OpsDash v1.5.5 is out

This release

• FixCredential management restored after upgrade — Resolves an issue where some customers, after upgrading from v1.5.x to v1.5.3, encountered errors when creating new credentials in the system. Credential management works normally again on v1.5.4.
• StabilitySmoother upgrade flow — The upgrade path now adds extra checks and automatic cleanup around config-file merging, making upgrades more reliable and reducing the impact of legacy state on the new runtime.
• OperationsOps tooling auto-syncs after upgrade — Upon completing an upgrade, hosts automatically receive the latest install-verification, config-management, and backup/restore scripts — no manual sync needed.
• IntegrityTighter package integrity verification — Upgrade-package file manifests are now strictly consistent with their actual contents, ensuring reliable integrity verification after download.

Real-machine deployment testing: Fresh-install regression tested across 5 mainstream OSes (Ubuntu 24.04 / Kylin V10 / Anolis 8 / CentOS 7 / Debian 13) — each host passed 13 install-integrity checks. On Ubuntu 20.04, a real customer-License v1.5.3 → v1.5.4 upgrade-path regression validated the upgrade flow under real customer conditions.

We recommend upgrading directly to v1.5.5 for the latest License-expiry protection and backend health self-check.

This release (urgent patch)

• Customer reports5 customer-reported issues fixed — Agent installer download port corrected (port 80 reverse proxy) / device-list template field mapping / clipboard fallback for HTTP deployments (covers 7 components) / Agent install script compatibility / remote job detail field eager-loading
• HardeningUpgrade-package GPG signature verification + bundled public key — the upgrade package now embeds the release-signing public key, so even hosts that never deployed it can complete integrity verification. Eliminates the "install succeeds but every upgrade rejects" failure mode.
• HardeningStrict-mode URL handling for remote tasks — Agent / Proxy remote-install jobs are now forced to use the operator-configured base URL, closing the Host-header injection vector that could trick a target host into downloading a malicious installer.
• ResilienceSelf-recovery for stuck hosts — if the backend keeps restarting during an upgrade, the host now automatically force-overwrites its integrity manifest from the upgrade package, recovering without operator intervention.

We recommend upgrading directly to v1.5.5 for the latest License-expiry protection and backend health self-check.

This release (patch)

• Fix17 issues from real-world feedback — device list department filter / GBK CSV import / device empty-value clearing + BMC IP / demo data clearing / Zabbix template binding hints / SSH remote execution / job output display / topology dark-mode contrast, and more
• UXLicense-tier friendly redirect — replaces the previous generic 403 page. When you reach a feature gated by your current tier, the page now clearly explains the limitation, shows your current License details, and points you to the upgrade path
• RolesDepartment roles fully unblocked — Department engineers and department viewers can now access all functional modules (credentials / escalation / SSO / geofencing / firmware / OTA / workflow / approvals)
• CompatCSV import compatible with old templates — CSVs exported by v1.5.1 and earlier (without the BMC IP column) now import correctly with no column shifting
• UpgradeZero-prep CentOS 7 upgrades — the upgrade script now auto-detects and installs required dependencies, so CentOS 7 users can upgrade without any manual preparation

We recommend going directly to v1.5.5 for the latest License-expiry protection and backend health self-check.

This release (security patch)

• SecurityLicense integrity validation — strict schema validation, field whitelist, integrity manifest and revocation mechanism prevent License tampering and unauthorized use
• PermissionsInstall permission hardening — critical key files set to least-privilege (root-only read), cross-distribution numeric UID assertion ensures consistency
• ContainersLeast-privilege container runtime — database, cache, monitoring and frontend containers all start as non-privileged users
• RuntimeAnti-debug + strict mode — backend periodically checks for debugger attachment, paired with three-state strict mode covering the full process lifetime
• QAExpanded pre-release validation — License field whitelist, leftover bytecode scan and red-team regression suite are now part of mandatory pre-release validation

Real-machine deployment testing: Full real-machine deployment tested across 7 mainstream Linux distros (Kylin V10 / Anolis 8 / CentOS 7 / Debian 13 / Ubuntu 20.04 / 22.04 / 24.04), each host passing 12 install-integrity checks (84 assertions total) and 6 security hardening adversarial tests.

We recommend going directly to v1.5.5 for the latest License-expiry protection and backend health self-check.

v1.1 – v1.5 Cumulative Updates

• v1.1Smart Alerting — 9-dimension alert scoping, correlation analysis & root cause inference, SLA metrics (MTTA/MTTR), maintenance windows; RBAC upgraded to 5 roles × 65 permissions × 20 resources
• v1.2Remote Ops Upgrade — DAG workflow orchestration, rolling/canary/group execution strategies, risk evaluation + approval flow, 10 vendor CLI drivers, IPMI integration
• v1.3Industrial IoT Engine — Device model library, telemetry ingestion, geofencing, OTA firmware upgrades, gateway topology, data quality monitoring, OPC-UA/BACnet/Modbus protocol adapters
• v1.4AI Agent Integration — 189 MCP tools (v1.0's 202 tools restructured into 4 parallel sub-servers, merging duplicates and trimming low-usage tools — 60% faster first-load), two-step approval, SSE multi-session
• v1.5.0Code Protection Foundation — Cython compilation + frontend obfuscation + Rust launcher + License v=2 + age-encrypted .env / JWT private key + STRICT_MODE 3-state + anti-debug, full 6-layer protection landed

Verified platforms: Ubuntu 20.04 / 22.04 / 24.04 · Debian 13 · CentOS 7 · Anolis 8 · Kylin V10. Any glibc ≥ 2.17 Linux should work.

Upgrading from v1.0.x: Direct upgrade supported (no version hopping). The upgrade script handles database migrations and config merging automatically, with 6 verification assertions and auto-rollback protection.

Launch Highlights

• Three EnginesUnified monitoring stack — Zabbix 7.0 (IT), EMQX 5.8 (IoT / MQTT), VictoriaMetrics 1.106 (TSDB)
• AI NativeMCP Server ships with 202 AI tools and 14 ops playbooks — Claude Code / OpenClaw / Cursor compatible
• Remote OpsRolling / canary / group strategies · Risk evaluation + approval · Workflow DAG
• IoT StackObject models · Alert templates · Geofencing · OTA · Gateway topology
• TrustworthyHardware-fingerprinted License + RSA-2048 · Cython + frontend obfuscation

⚠️ Known issue: offline install only succeeds on Ubuntu 24.04. Use v1.0.1 on other distros.