[BETA] 2.9.0 beta release thread

Beta release announcements and discussion around them
Post Reply
User avatar
Tomas
Posts: 1336
Joined: Sat Jun 25, 2016 12:33 pm

Mon Apr 06, 2026 8:14 pm

Unimus 2.9.0-Beta1 is being released today! This is a release of the 2.9 code branch intended for testing purposes and early adopters.

Originally we planned to release 2.8.1 about a month and a half ago. However, due to multiple internal reasons, we decided to merge what were supposed to be our 2.8.1 and 2.8.2 releases into a single release. This "combined" release became so big that we are releasing it as 2.9.0.

If everything goes well, we expect to finish and merge another set of features and then release 2.9.0 into Stable in around 2 weeks.

A summary of what is new:
- notifications and Export for the Compliance feature
- many usability, UI and UX improvements
- new "metrics" endpoint in APIv3 allowing for monitoring (and Grafana dashboards) of Unimus performance
- performance improvements
- 8 new drivers and supported devices
- fixes for various edge-cases and device behaviors

Here is the full Changelog:
= Version 2.9.0 =
Features:
Added a "Search" field across all preset-based screens (Config Push, NMS Sync, Network Scan)
Added an option to set devices from a Config Push Output Group as Targets to another Config Push
Added "Search" in the Compliance preset screen, allowing searching in Rules and Conditions
Added a new "metrics" APIv3 endpoint under "/api/v3/metrics" which exposes Unimus performance metrics over the API
You can now move individual devices between Zones in "Zones > Devices in Zone > Show > Select > Move"
Improved UI performance with large number of jobs / events happening concurrently
Older UI toast notifications (top right) will now auto-dismiss when more than 50 notifications are stacked up
Added an option to Disable a single Compliance Rule
Added support for very large backup (1GB+ text/binary) upload over the API
Performance improvements for large target-sets in the Compliance feature
Various minor UI / UX improvements and fixes (help texts, styling, element alignment and spacing, etc.)
Improved CPU usage during Discovery and optimized CPU use in device communication code
The Accedian driver will now issue "session writelock" before doing "configuration export" to avoid "You don't have the write lock" errors
Added support for devices that use multiple different pagination prompts in outputs of from a single command
Added support for more variations of prompt shortening with very long commands on Cisco IOS-XR
Improved built-in dynamic data filters for changes on Digi devices
Added support for terminal logs on Digi devices (these will no longer cause job failures)
Added detection for failure to switch to "configure" mode on Aruba when managed by ACP
Added error recognition for "ambiguous value..." errors on MikroTik RouterOS devices
Added support for newer firmware versions of Raisecom RAX / ISCOM devices
Improved support for devices which output non-UTF characters on the CLI

Added Notifications for the Compliance feature:
- Unimus will now send a notification if the Compliance status of any device changes
- you can configure on which compliance changes you want to be notified on in the "Notification" settings
- notifications contain grouped details on the preset/rule/condition/devices which changed their Compliance status

Added Export functionality to the Compliance feature:
- you can now Export the "Compliance results" table to store or use in external systems
- Export is supported in full HTML format, or in a .csv and/or .yaml formats
- exports can be directly downloaded or sent through any available Notification Sender directly from the Export UI

SSH client updates, added support for the following KEX algorithms:
- mlkem768x25519-sha256
- mlkem768nistp256-sha256
- mlkem1024nistp384-sha384
- sntrup761x25519-sha512

Added support for:
- Acme Packet OS
- Aruba 9012
- Aruba AOS-10
- Hyconext NextWav switches
- Oracle SBC / Session Border Controller
- Sophos SFOS
- Sophos XGS
- TrueNAS Scale
- Waystream iBOS

Fixes:
Fixed API Push Job retention would not work if there were more than 33.000 API jobs in history
Fixed Saved Config Searches in HSQL overriding each other - in effect you could only have one saved search on HSQL
Fixed attempting to upload very large backups (1GB+) over the API would cause very high CPU usage
Fixed device backup counter in "Backups" would not live increment when backups were uploaded through the API
Fixed the line numbers in the "Variables" window could get broken and not scroll with the content
Fixed switching themes (Light/Dark) would trigger errors in the logs
Various minor UI / UX improvements and fixes (15+ minor visual issues fixed)
Fixed very long Config Push commands would fail to execute on Cisco IOS-XR
Fixed backup command was present in the backup data on ZTE ZXR
Fixed some specific Zyxel switches could be wrongly detected as Grandstream
Fixed prompt could be considred as part of output on Digi devices in Config Push, breaking Output Grouping
Fixed "show vlan brief" not captured during backup on Cisco Catalyst running IOS-XE
Fixed jobs would fail on Raisecom RAX with newer firmware versions
Fixed jobs would fail on Digi devices with terminal logging enabled
Fixed jobs could fail on Calix OccamOS devices with specific characters present in the config
Fixed jobs could fail on some versions of Nokia SR Linux
Fixed jobs could fail on specific version of the Cisco WLC
Fixed jobs could fail on specific version of Cisco ESW switches
Fixed jobs would fail on very specific versions of the HP(E) ProCurve / ProVision firmwares
Fixed jobs would fail on very specific versions of the HP(E) AOS-S firmwares

Security fixes:
Fixed read-only users could enter the New Compliance Preset creation screen
Fixed when a user lost access to a Compliance Preset, the "Add rule" button would still be available
We also have a single migration note with 2.9:
Migration warnings:
On ZTE ZXR, you can get a single config change notification due to the backup command stripping fix.
This config change should only happen on the first backup job after upgrade and can be ignored.
Builds are available for download here:
https://unimus.net/download-dev

Let us know if you have any feedback / questions on this release, or if you run into any issues!
cschnappinger
Posts: 10
Joined: Thu Oct 30, 2025 2:55 pm

Tue Apr 14, 2026 9:00 am

Hi Unimus-Team,

I'm testing the Waystream integration. Backups without sensitive data stripping works, but with that feature active, there's an error.

net.unimus.core.cli.exceptions.UnsupportedSensitiveDataStrippingException: null
at net.unimus.core.drivers.vendors.waystream.WaystreamBackupDriver.stripSensitiveData(WaystreamBackupDriver.java:71)
at net.unimus.core.service.backup.processor.DefaultBackupProcessor.sensitiveDataStrippingFormattingHook(DefaultBackupProcessor.java:155)
at net.unimus.core.service.backup.processor.AbstractBackupProcessor.formatBackup(AbstractBackupProcessor.java:178)
at net.unimus.core.service.backup.processor.AbstractBackupProcessor.backup(AbstractBackupProcessor.java:117)
at net.unimus.core.service.backup.CliBackupServiceImpl.backup(CliBackupServiceImpl.java:124)
at net.unimus.core.api.job.BackupJob.callService(BackupJob.java:52)
at net.unimus.core.api.job.AbstractJob.execute(AbstractJob.java:162)
at net.unimus.core.api.job.AbstractJob.run(AbstractJob.java:147)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.base/java.lang.Thread.run(Thread.java:840)

2026-04-14 10:32:17.781 TRACE 899215 --- [backup-11] n.u.c.s.connection.ssh.SshConnection : Closing device CLI session

Regards
Christian
Tommy.c
Posts: 68
Joined: Fri Jan 31, 2025 6:52 pm

Thu Apr 16, 2026 4:23 pm

Unfortunately, only Cisco devices are currently supported for data stripping, as described in our wiki. At the moment, there are no plans to support other vendors for this feature in the near future.

https://wiki.unimus.net/display/UNPUB/S ... +stripping

I have been using Unimus for a pretty long while and I didn't even realize this, sorry =-(
ddd
Posts: 1
Joined: Wed Jun 03, 2026 8:42 am

Wed Jun 03, 2026 8:51 am

Hello,
I am testing backup on Sophos XGS3300, but with no luck. I think the problem is that advanced shell is accessible after SFOS Menu - option 5, submenu 3, then advanced shell is accesible.
Unimus 2.9.0-Beta1 successfully discovered my device ( vendor, type, model )

Is there something I can try to make it work?

Device: XGS3300, SFOS 21.5.2 MR-2-Build323, HA active/passive
Error: INTERACTION_ERROR on backup
User avatar
Tomas
Posts: 1336
Joined: Sat Jun 25, 2016 12:33 pm

Wed Jun 03, 2026 4:02 pm

ddd wrote:
Wed Jun 03, 2026 8:51 am
Hello,
I am testing backup on Sophos XGS3300, but with no luck. I think the problem is that advanced shell is accessible after SFOS Menu - option 5, submenu 3, then advanced shell is accesible.
Unimus 2.9.0-Beta1 successfully discovered my device ( vendor, type, model )

Is there something I can try to make it work?

Device: XGS3300, SFOS 21.5.2 MR-2-Build323, HA active/passive
Error: INTERACTION_ERROR on backup
Hi, it would be best to submit full logs (both Debug Log and Device Output Log) from a failed Backup run to us in a support ticket. We will need to handle this in the SFOS driver.
Post Reply