logo

GERRIT MULTISITE® USER GUIDE

Release notes support the installation of the latest product version. For additional information see the Installation Guide.

Latest Release details

Statements on Common Vulnerabilities and Exposures

Cirata constantly monitors the possible impact of common vulnerabilities and exposures on all its products. See the Cirata Community website for the latest ALM Product CVE Statements.

Release 3.7.1 (Latest release)

Version: 3.7.1 (3.7.6-RP-1.12.1.1)
Release: 31st March 2025

Important Information

The Gerrit MultiSite 3.7.1 release has added the capability of enabling current Cirata Gerrit MultiSite customers to upgrade to this version as easily as possible. As long as the customer is running a version of Gerrit MultiSite that is post-NoteDB migration (i.e. either releases 1.10 or 1.11) then this release will enable an upgrade. Customers are encouraged to contact Cirata support for more details.

The 3.7.1 release enables a simplified upgrade process from 2.16 post-NoteDB migration (and above) up to 3.7:

  • There is no need to stop at Gerrit 3.5 to run the "copy approvals" migration. The installer will automatically detect and run the "copy approvals" migration when applicable.

  • The installer will check and update the "gerrit.config" file to use JDK 11.

Software versions required or supported

  • JDK 11

This version of Gerrit must use Java 11. However, GitMS 1.11.0 must use Java 8. So BOTH Java 11 and Java 8 must be installed on the server at the same time.
Java updates: The latest updates of Java 8 include critical bug fixes and security updates, the latest update is strongly recommended. Due to Java bug 8177809, you must use JDK 8 update 302 (8u302) or later.

Supported Operating Systems

  • Alma Linux 8, 9

  • Debian 11, 12

  • Oracle Linux 8, 9

  • RHEL 8, 9

  • Rocky 8, 9

  • Suse 15

  • Ubuntu 20 LTS

Fixed Issues

  • GER-2293 - The SSHD timeout calculation fix was cherry picked into the GerritMS 3.7.1 release

Known Issues

Please note, 'Reftable' based repositories are not currently supported.
  • GER-3211 - Customers will need to obtain and install a new version of the Git MultiSite "talkback" utility from Cirata support

Unless marked as "fixed" above, the "Known issues" in release 3.7.0 below are still active.

Previous Gerrit MultiSite 3.7 releases

Release 3.7.0

Version: 3.7.0 (3.7.6-RP-1.12.0.1)
Release: 29th March 2024

Software versions required or supported

  • JDK 11

This version of Gerrit must use Java 11. However, GitMS 1.11.0 must use Java 8. So BOTH Java 11 and Java 8 must be installed on the server at the same time.
Java updates: The latest updates of Java 8 include critical bug fixes and security updates, the latest update is strongly recommended. Due to Java bug 8177809, you must use JDK 8 update 302 (8u302) or later.

Supported Operating Systems

  • Alma Linux 8, 9

  • Debian 11, 12

  • Oracle Linux 8, 9

  • RHEL 8, 9

  • Rocky 8, 9

  • Suse 15

  • Ubuntu 20 LTS

Known Issues

Please note, 'Reftable' based repositories are not currently supported.
  • GER-2024 - Vanilla Gerrit documentation uses "replica" in the context of a read-only secondary. Cirata GitMS documentation uses the "replica" to mean full read-write primary. Be aware that the context of "replica" will very much determine its characteristics.

  • GER-2051 - Gerrit "experimental features" are not supported in GerritMS 3.7.0. Please contact support if more information is required.

  • GER-2054 - Plugin "webhooks" must only be deployed on a single node (or duplication of notifications will result).

  • GER-2124 - Command line tools that should not be run without consulting support: DeleteZombieDrafts, ChangeExternalIdCaseSensitivity, SwitchSecureStore, LocalUsernamesToLowercase.

  • GER-2137 - In rare circumstances a lack of quorum will appear as an internal server error to the git client making the change request.

  • NV-9418 - GitMS Talkback utility in 1.11.0 will not obtain Gerrit information if Gerrit is running Java 11.

  • NV-9465 - License properties are required in application.properties for Gerrit 3.7.0 licensing. See GitMS 1.11 Release notes, known issues

  • GER-2144 - Gerrit 3.7.6 accounts are only reactivated by account number. Need to set the user active with the account number, which can be retrieved in the output of the accounts endpoint.

  • GER-2241 - Some timezone settings on GerritMS servers (especially those that include switching to Daylight Savings) can result in an hour (or more) delay in updating Gerrit events, indexes, etc.

    The workaround to this timezone issue is to set all GerritMS servers to use the UTC timezone as the system time. Caution: always use the "systemctl" (or "service" command for older servers) to start the Gerrit daemon process. Running the "gerrit.sh" script directly may cause the Administrator’s timezone settings to be inherited by the Gerrit process, resulting in not using UTC as desired.

Fixed Issues

  • GER-2114 - GerritMS 3.7.0 is based on Gerrit 3.7.6+ there are additional fixes included. One of those was to fix CVE-2023-48795

New Tunables

  • GER-2133 - New property gerrit.replicated.cache.names.to.ignore has been added to allow control of default ignored caches. See Replicated cache names to ignore.

Important information

  • GER-2017 - The 3.7 release of Gerrit requires that "jgit" configuration items be moved into the ${site}/etc/jgit.config file. If you were running earlier version(s) of Gerrit you may have "jgit" configurations in "gerrit.config" or in the OS account that Gerrit runs as in the ~/.gitconfig configuration files. Gerrit default is for receive.autogc = false in order to prevent possible overwhelming of Java Object Heap Garbage Collection. Do not change this setting without consulting support.

  • GER-2119 - Gerrit has introduced a new feature which allows deadlines to be set on requests at either a server or client level. See Gerrit user-request-cancellation-and-deadlines It is strongly recommended to not use this feature. Such deadlines are necessarily longer in a fully primary/primary setup, especially when large latencies exist between servers. Use of this feature could cause non-atomic operations resulting in a half-finished state requiring manual administrative cleanup.

  • GER-2133 - GitMS "application.properties" property "gerrit.replicated.cache.names.to.ignore", by default includes the following caches.

    lfs_locks,
    jira_server_project,
    its_rules_project,
    change_notes,
    default_preferences,
    pure_revert,
    groups_external_persisted,
    groups_byuuid_persisted,
    persisted_projects,
    git_tags,
    oauth_tokens

If you want to replicate one of those, you must create the property and assign the value of all of the following (comma separated) except the one you want to replicate. See Replicated cache names to ignore.

  • GER-2054 - Plugin "webhooks" must only be deployed on a single node (or duplication of notifications will result).

Install the webhooks plugin on only one node to avoid receiving duplicate notifications from each node with the plugin installed.

This issue will be resolved in a future release.

No reindex

The Gerrit init command automatically triggers a reindex of projects, which may unexpectedly impact operation.

For example, to prevent indexing, indexing threads can be set to -1

java -jar gerrit.war init -d <SITE_PATH> --reindex-threads=-1 ...

Refer to the Gerrit 3.7.6 init command reference for more information.

Previous GerritMS Release

Earlier product versions

Find User Guides for earlier versions in the Archive.