getsentry/self-hosted 25.8.0

on GitHub

We're excited to see so many new contributors bringing their excellent work to this release! Here's what's new:

Default Disallowed IPs

SENTRY_DISALLOWED_IPS defaults will be changed in the next self-hosted release. These defaults are commented out right now here: getsentry/sentry@4c4eec3, but will be adopted in 25.9.0.

Podman support

We finally addressed that 5 years old issue requesting Podman support. Since podman compose has become quite compatible with docker compose, we decided it was time to make this happen. To use it, simply run the install script with CONTAINER_ENGINE_PODMAN=1 ./install.sh. If you successfully get self-hosted Sentry running with Podman, we'd love to hear about it on our Discord!

Healthchecks for Sentry containers

Previously, only databases and web containers had healthchecks, which wasn't ideal. We've now added healthchecks to most containers, so you can easily spot which ones are having issues without digging through logs one by one. Just make sure your docker-compose.yml is updated to take advantage of this improvement.

Various configuration changes

We made several configuration changes that should improve your experience. In docker-compose.yml, we added some missing containers related to snuba-subscriptions-generic-metrics, which fixes the issue where metrics alerts weren't triggering properly (see issue #3838).

In sentry.conf.py, we reorganized the feature flags and added the missing organizations:profiling-view flag to ensure profiling works correctly in the web UI. One important change: make sure you have SENTRY_OPTIONS["taskworker.enabled"] = False so your jobs continue running on Celery. We're planning to transition to Taskbroker next month, which will also remove the cron and worker containers, reducing the load on Redis (or RabbitMQ) queues.

Other notable changes

• We bumped the minimum bash version to 4.4.0. If you're running CentOS 7, you'll need to either upgrade your distribution or upgrade bash (though the latter is more challenging).
• The chown command for the sentry-vroom volume used to take an unnecessarily long time. We've optimized it to check ownership first before executing the command, making it much faster.
• New available preview feature: Native OTLP ingestion! See issue #3830.
• The sentry image is no longer being published on DockerHub. As mentioned in release notes for 25.7.0, we're going to remove workflows to push images to DockerHub in the upcoming months.

For questions or discussion about these changes, join us on Sentry's Discord! We're always happy to chat.

Various fixes & improvements

• feat: Relay healthcheck (#3875) by @aldy505
• fix: setup swapfile only if runner architecture is X64 or X86 (#3876) by @aldy505
• Set minimum bash version to 4.4.0 (#3873) by @aminvakil
• fix: adjust file healthcheck durations (#3874) by @mzglinski
• feat: healthchecks for sentry components (#3859) by @mzglinski
• fix(eap): Fix dataset parameter to target spans (#3866) by @phacops
• build(deps): bump actions/create-github-app-token from 2.0.6 to 2.1.0 (#3865) by @dependabot
• fix(scripts): use env to find bash interpreter (#3861) by @Zaczero
• fix(scripts): every known flags should be shifted before executing the sentry command (#3831) by @aldy505
• fix: uptime checker image should be bumped to the tagged release (#3858) by @aldy505
• fix(enhancement): ensure correct ownership check before setting permissions of profiles (#3855) by @LvckyAPI
• chore(features): cleanup feature flags grouped by its' category (#3843) by @aldy505
• fix: add schedulers for generic metrics subscriptions (#3847) by @mzglinski
• feat: Continue using celery in self-hosted for now (#3845) by @markstory
• feat(features): add profiling-view flag (#3837) by @aldy505
• Potential fix for code scanning alert no. 12: Workflow does not contain permissions (#3822) by @aldy505
• docs: clearly state that system.internal-url-prefix shouldn't be changed (#3829) by @aldy505
• feat(install): Adds support for podman(compose) (#3673) by @DuncanConroy
• fix(action): missing project directory path for failure inspection (#3825) by @aldy505
• Cleanup unused feature flags (#3820) by @doc-sheet
• feat: inspect docker compose failure on self-hosted e2e action (#3817) by @aldy505