xginn8

Support native hostapp updates

5

This limitation is mentioned in the roadmap, but opening this issue as a placeholder.

openvpn deescalates privileges which causes a hard failure on reconnect to different endpoint

19

In https://github.com/balena-os/meta-balena/commit/12205bf2ae99efdb6dd96ad4f76e1c28001aff7a we configured openvpn to de-escalate privileges and run as the `openvpn` user & group. As noted in the openvpn docs, this de-escalation causes a hard failure (https://openvpn.net/community-resources/reference-manual-for-openvpn-2-0/): >...

enhancement: Cluster worker scrape timeouts/errors should be recorded

6

If a worker is heavily loaded or otherwise pathologically performant, a cluster master may time out when scraping that worker (https://github.com/siimon/prom-client/blob/master/lib/cluster.js#L51-L61). The cluster master then returns an incomplete set of...

### Expected behavior `balena inspect` does not hang and returns information. ### Actual behavior `balena inspect` hangs when run on some containers. ### Steps to reproduce the behavior We are...

balena-cli tries to resolve unnecessary directories during livepush

5

- **balena CLI version:** 11.8.0 When starting a livepush session, any dangling symlink in the working directory (or in a child directory) will cause the push to fail, despite not...

`balena ssh` logs error, but exits 0

7

- **balena CLI version:** 11.20.1 --- When a device appears as online (but is unresponsive to SSH), the CLI returns an error but does not exit uncleanly: ``` ❯ balena...

`balena push` in local mode leaves around intermediary build containers

1

CLI v11.7.3 Three instances of the same intermediary build container were discovered running on a device after livepushing BoB. The device did have fairly abysmal network connectivity. See https://www.flowdock.com/app/rulemotion/resin-starters/threads/66L20WQ7bIAgQ1z-q5-FHOuGFB9 for...

In order to make forums-based debugging easier, we should expose the UUID in the UI and prompt/suggest users report that back to us when opening issues. cc @chrisys @jtonello

Consider supporting OIDC for balena devices <> 3ps authentication

1

> [Using open-balena-api] as an oidc identity provider for Keycloak would be great because then you could have nodes talk directly to services like Elasticsearch or s3 who accept oidc...

As mentioned in https://www.flowdock.com/app/rulemotion/resin-tech/threads/wdSU6cV3l2S2RgB9VL1ukrAb-V-, i've noticed there are a number of devices that appear online, but upon trying to connect i get the following error: ```bash ❯ balena ssh {{UUID}}...