OpenCHAMI Weekly Digest: Dec 01–Dec 08, 2025

Nov 24 – Dec 01, 2025

Highlights#

• Simpler API package generation requested for the fabrica repo, aiming to streamline module and application integrations.
• CoreDNS plugin enhancement: The coresmd repo added a “Fallthrough” feature to improve DNS routing flexibility.
• Power-control security boosted with OAuth2 token-based authentication for SMD requests, improving access control (power-control #56).
• Image-builder usability improved by allowing users to add extra DNF arguments, giving more control over system image builds (image-builder #51).
• Fixes for network interface parsing enhance reliability of ethernet configuration in boot-service.
• New discovery format and conversion added to ochami, expanding data interoperability.
• Security middleware upgrade underway in tokensmith with Casbin integration for more robust policy enforcement.
• Release cycle highlights:
  • coresmd v0.4.1 brings bug fixes and improvements.
  • versitygw-quadlet v0.3.0 marks a notable update.
• Community building progress: maintainers and code owners files proposed for better project governance in community repo.
• Content and docs polish: Several documentation improvements merged into openchami.org, including a new blog post announcing OpenCHAMI on vTDS.

New & Notable PRs#

• Add OAuth2 access tokens to SMD requests (#56) in power-control — Strengthen API security.
• Allow setting additional DNF arguments (#51) in image-builder — Customize package management during builds.
• New discover format & conversion script (#63) in ochami — Enhance data format flexibility.
• Integrate Casbin into tokensmith middleware (#6) — Enable advanced access policies.
• Fix ethernet interface unmarshaling (#2) in boot-service — Improve network handling.

Issues to Watch#

• Open issue for generating API packages in fabrica #26 — valuable for automating module integration.
• Build problem reported on x86 nodes with current image-builder version in #50.
• Governance improvements proposed in community #21 to add maintainers and code owners.

Releases#

• coresmd v0.4.1
• release v0.1.2
• versitygw-quadlet v0.3.0
• versitygw-quadlet v0.1.0

Contributor Thanks#

Big thanks to all contributors this week:
jacobsalmela, erl-hpe, Kratika-P, cjh1, alexlovelltroy, smehta99, synackd, davidallendj

What’s Next?#

• Finalize API generation features in fabrica to ease developer onboarding.
• Investigate and resolve image-builder x86 build issues.
• Expand token-based authentication support across projects.
• Continue streamlining governance with maintainers & codeowners.
• Promote recent improvements and releases through blog posts and webinars.

Proposed Blog Titles#

1. “Secure and Flexible: OAuth2 Integration Advances in OpenCHAMI’s Power-Control”
2. “Behind the Scenes: How We Enhanced CoreDNS with Fallthrough in coresmd”
3. “Simplifying Builds: New DNF Argument Support in Image-Builder”
4. “Exploring OpenCHAMI’s New Discovery Formats and Data Conversion Tools”
5. “Meet Casbin: Strengthening Access Control in OpenCHAMI’s Tokensmith Middleware” ß