add changelog 2025_025

Author: osnyx

src/changes/2025/index.md

@@ -29,4 +29,5 @@ r021
 r022
 r023
 r024
+r025
 ```

src/changes/2025/r025.md

@@ -0,0 +1,79 @@
+---
+Publish Date: '2025-07-21'
+---
+
+
+# Release 2025_025 (2025-07-21)
+
+## Impact
+
+We have improved IO throttling on our hypervisors. These performance gains
+are available to all running VMs, irrespectively of their platform version:
+
+  * HDD-class VMs can burst up to 2.500 IOPS for 60 seconds and
+    have an explicit bandwidth limit of 250 MiB/s.
+  * SSD-class VMs can burst up to 20.000 IOPS for 60 seconds
+    and have an explicit bandwidth limit of 500 MiB/s.
+  * Reads and writes are now throttled separately, so all VMs
+    can use their IOPS limit separately for reading and
+    writing at the same time.
+
+
+### 25.05
+
+The following services may be restarted: postgresql.service, redis.service
+
+
+## NixOS 25.05 platform
+
+- devhost: switch to kea as dhcp server (PL-133857)
+
+  We had seen issues with DHCP packets having an invalid checksum. Kea handles this better and seems to resolve provisioning issues.
+  We continue to monitor the issues.
+
+- postgresql: add role `postgresql17` for newest major release. All existing versions of the postgresql role remain available.
+
+- Make XFS upgrades at boot-time optional and disable it by default.  (PL-133864)
+
+  We introduced the XFS upgrade code in the 25.05 cycle to allow long-living
+  filesystems enable features like "bigtime" which makes the filesystem
+  year 2038 compatible. The implementation chose robustness over performance
+  but the tradeoff ended up with boot times of tens of minutes even for
+  small or medium VMs. We're taking this feature back to the drawing board,
+  but provide a knob so it can be used in situations where it's really needed.
+
+- Pull upstream NixOS changes, security fixes, and package updates:
+    - chromedriver: 138.0.7204.92 -> 138.0.7204.100
+    - chromium: 138.0.7204.92 -> 138.0.7204.100
+    - firefox: 140.0.2 -> 140.0.4
+    - gitaly: 18.1.1 -> 18.1.2
+    - gitlab: 18.1.1 -> 18.1.2
+    - gitlab-container-registry: 4.23.1 -> 4.24.0
+    - gitlab-ee: 18.1.1 -> 18.1.2
+    - gitlab-pages: 18.1.1 -> 18.1.2
+    - gitlab-workhorse: 18.1.1 -> 18.1.2
+    - go_1_23: 1.23.10 -> 1.23.11
+    - keycloak: 26.1.4 -> 26.2.5
+    - linuxKernelStable: 6.12.35 -> 6.12.37
+    - linuxKernelVerify: 6.12.35 -> 6.12.37
+    - postgresql13Packages.postgis: 3.5.2 -> 3.5.3
+    - postgresql14Packages.postgis: 3.5.2 -> 3.5.3
+    - postgresql15Packages.postgis: 3.5.2 -> 3.5.3
+    - postgresql16Packages.postgis: 3.5.2 -> 3.5.3
+    - postgresql17Packages.postgis: 3.5.2 -> 3.5.3
+    - postgresqlPackages.postgis: 3.5.2 -> 3.5.3
+    - promtail: 3.4.4 -> 3.4.5
+    - python3Packages.structlog: 25.3.0 -> 25.4.0
+    - redis: 7.2.9 -> 7.2.10
+    - uv: 0.7.19 -> 0.7.20
+
+
+## Documentation
+
+- updated NAT endpoint IP addresses used by outbound traffic from machines with no public IPv4 address: {ref}`outbound`
+
+## Detailed Changes
+
+- NixOS 25.05: [platform code](https://github.com/flyingcircusio/fc-nixos/compare/29c53792b6a771323069b374d5b0ff83b40957a3...8cbd8224e1962895f3a89b35478fa93dcadf1ecb), [nixpkgs/upstream changes](https://github.com/flyingcircusio/nixpkgs/compare/5456fd668551c2c244499b9e7e91eacc1b9a75ee...5b84c538023d45435b912c2613cb6ce3ed4160b5), [metadata](https://my.flyingcircus.io/releases/metadata/fc-25.05-production/2025_025), [channel url](https://hydra.flyingcircus.io/build/7988790/download/1/nixexprs.tar.xz)
+
+