1. Headline features

1.1. User interface & experience

PatternFly 5 UI updates

Continued migration to PatternFly 5 brings modernized notifications (#38345) and other UI components, improving the overall user experience with updated design patterns.

1.2. Infrastructure & platform updates

Multi-architecture iPXE support

iPXE chain UEFI now supports multiple architectures (#38300), enabling proper provisioning of ARM64 and other non-x86_64 hosts by delivering the correct iPXE binary for each architecture.

Resource Quota plugin

If you use the Resource Quota plugin on Foreman 3.16, Foreman will automatically assign all existing hosts to the Unassigned resource quota during the upgrade to Foreman 3.17. For more information, see Limiting host resources in Administering Foreman.

2. Upgrade warnings

Ruby 2.7 no longer supported

Ruby 2.7 support has been dropped (#38115, #38883).

Grub1 removed

Support for legacy GRUB (Grub1) has been completely removed from both Foreman and Smart Proxy (#38768, #38772, #38787, #38791). Only GRUB2 is supported going forward. If you are still using Grub1 for provisioning, migrate to GRUB2 before upgrading.

3. Deprecations

There are no deprecations with Foreman 3.17.

4. Foreman 3.17.0

You can find the complete list of changes on Redmine.

4.1. Foreman

  • Allow better empty states in TableIndexPage - #38875

  • Add Hardware Model inclusion option to Host - Installed Products report template - #38872

  • Use webpack cache in development - #38864

  • Sessions fail to expire if add_smart_proxy_filters is run - #38840

  • Kickstart dynamic partition table fails on UEFI systems - #38839

  • update TemplateGenerator to pf5 - #38837

  • Add mouseover support for host status icon in All Hosts page - #38836

  • Permit type param in foreman/links_controller - #38835

  • Add sub-menu Host collections to bulk hosts Change associations - #38830

  • update ModalProgressBar to use pf5 - #38828

  • Couldn't find User with 'id'=9 HTTP error code 404: Not Found when trying to register any host - #38819

  • Not all subnets are shown on subnets page - #38804

  • DB tables which dynflow needs to run are being truncated in JS integration tests - #38794

  • Adjust tests to changes in scoped_search >= 4.3.0 - #38788

  • As a user I would like to see the overall status of each host in the list - #38786

  • Error in global registration script for ubuntu - #38781

  • Get rid of Grub (not grub2) - #38768

  • skip_failure option in foreman upgrade:run rake task does not work as designed - #38755

  • Hostgroup data not loaded if host created from Hostgroup Page - #38747

  • Selected organization check mark covers name in the UI - #38740

  • Update CardTemplate dropdown for PF5 - #38737

  • yggdrasil service not enabled - #38736

  • Get rid of lsb in provisioning templates - #38733

  • Debian 13 Network Based Deployment not working on UEFI: "Loading GRUB2 from ESP" results in fwsetup - #38732

  • No scroll bar while selecting Organization/Location from change associations on new All host UI page - #38722

  • Association scopes are not honored by scoped search autocompletion - #38718

  • generate report datepicker overlapping - #38715

  • RSS URL doesn't support IPv6 literal - #38713

  • Settings page is slow to respond to clicks and searches - #38708

  • Refactor EmptyStateComponent snapshot tests to RTL - #38704

  • run github js test on js scripts - #38700

  • Make sure NODE_OPTIONS have a default and are usr-overridable - #38696

  • "No hosts matched search, or action unauthorized for selected hosts" error comes while using the filter box in Content Host Errata Management - #38694

  • dev docs - ui tests - #38673

  • dev docs - ui troubleshooting - #38438

  • update notifications to pf5 - #38345

  • HostCounter is not resetted - #38303

  • Add common network config scenarios for Ubuntu template snapshots - #38229

  • Missing space in help text for provision method - #37780

  • Always load local disk's GRUB2 configuration - #37653

  • Missing installation media during Host Registration: ERROR: Validation failed: Medium must belong to host's operating system - #37602

  • Changing the association of a host to hostgroups via UI and API differs extemely - #37523

  • BMC Power reboot button incorrectly triggered shutdown instead of reboot - #3073

4.1.1. API

  • Interface object does not provide backlink to host - #38725

  • Backend system status widget does not display all plugins - #38667

  • We get "undefined method" error when trying to show non-existent settings via id - #38653

4.1.2. Compute resources

  • Fix CR VM json partial rendering - #38793

4.1.3. Compute resources - libvirt

  • Enhance Libvirt Compute resource to allow user to change default video card - #38886

4.1.4. Compute resources - oVirt

  • available_vnic_profiles.rabl is unused - #38846

4.1.5. Host creation

  • Host form - accept hostgroup_id & host[hostgroup_id params] - #38769

4.1.6. Host registration

  • Always force manage_repos to be enabled in rhsm.conf as a part of subscription_manager_setup snippet execution - #38866

  • When provisioning rhel9+ via fdi using static network information, localhost.localdomain will be created on Foreman webUI - #38855

  • Ensure registration fails when /unattended/built endpoint is unreachable - #38762

  • Global Registration tries to unregister the host twice with --force - #38644

4.1.7. Internationalization

  • Setting descriptions aren't translated anymore - #38735

  • Redundant translation tag with only an interpolation string in vmware template - #37838

4.1.8. Inventory

  • Allow ForemanContext to be extended from plugins - #38799

  • Host details kebab inconsistent ui - #38663

4.1.9. JavaScript stack

  • drop react-bootstrap pin in package.json - #38614

  • pin react-bootstrap renegerator-runtime to packaged version - #38598

4.1.10. Network

  • Can't register systems with bond interface named bond- AND a tagged vlan on the same interface - #38870

4.1.11. Packaging

  • Drop Ruby 2.7 support - #38115

4.1.12. Power management

  • Add BMC Smart Proxy to host.smart_proxy_ids - #38767

4.1.13. Search

  • Allow ordering on virtual columns - #38024

4.1.14. Security

  • CVE-2025-9572: GraphQL API permission bypass leads to information disclosure - #38913

  • CVE-2025-10622: OS command injection via ct_location and fcct_location parameters - #38885

  • Autocomplete feature for search shows content that should be forbidden by RBAC - #38727

4.1.15. Settings

  • Settings - Update value from response - #38795

4.1.16. Templates

  • Remove EOL OSes from kickstart default - #38647

  • Update links in partition tables - #38646

  • Support OpenVox Agent in Provisioning Template - #38624

  • ca_registration snippet does not update ca-trust on debian - #38318

  • The "CloudInit default" template is not designed to set or update the root password on deployed systems - #37901

4.1.17. Tests

  • Unstable integration tests - #38770

4.1.18. Unattended installations

  • Managed interfaces without subnet assigned should include options to not initialize them at boot time - #38750

  • Provisioning templates use host_enc macro to determine the realm - #38688

  • iPXE chain UEFI - Add support for multiple architectures - #38300

  • Display subscription-manager status in logs - #38136

4.1.19. Users, Roles and Permissions

  • User's organization and location membership is not propagated to authorization checks - #38731

  • user jwt ui warning - #38660

  • Handle invalid scope filter in UI - #38655

  • Filters are created as completely unlimited, ignoring parent taxonomy - #37987

4.1.20. Web Interface

  • New css variable for list color - #38884

  • replace all pf3 icon imports with pf5 icons - #38817

  • Allow TableIndexPage to accept and pass through a custom ouiaId prop - #38790

  • Add expand all rows functionality to the table component - #38629

4.2. Installer

4.2.1. External modules

  • Remove SCA-irrelevant event handling from broker filter - #38813

4.2.2. Foreman modules

  • Add support for foreman_ovirt plugin - #38921

  • puppet-foreman_proxy - tftp.pp - Do not create a directory for grub1 - #38791

4.3. Smart Proxy

  • Drop Ruby 2.7 support - #38883

  • PXE & iPXE configs in :tftp_root/host_config directory - #38820

  • BMC developer docs - #38803

  • Get rid of grub (not grub2) - #38772

  • Wrong/missing implementation of BMC proxy power operation - #38498

4.4. Hammer CLI

  • Password is not hidden in logs - #38894

4.5. Hammer CLI - Foreman

  • Remove unlimited and override fields for filters #38805

Appendix A: Foreman contributors

We’d like to thank the following people who contributed to the Foreman 3.17 release:

Adam Lazik, Adam Růžička, Archana Kumari, Arvind Jangir, Bastian Schmidt, Ben Ford, Bernhard Suttner, Brian Witt, Chris Roberts, Dieter Maes, dosas, Eric Helms, Evgeni Golov, Ewoud Kohl van Wijngaarden, Francesco Di Nucci, Frank Wall, Hiroshi Ikuta, Jan Löser, Jeremy Lenz, Joniel Pasqualetto, Kenyon Ralph, kmalyjur, Konstantinos Familonidis, Leos Stejskal, Lisa Bekdache, Lucy Fu, Lukas Hellebrandt, Lukas Jezek, Lukas Magauer, Maria Agaphontzev, Markus Bucher, Markus Reisner, Matt Darcy, Nadja Heitmann, Oleh Fedorenko, Ondřej Gajdušek, Pat Riehecky, pavanshekar Quirin Pamp, Robert Everson, Romain Tartière, Sayan Das, Shimon Shtein, Shubham Ganar, Takashi Kajinami, Tim Meusel, Vanou Ishii, Waldirio M Pinheiro, Yusuke Hirota

As well as all users who helped test releases, report bugs and provide feedback on the project.

Pre-release version Report issue