Version 3.2.8 has been released

[Matthew Newton]

We have released FreeRADIUS 3.2.8.

A few noteworthy items from the changelog:

- Added rlm_kafka to produce messages to Kafka.
- Alterations to how reject_delay works.
- Ability to delay proxied messages, too.
- Improvements to the dpsk module.
- More debug output with helpful pointers to documentation.

As well as many bug fixes. Full information is in doc/ChangeLog.

Download from the normal places:

   https://freeradius.org/releases/

   https://freeradius.org/ftp/pub/freeradius/

  
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_8


Packages
--------

Packages are available from InkBridge Networks for common Linux 
distributions as usual:

   https://packages.inkbridgenetworks.com/

Note that there are not yet packages for Rocky 10 or Debian 13 due to 
these being newly released. These will follow in due course.

Docker images are also available:

   https://hub.docker.com/r/freeradius/freeradius-server


Important note on Docker
------------------------

With this release we are making experimental multi-arch Docker images 
available at freeradius/freeradius-test:3.2.8 (and similar). The current 
intention is to swap the main `freeradius/freeradius-server` tags over 
to this at the next release.

To date, images have been built at release time only meaning no further 
updates are made. As well as having support for common ARM architectures 
as well as amd64, the images going forwards will be refreshed on a more 
regular basis meaning base OS security updates will be applied to the 
FreeRADIUS images. (At least the images for the last couple of released 
versions will be rebuilt regularly.)

This will break the assumption that a Docker image does not change once 
the tag has been released (not common for Docker in general, but has 
largely been true for FreeRADIUS thus far). We recommend that you check 
any processes (e.g. CI or release pipelines) before the next release.

If you have a requirement that the image does not change once pulled, 
you may need to use an intermediary local docker registry or build based 
on the image hashes (which are fixed), rather than the published tags.


FreeRADIUS Support
------------------

Finally, brief a reminder that commercial FreeRADIUS support (including 
system builds and professional development services) is available from 
InkBridge Networks, which helps fund FreeRADIUS development.

-- 
Matthew