LoginSign Up
← Back to all sparks
S

Slurm

DEVOPS
Velocity5.0

Workload manager and job scheduler for HPC clusters

slurm.schedmd.com ↗

Slurm 26.11 RC turns on the threadpool by default and splits containers into runtime plugins

hpcjob-schedulingcontainersslurmrestdrelease-candidate
◆Current state
Slurm maintains three branches (25.05, 25.11, 26.05) and shipped coordinated fixes for seven CVEs across all three on September 2; 26.05.5 in October was routine maintenance. On November 6 the first release candidate for 26.11 arrived. It enables the slurmctld threadpool by default, makes all RPC replies asynchronous, moves OCI container execution out of slurmstepd into a new runtime/oci plugin with --container-type renamed to --runtime, and hardens slurmrestd with dropped Linux capabilities and unauthenticated health endpoints.
◆Where it's heading
26.11 is an architectural release more than a feature one: the controller's concurrency model changes by default, container support becomes a pluggable runtime layer, and slurmrestd is being prepared to run as a service behind health checks. Several options are renamed or deprecated (conmgr_threads, SLURMRESTD_JSON, become_user), so upgrades will need config review.
◆Prediction
Expect further 26.11 release candidates fixing threadpool and async-reply regressions before a 26.11.0 GA, alongside a 26.05.6 point release on the current branch.

◆Recent moves

  1. 4d ago

    Slurm 26.11 RC1: threadpool on by default, OCI runtime plugin

    The first 26.11 release candidate changes defaults: the slurmctld threadpool is on, RPC replies are always asynchronous, and OCI containers move to a runtime/oci plugin selected with a renamed --runtime flag. It is the biggest structural change in the feed since the 26.05 line began, and sites will need to review renamed slurm.conf options before upgrading.

    View source ↗
  2. 6d ago

    wickberg-test: Testsuite - Cover a --stepmgr step cancel in test_101_18

    A testsuite commit, not a release: it checks that cancelling a --stepmgr job step records the owner, not root, in sacct. Hints at an accounting fix in the next point release.

    View source ↗
  3. 27d ago

    v26.05.5

    Slurm 26.05.5 fixes qstat -f output, a slurmd double free and a regression placing powered-down nodes incorrectly. A routine maintenance release.

    View source ↗
  4. 2mo ago

    Slurm 26.05.4 fixes 7 CVEs, including privilege escalation

    v26.05.4 closes 7 CVEs on the current release branch — including a privilege escalation (operator → admin via accounting DB) and SQL injection via cluster names — alongside the usual bug fix sweep of memory leaks, crash paths, and heterogeneous job handling. For HPC clusters with multiple user roles, the privilege escalation fix is the most operationally critical.

    View source ↗
  5. 2mo ago

    Slurm 25.11.8: CVE backport security release

    v25.11.8 backports the same CVE set to the previous stable branch, plus a QOS-based preemption segfault fix. Sites running 25.11.x that cannot upgrade to 26.05 get security coverage without a major version jump — the expected pattern in Slurm's multi-branch maintenance model.

    View source ↗
  6. 2mo ago

    Slurm 25.05.9: CVE backport security release

    v25.05.9 backports the CVE set to the older 25.05.x branch — the same coordinated security response as 25.11.8 and 26.05.4, ensuring sites on any of the three supported release lines receive the same security coverage simultaneously.

    View source ↗