v6.8.0.205 (July 8th 2026)

by Lauren Grob

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v6.8.0.

Release Notes

Alerts and Configuration Analysis

  • Added alert webhook support for Google Chat. [ QSTOR-9793 ]

  • Allow users to have a subset of alert subscriptions. [ QSTOR-11683 ]

Ceph Scale-out Block, Object and File

  • Added an 'Enable Versioning' checkbox to the Create Bucket dialog (automatically enabled when object locking or governance/compliance is selected); versioning can also be enabled on existing buckets. [ QSTOR-10937 ]

  • Added Ceph Tentacle 20.2.2 support to the Jammy QuantaStor ISO and package mirror. [ QSTOR-11441 ]

  • QuantaStor 6.8 ships Ceph 20.2.2 (Tentacle), which includes the upstream MDS fix (tracker #76031) for the SIGABRT/crash on client eviction caused by a null MDRequestRef under sustained metadata contention. [ QSTOR-11504 ]

  • The Ceph Tentacle 20.2.2 release resolves frequent radosgw (RGW) crashes related to Kafka bucket notifications. [ QSTOR-11687 ]

  • Fix ceph bucket delete with large number of objects timing out. [ QSTOR-11728 ]

  • Removed: the deprecated S3 bucket orphan-object cleanup feature; any existing scheduled task is disabled automatically on upgrade. [ QSTOR-11729 ]

  • Fixed a regression where deleting multiple Ceph (RBD) volumes at once on a multi-node cluster would fail after the first volume. [ QSTOR-11756 ]

  • Added support for major-version Ceph upgrades (through Tentacle 20.2.x) in the upgrade script. [ QSTOR-11762 ]

  • Increase the timeout for "Add Node" to a ceph cluster [ QSTOR-11906 ]

Dashboards and Analytics

  • Added: a 'qs-statsdb resetpassword' command to rotate the InfluxDB stats password; telegraf is updated in lockstep so dashboards keep working. [ QSTOR-11170 ]

  • Rebuilt bundled telegraf with its vendored rclone library updated to 1.74.3, clearing CVE-2026-41176 and CVE-2026-41179. [ QSTOR-11771 ]

Enclosures and Controllers

  • Fixed issue with "disappearing" enclosures [ QSTOR-11676 ]

  • Added support for the Supermicro SSG-222B-NE3X24R all-NVMe server, including hardware enclosure auto-detection, enclosure layout and diagram, and NVMe drive slot mapping in the QuantaStor web management interface. [ QSTOR-11712 ]

High Availability Failover

  • Add logging for manually run iofence commands [ QSTOR-11751 ]

  • Fixed HA pool failover persisting a stale size=0 / isMounted=false when the pool's datasets were still mounting during fast-import; the last-known-good size and mount state are now preserved (and the corrected record wins via a bumped modified timestamp). [ QSTOR-11818 ]

  • Fixed: Storage Pool HA io-fencing and failover now work over NVMe-TCP; target namespaces advertise persistent reservations. [ QSTOR-11850 ]

Kernel and Drivers

  • Updated Jammy platform Kernel to 6.8.0-90-generic [ QSTOR-10903 ]

  • Updated Jammy platform ZFS driver to 2.3.5 [ QSTOR-10903 ]

  • Updated Jammy platform SCST driver to 3.10 [ QSTOR-10903 ]

  • Updated Jammy platform mpi3mr driver to 8.15.1.0.0 [ QSTOR-10903 ]

  • Updated the Mellanox OFED driver installer for current Ubuntu 22.04 (Jammy) kernels, fixing driver installation failures on recent kernels. [ QSTOR-11709 ]

Multitenancy

  • Added RBD namespace support, allowing multiple tenants to share a single Ceph block pool with isolated volumes. [ QSTOR-11650 ]

NAS Gateway / Cloud Containers

  • Add a fix for Samba access to Cloud Container shares. [ QSTOR-11763 ]

  • Fixed: cloud containers are now accessible over SMB, not just NFS. [ QSTOR-11824 ]

  • Updated the bundled AWS CLI to version 2.35.6. [ QSTOR-11827 ]

Network Interfaces

  • Added DOCA OFED install script for jammy and upcoming noble platforms as an optional install for latest hardware. [ QSTOR-11069 ]

  • Fixed the Network Interface Rename feature on systems upgraded from older releases where the 'ip' command resides in a different path. [ QSTOR-11614 ]

  • Fixed: converting a local VIF to an HA VIF now preserves the original local interface if the conversion fails, so client connectivity isn't lost. [ QSTOR-11706 ]

Network Shares

  • Add the ability to specify per user or group permissions on Network Shares during create or modify [ QSTOR-10662 ]

  • Fixed: intermittent 'NFS server not responding' stalls under load by raising the nfsd listen backlog from 64 to 4096. [ QSTOR-10872 ]

  • Fixed: NFS client entries can now be added or removed on a share while a long-running replication or snapshot task is using it, instead of queuing. [ QSTOR-11571 ]

  • Consolidated the Network Share create/modify dialog's Permission Settings into the File Masks tab — now a single 'File Masks & Permission Settings' tab containing Owner Permission Settings plus the Directory and File Create Permissions Masks. [ QSTOR-11625 ]

  • Reduced excessive event logging (event spam) for network shares and related grid objects. [ QSTOR-11695 ]

  • Fixed handling of CIFS share options so empty/null option values are no longer written to the Samba configuration. [ QSTOR-11731 ]

  • Fixed an issue where an Active Directory group added to a share's permissions was not preserved, and excluded built-in/default AD groups from the group picker. [ QSTOR-11767 ]

Remote Replication, Snapshots and Backup Policies

  • Copy source Network Share settings to the destination share after replication. [ QSTOR-5738 ]

  • Add support for rollback of Storage Volumes and Network Shares for a replication schedule [ QSTOR-6227 ]

  • Minor updates to the auto snapshot cleanup tasks for replication schedules. [ QSTOR-11622 ]

  • Fix auto create of replication association after failover [ QSTOR-11700 ]

  • Snapshot schedule now shows the state detail when schedule is disabled by user. [ QSTOR-11717 ]

  • The Snapshot Schedule properties page now displays Retention Tags. [ QSTOR-11719 ]

  • Changed: Auto-tier backup policies now display as 'Auto-Tier >> Outbound' instead of 'Move >> Outbound'. [ QSTOR-11764 ]

  • Fixed the CLI replication-schedule rollback so volume and share names are accepted (not just IDs), and rolling back only volumes (or only shares) no longer also rolls back the other type. [ QSTOR-11814 ]

SCSI / NVMe Target

  • Added: a 'Select Initiator...' picker in the Add Host dialog to choose a discovered FC remote initiator WWPN instead of typing it. [ QSTOR-10741 ]

  • Renamed the sys-list 'Firmware Version' column to 'SCSI Target Version' and corrected the value to show the actual SCST target-driver version (e.g. scst-3.10.0.qs01-...) instead of the literal 'scst-SCST'. [ QSTOR-11854 ]

Security

  • Added support for Okta multi-factor authentication. [ QSTOR-9399 ]

  • Added Multi-Admin Approval support, allowing deletion of pools, buckets, shares, and volumes to require approval from a configurable number of administrators. [ QSTOR-11344 ]

  • Fixed certificate update failures when using a certificate template, and ensured dependent services (such as HAProxy and RGW) are restarted after a certificate replacement. [ QSTOR-11678 ]

  • Fixed an issue in the Security Manager dialog where it was showing the "password policy change" warning confirmation when no fields were changed. [ QSTOR-11708 ]

  • InfluxDB (port 8086) now requires authentication and binds to localhost by default; remote access is opt-in via the tf_influxdb_remote_access.enable touchfile (authentication still enforced). [ QSTOR-11759 ]

  • Added the Ubuntu security apt repositories to the default package sources and removed unused bundled components flagged by scanning (Chronograf, the LXD/core20/snapd snaps, the docker-scan plugin), clearing CVE-2024-41110, CVE-2026-34177/-34178/-34179, CVE-2020-14343, CVE-2025-68121, and CVE-2024-45337. [ QSTOR-11760 ]

  • Rebuilt the bundled QuantaStor Go tools (qs_iofence, qs_pool_export_helper, qs_diskinfo) and s5cmd with a current Go toolchain, clearing CVE-2025-68121, CVE-2024-45337, CVE-2024-24790, CVE-2023-24540, and CVE-2023-24538. [ QSTOR-11761 ]

  • Hardened the internal QuantaStor script service (scriptsvc): removed a command-injection vector in request handling and now enforce the service's authorization check on every call. Addresses ZDI-CAN-30036 [ QSTOR-11799 ]

  • Made a number of usability and reliability improvements to the multi-admin delete-approval workflow. [ QSTOR-11804 ]

Service Core

  • Fix tag-set where custom key/value tags were not appearing for User objects. [ QSTOR-11528 ]

  • Improved Ceph OSD daemon restart handling during upgrades and reduced database load on large-scale clusters. [ QSTOR-11675 ]

  • Fixed an issue with QuantaStor management service memory usage when a grid node was offline. [ QSTOR-11693 ]

  • Improved crash handling and diagnostic tracing for coordinated tasks, during operations such as adding a Ceph RADOS Gateway across multiple nodes. [ QSTOR-11702 ]

  • Improved logging and error checking for QuantaStor configuration database backups, including capturing error output when a backup fails. [ QSTOR-11742 ]

  • Expanded diagnostic log collection to capture additional network routing details (ip route output and static-route configuration). [ QSTOR-11748 ]

  • Fixed the Sessions view showing stale SMB/NFS client sessions that lingered after a reboot; the share session monitor now forces a full re-sync on its first poll after startup so sessions left over from before the reboot are cleared. [ QSTOR-11757 ]

  • Fixed a self-sustaining grid event flood triggered when creating CephFS/CIFS network shares at scale: nodes no longer re-cache remote-origin (sync-applied) events, and CIFS options are diff-merged to secondaries, eliminating the event resync cascade. [ QSTOR-11785 ]

  • qs-sendlogs now writes a qs_logs.runtime.info file recording the options and variables used during log collection, and reliably scrubs sensitive data from the collected database. [ QSTOR-11897 ]

Storage Pool Management

  • Added automated ordered-disk-list pool creation for Seagate Corvault and WD Data24 systems, simplifying creation of fully redundant storage pools. [ QSTOR-11538 ]

  • Fixed software-encrypted pool creation so a disk block-size mismatch is detected before disks are encrypted, avoiding leftover encryption mappings. [ QSTOR-11599 ]

  • ZFS deduplication now uses the faster fast_dedup mode by default, improving sustained deduplication performance. [ QSTOR-11714 ]

  • When a LUKS-encrypted disk member of a pool momentarily goes offline and the hot-spare swap-in completes, if the "bad" disk in question has in the meantime come back online, its iofence status, encryption status and its related properties in its respective disk object are cleared up, making the disk available for use again. [ QSTOR-11738 ]

  • Resolved a boot-time race where the OS-level zfs-import-cache.service could import ZFS pools before qs_service started. QuantaStor now imports pools with cachefile=none, masks the zfs-import-cache and zfs-import-scan services on install and upgrade, and clears the stale global ZFS cache file at boot, ensuring QuantaStor remains the sole coordinator of pool imports. [ QSTOR-11752 ]

  • Add the ability to create a Storage Pool checkpoint for scale-up pools [ QSTOR-11784 ]

  • Added a support-only, touchfile-gated pool-export triage call-out (qs_pool_export_triage.sh) that gathers diagnostics when a share or volume is still open during a storage pool export. Off by default (enabled via the tf_pool_export_triage.enable touchfile). [ QSTOR-11807 ]

  • Resolved issue preventing HA failover functionality using SED drives. [ QSTOR-11832 ]

Upgrade Manager and Installer

  • Added retry logic with a timeout to the Ceph upgrade script's daemon restarts so transient restart failures no longer abort the upgrade. [ QSTOR-10598 ]

  • Fixed focal-to-jammy distribution upgrades leaving the HA cluster service (pcsd/pacemaker) inoperative due to a missing ruby-webrick dependency on Ruby 3.0+. The upgrade now installs ruby-webrick so HA failover keeps working. [ QSTOR-11841 ]

  • Fixed focal-to-jammy distribution upgrades that could abort and roll back when Ubuntu's unattended-upgrades/apt-daily held the apt lock or needrestart blocked on a prompt. QuantaStor now disables automatic apt upgrades and runs the distribution upgrade non-interactively. [ QSTOR-11874 ]

  • Fixed a Noble (24.04) upgrade failure where qs-upgrade aborted because the dpkg package version string could not be parsed. QuantaStor now compares Debian package versions using dpkg's native version ordering. [ QSTOR-11881 ]

Web Manager

  • Minor fix to the "Copy to Clipboard" for task descriptions [ QSTOR-9574 ]

  • Added a method field and a sortable timestamp column to the web interface Audit Log Analyzer. [ QSTOR-11191 ]

  • Updated web interface translations across the major supported languages. [ QSTOR-11585 ]

  • Added a 'Create Share' option to the share template menu to quickly create a share applying all of a template's settings. [ QSTOR-11595 ]

  • Fixed the web interface to display all configured Ceph MDS daemons instead of limiting the list to five. [ QSTOR-11615 ]

  • Add auto select convenience buttons to the Storage Volume multi-delete dialog. [ QSTOR-11707 ]