As mentioned in SR 580670, the license change now has a separate
changelog entry.
The changelog entry got extended by the correct CVE and SUSE bugzilla
numbers for further reference.
---
- License changed to GPL-3.0-or-later, as mentioned in the source
(former license focues on GPL-3.0 only)
- update to 2.3.1 RC1 (package version 2.3.0.1) (bsc#1056094):
* SECURITY (MODERATE): fix for CVE-2017-7466, which finally fixes
an arbitrary command execution vulnerability
OBS-URL: https://build.opensuse.org/request/show/583250
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ansible?expand=0&rev=34
- Update to version 2.4.3.0:
* Fix `pamd` rule args regexp to match file paths.
* Check if SELinux policy exists before setting.
* Set locale to `C` in `letsencrypt` module to fix date parsing
errors.
* Fix include in loop when stategy=free.
* Fix save parameter in asa_config.
* Fix --vault-id support in ansible-pull.
* In nxos_interface_ospf, fail nicely if loopback is used with
passive_interface.
* Fix quote filter when given an integer to quote.
* nxos_vrf_interface fix when validating the interface.
* Fix for win_copy when sourcing files from an SMBv1 share.
* correctly report callback plugin file.
* restrict revaulting to vault cli.
* Fix python3 tracebacks in letsencrypt module.
* Fix ansible_*_interpreter variables to be templated prior to
being used.
* Fix setting of environment in a task that uses a loop
* Fix fetch on Windows failing to fetch files or particular
block size.
* preserve certain fields during no log.
* fix issue with order of declaration of sections in ini
inventory.
* Fix win_iis_webapppool to correctly stop a apppool.
* Fix CloudEngine host failed.
* Fix ios_config save issue.
* Handle vault filenames with nonascii chars when displaying
messages.
* Fix win_iis_webapppool to not return passwords.
OBS-URL: https://build.opensuse.org/request/show/572424
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=98
update to version v2.4.2.0:
* lock azure containerservice to below 2.0.0
* ovirt_host_networks: Fix label assignment
* Fix vault --ask-vault-pass with no tty (#31493)
* cherry-pick changes of azure_rm_common from devel to 2.4 (#32607)
* Fixes#31090. In network parse_cli filter plugin, this change moves the creation of a (#31092) (#32458)
* Use an abspath for network inventory ssh key path.
* Remove toLower on source (#31983)
* Add k8s_common.py logging fixes to the changelog
* inserts enable cmd hash with auth_pass used (#32107)
* Fix exception upon display.warn() (#31876)
* ios_system: Fix typo in unit test (#32284)
* yum: use the C locale when screen scraping (#32203)
* Use region derived from get_aws_connection_info() in dynamodb_table to fix tagging bug (#32557)
* fix item var in delegation (#32986)
* Add changelog entry for elb_application_lb fix
* Add a validate example to blockinfile. (#32088)
* Correct formatting --arguments (#31808)
* Add changelog for URI/get_url fix
* [cloud] Bugfix for aws_s3 empty directory creation (#32198)
* Fix junos integration test fixes as per connection refactor (#33050) (#33055)
* Update win_copy for #32677 (#32682)
* ios_interface testfix (#32381)
* Add proper check mode support to the script module (#31852)
* Add galaxy --force fix to changelog
* Fix non-ascii errors in config manager
* Add python3 urllib fixes to changelog
* Add changelog entry for the stdin py3 fix
* Update version info for the 2.4.2 release
* Add max_fail_percentage fix to changelog
OBS-URL: https://build.opensuse.org/request/show/546595
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=96
- update to 2.4.0.0 (final)
Major Changes
+ Support for Python-2.4 and Python-2.5 on the managed system's side
was dropped. If you need to manage a system that ships with Python-2.4
or Python-2.5, you'll need to install Python-2.6 or better on the
managed system or run Ansible-2.3 until you can upgrade the system.
+ New import/include keywords to replace the old bare include directives.
The use of static: {yes|no} on such includes is now deprecated.
[...]
+ Windows become_method: runas now works across all authtypes and
will auto-elevate under UAC if WinRM user has "Act as part of the
operating system" privilege
- please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
further changes
- added ansible-inventory and ansible-config binaries and manpages
- package contrib and examples directories in docdir
- package all *md files as documentation for now
- recommend the following new packages for (open)SUSE:
+ python-httplib2
+ python-keyczar
+ python-six
- enable/fix build for RHEL and Fedora by redefining __python2 and
adding/enhancing the needed (build)requires if needed
old: systemsmanagement/ansible
new: home:lrupp:branches:systemsmanagement/ansible rev None
Index: ansible.changes
===================================================================
--- ansible.changes (revision 89)
+++ ansible.changes (revision 7)
@@ -1,4 +1,74 @@
-------------------------------------------------------------------
+Sat Sep 23 09:05:01 UTC 2017 - lars@linux-schulserver.de
+
+- update to 2.4.0.0 (final)
+ Major Changes
+ + Support for Python-2.4 and Python-2.5 on the managed system's side
+ was dropped. If you need to manage a system that ships with Python-2.4
+ or Python-2.5, you'll need to install Python-2.6 or better on the
+ managed system or run Ansible-2.3 until you can upgrade the system.
+ + New import/include keywords to replace the old bare include directives.
+ The use of static: {yes|no} on such includes is now deprecated.
+ ++ Using import_* (import_playbook, import_tasks, import_role) directives are static.
+ ++ Using include_* (include_tasks, include_role) directives are dynamic.
+ This is done to avoid collisions and possible security issues as
+ facts come from the remote targets and they might be compromised.
+ + New order play level keyword that allows the user to change the
+ order in which Ansible processes hosts when dispatching tasks.
+ + Users can now set group merge priority for groups of the same depth
+ (parent child relationship), using the new ansible_group_priority variable,
+ when values are the same or don't exist it will fallback to the previous
+ sorting by name'.
+ + Inventory has been revamped:
+ ++ Inventory classes have been split to allow for better
+ management and deduplication
+ ++ Logic that each inventory source duplicated is now common and pushed
+ up to reconciliation
+ ++ VariableManager has been updated for better interaction with inventory
+ ++ Updated CLI with helper method to initialize base objects for plays
+ ++ New inventory plugins for creating inventory
+ ++ Old inventory formats are still supported via plugins
+ ++ Inline host_list is also an inventory plugin, an example alternative
+ advanced_host_list is also provided (it supports ranges)
+ ++ New configuration option to list enabled plugins and precedence
+ order: whitelist_inventory in ansible.cfg
+ ++ vars_plugins have been reworked, they are now run from Vars manager
+ and API has changed (need docs)
+ ++ Loading group_vars/host_vars is now a vars plugin and can be overridden
+ ++ It is now possible to specify mulitple inventory sources in the
+ command line (-i /etc/hosts1 -i /opt/hosts2)
+ ++ Inventory plugins can use the cache plugin (i.e. virtualbox) and
+ is affected by meta: refresh_inventory
+ ++ Group variable precedence is now configurable via new 'precedence'
+ option in ansible.cfg (needs docs)
+ ++ Improved warnings and error messages across the board
+ + Configuration has been changed from a hardcoded listing in the
+ constants module to dynamically loaded from yaml definitions
+ ++ Also added an ansible-config CLI to allow for listing config options
+ and dumping current config (including origin)
+ ++ TODO: build upon this to add many features detailed in ansible-config
+ proposal https://github.com/ansible/proposals/issues/35
+ + Windows modules now support the use of multiple shared module_utils
+ files in the form of Powershell modules (.psm1), via
+ #Requires -Module Ansible.ModuleUtils.Whatever.psm1
+ + Python module argument_spec now supports custom validation logic
+ by accepting a callable as the type argument.
+ + Windows become_method: runas now works across all authtypes and
+ will auto-elevate under UAC if WinRM user has "Act as part of the
+ operating system" privilege
+ - please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
+ further changes
+- added ansible-inventory and ansible-config binaries and manpages
+- package contrib and examples directories in docdir
+- package all *md files as documentation for now
+- recommend the following new packages for (open)SUSE:
+ + python-httplib2
+ + python-keyczar
+ + python-six
+- enable/fix build for RHEL and Fedora by redefining __python2 and
+ adding/enhancing the needed (build)requires if needed
+
+-------------------------------------------------------------------
Tue Aug 8 17:06:10 UTC 2017 - michael@stroeder.com
- update to 2.3.2.0 (final)
Index: ansible.spec
===================================================================
--- ansible.spec (revision 89)
+++ ansible.spec (revision 7)
@@ -24,7 +24,7 @@
BuildArch: noarch
%endif
Name: ansible
-Version: 2.3.2.0
+Version: 2.4.0.0
Release: 0
Summary: Radically simple IT automation
License: GPL-3.0
@@ -33,14 +33,19 @@
Source: https://releases.ansible.com/ansible/ansible-%{version}.tar.gz
Source99: ansible-rpmlintrc
BuildRoot: %{_tmppath}/%{name}-%{version}-build
+
+# SuSE/openSuSE
%if 0%{?suse_version}
BuildRequires: python-devel
BuildRequires: python-setuptools
-Requires: python-setuptools
Recommends: python-dnspython
Recommends: python-dopy
Recommends: python-pywinrm
Recommends: sshpass
+Recommends: python-httplib2
+Recommends: python-keyczar
+Recommends: python-six
+Requires: python-setuptools
%if 0%{?suse_version} >= 01130
BuildRequires: python-Jinja2
BuildRequires: python-PyYAML
@@ -52,20 +57,52 @@
Requires: python-pycrypto >= 2.6
%endif
%endif
-# RHEL == 6
-%if 0%{?rhel} == 6
-Requires: python-crypto2.6
+
+# RHEL <=5
+%if 0%{?rhel} && 0%{?rhel} <= 5
+BuildRequires: python26-devel
+BuildRequires: python26-setuptools
+Requires: python26-PyYAML
+Requires: python26-httplib2
+Requires: python26-jinja2
+Requires: python26-keyczar
+Requires: python26-paramiko
+Requires: python26-setuptools
+Requires: python26-six
+Requires: sshpass
%endif
# RHEL > 5
%if 0%{?rhel} && 0%{?rhel} >= 5
BuildRequires: python-setuptools
BuildRequires: python2-devel
Requires: PyYAML
+Requires: python-jinja2
+Requires: python-paramiko
+Requires: python-setuptools
+Requires: python-six
+Requires: sshpass
+%endif
+# RHEL == 6
+%if 0%{?rhel} == 6
+Requires: python-crypto
+%endif
+# RHEL >=7
+%if 0%{?rhel} >= 7
+Requires: python2-cryptography
+BuildRequires: perl(Exporter)
+%endif
+%if 0%{?fedora} >= 18
+BuildRequires: python-devel
+BuildRequires: python-setuptools
+Requires: PyYAML
Requires: python-httplib2
Requires: python-jinja2
Requires: python-keyczar
Requires: python-paramiko
Requires: python-setuptools
+Requires: python-six
+Requires: sshpass
+%define __python %{__python2}
%endif
%description
@@ -76,12 +113,14 @@
%prep
%setup -q -n ansible-%{version}
+find . -name .git_keep -delete
+find contrib/ -type f -exec chmod 644 {} \;
%build
-python setup.py build
+%{__python} setup.py build
%install
-python setup.py install --prefix=%{_prefix} --root=%{buildroot}
+%{__python} setup.py install --prefix=%{_prefix} --root=%{buildroot}
mkdir -p %{buildroot}%{_sysconfdir}/ansible/
cp examples/hosts %{buildroot}%{_sysconfdir}/ansible/
@@ -92,20 +131,24 @@
%files
%defattr(-,root,root,-)
-%doc COPYING README.md CHANGELOG.md
+%doc COPYING *.md contrib examples
%{_bindir}/ansible
+%{_bindir}/ansible-config
%{_bindir}/ansible-connection
%{_bindir}/ansible-console
-%{_bindir}/ansible-playbook
-%{_bindir}/ansible-pull
%{_bindir}/ansible-doc
%{_bindir}/ansible-galaxy
+%{_bindir}/ansible-inventory
+%{_bindir}/ansible-playbook
+%{_bindir}/ansible-pull
%{_bindir}/ansible-vault
%{python_sitelib}/*
%{_mandir}/man1/ansible.1*
+%{_mandir}/man1/ansible-config.1*
%{_mandir}/man1/ansible-console.1*
%{_mandir}/man1/ansible-doc.1*
%{_mandir}/man1/ansible-galaxy.1*
+%{_mandir}/man1/ansible-inventory.1*
%{_mandir}/man1/ansible-playbook.1*
%{_mandir}/man1/ansible-pull.1*
%{_mandir}/man1/ansible-vault.1*
Index: ansible-2.4.0.0.tar.gz
===================================================================
Binary file ansible-2.4.0.0.tar.gz (revision 7) added
Index: ansible-2.3.2.0.tar.gz
===================================================================
Binary file ansible-2.3.2.0.tar.gz (revision 89) deleted
OBS-URL: https://build.opensuse.org/request/show/528397
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=90
- update to 2.0.1.0:
* Fixes a major compatibility break in the synchronize module shipped
with 2.0.0.x. That version of synchronize ran sudo on the controller
prior to running rsync. In 1.9.x and previous, sudo was run on the
host that rsync connected to. 2.0.1 restores the 1.9.x behaviour.
* Additionally, several other problems with where synchronize chose
to run when combined with delegate_to were fixed. In particular, if
a playbook targetted localhost and then delegated_to a remote host
the prior behavior (in 1.9.x and 2.0.0.x) was to copy files between
the src and destination directories on the delegated host. This has
now been fixed to copy between localhost and the delegated host.
* Fix a regression where synchronize was unable to deal with unicode paths.
* Fix a regression where synchronize deals with inventory hosts that
use localhost but with an alternate port.
* Fixes a regression where the retry files feature was not implemented.
* Fixes a regression where the any_errors_fatal option was implemented
in 2.0 incorrectly, and also adds a feature where any_errors_fatal
can be set at the block level.
* Fix tracebacks when playbooks or ansible itself were located in
directories with unicode characters.
* Fix bug when sending unicode characters to an external pager
for display.
* Fix a bug with squashing loops for special modules (mostly package
managers). The optimization was squashing when the loop did not
apply to the selection of packages. This has now been fixed.
* Temp files created when using vault are now "shredded" using the
unix shred program which overwrites the file with random data.
* Some fixes to cloudstack modules for case sensitivity
* Fix non-newstyle modules (non-python modules and old-style modules)
to disabled pipelining.
OBS-URL: https://build.opensuse.org/request/show/369111
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=60
