Blame SPECS/linux-system-roles.spec

f5d5a5
# NOTE: Even though ansible-core is in 8.6, it is only available
f5d5a5
# at *runtime*, not at *buildtime* - so we can't have
f5d5a5
# ansible-core as a build_dep on RHEL8
2ef95e
%if 0%{?fedora} || 0%{?rhel} >= 9
2ef95e
%bcond_without ansible
2ef95e
%global ansible_build_dep ansible-core >= 2.11.0
2ef95e
%else
cbac2c
%if 0%{?rhel} && ! 0%{?epel}
cbac2c
%bcond_with ansible
cbac2c
%else
cbac2c
%bcond_without ansible
2ef95e
%global ansible_build_dep ansible >= 2.9.10
2ef95e
%endif
cbac2c
%endif
cbac2c
cbac2c
%bcond_with collection_artifact
cbac2c
cbac2c
%if 0%{?fedora} || 0%{?rhel} >= 8
cbac2c
%bcond_without html
cbac2c
%else
cbac2c
# pandoc is not supported in rhel 7 and older,
cbac2c
# which is needed for converting .md to .html.
cbac2c
%bcond_with html
cbac2c
%endif
cbac2c
cbac2c
%if 0%{?rhel}
cbac2c
Name: rhel-system-roles
cbac2c
%else
cbac2c
Name: linux-system-roles
cbac2c
%endif
cbac2c
Url: https://github.com/linux-system-roles
cbac2c
Summary: Set of interfaces for unified system management
29cf9b
Version: 1.16.1
2ef95e
Release: 1%{?dist}
cbac2c
cbac2c
#Group: Development/Libraries
7ac2bb
License: GPLv3+ and MIT and BSD and Python
cbac2c
%global installbase %{_datadir}/linux-system-roles
cbac2c
%global _pkglicensedir %{_licensedir}/%{name}
cbac2c
%global rolealtprefix linux-system-roles.
cbac2c
%global roleprefix %{name}.
cbac2c
%global roleinstprefix %{nil}
cbac2c
%global rolealtrelpath ../../linux-system-roles/
cbac2c
%if 0%{?rhel}
cbac2c
%global roleinstprefix %{roleprefix}
cbac2c
%global installbase %{_datadir}/ansible/roles
cbac2c
%global rolealtrelpath %{nil}
cbac2c
%endif
cbac2c
cbac2c
%if 0%{?rhel}
cbac2c
%global collection_namespace redhat
cbac2c
%global collection_name rhel_system_roles
cbac2c
%else
cbac2c
%global collection_namespace fedora
cbac2c
%global collection_name linux_system_roles
cbac2c
%endif
cbac2c
cbac2c
%global collection_version %{version}
cbac2c
cbac2c
# Helper macros originally from macros.ansible by Igor Raits <ignatenkobrain>
cbac2c
# Not available on RHEL, so we must define those macros locally here without using ansible-galaxy
cbac2c
cbac2c
# Not used (yet). Could be made to point to AH in RHEL - but what about CentOS Stream?
cbac2c
#%%{!?ansible_collection_url:%%define ansible_collection_url() https://galaxy.ansible.com/%%{collection_namespace}/%%{collection_name}}
cbac2c
cbac2c
%if 0%{?fedora} || 0%{?rhel} >= 8
cbac2c
%{!?ansible_collection_files:%define ansible_collection_files %{_datadir}/ansible/collections/ansible_collections/%{collection_namespace}/}
cbac2c
%else
cbac2c
# Define undefined macro using "!?ansible_collection_files:..." does not work for rhel-7
cbac2c
%if %{?ansible_collection_files:0}%{!?ansible_collection_files:1}
cbac2c
%define ansible_collection_files %{_datadir}/ansible/collections/ansible_collections/%{collection_namespace}/
cbac2c
%endif
cbac2c
%endif
cbac2c
f5d5a5
# ansible-core is in rhel 8.6 and later - default to ansible-core, but allow
f5d5a5
# the use of ansible if present - we may revisit this if the automatic dependency
f5d5a5
# generator is added to ansible-core in RHEL
f5d5a5
# Fedora - the automatic generator will add this - no need to explicit declare
f5d5a5
# it in the spec file
f5d5a5
# EL7 - no dependency on ansible because there is no ansible in el7 - user is
f5d5a5
# responsible for knowing they have to install ansible
f5d5a5
%if 0%{?rhel} >= 8
f5d5a5
Requires: (ansible-core >= 2.11.0 or ansible >= 2.9.0)
f5d5a5
%endif
cbac2c
cbac2c
%if %{with ansible}
2ef95e
BuildRequires: %{ansible_build_dep}
cbac2c
%endif
cbac2c
cbac2c
%if %{without ansible}
cbac2c
# We don't have ansible-galaxy.
cbac2c
# Simply copy everything instead of galaxy-installing the built artifact.
cbac2c
%define ansible_collection_build_install() tar -cf %{_tmppath}/%{collection_namespace}-%{collection_name}-%{version}.tar.gz .; mkdir -p %{buildroot}%{ansible_collection_files}%{collection_name}; (cd %{buildroot}%{ansible_collection_files}%{collection_name}; tar -xf %{_tmppath}/%{collection_namespace}-%{collection_name}-%{version}.tar.gz)
cbac2c
%else
cbac2c
%define ansible_collection_build_install() ansible-galaxy collection build; ansible-galaxy collection install -n -p %{buildroot}%{_datadir}/ansible/collections %{collection_namespace}-%{collection_name}-%{version}.tar.gz
cbac2c
%endif
cbac2c
cbac2c
# For each role, call either defcommit() or deftag(). The other macros
cbac2c
# (%%id and %%shortid) can be then used in the same way in both cases.
cbac2c
# This way  the rest of the spec file des not need to know whether we are
cbac2c
# dealing with a tag or a commit.
cbac2c
%global archiveext tar.gz
cbac2c
# list of role names
cbac2c
%global rolenames %nil
cbac2c
# list of assignments that can be used to populate a bash associative array variable
cbac2c
%global rolestodir %nil
cbac2c
%define getarchivedir() %(p=%{basename:%{S:%{1}}}; echo ${p%%.%{archiveext}})
cbac2c
cbac2c
%define defcommit() %{expand:%%global ref%{1} %{2}
cbac2c
%%global shortcommit%{1} %%(c=%%{ref%{1}}; echo ${c:0:7})
cbac2c
%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}
cbac2c
%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}
cbac2c
%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz
cbac2c
%%global rolenames %%{?rolenames} %%{rolename%{1}}
cbac2c
%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"
cbac2c
%%global rolestodir %%{?rolestodir} %{roletodir%{1}}
cbac2c
}
cbac2c
cbac2c
%define deftag() %{expand:%%global ref%{1} %{2}
cbac2c
%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}
cbac2c
%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}
cbac2c
%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz
cbac2c
%%global rolenames %%{?rolenames} %%{rolename%{1}}
cbac2c
%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"
cbac2c
%%global rolestodir %%{?rolestodir} %%{roletodir%{1}}
cbac2c
}
cbac2c
cbac2c
#%%defcommit 1 14314822b529520ac12964e0d2938c4bb18ab895
cbac2c
%global rolename1 postfix
29cf9b
%deftag 1 1.2.0
cbac2c
cbac2c
#%%defcommit 2 9fe6eb36772e83b53dcfb8ceb73608fd4f72eeda
cbac2c
%global rolename2 selinux
f5d5a5
%deftag 2 1.3.4
cbac2c
2ef95e
#%%defcommit 3 cbe4bf262bffae3bf53e531662237741954c4182
cbac2c
%global rolename3 timesync
29cf9b
%deftag 3 1.6.6
cbac2c
cbac2c
#%%defcommit 4 02fc72b482e165472624b2f68eecd2ddce1d93b1
cbac2c
%global rolename4 kdump
f5d5a5
%deftag 4 1.2.2
cbac2c
29cf9b
#%%defcommit 5 61423ed36fc6da6dbe8321912e896c59a2d8e2f6
cbac2c
%global rolename5 network
29cf9b
%deftag 5 1.7.1
cbac2c
2ef95e
#%%defcommit 6 50d2b8ccc98a8f4cb9d1d550d21adc227181e9fa
cbac2c
%global rolename6 storage
f5d5a5
%deftag 6 1.7.0
cbac2c
29cf9b
#%%defcommit 7 d57caa8ca506d8cbc7ca0f96f7cb62b7e965f163
cbac2c
%global rolename7 metrics
29cf9b
%deftag 7 1.5.1
cbac2c
cbac2c
#%%defcommit 8 2b9e53233ee3a68bdb532e62f289733e436a6106
cbac2c
%global rolename8 tlog
f5d5a5
%deftag 8 1.2.5
cbac2c
cbac2c
#%%defcommit 9 9373303b98e09ef38df7afc8d06e5e55812096c7
cbac2c
%global rolename9 kernel_settings
29cf9b
%deftag 9 1.1.6
cbac2c
cbac2c
#%%defcommit 10 20dd3e5520ca06dcccaa9b3f1fb428d055e0c23f
cbac2c
%global rolename10 logging
f5d5a5
%deftag 10 1.8.1
cbac2c
cbac2c
#%%defcommit 11 c57d0b1f3384c525738fa26ba4bdca485e162567
cbac2c
%global rolename11 nbde_server
f5d5a5
%deftag 11 1.1.2
cbac2c
cbac2c
#%%defcommit 12 bef2fad5e365712d1f40e53662490ba2550a253f
cbac2c
%global rolename12 nbde_client
f5d5a5
%deftag 12 1.2.0
cbac2c
cbac2c
#%%defcommit 13 310fc53db04e8d3134524afb7a89b0477a2ffb83
cbac2c
%global rolename13 certificate
f5d5a5
%deftag 13 1.1.3
cbac2c
cbac2c
#%%defcommit 14 b2a9857ac661fa32e66666e444b73bfdb34cdf95
cbac2c
%global rolename14 crypto_policies
f5d5a5
%deftag 14 1.2.3
cbac2c
cbac2c
%global forgeorg15 https://github.com/willshersystems
cbac2c
%global repo15 ansible-sshd
cbac2c
%global rolename15 sshd
2ef95e
%defcommit 15 214df35c0bee77b5d69f49c2da269251d451b28f
2ef95e
#%%deftag 15 v0.14.1
cbac2c
cbac2c
#%%defcommit 16 59b9fd7b25607d8bd33bdb082748955f2652846a
cbac2c
%global rolename16 ssh
f5d5a5
%deftag 16 1.1.4
cbac2c
cbac2c
#%%defcommit 17 f901239cb91878719c9e7461760ef8d4789d626d
cbac2c
%global rolename17 ha_cluster
f5d5a5
%deftag 17 1.4.1
cbac2c
cbac2c
#%%defcommit 18 5f6cb73e6753fbdbb219b7d3079f0378b2d3bdb3
cbac2c
%global rolename18 vpn
f5d5a5
%deftag 18 1.3.2
2ef95e
2ef95e
%global rolename19 firewall
29cf9b
%deftag 19 1.1.0
cbac2c
2ef95e
%global rolename20 cockpit
f5d5a5
%deftag 20 1.2.1
2ef95e
29cf9b
%global mainid 5e7bb389fc5e93184871b3907e75ba896874dc21
cbac2c
Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar.gz
cbac2c
Source1: %{archiveurl1}
cbac2c
Source2: %{archiveurl2}
cbac2c
Source3: %{archiveurl3}
cbac2c
Source4: %{archiveurl4}
cbac2c
Source5: %{archiveurl5}
cbac2c
Source6: %{archiveurl6}
cbac2c
Source7: %{archiveurl7}
cbac2c
Source8: %{archiveurl8}
cbac2c
Source9: %{archiveurl9}
cbac2c
Source10: %{archiveurl10}
cbac2c
Source11: %{archiveurl11}
cbac2c
Source12: %{archiveurl12}
cbac2c
Source13: %{archiveurl13}
cbac2c
Source14: %{archiveurl14}
cbac2c
Source15: %{archiveurl15}
cbac2c
Source16: %{archiveurl16}
cbac2c
Source17: %{archiveurl17}
cbac2c
Source18: %{archiveurl18}
2ef95e
Source19: %{archiveurl19}
2ef95e
Source20: %{archiveurl20}
cbac2c
7ac2bb
# Collection tarballs from Automation Hub
7ac2bb
# Not used on Fedora.
7ac2bb
Source801: ansible-posix-1.3.0.tar.gz
7ac2bb
7ac2bb
# Collection tarballs from Galaxy
7ac2bb
# Not used on Fedora.
29cf9b
Source901: community-general-4.6.0.tar.gz
7ac2bb
cbac2c
# Script to convert the collection README to Automation Hub.
cbac2c
# Not used on Fedora.
cbac2c
Source998: collection_readme.sh
cbac2c
f5d5a5
Patch51: network-disable-bondtests.diff
cbac2c
cbac2c
BuildArch: noarch
cbac2c
cbac2c
%if %{with html}
cbac2c
# Requirements for md2html.sh to build the documentation
cbac2c
%if 0%{?fedora} || 0%{?rhel} >= 9
cbac2c
BuildRequires: rubygem-kramdown-parser-gfm
cbac2c
%else
cbac2c
BuildRequires: pandoc
cbac2c
BuildRequires: asciidoc
cbac2c
BuildRequires: highlight
cbac2c
%endif
cbac2c
%endif
cbac2c
cbac2c
# Requirements for galaxy_transform.py
cbac2c
BuildRequires: python3
cbac2c
%if 0%{?fedora} || 0%{?rhel} >= 8
f5d5a5
BuildRequires: %{py3_dist ruamel.yaml}
cbac2c
%else
cbac2c
BuildRequires: python3-ruamel-yaml
cbac2c
%endif
cbac2c
cbac2c
Obsoletes: rhel-system-roles-techpreview < 1.0-3
cbac2c
cbac2c
%if %{undefined __ansible_provides}
cbac2c
Provides: ansible-collection(%{collection_namespace}.%{collection_name}) = %{collection_version}
cbac2c
%endif
cbac2c
# be compatible with the usual Fedora Provides:
cbac2c
Provides: ansible-collection-%{collection_namespace}-%{collection_name} = %{version}-%{release}
cbac2c
cbac2c
# We need to put %%description within the if block to avoid empty
cbac2c
# lines showing up.
cbac2c
%if 0%{?rhel}
cbac2c
%description
cbac2c
Collection of Ansible roles and modules that provide a stable and
cbac2c
consistent configuration interface for managing multiple versions
cbac2c
of Red Hat Enterprise Linux.
cbac2c
%else
cbac2c
%description
cbac2c
Collection of Ansible roles and modules that provide a stable and
cbac2c
consistent configuration interface for managing multiple versions
cbac2c
of Fedora, Red Hat Enterprise Linux & CentOS.
cbac2c
%endif
cbac2c
cbac2c
%if %{with collection_artifact}
cbac2c
%package collection-artifact
cbac2c
Summary: Collection artifact to import to Automation Hub / Ansible Galaxy
cbac2c
cbac2c
%description collection-artifact
cbac2c
Collection artifact for %{name}. This package contains %{collection_namespace}-%{collection_name}-%{version}.tar.gz
cbac2c
%endif
cbac2c
cbac2c
%prep
2ef95e
%setup -q -a1 -a2 -a3 -a4 -a5 -a6 -a7 -a8 -a9 -a10 -a11 -a12 -a13 -a14 -a15 -a16 -a17 -a18 -a19 -a20 -n %{getarchivedir 0}
cbac2c
7ac2bb
for file in %_sourcedir/*.tar.gz; do
7ac2bb
    if [[ "$file" =~ %_sourcedir/([^-]+)-([^-]+)-(.+).tar.gz ]]; then
7ac2bb
        ns=${BASH_REMATCH[1]}
7ac2bb
        name=${BASH_REMATCH[2]}
7ac2bb
        ver=${BASH_REMATCH[3]}
7ac2bb
        mkdir -p .external/$ns/$name
7ac2bb
        pushd .external/$ns/$name > /dev/null
7ac2bb
        tar xfz "$file"
7ac2bb
        popd > /dev/null
7ac2bb
    fi
7ac2bb
done
7ac2bb
cbac2c
declare -A ROLESTODIR=(%{rolestodir})
cbac2c
for rolename in %{rolenames}; do
cbac2c
    dir_from_archive="${ROLESTODIR[${rolename}]}"
cbac2c
    if [ ! -d "$dir_from_archive" ]; then
cbac2c
        # ansible-sshd uses tags like vX.Y.Z
cbac2c
        # using the github archive/ link with a tag like this strips
cbac2c
        # the leading v from the tag used to construct the directory
cbac2c
        # name in the archive
cbac2c
        if [[ "$dir_from_archive" =~ %{repo15}-v([0-9]+[.][0-9]+.*) ]]; then
cbac2c
            dir_from_archive="%{repo15}-${BASH_REMATCH[1]}"
cbac2c
        fi
cbac2c
    fi
cbac2c
    mv "$dir_from_archive" ${rolename}
cbac2c
done
cbac2c
cbac2c
cd %{rolename2}/tests
cbac2c
# this test causes avcs we want to ignore
cbac2c
sed -r -i -e '/hosts: all/a\
cbac2c
  tags:\
cbac2c
    - tests::avc' tests_selinux_disabled.yml
cbac2c
cd ../..
cbac2c
cbac2c
cd %{rolename5}
cbac2c
%patch51 -p1
cbac2c
cd ..
cbac2c
cd %{rolename15}
cbac2c
sed -r -i -e "s/ansible-sshd/linux-system-roles.sshd/" tests/*.yml examples/*.yml
cbac2c
sed -r -i -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" tests/*.yml examples/*.yml README.md
cbac2c
sed -r -i -e "s/min_ansible_version: 2.8/min_ansible_version: 2.9/" meta/main.yml
cbac2c
cd ..
cbac2c
2ef95e
cd %{rolename7}
2ef95e
# metrics roles dir is a symlink to the vendored dir.
2ef95e
# rpm upgrade doesn't like the symlink.  Replace the
2ef95e
# symlink with the real dir
2ef95e
rolesdir=$(pwd)/roles
2ef95e
realrolesdir=$(realpath "$rolesdir")
2ef95e
if [ "$rolesdir" != "$realrolesdir" ]; then
2ef95e
    rm -rf roles
2ef95e
    mv "$realrolesdir" .
2ef95e
    rm -rf vendor
2ef95e
fi
2ef95e
cd ..
2ef95e
7ac2bb
%if 0%{?rhel}
7ac2bb
# Unpack tar.gz to retrieve to be vendored modules and place them in the roles library.
7ac2bb
# ansible.posix:
7ac2bb
#   - library:
7ac2bb
#     - Module selinux and seboolean for the selinux role
7ac2bb
#     - Module mount for the storage role
7ac2bb
declare -A module_map=( ["selinux.py"]="selinux" ["seboolean.py"]="selinux"  ["mount.py"]="storage" )
7ac2bb
for module in "${!module_map[@]}"; do
7ac2bb
  role="${module_map[${module}]}"
7ac2bb
  if [ ! -d $role/library ]; then
7ac2bb
    mkdir $role/library
7ac2bb
  fi
7ac2bb
  cp -pL .external/ansible/posix/plugins/modules/$module $role/library/$module
7ac2bb
  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' -e "s/ansible_collections.ansible.posix.plugins.module_utils/ansible.module_utils.${role}_lsr/" $role/library/$module
7ac2bb
done
7ac2bb
7ac2bb
# ansible.posix:
7ac2bb
#   - module_utils:
7ac2bb
#     - Module_util mount for the storage role
7ac2bb
module_map=( ["mount.py"]="storage" )
7ac2bb
for module in "${!module_map[@]}"; do
7ac2bb
  role="${module_map[${module}]}"
7ac2bb
  if [ ! -d $role/module_utils/${role}_lsr ]; then
7ac2bb
    mkdir -p $role/module_utils/${role}_lsr
7ac2bb
  fi
7ac2bb
  cp -pL .external/ansible/posix/plugins/module_utils/$module $role/module_utils/${role}_lsr/$module
7ac2bb
  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' $role/library/$module
7ac2bb
done
7ac2bb
7ac2bb
# community.general:
7ac2bb
#   - library:
7ac2bb
#     - Module seport, sefcontext and selogin for the selinux role rolename2
f5d5a5
#     - Module ini_file for role tlog
f5d5a5
module_map=( ["seport.py"]="selinux" ["sefcontext.py"]="selinux"  ["selogin.py"]="selinux" ["ini_file.py"]="tlog" )
7ac2bb
for module in "${!module_map[@]}"; do
7ac2bb
  role="${module_map[${module}]}"
7ac2bb
  if [ ! -d $role/library ]; then
7ac2bb
    mkdir $role/library
7ac2bb
  fi
7ac2bb
  cp -pL .external/community/general/plugins/modules/$module $role/library/$module
7ac2bb
  ls -alrtF $role/library/$module
7ac2bb
  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' $role/library/$module
7ac2bb
done
7ac2bb
%endif
7ac2bb
cbac2c
# Replacing "linux-system-roles.rolename" with "rhel-system-roles.rolename" in each role
cbac2c
%if "%{roleprefix}" != "linux-system-roles."
cbac2c
for rolename in %{rolenames}; do
cbac2c
    find $rolename -type f -exec \
cbac2c
         sed "s/linux-system-roles[.]${rolename}\\>/%{roleprefix}${rolename}/g" -i {} \;
cbac2c
done
cbac2c
%endif
cbac2c
cbac2c
# Removing symlinks in tests/roles
cbac2c
for rolename in %{rolenames}; do
cbac2c
    if [ -d ${rolename}/tests/roles ]; then
cbac2c
        find ${rolename}/tests/roles -type l -exec rm {} \;
cbac2c
        if [ -d ${rolename}/tests/roles/linux-system-roles.${rolename} ]; then
cbac2c
            rm -r ${rolename}/tests/roles/linux-system-roles.${rolename}
cbac2c
        fi
cbac2c
    fi
cbac2c
done
cbac2c
rm %{rolename5}/tests/modules
cbac2c
rm %{rolename5}/tests/module_utils
cbac2c
rm %{rolename5}/tests/playbooks/roles
cbac2c
# Drop network/{scripts/print_all_options.py,tests/ensure_provider_tests.py}
cbac2c
# from rpm. These 2 files fail in brp-python-bytecompile due to f-strings
cbac2c
# when python2 is default python.
cbac2c
rm %{rolename5}/scripts/print_all_options.py
cbac2c
rm %{rolename5}/tests/ensure_provider_tests.py
cbac2c
# Drop storage tests/scripts
cbac2c
rm -rf %{rolename6}/tests/scripts
cbac2c
cbac2c
# transform ambiguous #!/usr/bin/env python shebangs to python3 to stop brp-mangle-shebangs complaining
cbac2c
find -type f -executable -name '*.py' -exec \
cbac2c
     sed -i -r -e '1s@^(#! */usr/bin/env python)(\s|$)@#\13\2@' '{}' +
cbac2c
cbac2c
%build
cbac2c
%if %{with html}
cbac2c
readmes=""
cbac2c
for role in %{rolenames}; do
cbac2c
    readmes="${readmes} $role/README.md"
cbac2c
done
cbac2c
sh md2html.sh $readmes
cbac2c
%endif
cbac2c
cbac2c
mkdir .collections
cbac2c
%if 0%{?rhel}
cbac2c
# Convert the upstream collection readme to the downstream one
cbac2c
%{SOURCE998} lsr_role2collection/collection_readme.md
2ef95e
./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \
2ef95e
                      "Red Hat Enterprise Linux System Roles Ansible Collection" \
2ef95e
                      "https://linux-system-roles.github.io" \
2ef95e
                      "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/administration_and_configuration_tasks_using_system_roles_in_rhel" \
2ef95e
                      "https://access.redhat.com/articles/3050101" \
2ef95e
                      "https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%208&component=rhel-system-roles" \
2ef95e
                      > galaxy.yml.tmp
f5d5a5
# we vendor-in all of the dependencies on rhel, so remove them
f5d5a5
rm -f lsr_role2collection/collection_requirements.txt
f5d5a5
# but leave bindep.txt
2ef95e
%else
2ef95e
./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \
2ef95e
                      "Linux System Roles Ansible Collection" \
2ef95e
                      > galaxy.yml.tmp
cbac2c
%endif
cbac2c
mv galaxy.yml.tmp galaxy.yml
cbac2c
2ef95e
includes=""
cbac2c
for role in %{rolenames}; do
2ef95e
    includes="$includes --include $role"
f5d5a5
%if 0%{?rhel}
f5d5a5
    # we vendor-in all of the dependencies on rhel, so remove them
f5d5a5
    rm -f "$role/meta/requirements.yml"
f5d5a5
%endif
cbac2c
done
cbac2c
2ef95e
LANG=en_US.utf-8 LC_ALL=en_US.utf-8 python3 release_collection.py --galaxy-yml galaxy.yml \
2ef95e
    --src-path $(pwd) --dest-path $(pwd)/.collections $includes --force --no-update \
2ef95e
	--src-owner %{name} --skip-git --skip-check --debug
2ef95e
cbac2c
# Remove table of contents from logging README.md
cbac2c
# It is not needed for html and AH/Galaxy
cbac2c
sed -i -e 's/^\(## Table of Contents\)/## Background\n\1/' \
cbac2c
  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md
cbac2c
sed -i -e '/^## Table of Contents/,/^## Background/d' \
cbac2c
  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md
cbac2c
cbac2c
# Remove internal links from readme files
cbac2c
# They are not rendered properly on AH.
cbac2c
for role in %{rolenames}; do
cbac2c
    sed -r -i -e 's/\[([^[]+)\]\(#[^)]+\)/\1/g' \
cbac2c
    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/$role/README.md
cbac2c
done
cbac2c
cbac2c
%install
cbac2c
mkdir -p $RPM_BUILD_ROOT%{installbase}
cbac2c
mkdir -p $RPM_BUILD_ROOT%{_datadir}/ansible/roles
cbac2c
cbac2c
for role in %{rolenames}; do
cbac2c
    cp -pR "$role" "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role"
cbac2c
done
cbac2c
cbac2c
%if 0%{?rolealtprefix:1}
cbac2c
for role in %{rolenames}; do
cbac2c
    ln -s    "%{rolealtrelpath}%{roleinstprefix}$role"   "$RPM_BUILD_ROOT%{_datadir}/ansible/roles/%{rolealtprefix}$role"
cbac2c
done
cbac2c
%endif
cbac2c
cbac2c
mkdir -p $RPM_BUILD_ROOT%{_pkglicensedir}
cbac2c
rm $RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}network/examples/roles
cbac2c
for role in %{rolenames}; do
cbac2c
    mkdir -p "$RPM_BUILD_ROOT%{_pkgdocdir}/$role"
cbac2c
    cp -p "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/README.md" \
cbac2c
       "$RPM_BUILD_ROOT%{_pkgdocdir}/$role"
cbac2c
%if %{with html}
cbac2c
    cp -p "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/README.html" \
cbac2c
       "$RPM_BUILD_ROOT%{_pkgdocdir}/$role"
cbac2c
%endif
cbac2c
    if [ -f "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/COPYING" ]; then
cbac2c
        cp -p "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/COPYING" \
cbac2c
           "$RPM_BUILD_ROOT%{_pkglicensedir}/$role.COPYING"
cbac2c
    fi
cbac2c
    if [ -f "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/LICENSE" ]; then
cbac2c
        cp -p "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/LICENSE" \
cbac2c
           "$RPM_BUILD_ROOT%{_pkglicensedir}/$role.LICENSE"
cbac2c
    fi
cbac2c
    if [ -d "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/examples" ]; then
cbac2c
        for file in "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/examples/"*.yml ; do
cbac2c
            basename=$(basename "$file" .yml)
cbac2c
            newname="$basename"
cbac2c
            if [[ "$newname" != example-* ]]; then
cbac2c
                newname="example-$newname"
cbac2c
            fi
cbac2c
            if [[ "$newname" != *-playbook ]]; then
cbac2c
                newname="${newname}-playbook"
cbac2c
            fi
cbac2c
            cp "$file" "$RPM_BUILD_ROOT%{_pkgdocdir}/$role/${newname}.yml"
cbac2c
            rm "$file"
cbac2c
        done
cbac2c
        if [ -f "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/examples/inventory" ]; then
cbac2c
            cp "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/examples/inventory" \
cbac2c
               "$RPM_BUILD_ROOT%{_pkgdocdir}/$role/example-inventory"
cbac2c
            rm "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/examples/inventory"
cbac2c
        fi
cbac2c
        # special case for network
cbac2c
        # this will error if the directory is unexpectedly empty
cbac2c
        rmdir "$RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}$role/examples"
cbac2c
    fi
cbac2c
done
cbac2c
cbac2c
rm $RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}*/semaphore
cbac2c
rm -r $RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}*/molecule
cbac2c
cbac2c
rm -r $RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}*/.[A-Za-z]*
cbac2c
rm $RPM_BUILD_ROOT%{installbase}/%{roleinstprefix}*/tests/.git*
cbac2c
cbac2c
# NOTE: sshd/examples/example-root-login.yml is
cbac2c
# referenced in the configuring-openssh-servers-using-the-sshd-system-role documentation module
cbac2c
# must be updated if changing the file path
cbac2c
cbac2c
pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/
cbac2c
%ansible_collection_build_install
cbac2c
popd
cbac2c
cbac2c
mkdir -p $RPM_BUILD_ROOT%{_pkgdocdir}/collection
cbac2c
mkdir -p $RPM_BUILD_ROOT%{_pkgdocdir}/collection/roles
cbac2c
cbac2c
cp -p %{buildroot}%{ansible_collection_files}%{collection_name}/README.md \
cbac2c
   $RPM_BUILD_ROOT%{_pkgdocdir}/collection
cbac2c
cbac2c
for rolename in %{rolenames}; do
cbac2c
  if [ -f %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/README.md ]; then
cbac2c
    mkdir -p $RPM_BUILD_ROOT%{_pkgdocdir}/collection/roles/${rolename}
cbac2c
    cp -p %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/README.md \
cbac2c
        $RPM_BUILD_ROOT%{_pkgdocdir}/collection/roles/${rolename}
cbac2c
  fi
cbac2c
done
cbac2c
cbac2c
%if %{with html}
cbac2c
# converting README.md to README.html for collection in $RPM_BUILD_ROOT%{_pkgdocdir}/collection
cbac2c
readmes="$RPM_BUILD_ROOT%{_pkgdocdir}/collection/README.md"
cbac2c
for role in %{rolenames}; do
cbac2c
    readmes="${readmes} $RPM_BUILD_ROOT%{_pkgdocdir}/collection/roles/${role}/README.md"
cbac2c
done
cbac2c
sh md2html.sh $readmes
cbac2c
%endif
cbac2c
cbac2c
%if %{with collection_artifact}
cbac2c
# Copy collection artifact to /usr/share/ansible/collections/ for collection-artifact
cbac2c
pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/
cbac2c
if [ -f %{collection_namespace}-%{collection_name}-%{version}.tar.gz ]; then
cbac2c
    mv %{collection_namespace}-%{collection_name}-%{version}.tar.gz \
cbac2c
       $RPM_BUILD_ROOT%{_datadir}/ansible/collections/
cbac2c
fi
cbac2c
popd
cbac2c
%endif
cbac2c
cbac2c
# generate the %files section in the file files_section.txt
cbac2c
format_item_for_files() {
cbac2c
    # $1 is directory or file name in buildroot
cbac2c
    # $2 - if true, and item is a directory, use %dir
cbac2c
    local item
cbac2c
    local files_item
cbac2c
    item="$1"
cbac2c
    files_item=${item##"%{buildroot}"}
cbac2c
    if [ -L "$item" ]; then
cbac2c
        echo "$files_item"
cbac2c
    elif [ -d "$item" ]; then
cbac2c
        if [[ "$item" == */doc* ]]; then
cbac2c
            echo "%doc $files_item"
cbac2c
        elif [ "${2:-false}" = true ]; then
cbac2c
            echo "%dir $files_item"
cbac2c
        else
cbac2c
            echo "$files_item"
cbac2c
        fi
cbac2c
    elif [[ "$item" == */README.md ]] || [[ "$item" == */README.html ]]; then
cbac2c
        if [[ "$item" == */private_* ]]; then
cbac2c
            # mark as regular file, not %doc
cbac2c
            echo "$files_item"
cbac2c
        else
cbac2c
            echo "%doc $files_item"
cbac2c
        fi
cbac2c
    elif [[ "$item" != */COPYING* ]] && [[ "$item" != */LICENSE* ]]; then
cbac2c
        # Avoid dynamically using the license macro since the license macro
cbac2c
        # is replaced with the value of License directive in the older rpmbuild.
cbac2c
        echo "$files_item"
cbac2c
    fi
cbac2c
}
cbac2c
cbac2c
files_section=files_section.txt
cbac2c
rm -f $files_section
cbac2c
touch $files_section
cbac2c
%if %{without ansible}
cbac2c
echo '%dir %{_datadir}/ansible' >> $files_section
cbac2c
echo '%dir %{_datadir}/ansible/roles' >> $files_section
cbac2c
%endif
cbac2c
%if "%{installbase}" != "%{_datadir}/ansible/roles"
cbac2c
echo '%dir %{installbase}' >> $files_section
cbac2c
%endif
cbac2c
echo '%dir %{ansible_collection_files}' >> $files_section
cbac2c
echo '%dir %{ansible_collection_files}%{collection_name}' >> $files_section
cbac2c
find %{buildroot}%{ansible_collection_files}%{collection_name} -mindepth 1 -maxdepth 1 | \
cbac2c
    while read item; do
cbac2c
        if [[ "$item" == */roles ]]; then
cbac2c
            format_item_for_files "$item" true >> $files_section
cbac2c
            find "$item" -mindepth 1 -maxdepth 1 | while read roles_dir; do
cbac2c
                format_item_for_files "$roles_dir" true >> $files_section
cbac2c
                find "$roles_dir" -mindepth 1 -maxdepth 1 | while read roles_item; do
cbac2c
                    format_item_for_files "$roles_item" >> $files_section
cbac2c
                done
cbac2c
            done
cbac2c
        else
cbac2c
            format_item_for_files "$item" >> $files_section
cbac2c
        fi
cbac2c
    done
cbac2c
cbac2c
find %{buildroot}%{installbase} -mindepth 1 -maxdepth 1 | \
cbac2c
    while read item; do
cbac2c
        if [ -d "$item" ]; then
cbac2c
            format_item_for_files "$item" true >> $files_section
cbac2c
            find "$item" -mindepth 1 -maxdepth 1 | while read roles_item; do
cbac2c
                format_item_for_files "$roles_item" >> $files_section
cbac2c
            done
cbac2c
        else
cbac2c
            format_item_for_files "$item" >> $files_section
cbac2c
        fi
cbac2c
    done
cbac2c
if [ "%{installbase}" != "%{_datadir}/ansible/roles" ]; then
cbac2c
    find %{buildroot}%{_datadir}/ansible/roles -mindepth 1 -maxdepth 1 | \
cbac2c
        while read item; do
cbac2c
            if [ -d "$item" ]; then
cbac2c
                format_item_for_files "$item" true >> $files_section
cbac2c
                find "$item" -mindepth 1 -maxdepth 1 | while read roles_item; do
cbac2c
                    format_item_for_files "$roles_item" >> $files_section
cbac2c
                done
cbac2c
            else
cbac2c
                format_item_for_files "$item" >> $files_section
cbac2c
            fi
cbac2c
        done
cbac2c
fi
cbac2c
# cat files_section.txt
cbac2c
# done with files_section.txt generation
cbac2c
cbac2c
cbac2c
%files -f files_section.txt
cbac2c
%{_pkgdocdir}/*/README.md
cbac2c
%if %{with html}
cbac2c
%{_pkgdocdir}/*/README.html
cbac2c
%endif
cbac2c
%{_pkgdocdir}/*/example-*
cbac2c
%{_pkgdocdir}/collection/roles/*/README.md
cbac2c
%if %{with html}
cbac2c
%{_pkgdocdir}/collection/roles/*/README.html
cbac2c
%endif
cbac2c
%license %{_pkglicensedir}/*
cbac2c
%license %{installbase}/*/COPYING*
cbac2c
%license %{installbase}/*/LICENSE*
cbac2c
%license %{ansible_collection_files}/%{collection_name}/COPYING*
cbac2c
%license %{ansible_collection_files}/%{collection_name}/LICENSE*
cbac2c
%if 0%{?rhel} < 8
cbac2c
# Needs to list excluded files in this hardcoded style since when
cbac2c
# format_item_for_files is executed, brp-python-bytecompile is not
cbac2c
# executed yet.
cbac2c
%exclude %{installbase}/*/*.py?
cbac2c
%exclude %{installbase}/*/*/*.py?
cbac2c
%exclude %{installbase}/*/*/*/*.py?
cbac2c
%exclude %{installbase}/*/*/*/*/*.py?
cbac2c
%exclude %{ansible_collection_files}/%{collection_name}/*/*/*.py?
cbac2c
%exclude %{ansible_collection_files}/%{collection_name}/*/*/*/*.py?
cbac2c
%exclude %{ansible_collection_files}/%{collection_name}/*/*/*/*/*.py?
cbac2c
%endif
cbac2c
cbac2c
%if %{with collection_artifact}
cbac2c
%files collection-artifact
cbac2c
%{_datadir}/ansible/collections/%{collection_namespace}-%{collection_name}-%{version}.tar.gz
cbac2c
%endif
cbac2c
cbac2c
%changelog
29cf9b
* Fri Mar 18 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.1-1
29cf9b
- network - pytest failed when running with nm providers in the rhel-8.5 beaker machine
29cf9b
  Resolves rhbz#2064396 (EL8)
29cf9b
  Resolves rhbz#2064401 (EL9)
29cf9b
- network - bond: fix typo in supporting the infiniband ports in active-backup modekernel_settings error configobj not found on RHEL 8.6 managed hosts
29cf9b
  Resolves rhbz#2064388 (EL8)
29cf9b
  Resolves rhbz#2064391 (EL9)
29cf9b
- network - consistently use ansible_managed in configuration files managed by role
29cf9b
  Resolves rhbz#2057656 (EL8)
29cf9b
  Resolves rhbz#2057657 (EL9)
29cf9b
29cf9b
* Tue Mar 15 2022 Rich Megginson <rmeggins@redhat.com> - 1.16.0-1
29cf9b
- metrics - consistently use ansible_managed in configuration files managed by role
29cf9b
  Resolves rhbz#2057645 (EL8)
29cf9b
  Resolves rhbz#2057647 (EL9)
29cf9b
- postfix - consistently use ansible_managed in configuration files managed by role
29cf9b
  Resolves rhbz#2057661 (EL8)
29cf9b
  Resolves rhbz#2057662 (EL9)
29cf9b
- postfix - provide the ability to replace config and reset configuration back to default
29cf9b
  Resolves rhbz#2044657 (EL8)
29cf9b
  Resolves rhbz#2058780 (EL9)
29cf9b
- new tags required in galaxy.yml for Automation Hub
29cf9b
29cf9b
* Thu Mar 3 2022 Rich Megginson <rmeggins@redhat.com> - 1.15.1-1
29cf9b
- kernel_settings error configobj not found on RHEL 8.6 managed hosts
29cf9b
  Resolves rhbz#2058772 (EL8)
29cf9b
  Resolves rhbz#2058756 (EL9)
29cf9b
- timesync: basic-smoke test failure in timesync/tests_ntp.yml
29cf9b
  Resolves rhbz#2059293 (EL8)
29cf9b
  Resolves rhbz#2058645 (EL9)
29cf9b
29cf9b
* Tue Mar  1 2022 Noriko Hosoi <nhosoi@redhat.com> - 1.15.0-2
29cf9b
- metrics - follow symlinks for the mssql and elasticsearch configuration paths
29cf9b
  Resolves rhbz#2058655 (EL8)
29cf9b
  Resolves rhbz#2058777 (EL9)
29cf9b
29cf9b
* Thu Feb 24 2022 Rich Megginson <rmeggins@redhat.com> - 1.15.0-1
29cf9b
- firewall - ensure target changes take effect immediately
29cf9b
  Resolves rhbz#2057172 (EL8)
29cf9b
  Resolves rhbz#2057164 (EL9)
29cf9b
- firewall - Firewall RHEL System Role should be able to set default zone
29cf9b
  Resolves rhbz#2022458 (EL8)
29cf9b
  Resolves rhbz#2022461 (EL9)
29cf9b
- network - tests_802_1x_nm, tests_802_1x_updated_nm fails because of missing hostapd in EPEL
29cf9b
  Resolves rhbz#2053862 (EL8)
29cf9b
  Resolves rhbz#2053861 (EL9)
29cf9b
f5d5a5
* Mon Feb 21 2022 Rich Megginson <rmeggins@redhat.com> - 1.14.0-1
f5d5a5
- ha_cluster - set permissions for haclient group
f5d5a5
  Resolves rhbz#2049747 (EL8)
f5d5a5
  Resolves rhbz#2049754 (EL9)
f5d5a5
- network - Add more bonding options to rhel-system-roles.network
f5d5a5
  Resolves rhbz#2008931 (EL8)
f5d5a5
  Resolves rhbz#2054435 (EL9)
f5d5a5
- certificate - should consistently use ansible_managed in hook scripts
f5d5a5
  Resolves rhbz#2054364 (EL8)
f5d5a5
  Resolves rhbz#2054368 (EL9)
f5d5a5
- tlog - consistently use ansible_managed in configuration files managed by role
f5d5a5
  Resolves rhbz#2054363 (EL8)
f5d5a5
  Resolves rhbz#2054367 (EL9)
f5d5a5
- vpn - consistently use ansible_managed in configuration files managed by role
f5d5a5
  Resolves rhbz#2054365 (EL8)
f5d5a5
  Resolves rhbz#2054369 (EL9)
f5d5a5
f5d5a5
* Mon Feb 14 2022 Rich Megginson <rmeggins@redhat.com> - 1.13.0-1
f5d5a5
- storage - RFE: Add support for RAID volumes (lvm-only)
f5d5a5
  Resolves rhbz#2016514 (EL8)
f5d5a5
  Resolves rhbz#2016518 (EL9)
f5d5a5
- storage - RFE: Add support for cached volumes (lvm-only)
f5d5a5
  Resolves rhbz#2016511 (EL8)
f5d5a5
  Resolves rhbz#2016517 (EL9)
f5d5a5
- metrics - metrics role can't be re-run if the Grafana admin password has been changed
f5d5a5
  Resolves rhbz#1967321 (EL8)
f5d5a5
  Resolves rhbz#2041632 (EL9)
f5d5a5
- nbde_client - NBDE client system role does not support servers with static IP addresses
f5d5a5
  Resolves rhbz#1985022 (EL8)
f5d5a5
  Resolves rhbz#2031555 (EL9)
f5d5a5
- ha_cluster - [RFE] ha_cluster - Support for creating resource constraints (Location, Ordering, etc.)
f5d5a5
  Resolves rhbz#2041635 (EL8)
f5d5a5
  Resolves rhbz#2041634 (EL9)
f5d5a5
- firewall - ensure zone exists and can be used in subsequent operations
f5d5a5
  Resolves rhbz#2042541 (EL8)
f5d5a5
  Resolves rhbz#2024775 (EL9)
f5d5a5
- network - RFE: Support Routing Tables in static routes in Network Role
f5d5a5
  Resolves rhbz#2031521 (EL8)
f5d5a5
  Resolves rhbz#2049798 (EL9)
f5d5a5
- network - Failure to activate connection: nm-manager-error-quark: No suitable device found for this connection
f5d5a5
  Resolves rhbz#2034908 (EL8)
f5d5a5
  Resolves rhbz#2038957 (EL9)
f5d5a5
- network - Set DNS search setting only for enabled IP protocols
f5d5a5
  Resolves rhbz#2041627 (EL8)
f5d5a5
  Resolves rhbz#2004899 (EL9)
f5d5a5
f5d5a5
* Tue Feb 8 2022 Rich Megginson <rmeggins@redhat.com> - 1.12.1-1
f5d5a5
- vpn - template error while templating string: no filter named 'vpn_ipaddr'
f5d5a5
  Resolves rhbz#2052103 (EL8)
f5d5a5
  Resolves rhbz#2050341 (EL9)
f5d5a5
- kdump - Unable to start service kdump: Job for kdump.service failed because the control process exited with error code.
f5d5a5
  Resolves rhbz#2052105 (EL8)
f5d5a5
  Resolves rhbz#2050419 (EL9)
f5d5a5
- remove collection dependencies on rhel because we vendor them in
f5d5a5
f5d5a5
* Thu Feb 3 2022 Rich Megginson <rmeggins@redhat.com> - 1.12.0-2
f5d5a5
- RHEL8.6, 9 - add "Requires: ansible-core or ansible"
f5d5a5
  Resolves rhbz#2012316 (EL8)
f5d5a5
  Resolves rhbz#2012298 (EL9)
f5d5a5
f5d5a5
* Thu Jan 27 2022 Rich Megginson <rmeggins@redhat.com> - 1.12.0-1
f5d5a5
- vpn - use custom vpn_ipaddr filter to make role work on RHEL 8.6 with ansible-core
f5d5a5
  this is covered by "make roles work with ansible-core on all platforms" BZ
f5d5a5
- logging - Logging role "logging_purge_confs" option not properly working
f5d5a5
  Resolves rhbz#2040812 (EL8)
f5d5a5
  Resolves rhbz#2039106 (EL9)
f5d5a5
- kernel_settings role should use ansible_managed in its configuration file
f5d5a5
  Resolves rhbz#2047504 (EL8)
f5d5a5
  Resolves rhbz#2047506 (EL9)
f5d5a5
f5d5a5
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.11.0-3
f5d5a5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
f5d5a5
f5d5a5
* Tue Dec 14 2021 Rich Megginson <rmeggins@redhat.com> - 1.11.0-2
f5d5a5
- RHEL8.6, 9 - add "Requires: ansible-core or ansible"
f5d5a5
2ef95e
* Thu Dec 2 2021 Rich Megginson <rmeggins@redhat.com> - 1.11.0-1
2ef95e
- timesync - fix ansible 2.12 issues, service_facts issues
2ef95e
  Resolves rhbz#2012316 (EL8)
2ef95e
  Resolves rhbz#2012298 (EL9)
2ef95e
- timesync - Failure related to missing ntp/ntpd package/service on RHEL-9 host
2ef95e
  Resolves rhbz#2029463 (EL9)
2ef95e
- logging - add test case for immark quoting issue
2ef95e
  Resolves rhbz#2021678 (EL8)
2ef95e
  Resolves rhbz#2021676 (EL9)
2ef95e
- cockpit - use existing cert - cockpit_cert, cockpit_private_key
2ef95e
  Resolves rhbz#2021661 (EL8)
2ef95e
  Resolves rhbz#2021028 (EL9)
2ef95e
- storage - fix ansible 2.12 issues, service_facts issues; workaround lvm, udev issues in tests
2ef95e
  Resolves rhbz#2012316 (EL8)
2ef95e
  Resolves rhbz#2012298 (EL9)
2ef95e
- ssh - tests_all_options.yml: "assertion": "'StdinNull yes' in config.content | b64decode ", failure
2ef95e
  Resolves rhbz#2029614 (EL8)
2ef95e
  Resolves rhbz#2029427 (EL9)
2ef95e
- kdump - support reboot required and reboot ok
2ef95e
  Resolves rhbz#2029605 (EL8)
2ef95e
  Resolves rhbz#2029602 (EL9)
2ef95e
- metrics - sync with latest ansible-pcp
2ef95e
  Resolves rhbz#2012316 (EL8)
2ef95e
  Resolves rhbz#2012298 (EL9)
2ef95e
- sshd - should detect FIPS mode and handle tasks correctly in FIPS mode
2ef95e
  Resolves rhbz#1979714 (EL8)
2ef95e
  Resolves rhbz#2029634 (EL9)
2ef95e
2ef95e
* Mon Nov 8 2021 Rich Megginson <rmeggins@redhat.com> - 1.10.0-1
2ef95e
- add cockpit role
2ef95e
  Resolves rhbz#2021661 (EL8)
2ef95e
  Resolves rhbz#2021028 (EL9)
2ef95e
- add firewall role
2ef95e
  Resolves rhbz#1854988 (EL8)
2ef95e
  Resolves rhbz#2021665 (EL9)
2ef95e
- firewall - add ability to add-source
2ef95e
  Resolves rhbz#1932678 (EL8)
2ef95e
  Resolves rhbz#2021667 (EL9)
2ef95e
- firewall - allow user defined zones
2ef95e
  Resolves rhbz#1850768 (EL8)
2ef95e
  Resolves rhbz#2021669 (EL9)
2ef95e
- firewall - allow specifying the zone
2ef95e
  Resolves rhbz#1850753 (EL8)
2ef95e
  Resolves rhbz#2021670 (EL9)
2ef95e
- updates for ansible 2.12 support
2ef95e
  Resolves rhbz#2012316 (EL8)
2ef95e
  Resolves rhbz#2012298 (EL9)
2ef95e
- update community.general to 4.0.1
2ef95e
  Resolves rhbz#2006081 (EL8)
2ef95e
  Resolves rhbz#2006076 (EL9)
2ef95e
- network - Allow to specify PCI address to configure profiles
2ef95e
  Resolves rhbz#1695634 (EL8)
2ef95e
  Resolves rhbz#1999162 (EL9)
2ef95e
- network - support wifi Enhanced Open (OWE)
2ef95e
  Resolves rhbz#1993379 (EL8)
2ef95e
  Resolves rhbz#1993377 (EL9)
2ef95e
- network - support WPA3 Simultaneous Authentication of Equals(SAE)
2ef95e
  Resolves rhbz#1993311 (EL8)
2ef95e
  Resolves rhbz#1993304 (EL9)
2ef95e
- network - RFE: Support ignoring default gateway retrieved by DHCP/IPv6-RA
2ef95e
  Resolves rhbz#1897565 (EL8)
2ef95e
  Resolves rhbz#1978773 (EL9)
2ef95e
- network - Update network system role to reflect that network teaming is deprecated in RHEL 9
2ef95e
  Resolves rhbz#1897565 (EL8)
2ef95e
  Resolves rhbz#1999770 (EL9)
2ef95e
- selinux - fails linit rules role-name and unnamed-task
2ef95e
  Resolves rhbz#1974000 (EL8)
2ef95e
  Resolves rhbz#2021675 (EL9)
2ef95e
- kernel_settings - ansible_managed | comment BZs:
2ef95e
  Resolves rhbz#2006230 (EL9)
2ef95e
  Resolves rhbz#2006231 (EL8)
2ef95e
  Resolves rhbz#2006233 (EL7)
2ef95e
- logging - logging role missing quotes for immark module interval value
2ef95e
  Resolves rhbz#2021678 (EL8)
2ef95e
  Resolves rhbz#2021676 (EL9)
2ef95e
- logging - Add user and password
2ef95e
  Resolves rhbz#2010327 (EL8)
2ef95e
  Resolves rhbz#1990490 (EL9)
2ef95e
- logging - Performance improvement
2ef95e
  Resolves rhbz#2005727 (EL8)
2ef95e
  Resolves rhbz#2004303 (EL9)
2ef95e
- nbde_client - add regenerate-all to the dracut command
2ef95e
  Resolves rhbz#2021682 (EL8)
2ef95e
  Resolves rhbz#2021681 (EL9)
2ef95e
- certificate - Fix certificate permissions with "group" option
2ef95e
  Resolves rhbz#2021683 (EL8)
2ef95e
  Resolves rhbz#2021025 (EL9)
2ef95e
7ac2bb
* Tue Oct 26 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.9.0-2
7ac2bb
- Change the PFSL license to Python because this is how PFSL is reffered to in
7ac2bb
  rpminspect-data packages in Fedora, CentOS, and RHEL
7ac2bb
  Related: rhbz#2006076
7ac2bb
7ac2bb
* Mon Oct 11 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.9.0-1
7ac2bb
- Support ansible-core and improve roles:
7ac2bb
  - selinux: Add support for Rocky Linux 8, fix ansible_distribution_major_version
7ac2bb
  - timesync: Support ansible-core, use ansible_managed | comment
7ac2bb
  - kdump: Support ansible-core, use ansible_managed | comment
7ac2bb
  - network: Support ansible-core; deprecate RHEL 9 in readme; validate that ipv6_disabled is conflicting with other settings; specify PCI address to configure profile - adds match and path settings)
7ac2bb
  - storage: Support ansible-core, add skip checks feature to speed up the tests
7ac2bb
  - logging: Support ansible-core, add the `uid` option for elasticsearch, improve performance, use ansible_manged | comment
7ac2bb
    Resolves: rhbz#1990490 (EL9)
7ac2bb
  - ssh: Use ansible_manged | comment
7ac2bb
  - sshd: Use ansible_managed | comment
7ac2bb
  - ha_cluster: Support ansible-core, fix password_hash salt length
7ac2bb
  - vpn: Support ansible-core, use wait_for_connection instead of wait_for with ssh
7ac2bb
  - ansible_managed | comment BZs:
7ac2bb
    Resolves: rhbz#2006230 (EL9)
7ac2bb
    Resolves: rhbz#2006231 (EL8)
7ac2bb
    Resolves: rhbz#2006233 (EL7)
7ac2bb
- untar the collection tarballs and copy the files
7ac2bb
- Add vendoring code for rhel / centos
7ac2bb
  - selinux: selinux, seboolean, seport, selogin, sefcontext
7ac2bb
  - storage: mount
7ac2bb
  - vpn: ipaddr
7ac2bb
    Resolves: rhbz#2006076 (EL9)
7ac2bb
    Resolves: rhbz#2006081 (EL8)
7ac2bb
cbac2c
* Thu Aug 26 2021 Rich Megginson <rmeggins@redhat.com> - 1.8.3-2
cbac2c
- selinux - tag tests_selinux_disabled.yml with tests::avc
cbac2c
  Resolves rhbz#1996315 (EL9)
cbac2c
  Resolves rhbz#1996317 (EL8)
cbac2c
cbac2c
* Thu Aug 26 2021 Rich Megginson <rmeggins@redhat.com> - 1.8.3-1
cbac2c
- storage - revert the dm-vdo workaround fix for vdo testing
cbac2c
  Resolves rhbz#1978488 (EL9)
cbac2c
  Resolves rhbz#1991141 (EL8)
cbac2c
cbac2c
* Tue Aug 24 2021 Rich Megginson <rmeggins@redhat.com> - 1.8.2-1
cbac2c
- logging - Update the certificates copy tasks
cbac2c
  Resolves rhbz#1996777 (EL9)
cbac2c
  Resolves rhbz#1994580 (EL8)
cbac2c
cbac2c
* Mon Aug 16 2021 Rich Megginson <rmeggins@redhat.com> - 1.8.1-1
cbac2c
- metrics - the bpftrace role does not properly configure bpftrace agent
cbac2c
  Resolves rhbz#1994180 (EL9)
cbac2c
  Resolves rhbz#1993240 (EL8)
cbac2c
cbac2c
* Thu Aug 12 2021 Rich Megginson <rmeggins@redhat.com> - 1.8.0-1
cbac2c
- drop support for Ansible 2.8 - min_ansible_version is now 2.9
cbac2c
  Resolves rhbz#1989197 (EL9)
cbac2c
  Resolves rhbz#1989199 (EL8)
cbac2c
- sshd - fix rhel6 support - failed to validate: error:Missing Match criteria for all Bad Match condition
cbac2c
  Resolves rhbz#1991598 (EL9)
cbac2c
  Resolves rhbz#1990947 (EL8)
cbac2c
cbac2c
* Tue Aug 10 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.6-1
cbac2c
- storage - tests_create_lvmvdo_then_remove fails - Module dm-vdo not found
cbac2c
  Resolves rhbz#1991141 (EL8)
cbac2c
  Resolves rhbz#1991062 (EL9)
cbac2c
- storage - Get syntax errors in tests_lvm_errors.yml
cbac2c
  Resolves rhbz#1990793 (EL8)
cbac2c
  Resolves rhbz#1991142 (EL9)
cbac2c
cbac2c
* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 1.7.5-2
cbac2c
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
cbac2c
  Related: rhbz#1991688
cbac2c
cbac2c
* Fri Aug 06 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.5-1
cbac2c
- logging, certificate - Instead of the archive module, use "tar" command for backup.
cbac2c
  Resolves rhbz#1984182 (EL9)
cbac2c
  Resolves rhbz#1987096 (EL8)
cbac2c
- logging - Add a support for list value to server_host in the elasticsearch output
cbac2c
  Resolves rhbz#1986460 (EL9)
cbac2c
  Resolves rhbz#1986463 (EL8)
cbac2c
- logging - tests_relp.yml; Can't detect any of the required Python libraries cryptography (>= 1.2.3) or PyOpenSSL (>= 0.6)
cbac2c
  Resolves rhbz#1989962 (EL9)
cbac2c
  Resolves rhbz#1990142 (EL8)
cbac2c
cbac2c
* Fri Aug 06 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.4-1
cbac2c
- metrics - Grafana dashboard not working after metrics role run unless services manually restarted
cbac2c
  Resolves rhbz#1984150 (EL9)
cbac2c
  Resolves rhbz#1978357 (EL8)
cbac2c
cbac2c
* Tue Aug 03 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.3-1
cbac2c
- storage - tag tests that use NVME and SCSI
cbac2c
  Resolves rhbz#1989211 (EL9)
cbac2c
  Resolves rhbz#1989638 (EL8)
cbac2c
cbac2c
* Tue Aug 03 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.2-1
cbac2c
- sshd - support for rhel9 managed hosts
cbac2c
  Resolves rhbz#1989221 (EL9)
cbac2c
  Resolves rhbz#1989638 (EL8)
cbac2c
cbac2c
* Thu Jul 29 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.1-1
cbac2c
- network - tests_provider_nm.yml fails with an error: Failure in test 'I can manage a veth interface with NM after I managed it with initscripts.
cbac2c
  Resolves rhbz#1935919
cbac2c
- network - _initscripts tests fail because "No package network-scripts available."
cbac2c
  Resolves rhbz#1935916
cbac2c
- network - Test tests_bond_initscripts.yml failed to create interface
cbac2c
  Resolves rhbz#1980870
cbac2c
- storage - covscan error - DEADCODE - vdopool if create_vdo else parent
cbac2c
  Resolves rhbz#1985571 (EL9)
cbac2c
  Resolves rhbz#1985572 (EL8)
cbac2c
- network - network: tests_bond_initscripts.yml leaves behind unusable resolv.conf in CI
cbac2c
  Resolves rhbz#1915017
cbac2c
cbac2c
* Wed Jul 28 2021 Rich Megginson <rmeggins@redhat.com> - 1.7.0-1
cbac2c
- network - Skip tests on RHEL9 that use hostapd
cbac2c
  Resolves rhbz#1945348
cbac2c
- network - Fix the bond test on DHCP
cbac2c
  Resolves rhbz#1918252
cbac2c
- certificate, logging - Use 'tar' command instead of archive module
cbac2c
  Resolves rhbz#1984182 (EL9)
cbac2c
  Resolves rhbz#1987096 (EL8)
cbac2c
- kernel_settings - Disable bootloader testing on EL9
cbac2c
  Resolves rhbz#1944599
cbac2c
- logging - Add a support for list value to server_host in the elasticsearch output
cbac2c
  Resolves rhbz#1986460 (EL9)
cbac2c
  Resolves rhbz#1986463 (EL8)
cbac2c
- storage - Add support for percentage-based volume sizes
cbac2c
  Resolves rhbz#1984583 (EL9)
cbac2c
  Resolves rhbz#1894642 (EL8)
cbac2c
- storage -storage_test_actual_size != storage_test_requested_size observed with tests_lvm_auto_size_cap.yml
cbac2c
  Resolves rhbz#1986284 (EL8)
cbac2c
cbac2c
* Fri Jul 23 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.1-1
cbac2c
- Error: device becoming unmanaged and pytest not reproducible in tests_integration_pytest.yml
cbac2c
  Resolves rhbz#1985382 (EL9)
cbac2c
  Resolves rhbz#1932699 (EL8)
cbac2c
- EPEL yum repository configuration for tests
cbac2c
  Rebasing to latest picks up this fix - see rhel7 bz1980439
cbac2c
- connections: workaround DeprecationWarning for NM.SettingEthtool.set_feature()
cbac2c
  Rebasing to latest picks up this fix
cbac2c
cbac2c
* Thu Jul 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.6.0-1
cbac2c
- ha_cluster - add pacemaker cluster properties configuration
cbac2c
  Resolves rhbz#1982913 (EL8)
cbac2c
  Resolves rhbz#1982906 (EL9)
cbac2c
cbac2c
* Thu Jul 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.5.0-1
cbac2c
- crypto_policies - rename 'policy modules' to 'subpolicies'
cbac2c
  Resolves rhbz#1982896 (EL9)
cbac2c
  Resolves rhbz#1982897 (EL8)
cbac2c
cbac2c
* Thu Jul 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.2-1
cbac2c
- storage - relabel doesn't support - Fixed volume relabeling
cbac2c
  Resolves rhbz#1876315 (EL8)
cbac2c
  Resolves rhbz#1982841 (EL9)
cbac2c
cbac2c
* Fri Jul  9 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.1-1
cbac2c
- network - Re-running the network system role results in "changed: true" when nothing has actually changed
cbac2c
  Resolves rhbz#1980871
cbac2c
- network - Test tests_bond_initscripts.yml failed to create interface
cbac2c
  Resolves rhbz#1980870
cbac2c
cbac2c
* Thu Jul  8 2021 Rich Megginson <rmeggins@redhat.com> - 1.4.0-1
cbac2c
- storage - LVMVDO support
cbac2c
  Resolves rhbz#1882475
cbac2c
  Resolves rhbz#1978488
cbac2c
cbac2c
* Wed Jun 23 2021 Rich Megginson <rmeggins@redhat.com> - 1.3.0-1
cbac2c
- ha_cluster - add pacemaker resources configuration
cbac2c
  Resolves rhbz#1978726
cbac2c
- ha_cluster - code cleanup
cbac2c
  Resolves rhbz#1978731
cbac2c
- Postfix RHEL system role README.md missing variables under the "Role Variables" section
cbac2c
  Resolves rhbz#1978734
cbac2c
- logging README.html examples are rendered incorrectly
cbac2c
  Resolves rhbz#1978758
cbac2c
- make postfix role idempotent - round 2
cbac2c
  Resolves rhbz#1978760
cbac2c
- selinux task for semanage says Fedora in name but also runs on RHEL/CentOS 8
cbac2c
  Resolves rhbz#1978740
cbac2c
- metrics role task to enable logging for targeted hosts not working
cbac2c
  Resolves rhbz#1978746
cbac2c
- network - Only show stderr_lines by default
cbac2c
  Resolves rhbz#1978731
cbac2c
- storage - LVMVDO support
cbac2c
  Resolves rhbz#1978488
cbac2c
- storage - fix several linter issues
cbac2c
  Resolves rhbz#1978731
cbac2c
- ssh - Fix variable precedence when invoked through roles
cbac2c
  Resolves rhbz#1978745
cbac2c
- ssh - Update configuration options list for OpenSSH 8.6
cbac2c
  Resolves rhbz#1978731
cbac2c
- sshd - Fix variable precedence when invoked through roles
cbac2c
  Resolves rhbz#1978745
cbac2c
- sshd - Update configuration options list for OpenSSH 8.6
cbac2c
  Resolves rhbz#1978731
cbac2c
- sshd - support for appending a snippet to configuration file
cbac2c
  Resolves rhbz#1978752
cbac2c
- timesync - add NTS support
cbac2c
  Resolves rhbz#1978753
cbac2c
- timesync - rebase to latest
cbac2c
  Resolves rhbz#1978731
cbac2c
- nbde_client - rebase to latest
cbac2c
  Resolves rhbz#1978731
cbac2c
cbac2c
* Thu Jun 17 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-3
cbac2c
- Make the ansible_collection_files macro defined in Fedora automatically and
cbac2c
  in RHEL manually consistent - having slash at the end to clean double-slashes
cbac2c
cbac2c
* Wed Jun 16 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-2
cbac2c
- Remove slash (/) from the end of URLs to improve code readability
cbac2c
cbac2c
* Wed Jun 16 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.2.3-1
cbac2c
- Add EL 9 support for timesync and network
cbac2c
  Resolves rhbz#1952887
cbac2c
cbac2c
* Tue Jun 15 2021 Rich Megginson <rmeggins@redhat.com> - 1.2.2-3
cbac2c
- Fix HTML rendering of internal links when using pandoc/asciidoc
cbac2c
- Uses pandoc gfm instead of markdown_github
cbac2c
  Resolves rhbz#1962976
cbac2c
cbac2c
* Fri Jun 11 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.2.2-2
cbac2c
- Make spec file available for older versions of OSes.
cbac2c
- Drop python3-six dependency which was used by lsr_role2collection.py.
cbac2c
- Drop html files from rpm if the version has no markdown parser.
cbac2c
- Drop unnecessary python scripts which include python3 only code, e.g.,
cbac2c
  f-strings.
cbac2c
  Resolves rhbz#1970165
cbac2c
cbac2c
* Wed Jun  9 2021 Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
cbac2c
- fix kdump tests_ssh for basic smoke test
cbac2c
  Resolves rhbz#1957876
cbac2c
cbac2c
* Fri May 21 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.2.1-1
cbac2c
- fix logging README.html examples' rendering problems
cbac2c
  Resolves rhbz#1962374
cbac2c
- fix broken internal links in README.md files
cbac2c
  Resolves rhbz#1962976
cbac2c
cbac2c
* Fri May 21 2021 Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-2
cbac2c
- Add BuildRequires: rubygem-kramdown for Fedora and RHEL >= 9
cbac2c
cbac2c
* Fri May 14 2021 Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
cbac2c
- rebase roles to latest upstream
cbac2c
  Resolves rhbz#1957876
cbac2c
- make postfix role idempotent
cbac2c
  Resolves rhbz#1960375
cbac2c
- use FQRN in postfix README
cbac2c
  Resolves rhbz#1958963
cbac2c
- use relayhost in postfix README
cbac2c
  Resolves rhbz#1866544
cbac2c
- use lazy unmount to fix umount: target is busy
cbac2c
  Resolves rhbz#1945359
cbac2c
- network - Add support for ETHTOOL Ring option
cbac2c
  Resolves rhbz#1959649
cbac2c
- storage: calltrace observed when set type: partition for storage_pools
cbac2c
  Resolves rhbz#1854187
cbac2c
- ha_cluster - cannot read preshared key in binary format
cbac2c
  Resolves rhbz#1952620
cbac2c
cbac2c
* Thu May 13 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.1.0-2
cbac2c
- Dependencies in the collection packaging
cbac2c
  Resolves rhbz#1954747
cbac2c
cbac2c
* Wed Apr 14 2021 Rich Megginson <rmeggins@redhat.com> - 1.1.0-1
cbac2c
- rebase timesync role to latest upstream
cbac2c
  Resolves rhbz#1937938
cbac2c
- timesync - add timesync_chrony_custom_settings variable for free-form
cbac2c
  local configs
cbac2c
  Resolves rhbz#1938023
cbac2c
- do not use ignore_errors in timesync role
cbac2c
  Resolves rhbz#1938014
cbac2c
- support for timesync_max_distance to configure maxdistance/maxdist parameter
cbac2c
  Resolves rhbz#1938016
cbac2c
- support for ntp xleave, filter, and hw timestamping
cbac2c
  Resolves rhbz#1938020
cbac2c
- rebase selinux role to latest upstream
cbac2c
  Resolves rhbz#1937938
cbac2c
- should not reload the SELinux policy if its not changed
cbac2c
  Resolves rhbz#1757869
cbac2c
- Ability to install custom SELinux module via Ansible
cbac2c
  Resolves rhbz#1848683
cbac2c
- rebase storage role to latest upstream
cbac2c
  Resolves rhbz#1937938
cbac2c
- rebase network role to latest upstream
cbac2c
  Resolves rhbz#1937938
cbac2c
- support for ipv6_disabled to disable ipv6 for address
cbac2c
  Resolves rhbz#1939711
cbac2c
- rebase postfix role to latest upstream
cbac2c
  Resolves rhbz#1937938
cbac2c
- rebase metrics role to latest upstream
cbac2c
  Resolves rhbz#1937938
cbac2c
- rebase sshd role to latest upstream
cbac2c
  Resolves rhbz#1937938
cbac2c
- rebase remaining roles to latest upstream
cbac2c
  Resolves rhbz#1937938
cbac2c
- Generate %%files dynamically
cbac2c
- add vpn role
cbac2c
  Resolves rhbz#1943679
cbac2c
cbac2c
* Tue Apr 13 2021 Noriko Hosoi <nhosoi@redhat.com> - 1.0.1-2
cbac2c
- Adding the -collection-artifact subpackage, enabled using
cbac2c
  "--with collection_artifact". It is used for importing to
cbac2c
  ansible galaxy/automation hub.
cbac2c
- README.html files (main README for the collection and README
cbac2c
  for each role) are not located in /usr/share/ansible/collections,
cbac2c
  but just put in /usr/share/doc/linux-system-roles/collection in rpm.
cbac2c
- The README.html files are not included in the collection artifact.
cbac2c
- Fixing "sshd role README.md examples use incorrect role name".
cbac2c
cbac2c
* Tue Apr  6 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.1-1
cbac2c
- Sync with RHEL version 1.0.1-1.el8
cbac2c
  Fix description field in galaxy.yml
cbac2c
  Remove "Technology Preview" from Collection README
cbac2c
  Merging individual ignore file and add it to the package
cbac2c
  Add a note to each module Doc to indicate it is private
cbac2c
  Add patches for network and storage role ansible-test fixes
cbac2c
  Simplify doc tags in %%files, corrects a forgotten doc tag for ha_cluster
cbac2c
  Suppress one ansible-lint warning in ha_cluster
cbac2c
  Add patch for the inclusive language leftover on network-role README.md
cbac2c
cbac2c
* Mon Feb 22 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-16
cbac2c
- Sync with RHEL version 1.0.0-31
cbac2c
  Rebase certificate role to pick up a test fix
cbac2c
  Rebase logging role to fix default private key path,
cbac2c
  upstream PR #218
cbac2c
  Update collection doc transformation to match a modified text
cbac2c
  and include the Tech Preview note again (for RHEL)
cbac2c
cbac2c
* Fri Feb 19 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-15
cbac2c
- Sync with RHEL version 1.0.0-29
cbac2c
  Added roles: ssh, ha_cluster
cbac2c
  Updated roles: certificate, kernel_settings, nbde_client,
cbac2c
  logging, network
cbac2c
  Improvements to collection build and metadata
cbac2c
- Two further improvements from RHEL:
cbac2c
  Corrected merge botch in files list - make ssh README a docfile
cbac2c
  Dynamically update galaxy.yml with our metadata even on Fedora,
cbac2c
  we can't rely on correct version number in auto-maintenance
cbac2c
cbac2c
* Tue Feb  9 2021 Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-14
cbac2c
- Synchronize with RHEL, new roles added:
cbac2c
  storage, metrics, tlog, kernel_settings, logging, nbde_server,
cbac2c
  nbde_client, certificate, crypto_policies, sshd, and the
cbac2c
  fedora.linux_system_roles collection.
cbac2c
cbac2c
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.0-13
cbac2c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
cbac2c
cbac2c
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.0-12
cbac2c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
cbac2c
cbac2c
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.0-11
cbac2c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
cbac2c
cbac2c
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.0-10
cbac2c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
cbac2c
cbac2c
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.0-9
cbac2c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
cbac2c
cbac2c
* Wed Dec 05 2018 Till Maas <opensource@till.name> - 1.0-8
cbac2c
- Install roles at /usr/share/linux-system-roles, use symlinks in
cbac2c
  /usr/share/ansible/roles/ to allow using alternatives
cbac2c
cbac2c
* Wed Nov 14 2018 Mike DePaulo <mikedep333@gmail.com> - 1.0-7
cbac2c
- spec file improvement: Remove unnecessary %%doc for files under _pkgdocdor
cbac2c
- Install license files under /usr/share/licenses instead of /usr/share/doc
cbac2c
cbac2c
* Tue Nov 06 2018 Mike DePaulo <mikedep333@gmail.com> - 1.0-7
cbac2c
- Fix rpm build for added example timesync example playbooks
cbac2c
- Misc spec file comments fixes
cbac2c
- Fix rpmlint error by escaping a previous changelog entry with a macro
cbac2c
- Comply with Fedora guidelines by always using "cp -p" in %%install
cbac2c
- Update %%description to be different for Fedora.
cbac2c
cbac2c
* Wed Oct 24 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.0-7
cbac2c
- Update to latest versions of selinux, kdump and timesync.
cbac2c
- Update to the latest revision of postfix, fixes README markup
cbac2c
- Add Obsoletes for the -techpreview subpackage introduced mistakenly in 1.0-1
cbac2c
- spec file improvement: Unify the source macros with deftag() and defcommit()
cbac2c
cbac2c
* Tue Oct 23 2018 Till Maas <opensource@till.name> - 1.0-6
cbac2c
- Update Network system role to latest commit to include Fedora 29 fixes
cbac2c
- Update example timesync example playbooks
cbac2c
- Add comments about upstream status
cbac2c
cbac2c
* Tue Aug 14 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.0-4
cbac2c
- Format the READMEs as html, by vdolezal, with changes to use highlight
cbac2c
  (source-highlight does not understand YAML)
cbac2c
cbac2c
* Thu Aug  9 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.0-3
cbac2c
- Rebase the network role to the last revision (d866422).
cbac2c
  Many improvements to tests, introduces autodetection of the current provider
cbac2c
  and defaults to using profile name as interface name.
cbac2c
- Rebase the selinux, timesync and kdump roles to their 1.0rc1 versions.
cbac2c
  Many changes to the role interfaces to make them more consistent
cbac2c
  and conforming to Ansible best practices.
cbac2c
- Update the description.
cbac2c
cbac2c
* Fri May 11 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-4
cbac2c
- Fix complaints about /usr/bin/python during RPM build by making the affected scripts non-exec
cbac2c
- Fix merge botch
cbac2c
cbac2c
* Mon Mar 19 2018 Troy Dawson <tdawson@redhat.com> - 0.6-3.1
cbac2c
- Use -a (after cd) instead of -b (before cd) in %%setup
cbac2c
cbac2c
* Wed Mar 14 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-3
cbac2c
- Minor corrections of the previous change by Till Maas.
cbac2c
cbac2c
* Fri Mar  9 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-2
cbac2c
- Document network role options: static routes, ethernet, dns
cbac2c
  Upstream PR#36, bz1550128, documents bz1487747 and bz1478576
cbac2c
cbac2c
* Tue Jan 30 2018 Pavel Cahyna <pcahyna@redhat.com> - 0.6-1
cbac2c
- Drop hard dependency on ansible (#1525655), patch from Yaakov Selkowitz
cbac2c
- Update the network role to version 0.4, solves bz#1487747, bz#1478576
cbac2c
cbac2c
* Tue Dec 19 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.5-3
cbac2c
- kdump: fix the wrong conditional for ssh checking and improve test (PR#10)
cbac2c
cbac2c
* Tue Nov 07 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.5-2
cbac2c
- kdump: add ssh support. upstream PR#9, rhbz1478707
cbac2c
cbac2c
* Tue Oct 03 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.5-1
cbac2c
- SELinux: fix policy reload when SELinux is disabled on CentOS/RHEL 6
cbac2c
  (bz#1493574)
cbac2c
- network: update to b856c7481bf5274d419f71fb62029ea0044b3ec1 :
cbac2c
  makes the network role idempotent (bz#1476053) and fixes manual
cbac2c
  network provider selection (bz#1485074).
cbac2c
cbac2c
* Mon Aug 28 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.4-1
cbac2c
- network: update to b9b6f0a7969e400d8d6ba0ac97f69593aa1e8fa5:
cbac2c
  ensure that state:absent followed by state:up works (bz#1478910), and change
cbac2c
  the example IP adresses to the IANA-assigned ones.
cbac2c
- SELinux: fix the case when SELinux is disabled (bz#1479546).
cbac2c
cbac2c
* Tue Aug 8 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.3-2
cbac2c
- We can't change directories to symlinks (rpm bug #447156) so keep the old
cbac2c
  names and create the new names as symlinks.
cbac2c
cbac2c
* Tue Aug 8 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.3-1
cbac2c
- Change the prefix to linux-system-roles., keeping compatibility
cbac2c
  symlinks.
cbac2c
- Update the network role to dace7654feb7b5629ded0734c598e087c2713265:
cbac2c
  adds InfiniBand support and other fixes.
cbac2c
- Drop a patch included upstream.
cbac2c
cbac2c
* Mon Jun 26 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.2-2
cbac2c
- Leave a copy of README and COPYING in every role's directory, as suggested by T. Bowling.
cbac2c
- Move the network example inventory to the documentation directory together.
cbac2c
  with the example playbooks and delete the now empty "examples" directory.
cbac2c
- Use proper reserved (by RFC 7042) MAC addresses in the network examples.
cbac2c
cbac2c
* Tue Jun 6 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.2-1
cbac2c
- Update the networking role to version 0.2 (#1459203)
cbac2c
- Version every role and the package separately. They live in separate repos
cbac2c
  and upstream release tags are not coordinated.
cbac2c
cbac2c
* Mon May 22 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.1-2
cbac2c
- Prefix the roles in examples and documentation with rhel-system-roles.
cbac2c
cbac2c
* Thu May 18 2017 Pavel Cahyna <pcahyna@redhat.com> - 0.1-1
cbac2c
- Update to 0.1 (first upstream release).
cbac2c
- Remove the tuned role, it is not ready yet.
cbac2c
- Move the example playbooks to /usr/share/doc/rhel-system-roles/$SUBSYSTEM
cbac2c
  directly to get rid of an extra directory.
cbac2c
- Depend on ansible.
cbac2c
cbac2c
* Thu May 4 2017  Pavel Cahyna <pcahyna@redhat.com> - 0-0.1.20170504
cbac2c
- Initial release.
cbac2c
- kdump r. fe8bb81966b60fa8979f3816a12b0c7120d71140
cbac2c
- postfix r. 43eec5668425d295dce3801216c19b1916df1f9b
cbac2c
- selinux r. 1e4a21f929455e5e76dda0b12867abaa63795ae7
cbac2c
- timesync r. 33a1a8c349de10d6281ed83d4c791e9177d7a141
cbac2c
- tuned r. 2e8bb068b9815bc84287e9b6dc6177295ffdf38b
cbac2c
- network r. 03ff040df78a14409a0d89eba1235b8f3e50a750
cbac2c