DotNet 8.0.3 explicit dependency in v1.3.1.2 (Strategy for installing in an air-gapped environment)

bseklecki_ge

I was just about to ask "Why does v1.3.1.2 explicitly dependent on such an old version of DotNet (v8.0.3)? " (which was released March 12, 2024, but Kiwi NG v1.3.1.2 was released in January 2025)

 But I see now that v1.4.0.2 depends on DotNet v8.0.16 which is an improvement (if you're subject to continuous Nessus scans, etc.)

So I guess the question is now of strategy; for installations of Kiwi Syslog-NG into air-gapped environments:

My testing reveals that one can pre-load (pre-install) the latest version of the DotNet major version train, and the installer will not fail (For example, attempting and failing to retrieve the older, static/legacy version of 8.0.3)

However, outside the v8 train, this fails -- fails; pre-loading DotNet v9.x or even v10.x does meet whatever dependency requirement the installer has (RegEx string probably) .

Release engineering at SolarWinds must be a waking nightmare now that the ship is tied to ASP.Net; however, I would encourage a looser restrictions on version string interrogation.  DotNet 10.x is the next LTSB/LTSC, and Microsoft is eager to end v8.x, so that v10 can start having all the CVEs with the high score >:}

 ...and so it would be great if the installer could be configured to depend on it, even in pre-release/beta condition.

Thanks,

~BAS

mgebauer

Hi @bseklecki_ge ,

you are right on this matter.

From time to time we have to upgrade requirement for dotnet in the installer. Considering that Windows patches its machines regularly, this is not a big deal, as we expect the machines having dotnet on higher version. Having higher version of dotnet 8 in its computer is supported and backward compatible by Microsoft.

At this moment we plan to stay on dotnet 8. Until End of life in November 2026 (that may be prolonged by Microsoft) we will switch to another LTS dotnet 10.

Thank you

Martin