diff --git a/.gitignore b/.gitignore index 6ec4a27..26b41b4 100644 --- a/.gitignore +++ b/.gitignore @@ -1,23 +1,23 @@ -SOURCES/ansible-posix-1.3.0.tar.gz -SOURCES/ansible-sshd-214df35c0bee77b5d69f49c2da269251d451b28f.tar.gz -SOURCES/auto-maintenance-5e7bb389fc5e93184871b3907e75ba896874dc21.tar.gz -SOURCES/certificate-1.1.3.tar.gz -SOURCES/cockpit-1.2.1.tar.gz -SOURCES/community-general-4.6.0.tar.gz -SOURCES/crypto_policies-1.2.3.tar.gz -SOURCES/firewall-1.1.0.tar.gz -SOURCES/ha_cluster-1.4.1.tar.gz -SOURCES/kdump-1.2.2.tar.gz -SOURCES/kernel_settings-1.1.6.tar.gz -SOURCES/logging-1.8.1.tar.gz -SOURCES/metrics-1.5.1.tar.gz -SOURCES/nbde_client-1.2.2.tar.gz -SOURCES/nbde_server-1.1.2.tar.gz -SOURCES/network-1.7.1.tar.gz -SOURCES/postfix-1.2.0.tar.gz -SOURCES/selinux-1.3.4.tar.gz -SOURCES/ssh-1.1.4.tar.gz -SOURCES/storage-1.7.0.tar.gz -SOURCES/timesync-1.6.6.tar.gz -SOURCES/tlog-1.2.5.tar.gz -SOURCES/vpn-1.3.2.tar.gz +SOURCES/ansible-posix-1.4.0.tar.gz +SOURCES/ansible-sshd-v0.15.0.tar.gz +SOURCES/auto-maintenance-ff651c10be686d55e26b17f1a0e99e248a1acd63.tar.gz +SOURCES/certificate-1.1.5.tar.gz +SOURCES/cockpit-1.2.4.tar.gz +SOURCES/community-general-5.0.0.tar.gz +SOURCES/crypto_policies-1.2.5.tar.gz +SOURCES/firewall-1.2.1.tar.gz +SOURCES/ha_cluster-1.7.1.tar.gz +SOURCES/kdump-1.2.4.tar.gz +SOURCES/kernel_settings-1.1.8.tar.gz +SOURCES/logging-1.9.2.tar.gz +SOURCES/metrics-1.7.2.tar.gz +SOURCES/nbde_client-1.2.4.tar.gz +SOURCES/nbde_server-1.1.4.tar.gz +SOURCES/network-1.8.0.tar.gz +SOURCES/postfix-1.2.3.tar.gz +SOURCES/selinux-1.3.6.tar.gz +SOURCES/ssh-1.1.6.tar.gz +SOURCES/storage-1.7.3.tar.gz +SOURCES/timesync-1.6.8.tar.gz +SOURCES/tlog-1.2.8.tar.gz +SOURCES/vpn-1.3.4.tar.gz diff --git a/.rhel-system-roles.metadata b/.rhel-system-roles.metadata index 265b0e5..f0ae3c0 100644 --- a/.rhel-system-roles.metadata +++ b/.rhel-system-roles.metadata @@ -1,23 +1,23 @@ -d2d2382c38eaf34d2295aba2aa4652d75ebbaeef SOURCES/ansible-posix-1.3.0.tar.gz -a4d4556cf6628e87fa62dec6c46099338b499930 SOURCES/ansible-sshd-214df35c0bee77b5d69f49c2da269251d451b28f.tar.gz -a2ec14498a7fd213f08dd24ca139039c958b07fd SOURCES/auto-maintenance-5e7bb389fc5e93184871b3907e75ba896874dc21.tar.gz -cee41b5fd6359e9ddeb83c5af7b8057fef6b2334 SOURCES/certificate-1.1.3.tar.gz -004064268df0e7dd154331b7799272d3277388d4 SOURCES/cockpit-1.2.1.tar.gz -ad8684050c86bad7ce4882a84e14be6867a56d8d SOURCES/community-general-4.6.0.tar.gz -0684c1335923ba8ebbb05afbd507e5ff31f874d6 SOURCES/crypto_policies-1.2.3.tar.gz -fcb8d48ccaeba886859ce6afd3d14bbb3f8a5667 SOURCES/firewall-1.1.0.tar.gz -9a990a4908bdf3269bce4f214907623780a5e221 SOURCES/ha_cluster-1.4.1.tar.gz -a1c9c89dea1dbe2410465c29ad0e1d3637ac5f52 SOURCES/kdump-1.2.2.tar.gz -0a681d1e3b236c4750d663f2a833e786a5e958ab SOURCES/kernel_settings-1.1.6.tar.gz -e530528ba5f9478cc8604aa6612388ea8e5078af SOURCES/logging-1.8.1.tar.gz -430ce63a7b45b97305e4f8591192fa7e58af8292 SOURCES/metrics-1.5.1.tar.gz -0424321322eb4d80560a8d2d9fee406296728463 SOURCES/nbde_client-1.2.2.tar.gz -33f0a3ea008021e69b2bbd7b25f6536f91e7613d SOURCES/nbde_server-1.1.2.tar.gz -dcd2261fe6b6a998aca3eb6c968204152e2ffd51 SOURCES/network-1.7.1.tar.gz -95c54da9ef5acaae9553f2c4ed250452502ab9e0 SOURCES/postfix-1.2.0.tar.gz -4e5c5216814577ee55304721e5c811ed8857efbc SOURCES/selinux-1.3.4.tar.gz -f38972c4b22a9f226b58725c7e9ba8fac692bba2 SOURCES/ssh-1.1.4.tar.gz -0728b4e01261f84ce470431a4ea21907db75f26a SOURCES/storage-1.7.0.tar.gz -0bd118c9df9bf556a76d42c92bde11fde5553eba SOURCES/timesync-1.6.6.tar.gz -17e6f3d437d161143c87b6709a42a3eff6ef7df0 SOURCES/tlog-1.2.5.tar.gz -d1bb00636c04bc1b2d94ce0e491afe9ef921cd56 SOURCES/vpn-1.3.2.tar.gz +bca451fd997be80be30f106e49f1bf550d2e609c SOURCES/ansible-posix-1.4.0.tar.gz +ad935717c8cf4d9bffef887a85b007a044440984 SOURCES/ansible-sshd-v0.15.0.tar.gz +1230ac2759a18bc3d9d38ac40c7b06fde77810e8 SOURCES/auto-maintenance-ff651c10be686d55e26b17f1a0e99e248a1acd63.tar.gz +895112fcf822d2a02977b73ca61475c69df40cca SOURCES/certificate-1.1.5.tar.gz +374fb0bdcbff10af818e15940b922d8201d74e5f SOURCES/cockpit-1.2.4.tar.gz +a9cf6962e902528150b522d43c82aab53b1668ec SOURCES/community-general-5.0.0.tar.gz +cc5f783235573d889a263d3652a860a7619aa7b5 SOURCES/crypto_policies-1.2.5.tar.gz +c1ad97cb7c7eb313a68c99bcb38ee06ec1443c12 SOURCES/firewall-1.2.1.tar.gz +7faa0e33f707a058bf99031279e5a36e341be47e SOURCES/ha_cluster-1.7.1.tar.gz +9bd0a6c8ee7c2943d3a70abd9ecd3a8e18708de8 SOURCES/kdump-1.2.4.tar.gz +c722cb509cf36840d58b5bed343765d7c8abfb28 SOURCES/kernel_settings-1.1.8.tar.gz +1a2acec9d33c8c6d40fe83309f00838c914ccea0 SOURCES/logging-1.9.2.tar.gz +93f39c3fef40b19d969b88b21005622bd3ebb048 SOURCES/metrics-1.7.2.tar.gz +9d80be6410ee7a670ae880632d2ddec42609b330 SOURCES/nbde_client-1.2.4.tar.gz +519835cdd04e0b839f3f28fe52c494f6c0a7ec34 SOURCES/nbde_server-1.1.4.tar.gz +28fb6d6a21a2dbc120dc97cb368a3630e1655258 SOURCES/network-1.8.0.tar.gz +7943c9d929c7f98d313860960da94e2f3935367f SOURCES/postfix-1.2.3.tar.gz +1b3986419c69fffd05d2f8519104605cf67dd3d3 SOURCES/selinux-1.3.6.tar.gz +806857478276467222ad5c68a5677297b849493b SOURCES/ssh-1.1.6.tar.gz +8654836eed3affb67021ddd2ea4ca8665edd0f19 SOURCES/storage-1.7.3.tar.gz +0d2a08c18f70a710331d07ab1234236033191332 SOURCES/timesync-1.6.8.tar.gz +c1ec897df46df828830ae969f683f6f9f90ebe0e SOURCES/tlog-1.2.8.tar.gz +63633c5ae6a62fef7fe9d7eb631403e2569a23e5 SOURCES/vpn-1.3.4.tar.gz diff --git a/SPECS/rhel-system-roles.spec b/SPECS/rhel-system-roles.spec index 7ae6c5d..b6b9063 100644 --- a/SPECS/rhel-system-roles.spec +++ b/SPECS/rhel-system-roles.spec @@ -30,7 +30,7 @@ Name: linux-system-roles %endif Url: https://github.com/linux-system-roles Summary: Set of interfaces for unified system management -Version: 1.16.2 +Version: 1.18.0 Release: 1%{?dist} #Group: Development/Libraries @@ -127,85 +127,85 @@ BuildRequires: %{ansible_build_dep} #%%defcommit 1 14314822b529520ac12964e0d2938c4bb18ab895 %global rolename1 postfix -%deftag 1 1.2.0 +%deftag 1 1.2.3 #%%defcommit 2 9fe6eb36772e83b53dcfb8ceb73608fd4f72eeda %global rolename2 selinux -%deftag 2 1.3.4 +%deftag 2 1.3.6 #%%defcommit 3 cbe4bf262bffae3bf53e531662237741954c4182 %global rolename3 timesync -%deftag 3 1.6.6 +%deftag 3 1.6.8 #%%defcommit 4 02fc72b482e165472624b2f68eecd2ddce1d93b1 %global rolename4 kdump -%deftag 4 1.2.2 +%deftag 4 1.2.4 -#%%defcommit 5 61423ed36fc6da6dbe8321912e896c59a2d8e2f6 +#%%defcommit 5 bf6215dab8357722ccc6052b27c2b029287ed5e6 %global rolename5 network -%deftag 5 1.7.1 +%deftag 5 1.8.0 #%%defcommit 6 50d2b8ccc98a8f4cb9d1d550d21adc227181e9fa %global rolename6 storage -%deftag 6 1.7.0 +%deftag 6 1.7.3 #%%defcommit 7 d57caa8ca506d8cbc7ca0f96f7cb62b7e965f163 %global rolename7 metrics -%deftag 7 1.5.1 +%deftag 7 1.7.2 #%%defcommit 8 2b9e53233ee3a68bdb532e62f289733e436a6106 %global rolename8 tlog -%deftag 8 1.2.5 +%deftag 8 1.2.8 #%%defcommit 9 9373303b98e09ef38df7afc8d06e5e55812096c7 %global rolename9 kernel_settings -%deftag 9 1.1.6 +%deftag 9 1.1.8 #%%defcommit 10 20dd3e5520ca06dcccaa9b3f1fb428d055e0c23f %global rolename10 logging -%deftag 10 1.8.1 +%deftag 10 1.9.2 #%%defcommit 11 c57d0b1f3384c525738fa26ba4bdca485e162567 %global rolename11 nbde_server -%deftag 11 1.1.2 +%deftag 11 1.1.4 #%%defcommit 12 bef2fad5e365712d1f40e53662490ba2550a253f %global rolename12 nbde_client -%deftag 12 1.2.2 +%deftag 12 1.2.4 #%%defcommit 13 310fc53db04e8d3134524afb7a89b0477a2ffb83 %global rolename13 certificate -%deftag 13 1.1.3 +%deftag 13 1.1.5 #%%defcommit 14 b2a9857ac661fa32e66666e444b73bfdb34cdf95 %global rolename14 crypto_policies -%deftag 14 1.2.3 +%deftag 14 1.2.5 %global forgeorg15 https://github.com/willshersystems %global repo15 ansible-sshd %global rolename15 sshd -%defcommit 15 214df35c0bee77b5d69f49c2da269251d451b28f -#%%deftag 15 v0.14.1 +#%%defcommit 15 2ba5bfee852aec5f699bf1c53193f7935beed825 +%deftag 15 v0.15.0 #%%defcommit 16 59b9fd7b25607d8bd33bdb082748955f2652846a %global rolename16 ssh -%deftag 16 1.1.4 +%deftag 16 1.1.6 #%%defcommit 17 f901239cb91878719c9e7461760ef8d4789d626d %global rolename17 ha_cluster -%deftag 17 1.4.1 +%deftag 17 1.7.1 #%%defcommit 18 5f6cb73e6753fbdbb219b7d3079f0378b2d3bdb3 %global rolename18 vpn -%deftag 18 1.3.2 +%deftag 18 1.3.4 %global rolename19 firewall -%deftag 19 1.1.0 +%deftag 19 1.2.1 %global rolename20 cockpit -%deftag 20 1.2.1 +%deftag 20 1.2.4 -%global mainid 5e7bb389fc5e93184871b3907e75ba896874dc21 +%global mainid ff651c10be686d55e26b17f1a0e99e248a1acd63 Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar.gz Source1: %{archiveurl1} Source2: %{archiveurl2} @@ -230,11 +230,11 @@ Source20: %{archiveurl20} # Collection tarballs from Automation Hub # Not used on Fedora. -Source801: ansible-posix-1.3.0.tar.gz +Source801: ansible-posix-1.4.0.tar.gz # Collection tarballs from Galaxy # Not used on Fedora. -Source901: community-general-4.6.0.tar.gz +Source901: community-general-5.0.0.tar.gz # Script to convert the collection README to Automation Hub. # Not used on Fedora. @@ -334,8 +334,11 @@ cd %{rolename5} %patch51 -p1 cd .. cd %{rolename15} -sed -r -i -e "s/ansible-sshd/linux-system-roles.sshd/" tests/*.yml examples/*.yml -sed -r -i -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" tests/*.yml examples/*.yml README.md +find -P tests examples -name \*.yml | while read file; do + sed -r -i -e "s/ansible-sshd/linux-system-roles.sshd/" \ + -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" "$file" +done +sed -r -i -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" README.md sed -r -i -e "s/min_ansible_version: 2.8/min_ansible_version: 2.9/" meta/main.yml cd .. @@ -391,7 +394,15 @@ for module in "${!module_map[@]}"; do if [ ! -d $role/library ]; then mkdir $role/library fi - cp -pL .external/community/general/plugins/modules/$module $role/library/$module + # version 5.0.0 seems to be broken? + moduledir=.external/community/general/plugins/modules + if [ ! -f $moduledir/$module ]; then + moduledir=.external/community/general/plugins/modules/system + fi + if [ ! -f $moduledir/$module ]; then + moduledir=.external/community/general/plugins/modules/files + fi + cp -pL $moduledir/$module $role/library/$module ls -alrtF $role/library/$module sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' $role/library/$module done @@ -710,13 +721,120 @@ fi %endif %changelog -* Tue Mar 29 2022 Rich Megginson - 1.16.2-1 +* Thu May 26 2022 Rich Megginson - 1.18.0-1 +- firewall - [Improvement] Allow System Role to reset to default Firewalld Settings + Resolves: rhbz#2043009 (8.7.0) + +- metrics - [RFE] add an option to the metrics role to enable postfix metric collection + Resolves: rhbz#2079114 (8.7.0) + +- network - Rework the infiniband support + Resolves: rhbz#2086869 (8.7.0) + +- sshd - recurse into tests and examples sub-directories when replacing string in files + the sshd role latest version added sub-directories under tests that need + role name replacement - so just use find + +- sshd - sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has "Include > /etc/ssh/sshd_config.d/*.conf" + Resolves: rhbz#2086934 (8.7.0) + +- sshd - sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL 9 + Resolves: rhbz#2086935 (8.7.0) + +- storage - storage role cannot set mount_options for volumes + Resolves: rhbz#2083378 (8.7.0) + +* Mon Apr 25 2022 Rich Megginson - 1.17.0-1 +- All roles should support running with gather_facts: false + Resolves: rhbz#2079008 (8.7.0) + +- firewall - Firewall system role Ansible deprecation warning related to "include" + Resolves: rhbz#2078650 (8.7.0) + +- ha_cluster - ha_cluster - support advanced corosync configuration + Resolves: rhbz#2065339 (8.7.0) + +- ha_cluster - ha_cluster - support SBD fencing + Resolves: rhbz#2066868 (8.7.0) + +- ha_cluster - ha_cluster - add support for configuring bundle resources + Resolves: rhbz#2073518 (8.7.0) + +- kernel_settings - kernel_settings error configobj not found on RHEL 8.6 managed hosts + Resolves: rhbz#2060378 (8.7.0) + +- logging - logging tests fail during cleanup if no cloud-init on system + Resolves: rhbz#2058807 (8.7.0) + +- logging - Logging - RFE - support template, severity and facility options + Resolves: rhbz#2075116 (8.7.0) + +- metrics - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run + Resolves: rhbz#2060377 (8.7.0) + +- metrics - metrics - consistently use ansible_managed in configuration files managed by role + Resolves: rhbz#2065215 (8.7.0) + +- metrics - [RFE] add an option to the metrics role to enable postfix metric collection + Resolves: rhbz#2079114 (8.7.0) + +- nbde_client - NBDE client system role does not support servers with static IP addresses + Resolves: rhbz#2071011 (8.7.0) + +- network - [RFE] Extend rhel-system-roles.network feature set to support routing rules + Resolves: rhbz#1996731 (8.7.0) + +- network - bond: fix typo in supporting the infiniband ports in active-backup mode + Resolves: rhbz#2064067 (8.7.0) + +- network - pytest failed when running with nm providers in the rhel-8.5 beaker machine + Resolves: rhbz#2065217 (8.7.0) + +- network - network - consistently use ansible_managed in configuration files managed by role + Resolves: rhbz#2065670 (8.7.0) + +- postfix - postfix - consistently use ansible_managed in configuration files managed by role + Resolves: rhbz#2065216 (8.7.0) + +- postfix - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default + Resolves: rhbz#2065218 (8.7.0) + +- sshd - FIPS mode detection in SSHD role is wrong + Resolves: rhbz#2075338 (8.7.0) + +- storage - RFE storage Less verbosity by default + Resolves: rhbz#2056480 (8.7.0) + +- timesync - timesync: basic-smoke test failure in timesync/tests_ntp.yml + Resolves: rhbz#2060379 (8.7.0) + +- tlog - Tlog role - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default + Resolves: rhbz#2072749 (8.7.0) + +* Thu Apr 07 2022 Rich Megginson - 1.16.3-1 +- tlog - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default + Resolves rhbz#2072749 (EL8) + Resolves rhbz#2071804 (EL9) + +* Wed Apr 06 2022 Sergei Petrosian - 1.16.2-2 +- Update community.general + +* Thu Mar 31 2022 Rich Megginson - 1.16.2-1 +- nbde_client - NBDE client system role does not support servers with static IP addresses + previous fix did not handle some other cases + Resolves rhbz#1985022 (EL8) + Resolves rhbz#2031555 (EL9) + +* Tue Mar 29 2022 Rich Megginson - 1.16.1-1 - nbde_client - NBDE client system role does not support servers with static IP addresses previous fix did not handle some cases Resolves rhbz#1985022 (EL8) Resolves rhbz#2031555 (EL9) -* Fri Mar 18 2022 Rich Megginson - 1.16.1-1 +* Tue Mar 22 2022 Sergei Petrosian - 1.16.0-2 +- Update community.general + +* Tue Mar 15 2022 Rich Megginson - 1.16.0-1 - network - pytest failed when running with nm providers in the rhel-8.5 beaker machine Resolves rhbz#2064396 (EL8) Resolves rhbz#2064401 (EL9) @@ -726,15 +844,6 @@ fi - network - consistently use ansible_managed in configuration files managed by role Resolves rhbz#2057656 (EL8) Resolves rhbz#2057657 (EL9) - -* Thu Mar 17 2022 Rich Megginson - 1.16.0-3 -- remove unneeded metrics patch due to rebase - -* Thu Mar 17 2022 Rich Megginson - 1.16.0-2 -- remove unneeded metrics patch due to rebase -- fix bogus date in changelog - -* Tue Mar 15 2022 Rich Megginson - 1.16.0-1 - metrics - consistently use ansible_managed in configuration files managed by role Resolves rhbz#2057645 (EL8) Resolves rhbz#2057647 (EL9) @@ -759,7 +868,7 @@ fi Resolves rhbz#2058655 (EL8) Resolves rhbz#2058777 (EL9) -* Tue Feb 22 2022 Rich Megginson - 1.15.0-1 +* Thu Feb 24 2022 Rich Megginson - 1.15.0-1 - firewall - ensure target changes take effect immediately Resolves rhbz#2057172 (EL8) Resolves rhbz#2057164 (EL9)