ProxCenter v1.4.4

Maintenance release: stability and security hardening, shared migration tasks, plus MSP per-tenant dashboards.

MSP & dashboards

• Header tenant switcher. Switch the active tenant from the navbar; dashboards are scoped to the selected tenant, so the provider can review each tenant's view without leaving the dashboard.

Migration

• Shared migration tasks. In-flight migrations now appear in the footer for every user, so the whole team sees what is running, with a link to the warm-migration setup docs.
• Correct stream exit code. A failed block-device transfer is now reported as a failure instead of being masked as success.
• Bounded thick-target zero-fill. Warm migration to a thick target bounds the zero-fill so it can no longer exit on a false ENOSPC on the destination volume.

Backups

• Real gateway errors. The Backups tab now surfaces the underlying gateway error instead of failing with "Unexpected token '<'" when a reverse proxy returns an HTML error page.

RBAC & access

• OIDC role re-sync on login. OIDC users re-sync their role from IdP group membership on every login, so group changes take effect immediately.
• Resource-scoped performance graphs. RRD performance graphs are scoped to the individual resource rather than the whole connection, closing an RBAC scope leak.

Reliability

• Stable performance chart axes. RRD charts show dates on the axes for multi-day timeframes, not just times.
• Stable inventory NETWORK section. The NETWORK section stays in place when a connection briefly blips instead of collapsing.
• Real errors surfaced. Guest and node API routes no longer swallow underlying errors, so failures are reported instead of showing empty data.
• Faster console previews. VM console screenshots are served as JPEG instead of raw PPM, for lighter and faster previews.
• Writable cache for the runtime user. The container creates a writable .next/cache for the non-root runtime user, fixing a startup EACCES behind some deployments.
• Safer DR config writes. Replication writes the DR config with cp -f on pmxcfs, avoiding a transient failure window during the write.

Security

• Reduced image surface. The unused npm binary is removed from the runtime image, clearing the bundled undici advisories.
• Patched CVEs. Dependency CVEs are patched (including OpenSSL on the orchestrator image), a feature-route error log is sanitized, and front-end dependencies are refreshed (postcss, tailwindcss, @novnc/novnc, next-intl, nanoid, ws).

Docker Images

docker pull ghcr.io/adminsyspro/proxcenter-frontend:v1.4.4
docker pull ghcr.io/adminsyspro/proxcenter-orchestrator:v1.4.4
docker pull ghcr.io/adminsyspro/proxcenter-weasyprint:v1.4.4