microos-tools/microos-tools.changes

666 lines
23 KiB
Plaintext

-------------------------------------------------------------------
Thu Nov 14 14:50:30 UTC 2024 - Fabian Vogt <fvogt@suse.com>
- Update to version 4.0+git6:
* test: Check for AVC denials in the journal
* test: More reliable output of combustion-validate
* test: Remove workaround for boo#1230912
* Label /sys before selinux-autorelabel units run (bsc#1232709)
-------------------------------------------------------------------
Tue Oct 29 15:55:08 UTC 2024 - Fabian Vogt <fvogt@suse.com>
- Update to version 4.0+git2:
* Add RemainAfterExit=true to autorelabel services
-------------------------------------------------------------------
Thu Oct 17 12:54:18 UTC 2024 - Fabian Vogt <fvogt@suse.com>
- Update to version 4.0+git1:
* Regenerate initrd after selinux-autorelabel installation
-------------------------------------------------------------------
Mon Oct 07 13:51:51 UTC 2024 - Fabian Vogt <fvogt@suse.com>
- Update to version 4.0:
* Release version 4.0
* Have the autorelabel hook propagate failure from relabelling
* Split SELinux relabelling code into separate package
* Make 98selinux-microos usable on non-transactional systems
* selinux-autorelabel-generator: Don't hardcode mountpoints
* Consistently use tabs in selinux-autorelabel-generator
* Add automated testing of SELinux relabelling functionality
* Fix OBS workflow for pushes to master
-------------------------------------------------------------------
Wed Sep 25 13:13:28 UTC 2024 - Fabian Vogt <fvogt@suse.com>
- Update to version 2.21+git16:
* selinux: Avoid parameter duplication
* 98selinux-microos: Use a single thread for relabelling /etc
* Use all cores for SELinux restorecon (related to jsc#SMO-382)
- _service: Omit +git0 suffix in versions
-------------------------------------------------------------------
Thu Jul 11 11:48:19 UTC 2024 - fvogt@suse.com
- Update to version 2.21+git13:
* Don't run in the zipl initrd "initgrub" mode
-------------------------------------------------------------------
Fri Feb 23 11:59:42 UTC 2024 - fvogt@suse.com
- Update to version 2.21+git12:
* 98selinux-microos: Avoid "/sysroot-selinux: not mounted" on new util-linux
- Switch _service to use mode="manual" instead of "disabled"
-------------------------------------------------------------------
Tue Feb 06 17:19:47 UTC 2024 - iforster@suse.com
- Update to version 2.21+git11:
* Install man-online alias only for bash
-------------------------------------------------------------------
Wed Jan 10 12:47:49 UTC 2024 - kukuk@suse.com
- Update to version 2.21+git9:
* Add man-online command
* Drop support for sle15 builds
* Add OBS CI workflow
-------------------------------------------------------------------
Thu Oct 12 12:11:04 UTC 2023 - Fabian Vogt <fvogt@suse.com>
- Update to version 2.21+git5:
* 98selinux-microos: Set mount propagation properly
* 98selinux-microos: Convert tabs to spaces
* 98selinux-microos: Don't include setenforce unnecessarily
* Add spec file
* systemd-proxy-env: fix typos in setup-systemd-proxy-env
- Use the .spec file from the repo
-------------------------------------------------------------------
Thu Apr 20 11:42:22 UTC 2023 - Fabian Vogt <fvogt@suse.com>
- Switch to obs_scm
- Call autogen.sh so that it actually builds
- Update to version 2.21+git0:
* Release version 2.21
* 98selinux-microos: Work around overlayfs bug (bsc#1210690)
* 98selinux-microos: Create .relabelled marker before relabelling
-------------------------------------------------------------------
Thu Apr 13 09:34:21 UTC 2023 - kukuk@suse.com
- Update to version 2.20+git20230413.2a43cdb:
* Drop extra sysctl file for coredumps (boo#1091684)
-------------------------------------------------------------------
Tue Apr 4 13:35:50 UTC 2023 - Ludwig Nussel <lnussel@suse.de>
- remove conflict with systemd-coredump (boo#1091684). There is no actual
conflict. It actually works fine to install systemd-coredump in addition.
-------------------------------------------------------------------
Thu Mar 16 12:06:36 UTC 2023 - Fabian Vogt <fvogt@suse.com>
- Update to version 2.20:
- 98selinux-microos: don't load the policy to label the system
-------------------------------------------------------------------
Tue Mar 14 14:25:23 UTC 2023 - Fabian Vogt <fvogt@suse.com>
- Update URL
- Update to version 2.19:
- configure.ac: Run autoupdate to fix some deprecation warnings
- Clean up selinux-autorelabel-generator and make it compatible with systemd 253
-------------------------------------------------------------------
Thu Jan 19 10:49:29 UTC 2023 - Ignaz Forster <iforster@suse.com>
- Update to version 2.18:
- Add TMPDIR to tukit binddirs for Salt
[bsc#1211356] [bsc#1205011]
- 98selinux-microos: Add chroot as dependency
- Fix spelling error in warning
-------------------------------------------------------------------
Fri Sep 16 14:12:04 UTC 2022 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.17:
- selinux-autorelabel-generator: Don't cross partition boundaries
for /.snapshots when relabeling [issue#11]
-------------------------------------------------------------------
Mon Sep 5 13:41:53 UTC 2022 - Fabian Vogt <fvogt@suse.com>
- Update to version 2.16:
- 98selinux-microos: Make the btrfs subvolume writable temporarily [boo#1202395]
-------------------------------------------------------------------
Wed Aug 31 06:53:58 UTC 2022 - Fabian Vogt <fvogt@suse.com>
- Update to version 2.15
- 98selinux-microos: Add grep as dependency
-------------------------------------------------------------------
Tue Aug 30 15:28:55 UTC 2022 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.14
- Fix Makefile to install sysext-add-debug
-------------------------------------------------------------------
Tue Aug 30 13:51:58 UTC 2022 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.13
- 98selinux-microos: Don't rely on selinux=1 [bsc#1202449]
- Add sysext-add-debug
- Make sure /var/lib/overlay exists before relabeling
-------------------------------------------------------------------
Thu Sep 9 11:45:19 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.12
- Remove special MicroOS firstboot script
- Remove locale-check, replaced by another aaa_base implementation
-------------------------------------------------------------------
Thu Jun 16 17:04:59 UTC 2021 - Ignaz Forster <iforster@suse.com>
- Update to version 2.11
- Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]
-------------------------------------------------------------------
Mon May 10 11:22:03 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.10
- Fixes and improvements for SELinux support
- Add devel tools
- Add new subpackage microos-devel-tools
- Add rpm as build dependency for that subpackage
-------------------------------------------------------------------
Tue Nov 10 09:00:08 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.9
- Use absolute path for selinuxenabled in systemd generator
-------------------------------------------------------------------
Mon Nov 9 06:28:17 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.8
- Don't propagate umounts into the real root
- Use content of .autorelabel only if it exists
-------------------------------------------------------------------
Wed Oct 28 10:43:48 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.7
- Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS
-------------------------------------------------------------------
Thu Oct 22 13:04:15 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Fix building on SUSE MicroOS
-------------------------------------------------------------------
Wed Oct 21 15:54:44 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.6
- Don't delete autorelabel file in initrd
-------------------------------------------------------------------
Mon Sep 28 09:13:15 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.5
- tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS
-------------------------------------------------------------------
Tue Aug 18 14:33:56 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.4
- fixes for autorelabel in initrd
- Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
/tmp after 10 days and /var/tmp after 30 days
-------------------------------------------------------------------
Tue Aug 18 08:45:41 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]
-------------------------------------------------------------------
Fri Aug 14 08:56:00 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2]
-------------------------------------------------------------------
Wed Aug 12 07:32:04 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.3
- SELinux support [jsc#SMO-15]
- overwrite tmp.mount options with SELinux label for /tmp
- Add generator to label mount points if required
- Add dracut module to relabel core system if required
- Add locale-check to reset locale to system default if the one
set by SSH does not exist [bsc#1156175]
- Set TMPDIR for salt to not use /tmp (preparation for noexec)
-------------------------------------------------------------------
Thu Jul 30 09:34:25 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.2
- tmpfs support got moved to systemd
-------------------------------------------------------------------
Fri Jun 5 10:14:16 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.1
- Provide support to use tmpfs for /tmp
-------------------------------------------------------------------
Sun May 10 09:32:13 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- Update to version 2.0
- use autoconf tools to support libexecdir
-------------------------------------------------------------------
Fri Feb 14 09:59:05 UTC 2020 - kukuk@suse.de
- Update to version 1.0+git20200214.c7654a7:
* Remove btrfsQuota, snapper list provides now the same informations
* Adjust README.md
-------------------------------------------------------------------
Mon Aug 12 13:18:41 CEST 2019 - kukuk@suse.de
- Remove create_autoyast_profile from sources
-------------------------------------------------------------------
Mon Aug 12 11:18:31 UTC 2019 - kukuk@suse.de
- Update to version 1.0+git20190812.97ca0ee:
* Add create_autoyast_profile to caasp section for reference
-------------------------------------------------------------------
Tue Jun 11 12:31:09 UTC 2019 - kukuk@suse.de
- Update to version 1.0+git20190611.6211f74:
* Rename 51-corefiles.conf to 30-corefiles.conf, so that an user
can override it by installing telemectrics-client or
systemd-coredump.
-------------------------------------------------------------------
Wed Feb 27 11:46:11 CET 2019 - kukuk@suse.de
- Re-add requires for perl-JSON, required by create_autoyast_profile
-------------------------------------------------------------------
Mon Feb 18 16:34:12 CET 2019 - kukuk@suse.de
- Create own standalone microos-tools package
-------------------------------------------------------------------
Mon Feb 18 11:43:18 UTC 2019 - kukuk@suse.de
- Update to version 1.0+git20190218.9e72dd7:
* Move SUSE CaaS Platform specific code to CaaSP directory
* Move core files to /var/tmp, /tmp could be tmpfs
* Add service to print environment for debugging
-------------------------------------------------------------------
Wed Dec 12 14:03:26 UTC 2018 - kukuk@suse.de
- Update to version 1.0+git20181212.c28b214:
* Store manual page uncompressed
-------------------------------------------------------------------
Wed Dec 12 13:53:54 UTC 2018 - kukuk@suse.de
- Update to version 1.0+git20181212.a821c06:
* Add manual page for btrfsQuota
* Fix permissions of btrfsQuota
* Add btrfsQuota command (from btrfs wiki)
-------------------------------------------------------------------
Fri Dec 07 13:33:51 UTC 2018 - kukuk@suse.de
- Update to version 1.0+git20181207.2d715d2:
* Don't configure systemd-timesyncd anymore on the cluster nodes, admin has to use the ntp module, which can meanwhile configure everything.
* Fix formating of bash script
* Add service, which watches /etc/sysconfig/proxy and sets the environment variables for systemd services
* Fix product name
* Move cloud-init module for caasp into caasp special sub directory
-------------------------------------------------------------------
Wed Sep 26 11:47:42 UTC 2018 - kukuk@suse.de
- Update to version 1.0+git20180926.e9f5cfe:
* Overwrite systemd-coredump for core files, as systemd is not
available in containers.
- Add conflict with systemd-coredump
-------------------------------------------------------------------
Tue Aug 21 12:15:29 UTC 2018 - kukuk@suse.de
- Update to version 1.0+git20180821.b2af3a9:
* Start timesyncd service first on cluster nodes.
* Remove start of container-feeder, does not exist anymore on SLE15
-------------------------------------------------------------------
Sun Jun 17 09:51:32 CEST 2018 - kukuk@suse.de
- Create /var/adm/netconfig in %posttrans if still needed after
upgrade
-------------------------------------------------------------------
Fri Jun 15 12:43:37 CEST 2018 - kukuk@suse.de
- Update to version 1.0+git20180615.b5e9b2d:
* Move log file to /var/log, add timestamp
-------------------------------------------------------------------
Fri Jun 15 12:37:21 CEST 2018 - kukuk@suse.de
- Fix name of migration script
-------------------------------------------------------------------
Fri Jun 15 11:11:03 CEST 2018 - kukuk@suse.de
- Update to version 1.0+git20180615.6204c42:
* Save output in logfile
- Fix /var/lock symlink for migration from CaaSP v3 to v4.
-------------------------------------------------------------------
Wed Jun 13 14:37:56 UTC 2018 - kukuk@suse.de
- Update to version 1.0+git20180613.53ac895:
* Add migrate-ntp2chrony
- Call migrate-ntp2chrony from posttrans section
-------------------------------------------------------------------
Wed Jun 13 12:20:34 UTC 2018 - kukuk@suse.de
- Update to version 1.0+git20180613.b7f1fb1:
* Replace activate.sh call with admin-node-init.service
-------------------------------------------------------------------
Wed Jun 13 11:47:00 UTC 2018 - kukuk@suse.de
- Update to version 1.0+git20180613.dddd750:
* Add README.md
-------------------------------------------------------------------
Mon Mar 5 16:14:05 UTC 2018 - rbrown@suse.com
- Remove Kubic workaround, will now use caasp-container-manifests
-------------------------------------------------------------------
Tue Feb 27 16:44:23 CET 2018 - kukuk@suse.de
- Remove read-only root filesystem stuff, was moved to
read-only-root-fs
- Require read-only-root-fs
-------------------------------------------------------------------
Wed Feb 21 11:05:54 CET 2018 - kukuk@suse.de
- Add new hardware and apparmor pattern [bsc#1081620].
-------------------------------------------------------------------
Tue Jan 16 10:58:36 UTC 2018 - dimstar@opensuse.org
- Drop systemd and dracut BuildRequires: allow to better ordering
of parallel builds, and neither of the two BRs brings much
advantage. We just have to own /usr/lib/dracut directories as a
side effect (which is allowed).
-------------------------------------------------------------------
Tue Jan 9 14:35:10 CET 2018 - kukuk@suse.de
- create_autoyast_profile.pl: don't create a swap partition
-------------------------------------------------------------------
Wed Dec 20 19:03:36 CET 2017 - kukuk@suse.de
- Version 0.27
- Adjust that we have only /var
-------------------------------------------------------------------
Sun Dec 17 08:40:36 UTC 2017 - kukuk@suse.com
- Version 0.26
- create apparmor overlay only if apparmor is installed
-------------------------------------------------------------------
Sun Sep 24 13:03:35 CEST 2017 - kukuk@suse.de
- On fix for cc_suse_caasp.py did go lost
-------------------------------------------------------------------
Thu Sep 21 19:50:18 UTC 2017 - kukuk@suse.de
- Move cc_suse_caasp.py out of tar archive and install with in the
right python directory
-------------------------------------------------------------------
Tue Sep 12 10:18:48 CEST 2017 - kukuk@suse.de
- setup-fstab.sys-for-overlayfs: adjust to work with building
images with kiwi
-------------------------------------------------------------------
Tue Aug 29 12:21:02 CEST 2017 - kukuk@suse.de
- Add /boot/efi partition to the create_autoyast_profile
script [bsc#1055795]
-------------------------------------------------------------------
Fri Jun 30 13:20:39 CEST 2017 - kukuk@suse.de
- Fix problem with wrong permissions of /etc/salt.
-------------------------------------------------------------------
Wed Jun 28 13:07:22 CEST 2017 - kukuk@suse.de
- Add /etc/salt/minion.d/grains_refresh.conf [bsc#1046212]
-------------------------------------------------------------------
Tue Jun 27 15:31:06 CEST 2017 - kukuk@suse.de
- Enable admin-note-setup service on admin node via cloud-init
[bsc#1046161]
-------------------------------------------------------------------
Thu Jun 22 09:55:58 CEST 2017 - kukuk@suse.de
- suse_caasp cloud-init module: enable salt-minion on admin node
[bsc#1045350]
-------------------------------------------------------------------
Wed Jun 7 17:37:19 CEST 2017 - kukuk@suse.de
- Fix syntax of /etc/fstab.sys for overlayfs mount points
-------------------------------------------------------------------
Fri Jun 2 09:29:22 CEST 2017 - kukuk@suse.de
- suse_caasp cloud-init module: fix order of docker start
-------------------------------------------------------------------
Sat May 27 18:13:36 UTC 2017 - kukuk@suse.com
- Release version 0.18
- Enable docker and container-feeder on cluster nodes
- Cleanup build requires
-------------------------------------------------------------------
Wed May 17 09:05:53 CEST 2017 - kukuk@suse.de
- Adjust pattern names [bsc#1039432]
-------------------------------------------------------------------
Tue May 9 15:04:56 CEST 2017 - kukuk@suse.de
- Add activate.sh for openSUSE Kubic
-------------------------------------------------------------------
Mon Apr 24 11:40:31 CEST 2017 - kukuk@suse.de
- create_autoyast_profile: use FQDN [bsc#1035665]
-------------------------------------------------------------------
Fri Apr 21 13:29:41 CEST 2017 - kukuk@suse.de
- Fix order: first write config, afterwards start services
-------------------------------------------------------------------
Fri Apr 21 11:16:06 CEST 2017 - kukuk@suse.de
- remove not working line from autoyast.xml
- Add COPYING file
-------------------------------------------------------------------
Thu Apr 20 17:09:50 CEST 2017 - kukuk@suse.de
- Add suse_caasp cloud-init module
- Fix syntax of 01-network.cfg in case we don't disable cloud-init
network
-------------------------------------------------------------------
Wed Apr 19 12:56:51 UTC 2017 - kukuk@suse.com
- Add extra /var/lib/docker partition to autoyast profile
-------------------------------------------------------------------
Wed Apr 19 09:54:06 CEST 2017 - kukuk@suse.de
- Add systemd pre/post install macros
-------------------------------------------------------------------
Tue Apr 18 17:07:30 CEST 2017 - kukuk@suse.de
- Add apparmor directories for overlayfs
-------------------------------------------------------------------
Tue Apr 18 16:05:19 CEST 2017 - kukuk@suse.de
- Fix typo
-------------------------------------------------------------------
Tue Apr 18 15:02:57 CEST 2017 - kukuk@suse.de
- If we do the first boot and there is already a configuration file
for the network configuration, don't let cloud-init overwrite
that [bsc#1032497]
-------------------------------------------------------------------
Wed Apr 12 15:48:50 CEST 2017 - kukuk@suse.de
- Add systemd service to create minion id [bsc#1031623]
-------------------------------------------------------------------
Wed Apr 12 13:58:01 CEST 2017 - kukuk@suse.de
- Use overlayfs for /var/lib/apparmor
-------------------------------------------------------------------
Sun Apr 2 09:35:51 UTC 2017 - kukuk@suse.de
- Add ntpd configuration
-------------------------------------------------------------------
Thu Feb 16 18:07:35 CET 2017 - kukuk@suse.de
- Remove enabling services workaround
-------------------------------------------------------------------
Mon Feb 13 14:02:48 CET 2017 - kukuk@suse.de
- Fix typo in spec file
-------------------------------------------------------------------
Fri Feb 10 15:11:19 CET 2017 - kukuk@suse.de
- Add manual page for create_autoyast_profile
- Add script to generate /etc/fstab.sys (mount overlayfs in initrd)
-------------------------------------------------------------------
Wed Feb 1 18:02:31 CET 2017 - kukuk@suse.de
- Add workarounds to configure and enable salt-minion in autoyast
profile
-------------------------------------------------------------------
Sun Jan 29 21:52:49 UTC 2017 - kukuk@suse.de
- Parse SUSEConnnect -s output for registration information
-------------------------------------------------------------------
Sun Jan 29 13:51:20 CET 2017 - kukuk@suse.de
- Disable installer self update in autoyast profile
-------------------------------------------------------------------
Fri Jan 20 21:19:39 CET 2017 - kukuk@suse.de
- Adjust for openSUSE support
-------------------------------------------------------------------
Fri Jan 20 12:14:53 CET 2017 - kukuk@suse.de
- Replace autoyast profile with script to create it manual
-------------------------------------------------------------------
Sat Jan 14 10:31:06 CET 2017 - kukuk@suse.de
- Add autoyast profile caasp.xml
-------------------------------------------------------------------
Sat Jan 14 10:28:02 CET 2017 - kukuk@suse.de
- Rename from casp to caasp
-------------------------------------------------------------------
Mon Dec 19 15:28:28 CET 2016 - kukuk@suse.de
- Set "hostonly=''" for including overlay kernel module
[bnc#1016007]
-------------------------------------------------------------------
Wed Dec 14 11:44:21 CET 2016 - kukuk@suse.de
- Replace hardcoded device with current root device
-------------------------------------------------------------------
Tue Nov 22 17:24:04 CET 2016 - kukuk@suse.de
- Move cloud.cfg into own RPM
-------------------------------------------------------------------
Mon Nov 21 19:24:44 CET 2016 - kukuk@suse.de
- Rename "stateless" to "overlay", which fits better from the name
-------------------------------------------------------------------
Tue Nov 15 13:12:53 CET 2016 - kukuk@suse.de
- Move systemd presets to own package
-------------------------------------------------------------------
Sun Nov 13 17:40:16 CET 2016 - kukuk@suse.de
- Update cloud.cfg
-------------------------------------------------------------------
Sun Nov 13 10:55:45 CET 2016 - kukuk@suse.de
- Enable logrotate.timer per default
-------------------------------------------------------------------
Mon Oct 24 15:02:01 CEST 2016 - kukuk@suse.de
- Initial version with new name