# mvirt 0.24.14

migrations: no
wire: unchanged
rev: 3da83f0b21004d8c7588da030b2184e7facef393

mvirt 0.24.14

Every control-plane host may now run the object gateway, so workload
logs reach object storage whichever member leads. The S3 proxy also
canonicalises query strings the way the providers do.

- nix: objectGateway is allowed on any edge host, not only the bootstrap
  one; a replica's gateway resolves through the leader-following public
  API, and its control plane gets the gateway address and the shared
  token (#259, #362).
- s3-proxy: a raw '/' in a query (prefix=a/) no longer fails with
  SignatureDoesNotMatch; inbound verification and outbound signing
  canonicalise the query as the provider does (#363).


## Upgrading

Point your flake's `mvirt` input at this release and redeploy the control-plane
host first, then each node in turn:

```
nix run .#colmena -- apply boot --reboot --on <control-plane host>
nix run .#colmena -- apply boot --reboot --on <node>   # one at a time
```

This release adds no migrations, so the control-plane host rolls back the same way
a node does: boot the previous NixOS generation.