FullCount OS Image Versions

FullCount OS Image Versions

FullCount OS Image Versions

Overview

The primary method for installing software on FullCount terminals, tablets and virtual machines is a disk image that contains the operating system, applications, and all of their configuration settings. We refer to this as an "OS image". The tables below contain basic information about the OS images for different types of hardware. The purpose of this article is to keep track of the date each OS image built, which OS and version it was based on, and any significant fixes or changes that were introduced.

Terminals

FC Version

Build Date

OS

OS Version

Browser

Browser Version

Kernel Version

Comments

3

unknown

openSUSE

11.2

Firefox

3.5.4

 

Many different images have version number of "3".

4.1

2012-05-08

openSUSE

11.2

Firefox

3.5.4

 

Built with Autoyast.
Based on openSUSE 11.2 GA (i.e. no updates).
Installs from CD-ROM only; no USB installer.
Added "dom.max_script_run_time" to "user.js" to prevent Firefox from displaying warnings about long-running scripts.
Added "network.http.pipelining" to "user.js" to reduce page-loading time.
Added "network.http.pipelining.ssl" to "user.js" to reduce page-loading time.
Added "net.ipv6.conf.all.disable_ipv6 = 1" to "sysctl.conf" to completely disable IPv6.

4.2.0

2013-10-10

openSUSE

11.4

Firefox

19.0.2

 

Completely new build system based on KIWI.
Based on openSUSE 11.4 + official updates + Evergreen updates.
Changed DHCP client from dhcpcd-3.23 to dhclient-4.2.4.

4.2.1

2013-10-10

openSUSE

11.4

Firefox

19.0.2

 

 

4.2.2

2104-02-07

openSUSE

11.4

Firefox

19.0.2

 

Updated 3M touchscreen driver to version 7.14.0 to fix problem with "xorg.conf" file.

4.2.3

2014-04-09

openSUSE

11.4

Firefox

19.0.2

 

Patch for NTP hanging during boot process.
Patch for CVE-2013-5211 (NTP traffic amplification).
Updated ELO touchscreen driver to fix losing calibration problem.

4.3.0

2014-11-13

openSUSE

11.4

Firefox-ESR

31.2.0

 

Switched to Firefox "extended support release".
Patches for CVE-2014-6271 (a.k.a "shellshock").
Added OS-level cache for DNS lookups to improve performance with slow or unreliable DNS servers.

4.3.1

2014-12-08

openSUSE

11.4

Firefox-ESR

31.2.0

 

Bug fix for disabling unused Apache modules.
Updated 3M touchscreen driver to version 7.14.1 to remove deprecated UDEV rules.

4.3.2

2015-04-14

openSUSE

11.4

Firefox-ESR

31.2.0

 

Disabled Firefox mouse wheel actions.

4.3.3

2015-08-20

openSUSE

11.4

Firefox-ESR

31.8.0

3.0.101-99-default

Disabled Firefox prompt to reset profile after 60 days of inactivity.
Display name/type of OS image during installation and boot process.
Added image for Pioneer terminals with a PCT touchscreen and eGalax touch controller.

4.3.4

2016-04-08

openSUSE

11.4

Firefox-ESR

31.8.0

 

Patch for CVE-2015-4000 (a.k.a. "logjam"), TLS cipher downgrade.
Patch for CVE-2015-7547, arbitrary code execution via DNS.
Patch for CVE-2016-0800 (a.k.a. "drown"), TLS session decryption.
Patch for CVE-2016-0702 (a.k.a. "cachebleed"), local RSA secret key recovery.
Patch for CVE-2016-0777, client private key exposure via "roaming" feature.
Patch for CVE-2016-0778, client buffer overflow via "roaming" feature.
Removed "computer-net-settings" feature (reconfigure old IP address when OS image is installed).
Added software firewall.

6.0.0

2016-12-01

openSUSE

42.1

Firefox-ESR

45.4.0

 

Use UTC instead of local time for hardware clock.
New DHCP client ("wicked").
Clean up temporary files that arer more than 7 days old.
Display support information on VT9.
Display OS logs on VT10.
Added keyboard shortcuts for browser refresh and force-refresh.
Added task-specific user accounts (networkconfig, timezoneconfig).
Disable interactive logins for SSH (i.e. require an SSH keypair).
Added logging, timeouts and retries to "ts.sh".
Added logging for remote connections scripts.
Added desktop background image with "Loading application..." message for "touchscreen" user.

6.0.1

2017-01-20

openSUSE

42.1

Firefox-ESR

45.4.0

 

Increase Apache timeout from 60s to 300s to prevent problems with long-running CGI scripts.
Trim leading and trailing whitespace from serial numbers.

6.0.5

2017-03-30

openSUSE

42.1

Firefox-ESR

45.7.0

 

Start Firefox with size equal to screen resolution so window doesn't need to be resized.
Disabled Firefox dialog that prompts user to enable "caret browsing".
Prefer IPv4 connections to work around buggy software that tries to initiate IPv6 connections when IPv6 is disabled.

6.0.6

2017-05-09

openSUSE

42.1

Firefox-ESR

45.7.0

 

Increased timeout for response from DHCP server from 15s to 30s.
Bug fix for init script that sets hardware clock date and time during shutdown.

6.0.7

2017-08-11

openSUSE

42.1

Firefox-ESR

45.7.0

4.1.39-56-default

Bug fix: Terminal does not set hardware clock during shutdown when "fullcount" service fails to start.
Split "fullcount" init script into separate scripts for each purpose/function (config file, hostname, hardware clock).
Converted init scripts for config file, hostname and hardware clock to systemd services.
Added logging to "fullcount-config", "fullcount-hostname", and "fullcount-hwclock" scripts.
Added alias for "fullcount-config.service" to "fullcount.service" for backwards compatibility with OS images prior to version 6.0.7.

6.1.0

2018-12-07

openSUSE

42.3

Firefox-ESR

52.9.0

4.4.162-78-default

- Patch for CVE-2017-5753 (aka "Spectre Variant 1, bounds check bypass").
- Patch for CVE-2017-5715 (aka "Spectre Variant 2, branch target injection").
- Patch for CVE-2017-5754 (aka "Variant 3, Meltdown, rogue data cache load").
- Patch for CVE-2018-3620 (aka "Foreshadow-NG (OS), L1 terminal fault").
- Patch for CVE-2018-15572 (aka "Ret2Spec, spectreRSB").
- Feature #839: Disabled unused Firefox features (Geolocation, Experiments, Telemetry, Pocket, Sync, and extensions blocklist).
- Feature #840: Added a kernel parameter to automatically start a filesystem check when needed and try to repair problems that can be safely fixed.
- Customer Support #904: Increased the amount of time the terminal must be idle before blanking the screen from 10 minutes to 30 minutes.
- Feature #1589: Changed file permissions to prevent Firefox from resetting or modifying the Firefox profile for the touchscreen user.
- Bug #1591: Disabled an R-Kiosk keyboard shortcut so that it cannot be used to load Firefox' home page.
- Bug #1591: Disabled IceWM keyboard shortcuts so that they cannot be used to start other applications.

6.2.0

2019-11-08

openSUSE

42.3

Firefox-ESR

52.9.0

4.4.180-102-default

- Patch for CVE-2018-6954 (systemd-tempfiles, local users can take ownership of arbitrary files).
- Patch for CVE-2018-12126 ("MSBDS", speculative execution information leak in Intel CPUs).
- Patch for CVE-2018-12127 ("MLPDS", speculative execution information leak in Intel CPUs).
- Patch for CVE-2018-12130 ("MFBDS", speculative execution information leak in Intel CPUs).
- Patch for CVE-2019-0211 (Apache HTTP server, arbitrary code execution with privileges of parent process).
- Patch for CVE-2019-3855 (libssh2, malicious server may execute code on client).
- Patch for CVE-2019-3856 (libssh2, malicious server may execute code on client).
- Patch for CVE-2019-3857 (libssh2, malicious server may execute code on client).
- Patch for CVE-2019-3858 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3859 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3860 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3861 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3862 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3863 (libssh2, out-of-bounds memory write error caused by multiple keyboard interactive response messages. No known exploits of this flaw).
- Patch for CVE-2019-5953 (wget, remote code execution).
- Patch for CVE-2019-11068 (libxslt, bypass of a protection mechanism which allows attackers to authenticate).
- Patch for CVE-2019-11091 ("MDSUM", speculative execution information leak in Intel CPUs).

7.0.0

2020-06-11

openSUSE

15.1

Firefox-ESR

52.9.0

4.12.14-lp151.28.44-default

- Built with a patched version of kiwi 9.19.6, and a patched version of the "oemboot" boot image description so that we can continue using kiwi's boot image installer. See Feature #4393 for specific changes and patches.
- Removed "puppet" from list of required packages, no longer included in base distribution.
- Added "iproute2" to list of required packages.
- Added "net-tools-deprecated" to list of required packages so support staff can continue using tools (ifconfig, netstat, arp, etc.) that they are familar with.
- Added "gawk" to list of required packages. Several scripts ("support-info", "support-network-info", "startup") use awk, so it needs to be required.
- Updated "support-info" script to use commands from "iproute2" package instead of commands (ifconfig, route, etc.) from "net-tools-deprecated" package.
- Added some comments to "support-info" script to make it easier to read.
- Updated "support-network-info" script to use commands from "iproute2" package instead of commands (ifconfig, route, etc.) from "net-tools-deprecated" package.
- Fixed patch for "journald.conf" to save logs on disk, forwards logs to console, skip splitting on UID, etc. so that it applies to default "journald.conf" config file included in openSUSE 15.1.
- Fixed patch for "sysstat.cron" to collect data every 5 minutes so that it applies to default "sysstat.cron" config file included in openSUSE 15.1.
- Fixed patch for "sysstat" to collect detailed/"extended" data so that it applies to default "sysstat" config file included in openSUSE 15.1.
- Added "bind-utils" (nslookup, dig, etc.) to list of required packages, no longer include in base distribution.
- Added "traceroute" to list of required packages, no longer include in base distribution.
- Removed obsolete TIMEZONE variable from "sysconfig.fullcount.clock" template.
- Added DEFAULT_TIMEZONE variable to work around a bug where yast chokes on a missing/empty value and sets a different timezone than what was selected in "yast timezone".
- Fixed output from the "support-info" script when there isn't an active network interface; see Bug #5267.
- Re-enabled "ssh-dss" public keys for compatibility with OS images older than 7.0.0 which use "ssh-dss" keys when sending requisitions to a printer in a terminal; see Bug #5690.
- Added RSA, ECDSA, and ED25519 key pairs for the "wwwrun" user to improve compatibility with newer versions of openssh that may/will deprecate older types of key pairs.
- Added RSA, ECDSA, and ED25519 key pairs to "authorized_keys" file for the "wwwrun" user to allow authentication with newer types of key pairs.
- Replaced requirement for JDK 1.7 in 3M driver package with JDK 1.8 because JDK 1.7 is not included in standard package repos for openSUSE 15.1.
- Removed work-arounds for problem with IceWM 1.3.12-6.6.1 not executing "startup" script.
- Adjusted patch for "plymouth-set-default-theme" to fix a problem with "plymouth-populate-initrd" not including the default theme in the initrd.
- Set "keymap" to "us" to work around a problem with the "systemd-vconsole-setup" service failing to start and displaying an error message during boot up.
- Changed kernel package to "kernel-default"; openSUSE 15.1 does not provide a "kernel-desktop" package.

7.0.1

2020-08-20

openSUSE

15.1

Firefox-ESR

52.9.0

4.12.14-lp151.28.44-default

- Fixed Bug #6026, "Touch Screen Scroll Bar width issue". Removed obsolete configuration file for GTK2; Firefox is now built with GTK3. Added configuration file for GTK3 to increase width of scrollbars, and display buttons at each end to make it easier to use scrollbars on a touchscreen.

7.0.2

2021-03-02

openSUSE

15.1

Firefox-ESR

52.9.0

4.12.14-lp151.28.44-default

- Feature #6400: Added support for Elo Kiosks
- Added screen_orientation.sh so users can change kiosk displays to portrait or landscape.
- Added fc_dialog.sh to support terminals with wireless cards, accessible by pressing "Alt+i" key combination.
***Note that this version is impacted by the following bug and should not be used for terminals, KDS, or Print Server.

  • Bug #7468:  fullcount-terminal-base 7.0.2 has missing patches resulting in non-persistent systemd journal

7.1.0

2021-10-20

openSUSE

15.1

Firefox-ESR/Electron

52.9.0

4.12.14-lp151.28.91-default

- Feature #301: Use updated FullCount logo (GRUB)
- Feature #660: Improve Apache log format for local requests
- Fixed Bug #1759: Users should not be able start Firefox Developer Tools with keyboard shortcuts
- Fixed Bug #5703: "NTP service in OS image versions 6.1.0, 6.2.0 and 7.0.0 does not set clock to correct time on startup"
- Fixed Bug #6150: Support screen does not display MAC address when network interface is not active
- Fixed Bug #6899: fail2ban does not automatically add firewall rules to block failed login attempts
- Feature #7620: Update to use new FullCount logo (Plymouth)
- Fixed Bug #8495: Lightdm Allows Password-less Logins on Terminals

7.1.1

2022-03-07

openSUSE

15.1

Firefox-
ESR/Electron

52.9.0

4.12.14-lp151.28.91-default

*Only created for Print Servers and KDS

- Feature #9283: Add intel_idle.max_cstate=1 kernel paramter to KDS and Print Server Image Descriptions
- Bug #9284: Remove fail2ban jail config file from fullcount-terminal-base since lighttpd user is not used

7.2.0

2022-11-09

openSUSE

15.3

Electron

18.2.3

5.3.18-150300.59.54-default

- Feature #9485: Develop workaround for preCallInit.sh post-installation script
- Feature #9848: Add Firefox backdoor to OS Images
- Fixed Bug #9966: /home/touchscreen/bin directory is not owned by the touchscreen user, causing Electron updates to fail
The Kiwi installer now uses the FullCount GRUB theme and no longer is selected to install by default, to prevent boot/install loops.

7.3.0

2023-12-05

openSUSE

15.5

Electron

27.0.0

5.14.21-150500.55.7-default

- Fixed Bug #10486: ts.sh Errors When Updating to newer Electron Version via updater
- Feature #11427: OS Image 7.3.0 Security Enchancements

  • Added GRUB username/ password (fc_user/@11ianc3)
  • Fixed Bug #11244: OS Image 7.0.0+ Allows Password Authentication Without Keys

- Feature #11928: Add Desktop Environment for OS Image 7.3.0

  •  Added KDE Desktop Environment
  •  Replaced Wicked with NetworkManager

- Feature #12082: OS Image 7.3.0 Support Enchancements

  •  Added print_error_checker script

- Fixed Bug #12734: NTPD is starting before the network is up

7.3.1

2024-03-06

openSUSE

15.5

Electron

27.0.0

5.14.21-150500.55.7-default

- Feature #13332: Static IP Configuration Enhancements
- Feature #13339: Allow touchscreen user to install certifcates for wireless authentication
- Feature #13379: Replace "yast lan" login for networkconfig with "nmtui"

7.3.2

2024-04-17

openSUSE

15.5

Electron

27.0.0

5.14.21-150500.55.7-default

Only available for Partner Tech A4, A5, and new revision A7 units.

7.3.3

2024-04-03

openSUSE

15.5

Electron

27.0.0

5.14.21-150500.55.7-default

Only available for Partner Tech A4 terminals with customer-facing displays.

7.4.0

2025-02-18

openSUSE

15.6

Electron

32.1.2

6.4.0-150600.23.17-default

- Feature #13234: Upgrade SSH algorithms
- Feature #14647: Systems work needed for the integrated scale
- Feature #14486: Systems Related Work for Customer Display for point of sale - A4, A5, Celo, Cyprus all supported
- Feature #14911: Make Startup File Device Specific
- Feature #14980: Feature Request - posapp support menu
- Fixed Bug #15242: Partner Tech Changed Touch Controller on A7 Kiosks
- Feature #15279: Create Ed25519 SSH keys for various system users

7.5.0

2025-01-12

openSUSE

15.6

Electron

32.1.2

6.4.0-150600.23.17-default

- Feature #499: Proof of concept for updating OS image on terminals (aka "Magic Wand")
- Feature #15983: Make Remote Connections Configurable via Support Drawer.
- Feature #16253: Increase Systemd Log Size
- Fixed Bug #16420: CFD on Cyprus Devices Causing Terminal Slowness
- Fixed Bug #16992: FC_POSAPP_UPDATE=no Config File Parameter is Ignored By Posapp
- Fixed Bug #17523: Fix Support Drawer Swipe so it only opens if Swiped from Edge of Screen
- Feature #17605: Add nping and hping Network Utilities to OS Image

8.0.0

 

openSUSE

16.0

Electron

39.2.7

6.12.0-160000.6-default

- Fixed Bug #15148: DHCP Occasionally Doesn't get a Lease Early Enough on Boot

- Fixed Bug #16022: Scale Doesn't Work on Elo Kiosks and NSG10 Tablets

- Feature #16655: Support more rotation options of A7 kiosks in portrait mode

- Fixed Bug #16853: wpa_supplicant.log Can Fill Up Filesystem

- Feature #17922: Added feature substituting NTP for Chrony

- Feature #17937: Added Cockpit Administration GUI
- Feature #18612: Support Drawer - Added Printer Checker, Clear Cache and Enable Mouse buttons

- Fixed Bug #18342: KDE Uses CFD for Start Menu When Enabled, Then Breaks Completely When Removed

 

Tablets

FC Version

Build Date

OS

OS Version

Browser

Browser Version

KERNEL VERSION

Comments

4.1

 

openSUSE

11.4

Firefox

15.0

 

Manual build for DT312XL only.

5.0.4

 

openSUSE

12.3

Firefox

28.0

 

Manual build for DT315CT only.

5.1.0

2015-03-05

openSUSE

12.3

Firefox-ESR

31.4.0

 

Switched to Firefox "extended support release".
Switched to KIWI build system for tablet OS images.
Patch for "duplicate touch events" (Xorg Bug 56578, "race condition with active/passive grabs when opening menus with touch").
Added OS image for DT315CT tablet.
Added OS image for DT315BT tablet.

5.1.1

2015-04-23

openSUSE

12.3

Firefox-ESR

31.4.0

 

Disabled Firefox prompt to reset profile after 60 days of inactivity.

5.2.0

2016-01-06

openSUSE

12.3

Firefox-ESR

38.4.0

 

Updated kernel to 3.16.7 to support Intel 7265 wireless chipset.

5.2.1

2017-03-08

openSUSE

12.3

Firefox-ESR

38.7.0

 

Disabled Firefox dialog that prompts user to enable "caret browsing".

5.3.0

2017-03-30

openSUSE

12.3

Firefox-ESR

38.7.0

 

Removed user, ssh keys, cron jobs and scripts for remote connections.
Added "fullcount-common-remote-connections" package.

5.3.1

2017-09-06

openSUSE

12.3

Firefox-ESR

38.7.0

 

- Added OS image for DLI-10 tablet from Data Ltd, Inc.
- Added "dmidecode-2.12-7.1" from openSUSE 42.1 to support SMBIOS v2.8 on DLI-10 tablet.
- Bug fix: Terminal does not set hardware clock during shutdown when "fullcount"
  service fails to start. Split "fullcount" init script into separate scripts
  for each purpose/function (config file, hostname, hardware clock). Converted
  init scripts for config file, hostname and hardware clock to systemd services.
- Rewrote "ts.sh" to add logging, timeouts, retries, etc.
- Added HTTP headers to "ts.sh" to prevent browser from caching responses.
- Added empty line after HTTP headers in "ts.sh" (required by HTTP spec).
- Bug fix: String values in JSON objects should be enclosed in double-quotes to
  prevent strings that start with 0 (zero) from being converted to octal numbers
  (remote connections, fullcount-config).
- Bug fix: Older versions of "flock" (i.e. 2.21.2) do not interpret a timeout of
  zero seconds as "fail rather than wait if lock cannot be acquired". Explicitly
  use non-blocking argument instead of zero second timeout.
- Patched "journald.conf" to save logs on disk, forward to console, do not split
  on UID, etc.

5.3.2

2017-11-10

openSUSE

12.3

Firefox-ESR

38.7.0

 

- Workaround for problem with MAC addresses changing from dock to dock.
- Added CRDA package to prevent stack trace error message.
- Bumped version to 5.3.2.

5.3.3

2017-11-21

openSUSE

12.3

Firefox-ESR

38.7.0

 

- Added cron job and script to display support/network info on VT9.
- Added network link status to support/network info displayed on VT9.
- Trim leading and trailing whitespace characters from serial number to reduce
  the number of RMAs for bad serial numbers.

5.3.4

2018-09-04

openSUSE

12.3

Firefox-ESR

38.7.0

 

- Feature #320 - Added name of calling function in ts.sh logs

6.0.0

2018-02-01

openSUSE

42.1

Firefox-ESR

45.8.0

 

- Use UTC instead of local time for hardware clock.
- New DHCP client ("wicked").
- Clean up temporary files that are more than 7 days old.
- Display OS logs on VT10.
- Added keyboard shortcuts for browser refresh and force-refresh.
- Added task-specific user accounts (networkconfig, timezoneconfig).
- Disable interactive logins for SSH (i.e. require an SSH keypair).
- Added logging, timeouts and retries to "ts.sh".
- Added name of calling function to log messages in "ts.sh".
- Added logging for remote connections scripts.
- Added desktop background image with "Loading application..." message for "touchscreen" user.
- Added additional Udev rules to 99-fullcount-interfaces.rules to call fc_wlan_down.sh and fc_wlan_up.sh.
- Added scripts that are called from Udev to bring up wlan0 on tablet undock, and bring wlan0 down when tablet is docked, an alternative   to ifplugd.
- Added packages (evtest, xinput) for testing/debugging touch events. Added wrapper script (support-touchscreen-test) for "evtest".
- Bug Fix - Removed hard-coded network interface name in support info scripts. Added code to get name of first active network interface to    support info scripts. Added name of active network interface to templates used to display support info.
- Bug Fix - sar now collects extended data every 5 minutes

6.1.0

2019-05-22

openSUSE

42.3

Firefox-ESR

52.9.0

 

- Patch for CVE-2017-5753 (aka "Spectre Variant 1, bounds check bypass").
- Patch for CVE-2017-5715 (aka "Spectre Variant 2, branch target injection").
- Patch for CVE-2017-5754 (aka "Variant 3, Meltdown, rogue data cache load").
- Patch for CVE-2018-3620 (aka "Foreshadow-NG (OS), L1 terminal fault").
- Patch for CVE-2018-15572 (aka "Ret2Spec, spectreRSB").
- Feature #839: Disabled unused Firefox features (Geolocation, Experiments, Telemetry, Pocket, Sync, and extensions blocklist).
- Feature #840: Added a kernel parameter to automatically start a filesystem check when needed and try to repair problems that can be safely fixed.
- Upstream #889: Suse no longer allows a netmask of 0.0.0.0 so DHCP is now a requirement.
- Feature #890: Added button functionality to toggle network interfaces.
- Feature #890: Wlan0 is now the default interface. It is set to "At Boot Time" in YaST and eth0 is set to a "Manual" connection in YaST.
- Feature #1590: Changed file permissions to prevent Firefox from resetting or modifying the Firefox profile for the touchscreen user.
- Bug #1592: Disabled an R-Kiosk keyboard shortcut so that it cannot be used to load Firefox' home page.
- Bug #1592: Disabled IceWM keyboard shortcuts so that they cannot be used to start other applications.

6.2.0

2019-11-08

openSUSE

42.3

Firefox-ESR

52.9.0

 

- Patch for CVE-2018-6954 (systemd-tempfiles, local users can take ownership of arbitrary files).
- Patch for CVE-2018-12126 ("MSBDS", speculative execution information leak in Intel CPUs).
- Patch for CVE-2018-12127 ("MLPDS", speculative execution information leak in Intel CPUs).
- Patch for CVE-2018-12130 ("MFBDS", speculative execution information leak in Intel CPUs).
- Patch for CVE-2019-0211 (Apache HTTP server, arbitrary code execution with privileges of parent process).
- Patch for CVE-2019-3855 (libssh2, malicious server may execute code on client).
- Patch for CVE-2019-3856 (libssh2, malicious server may execute code on client).
- Patch for CVE-2019-3857 (libssh2, malicious server may execute code on client).
- Patch for CVE-2019-3858 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3859 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3860 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3861 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3862 (libssh2, malicious server may read data in the client memory).
- Patch for CVE-2019-3863 (libssh2, out-of-bounds memory write error caused by multiple keyboard interactive response messages. No known exploits of this flaw).
- Patch for CVE-2019-5953 (wget, remote code execution).
- Patch for CVE-2019-11068 (libxslt, bypass of a protection mechanism which allows attackers to authenticate).
- Patch for CVE-2019-11091 ("MDSUM", speculative execution information leak in Intel CPUs).
- Feature #2693: Added POS-X Ion 8 tablet.
- Feature #3606: Added Comark-branded DLI product models.
- Feature #3835: Disabled smartd service on POS-X Ion 8 tablets.
- Feature #3885: Removed hard-coded window sizes from fc_dialog.sh.
- Feature #3952: Added button functionality to launch battery indicator for POS-X Ion 8 tablets.
- Feature #3982: Added commands to Icewm's startup file to set screen resolution and rotate display on POS-X Ion 8 tablets.

7.0.0

2020-06-12

openSUSE

15.1

Firefox-ESR

52.9.0

 

- Built with a patched version of kiwi 9.19.6, and a patched version of the "oemboot" boot image description so that we can continue using kiwi's boot image installer. See Feature #4393 for specific changes and patches.
- Removed "puppet" from list of required packages, no longer included in base distribution.
- Added "iproute2" to list of required packages.
- Added "net-tools-deprecated" to list of required packages so support staff can continue using tools (ifconfig, netstat, arp, etc.) that they are familar with.
- Added "gawk" to list of required packages. Several scripts ("support-info", "support-network-info", "startup") use awk, so it needs to be required.
- Updated "support-info" script to use commands from "iproute2" package instead of commands (ifconfig, route, etc.) from "net-tools-deprecated" package.
- Added some comments to "support-info" script to make it easier to read.
- Updated "support-network-info" script to use commands from "iproute2" package instead of commands (ifconfig, route, etc.) from "net-tools-deprecated" package.
- Added some comments to "support-network-info" script to make it easier to read.
- Fixed patch for "journald.conf" to save logs on disk, forwards logs to console, skip splitting on UID, etc. so that it applies to default "journald.conf" config file included in openSUSE 15.1.
- Fixed patch for "sysstat.cron" to collect data every 5 minutes so that it applies to default "sysstat.cron" config file included in openSUSE 15.1.
- Fixed patch for "sysstat" to collect detailed/"extended" data so that it applies to default "sysstat" config file included in openSUSE 15.1.
- Bug #5267: Fixed issue of invalid displayed output of the support-info script when no interface is up on boot.
- Bug #5267: Fixed issue of invalid displayed output of the support-network-info script when no interface is up on boot.
- Added "bind-utils" (nslookup, dig, etc.) to list of required packages, no longer included in base distribution.
- Added "traceroute" to list of required packages, no longer included in base distribution.
- Removed obsolete TIMEZONE variable from "sysconfig.fullcount.clock" template.
- Added DEFAULT_TIMEZONE variable to work around a bug where yast chokes on a missing/empty value and sets a different timezone than what was selected in "yast timezone".
- Bug #5369: Changed the path to fc_battery.sh in icewm's keys file to point to /usr/bin since it was moved from /root/bin due to Kiwi no longer recursively setting permissions.
- Bug #5690: Re-enable "ssh-dss" public keys for compatibility with OS images older than 7.0.0 which use "ssh-dss" keys when sending requisitions to a printer in a terminal.
- Added RSA, ECDSA, and ED25519 key pairs for the "wwwrun" user to improve compatibility with newer versions of openssh that may/will deprecate older types of key pairs.
- Added RSA, ECDSA, and ED25519 key pairs to "authorized_keys" file for the "wwwrun" user to allow authentication with newer types of key pairs.
- Changed resolution values for GRUB_GFXMODE in preCallInit.sh from 1024x768 to 800x1280 which is the native resoltuion for Ion tablets.
- Use an older version of the "wpa_supplicant" package to prevent boot process from hanging while trying to bring up the wireless network interfaces. See Bug #5276, "Changes in wpa_supplicant results in wlan0 being down on boot",  and openSUSE Bug 1166933, "Wicked network setup of wifi fails with wpa_supplicant version 2.6-lp151.5.3.1-x86_64"
- Set "keymap" to "us" to work around a problem with the "systemd-vconsole-setup" service failing to start and displaying an error message during boot up. This is the same value that "yast keyboard" uses when "Keyboard Layout" is set to "English (US)", so it should be pretty safe to use.
- Updated to a newer version of "fullcount-branding-plymouth" that includes an adjusted patch for "plymouth-set-default-theme" to fix a problem with "plymouth-populate-initrd" not including the default theme in the initrd.

7.0.1

2020-08-20

openSUSE

15.1

Firefox-ESR

52.9.0

 

- Fixed Bug #6026, "Touch Screen Scroll Bar width issue". Removed obsolete configuration file for GTK2; Firefox is now built with GTK3. Added configuration file for GTK3 to increase width of scrollbars, and display buttons at each end to make it easier to use scrollbars on a touchscreen.

7.0.2

2021-02-19

openSUSE

15.1

Firefox-ESR

52.9.0

 

-Feature #6969: "Support New Ion Touchscreen Firmware". Updated the kernel for the POS-X Ion tablet to 5.3.18 to support new touchscreen firmware. DLI was already using this kernel in 7.0.1.

7.1.0

2021-10-20

openSUSE

15.1

Firefox-ESR/Electron

52.9.0

 

- Feature #301: Use updated FullCount logo (GRUB)
- Feature #660: Improve Apache log format for local requests
- Fixed Bug #1760: Users should not be able start Firefox Developer Tools with keyboard shortcuts
- Fixed Bug #5703: "NTP service in OS image versions 6.1.0, 6.2.0 and 7.0.0 does not set clock to correct time on startup"
- Fixed Bug #6150: Support screen does not display MAC address when network interface is not active
- Fixed Bug #6899: fail2ban does not automatically add firewall rules to block failed login attempts
- Feature #7620: Update to use new FullCount logo (Plymouth)
- Fixed Bug #8494: Lightdm Allows Password-less Logins on Tablets

7.1.1

2022-03-07

openSUSE

15.1

Firefox-
ESR/Electron

52.9.0

4.12.14-lp151.28.44-default

*Only created for DT315CT Tablets

- Feature #9284: Remove fail2ban jail config file from fullcount-terminal-base since lighttpd user is not used

- Feature #9316: OS Image 7.1.1 for DT315CT Tablets. Fixed IceWM so it would load fc_dialog.sh when the physical tablet button is pressed.

 

7.2.0

2022-11-09

openSUSE

15.3

Electron

18.2.3

5.3.18-150300.59.54-default

- Feature #9485: Develop workaround for preCallInit.sh post-installation script
- Feature #9848: Add Firefox backdoor to OS Images
- Fixed Bug #9966: /home/touchscreen/bin directory is not owned by the touchscreen user, causing Electron updates to fail
The Kiwi installer now uses the FullCount GRUB theme and no longer is selected to install by default, to prevent boot/install loops.

7.3.0

2023-12-05

openSUSE

15.5

Electron

27.0.0

5.14.21-150500.55.7-default

- Fixed Bug #10486: ts.sh Errors When Updating to newer Electron Version via updater
- Feature #11427: OS Image 7.3.0 Security Enchancements

  • Added GRUB username/ password (fc_user/@11ianc3)
  • Fixed Bug #11244: OS Image 7.0.0+ Allows Password Authentication Without Keys

- Feature #11928: Add Desktop Environment for OS Image 7.3.0

  •  Added KDE Desktop Environment
  •  Replaced Wicked with NetworkManager

- Feature #12082: OS Image 7.3.0 Support Enchancements

  •  Added print_error_checker script

- Fixed Bug #12734: NTPD is starting before the network is up
- Feature #11855: Feature Request - Ability for user to know/see battery life on Partner Tech, Ion 8, and possibly DT Research/DLI tablets

  • Added battery indicator for Ion 8 and M3W tablets

7.3.1

2024-03-06

openSUSE

15.5

Electron

27.0.0

5.14.21-150500.55.7-default

- Feature #13332: Static IP Configuration Enhancements
- Feature #13339: Allow touchscreen user to install certifcates for wireless authentication
- Feature #13379: Replace "yast lan" login for networkconfig with "nmtui"

7.3.2

2024-04-03

openSUSE

15.5

Electron

27.0.20

5.14.21-150500.55.7-default

- Fixed Bug #13655: M3W Battery Cover Design Flaw Issues

7.4.0

2025-02-18

openSUSE

15.6

Electron

32.1.2

6.4.0-150600.23.17-default

- Feature #13234: Upgrade SSH algorithms
- Feature #14647: Systems work needed for the integrated scale
- Feature #14911: Make Startup File Device Specific
- Feature #14980: Feature Request - posapp support menu
- Feature #15279: Create Ed25519 SSH keys for various system users

7.4.1

2025-07-14

openSUSE

15.6

Electron

32.1.2

6.4.0-150600.23.17-default

- Bug #16620: New M10 Tablets Showing KDE Greeter Login Screen

7.5.0

2025-01-12

openSUSE

16.0

Electron

32.1.2

6.4.0-150600.23.17-default

- Feature #499: Proof of concept for updating OS image on terminals (aka "Magic Wand")
- Feature #15983: Make Remote Connections Configurable via Support Drawer.
- Feature #16253: Increase Systemd Log Size
- Fixed Bug #16420: CFD on Cyprus Devices Causing Terminal Slowness
- Fixed Bug #16992: FC_POSAPP_UPDATE=no Config File Parameter is Ignored By Posapp
- Fixed Bug #17523: Fix Support Drawer Swipe so it only opens if Swiped from Edge of Screen
- Feature #17605: Add nping and hping Network Utilities to OS Image

8.0.0

 

openSUSE

16.0

Electron

39.2.7

6.12.0-160000.6-default

- Fixed Bug #15148: DHCP Occasionally Doesn't get a Lease Early Enough on Boot

- Fixed Bug #16022: Scale Doesn't Work on Elo Kiosks and NSG10 Tablets

- Fixed Bug #16853: wpa_supplicant.log Can Fill Up Filesystem

- Feature #17922: Added feature substituting NTP for Chrony

- Feature #17937: Added Cockpit Administration GUI
- Fixed Bug #18181: Fix USB printing on NSG Tablets

- Feature #18612: Support Drawer - Added Printer Checker, Clear Cache and Enable Mouse buttons

- Fixed Bug #18342: KDE Uses CFD for Start Menu When Enabled, Then Breaks Completely When Removed

 

Terminal Virtual Machines

FC Version

Build Date

OS

OS Version

Browser

Browser Version

Comments

4.2.2

2013-10-11

openSUSE

11.4

Firefox

16.0.2

 

4.3.0

2014-11-17

openSUSE

11.4

Firefox-ESR

31.2.0

Switched to Firefox "extended support release".
Patches for CVE-2014-6271 (a.k.a "shellshock").
Added OS-level cache for DNS lookups to improve performance with slow or unreliable DNS servers.

4.3.1

2015-01-06

openSUSE

11.4

Firefox-ESR

31.2.0

Bug fix for disabling unused Apache modules.

4.3.2

2015-05-28

openSUSE

11.4

Firefox-ESR

31.2.0

Disabled Firefox mouse wheel actions.
Added work around for problems with automatic grab/ungrab of cursor.

4.3.3

2015-08-20

openSUSE

11.4

Firefox-ESR

31.8.0

Disabled Firefox prompt to reset profile after 60 days of inactivity.
Display name/type of OS image during installation and boot process.

4.3.4

2016-04-06

openSUSE

11.4

Firefox-ESR

31.8.0

Patch for CVE-2015-4000 (a.k.a. "logjam"), TLS cipher downgrade.
Patch for CVE-2015-7547, arbitrary code execution via DNS.
Patch for CVE-2016-0800 (a.k.a. "drown"), TLS session decryption.
Patch for CVE-2016-0702 (a.k.a. "cachebleed"), local RSA secret key recovery.
Patch for CVE-2016-0777, client private key exposure via "roaming" feature.
Patch for CVE-2016-0778, client buffer overflow via "roaming" feature.
Removed "computer-net-settings" feature (reconfigure old IP address when OS image is installed).
Added software firewall.

6.0.0

2016-12-12

openSUSE

42.1

Firefox-ESR

45.4.0

Use UTC instead of local time for hardware clock.
New DHCP client ("wicked").
Clean up temporary files that arer more than 7 days old.
Display support information on VT9.
Display OS logs on VT10.
Added keyboard shortcuts for browser refresh and force-refresh.
Added task-specific user accounts (networkconfig, timezoneconfig).
Disable interactive logins for SSH (i.e. require an SSH keypair).
Added logging, timeouts and retries to "ts.sh".
Added logging for remote connections scripts.
Added desktop background image with "Loading application..." message for "touchscreen" user.

6.0.1

2017-01-20

openSUSE

42.1

Firefox-ESR

45.4.0

Increase Apache timeout from 60s to 300s to prevent problems with long-running CGI scripts.
Trim leading and trailing whitespace from serial numbers.
Added UDEV rules for Epson TM-T20 printers.

6.0.5

2017-03-30

openSUSE

42.1

Firefox-ESR

45.7.0

Start Firefox with size equal to screen resolution so window doesn't need to be resized.
Disabled Firefox dialog that prompts user to enable "caret browsing".
Prefer IPv4 connections to work around buggy software that tries to initiate IPv6 connections when IPv6 is disabled.

6.0.6

2017-05-09

openSUSE

42.1

Firefox-ESR

45.7.0

Increased timeout for response from DHCP server from 15s to 30s.
Bug fix for init script that sets hardware clock date and time during shutdown.

6.0.7

2017-08-11

openSUSE

42.1

Firefox-ESR

45.7.0

Bug fix: Terminal does not set hardware clock during shutdown when "fullcount" service fails to start.
Split "fullcount" init script into separate scripts for each purpose/function (config file, hostname, hardware clock).
Converted init scripts for config file, hostname and hardware clock to systemd services.
Added logging to "fullcount-config", "fullcount-hostname", and "fullcount-hwclock" scripts.
Added alias for "fullcount-config.service" to "fullcount.service" for backwards compatibility with OS images prior to version 6.0.7.

6.1.0

2018-12-11

openSUSE

42.3

Firefox-ESR

52.9.0

 

6.2.0

2019-12-09

openSUSE

42.3

Firefox-ESR

52.9.0

 

7.0.0

2020-06-16

openSUSE

15.1

Firefox-ESR

52.9.0

- Built with a patched version of kiwi 9.19.6. See Feature #4393 for specific changes and patches.
- Removed "puppet" from list of required packages, no longer included in base distribution.
- Added "iproute2" to list of required packages.
- Added "net-tools-deprecated" to list of required packages so support staff can continue using tools (ifconfig, netstat, arp, etc.) that they are familar with.
- Added "gawk" to list of required packages. Several scripts ("support-info", "support-network-info", "startup") use awk, so it needs to be required.
- Updated "support-info" script to use commands from "iproute2" package instead of commands (ifconfig, route, etc.) from "net-tools-deprecated" package.
- Added some comments to "support-info" script to make it easier to read.
- Updated "support-network-info" script to use commands from "iproute2" package instead of commands (ifconfig, route, etc.) from "net-tools-deprecated" package.
- Fixed patch for "journald.conf" to save logs on disk, forwards logs to console, skip splitting on UID, etc. so that it applies to default "journald.conf" config file included in openSUSE 15.1.
- Fixed patch for "sysstat.cron" to collect data every 5 minutes so that it applies to default "sysstat.cron" config file included in openSUSE 15.1.
- Fixed patch for "sysstat" to collect detailed/"extended" data so that it applies to default "sysstat" config file included in openSUSE 15.1.
- Added "bind-utils" (nslookup, dig, etc.) to list of required packages, no longer include in base distribution.
- Added "traceroute" to list of required packages, no longer include in base distribution.
- Removed obsolete TIMEZONE variable from "sysconfig.fullcount.clock" template.
- Added DEFAULT_TIMEZONE variable to work around a bug where yast chokes on a missing/empty value and sets a different timezone than what was selected in "yast timezone".
- Fixed output from the "support-info" script when there isn't an active network interface; see Bug #5267.
- Re-enabled "ssh-dss" public keys for compatibility with OS images older than 7.0.0 which use "ssh-dss" keys when sending requisitions to a printer in a terminal; see Bug #5690.
- Added RSA, ECDSA, and ED25519 key pairs for the "wwwrun" user to improve compatibility with newer versions of openssh that may/will deprecate older types of key pairs.
- Added RSA, ECDSA, and ED25519 key pairs to "authorized_keys" file for the "wwwrun" user to allow authentication with newer types of key pairs.
- Removed work-arounds for problem with IceWM 1.3.12-6.6.1 not executing "startup" script.
- Adjusted patch for "plymouth-set-default-theme" to fix a problem with "plymouth-populate-initrd" not including the default theme in the initrd.
- Set "keymap" to "us" to work around a problem with the "systemd-vconsole-setup" service failing to start and displaying an error message during boot up.
- Changed kernel package to "kernel-default"; openSUSE 15.1 does not provide a "kernel-desktop" package.
- Disabled clock synchronization to prevent inaccurate clock on host from affecting the VM.
- Added "fullcount-common-dracut" package to create serial number and product model files.
- Added "rootflags=rw" kernel parameter so that dracut module in "fullcount-common-dracut" package can write to serial number and product model files in real root filesystem.

7.0.1

2020-08-20

openSUSE

15.1

Firefox-ESR

52.9.0

- Fixed Bug #6026, "Touch Screen Scroll Bar width issue".  Removed obsolete configuration file for GTK2; Firefox is now built with GTK3. Added configuration file for GTK3 to increase width of scrollbars, and display buttons at each end to make it easier to use scrollbars on a touchscreen.

7.4.0

2025

openSUSE

15.6

Electron

32.1.2

 


    • Related Articles

    • How To Use Magic Wand on OS Image Version 7.5.0+

      How To Use Magic Wand on OS Image Version 7.5.0+ Objectives Update FullCount OS Images to newer versions via Magic Wand. Prerequisites 1. FullCount Device with OS Image 7.5.0+ 2. A new update available 3. Device Management configured to Allow OS ...
    • Cheatsheet for Terminal OS Image Version 5.0 and Newer

      Task Instructions Why am I doing this? Local Remote Switch to Shell: Connect USB keyboard to terminal. Press Control + Alt + F1. At the login: prompt, type root and press Enter. At the Password: prompt, type #FullCount#Support# and press Enter. ...
    • Copy Certificates to Filesystems for Enterprise Networks on OS Image 7.3.1+

      Copy Certificates to Filesystems for Enterprise Networks on OS Image 7.3.1+ Objectives Copy security certificates to a FullCount filesystem so Network Manager can load them and gain network access. Prerequisites Keyboard (possibly mouse if KDS/Print ...
    • How to Install a FullCount 6.1.0 or Greater Image on a DLI Tablet

      Objectives Image a DLI tablet with FullCount software. Prerequisites USB drive with a FullCount DLI image DLI Tablet DLI Tablet Dock Keyboard Instructions Pre-Install Place the Tablet on its docking station and insert the keyboard. Turn tablet on ...
    • Set Static IP and Network Settings on DLI Tablets with OS Image 6.0.0

      Set Static IP and Network Settings on DLI Tablets with OS Image 6.0.0 Objectives Set wireless and wired network settings on DLI tablets. Prerequisites DLI Tablet USB Keyboard Network information Static IP for Wireless connection Static IP for Wired ...