The latest release of NextCloudPi is out!
This release updates to the latest stable version, Nextcloud 13.
Also, there has been a special focus on enhancing security, and on providing tooling to assess the security of our instances.
In addition to the big changes, there is a small but important change: from now on, images will default to user ncp and password ownyourbits for all services, including not only the admin user of Nextcloud, but also SAMBA, ncp-web and elsewhere. As those features appeared organically each one with a different password, it became an unnecessary complication for people wanting to try out NextCloudPi for the first time.
Another small change: for consistency, you can now use
as a synonym of
As usual, there have been many fixes and enhancements. I would like to thank everyone that was involved.
Last but not least, please download through bitorrent and share it for a while to help keep hosting costs down.
The latest Nextcloud brings both new stuff and improvements.
There are also performance improvements, most notably for the web UI and LDAP.
UI speed improvements
Very welcome speed improvements for us using slow boards or Tor connections.
Back in Nextcloud 10, the developers had to stop using asset pipelining, which made the interface much heavier and slow.
Night and day!
You can check the full announcement
Support for big files in 32 bit systems
Many low end systems such as the Raspberry Pi use 32 bit operating systems. This is true even for Raspberry Pi 3, which has a 64 bit CPU when we are running Raspbian because they just don’t produce 64 bit images.
When we combine this with a stupid php limitation for this architectures we were left with the situation where we had a hard limit of 2GB files for Nextcloud uploads.
This has been worked around in code, so we can finally upload bigger files. It was about time!
The solution involves chunking the data and a quick test shows that it indeed works: the temporary data dir now contains 10 MiB files that come and go during the transfer, and the traffic becomes more “spicky”. Some testing will be needed to measure the performance impact of this workaround.
PHP 7.2 support
This was an issue, because many users were holding back their PHP packages in order not to break Nextcloud.
Uncomplicated Firewall (UFW)
UFW is a simple to use firewall, developed by Canonical. It is just another Netfilter wrapper, with simplicity in mind. This makes it a good fit for this project, because overly complicated technical stuff might not be actually usable by everyone.
Even easier to use for NextCloudPi, just activate it!
Audit your instance with nc-audit
NextCloudPi comes now bundled with a few security auditing tools, mainly
- Lynis, which was already covered here
The extra nc-audit will run those with the right parameters, so we can detect misconfigurations, potential vulnerabilities and known bugs
By using this tools, the configuration of NextCloudPi has been further enhanced for security.
Automatic creation of BTRFS snapshots
BTRFS snapshots are amazing! NextCloudPi is now able to schedule BTRFS backups in a space efficient way.
If we activate this option, snapshots will be produced automatically every hour, every day, every week and every month in the USBdrive that holds your datadir. Only 24 hourly backups, 7 daily backups, 4 weekly backups and 12 monthly backups will be produced, with the older ones over these limits being deleted.
$ ls -1 /media/myCloudDrive/ncp-snapshots/