- update to 2.4.0.0 (final)
Major Changes
+ Support for Python-2.4 and Python-2.5 on the managed system's side
was dropped. If you need to manage a system that ships with Python-2.4
or Python-2.5, you'll need to install Python-2.6 or better on the
managed system or run Ansible-2.3 until you can upgrade the system.
+ New import/include keywords to replace the old bare include directives.
The use of static: {yes|no} on such includes is now deprecated.
[...]
+ Windows become_method: runas now works across all authtypes and
will auto-elevate under UAC if WinRM user has "Act as part of the
operating system" privilege
- please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
further changes
- added ansible-inventory and ansible-config binaries and manpages
- package contrib and examples directories in docdir
- package all *md files as documentation for now
- recommend the following new packages for (open)SUSE:
+ python-httplib2
+ python-keyczar
+ python-six
- enable/fix build for RHEL and Fedora by redefining __python2 and
adding/enhancing the needed (build)requires if needed
old: systemsmanagement/ansible
new: home:lrupp:branches:systemsmanagement/ansible rev None
Index: ansible.changes
===================================================================
--- ansible.changes (revision 89)
+++ ansible.changes (revision 7)
@@ -1,4 +1,74 @@
-------------------------------------------------------------------
+Sat Sep 23 09:05:01 UTC 2017 - lars@linux-schulserver.de
+
+- update to 2.4.0.0 (final)
+ Major Changes
+ + Support for Python-2.4 and Python-2.5 on the managed system's side
+ was dropped. If you need to manage a system that ships with Python-2.4
+ or Python-2.5, you'll need to install Python-2.6 or better on the
+ managed system or run Ansible-2.3 until you can upgrade the system.
+ + New import/include keywords to replace the old bare include directives.
+ The use of static: {yes|no} on such includes is now deprecated.
+ ++ Using import_* (import_playbook, import_tasks, import_role) directives are static.
+ ++ Using include_* (include_tasks, include_role) directives are dynamic.
+ This is done to avoid collisions and possible security issues as
+ facts come from the remote targets and they might be compromised.
+ + New order play level keyword that allows the user to change the
+ order in which Ansible processes hosts when dispatching tasks.
+ + Users can now set group merge priority for groups of the same depth
+ (parent child relationship), using the new ansible_group_priority variable,
+ when values are the same or don't exist it will fallback to the previous
+ sorting by name'.
+ + Inventory has been revamped:
+ ++ Inventory classes have been split to allow for better
+ management and deduplication
+ ++ Logic that each inventory source duplicated is now common and pushed
+ up to reconciliation
+ ++ VariableManager has been updated for better interaction with inventory
+ ++ Updated CLI with helper method to initialize base objects for plays
+ ++ New inventory plugins for creating inventory
+ ++ Old inventory formats are still supported via plugins
+ ++ Inline host_list is also an inventory plugin, an example alternative
+ advanced_host_list is also provided (it supports ranges)
+ ++ New configuration option to list enabled plugins and precedence
+ order: whitelist_inventory in ansible.cfg
+ ++ vars_plugins have been reworked, they are now run from Vars manager
+ and API has changed (need docs)
+ ++ Loading group_vars/host_vars is now a vars plugin and can be overridden
+ ++ It is now possible to specify mulitple inventory sources in the
+ command line (-i /etc/hosts1 -i /opt/hosts2)
+ ++ Inventory plugins can use the cache plugin (i.e. virtualbox) and
+ is affected by meta: refresh_inventory
+ ++ Group variable precedence is now configurable via new 'precedence'
+ option in ansible.cfg (needs docs)
+ ++ Improved warnings and error messages across the board
+ + Configuration has been changed from a hardcoded listing in the
+ constants module to dynamically loaded from yaml definitions
+ ++ Also added an ansible-config CLI to allow for listing config options
+ and dumping current config (including origin)
+ ++ TODO: build upon this to add many features detailed in ansible-config
+ proposal https://github.com/ansible/proposals/issues/35
+ + Windows modules now support the use of multiple shared module_utils
+ files in the form of Powershell modules (.psm1), via
+ #Requires -Module Ansible.ModuleUtils.Whatever.psm1
+ + Python module argument_spec now supports custom validation logic
+ by accepting a callable as the type argument.
+ + Windows become_method: runas now works across all authtypes and
+ will auto-elevate under UAC if WinRM user has "Act as part of the
+ operating system" privilege
+ - please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
+ further changes
+- added ansible-inventory and ansible-config binaries and manpages
+- package contrib and examples directories in docdir
+- package all *md files as documentation for now
+- recommend the following new packages for (open)SUSE:
+ + python-httplib2
+ + python-keyczar
+ + python-six
+- enable/fix build for RHEL and Fedora by redefining __python2 and
+ adding/enhancing the needed (build)requires if needed
+
+-------------------------------------------------------------------
Tue Aug 8 17:06:10 UTC 2017 - michael@stroeder.com
- update to 2.3.2.0 (final)
Index: ansible.spec
===================================================================
--- ansible.spec (revision 89)
+++ ansible.spec (revision 7)
@@ -24,7 +24,7 @@
BuildArch: noarch
%endif
Name: ansible
-Version: 2.3.2.0
+Version: 2.4.0.0
Release: 0
Summary: Radically simple IT automation
License: GPL-3.0
@@ -33,14 +33,19 @@
Source: https://releases.ansible.com/ansible/ansible-%{version}.tar.gz
Source99: ansible-rpmlintrc
BuildRoot: %{_tmppath}/%{name}-%{version}-build
+
+# SuSE/openSuSE
%if 0%{?suse_version}
BuildRequires: python-devel
BuildRequires: python-setuptools
-Requires: python-setuptools
Recommends: python-dnspython
Recommends: python-dopy
Recommends: python-pywinrm
Recommends: sshpass
+Recommends: python-httplib2
+Recommends: python-keyczar
+Recommends: python-six
+Requires: python-setuptools
%if 0%{?suse_version} >= 01130
BuildRequires: python-Jinja2
BuildRequires: python-PyYAML
@@ -52,20 +57,52 @@
Requires: python-pycrypto >= 2.6
%endif
%endif
-# RHEL == 6
-%if 0%{?rhel} == 6
-Requires: python-crypto2.6
+
+# RHEL <=5
+%if 0%{?rhel} && 0%{?rhel} <= 5
+BuildRequires: python26-devel
+BuildRequires: python26-setuptools
+Requires: python26-PyYAML
+Requires: python26-httplib2
+Requires: python26-jinja2
+Requires: python26-keyczar
+Requires: python26-paramiko
+Requires: python26-setuptools
+Requires: python26-six
+Requires: sshpass
%endif
# RHEL > 5
%if 0%{?rhel} && 0%{?rhel} >= 5
BuildRequires: python-setuptools
BuildRequires: python2-devel
Requires: PyYAML
+Requires: python-jinja2
+Requires: python-paramiko
+Requires: python-setuptools
+Requires: python-six
+Requires: sshpass
+%endif
+# RHEL == 6
+%if 0%{?rhel} == 6
+Requires: python-crypto
+%endif
+# RHEL >=7
+%if 0%{?rhel} >= 7
+Requires: python2-cryptography
+BuildRequires: perl(Exporter)
+%endif
+%if 0%{?fedora} >= 18
+BuildRequires: python-devel
+BuildRequires: python-setuptools
+Requires: PyYAML
Requires: python-httplib2
Requires: python-jinja2
Requires: python-keyczar
Requires: python-paramiko
Requires: python-setuptools
+Requires: python-six
+Requires: sshpass
+%define __python %{__python2}
%endif
%description
@@ -76,12 +113,14 @@
%prep
%setup -q -n ansible-%{version}
+find . -name .git_keep -delete
+find contrib/ -type f -exec chmod 644 {} \;
%build
-python setup.py build
+%{__python} setup.py build
%install
-python setup.py install --prefix=%{_prefix} --root=%{buildroot}
+%{__python} setup.py install --prefix=%{_prefix} --root=%{buildroot}
mkdir -p %{buildroot}%{_sysconfdir}/ansible/
cp examples/hosts %{buildroot}%{_sysconfdir}/ansible/
@@ -92,20 +131,24 @@
%files
%defattr(-,root,root,-)
-%doc COPYING README.md CHANGELOG.md
+%doc COPYING *.md contrib examples
%{_bindir}/ansible
+%{_bindir}/ansible-config
%{_bindir}/ansible-connection
%{_bindir}/ansible-console
-%{_bindir}/ansible-playbook
-%{_bindir}/ansible-pull
%{_bindir}/ansible-doc
%{_bindir}/ansible-galaxy
+%{_bindir}/ansible-inventory
+%{_bindir}/ansible-playbook
+%{_bindir}/ansible-pull
%{_bindir}/ansible-vault
%{python_sitelib}/*
%{_mandir}/man1/ansible.1*
+%{_mandir}/man1/ansible-config.1*
%{_mandir}/man1/ansible-console.1*
%{_mandir}/man1/ansible-doc.1*
%{_mandir}/man1/ansible-galaxy.1*
+%{_mandir}/man1/ansible-inventory.1*
%{_mandir}/man1/ansible-playbook.1*
%{_mandir}/man1/ansible-pull.1*
%{_mandir}/man1/ansible-vault.1*
Index: ansible-2.4.0.0.tar.gz
===================================================================
Binary file ansible-2.4.0.0.tar.gz (revision 7) added
Index: ansible-2.3.2.0.tar.gz
===================================================================
Binary file ansible-2.3.2.0.tar.gz (revision 89) deleted
OBS-URL: https://build.opensuse.org/request/show/528397
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=90
- update to 2.0.1.0:
* Fixes a major compatibility break in the synchronize module shipped
with 2.0.0.x. That version of synchronize ran sudo on the controller
prior to running rsync. In 1.9.x and previous, sudo was run on the
host that rsync connected to. 2.0.1 restores the 1.9.x behaviour.
* Additionally, several other problems with where synchronize chose
to run when combined with delegate_to were fixed. In particular, if
a playbook targetted localhost and then delegated_to a remote host
the prior behavior (in 1.9.x and 2.0.0.x) was to copy files between
the src and destination directories on the delegated host. This has
now been fixed to copy between localhost and the delegated host.
* Fix a regression where synchronize was unable to deal with unicode paths.
* Fix a regression where synchronize deals with inventory hosts that
use localhost but with an alternate port.
* Fixes a regression where the retry files feature was not implemented.
* Fixes a regression where the any_errors_fatal option was implemented
in 2.0 incorrectly, and also adds a feature where any_errors_fatal
can be set at the block level.
* Fix tracebacks when playbooks or ansible itself were located in
directories with unicode characters.
* Fix bug when sending unicode characters to an external pager
for display.
* Fix a bug with squashing loops for special modules (mostly package
managers). The optimization was squashing when the loop did not
apply to the selection of packages. This has now been fixed.
* Temp files created when using vault are now "shredded" using the
unix shred program which overwrites the file with random data.
* Some fixes to cloudstack modules for case sensitivity
* Fix non-newstyle modules (non-python modules and old-style modules)
to disabled pipelining.
OBS-URL: https://build.opensuse.org/request/show/369111
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=60
- update to 1.9.4
This release addresses several bugs, most notably those related to
the yum module (introduced in 1.9.3):
+ Fixes a bug where yum state=latest would error if there were no
updates to install.
+ Fixes a bug where yum state=latest did not work with wildcard
package names.
+ Fixes a bug in lineinfile relating to escape sequences.
+ Fixes a bug where vars_prompt was not keeping passwords private
by default.
+ Fix ansible-galaxy and the hipchat callback plugin to check that
the host it is contacting matches its TLS Certificate.
OBS-URL: https://build.opensuse.org/request/show/337610
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ansible?expand=0&rev=14
This release addresses several bugs, most notably those related to
the yum module (introduced in 1.9.3):
+ Fixes a bug where yum state=latest would error if there were no
updates to install.
+ Fixes a bug where yum state=latest did not work with wildcard
package names.
+ Fixes a bug in lineinfile relating to escape sequences.
+ Fixes a bug where vars_prompt was not keeping passwords private
by default.
+ Fix ansible-galaxy and the hipchat callback plugin to check that
the host it is contacting matches its TLS Certificate.
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=51
- update to 1.9.2:
- Security fixes to check that hostnames match certificates with
https urls (CVE-2015-3908; bnc #938161):
+ get_url and uri modules
+ url and etcd lookup plugins
- Security fixes to the zone (Solaris containers), jail (bsd
containers), and chroot connection plugins. These plugins can be
used to connect to their respective container types in leiu of the
standard ssh connection. Prior to this fix being applied these
connection plugins didn't properly handle symlinks within the containers
which could lead to files intended to be written to or read from the
container being written to or read from the host system instead. (CVE
pending)
- Fixed a bug in the service module where init scripts were being
incorrectly used instead of upstart/systemd.
- Fixed a bug where sudo/su settings were not inherited from
ansible.cfg correctly.
- Fixed a bug in the rds module where a traceback may occur due to an
unbound variable.
- Fixed a bug where certain remote file systems where the SELinux
context was not being properly set.
- Re-enabled several windows modules which had been partially merged
(via action plugins):
+ win_copy.ps1
+ win_copy.py
+ win_file.ps1
+ win_file.py
+ win_template.py
- Fix bug using with_sequence and a count that is zero. Also allows
counting backwards isntead of forwards
OBS-URL: https://build.opensuse.org/request/show/316930
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ansible?expand=0&rev=12
- Security fixes to check that hostnames match certificates with
https urls (CVE-2015-3908):
+ get_url and uri modules
+ url and etcd lookup plugins
- Security fixes to the zone (Solaris containers), jail (bsd
containers), and chroot connection plugins. These plugins can be
used to connect to their respective container types in leiu of the
standard ssh connection. Prior to this fix being applied these
connection plugins didn't properly handle symlinks within the containers
which could lead to files intended to be written to or read from the
container being written to or read from the host system instead. (CVE
pending)
- Fixed a bug in the service module where init scripts were being
incorrectly used instead of upstart/systemd.
- Fixed a bug where sudo/su settings were not inherited from
ansible.cfg correctly.
- Fixed a bug in the rds module where a traceback may occur due to an
unbound variable.
- Fixed a bug where certain remote file systems where the SELinux
context was not being properly set.
- Re-enabled several windows modules which had been partially merged
(via action plugins):
+ win_copy.ps1
+ win_copy.py
+ win_file.ps1
+ win_file.py
+ win_template.py
- Fix bug using with_sequence and a count that is zero. Also allows
counting backwards isntead of forwards
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=46
- updated to version 1.9.1
* Fixed a bug related to Kerberos auth when using winrm with a domain account.
* Fixing several bugs in the s3 module.
* Fixed a bug with upstart service detection in the service module.
* Fixed several bugs with the user module when used on OSX.
* Fixed unicode handling in some module situations (assert and shell/command execution).
* Fixed a bug in redhat_subscription when using the activationkey parameter.
* Fixed a traceback in the gce module on EL6 distros when multiple pycrypto installations are available.
* Added support for PostgreSQL 9.4 in rds_param_group
* Several other minor fixes.
OBS-URL: https://build.opensuse.org/request/show/304448
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=44
