.

• Kasm Image Enhancements

  • Updated all images to KasmVNC 1.4.0, providing major improvements to containerized session streaming.
  • Removed file manager on browser-based images to remove the avenue of accessing the file system and/or breaking out of the browser in browser isolation use cases.
  • Added support for Vulkan GPU acceleration for Chromium based browsers.
  • Added Debian Trixie Core image for x86_64/aarch64
  • Added Debain Trixie Desktop image for x86_64/aarch64
  • Added Fedora 41 Desktop image for x86_64/aarch64
  • Added Obsidian image for x86_64/aarch64
  • Updated GIMP to version 3, bringing the latest features and performance improvements to the GIMP workspace
  • Added Cyberbro image for x86_64/aarch64
  • Added back SuperTuxKart image to our registry

• Kasm Desktop Service

  • Fixed the installer to properly wait for existing service to stop before updating files, preventing partial upgrades.
  • Added automatic service version generation and reporting. The service version for each host is displayed in the admin UI Servers table, facilitating the management of large Windows deployments.
  • The installer now returns proper exit codes on failure, enabling autoscale scripts to detect failed deployments.
  • Fixed a bug where the service reported the system's FQDN instead of a hostname, which could cause the API service to throw an exception when the FQDN exceeded the hostname length limit of 64 characters.

• Deprecations

  • The Share Server was removed in this release, which caused several other changes beyond the removal of the share service:
    • The Redis service is no longer needed and has been removed.
    • Chat functionality has been removed from shared sessions.
      • disable_chat has been replaced with disable_viewers in the Developer API.
      • ChatSFX has been removed from the user profile.
      • chat_history_messages has been removed from group settings.
  • Removed linuxserver.io and Twingate spotlight registries as they are either no longer maintained or will be unmaintained in the near future.

• Custom Branding Enhancements

  • The label for the username input field ("Username Input Label") on the login page can now be customized through Application Branding.

• Bugfixes

  • Fixed the bug where, if a session times out on launch, the redirect to the dashboard removes the error message before it can be read.
  • Fixed the bug causing the db healthcheck to log an error m...

1.17.0-ls98

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.17.0-ls98/index.html

LinuxServer Changes:

Full Changelog: 1.17.0-ls97...1.17.0-ls98

Remote Changes:

What's new in Kasm 1.17.0

Due to the removal of nginx configuration from the AutoScale API, existing startup scripts need to be updated to remove any references to the nginx_cert_in and nginx_key_in variables. See [Startup Scripts](https://kasmweb.com/docs/latest/guide/compute/pools.html#startup-scripts)

Highlights

• Autoscaling is now available in Kasm Workspaces: Community Edition.
• Dynamic AutoScaling of Kasm agents and server VMs on Proxmox VE.
• Dynamic AutoScaling of Kasm agents and server VMs on Nutanix.
• Added the ability for administrators to add overt Banners to sessions.
• Added support for web native Smart Card Pass-through in RDP sessions on ChromeOS devices

Features

• Usability Enhancements

  • Updated Autoscale form to standardise the units used for memory to GiB.
  • Removed unused Nginx configuration from Autoscale form.
  • Added spotlight entry for the Kasm AI registry.
  • Added global settings to control url-categorization-caching.
  • In a multizone environment a test is performed to find the zone with the lowest latency relative to the client connecting and used where the selected zone is "Auto".
  • Renamed --offline-plugin to --offline-network-plugin in install script arguments.

• Infrastructure Support Enhancements

  • Added a flag to exclude log data when using the pg_backup script
  • Added support for OIDC single logout
  • Updated the Kasm Agent to detect GPUs running on NVIDIA Jetson devices.
  • Downscale backoff autoscaling configuration added for Server-type pools
  • Switched from official Postgres container to a Kasm maintained Postgres image that is better hardened and contains fewer vulnerabilities.

• Kasm Image Enhancements

  • Migrated our single app Workspace Images from Ubuntu Focal to Ubuntu Jammy in preparation for Focal's end-of-life.
  • Added Alpine 3.21 Desktop images for x86_64/aarch64
  • Added Alpine 3.21 Core images for x86_64/aarch64
  • Added Ubuntu Jammy VPN image for x86_64/aarch64
  • Added CUDA Development Kit (Jammy) image for x86_64
  • Updated VirtualGl to 3.1.2
  • Removed NVIDIA_DRIVER_CAPABILITIES environment variables from core workspace image dockerfiles to reduce confusion.
    When sessions are launched with nvidia GPUs, the variable is automatically assiged to NVIDIA_DRIVER_CAPABILITIES=all.
    Administrators can override this by setting the environment variable in the Docker Run Config Override.
  • Deprecated CUDA Development Kit (Focal), SuperTuxKart and REMnux Workspace Images.
  • Added aarch64 variant of KasmOS Desktop along with minor theme improvements.

• Licensing Enhancements

  • Added support for Licenses that only grant connections to Managed Egress Providers.

Bugfixes

• Fixed bug resulting in unhealthy auto-scaled servers from not getting deleted after the host dead expiration.
• Fixed Kasm Windows Service failing to update the JWT token after a successful healthcheck, resulting in JWT tokens eventually becoming expired.
• Fixed bug to correctly set initial timezone in Debian-family workspace core images
• Fixed Workspace form issue blocking workspace image edits when the image is restricted to a zone.
• Fixed errors that could occur when Managed Egress Accounts are updated.
• Fixed bug that caused downloads from the session control panel with certain special characters to fail.
• Fixed issue that caused some autoscaled agents to immediately be terminated when sessions if s3 persistent profiles or session recording were used. This may have caused other sessions on these agents to be prematurely deleted for other users.
• Group names and priority numbers are enforced to be unique per deployment. Administrators will be required to update groups that violate these constraints when they attempt to edit the properties of those groups.
• Updated Autoscale Orphan cleanup check to better identify VMs that have missing Autoscale config associations.
• Fixed an issue that might leave orphaned sessions when an Autoscale event failed.
• Fixed an issue that prevented OpenVPN from working when using Egress on systems with runc versions 1.2.0 or later.
• Fixed bugs causing some configuration files to be truncated when disk is full. NB: Some app configuration files have moved into new subdirectories.
• Fixed bug preventing workspace launch after removing zone restriction. To fix a workspace that was experiencing the issue prior to upgrade, open the workspace for editing and click "Save" without making any changes.
• Fixed bug that caused SAML / OIDC login to fail when the Kasm webapp was hosted on a custom port. Review latest required headers for using a reverse proxy, if applicable.
• Fixed a bug that allowed the autoscale system to potentially add more servers than the max instances value configured in the VM Provider.
• Increased the allowable length of the JWT token used for RDP local client authentication.
• Fixed issue during create workspace from session if the docker image contained a registry portion that included a port number.
• Removed "Add Zone" button
• Fixed bug where load balancing was not applied to server pools of type Server. See note in the zone configuration table about load calculation for these pools.
• Added measures to prevent a race condition between creating a workspace session and the autoscale manager destroying the session's server due to the latter not being used
• Fixed casting and go launch modals to use the same style as the main workspace launcher, previous help text on launch configs was unreadable.
• Fixed an issue that prevented Egress from connecting on systems with Docker Engine 28.0 and later.
• Added an option to the server config Connection Credential Type of "Prompt User" to allow multiple users to login to windows, from 1.16.0 on the only way to prompt users was to select "Static Credentials" and leave the username and password empty, but that locked the Max Simultaneous Users Per Server to 1.
• Removed build tools from kasm_guac container, reducing vulnerabilities.
• Fixed a bug where the autoscale schedules tab wasn't always visible when it should have been when editing autoscale configs.
• Fixed bugs preventing cascading deletes from executing correctly
• Fixed issue preventing some services from automatically restarting when healthcheck failed
• Fixed an issue where LDAP user password resets appeared successful even when failing Active Directory complexity requirements. Users now receive an error message if the new password doesn't meet complexity rules.
• Fixed issue that caused connection failures to Windows sessions using the Web Native Client when the user's browser connects with HTTP/2.
• Fixed bug that caused logging exception upon autoscaled server creation.
• Improved handling of disconnections and errors in the web native based server session connections.

1.17.0-ls97

CI Report:

https://ci-tests.linuxserver.io/linuxserver/kasm/1.17.0-ls97/index.html

LinuxServer Changes:

Deprecate develop branch.

Remote Changes:

What's new in Kasm 1.17.0

Due to the removal of nginx configuration from the AutoScale API, existing startup scripts need to be updated to remove any references to the nginx_cert_in and nginx_key_in variables. See [Startup Scripts](https://kasmweb.com/docs/latest/guide/compute/pools.html#startup-scripts)

Highlights

• Autoscaling is now available in Kasm Workspaces: Community Edition.
• Dynamic AutoScaling of Kasm agents and server VMs on Proxmox VE.
• Dynamic AutoScaling of Kasm agents and server VMs on Nutanix.
• Added the ability for administrators to add overt Banners to sessions.
• Added support for web native Smart Card Pass-through in RDP sessions on ChromeOS devices

Features

• Usability Enhancements

  • Updated Autoscale form to standardise the units used for memory to GiB.
  • Removed unused Nginx configuration from Autoscale form.
  • Added spotlight entry for the Kasm AI registry.
  • Added global settings to control url-categorization-caching.
  • In a multizone environment a test is performed to find the zone with the lowest latency relative to the client connecting and used where the selected zone is "Auto".
  • Renamed --offline-plugin to --offline-network-plugin in install script arguments.

• Infrastructure Support Enhancements

  • Added a flag to exclude log data when using the pg_backup script
  • Added support for OIDC single logout
  • Updated the Kasm Agent to detect GPUs running on NVIDIA Jetson devices.
  • Downscale backoff autoscaling configuration added for Server-type pools
  • Switched from official Postgres container to a Kasm maintained Postgres image that is better hardened and contains fewer vulnerabilities.

• Kasm Image Enhancements

  • Migrated our single app Workspace Images from Ubuntu Focal to Ubuntu Jammy in preparation for Focal's end-of-life.
  • Added Alpine 3.21 Desktop images for x86_64/aarch64
  • Added Alpine 3.21 Core images for x86_64/aarch64
  • Added Ubuntu Jammy VPN image for x86_64/aarch64
  • Added CUDA Development Kit (Jammy) image for x86_64
  • Updated VirtualGl to 3.1.2
  • Removed NVIDIA_DRIVER_CAPABILITIES environment variables from core workspace image dockerfiles to reduce confusion.
    When sessions are launched with nvidia GPUs, the variable is automatically assiged to NVIDIA_DRIVER_CAPABILITIES=all.
    Administrators can override this by setting the environment variable in the Docker Run Config Override.
  • Deprecated CUDA Development Kit (Focal), SuperTuxKart and REMnux Workspace Images.
  • Added aarch64 variant of KasmOS Desktop along with minor theme improvements.

• Licensing Enhancements

  • Added support for Licenses that only grant connections to Managed Egress Providers.

Bugfixes

• Fixed bug resulting in unhealthy auto-scaled servers from not getting deleted after the host dead expiration.
• Fixed Kasm Windows Service failing to update the JWT token after a successful healthcheck, resulting in JWT tokens eventually becoming expired.
• Fixed bug to correctly set initial timezone in Debian-family workspace core images
• Fixed Workspace form issue blocking workspace image edits when the image is restricted to a zone.
• Fixed errors that could occur when Managed Egress Accounts are updated.
• Fixed bug that caused downloads from the session control panel with certain special characters to fail.
• Fixed issue that caused some autoscaled agents to immediately be terminated when sessions if s3 persistent profiles or session recording were used. This may have caused other sessions on these agents to be prematurely deleted for other users.
• Group names and priority numbers are enforced to be unique per deployment. Administrators will be required to update groups that violate these constraints when they attempt to edit the properties of those groups.
• Updated Autoscale Orphan cleanup check to better identify VMs that have missing Autoscale config associations.
• Fixed an issue that might leave orphaned sessions when an Autoscale event failed.
• Fixed an issue that prevented OpenVPN from working when using Egress on systems with runc versions 1.2.0 or later.
• Fixed bugs causing some configuration files to be truncated when disk is full. NB: Some app configuration files have moved into new subdirectories.
• Fixed bug preventing workspace launch after removing zone restriction. To fix a workspace that was experiencing the issue prior to upgrade, open the workspace for editing and click "Save" without making any changes.
• Fixed bug that caused SAML / OIDC login to fail when the Kasm webapp was hosted on a custom port. Review latest required headers for using a reverse proxy, if applicable.
• Fixed a bug that allowed the autoscale system to potentially add more servers than the max instances value configured in the VM Provider.
• Increased the allowable length of the JWT token used for RDP local client authentication.
• Fixed issue during create workspace from session if the docker image contained a registry portion that included a port number.
• Removed "Add Zone" button
• Fixed bug where load balancing was not applied to server pools of type Server. See note in the zone configuration table about load calculation for these pools.
• Added measures to prevent a race condition between creating a workspace session and the autoscale manager destroying the session's server due to the latter not being used
• Fixed casting and go launch modals to use the same style as the main workspace launcher, previous help text on launch configs was unreadable.
• Fixed an issue that prevented Egress from connecting on systems with Docker Engine 28.0 and later.
• Added an option to the server config Connection Credential Type of "Prompt User" to allow multiple users to login to windows, from 1.16.0 on the only way to prompt users was to select "Static Credentials" and leave the username and password empty, but that locked the Max Simultaneous Users Per Server to 1.
• Removed build tools from kasm_guac container, reducing vulnerabilities.
• Fixed a bug where the autoscale schedules tab wasn't always visible when it should have been when editing autoscale configs.
• Fixed bugs preventing cascading deletes from executing correctly
• Fixed issue preventing some services from automatically restarting when healthcheck failed
• Fixed an issue where LDAP user password resets appeared successful even when failing Active Directory complexity requirements. Users now receive an error message if the new password doesn't meet complexity rules.
• Fixed issue that caused connection failures to Windows sessions using the Web Native Client when the user's browser connects with HTTP/2.
• Fixed bug that caused logging exception upon autoscaled server creation.
• Improved handling of disconnections and errors in the web native based server session connections.