OpenNMS On the Horizon – December 20th, 2021
Tags: ooh, alarmd, collectd, configapi
Published: 2022-01-04 21:00:03

---
title: OpenNMS On the Horizon – December 20th, 2021
published: true
date: 2021-12-20 21:40:19 UTC
tags: OOH,alarmd,collectd,configapi
canonical_url: https://www.opennms.com/en/blog/2021-12-20-opennms-on-the-horizon-log4j-prometheus-grafana-enlinkd-ipc-docs-config-api-non-root-sentinel-minion-flows-thresholding-discovery-oia-timescaledb-karaf-twin-api-provisioning-vue-g/?utm_source=rss&utm_medium=rss&utm_campaign=opennms-on-the-horizon-log4j-prometheus-grafana-enlinkd-ipc-docs-config-api-non-root-sentinel-minion-flows-thresholding-discovery-oia-timescaledb-karaf-twin-api-provisioning-vue-g
---

Sorry for the missing OOH last week... I was really busy for some reason.

Aaaaaaaanyway...

Since last time, we released Horizon and Meridian 73 times, and worked on Prometheus collections, Grafana package signatures, Enlinkd performance, IPC config, reports, docs for daemons, VMware, flows, and topology, config API support, running as non-root, Sentinel, Maven, Minion, flow thresholding, discovery config, OIA, TimescaleDB, Log4j2, Karaf, the Twin API, provisioning, the vue geomap, the new UI, and Helm.

<!--
git log --since='2021-12-06 00:00:00' --until='2021-12-20 00:00:00' --author=bamboo@opennms.org --invert-grep --all --no-merges --color=always --format='%Cblue%ai %Cgreen%aN %Creset%s %Cblue(%H)%Cred%d' --author-date-order | sort | less -R
-->

## Github Project Updates

### **Internals, APIs, and Documentation**

- Dino created some graphs and collections for prometheus
- I worked on fixing our grafana package signatures and docker publishing
- Stefan did more work on Enlinkd performance improvements
- Chandra updated the IPC code to accept a simplified config for Kafka RPC/Sink/Twin
- Zoë fixed a hardcoded path in IOwait report template
- Mark worked on daemon reload and VMware docs
- Bonnie and Ronny did more work on flow documentation
- Dmitri, Pushkar, Tikayat, and Upendra worked on config API support for notification, SNMP, WSMan, and WMI configs
- I fixed a bug in Minion non-root support
- I updated the installer's non-root write validator to ignore `.git` and the `lib/` and `system/` directories
- Arthur updated the Karaf install to include Alarmd on Sentinel
- I fixed an error in our pom references to Atlassian's maven repo
- Pierre did some fixups to the Minion config schema
- Jesse worked on schema handling in the config API
- Dustin and Christian did more work on thresholding support for flow data
- Alberto wrapped up his changes to support `exclude-url` in discovery
- Stefan got rid of an unused API in OIA
- Alberto worked on handling TimescaleDB better in upgrades
- Jerry worked on the component cleanup project
- I updated Log4j2
- Stefan wrote a tool for generating fake flow data
- Freddy did more work on config management API upgrades
- Yang Li worked on Collectd and Pollerd support in OIA
- Patrick continued his work to integrate the config manager and Karaf
- Chandra fixed an NPE in the topology linkd provider
- Marcel worked on cleaning up the asset topology provider docs
- Chandra worked on adding metrics to the twin API
- Sean updated the `SnmpMetadataProvisioningAdapter` to support specifying exact OIDs

### **Web, ReST, UI, and Helm**

- Mike did more work on UI improvements to the new geomap
- Tripti and Makarand did more updates to the requisition code
- I did some dependency updates and release stuff for Helm
- Farid worked on improving popups in the new geomap
- Maxim cleaned up some stuff in the new UI code
- Stefan added support for querying string properties in Helm

### Contributors

<!--
git log --since='2021-12-06 00:00:00' --until='2021-12-20 00:00:00' --all --color=always --no-merges --pretty=format:'%aN' | sed -e 's,^ *,,' -e 's, *$,,' | sort -u | grep -viE '(dependabot|Atlassian Bamboo|CI.CD System)' | sed -e 's,^,\* ,'
-->

Thanks to the following contributors for committing changes since last OOH:

- Alberto Ramos
- Arthur Naseef
- Benjamin Reed
- Bonnie Robinson
- Chandra Gorantla
- Christian Pape
- Dino Yancey
- Dmitri Herdt
- Dustin Frisch
- Farid Ahmad
- Freddy Chu
- Jane Hou
- Jerry Beuree
- Jesse White
- Makarand Patil
- Marcel Fuhrmann
- Mark Mahacek
- Maxim Brener
- Mike Rose
- Patrick Schweizer
- Pierre Bouffard
- Pushkar Suthar
- Ronny Trommer
- Sean Torres
- Stefan Wachter
- Tikayat Mohanta
- Tripti Bansal
- Upendra Guggilam
- Yang Li
- Zoë Knox

## Release Roadmap

### Completed December 2021 Releases - Horizon 29.0.2, Meridians 2021.1.7, 2020.1.15, 2019.1.26

In December, we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29.

### Horizon 29.0.2

Release 29.0.2 contains a fix for a Jetty CVE, plus a number of bug fixes and small enhancements, including changes to user auth, Twin API, VMware, and running as non-root.

For a high-level overview of what has changed in Horizon 29, see [What’s New in OpenNMS Horizon 29](https://docs.opennms.com/horizon/29.0.2/releasenotes/whatsnew.html).

The codename for Horizon 29.0.2 is [_Satanic Nightjar_](https://wikipedia.org/wiki/Satanic_nightjar).

### Meridian Point Releases

Meridian 2019.1.26 contains a fix for a Jetty CVE, and an update to fix a bug in user auth changes.

Meridian 2020.1.15 added some SNMP auth related fixes on top of 2019's changes.

Meridian 2021.1.7 added doc updates, auth fixes, and Trapd improvements on top of 2020's updates.

For a list of changes, see the release notes:

- [2019.1.26](https://meridian.opennms.com/releasenotes/2019/latest/#releasenotes-changelog-Meridian-2019.1.26) ([_Awasis_](https://wikipedia.org/wiki/HD_136418_b))
- [2020.1.15](https://meridian.opennms.com/releasenotes/2020/latest/#releasenotes-changelog-Meridian-2020.1.15) ([_Lagoon_](https://wikipedia.org/wiki/Lagoon))
- [2021.1.7](https://docs.opennms.com/meridian/2021.1.7/releasenotes/changelog.html#releasenotes-changelog-Meridian-2021.1.7) ([_MOM 2_](https://wikipedia.org/wiki/Mars_Orbiter_Mission_2))

### Completed Security Releases - Horizon 29.0.3, Meridians 2021.1.8, 2020.1.16, 2019.1.27

On December 13th, we released off-cycle updates to all OpenNMS Meridian versions under active support, as well as Horizon 29, to address the Log4j2 "Log4Shell" vulnerability.

It is strongly recommended that you upgrade to the latest releases immediately.

- Horizon 29.0.3 (codename [_Penguin_](https://wikipedia.org/wiki/Penguin))
- Meridian 2021.1.8 (codename [_Cassini_](https://wikipedia.org/wiki/Cassini%E2%80%93Huygens))
- Meridian 2020.1.16 (codename [_Stack_](https://wikipedia.org/wiki/Stack_(geology)))
- Meridian 2019.1.27 (codename [_Ixbalanqué_](https://wikipedia.org/wiki/HD_98219_b))

### Completed Security Releases - Horizon 29.0.4, Meridians 2021.1.9, 2020.1.17, 2019.1.28

On December 16th, we released off-cycle updates to all OpenNMS Meridian versions under active support, as well as Horizon 29, to address additional Log4j2 "Log4Shell" vulnerabilities.

It is strongly recommended that you upgrade to the latest releases immediately.

- Horizon 29.0.4 (codename [_The Bird_](https://wikipedia.org/wiki/Bird_(gesture)))
- Meridian 2021.1.9 (codename [_Venera 6_](https://wikipedia.org/wiki/Venera_6))
- Meridian 2020.1.17 (codename [_Blowhole_](https://wikipedia.org/wiki/Blowhole_%5C(geology%5C)))
- Meridian 2019.1.28 (codename [_Xolotlan_](https://wikipedia.org/wiki/HD_4208_b))

### Helm Releases

Helm 7.2.0 and 7.3.0 were released recently as well.

#### 7.2.0

7.2.0 bumps a bunch of dependencies, improves documentation, tweaks plugin signing, and adds a number of new features, including:

- More Helm flow dashboard updates (Issue [HELM-277](https://issues.opennms.org/browse/HELM-277))
- A new "About Helm" dashboard (Issue [HELM-281](https://issues.opennms.org/browse/HELM-281))
- Support for returning node primary ifIndex and IP address in the entity datasource (Issue [HELM-188](https://issues.opennms.org/browse/HELM-188))
- New entities in the entity datasource: IP interface, SNMP interface, ifService, outagers (Issue [HELM-228](https://issues.opennms.org/browse/HELM-228))
- Support for prefixing/suffixing label names of flow series and summaries (Issue [HELM-298](https://issues.opennms.org/browse/HELM-298))
- Support multiple flow queries per panel (Issue [HELM-299](https://issues.opennms.org/browse/HELM-299))
- A new dashboard for flow aggregations using data from Cortex/Prometheus (Issue [NMS-13374](https://issues.opennms.org/browse/NMS-13374))
- Fixes for host traffic aggregations from Nephron (Issue [NMS-13534](https://issues.opennms.org/browse/NMS-13534))

Packages are available in our repos, as well as [the Helm github page](https://github.com/OpenNMS/opennms-helm/releases/tag/v7.2.0).

I am in the process of revamping how we deal with Helm plugin releases so we can get it (re-)submitted to Grafana's upstream plugin registry.

### 7.3.0

7.3.0 adds a new feature to allow querying string properties in the perf datasource.

- support string properties in performance datasource (Issue [HELM-293](https://issues.opennms.org/browse/HELM-293))

### Upcoming January Releases

<!--
git log --no-merges meridian-2016.1.23-1..origin/release-2016.x -- . ":(exclude).circleci"
-->

OpenNMS is on a monthly release schedule, with releases happening on the second Wednesday of the month.

The next OpenNMS release day is January 12th, 2021.

We currently expect minor updates to Horizon 29 and all supported Meridian releases.

### Next Horizon: 30 (Q2 2022)

The next major Horizon release will be Horizon 30.

Horizon 30 is currently expected to have the following features:

- the start of a new Vue-based UI using the [Feather Design System](https://github.com/feather-design-system/feather-design-system)
- thresholding support for Flow data
- support for running OIA plugins on Minion and Sentinel
- support for backing up router configuration files

### Next Meridian: 2022 (Q1 2022)

The current expectation is that we will release Meridian 2022 in Q1 of next year. It will be based on Horizon 29 plus any bug fixes that happen between November and the Meridian release.

### Disclaimer

_Note that this is just based on current plans; dates, features, and releases can change or slip depending on how development goes._

_The statements contained herein may contain certain forward-looking statements relating to The OpenNMS Group that are based on the beliefs of the Group’s management as well as assumptions made by and information currently available to the Group’s management. These forward-looking statements are, by their nature, subject to significant risks and uncertainties._

_...We apologize for the excessive disclaimers. Those responsible have been sacked._

_Mynd you, møøse bites Kan be pretti nasti..._

_We apologise again for the fault in the disclaimers. Those responsible for sacking the people who have just been sacked have been sacked._

<!--
## Calendar of Events
### **[OpenNMS Training](https://hs.opennms.com/training-registration-2020) - Moonachie, New Jersey - April 27th through May 1st, 2020**
The OpenNMS Group [still hopes to be offering training](https://hs.opennms.com/training-registration-2020) at SecureWatch 24 Fusion Center in Moonachie, New Jersey the week of April 27th. 8 seats are available, and the deadline for signing up is April 17th.
-->

## Until Next Time…

If there’s anything you’d like me to talk about in a future OOH, or you just have a comment or criticism you’d like to share, don’t hesitate to [say hi](mailto:twio@opennms.org).

- Ben

<!--
  https://github.com/OpenNMS/twio-fodder/blob/ee50b0f05f3f93a66c242448a70fdca3993b972a/scripts/twio-issues-list.pl
-->

## Resolved Issues Since Last OOH

- [HELM-291](https://issues.opennms.org/browse/HELM-291): debian package for Helm 7.1.2 - unsigned message in Grafana
- [HELM-293](https://issues.opennms.org/browse/HELM-293): string properties can't be used easily in Helm
- [HELM-296](https://issues.opennms.org/browse/HELM-296): Create Helm 7.2.0 Release
- [NMS-9889](https://issues.opennms.org/browse/NMS-9889): Update VMWare import documentation regarding multiple parameters
- [NMS-11725](https://issues.opennms.org/browse/NMS-11725): HTTPS monitor with letsencrypt certificates
- [NMS-13507](https://issues.opennms.org/browse/NMS-13507): Enlinkd API response extremely slow for some nodes
- [NMS-13564](https://issues.opennms.org/browse/NMS-13564): Dynamic Configuration of Trap Listener
- [NMS-13589](https://issues.opennms.org/browse/NMS-13589): Geo-Map: port Geo-Map code to ui-foundation
- [NMS-13610](https://issues.opennms.org/browse/NMS-13610): Consolidate all IPC features into one / need conf.d changes
- [NMS-13708](https://issues.opennms.org/browse/NMS-13708): Flow Thresholds: Data collection
- [NMS-13711](https://issues.opennms.org/browse/NMS-13711): Flow Thresholds: Housekeeping
- [NMS-13712](https://issues.opennms.org/browse/NMS-13712): Flow Thresholds: Allow to enable/disable thresholding/data collection
- [NMS-13718](https://issues.opennms.org/browse/NMS-13718): Add "exclude-url" to Discoverd's configuration
- [NMS-13743](https://issues.opennms.org/browse/NMS-13743): Allow collectors exposed via OIA to be scheduled via collectd
- [NMS-13744](https://issues.opennms.org/browse/NMS-13744): Allow monitors exposed via OIA to be scheduled with pollerd
- [NMS-13778](https://issues.opennms.org/browse/NMS-13778): Permission check in ./install -dis flags unwriteable files in the .git directory
- [NMS-13789](https://issues.opennms.org/browse/NMS-13789): 29.0.1 minion should be RUNAS=minion
- [NMS-13790](https://issues.opennms.org/browse/NMS-13790): Flow Thresholds: Compute sequence numbers to support distributed flow thresholding
- [NMS-13807](https://issues.opennms.org/browse/NMS-13807): Phase 1 flows documentation: "Basic" setup
- [NMS-13812](https://issues.opennms.org/browse/NMS-13812): Missing RRD package definition in BMP persisting adapter
- [NMS-13824](https://issues.opennms.org/browse/NMS-13824): Flesh out Prometheus datacollection shipped config
- [NMS-13832](https://issues.opennms.org/browse/NMS-13832): CVE-2021-28164: access to WEB-INF
- [NMS-13842](https://issues.opennms.org/browse/NMS-13842): Extend SnmpMetadataProvisioningAdapter configuration to support exact OID matches
- [NMS-13850](https://issues.opennms.org/browse/NMS-13850): Log4j2 0-day: CVE-2021-44228
- [NMS-13851](https://issues.opennms.org/browse/NMS-13851): Customer is not able to view Topology
- [NMS-13854](https://issues.opennms.org/browse/NMS-13854): validate doc merge
- [NMS-13855](https://issues.opennms.org/browse/NMS-13855): Flow Thresholds: Add ifName to strings.properties
- [NMS-13857](https://issues.opennms.org/browse/NMS-13857): Javascript security updates (December, 2021)
- [NMS-13858](https://issues.opennms.org/browse/NMS-13858): CVE-2021-45046: incomplete Log4j2 vulnerability mitigation