TLXOS 5.2.4

TLXOS 5.2.4

Bugs fixed

• when three or more server names are provided, in the server pick list the third and subsequent names are appended to the second rather than appearing as separate entries
• failure to list and/or select (if set to Auto) hotplugged USB audio input/output devices due to a race condition
• Wireguard VPN may not work due to various missing capabilities (see below)
• resetting to defaults by any means other than the console keyboard shortcut does not reset /boot/config.txt and /boot/cmdline.txt to their default versions also (RPi and RPi64 only)
• multiple dbus-daemon processes are started if /etc/X11/Xsession is used (e.g. by XRDP)
• applications dependent upon dbus-daemon (e.g. RAS and Video Conference modes) will fail to start if a rare PID number coincidence occurs
• in Horizon mode, H.264 will not be re-enabled when upgrading from an older version of TLXOS in which this had been turned off (RPi only)
• wrong product name and broken icon for Horizon launcher in Local Desktop mode (RePC only)
• the usual boot-up splash screen with the ThinLinX logo does not work on Pi 5s, and falls back to an uglier tribar text theme (RPi and RPi64 only)
• extension warning message and failure of automatic tab rotation in Legacy Digital Signage mode, due to incompatibility of TabCarousel 0.5.4 with Bookworm's version(s) of Chromium
• Local Desktop mode won't start (panels don't appear) (RPi64 only)
• NX mode won't start due to missing /usr/local/bin/nx symlink (RPi64 only)
• USB Ethernet adapters based on Realtek RTL815x chipsets will not work due to missing firmware (RPi only)
• Horizon mode creates client drive redirections for USB storage by default, which must be suppressed when booting TLXOS from USB storage to avoid accidental destruction of TLXOS
• in Horizon mode, the user is erroneously warned about not using BLAST when using the "BLAST (software-only)" (formerly "BLAST (no H.264)") submode (RPi only)
• corrected mistakes 70-monitor-hotplug.rules and 92-extra-alsa-card.rules custom udev rules where RUN= or PROGRAM= was used instead of RUN+= (exact bug effects not known)
• installer incorrectly preserves pre-existing configuration when performing a forced reinstall
• installer fails to create the intended default reset state when performing a forced (re)install
• Citrix web UI fails to detect locally installed Workspace App client

New features

• out-of-band USB redirection using USBIP - mainly as an alternative to USB redirection in RDP mode (e.g. for printers and webcams), which has significant availability limitations; requires app/driver on the desktop server and direct server-to-client network access, and is mutually exclusive with mode-specific USB redirection (requires TMS >= 8.4.5 and tms_client >= 8.4.7 or Tlxconfig >= 8.4.7)

Removed features

• removed Citrix Real Time Management Engine (RTME) extension for Workspace App; this is useless now that Microsoft has disabled Skype services

Software upgrades

• 6.6.119 kernel:
  • additional Policy IP Routing and Netfilter options that are needed for typical Wireguard deployments to work properly
  • added backported (by ThinLinX) support for RTL8125-based gigabit Ethernet NICs, e.g. for ASUS NUC14 models
  • removed hardware emulation drivers (leaving only common USB host controllers, RTL8139 NIC, Intel PIIX ATA and PrimeCell PL031 RTC, since these might be needed even when using "-M virt"), such that TLXOS RPi virtual machines now require paravirtualization (RPi only)
  • added support for increasing RAM at runtime on virtual machines (RPi64 and RePC only)
  • added PCIe hotplug support, needed for Thunderbolt (RePC only)
  • removed filesystem formats (SquashFS, EROFS) and advanced networking options (VXLAN, MPLS, Open vSwitch, NSH) that are unlikely to be needed
  • removed support for "unlikely" serial touchscreens (RPi only), since touchscreens intended for the Pi are all based on I2C or USB
  • removed unneeded nftables support, since we have decided that TLXOS 5.2.x will only ever use iptables (RePC only)
  • added camera sensor drivers (all for RePC, only those named in overlays for RPi) and various touchscreens and LCD panel drivers used in overlays (RPi only)
  • added NVMe target support, with multipathing, where not already present
  • various other minor changes. mostly for consistency across TLXOS editions
• tms_client / Tlxconfig 8.4.7
• FreeRDP 3.22.0
• Citrix Workspace App 2508.10 (except RPi, which remains limited to 2402)
• Horizon Client 2512 (except RPi64, for which this app is not available); since Horizon Client 2512 is unsafe to use on the Pi 5, RPi 5.2.4 also has Horizon Client 2212.1 co-installed, and will automatically use this instead on a Pi 5/CM5/500
• TabCarousel 1.0.3 (see above)
• Teams-for-Linux 1.4.40
• various Debian 12.13 updates (notably including Chromium 144)

Other

• default route for wired network (eth0) is now added with metric 1 rather than 0 (needed for Wireguard to work as expected)
• added resolvconf package and amended TLXOS scripting to avoid updating /etc/resolv.conf directly (needed for Wireguard to work as expected)
• removed /usr/local/sbin/find_eligible_storage, as this is only useful when in Maintenance Mode
• the version suffix has been removed from kernel files in /boot - this convention is only necessary for upgrading kernels using userspace tools, which cannot occur in TLXOS; removing the suffix eliminates a  human error hazard when preparing new releases (RePC only)
• removed unneeded libgtkglext1, gcc-10-base, mime-support, telnet, libsepol1, lsb-base, libaudio2 (RePC and RPi64 only) and libusb-0.1-4 (RePC only) packages
• on RPi64, removed udisks and xmlstarlet packages and their non-shared dependencies, as these are only needed for RASClient, which is not available for ARM64
• replaced exfat-utils package with exfatprogs, which is the newer Bookworm equivalent
• replaced custom stunnel build with the standard Debian stunnel4 package, since it is no longer possible to avoid installing perl-modules in any case
• replaced libraspberrypi0 and libraspberrypi-bin with raspi-utils-core (RPi only); /opt/vc now contains only libraries still needed by Horizon Client, compiled from Git sources
• rebuilt the initramfs from Debian Bookworm sources; this will improve security and may fix as-yet-unidentified systemd-related bugs
• Maintenance mode now displays an initial explanatory message on the console, to help avoid user confusion about what state the device is in and why in the event of license problems
• RPi has now been reverted to a dual 32/64-bit kernel arrangement similar to that used in 5.0.0, as this allows the most recent version of Horizon Client to be used wherever possible and safe, i.e. Pi 3 and 4 and their variants
• RPi64 has now reverted to using fKMS on Pi 3 and 4, since full KMS won't work under Xorg on Pi < 5 (and it seems that no-one cares enough to fix this, since it works under Wayland)

Known issues

• PXE booted devices operating as diskless clients will get stuck indefinitely during shutdown or reboot, and will require power removal or reset; this is because all recent Linux kernels require network interfaces to be dereferenced (i.e. shut down cleanly) prior to reboot or poweroff, which is very difficult when booting Debian from an ATA-over-Ethernet device
• Argon BLSTR DAC module for the Argon ONE V3 case (provides analog audio for Pi 5) doesn't work