Release notes for SUSE Manager 3 Server
Version 3.0.12
Friday May 18, 2018
This SUSE product includes materials licensed to SUSE under the GNU General Public License (GPL). The GPL requires that SUSE makes available certain source code that corresponds to the GPL-licensed material. The source code is available for download at http://www.suse.com/download-linux/source-code.html.
Also, for up to three years from SUSE's distribution of the SUSE product, upon request SUSE will mail a copy of the source code. Requests should be sent by e-mail to sle_source_request@suse.com or as otherwise instructed at http://www.suse.com/download-linux/source-code.html.
SUSE may charge a fee to recover its reasonable costs of distribution.
Version Revision History
- Oct 14, 2015: Initial release
- Dec 21, 2015: Beta 1
- Jan 29, 2016: Beta 2
- Mar 11, 2016: RC 1
- Mar 23, 2016: RC 2
- Apr 5, 2016: GM
- Jul 4, 2016: Patches
- Aug 15, 2016: Patches, Bootstrap UI, Oracle backend
- Oct 22, 2016: v3.0.1
- Nov 25, 2016: v3.0.2
- Jan 17, 2017: v3.0.3
- Feb 3, 2017: SLES 12 SP2 enablement
- Mar 8, 2017: v3.0.4, clarify external db as unsupported
- May 18, 2017: v3.0.5
- Jun 21, 2017: v3.0.6
- Jul 17, 2017: v3.0.7
- Sep 13, 2017: v3.0.8
- Nov 9, 2017: v3.0.9
- Jan 30, 2018: v3.0.10
- March 16, 2018: v3.0.11
- June 2018: v3.0.12
About SUSE Manager
You have more than just a few Linux servers to manage, maybe even a mixed environment of RHEL and SLES?
Then SUSE Manager is the answer.
SUSE Manager gives you best of breed Linux lifecycle management based on the most mature codebase for any Linux management tool, with both RHEL and SLES support from one unified console, maintained and improved by the guys who wrote the fastest and most advanced Linux update stack on the planet.
SUSE Manager gives you the lowest possible Total Cost of Ownership for your Linux environment, from bare metal provisioning to daily patch management.
SUSE Manager is an open source (GPLv2) Linux systems management solution that allows you to:
- Inventory your systems (hardware and software information)
- Install and update software on your systems
- Collect and distribute your custom software packages into manageable groups
- Provision (AutoYaST / Kickstart) your systems
- Enterprise-grade configuration management with Salt from SaltStack
- Match subscriptions to products installed on your servers
- Provision and start/stop/configure virtual guests
- Distribute content across multiple geographical sites in an efficient manner
- Track compliance of managed systems with OpenSCAP
Stay up-to-date
You can stay up-to-date regarding information about SUSE Manager and SUSE products:
Installation
Requirements and registration code
SUSE Manager 3 Server is an extension for SLES 12 SP3 x86_64 or s390x.
This means that, unlike SUSE Manager 2.1 Server, installation is done
in two steps
- base operating system (SLES 12 SP3)
- SUSE Manager 3 Server extension
This addresses the need of enterprise deployments to standardize on
the base operating system as well as specific storage setups.
Attention Your SUSE Manager Server registration code is valid for the
base operating system as well as the SUSE Manager 3 extension.
Installing the SUSE Manager 3 Server extension on SLES 12 SP3
You'll need a physical or virtual SLES 12 SP3 x86_64 or s390x system to install
SUSE Manager 3.
When you install and register SLES 12 SP3, SUSE Manager 3 Server will
show up in the list of available extensions.
You'll need a SUSE Manager Server registration code to access this
extension.
Update from previous versions of SUSE Manager Server
In-place updates from previous versions of SUSE Manager Server are not supported.
Upgrade from SUSE Manager 2.1 Server to SUSE Manager 3 Server is done
by choosing the 2.1 Server as a migration source when running ``yast2
susemanager_setup``
See this wiki page for a
detailed description of the required steps.
All connected clients will continue to run and are manageable unchanged.
Note that the SUSE Manager 2.1 Server needs to have PostgreSQL as its database.
Update from SUSE Manager 2.1 with Oracle Database
Data migration from SUSE Manager 2.1 with Oracle Database is not possible.
You need to first migrate from Oracle to PostgreSQL database
as outlined in the SUSE Manager 2.1 Server documentation.
Migrating from RHN Satellite 5
Is conditionally supported with SUSE Manager 3 Server.
If you have the need to migrate from RHN Satellite 5 to SUSE Manager 3,
please get in contact with a SUSE sales engineer or a SUSE consultant before starting the migration.
Using an external database
It's strictly recommended to use the database embedded with the
product. Deviating from this recommendation is not generally
supportable.
Major changes since SUSE Manager Server 3 GA
Features and changes
Version 3.0.12
Bugfix release.
Update to Salt 'Oxygen' 2018.3.0
Salt is updated to the 'Oxygen' release, versioned as 2018.3.0.
This brings many changes and improvements all over the place, most
notably in Python 3 support, Unicode, and Docker.
See the Salt Oxygen
and Salt Nitrogen
release notes for a full description of changes since SUSE Manager's previous Salt
version.
Salt on SLE 11 and RHEL 5
Salt deprecated Python 2.6
with the release of Salt Nitrogen in 2017.
Client systems with Python 2.6, like SLE 11 or RHEL 5, will therefore
NOT get Salt upgrades and stay with their current Salt version.
Python 3 subpackages
In order to support SLE 15 clients with salt-ssh, Python 3
compatibility packages are added in this update.
This enables salt-ssh to use Python 3 code when running on SLE 15
clients, which have Python 3 as their main Python version.
spacecmd updates
spacecmd now has a new command: softwarechannel_update
(Update a software channel)
The spacecmd functions softwarechannel_create
, softwarechannel_clone
,
and softwarechannel_tree
now have a new parameter -g DISABLE-GPG-CHECK
.
See 'spacecmd reference' in the advanced topics manual for details.
New products supported
Version 3.0.11
Bugfix release.
Version 3.0.10
Bugfix release.
Database cleanup migration
After several reports about duplicate package ids in the database, a
cleanup task was introduced in spacewalk-schema-upgrade
to repair such cases.
Warning In case your database is corrupted with duplicate package
ids, this cleanup task can take hours to complete. Runtimes of 4-5
hours are normal.
Here is how to check for duplicate package ids
echo "select min(id) as id \
from rhnpackageevr \
group by version, release, epoch \
having count(*) > 1;" \
| spacewalk-sql --select-mode-direct -
echo "select min(id) as id \
from rhnPackageCapability \
group by name, version \
having count(*) > 1;"\
| spacewalk-sql --select-mode-direct -
These read-only checks can be run during normal operation of SUSE
Manager. Just running the checks can take a long time (up to 1hr in
some of our test scenarios. YMMV).
If any of these queries returns a non-empty result, it can be stopped
immediately. Your database has duplicate package ids in this case
and the next run of spacewalk-schema-upgrade
will take hours.
Take this under consideration before starting the upgrade to SUSE
Manager 3.0.10.
Check for duplicate minion ids
With this update we introduce a unique constraint on minion_id
in
the database.
When multiple systems exists already with the same minion_id
, the
schema migration will fail.
There will be a list of the duplicates in the schema migration log.
In this case, duplicate minion_id
need a manual cleanup:
- start spacewalk-service
- remove the duplicate machines
- stop spacewalk-service
- finish the schema migration
New products supported
- Open Enterprise Server (OES) 2018
- Container as a Service (CaaS)
- IBM DLPAR for SLES for SAP
- SLE-RT 12 SP3
- SLE12 LTSS as extension to SLES for SAP 12
Dropped products
- Certification Module 12 from SP2 and SP3
Version 3.0.9
PostgreSQL 9.6 support
A new version of the PostgreSQL database is available in SLES 12 SP2
and can be used for SUSE Manager 3.0 Server.
New installations of SUSE Manager 3.0 Server based on SLES 12 SP3 will
automatically pick up this version.
Migrating from PostgreSQL 9.4 to PostgreSQL 9.6
Note: SUSE Manager 3.0 Server must NOT be migrated to SLES 12 SP3 before
migrating PostgreSQL to version 9.6.
The migration needs PostgreSQL 9.4 and 9.6 installed in parallel and
PostgreSQL 9.4 is only available in SLES 12 SP2
You should have an up-to-date database backup before attempting the
migration.
Existing installations of SUSE Manager 3.0 Server will need to run
/usr/lib/susemanager/bin/pg-migrate.sh
to migrate from PostgreSQL 9.4 to PostgreSQL 9.6
Your SUSE Manager Server installation will not be accessible during
the migration.
Migration will create a copy of the database under /var/lib/pgsql
and thus needs sufficient disk
space to hold two copies (9.4 and 9.6) of the database.
Since it does a full copy of the database, it also needs considerable
time depending on the size of the database and the IO speed of the
storage.
If your system is scarce on disk space you can do an fast, in-place
migration by running
/usr/lib/susemanager/bin/pg-migrate.sh fast
The fast migration usually only takes minutes and no additional disk
space. However, in case of failure you need to restore the database
from a backup.
This wiki page
contains additional information about the migration.
SUSE Manager Server enabled for SLES 12 SP3
SUSE Manager 3.0 is now based on SLES 12 SP3.
If you already have a SUSE Manager 3.0 Server or Proxy deployed, you can
now initiate a service pack migration as outlined in the SLES documentation.
Please migrate to PostgreSQL 9.6 as outlined above before starting the
service pack migration.
If you deploy a new SUSE Manager 3.0 Server or Proxy, please start with
SLES 12 SP3 as the base operating system.
Release notes and documentation have been adapted to reflect this.
Version 3.0.8
Bugfix release.
Change of jabberd database
jabberd now uses sqlite
in place of the berkeley db
database to
improve stability and performance. sqlite
is the preferred database
option for jabberd.
Fresh installations of SUSE Manager 3.0 Server will use sqlite
by
default.
Existing installation need to manually switch to this database as
follows
# systemctl stop jabberd
# sed -i.bak "s#<driver>db</driver>#<driver>sqlite</driver>#g" /etc/jabberd/sm.xml
# sed -i.bak "s#<module>db</module>#<module>sqlite</module>#g" /etc/jabberd/c2s.xml
# systemctl start jabberd
Note: Running spacewalk-setup-jabberd
is not recommended as it
will reset the jabberd password, breaking existing installations.
jabberd removal and recreation
Notice that the sqlite variant of the jabberd database does not get
re-created automatically.
The workaround for corruptions of the old
database - regular removal - does not apply anymore.
In case you erroneously deleted the sqlite database, jabberd will not
be able to re-create it.
You need to run
/usr/share/spacewalk/setup/jabberd/create_sqlite3_database
to create the database schema and restart jabberd.
New products supported
- SUSE LINUX Enterprise Server 12 SP3
- SUSE LINUX Enterprise Desktop 12 SP3
- SUSE Enterprise Storage 5
- SUSE LINUX Enterprise Server 12 SP3 SAP Applications on ppc64le
- SUSE OpenStack Cloud Continuous Delivery 6
Version 3.0.7
Bugfix release.
Version 3.0.6
Bugfix release.
New products supported
Version 3.0.5
Security fix
This release contains a security fix (CVE-2017-7470) for
spacewalk-backend
where non admin or disabled user could make
changes to a system using spacewalk-channel.
new package: locale-formula
This enables configuration of locale-related settings across many
salt-management clients (minions) via a user-friendly UI.
UEFI PXE boot
PXE boot should now support UEFI systems. However, our experience
shows that UEFI BIOS implementation still vary a lot. So this feature
might not work for some systems.
To get this supported across more systems, we need your feedback.
New products supported
- Cloud 7 - Magnum Orchestration
Version 3.0.4
SUSE Manager Server enabled for SLES 12 SP2
With the release of the SUSE Manager product definition 188 patch,
SUSE Manager 3 is now based on SLES 12 SP2.
If you already have a SUSE Manager 3 Server or Proxy deployed, you can
now initiate a service pack migration as outlined in the SLES documentation.
If you deploy a SUSE Manager 3 Server or Proxy anew, please start with
SLES 12 SP2 as the base operating system. Release notes and
documentation have been adapted to reflect this.
Websocket enablement
Sending remote commands to Salt minions could block the web UI. This
was fixed by introducing websocket-based communication for the remote
command UI.
If you are connecting from your browser to SUSE Manager Server UI via
a http proxy, please enable websocket forwarding on the http proxy.
New products supported
- SUSE Package Hub
- SLES 12 for SAP on ppc64le
Version 3.0.3
Update of Salt to 2015.8.12
Salt is now at version 2015.8.12 and also available for SLES 12 via
the advanced systems management module.
Please take care to update Salt first, before applying any other SUSE
Manager updates.
'Live patching' support
Live patching is now
fully supported in SUSE Manager.
You can view and apply live patches to applicable systems. Please see
the best practices guide for full documentation.
SSH push for Salt
SSH push is now available for Salt minions. This allows connections
initiated by the SUSE Manager Server as well as agentless clients.
See the best practices guide for full documentation.
Add Raspberry Pi channels
A Raspberry Pi running SLES 12 SP2 or later can now be managed by SUSE Manager.
Please note that this combination is self-supported.
New products supported
- SLE-POS 12 SP2
- SUSE Enterprise Storage 4
- SUSE OpenStack Cloud 7
- SLE-RT 12 SP2
Version 3.0.2
Support Service Pack migration for Salt minions
Service pack migration is now enabled for Salt minions.
python-pyinotify available in Tools channel
python-pyinotify
, a Python module for watching filesystems changes has
been added to the SUSE Manager Tools 12 Module.
This module can be used when setting up Beacons on Salt minions. For
more details see (Salt beacons)
SLES 12 SP2 for ARM 64bit
The SUSE Manager Tools channel is now available for for aarch64 (bsc#1002776)
Version 3.0.1
Changed versioning scheme
SUSE Manager 3 now has a <major>.<minor>.<micro> version number and will be referenced
as SUSE Manager 3.0.
Every patch release adding features will increase the <micro> version
numnber. This version number will also be displayed in the footer of
the web UI.
New products supported
Salt minions via SUSE Manager Proxy
SUSE Manager Proxy now supports clients managed by Salt, aka salt
minions. See the SUSE Manager Proxy release notes for details.
Salt on Expanded Support Platform
Salt on clients running SUSE Linux Enterprise Server with Expanded Support or RHEL.
Only versions 6 and 7 are supported. Version 5's Python version is too
old to run Salt.
Note: When installing patches, the UI lags behind on the patch status.
This will be fixed in the next maintenance update.
Skipping a Service Pack during SP migration
Service pack migration used to restrict migrations to the 'next'
service pack only.
With SLE 12 SP2 it is possible to skip a service pack. You can migrate
from SLE 12 GA to SLE 12 SP2 without the need to migrate to SLE 12 SP1
in between.
In the web UI this adds a new screen in the SP migration workflow,
allowing you to select the migration target.
Note: Not all base and extension (aka add-on product) combinations are
supported. The web UI restricts possible migration targets to
supported scenarios.
'taskotop' web UI
You can now see the status of taskomatic jobs in the web UI. This is
the same information you get from the taskotop
command-line tool
introduced before.
Go to 'Admin' -> 'Task Engine Status' -> 'Runtime Status'
The table shows you all currently running or finished jobs for the
last 5 minutes. The view is refreshed every 5 seconds.
new API call: listMigrationTargets
The listMigrationTargets
API call, given base and evtl. extensions,
returns a list of available targets for a service pack migration.
The existing scheduleSPMigration
API call now optionally takes one of
those targets.
New documentation sections
Best practices
- Getting started with Salt
Advanced topics
- Salt Proxy
- Monitoring with Icinga
Between GA and 3.0.1
New products supported
- SLES 12 LTSS
- OES 2015, OES 2015 SP1, incl. SP migration
Bootstrap UI
The new bootstrapping UI can be used to register systems from the UI
by giving only the hostname of a machine to be managed and SSH
credentials to access that machine. SUSE Manager will take care of
installing the needed software agent (salt-minion
) from its own
(bootstrap) repositories, as well as configuring and enabling it.
With this procedure it is no longer necessary to manually accept that
new minion's key because pre-accepted key is deployed to the
system that is going to be registered.
If a username is provided that is different from "root" sudo will
be used on the client to configure it, which naturally requires that
sudo
has been setup correctly.
taskotop
spacewalk-utils
now contains taskotop
, a command line tool to
visualize the taskomatic schedule.
New products supported
- SUSE Enterprise Storage 3
- SLE 12 Certifications module
- SLE-POS 11 SP3 as addon to SLES 11 SP4
Patches
The SUSE Patch Finder is a
simple online service to view released patches.
Version 3.0.12
SUSE Manager Server
nutch:
patterns-suse-manager:
- Add py26-compat-salt to be able to connect with salt-ssh to a system which only has python2.6 installed
spacecmd:
- Connect to API using FQDN instead of hostname to avoid SSL validation problems (bsc#1085667)
- Add function to update software channel through spacecmd
spacewalk-backend:
- Do not fail boostrap if no ip6addr interface is available (bsc#1090395)
- Fix encoding for RPM package group in reposync (bsc#1083001)
spacewalk-certs-tools:
spacewalk-java:
- Fix unknown installed products when using salt-ssh (bsc#1088861)
- Add SLES12 SP2 LTSS family (bsc#1092194)
- Fix token cleanup task crashing (bsc#1090585)
- Fix taskomatic deadlock in failure case (bsc#1085471)
- Wait until minion is back to set RebootAction as COMPLETED (bsc#1089401)
- Fix Advanced search for systems with installed packages (bsc#1085838)
- Fix index out of bound exception when os-release query returns multiple package names for RHEL/CentOS (bsc#1076931)
- More specific message for empty custom system info
- Fix presence ping (bsc#1080353)
- Set hostname before hardware refresh as well (bsc#1077760)
- Adjusted the code to override software channel's gpg_check during clone(#bsc1080290)
- Harmonize display of custom system information (bsc#979073)
- Fix NPE when retrieving OES repo (bsc#1082328)
spacewalk-search:
- Adapt query to retrieve the servers from the DB after drop of rhnServerNetwork table (bsc#1083114)
spacewalk-utils:
- Clone-by-date removes packages only if the list is not empty (bsc#1089396)
spacewalk-web:
- Set SUSE Manager version to 3.0.12
subscription-matcher:
- Add 2 new partnumbers to rules file (bsc#1081977)
- Improve subscription-matcher reporting accuracy via SCC (bsc#1031716)
- Small bugfixes
susemanager:
- Fix bootstrap script for python3 (bsc#1091840)
- Add new traditional packages and renamed to bootstrap repo data
- Fix unknown installed products when using salt-ssh (bsc#1088861)
- Add python2-salt to RES7 and SLES12 bootstrap repository
- Fix bootstrapping RHEL 7 salt client (missing python-ipaddress) (bsc#1087055)
- Add SLES4SAP-12-SP3-ppc64le as bootstrap repository (bsc#1082548)
susemanager-schema:
susemanager-sls:
- Change name of sle12 gpg key
- Create bootstrap repo only if it exist in the server (bsc#1087840)
- Fix master tops merging when running salt >= 2018
susemanager-sync-data:
virtual-host-gatherer:
- Support kubernetes access configuration only via kubeconfig. Remove other configuration options like url, username, password and certificates.
Salt
salt:
- Documentation refresh to 2018.3.0
- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
- Option --extra-filerefs doesn't add all files to the state
archive
- Pillar completely overwritten (not merged) when doing
module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Fixed Python 3 issue with CIDR addresses.
- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch (use code checksum instead version on thin update)
- Fix for
[Errno 0]
Resolver Error 0 (no error) (bsc#1087581)
- Add python-2.6 support to salt-ssh
- Update salt-ssh multiversion patch
- Add iprout/net-tools dependency
- Salt-ssh: require same major version while minor is allowed to be
- Fix zypper.info_installed 'ascii' issue
- Update openscap push patch to include the test fixes
- Explore 'module.run' state module output in depth to catch "result" properly
- Make it possible to use docker login, pull and push from module.run and detect errors
- Fix logging with FQDNs
- Fix unicode decode error with salt-ssh
- Fix cp.push empty file (bsc#1075950)
- Salt-ssh - move log_file option to changeable defaults
- Fix grains containing trailing "\n"
- Remove salt-minion python2 requirement when python3 is default (bsc#1081592)
- Remove-obsolete-unicode-handling-in-pkg.info_installed
- Fix-epoch-handling-for-Rhel-6-and-7
- Restoring-installation-of-packages-for-Rhel-6-7
- Prevent queryformat pattern from expanding (bsc#1079048)
- Fix epoch handling for Rhel 6 and 7 (bsc#1068566)
- Fix for wrong version processing during yum pkg install (bsc#1068566)
- Fix the usage of custom macros on the spec file.
- Fix RES7: different dependency names for python-PyYAML and python-MarkupSafe
- Build both python2 and python3 binaries together.
- Bugfix: errors in external pillar causes crash instead of report of them (bsc#1068446)
- Fix 'user.present' when 'gid_from_name' is set but group does not exist.
- Fix "No service execution module loaded" issue (bsc#1065792)
- Set SHELL environment variable
- Add fqdns to grains (bsc#1063419)
- Fixing cherrypy websocket with python3
- Python3 bugfix for cherrypy read()
- Fix for logging on salt-master exit in rare cases (pid-file removal)
- Fix salt-master for old psutil version
- Fix for delete_deployment in Kubernetes module (bsc#1059291)
- Older logrotate need su directive (bsc#1071322)
- Fix bsc#1041993 already included in 2017.7.2
- Escape the usage of %{VERSION} when calling out to rpm. RPM 4.14 has %{VERSION} defined as 'the main packages version'.
- Fix wrong version reported by Salt (bsc#1061407)
- Fix CVE-2017-14696 (bsc#1062464) already included in 2017.7.2
- Run salt master as dedicated salt user
- Run salt-api as user salt (bsc#1064520)
supportutils-plugin-salt:
- Collect salt-api, salt-broker and salt-ssh log files (bsc#1090242)
Client tools
cobbler:
- Fix signature for SLES15 (bsc#1075014)
- Detect if there is already another instance of "cobbler sync" running and exit with failure if so (bsc#1081714)
- Escape shell parameters provided by the user for the reposync action (CVE-2017-1000469) (bsc#1074594)
- Add sles15 distro profile (bsc#1090205)
- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use this one for checking also
- Cleanup: cobbler is noarch, so arch specific requires do not make sense
- Build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Require tftp(server) instead of atftp
hwdata:
- Update to version 0.308:
- Updated pci, usb and vendor ids.
osad:
- Use full package name python-jabberpy as dependency (bsc#1087299)
- Sync with upstream (bsc#1083294)
- Remove osad files when packaging only for python3
- Run osa-dispatcher on python3 when possible
- Remove clean section from spec (bsc#1083294)
- Remove unused python-xml requirement (bsc#1082211)
- Add missing directory to filelist
- Splitinto python2/python3 specific packages
python-websocket-client:
- Build python3 subpackage (fate#324435)
rhn-custom-info:
- Remove empty clean section from spec (bsc#1083294)
- Sync with upstream
- Build with python3 when needed
rhn-virtualization:
- Remove SUSE Studio based image deployments (bsc#1090504)
- Sync with upstream (bsc#1083294)
- Build python2 packages on SUSE systems
- Remove empty clean section from spec (bsc#1083294)
- Simplify status check
- Open cache file in binary mode
- Fixing traceback from poller.py on Python 3
- Fixing a bytes-like object is required, not 'str'
- Move files into proper python2/python3 subpackages
rhncfg:
- Sync with upstream (bsc#1083294)
- Build python2 packages on SUSE systems
- Remove empty clean section from spec (bsc#1083294)
- Improve webui for comparing files (bsc#1076201)
- Add --config option to rhncfg-manager and rhncfg-client
- Add better handling of interrupted system calls
- Rhncfg: add missing dirs to filelist
- Move files into proper python2/python3 subpackages
- Store output in the action file so partial output can arrive to server
- Print different message if file does not exist
- Print a name of file which does not exist during diff
- Tell user which file differs
- Add password config option to rhncfg-manager
- Execute remote commands in clean environment
rhnlib:
- Sync with upstream (bsc#1083294)
- Remove empty clean section from spec (bsc#1083294)
- Replace netstat with ss command
- Build python3 package
- Check a state of handshake before shutdown SSL connection
- Python's OpenSSL.SSL.Connection method for getting state was renamed.
rhnpush:
- Sync with upstream (bsc#1083294)
- Rhnpush is needed on python2 due to spacewalk-proxy
- Build python2 on SUSE
- Remove empty clean section from spec (bsc#1083294)
- Move rhnpush files into proper python2/python3 subpackages
spacecmd:
- Sync with upstream (bsc#1083294)
- 1539878 - add save_cache to do_ssm_intersect
- Fix softwarechannel_listsyncschedule
- Disable pylint for python2 and RES < 8 (bsc#1088070)
- 1536484 - Command spacecmd supports utf8 name of systems
- 1484056 - updatefile and addfile are basically same calls
- 1484056 - make configchannel_addfile fully non-interactive
- 1445725 - display all checksum types, not just MD5
- Remove clean section from spec (bsc#1083294)
- Added function to update software channel. Moreover, some refactoring has been done(bsc#1076578)
- Add more python3 compatibility changes
- Compatibility with Python 3
- Fix typo (bsc#1081151)
- Allow scheduling the change of software channels as an action. The previous channels remain accessible to the registered system until the action is executed.
- Add --config option to spacecmd
- Added custom JSON encoder in order to parse date fields correctly (bsc#1070372)
- Pylint - fix intendation
- Fix build with python 3
- Show list of arches for channel
- Allow softwarechannel_setsyncschedule to disable schedule
- Add softwarechannel_setsyncschedule --latest
- In case of system named by id, let id take precedence
- Make spacecmd prompt for password when overriding config file user
- Show less output of common packages in selected channels
- Adding softwarechannel_listmanageablechannels
spacewalk-backend:
- Bugfix: do not fail boostrap if no ip6addr interface (bsc#1090395)
- Allow again to use a higher version of spacewalk-backend-libs with spacewalk-backend (bsc#1092383)
- Sync with upstream (bsc#1083294)
- 1567157 - remove 'www' part from cve.mitre.org domain name
- 1198723 - rhnRepository.py: add support for Debian / Ubuntu Release files
- 1549546 - Allow spacewalk-channel to add parent channel
- Temporary revert bsc#1083001
- SLE15 support: recommended/required flag for products and channels (bsc#1087373)
- Updating .po translations from Zanata
- Fixing incorrect syntax of format string
- Fixing newline error in translation
- 1550001 - KeyError: 'severity' caught when exporting channel with rhn-satellite-exporter
- 1534417 - sanitize pwds in backup files and http-proxy-pwds as well
- Remove empty clean section from spec (bsc#1083294)
- 1540981 - Clarify error-reporting when checksum_cache is bad
- 1537098 - Teach packageImport to ignore flags RPM doesn't know
- Fix: restore hostname and ip*addr in templated documents (bsc#1075044)
- Fix directory name in spacewalk-data-fsck
- Search for product packages when installed packages are available (bsc#1060182)
- RhnServerNetwork refactoring (bsc#1063419)
- Change the virtualization backend not to duplicate data in case host and guests are in different organizations
- Fix joining strings
- Yum ContentSource() should set number of packages during raw listing.
- Convert release to long while checking which is older or newer
- Do not import ignored errata
- Process comps file before package import
- Yum on RHEL6 has no idea about environments
- Make rhn_rpm python3 compatible
- Open checksummed files in binary mode
- Mention package groups in help
- Detect and parse package groups in filters
- Add new spacewalk-repo-sync command line option to synopsis of man-page
- Add new parameter '--show-packages' for spacewalk-repo-sync.
- Build python3 subpackage for -libs package
- Fix issues with syncing deb repos (bsc#1050433)
- Honor MAX_LOG_AGE for (renamed) cobbler/tasks logs file in spacewalk-debug (bsc#1025201)
- Add hostname to duplicate machine_id email (bsc#1055292)
- Fix link to manual and the described procedure
- Don't crash when token is set to 'fake' (bsc#1060022)
- When searching for not installed products exclude release packages which are provided by others (bsc#1067509)
spacewalk-client-tools:
- Require zypp-plugin-spacewalk and yum-rhn-plugin in a version which install actions to standard python path (bsc#1091665)
- Sync with upstream (bsc#1083294)
- Build both python 2/3 because of rhnpush
- Updating .po translations from Zanata
- Don't try to delete python2 files when there are none
- Strip quotes when reading /etc/sysconfig/network
- Remove empty clean section from spec (bsc#1083294)
- Move dependency to python2 subpackage
- Python3 fix for searching file in rpm
- Make is_utf8 method python3 compatible
- Platform module behave different with python3
- Device.sys_path is attribute not function
- Make getting device properties compatible with older versions of pyudev
- Split files into proper python2/python3 subpackages
- Fix syntax for python 3
- Add epoch information for deb packages
- Fix rhn-profile sync on Fedora 26 fix ipv6 network mask calculation
- Use new pyudev module to get udev information
- Remove dependency on libgnome
spacewalk-koan:
- Sync with upstream (bsc#1083294)
- Build python2 packages on SUSE systems
- Remove empty clean section from spec (bsc#1083294)
- Replace ifconfig with ip command
- Add missing directories to filelist
- Split spacewalk-koan into python2/python3 specific packages
- Replace koan20 with koan
- Remove dependency to rhn-virtualization
spacewalk-oscap:
- Require openscap-scanner on newer versions of RHEL (bsc#1093545)
- Sync with upstream (bsc#1083294)
- Build python2 packages on SUSE systems
- Remove clean section from spec (bsc#1083294)
- Add missing directories to filelist
- Split spacewalk-oscap into python2/python3 specific packages
spacewalk-remote-utils:
- Sync with upstream (bsc#1083294)
- 1574492 - Update spacewalk-remote-utils with RHEL 7.5 channel
definitions
- Remove clean section from spec (bsc#1083294)
- Update spacewalk-remote-utils with RHEL 7.4 channel definitions
- Make python2/3 defs consistent with other specs
- Build with python3 if needed
spacewalk-usix:
- Split spacewalk-usix into python2 and python3 variants
- Remove empty clean section from spec (bsc#1083294)
- Sync with upstream
- Use macro build_py3
- Build subpackage with python3
spacewalksd:
- Sync with upstream (bsc#1083294)
- Updating .po translations from Zanata
- Remove empty clean section from spec (bsc#1083294)
- Cleanup specfiles
- Close and reopen syslog when redirecting child output
- No insserv on available in newer distributions
supportutils-plugin-susemanager-client:
- Released in the SLE15 code stream
suseRegisterInfo:
- Remove clean section from spec (bsc#1083294)
- Build for python 2 and 3
zypp-plugin-spacewalk:
- Fix encoding errors with python3 (bsc#1090746)
- Use standard python path for actions also when building
for older distributions (bsc#1091665)
- Change pkg_gpgcheck setting to restore the old behaviour with
upstream Spacewalk (bsc#1091034)
- Python3 compatibility (bsc#1073879)
Version 3.0.11
spacecmd:
- Configure gpg_flag via spacecmd creating a channel (bsc#1080290)
spacewalk-backend:
- Fix spacewalk-data-fsck restore of broken package db entry (bsc#1071526)
spacewalk-java:
- Handle stderr from "virtual-host-gatherer" to avoid hanging (bsc#1067010)
- Provide another create method(with additional parameter Gpgcheck) to create software channel through XML RPC(bsc#1060691).
- Uniform date formatting in System Details view (bsc#1045289)
- Handle gpg_check correctly (bsc#1076578)
- Show the time on the event history page in the users preferred timezone (bsc#1063891)
- Uniform the notification message when rebooting a system (bsc#1036302)
- Refresh pillar data on formular change (bsc#1028285)
- Fix encoding/decoding of url_bounce with more parameters (bsc#1075408)
spacewalk-utils:
- Remove restrictions imposed on regex used in 'removelist' parameter passed to spacewalk-clone-by-date that allowed only exact match (bsc#1075254)
spacewalk-web:
- Set SUSE Manager version to 3.0.11
susemanager:
- Fix custom SERVER_KEY overriding (bsc#1075862)
- Do not try to force db encoding on db upgrade; use same value as for installation (bsc#1077730)
susemanager-schema:
- Handle duplicate serverpackage entries while fixing duplicate evr ids (bsc#1075345)
- Fix: schema with proper extension (bsc#1079820)
susemanager-sls:
- Compare osmajorrelease in jinja always as integer
susemanager-sync-data:
Version 3.0.10
nutch:
osad:
- Fixed TypeError for force flag in setup_config that could happen
when jabberd restart was needed. (bsc#1064393)
pxe-default-image:
spacecmd:
- Added custom JSON encoder in order to parse date fields correctly (bsc#1070372)
spacewalk-backend:
- Fix: restore hostname and ip*addr in templated documents (bsc#1075044)
- Fix directory name in spacewalk-data-fsck
- RhnServerNetwork refactoring (bsc#1063419)
- Non admin or disabled user cannot make changes to a system anymore
- No need to be autonomous when inserting to rhnArchType
- Add suseLib.accessible() doing a HEAD request to test
- Fix extract keyid from RPM header
- Fix typo in sql statement
- Fix building on RH
- Call yum update_md with the option to get all updateinfos
- Backport upstrem fixes
- Fix checksum handling.
- Change suseServer ostarget to a foreign key to suseOSTarget(id) client registration.
- Reposync: find checksums for packages in channels with org_id null
- Skip patch instead of abort if no checksum for a package
spacewalk-branding:
spacewalk-client-tools:
spacewalk-java:
- Fix message about package profile sync (bsc#1073739)
- Add VM state as info gathered from VMware (bsc#1063759)
- Improve performance of token checking, when RPMs or metadata are downloaded from minions (bsc#1061273)
- Fix action names and date formatting in system event history (bsc#1073713)
- Fix incorrect 'os-release' report after SP migration (bsc#1071553)
- Fix failed package installation when in RES 32 and 64 bit packages are installed together (bsc#1071314)
- Add user preferences in order to change items-per-page (bsc#1055296)
- Display messages about wrong input more end-user friendly. (bsc#1015956)
- Fix content refresh when product keys change (bsc#1069943)
- Allow 'Package List Refresh' when package arch has changed (bsc#1065259)
- Support Open Enterprise Server 2018 (bsc#1060182)
- Do not remove virtual instances for registered systems (bsc#1063759)
- Process right configfile on 'scheduleFileComparisons' API calls (bsc#1066663)
- Fix reported UUIDs for guests instances within a virtual host (bsc#1063759)
- Generate Order Items for OEM subscriptions (bsc#1045141)
- Enable 'Power Management' features on Salt minions.
- Fail gracefully when GPG files are requested (bsc#1065676)
- Improve messaging for "Compare Packages" (bsc#1065844)
- RhnServerNetwork refactoring (bsc#1063419)
- Add Adelaide timezone to selectable timezones (bsc#1063891)
- Add logging messages for SP migration (bsc#1066819, bsc#1066404)
- Make the packages require the frontend-libs
- Do not allow creating kickstart profiles that differ from existing ones
- Fix system.listLatestUpgradablePackages API to list upgradable packages
- Backported better installation server detection code
- Fix display of XML snippets in the web ui using session install=.... parameter
- Settings the correct architecture in cobbler, needed by virt.
- Rename sm-register to mgr-register
- Some style fixes
spacewalk-reports:
spacewalk-search:
- RhnServerNetwork refactoring (bsc#1063419)
- Fix requires
spacewalk-web:
- Add user preferences in order to change items-per-page (bsc#1055296)
susemanager:
- Support Open Enterprise Server 2018 (bsc#1060182)
- Fixed bootstrap repository path for SLES4SAP version 12 and 12.1 (bsc#1062936)
- Fix error message for database upgrade failure
- Check for sufficient diskspace in /var/lib/pgsql
- Notify admin that database backups need reconfiguration after db upgrade
susemanager-docs_en:
- Update text and image files:
- List Open Enterprise Server 2015, 2015 SP1, 2018 as supported clients.
susemanager-schema:
- Fix duplicate entries in channel listings
- Handle nevra not found case while fixing duplicate evr ids (bsc#1074508)
- Enable 'Power Management' features on Salt minions.
- Fix unique index for evr and capability and remove duplicates during migration (bsc#1058110)
- RhnServerNetwork refactoring (bsc#1063419)
- Add Adelaide timezone to selectable timezones (bsc#1063891)
- Registration of REHL4 clients fails due to incomplete
- Fix copyright
- Change suseServer ostarget to a foreign key to suseOSTarget(id)
- Add RES GPG Key to DB
- Add SUSE and Novell GPG Keys to DB
susemanager-sls:
- Python3 compatibility fixes in modules and states
- Fix deprecated SLS files to avoid deprecation warnings during highstate (bsc#1041993)
susemanager-sync-data:
- Support Open Enterprise Server 2018 (bsc#1060182)
- Fix description for HA channel (bsc#1063588)
- Add support for CAASP (bsc#1052283)
- Add IBM DLPAR channels to SLES for SAP SPx ppc64le (bsc#1068057)
- Remove Certification Module 12 from SP2 and SP3 (bsc#1066819)
- Add SUSE Manager Server 3.0 and 3.1 channels for mirroring
- Support SLE-RT 12 SP3 (bsc#1063940)
- Add SLE12 LTSS as extension to SLES for SAP 12 (bsc#1069615)
- Remove OES2018 Debuginfo channels (bsc#1071367)
virtual-host-gatherer:
- Add VM state as info gathered from VMware (bsc#1063759)
- Explore the entire tree of nodes from VMware (bsc#1070597)
- Skip safely VMs which have no config attribute on VMware (bsc#1066923)
Version 3.0.9
Patch 1217: SUSE Manager Proxy 3.0
jabberd:
- Allow for up to 8k client connections. (bsc#950184).
- Revert configuration files to %config(noreplace). (bsc#988378)
spacewalk-backend:
- Copy the subscription-matcher directory instead of the content.
- Machine_info capability and check for client tool compatibility with SUSE
Manager 2.1.
spacewalk-certs-tools:
- Correctly update the trust store on SLE 11.
- Re-add lost dependency of spacewalk-base-minimal-config to
spacewalk-certs-tools. (bsc#984418)
- Fix mgr-ssh-push-init with proxy and sudo. (bsc#982562)
spacewalk-client-tools:
- Fix syntax error preventing reading of HW data correctly. (bsc#984622)
- Machine_info capability and check for client tool compatibility with SUSE
Manager 2.1.
spacewalk-web:
- Recompute window dimensions when content changes. (bsc#971559)
- Fix aside column height computation. (bsc#969834)
susemanager-sls:
- Update trust store when multiple certificates in one file are available on SLE11.
- Update CA certificates only when they have changed.
- Assume no pillar data if the yml file for the minion does not exist. (bsc#980354)
- Add distributable pkgset beacon for RPM database notifications.
Patch 984: SUSE Manager Server, Proxy and Client Tools
zypp-plugin-spacewalk:
- Fix failover for multiple URLs per repo. (bsc#964932)
salt:
- Remove option -f from startproc. (bsc#975733)
- Changed Zypper's plugin. Added Unit test and related to that data. (bsc#980313)
- Zypper plugin: alter the generated event name on package set change.
- Fix file ownership on master keys and cache directories during upgrade. (handles upgrading from salt 2014, where the daemon ran as root, to 2015 where it runs as the salt user, bsc#979676)
- Salt-proxy .service file created. (bsc#975306)
- Prevent salt-proxy test.ping crash. (bsc#975303)
- Fix shared directories ownership issues.
- Add Zypper plugin to generate an event, once Zypper is used outside the Salt infrastructure demand. (bsc#971372)
- Restore boolean values from the repo configuration
- Fix priority attribute (bsc#978833)
- Unblock-Zypper. (bsc#976148)
- Modify-environment. (bsc#971372)
- Prevent crash if pygit2 package is requesting re-compilation.
- Align OS grains from older SLES with current one. (bsc#975757)
- Bugfix: salt-key crashes if tries to generate keys to the directory w/o write access. (bsc#969320)
spacecmd:
- Make spacecmd createRepo compatible with SUSE Manager 2.1 API.
(bsc#977264)
spacewalk-backend:
- Better error message for system that is already registered as minion.
- Fix GPG bad signature detection and improve error messages. (bsc#979313)
- Send and save machine_id on traditional registration.
- Add machine info capability
spacewalk-client-tools:
- Send and save machine_id on traditional registration.
- Send machine info only if server has machine info capability.
Version 3.0.8
salt-netapi-client:
- Fix date format for Schedule
- Fix sending kwarg in payload in RunnerCall
- Better error handling in Runner and Wheel calls
- Refactored some code and added module name information to Call classes
- listJobs improvements
- Increase the default SOCKET_TIMEOUT to 20 seconds
- Cmd module enhancements
smdba:
- Several autotuning fixes; ensure cleanup of existing too low value for default_statistics_target (bsc#1022286)
- Do not set default_statistics_target (bsc#1022286)
- Support postgresql96 (bsc#1045152)
- Prevent use of /var/lib/pgsql/data (bsc#1024058)
- Remove copyright message every time shown (and fix its data)
- Cleanup stale pid for killed postmaster (ver 9.x)
- Minor code cleanup
- On systemd-enabled systems use it for start/stop PostgreSQL (bsc#1024058)
spacewalk-backend:
- Increase rpclib timeout to 10 minutes (bsc#1026930)
- Adapt for the new gpgcheck flag for the channels
spacewalk-branding:
spacewalk-config:
spacewalk-java:
- Delete and create new ServerNetAddress if it already exists on HW refresh (bsc#1054225)
- Fix XSS vulnerability (https://bugzilla.redhat.com/1460208)
- Fix enter key submit on ListTag filter input (bsc#1048762)
- Create VirtpollerData object with JSON content instead null (bsc#1049170)
- Prevent malformed XML if 'arch' is set to NULL (bsc#1045575)
- Resolve comps.xml file for repositories (bsc#1048528)
- Fix: don't add default channel if AK is not valid (bsc#1047656)
- Add 'Enable GPG check' function for channels
- Regenerate pillar for the minions using the channel being modified
- Remove executable bit from service files (bsc#1051518)
- Fix wrong openscap xid (bsc#1030898)
- Organization name allows XSS CVE-2017-7538 (bsc#1048968)
- Fix overlapping text narrow window (bsc#1009118)
- Manager: Update salt-netapi-client (v0.12.0)
- Fix broken link (bsc#1033999)
- Fix alignment on the org details (bsc#1017513)
- Update channels.xml with OpenStack Cloud Continuous Delivery 6 (bsc#1039458)
- Handle possible wrong UUIDs on SLE11 minions (bsc#1046218)
- Fix: allow blank key generation (bsc#1032350)
spacewalk-search:
spacewalk-setup-jabberd:
- Change default backend for jabberd to sqlite (bsc#1047155)
spacewalk-web:
- Fix enter key submit on ListTag filter input (bsc#1048762)
susemanager:
- Do not use checkpoint_segments parameter during migrations
- Add script for migrating from postgresql94 to postgresql96
- Create bootstrap repo for SLES for SAP 11 SP1 (bsc#1049471)
- Adjust the bootstrap repo with SLE 12 SP3 repos
susemanager-docs_en:
- Update text and image files.
susemanager-schema:
- Adapt for the new gpgcheck flag for the channels
susemanager-sync-data:
- Add proxy 3.0 channels for SLES12SP3 (bsc#1053850)
- Support SUSE Enterprise Storage 5 and SUSE LINUX Enterprise Server 12 - SP3
for SAP Applications on ppc64le (bsc#1028098)
- Update channels.xml with OpenStack Cloud Continuous Delivery 6 (bsc#1039458)
- Add the SLE 12 SP3-related products (bsc#1037609)
virtual-host-gatherer:
- Params to configure Kuberntes module from kubeconfig
- Implement kubernetes gatherer module
Version 3.0.7
spacecmd:
- Spacecmd report_outofdatesystems: avoid one XMLRPC call per system (bsc#1015882)
spacewalk:
- Conflict with postgresql version greater than 9.4 (bsc#1045152)
spacewalk-backend:
- Remove not implemented option --force-all-packages (bsc#1040194)
- Fix parsing oscap results - not every Rule has an XCCDF ID Tag (bsc#1041992)
spacewalk-certs-tools:
spacewalk-java:
- Make system search comparator consistent (bsc#1040631)
- Duplicate Systems: correct language not to mention 'profiles' (bsc#1035728)
- Fix list filters to work with URL special characters (bsc#1042846)
- Update Ivy's version of the taglibs (bsc#1044804)
- Fix NPE when there's not udev results (bsc#1042552)
- Fix: hide non-org event details (bsc#1039579)
- Fallback to first netw interf if no primary ips (bsc#1038677)
- Remove repositories which are not assigned to a channel and not accessible anymore (bsc#1043131)
- Spacecmd report_outofdatesystems: avoid one XMLRPC call per system (bsc#1015882)
- Correctly set action status to failed when an unexpected exception occurs (bsc#1013606)
- Bugfix: Traditional SSH Push to Minion migration (bsc#1040394)
- Fix parsing oscap xml result for minions, not every Rule has an XCCDF ID Tag (bsc#1041812)
- Prevents ISE if base channels data is not up-to-date on SSM. (bsc#1040420)
- Schedule a package list update after a Service Pack Migration (bsc#1017703)
- Show permission denied instead of internal server err (bsc#1036335)
- Use fallback now time as is without user preferences (bsc#1034465)
spacewalk-utils:
- Don't show password on input in spacewalk-manage-channel-lifecycle
(bsc#1043795)
spacewalk-web:
- Display a generic non-empty err msg in case of xhr.status==0 (bsc#1041913)
susemanager-sls:
- Fix certs state for Tumbleweed (bsc#970630)
- Fix certs state for Leap 42.2 (bsc#970630)
- Make sumautil.get_kernel_live_version accept any kgr output 'active: NUM' where NUM > 0 (bsc#1044074)
- Avoids formula leaking on pillar data (bsc#1044236)
- Fix yum plugin when installing patches on RHEL6 (bsc#1039294)
- Remove suseRegisterInfo in a separate yum transaction so that it's not called by yum plugin (bsc#1038732)
- Refactoring formulas in suma_minion external pillar (bsc#1033825)
Version 3.0.6
locale-formula:
- Remove documentation links which point to developer-only wiki. (bsc#1033341)
salt-netapi-client:
- Fix sending kwarg in payload in RunnerCall.
spacecmd:
- Remove get_certificateexpiration support in spacecmd. (bsc#1013876)
spacewalk-backend:
- Don't let disabled user log in.
- Fix relative imports and update Copyright date. (bsc#1037635)
- Rename incomplete_package_import to package_import_skip_changelog.
- Spacewalk-backend should require the exact version of spacewalk-backend-libs. (bsc#1037635)
spacewalk-certs-tools:
- Update openssl on bootstrap. (bsc#1037828)
- Setup bootstrap repository also when no packages are missing.
- Update important packages before registration. (bsc#1037355)
spacewalk-config:
- Rename incomplete_package_import to package_import_skip_changelog.
- Document Incomplete_package_import, Java.message_queue_thread_pool_size, salt_presence_ping_timeout and
salt_presence_ping_gather_job_timeout in man page.
spacewalk-java:
- Fix race condition for preview websocket messages in remote commands page.
- Enable pkgset beacon for all SUSE OS distributions. (bsc#1032286)
- Add info about base products to json input for subscription-matcher.
- Add product class info to the json input for the subscription-matcher. (bsc#1031716)
- Change mgrsshtunnel user home to /var/lib/spacewalk.
- Make schedule notification links consistent for actions for a single system. (bsc#1039286)
- Lookup functions should return every minion only one time.
- Store temporary roster in configured location. (bsc#1019672)
- Avoid System.out for logging.
- Allow dot character '.' for activation key. (bsc#1035633)
- Use the util method when checking whether minion is ssh push-like.
- Change contact method for bootstrap script and ssh-push. (bsc#1020852)
- SSM Task Log: make title coherent with menu item.
- Hide lock for Salt servers. (bsc#1032380)
- Parse old and new return structure of spmigration return event.
- Parse result of SP migration Dry Run correctly. (bsc#1034837)
- Prevent possible null pointer exception when installed products could not be found. (bsc#1034837)
- Added the following missing references to the changelog: bsc#1033889, bsc#1025761, bsc#1029840
spacewalk-web:
- Set SUSE Manager version to 3.0.6.
- Allow dot character '.' for activation key. (bsc#1035633)
susemanager:
- Add openssl to bootstrap repositories. (bsc#1037828)
- Add some basic packages to RES bootstrap repository. (bsc#1037355)
- Add python-backports-ssl_match_hostname to RES7 bootstrap repository. (bsc#1038027)
susemanager-schema:
- Add base column to suseProducts.
- Add channel_family_id column to suseProducts. (bsc#1031716)
- Recreate possible missing data. (bsc#1032798)
- Take care that capability name exists. (bsc#1035724)
- Add logging to can_entitle_server function to write out the reason of a failure. (bsc#1032798)
susemanager-sls:
- Add missing file name attribute to yum plugin state.
- Use include instead of state.apply channels to fix salt-ssh issue. (bsc#1036268)
- Fix pkgset beacon. (bsc#1029350)
- Encode formula to string. (bsc#1033825)
- Update basic packages when bootstrapping with salt.
susemanager-sync-data:
Version 3.0.5
spacewalk-backend:
- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.
(bsc#1026633, CVE-2017-7470)
cobbler:
- Support UEFI boot with cobbler generated tftp tree. (bsc#1020376)
- Refresh patch for fuzzless appliance.
rhnlib:
salt-netapi-client:
spacecmd:
spacewalk-backend:
- Do not fail with traceback when media.1 does not exist. (bsc#1032256)
- Create scap files directory beforehand. (bsc#1029755)
- Fix error if SPACEWALK_DEBUG_NO_REPORTS environment variable is not present.
- Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)
- Add support for running spacewalk-debug without creating reports. (bsc#1024714)
- Set scap store directory mod to 775 and group owner to susemanager.
- incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.
- Added traceback printing to the exception block.
- Change postgresql starting commands.
spacewalk-certs-tools:
- Always restart the minion regardless of its current state. (bsc#1034956)
- Correctly honor disabling of SSL in bootstrap script. (bsc#1033383)
- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.
- Exit for non-traditional bootstrap scripts. (bsc#1020904)
- Rename mgr-ssh-proxy-force-cmd -> mgr-proxy-ssh-force-cmd.
- Add mgr-proxy-ssh-force-cmd, mgr-proxy-ssh-push-init to rpm.
- Add option to configure only sshd.
- Restrictive ssh options for user mgrsshtunnel.
spacewalk-java:
- Fix missing IPs in Overview tab. (bsc#1031453)
- Fix scheduling VM deployment in future. (bsc#1034289)
- Handle empty set to not produce invalid sql. (bsc#1033497)
- Fix SSM group pagination. (bsc#1012784)
- Create PooledExecutor with pre-filled queue. (bsc#1030716)
- Make sure minion keys can only be seen/managed by appropriate user. (bsc#1025908)
- Set action status to 'failed' on uncaught exceptions. (bsc#1013606)
- Add missing library to taskomatic classpath. (bsc#1024066)
- Set log level to DEBUG for EOFException when the Websocket connection is aborted by the client. (bsc#1031826)
- Add a remote command with label as a script to the actionchain. (bsc#1011964)
- Fix architecture for default channels lookup. (bsc#1025275)
- Change required salt-netapi-client to >= 0.11.
- Using stream() during collection processing.
- Making salt presence timeouts configurable via rhn.conf. (bsc#1025761)
- Avoid blocking synchronous calls if some minions are unreachable. (bsc#1025761)
- Excludes unreachable minions from synchronous call to prevent blocking. (bsc#1025761)
- Fix LocalDateTimeISOAdapter to parse date string with timezone. (bsc#1024966)
- Create scap files directories beforehand. (bsc#1029755)
- Make country, state/province and city searchable for system location. (bsc#1020659)
- Change incorrect help link. (bsc#1017418)
- Don't allow scheduling scap scan if openscap pkg missing from minion.
- Make salt aware of rescheduled actions. (bsc#1027852)
- Close hibernate session on async salt-ssh call.
- Use a small fixed pool so we don't overwhelm the salt-api with salt-ssh executions
- Fix remote cmd ui js err and timed out message.
- Remote cmd UI changes for salt-ssh minions.
- Add support for salt ssh minions to remote cmd UI.
- Apply SessionFilter also for error pages. (bsc#1028062)
- Use correct logging class.
- Fix broken help link for taskstatus. (bsc#1017422)
- Test errata not removed from origin.
- Fix merge channels patches. (bsc#1025000)
- Change XccdfIdent.identifier mapping length to 100.
- Add xccdf result xslt.
- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)
- Use consistent spelling in UI. (bsc#1028306)
- Rewording distchannelmap text. (bsc#1017772)
- Javascript datepicker needs the timezone create a correct date object. (bsc#1024966)
- Don't show audit tab for ssh-push minions.
- Set scap store dir mod to 775 and group owner to susemanager.
- Better error handling and more tests.
- Store uploaded scap files.
- Openscap action scheduling and handling.
- Grant scap capability to minion on registration.
- Enable audit tab for salt minions.
- Scap inital xccdfEval and hibernate mappings.
- Show proxy path in bootstrap UI.
- AuthFilter tests: Update expectations to reflect cookie update at end of request.
- AuthFilter: Update cookie expiry date at end of HTTP request. (bsc#1025775)
- MinionActionCleanup: Only call list_jobs once per action id. (bsc#1025291)
- MinionActionCleanupTest: Expect that list_jobs is only called once.
- Feat: Allow salt-enabled bootstrap.sh via UI.
- Catch and display all bootstrap errors.
- Sync grains and beacons only for regular minions.
- Add new channel tokens to minion.accessTokens.
- Fix getting server path for a first level proxy.
- Fix bootstrap err when proxy not selected.
- Check if proxy hostname is FQDN not name in UI.
- Utility for runner to generate ssh key and execute cmd via proxies.
- Add proxy_pub_key to ssh bootstrap pillar.
- Add ssh timeout to temporary roster.
- Salt_ssh_connect_timeout configuration parameter.
- Authorize parent salt-ssh key on proxy.
- Java backend for salt ssh-push through proxy.
- Avoid deadlock with spacewalk-repo-sync. (bsc#1022530)
- Fix NPE when no SUSE Product was found for an installed product. (bsc#1029840)
- Keep organization after migrating a system to salt. (bsc#1026301)
- Fix glob only for noarch rpm(s).
- Feat: Dynamically detect deployed CA certificate.
- Fix restore original default (certificate).
- Rename variable (cert provided by RPM).
- Fix uniform bootstrap.sh. (bsc#1000762)
spacewalk-reports:
spacewalk-setup:
- Create
/var/spacewalk/systems
in spacewalk-setup and ensure perms on upgrade.
- Add xccdf result xslt.
- Authorize parent salt-ssh key on proxy.
spacewalk-web:
- Remote Commands: Allow Web Socket to be opened on non-standard port.
- Improve remote cmd ui error handling.
- Show message when waiting for ssh minions times out.
- Fix remote cmd ui js err and timed out message.
- Remote cmd UI changes for salt-ssh minions.
- Fix broken help link for taskstatus. (bsc#1017422)
- Add js utility function to create Date objects in different timezones.
- Show proxy path in bootstrap UI.
- Clear proxy selection when clicking clear fields button.
- Check if proxy hostname is FQDN not name in UI.
- Show warn in bootstrap UI if proxy hostname is not a FQDN.
subscription-matcher:
- Set
-Xmx
launch parameter based on customer data. (bsc#1024863)
- Small bugfixes and logging improvements.
susemanager:
- Add bootstrap repo data for SLES for SAP 12 SP2 ppc64le.
- Add python-setuptools to bootstrap repo. (bsc#1033731)
- Create directory manually if mksubvolume fails, so we now support btrfs based systems with missing mksubvoume
utility. (bsc#1031885)
- Create
/var/spacewalk/systems
in spacewalk-setup and ensure perms on upgrade
- Fix typo in comment noting option with-custom-channels. (bsc#1031092)
- Pre require tomcat and salt.
- Fix
%pre
and %post
scripts in susemanager.spec.
- Append salt, tomcat, wwwrun to susemanager group.
- Susemanager group and change owner and permissions for
/var/susemanager/systems
.
susemanager-schema:
- Don't fail if capability already exists.
- Show update message only when updating the schema package. (bsc#1024456)
- Fix audit log disabling in Oracle.
- Grant minions scap capability.
- Clean up stale logging data and triggers. (bsc#1009545)
- Fix deduplicate to work with more than two duplicates.
susemanager-sls:
- Add certificate state for CAASP.
- Add certificate state for SLES for SAP. (bsc#1031659)
- Pre-create empty top.sls with no-op. (bsc#1017754)
- Add xccdf result xslt.
- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)
- Set scap store dir mod to 775 and group owner to susemanager.
- Store uploaded scap files.
- Set minion own key owner to bootstrap ssh_push_sudo_user.
- Runner to generate ssh key and execute cmd via proxies.
- Change ssh bootstrap state to generate and auth keys for salt-ssh push with tunnel.
- Authorize parent salt-ssh key on proxy.
susemanager-sync-data:
- Support Cloud 7 - Magnum Orchestration (bsc#1026266) and SLES for SAP 12 SP2 ppc64le.
virtual-host-gatherer:
- Adding support for exploring 'vim.Folder'. (bsc#1025421)
Version 3.0.4
salt-netapi-client:
spacecmd:
spacewalk-backend:
- Add incomplete_package_import option to speed reposync up
spacewalk-client-tools:
- Traditional registration: resolve /etc/hostname if not FQDN (bsc#1019360)
spacewalk-config:
- Add wss: to apache Content-Security-Policy
- Make remote commands UI async (bsc#993209)
spacewalk-java:
- Create tmp directory in spec file (bsc#1024486, bsc#1024482)
- Store rosters in SALT_FILE_GENERATION_TEMP_PATH (bsc#1024486, bsc#1024482)
- Show only allowed minions in remote commands UI (bsc#1024496)
- Reject tokens not assigned to minions (bsc#1019965)
- Apply addon system types from activation key during registration (bsc#1020180)
- Remote commands: no blocking when minions are down (bsc#993209)
- Log auth failure as error (bsc#1017505)
- Apply highstate as the last step of a registration in case an activation key was provided (bsc#1020232)
- Add severity to updateinfo (bsc#1012365)
- Hide migration targets without valid subscriptions (bsc#1019893)
- Fix SP migration when the SUSE Manager Tools product is installed (bsc#1014498)
- Fix timezone handling for rpm installtime (bsc#1017078)
- Validate activation key values (bsc#1015967)
- Pass user-preferred localtime to the highstate UI (bsc#1020027)
- Send ChannelsChangedEventMessage in SSM (bsc#1019451)
- Fix token refresh logic (bsc#973421)
- Ignore case when comparing virtualization type (bsc#1016960)
- XMLRPC: Allow specifying config revision by natural attributes when adding to action chain (bsc#1011962)
- Do not execute package list refresh twice (bsc#1016344)
spacewalk-web:
- Increase the version to 3.0.4
- Remote commands: no blocking when minions are down (bsc#993209)
- Validate activation key values (bsc#1015967)
- Pass user-preferred localtime to the highstate UI (bsc#1020027)
susemanager:
- Add missing '-y' parameter for salt-key call (bsc#1024473)
- Create bootstrap repo for Raspberry Pi (bsc#1023133)
- Add an "IMPORTANT" note after migration is done (bsc#1013145)
- Create bootstrap repo for SLES for SAP ppc64le
susemanager-docs_en:
- Commented out White Papers book
- Fixed broken help link (bsc#1021648)
susemanager-schema:
- Fix error on channel delete with tokens (bsc#1024471)
- Add severity to updateinfo (bsc#1012365)
- Drop index before it gets re-created and use if exists for postgres (bsc#1021381)
susemanager-sls:
- Configure mine.update to submit a job return event (bsc#1022735)
- Disable spacewalksd and spacewalk-update-status when switching to salt registration (bsc#1020902)
- Fix timezone handling for rpm installtime (bsc#1017078)
susemanager-sync-data:
Client tools
salt:
- Fix invalid chars allowed for data IDs (bsc#1011304)
- Fix timezone: should be always in UTC (bsc#1017078)
- Fixes wrong "enabled" opts for yumnotify plugin
- Ssh-option parameter for salt-ssh command.
spacewalk-backend:
- Add incomplete_package_import option to speed reposync up
spacewalk-client-tools:
- Traditional registration: resolve /etc/hostname if not FQDN (bsc#1019360)
spacewalk-koan:
- Updated registry hostname for mgr subdomain
spacecmd:
spacewalksd:
- Use spacewalk-update-status only on registered systems (bsc#1015136)
Version 3.0.3
salt:
- Update to 2015.8.12
- Splitted off non-Linux and other external platform modules to 'salt-other' sub-package.
- Other bugfixes and enhancements. See upstream release notes for more details.
osad:
- Fix logfile option for osa-dispatcher (bsc#980752)
spacewalk-backend:
- Handle non-unique machine_id after migrate from 2.1 (bsc#1013002)
- Refer to scc.suse.com instead of bugzilla.novell.com in case of problem (bsc#967818)
- Fix: selection of primary interface (bsc#1009677)
- Spacewalk-backend.spec: add link to SUSE name of program (bsc#1009435)
- Reposync - assign orphaned vendor packages to the default org (bsc#995764)
remove non-used exception (bsc#986447, bsc#996609)
spacewalk-branding:
- Show kernel live patching info in 'system details overview' (fate#319519)
- Bugfix: differentiate writable/non-writable fields (bsc#868132)
- Fix checkbox icon align (bsc#966888)
- Use different symbols for collapsible sidebar items (bsc#967880)
- Use a brighter background color for legends in asides (bsc#967881)
- Update copyright year to 2016 (bsc#1010543)
spacewalk-certs-tools:
- Allow passing multiple GPG keys to mgr-bootstrap (bsc#989905)
spacewalk-java:
- Add support for live patching
- Initial support for executing actions in taskomatic
- Hide kernel patches in CVE Audit results when live patching is used (fate#319519)
- Show kernel live patching info in 'system details overview' (fate#319519)
- Escape act key names in bootstrap UI (bsc#1015967)
- Add tunneling to salt-ssh support
- Fix server checks to allow minions to perform a distupgrade (bsc#1013945)
- Change default sort to ascending for pending actions list
- Add reboot/restart type icon to relevant patch column in upgradable package lists
- Add system.getKernelLivePatch API method
- Update kernel version and other system info during package refresh (bsc#1013551)
- Fix ISE when sorting system notes list (bsc#979053)
- Fix checkbox icon align (bsc#966888)
- Fix fromdir for 3rd party server (bsc#998696)
- Display warning when JavaScript is disabled on all pages (bsc#987579)
- Rename SSM page titles for consistency (bsc#979623)
- Hide action chain schedule for salt systems also in SSM (bsc#1005008)
- Send ActionScheduled message for all saved actions (bsc#1005008)
- Fix plus/minus buttons in action chain list (bsc#1011344)
- Fix misleading message on system reboot schedule in SSM (bsc#1011817)
- Utilize HostPortValidator to validate bootstrap host (bsc#1011317)
- Increment 'earliest' date by a millisecond between chain actions (bsc#973226)
- Use human-parseable dates for server notes (bsc#969564)
- Respect order of validation constraints in XSD files (bsc#959573)
- Remove useless self-link on login page (bsc#963545)
- Use different symbols for collapsible sidebar items (bsc#967880)
- Fix SSM reboot action success messages (bsc#968935)
- Allow sorting on avisory name in errata lists (bsc#989703)
- Update 'view/modify file' action buttons text (bsc#1009102)
- Handle salt ssh sdterr message (bsc#1005927)
- ScheduleDetail.jsp: clarify button label (bsc#1010664)
- Bugfix: Prevent salt-master ERROR messages if formulas files are missing (bsc#1009004)
- Hide RHN disconnection option (bsc#1010049)
- Reword general config page text (bsc#1009982)
- Check and fix also the assigned repository while updating the channels (bsc#1007490)
- Match url including query param seperator to have a definitive end of the path component (bsc#1007490)
- Only show minions with sids available as links (bsc#1007261, bsc#970460)
- Delete previous Salt key on register event (bsc#1006119)
- Repository progress: decode another possible log info (bsc#972492)
- Add oes extensions to base products (bsc#1008480)
- Create "script.run" capability if it is not found (bsc#1008759)
- Avoid misleading expected check-in message (bsc#1009006)
spacewalk-setup:
- Preventing stderr output from systemctl calls (bsc#1015055)
- Removing non-used '/srv/susemanager/pillar'
- Removing '/usr/share/susemanager/pillar' path
- Retreiving SUMA static pillar data from ext_pillar (bsc#1010674)
spacewalk-utils:
- Use spacewalk 2.6 for openSUSE Leap 42.2
- Add channels for openSUSE Leap 42.2
spacewalk-web:
- Small adjustments on bootstrap page (bsc#1012761)
- Bootstrapping: ssh push for salt system feature preview
- Fix plus/minus buttons in action chain list (bsc#1011344)
- BugFix: message consistency attempting bootstrapping a minion (bsc#1005924)
- Only show minions with sids available as links (bsc#1007261, bsc#970460)
susemanager:
- Preventing stderr output from systemctl calls (bsc#1015055)
susemanager-docs_en:
- Live Patching support (fate#319519)
- Salt should support ssh-push (fate#320782)
- Over 100 documentation bugs and typos fixed
- Spacecmd documented in Advanced Topics book
susemanager-frontend-libs:
- Switch architecture to "noarch"
susemanager-schema:
susemanager-sls:
- Rename 'master' pillar to 'mgr_server'
- Add tunneling to salt-ssh support
- Provide SUMA static pillar data for unregistered minions (bsc#1015122)
- Implement fetching kernel live version as module (fate#319519)
- Removing '/usr/share/susemanager/pillar' path
- Retreiving SUMA static pillar data from ext_pillar (bsc#1010674)
- Bugfix: Prevent salt-master ERROR messages if formulas files are missing (bsc#1009004)
- Fallback to major os release version for cert names (bsc#1009749)
susemanager-sync-data:
Version 3.0.2
salt:
- Fix exit codes of sysv init script (bsc#999852)
- Including resolution parameters in the Zypper debug-solver call during a dry-run dist-upgrade.
- Fix Salt API crash via salt-ssh on empty roster (bsc#1004723)
- Adding 'dist-upgrade' support to zypper module (fate#320559)
- Acl.delfacl: fix position of -X option to setfacl (bsc#1004260)
- Fix generated shebang in scripts on SLES-ES 7 (bsc#1004047)
- Added reference for (bsc#986019).
spacecmd:
- Make exception class more generic and code fixes. (bsc#1003449)
- Handle exceptions raised by listChannels. (bsc#1003449)
- Alert if a non-unique package ID is detected.
other bugfixes:
- ISE Shown for Client(s) Bootstrapped Behind a Chain of Proxies (bsc#1000184)
- Clicking on a system in the webUI returns "Internal Server Error" (bsc#1001738)
- Internal error at Overview (System details) - SLE Branch Server (SLES 11 SP4) (bsc#1001784)
- internal server error on web_ui (bsc#1001923)
- Internal server error 500 trying to view system details of salt clients (bsc#1002678)
- Running system_details against a minion throws XmlRpcFault (bsc#1003449)
- SUSE Manager temporary executables should not be in /tmp (bsc#1004521)
- Task CVE Server Channels FAILED (bsc#1004717)
- When the susemanager-sls package is updated changes need to be propagated to minions (bsc#1004725)
- The function "state.apply" is running as PID 28378 (bsc#1004743)
- Server Showing ISE When Cancelling Pending Actions for Several Minions Which are Shut Down (bsc#1004745)
- Single-HTML missing new Salt Getting Started (Updated Packages) (bsc#1005102)
- Bootstrap hangs attempting to install corporate public CA cert (bsc#1005677)
- RHEL7: Bootstrap Script with Salt - Final Package Update Failed (bsc#1006188)
- mgr-setup failing when there are extra scripts executed in /etc/profile.d (bsc#1006718)
- Error upgrading from SLES for SAP 11 SP3 to SLES for SAP 12 SP1 through Autoyast and SUSE Manager (bsc#1006786)
- No connection path if the proxy's hostname is different than minion's master hostname (bsc#1006982)
- Channel repository - Last sync time button opens the rep sync log in the same browser window (bsc#1007459)
- Clients traditional bootstrap via proxy getting "Permission to access ... denied" (bsc#1008221)
- rhn.conf entry for taskomatic maxmemory has no effect (bsc#957653)
- Scheduling Patch Upgrade Results with Linking to System Instead of Pending Actions (bsc#971342)
- Failed actions on minions cannot be rescheduled (bsc#971622)
- Unable to add new suse-manager-tools (update and pool) - channels for SLEx12 SP1 (bsc#976184)
- System Subscribed to a Subset Sees all Config Channels as the Ones Subscribed To (bsc#979630)
- Patches page typo: errata -> patch(es) (bsc#981635)
- Running mgr-sync failing with internal server error (bsc#982347)
- "Duplicate Systems" misreporting (bsc#983347)
- minion bootstrapping: error when bootstrap SLE11 clients (bsc#990439)
- Typo in API docs (bsc#994848)
- Proxy Clients' Names Need to be Sorted (bsc#998348)
From GA until version 3.0.1
Patch 1542: salt
salt:
- Setting up OS grains for SLES-ES (SLES Expanded Support platform)
- Move salt home directory to /var/lib/salt (bsc#1002529)
- Generate Salt Thin with configured extra modules (bsc#990439)
- Prevent pkg.install failure for expired keys (bsc#996455)
- Required D-Bus and generating machine ID
- Fix python-jinja2 requirements in rhel
- Fix pkg.installed refresh repo failure (bsc#993549)
- Fix salt.states.pkgrepo.management no change failure (bsc#990440)
- Prevent snapper module crash on load if no DBus is
available in the system (bsc#993039)
- Prevent continuous restart, if a dependency wasn't installed
(bsc#991048)
- Fix beacon list to include all beacons being process
- Run salt-api as user salt like the master (bsc#990029)
Patch 1533: cobbler
cobbler:
- Enabling PXE grub2 support for PowerPC (bsc#986978)
Patch 1539: SUSE Manager Server
pxe-default-image:
- Rebuild with latest OS fixes
rhnlib:
- Add function aliases for backward compatibility (bsc#998185)
smdba:
- Fix recovery.conf permissions and ownership for latest PostgreSQL
(bsc#1002231)
spacewalk-backend:
- Fix for non-integer IDs for bugzilla bug
- Silently ignore non-existing errata severity label on errata import,
remove non-used exception (bsc#986447)
- Make suseLib usable on a proxy
spacewalk-branding:
- Support Formulas in SUSE Manager
- SPMigration: add multi-target-selection step in front of the wizard
- Handle minion down and job not found when canceling jobs on minions
(bsc#993304)
(bsc#994623)
- Rename Errata to Patches/Updates in system details page (bsc#979476)
- Change btn-primary border color to @suse-green-dark (bsc#967894)
- Re-title page as "Managed Systems" (bsc#981278)
- Rename "States Catalog" to "State Catalog" in UI
spacewalk-certs-tools:
- Fix traditional bootstrap for RHEL clients (bsc#1003123)
- Added the bootstrap repo for RHEL minions when using the
bootstrap.sh script (bsc#1001361)
- Use init.d where systemd is not available
- Salt: do not up2date/remote-mgmt/disable local repo
- Only use the first activation key for minions
- Add `--salt` option to mgr-bootstrap command to create a bootstrap
script which install and configure salt
- Terminate registration if hosts aren't found in nsswitch config (bsc#992565)
- Check only if all required packages are installed (bsc#992987)
spacewalk-client-tools:
- Logging message in case of malformed XML file
- Prevent crashes if machine-id is None (bsc#994619)
- Print invalid package name and replace the invalid character
- Ignore packages with not UTF-8 characters in name, version and release
(bsc#990738)
spacewalk-config:
spacewalk-java:
- Hide all formula tabs as long as there are no formulas installed
- Support formulas in SUSE Manager
- SPMigration UI: list not synced channels in the tooltip
- SPMigration: add multi-target-selection step in front of the wizard
- Sync product extensions
- Handle JsonException when sls with error (bsc#987835)
- Many fixes for onboarding minions
- Handle hardware refresh like any other action
- Clone Severity from an errata (bsc#1000666)
- Do not check for password type on autoyast files (bsc#999304)
- Handle minion down and job not found when canceling jobs on minions
(bsc#993304, bsc#994623)
- Clear hibernate session after entity type change to fix
NonUniqueObjectException (bsc#997243)
- Remove previous client capabilities on traditional->minion
reactivation (bsc#997243)
- Enables pkgset beacon to work in RHEL systems
- Support Open Enterprise Server 11 SP3 (bsc#988303)
- Fix broken merge (bsc#987864)
- Use raw package install for non zypper systems
- Redirect user to a meaningful page after requesting details of non-existing Action Chain (bsc#973198)
- Setup Salt Minion before packages are taken
- Support Salt on RedHat like systems
- Fix race condition during auto errata update (bsc#969790)
- API requests should not be redirected to login
- Introduce Spark router conventions
- Add server endpoint for TaskoTop web UI page
- Change EmptyString warning to debug log level to not spam the logs (bsc#989498)
- BugFix: use user preferences parameters as default page size (bsc#980678)
- Add proxy detection during registration and pillar generation
- Adding default channel for minion (bsc#986019)
- Fix NoClassDefFoundError (bsc#988196)
- Call cobbler sync in profile edit only if requested (bsc#991440)
- No explicite cobbler sync needed (bsc#991440)
- Call all sync_* functions at minion start event
- Add beacon configuration for pkgset (bsc#971372)
spacewalk-setup:
- Commented on file_roots/pillar_roots
- Added formula directories and formulas.sls to setup script
- Master_tops module provides static top information
- Merging top.sls files in base env (bsc#986770)
spacewalk-web:
- Support formulas in SUSE Manager
- Switched SUSE Manager version to 3.0.1
- Introduce Spark router conventions
- Disable strict host key checking per default
- Rename "States Catalog" to "State Catalog" in UI
- Add TaskoTop to UI
- BugFix: use user preferences parameters as default page size
(bsc#980678)
- Unified table version
susemanager:
- Support creating bootstrap repos for SLE12 SP2 family (bsc#969889)
- Use systemctl instead of insserv for enabling postgresql
- Quietly enable systemd services and do not pollute logfiles
- Enable postgresql via systemctl; it's already adapted to systemd
(bsc#995314)
- Check the integrity of an archive before the import actually starts
- Mgr-create-bootstrap-repo: Support to append additional packages
names via commandline
- Mgr-create-bootstrap-repo: Collect errors and print them at the end
and copy all found packages
- Add salt bootstrap repo data for RES6 and RES7
- Added dependencies for JeOS SLE12
- Add dependancy packages for JeOS (fate#320809)
- Enable and start postfix on setup (bsc#979664)
susemanager-docs_en:
- Getting Started with SALT section missing in documentation (bsc#998542)
- Getting started with Salt only shows headers but no content (bsc#990789)
- Salt GS Single HTML missing on suse.com/documentation (bsc#998329)
- Constructing the Sandbox with JeOS image (bsc#986796)
- Added Comments for users to /etc/salt/master.d/susemanager.conf for file_roots, pillar_roots, and external pillar (bsc#984794)
- DOCREVIEW: Fixed a large number of DocReview Reported Comments(Internal Documentation Testing Bugs)
- ALL: Added Doc Update Sections to each book
- GETTING STARTED: Salt Getting Started Content
- BEST PRACTICE: Additional Resources YAML, jinja, and Salt
- BEST PRACTICE: Backup Chapter Updates
- BEST PRACTICE: Minor Product Comparison Updates
- BEST PRACTICE: Added a Common Administration Tasks Section
- BEST PRACTICE: Added Additional Tips to Troubleshooting Chapter
- REFERENCE: Added New SP Migration Features (Skipping a Service pack)
- ADVANCED TOPICS: Added Salt Proxy Quickstart Chapter
- ADVANCED TOPICS: Getting Started with Icinga Chapter
susemanager-schema:
- Add table for storing product extensions
- Add severity_id to rhnErrataTmp for consistency with rhnErrata
(bsc#1000666)
- Fixing suseMinionInfo.sql to make 'osFamily' NULLABLE
- Delete rhnContentSourceFilter before rhnContentSource (bsc#998380)
- Avoid a deadlock when deleting a server (bsc#969790)
susemanager-sls:
- Fixed bug with numbers in FormulaForm and improved ext_pillar script
- Added formula directories and formulas.sls to setup script
- External pillar script now also includes formula pillars
- Rename symlinks according to changed 'os' grain for Expanded Support
- Adding certs states for RHEL minion based on SLES-ES
- Rename udevdb scsi info json key
- Add support for mapping mainframe sysinfo
- Implement isX86() in jinja more correctly
- Initial support for querying and saving DMI info
- Add support for mapping the devices
- Actually handle incoming hardware details
- Initial version of the hardware.profileupdate sls
- Added pkgset beacon support in susemanager yum plugin
- Trust also RES GPG key on all RedHat minions
- Trust GPG keys for SUSE Manager Tools channel on RES
- Configure bootstrap repository for RES
- Always enable salt-minion service while bootstrapping (bsc#990202)
- CentOS cert state symlinks and fixes
- States for installing certificate on redhat minions
- Pkg.list_products only on Suse
- Yum plugin to add jwt token as http header
- Generate SLE 12 bootstrap repo path correctly (bsc#994578)
- Merging top.sls files in base env (bsc#986770)
- Watch files instead of require
susemanager-sync-data:
- Add support for Open Enterprise Server 11 SP3 (bsc#988303)
- Add Support for SLE12 SP2 family (bsc#969889)
- AMD repos removed because of security reasons
- Add SLES12-GA-LTSS-X86 and SLES12-GA-LTSS-Z channel families
(bsc#994305)
python-certifi:
- Added to fix salt-ssh on SLE11 target machine (bsc#990439)
Patch 1216: SUSE Manager Server
This update fixes the following issues with cobbler:
- Convert bootoption "text" into "textmode=1" for SUSE systems.
(bsc#984998)
Patch 1217: SUSE Manager Server 3.0
This update for SUSE Manager Server 3.0 includes the following new features:
- Enable Oracle database backend. (fate#320213)
This update fixes the following issues:
jabberd:
- Allow for up to 8k client connections. (bsc#950184)
- Revert configuration files to %config(noreplace). (bsc#988378)
quartz:
- Adjust ojdbc requirements needed to enable support for the Oracle database.
salt:
- pkg.list_products on "registerrelease" and "productline" returns boolean.False
if empty. (bsc#989193)
- Rewrite Minion ID generation. (bsc#967803)
- Fix behavior for SUSE OS grains. (bsc#970669)
- Salt os_family does not detect SLES for SAP. (bsc#983017)
- Move log message from INFO to DEBUG. (bsc#985661)
- Fix salt --summary to count not responding minions correctly. (bsc#972311)
- Fix memory leak on custom execution module scheduled jobs. (bsc#983512)
- Fix groupadd module for SLES 11 systems. (bsc#978150)
- Fix pkgrepo.managed gpgkey argument. (bsc#979448)
smdba:
- Use backup directory temporary space on restore. (bsc#986955)
- Prevent access uninitialized variable.
- Return values from the backup locator.
- Do not proceed if backups weren't enabled.
- With PostgreSQL, compute space-overview with the size(available and used)
of the partition disk.
- Compute the DB usage percentage on the amount of the partition instead of
the remaining space. (bsc#977888)
spacewalk:
- Require only oracle-lib-compat. (fate#320213)
spacewalk-backend:
- Copy the subscription-matcher directory instead of the content.
- Machine_info capability and check for client tool compatibility with SUSE
Manager 2.1.
spacewalk-branding:
- Hide scrollbar when it's not needed.
- Integrate bootstrapping UI with System Overview.
- Fix warning string. (bsc#983826)
- Fix message about debuginfo packages. (bsc#972156)
spacewalk-certs-tools:
- Correctly update the trust store on SLE 11.
- Re-add lost dependency of spacewalk-base-minimal-config to
spacewalk-certs-tools. (bsc#984418)
- Fix mgr-ssh-push-init with proxy and sudo. (bsc#982562)
spacewalk-client-tools:
- Fix syntax error preventing reading of HW data correctly. (bsc#984622)
- Machine_info capability and check for client tool compatibility with SUSE
Manager 2.1.
spacewalk-java:
- Integrate bootstrapping with System Overview.
- Support SP Migration for OES 2015 to 2015 SP1.
- Fix for minion with multiple interfaces. (bsc#985707)
- Fix HW Refresh duplicate insert. (bsc#971622)
- No addon entitlements allowed for Foreign and Bootstrap systems. (bsc#983826)
- Disable checkboxes for foreign and bootstrap systems in system types page.
(bsc#983826)
- Tell linuxrc that self_update is an user option so that it'll pass it to
AutoYaST but won't process it further.
- Disable YaST self update for new auto-installation trees for SLE.
- Remove misleading links from action chain page. (bsc#983297)
- Support OES 2015. (bsc#934560)
- Align reboot behavior of salt and traditional clients. (bsc#975534)
- Report the state of virtual guests from virtual host manager as 'unknown'.
(bsc#983344)
- Add taskomatic job to clean up minion actions.
- Replace ZypperEvent with default beacon event.
- Enable minions to be worked with SSM only on available features.
- Use the IP address when doing ssh push via proxy. (bsc#940927)
- Don't allow URLs that only differ on the authorization token. (bsc#976184)
- Fix typo in Systems column. (bsc#983916)
- Salt HW reg: Ignore virtual SCSI devices. (bsc#962588)
spacewalk-search:
- Round CPU MHz number correctly to a long value. (bsc#979745)
spacewalk-setup:
- Change path to Oracle LD configuration file.
spacewalk-web:
- Recompute window dimensions when content changes. (bsc#971559)
- Fix aside column height computation. (bsc#969834)
susemanager:
- Allow migration from external Oracle DB to local PostgreSQL DB. (bsc#987795)
- Make sure migration with external database works for DB names other than
susemanager. (bsc#987870)
- Create nCoW subvolume for /var/cache/rhn on btrfs. (bsc#987614)
- Use performance optimized database configuration also for migration from
Oracle to PostgreSQL. (bsc#987550)
- Check for uppercase characters in hostname. (bsc#980482)
- Add support for migrating SUMA 2.1 to SUMA 3 with external Oracle DB.
- Forbid more special characters for database and certificate passwords. (bsc#983295)
- Do not create swapfile when root file system is on btrfs. (bsc#977804)
susemanager-docs_en:
- Fix link from Best Practices to Advanced Topics (proxy configuration). (bsc#988573)
- Advanced Topics Guide: Improve proxy documentation. (bsc#982373)
- Fix Proxy port number. (bsc#981378)
susemanager-schema:
- Add missing power_management feature for bootstrap_entitlement systems.
- Fix HW Refresh duplicate insert. (bsc#971622)
- Add taskomatic job to clean up minion actions.
- Provide separate migration scripts for Oracle.
- Remove duplicates from rhnChannelContentSource. (bsc#976184)
susemanager-sls:
- Update trust store when multiple certificates in one file are available on SLE11.
- Update CA certificates only when they have changed.
- Assume no pillar data if the yml file for the minion does not exist. (bsc#980354)
- Add distributable pkgset beacon for RPM database notifications.
susemanager-sync-data:
- Support SLES 12 LTSS. (bsc#979288)
- Support SP Migration for OES 2015 to 2015 SP1.
- Add requires to spacewalk-java-lib with OES support.
- Add support for OES 2015 and OES 2015 SP1. (bsc#934560)
Patch 1214: salt
This update for salt fixes the following issues:
- Fix broken inspector. (bsc#989798)
- lvm.vg_present does not recognize PV with certain LVM filter
settings. (bsc#988506)
- pkg.list_products on "registerrelease" and "productline"
returns boolean.False if empty. (bsc#989193)
- Fixed behavior for SUSE OS grains. (bsc#970669)
- Salt os_family does not detect SLES for SAP. (bsc#983017)
- Move log message from INFO to DEBUG. (bsc#985661)
- Fix salt --summary to count not responding minions correctly.
(bsc#972311)
- Fix memory leak on custom execution module scheduled jobs. (bsc#983512)
- Fix groupadd module for sles11 systems. (bsc#978150)
- Fix pkgrepo.managed gpgkey argument doesn't work. (bsc#979448)
- Package checksum validation for zypper pkg.download.
- Check if a job has executed and returned successfully.
Patch 986: SUSE Manager Server 3.0
This update fixes the following issues:
salt:
- Remove option -f from startproc. (bsc#975733)
- Changed Zypper's plugin. Added Unit test and related to that
data. (bsc#980313)
- Zypper plugin: Alter the generated event name on package set
change.
- Salt-proxy .service file created. (bsc#975306)
- Prevent salt-proxy test.ping crash. (bsc#975303)
- Fix shared directories ownership issues.
- Add Zypper plugin to generate an event,
once Zypper is used outside the Salt infrastructure
demand. (bsc#971372)
- Restore boolean values from the repo configuration.
- Fix priority attribute. (bsc#978833)
- Unblock-Zypper. (bsc#976148)
- Modify-environment. (bsc#971372)
- Prevent crash if pygit2 package is requesting re-compilation.
- Align OS grains from older SLES with current one. (bsc#975757)
- Bugfix: salt-key crashes if tries to generate keys
to the directory w/o write access. (bsc#969320)
spacecmd:
- Make spacecmd createRepo compatible with SUSE Manager 2.1 API.
(bsc#977264)
spacewalk-backend:
- Spacewalk-repo-sync - Improved date handling. (bsc#975161)
- Better error message for system that is already registered as minion.
- Only trigger virtualization notification on server save when the
virtualization data is not falsy. (bsc#975120)
- Fix GPG bad signature detection and improve error messages. (bsc#979313)
- Send and save machine_id on traditional registration.
- Vendor channels may have no repo assigned. (bsc#977781)
- Do not crash now that multiple urls are passed. (bsc#970951)
- Add machine info capability.
spacewalk-branding:
- Add missing label definition for task.status.gatherer and task.status.matcher.
spacewalk-client-tools:
- Send and save machine_id on traditional registration.
- Send machine info only if server has machine info capability.
spacewalk-java:
- Fix NoSuchFileException at setup time when there are no orgs yet.
- Add details to history event.
- Only require lifecycle entitlements for systems with a SUSE base
product, adjust test.
- mgr-sync: Use bulk channel reposync.
- Enhance list of channel families for SUSE Manager Server.
- Reactivate traditional server as minion on registration.
- taskomaticApi: Schedule bulk reposyncs in bulk.
- Show machine_id in the system->hardware tab.
- Change missing machine_id UI warning message.
- Make message handling thread pool size configurable.
- Support for concurrent handling of checkin events.
- Add variable to make cobbler sync optional.
- Add Virtualization Groups to the input JSON data for the matcher.
- Backward synchronization for cobbler kernel options during CobblerSyncTask.
- Support for multithreaded message handling.
- BugFix: Redirect migration with no Org to the first step. (bsc#969529)
- Trigger errata cache job on changed channel assignments.
- Under high load, the service wrapper may incorrectly interpret the inability
to get a response in time from taskomatic and kill it. (bsc#962253)
- Make cobbler commands work from taskomatik.
- Don't modify request map when rendering alphabar, since it may fail depending
on the implementation of ServletRequest. (bsc#978253)
- Require refresh channels before pkg states. (bsc#975424)
- Manager-3.0: Reschedule failed actions. (bsc#971622)
- Exit if there are exceptions on startup to let tanuki restart taskomatic.
- BugFix: Keep trace of the parent channel selected during 'Create Channel'.
(bsc#967865)
- Remote commands: Filter minions by permissions and not just by org.
(bsc#978050)
- ProductSyncManager: when scheduling reposyncs, use bulk mode through
TaskomaticApi. (bsc#961002)
- Call cobbler sync after cobbler command is finished. (bsc#966890)
- Use pillar and static states to install/remove packages. (bsc#975424)
- Faster event processing.
- Determine the action status more correctly.
- Fix error msg if /srv/susemanager/salt/custom does not exist. (bsc#978182)
- Recreate upgrade paths on every refresh. (bsc#978166)
- Prevent non org-admin user accept/reject/delete a minion. (bsc#979686)
- Regenerate salt files. (bsc#974302)
- Log permissions problems on channel access while SP migration. (bsc#970223)
- Support SLE-POS 11 SP3 as addon for SLES 11 SP4. (bsc#976194)
- Delete salt key when system is deleted. (bsc#971606)
- Improve the output of remote command actions.
- No package list refresh after channel assignment change.
- Force a package list refresh after the onboarding.
- More "info" level logging about action executors.
- Log out the duration of package profile updates.
- Execute package profile update as a state.apply. (bsc#973365)
- Adjust autoinst file error detecting heuristics to the newer format.
(bsc#974119)
- Use queue=true for all calls to state.apply. (bsc#980556)
- Make postgresql a weak systemd dependency.
- Filter osad from the activation key extra packages. (bsc#975135)
- Ensure SCC data files are saved on disk as tomcat/root with 644 permissions.
- Bugfix: Add management product ids to servers without products.
- Double the backslashes when reading the config files from java. (bsc#958923)
- Fix setting cpu flags on hw refresh. (bsc#975354)
spacewalk-utils:
- taskotop: A utility to monitor what Taskomatic is doing.
spacewalk-web:
- Disable action buttons to add/reject/delete minions if user is non org-admin.
- Handle and show error message when session expires in remote-command page.
(bsc#974891)
- Enable Run button in remote-command page only if a preview exists.
- Show both Preview and Run buttons to improve usability of remote
command feature. (bsc#974288)
susemanager:
- Fix help output for mgr-setup; no longer migration from RHN. (bsc#975746)
- For SLES11 SP2 and lower we do not support salt. (bsc#978788)
- mgr-sync: Use bulk channel reposync. (bsc#961002)
- Show optional channels in mgr-sync add channel and add an option to hide
optional channels. (bsc#977579)
- Add more packages to bootstrap repo. (bsc#971237)
susemanager-docs_en:
susemanager-schema:
- Move machine_id from suseMinionInfo to rhnServer table.
- Fix removing nonlinux entitlement during migration.
- Fix migrating and cleanup system types during migration. (bsc#977465)
- Enable ftr_package_refresh for minions.
susemanager-sls:
- Require refresh channels before pkg states. (bsc#975424)
- Use pillar and static states to install/remove packages. (bsc#975424)
susemanager-sync-data:
- Support SUSE Enterprise Storage 3. (bsc#966441)
- Support SLE-Module-Certifications12. (bsc#976203)
- Support SLE-POS 11 SP3 as addon for SLES 11 SP4. (bsc#976194)
- Handle product class changes for SUSE Manager Server.
susemanager-tftpsync:
- Rename change_tftpd_proxies.py to sync_post_tftpd_proxies.py and change
trigger type. (bsc#966890)
Patch 984: SUSE Manager Server, Proxy and Client Tools
This update fixes the following issues for the SUSE Manager Server 3.0 and Client Tools:
zypp-plugin-spacewalk:
- Fix failover for multiple URLs per repo. (bsc#964932)
The following issues for SUSE Manager Proxy 3.0 and Client Tools have been fixed:
cobbler:
- Remove grubby-compat because perl-Bootloader gets dropped.
- Disabling 'get-loaders' command and 'check' fixed. (bsc#973418)
- Add logrotate file for cobbler. (bsc#976826)
Additionally the following issues for the SUSE Linux Enterprise 12 Clienttools have been fixed:
salt:
- Remove option -f from startproc. (bsc#975733)
- Changed Zypper's plugin. Added Unit test and related to that data. (bsc#980313)
- Zypper plugin: alter the generated event name on package set change.
- Fix file ownership on master keys and cache directories during upgrade. (handles upgrading from salt 2014, where the daemon ran as root, to 2015 where it runs as the salt user, bsc#979676)
- Salt-proxy .service file created. (bsc#975306)
- Prevent salt-proxy test.ping crash. (bsc#975303)
- Fix shared directories ownership issues.
- Add Zypper plugin to generate an event, once Zypper is used outside the Salt infrastructure demand. (bsc#971372)
- Restore boolean values from the repo configuration
- Fix priority attribute (bsc#978833)
- Unblock-Zypper. (bsc#976148)
- Modify-environment. (bsc#971372)
- Prevent crash if pygit2 package is requesting re-compilation.
- Align OS grains from older SLES with current one. (bsc#975757)
- Bugfix: salt-key crashes if tries to generate keys to the directory w/o write access. (bsc#969320)
spacecmd:
- Make spacecmd createRepo compatible with SUSE Manager 2.1 API.
(bsc#977264)
spacewalk-backend:
- Better error message for system that is already registered as minion.
- Fix GPG bad signature detection and improve error messages. (bsc#979313)
- Send and save machine_id on traditional registration.
- Add machine info capability
spacewalk-client-tools:
- Send and save machine_id on traditional registration.
- Send machine info only if server has machine info capability.
Patch 822: salt
This update for salt contains the following:
- Fix file ownership on master keys and cache directories during upgrade
(handles upgrading from salt 2014, where the daemon ran as root, to 2015
where it runs as the salt user, bsc#979676).
New features since SUSE Manager Server 2.1
Spacewalk 2.4
SUSE Manager 3 Server is based on Spacewalk 2.4 with many new features added by SUSE.
New documentation
The SUSE Manager 3 documentation was rewritten from scratch and is not
derived from the upstream Spacewalk documentation any more.
SUSE Manager 3 comes with four manuals
- Getting Started
Covering the initial steps until a first client registrations.
- Best Practices
Collection of best practices to adapt SUSE Manager to your needs.
- Advanced Topics
Documenting specific environments like SUSE Manager on z Systems or
scaling with SUSE Manager Proxy.
- Reference Manual
Explaining the web interface. This is also cross-referenced from the
SUSE Manager Server UI.
All manuals will see regular updates and will be available online at
www.suse.com.
Subscription Matching
SUSE Manager 3 Server removed all entitlement counting code and
instead ships with subscription matching abilities.
This is implemented in two parts:
- a subscription matcher
- a virtual host gatherer
The subscription matcher uses the subscription information from SUSE Customer Center and automatically matches those to known hosts.
A pre-requirement to match subscriptions to systems is to have complete information about which virtual system runs on which virtual host. See topology awareness below
on how to have SUSE Manager 3 Server gather this information.
The result is stored in /var/lib/spacewalk/subscription-matcher
as CSV files. A web UI will be added later.
See the SUSE Manager Reference Manual for further details about
subscription matching.
Topology awareness
The tool virtual-host-gatherer
is used to collect data about virtual machines running on virtual hosts.
This creates a topology mesh used by the subscription matcher.
See the SUSE Manager Reference Manual for further details about virtual-host-gatherer
Configuration management
Configuration management is about to see the biggest impact when moving from SUSE Manager 2.1 Server to SUSE Manager 3 Server as it changes from
an imperative to a declarative model.
Instead of "install package X at this time", it's now "ensure package X is installed from this time on".
SUSE Manager 3 Server uses Salt from SaltStack Inc. as the client-side agent.
See the SaltStack walk-through for a quick introduction to Salt.
The traditional client stack (aka rhnsd
) is still fully supported but deprecated. You do not need to make any changes to existing clients when
moving from SUSE Manager 2.1 Server to SUSE Manager 3 Server.
Salt integration
SUSE Manager 3 Server comes with a preconfigured salt-master
based on the official 2015.8.7 release.
Any system able to run a salt-minion
can be connected to SUSE Manager 3 Server as a managed client.
Initially only SLES 11 SP4, SLES 12 GA, and SLES 12 SP1 clients are supported.
Salt vs. Traditional clients
Salt API support
SUSE Manager 3 Server provides and supports the Salt API as-is. This
API will follow upstream Salt and might change at any time as Salt
gets updated.
Package downloads changed
Package downloads are now using a new implementation which should have
far less overhead for the SUSE Manager Server.
Package downloads itself will not be faster, but should scale better. Feedback welcome !
Monitoring dropped
The monitoring component of SUSE Manager Server has been dropped. Instead a lightweight integration with Icinga is planned.
A fully supported Icinga package for SLES 12 is available via the SUSE
Manager Tools channel.
No support for Oracle database
SUSE Manager 3 Server does not initally support Oracle as a database backend.
Existing SUSE Manager 2.1 Server deployments with Oracle should be migrated to PostgreSQL.
PostgreSQL has similar functionality and performance characteristics as Oracle but uses dramatically fewer resources.
Going forward, we will focus on PostgreSQL for all scalability and performance improvements.
Extension for SLES 12 SP2
SUSE Manager is no longer an appliance but now an extension on top of
SLES 12 SP2 x86_64 or s390x and available via
SUSE Customer Center
This means you can set up the base operating system according to your needs and requirements. SUSE Manager 3 will add all required packages automatically during installation.
All storage setup (esp. for /var/lib/pgsql
and /var/spacewalk
) should be done before installation of SUSE Manager 3 Server.
Other changes since 2.1
- supportconfig confidentiality disclaimer
When handling Service Requests, supporters and engineers may ask for
the output of the supportconfig tool from the SUSE Manager Server or
clients.
The standard disclaimer applies:
Detailed system information and logs are collected and organized in a
manner that helps reduce service request resolution times.
Private system information can be disclosed when using this tool.
If this is a concern, please prune private data from the log files.
Several startup options are available to exclude more sensitive
information. Supportconfig data is used only for diagnostic purposes
and is considered confidential information.
In the SUSE Manager Server's case, please be aware that
supportconfig's output will contain information about clients as well.
In particular, debug data for the Subscription Matching feature
contain a list of the registered clients, their installed product and
some minimal hardware information (CPU socket count). It also contains
a copy of subscription data available from the SUSE Customer Center.
If this is a concern, please prune data in the subscription-matcher
directory in the spacewalk-debug tarball.
- Transparent huge pages must not be enabled
PostgreSQL might slow down if
transparent huge pages
are enabled.
See here
for background information and
this blog post
on how to disable transparent huge pages.
rhn-entitlement-report
dropped
The entitlement handling is replaced by the subscription matcher, which much better reflects business relations.
- osa-dispatcher
notify_threshold
changed the default value
In SUSE Manager 2.1 the default was unlimited
while in SUSE Manager 3 the default is 100
.
- FreeIPA disabled.
SUSE Manager 2.1 inherited a FreeIPA connector which was dropped for SUSE Manager 3 Server.
- Custom software channels can no longer have names or labels that are used by SUSE.
See list of reserved names and list of reserved labels
- Link behavior, links to manager host will open in same tab, links to foreign host will open in new tab.
Reference
postgrestcl
dropped
removes spacewalk-report audit-users
, spacewalk-report audit-servers
, and spacewalk-report audit-server-groups
- read-only user (from upstream)
- Creation of first (admin) user and first organisation is now in one single web page
- this immediately triggers a refresh of the product database.
Upgrade of Inter Server Sync setups
In ISS (Inter Server Sync) setups, upgrade all slaves to 3 before upgrading the master.
Supportability of embedded software components
All software components embedded into SUSE Manager, like Cobbler for PXE booting, are only supported in the context of SUSE Manager. Stand-alone usage is not supported.
Red Hat Channels
Managing Red Hat clients requires availability of appropriate Red Hat
packages. These are not available through the SUSE Customer Center (SCC) but must be provided by other means, e.g. from a retired Red Hat Satellite installation.
Support for SLES 10 based systems
The SUSE Manager client stack for SLES10 based systems is identical to the one used on SLES11 based systems. SLES 10 systems managed by SUSE Manager will have the ZENworks Managemen Daemon (ZMD) and the rug command line tool removed.
Salt is not available for SLES 10.
SUSE Manager Proxy versions
SUSE Manager 3 Server can work with version 2.1 of SUSE Manager Proxy.
spacewalk-utils
spacewalk-utils, a packaged set of command line tools, continues to be L1* supported only - with some exceptions. Any of these commands needs expertise and can break your system. However, we consider these tools valuable enough to be included, but not fully supported.
* L1 (Problem determination, which means technical support designed to provide compatibility information, usage support, on-going maintenance, information gathering and basic troubleshooting using available documentation.)
The following tools of spacewalk-utils are fully supported:
- spacewalk-clone-by-date
- spacewalk-sync-setup
- spacewalk-manage-channel-lifecycle
Known bugs
- System Set Manager (SSM) is not yet supported for Salt clients.
- Service Pack Migration is not yet supported for Salt clients.
- Audit log is partially incomplete and not covering all web actions.
Upstream changes since SUSE Manager 2.1
Note: Changes from the upstream project are listed here as-is.
There's no guarantee that all of them are actually available in SUSE
Manager 3 Server.
Spacewalk 2.4
- Spacewalk now supported on Fedora 22
- Spacewalk supports Fedora 22 clients
- New package
dnf-plugin-spacewalk
- Organization-specific configuration moved to Organization Admin menu
- Satellite admins can allow/disallow Organization admins to manage this configuration
- Passwords are not sent to user in clear text anymore
- Continued UI polish and improvements, including standardizing on Patternfly
- Plenty of small enhancements and fixes
- Added support for Catalan and Portuguese translations from Zanata project
- Fedora and RHEL/CentOS 7 Cobbler provisioning fixes
- Removed checksum type None for software channels
- Fixed
system.listUngroupedSystems
API call
- Repository sync page improved to show more details about last sync
- Repository sync option for syncing latest packages only added
- Osa ping API calls added
- Added compliancy indicator icon on Scap results list page
- New API calls:
org.isErrataEmailNotifsForOrg
org.isOrgConfigManagedByOrgAdmin
org.setErrataEmailNotifsForOrg
org.setOrgConfigManagedByOrgAdmin
system.getOsaPing
system.sendOsaPing
Spacewalk 2.3
- Spacewalk now supported on RHEL7/CentOS7/Fedora21
- Spacewalk supports Fedora21 clients
- Improved Proxy caching of yum meta-data with addition of
If-Modified-Since
header support
- Continued UI polish and improvements, including standardizing on Patternfly
- Improved and simplified codebase by:
- Removing all Monitoring-related code
- Removing all Solaris support
- Completing the port of the web-UI from Perl to Java
- Cleaning up and removing large chunks of orphaned code
- Plenty of small enhancements and fixes
spacecmd
enhancements:
softwarechannel_errata
configchannel_sync
softwarechannel_sync
softwarechannel_removesyncschedule
spacewalk-clone-by-date
enhancements:
- added a
--dry-run
option
- improved dependency resolution (see 1123468)
- removed asynchronous background cloning - it conflicts (badly) with dependency resolution, see 1207846
spacewalk-reports
additions:
config-files
config-files-latest
- additional data to
scap-scan
report
- Added support for xz-compressed repositories
- Added Korea to list of timezones
aarch64
support
- New API calls:
activationkey.clone
configchannel.deployAllSystems
kickstart.listKickstartableTreeChannels
kickstart.profile.getAvailableRepositories
kickstart.profile.getRepositories
kickstart.profile.getVirtualizationType
kickstart.profile.setRepositories
kickstart.profile.setVirtualizationType
system.unentitle
user.setErrataNotifications
- Removed API calls:
proxy.createMonitoringScout
satellite.isMonitoringEnabled
satellite.isMonitoringEnabledBySystemId
Spacewalk 2.2
- Spacewalk supports RHEL 7 / CentOS 7 clients
- Read-only API user
- support for user able to retrieve data via API without the rights to make changes (e.g. for auditing purposes)
- Action chaining
- Remote power management
- Support for FIPS 140-2
- Spacewalk Proxy content pre-caching
- Plenty of small enhancements and fixes
- New API calls:
actionchain.addConfigurationDeployment
actionchain.addPackageInstall
actionchain.addPackageRemoval
actionchain.addPackageUpgrade
actionchain.addPackageVerify
actionchain.addScriptRun
actionchain.addSystemReboot
actionchain.createChain
actionchain.deleteChain
actionchain.listChainActions
actionchain.listChains
actionchain.removeAction
actionchain.renameChain
actionchain.scheduleChain
channel.software.syncRepo
kickstart.profile.software.getSoftwareDetails
kickstart.profile.software.setSoftwareDetails
systemgroup.listSystemsMinimal
system.listSystemEvents
system.provisioning.snapshot.rollbackToSnapshot
system.provisioning.snapshot.rollbackToTag
system.scheduleCertificateUpdate
system.schedulePackageInstall
user.external.createExternalGroupToRoleMap
user.external.createExternalGroupToSystemGroupMap
user.external.deleteExternalGroupToRoleMap
user.external.deleteExternalGroupToSystemGroupMap
user.external.getDefaultOrg
user.external.getExternalGroupToRoleMap
user.external.getExternalGroupToSystemGroupMap
user.external.getKeepTemporaryRoles
user.external.getUseOrgUnit
user.external.listExternalGroupToRoleMaps
user.external.listExternalGroupToSystemGroupMaps
user.external.setDefaultOrg
user.external.setExternalGroupRoles
user.external.setExternalGroupSystemGroups
user.external.setKeepTemporaryRoles
user.external.setUseOrgUnit
user.getCreateDefaultSystemGroup
user.setCreateDefaultSystemGroup
user.setReadOnly
Providing feedback to our products
In case of encountering a bug please report it through your support contact.
Documentation and other information
http://www.suse.com/products/suse-manager/technical-information/contains additional or updated documentation for SUSE Manager Server 2.1.
These Release Notes are available online at http://www.suse.com/documentation/releasenotes.
Further information about SUSE Manager is available at http://wiki.novell.com/index.php/SUSE_Manager
Visit http://www.suse.com for the latest Linux product news from SUSE and http://www.suse.com/download-linux/source-code.html for additional information on the source code of SUSE Linux Enterprise products.
Legal Notices
SUSE Linux GmbH
Maxfeldstr. 5
D-90409 Nürnberg
Tel: +49 (0)911 740 53 - 0
Email: feedback@suse.com
Registrierung/Registration Number: HRB 21284 AG Nürnberg
Geschäftsführer/Managing Director: Jeff Hawn, Jennifer Guild, Felix Imendörffer
Steuernummer/Sales Tax ID: DE 192 167 791
Erfüllungsort/Legal Venue: Nürnberg
SUSE makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, SUSE reserves the right to revise this publication and to make changes to its content, at any time, without the obligation to notify any person or entity of such revisions or changes.
Further, SUSE makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, SUSE reserves the right to make changes to any and all parts of SUSE software, at any time, without any obligation to notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classifications to export, re-export, or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical/biological weaponry end uses. Please refer to http://www.novell.com/company/policies/trade_services/ for more information on exporting SUSE software. SUSE assumes no responsibility for your failure to obtain any necessary export approvals.
Copyright © 2016 SUSE LLC. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.
SUSE has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed at http://www.novell.com/company/legal/patents/ and one or more additional patents or pending patent applications in the U.S. and other countries.
For SUSE trademarks, see SUSE Trademark and Service Mark list (http://www.novell.com/company/legal/trademarks/tmlist.html). All third-party trademarks are the property of their respective owners.
Colophon
Thank you for using SUSE Manager Server in your business.
Your SUSE Manager Server Team.