github.com/pterodactyl/wings

Fixed

• Rewrote handler logic for the power actions lock to hopefully address issues people have been having when a server crashes and they're unable to start it again until restarting Wings.
• Fixes files uploaded with SFTP not being owned by the Pterodactyl user.
• Fixes excessive memory usage when large lines are sent through the console event handler.

Changed

• Replaced usage of encoding/json throughout the codebase with a more performant encoder (goccy/go-json) to hopefully improve overall performance for JSON operations.
• Added custom ContainerInspect function to handle direct calls to Docker's CLI and make use of the new JSON encoder logic. This should reduce the total number of memory allocations and be more performant overall in a hot pathway.

Fixed

• Fixes sending to a closed channel when sending server logs over the websocket
• Fixes wings diagnostics uploading no content
• Fixes a panic caused by the event bus closing channels multiple times when a server is deleted

Fixed

• Fixes SSL paths being improperly converted to lowercase in environments where the path is case-sensitive.
• Fixes a memory leak due to the implemention of server event processing.

Changed

• Selecting to redact information now redacts URLs from the log output when running the diagnostic command.

Added

• Adds support for modifying the default memory overhead percentages in environments where the shipped values are not adequate.
• Adds support for sending the Access-Control-Request-Private-Network header in environments where Wings will be accessed over a private network. This is defaulted to off.

Fixed

• Fixes improper event registration and error handling during socket authentication that would cause the incorrect error message to be returned to the client, or no error in some scenarios. Event registration is now delayed until the socket is fully authenticated to ensure needless listeners are not registed.
• Fixes dollar signs always being evaluated as environment variables with no way to escape them. They can now be escaped as $$ which will transform into a single dollar sign.

Changed

• A websocket connection to a server will be closed by Wings if there is a send error encountered and the client will be left to handle reconnections, rather than simply logging the error and continuing to listen for new events.

Fixed

• Fixes servers not properly re-syncing with the Panel if they are already running causing them to be hard-stopped when terminated, rather than stopped with the configured action.

Changed

• Changes SFTP server implementation to use ED25519 server keys rather than deprecated SHA1 RSA keys.

Added

• Adds server uptime output in the stats event emitted to the websocket.

Added

• Global configuration option for toggling server crash detection (system.crash_detection.enabled)
• RPM specfile

Fixed

• Fixes a race condition when setting the application name in the console output for a server.
• Fixes a server being reinstalled causing the file_denylist parameter for an Egg to be ignored until Wings is restarted.
• Fixes YAML file parser not correctly setting boolean values.
• Fixes potential issue where the underlying websocket connection is closed but the parent request context is not yet canceled causing a write over a closed connection.
• Fixes race condition when closing all active websocket connections when a server is deleted.
• Fixes logic to determine if a server's context is closed out and send a websocket close message to connected clients. Previously this fired off whenever the request itself was closed, and not when the server context was closed.

Added

• Exposes 8080 in the default Docker setup to better support proxy tools.

Changed

• Releases are now built using Go 1.17 — the minimum version required to build Wings remains Go 1.16.
• Simplifed the logic powering server updates to only pull information from the Panel rather than trying to accept updated values. All parts of Wings needing the most up-to-date server details should call Server#Sync() to fetch the latest stored build information.
• Installer#New() no longer requires passing all of the server data as a byte slice, rather a new Installer#ServerDetails struct is exposed which can be passed and accepts a UUID and if the server should be started after the installer finishes.

Removed

• Removes complicated (and unused) logic during the server installation process that was a hold-over from legacy Wings architectures.
• Removes the PATCH /api/servers/:server endpoint — if you were previously using this API call it should be replaced with POST /api/servers/:server/sync.