- Update to version 2.4.3.0:
* Fix `pamd` rule args regexp to match file paths.
* Check if SELinux policy exists before setting.
* Set locale to `C` in `letsencrypt` module to fix date parsing
errors.
* Fix include in loop when stategy=free.
* Fix save parameter in asa_config.
* Fix --vault-id support in ansible-pull.
* In nxos_interface_ospf, fail nicely if loopback is used with
passive_interface.
* Fix quote filter when given an integer to quote.
* nxos_vrf_interface fix when validating the interface.
* Fix for win_copy when sourcing files from an SMBv1 share.
* correctly report callback plugin file.
* restrict revaulting to vault cli.
* Fix python3 tracebacks in letsencrypt module.
* Fix ansible_*_interpreter variables to be templated prior to
being used.
* Fix setting of environment in a task that uses a loop
* Fix fetch on Windows failing to fetch files or particular
block size.
* preserve certain fields during no log.
* fix issue with order of declaration of sections in ini
inventory.
* Fix win_iis_webapppool to correctly stop a apppool.
* Fix CloudEngine host failed.
* Fix ios_config save issue.
* Handle vault filenames with nonascii chars when displaying
messages.
* Fix win_iis_webapppool to not return passwords.
OBS-URL: https://build.opensuse.org/request/show/572424
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=98
update to version v2.4.2.0:
* lock azure containerservice to below 2.0.0
* ovirt_host_networks: Fix label assignment
* Fix vault --ask-vault-pass with no tty (#31493)
* cherry-pick changes of azure_rm_common from devel to 2.4 (#32607)
* Fixes#31090. In network parse_cli filter plugin, this change moves the creation of a (#31092) (#32458)
* Use an abspath for network inventory ssh key path.
* Remove toLower on source (#31983)
* Add k8s_common.py logging fixes to the changelog
* inserts enable cmd hash with auth_pass used (#32107)
* Fix exception upon display.warn() (#31876)
* ios_system: Fix typo in unit test (#32284)
* yum: use the C locale when screen scraping (#32203)
* Use region derived from get_aws_connection_info() in dynamodb_table to fix tagging bug (#32557)
* fix item var in delegation (#32986)
* Add changelog entry for elb_application_lb fix
* Add a validate example to blockinfile. (#32088)
* Correct formatting --arguments (#31808)
* Add changelog for URI/get_url fix
* [cloud] Bugfix for aws_s3 empty directory creation (#32198)
* Fix junos integration test fixes as per connection refactor (#33050) (#33055)
* Update win_copy for #32677 (#32682)
* ios_interface testfix (#32381)
* Add proper check mode support to the script module (#31852)
* Add galaxy --force fix to changelog
* Fix non-ascii errors in config manager
* Add python3 urllib fixes to changelog
* Add changelog entry for the stdin py3 fix
* Update version info for the 2.4.2 release
* Add max_fail_percentage fix to changelog
OBS-URL: https://build.opensuse.org/request/show/546595
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=96
- update to 2.4.0.0 (final)
Major Changes
+ Support for Python-2.4 and Python-2.5 on the managed system's side
was dropped. If you need to manage a system that ships with Python-2.4
or Python-2.5, you'll need to install Python-2.6 or better on the
managed system or run Ansible-2.3 until you can upgrade the system.
+ New import/include keywords to replace the old bare include directives.
The use of static: {yes|no} on such includes is now deprecated.
[...]
+ Windows become_method: runas now works across all authtypes and
will auto-elevate under UAC if WinRM user has "Act as part of the
operating system" privilege
- please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
further changes
- added ansible-inventory and ansible-config binaries and manpages
- package contrib and examples directories in docdir
- package all *md files as documentation for now
- recommend the following new packages for (open)SUSE:
+ python-httplib2
+ python-keyczar
+ python-six
- enable/fix build for RHEL and Fedora by redefining __python2 and
adding/enhancing the needed (build)requires if needed
old: systemsmanagement/ansible
new: home:lrupp:branches:systemsmanagement/ansible rev None
Index: ansible.changes
===================================================================
--- ansible.changes (revision 89)
+++ ansible.changes (revision 7)
@@ -1,4 +1,74 @@
-------------------------------------------------------------------
+Sat Sep 23 09:05:01 UTC 2017 - lars@linux-schulserver.de
+
+- update to 2.4.0.0 (final)
+ Major Changes
+ + Support for Python-2.4 and Python-2.5 on the managed system's side
+ was dropped. If you need to manage a system that ships with Python-2.4
+ or Python-2.5, you'll need to install Python-2.6 or better on the
+ managed system or run Ansible-2.3 until you can upgrade the system.
+ + New import/include keywords to replace the old bare include directives.
+ The use of static: {yes|no} on such includes is now deprecated.
+ ++ Using import_* (import_playbook, import_tasks, import_role) directives are static.
+ ++ Using include_* (include_tasks, include_role) directives are dynamic.
+ This is done to avoid collisions and possible security issues as
+ facts come from the remote targets and they might be compromised.
+ + New order play level keyword that allows the user to change the
+ order in which Ansible processes hosts when dispatching tasks.
+ + Users can now set group merge priority for groups of the same depth
+ (parent child relationship), using the new ansible_group_priority variable,
+ when values are the same or don't exist it will fallback to the previous
+ sorting by name'.
+ + Inventory has been revamped:
+ ++ Inventory classes have been split to allow for better
+ management and deduplication
+ ++ Logic that each inventory source duplicated is now common and pushed
+ up to reconciliation
+ ++ VariableManager has been updated for better interaction with inventory
+ ++ Updated CLI with helper method to initialize base objects for plays
+ ++ New inventory plugins for creating inventory
+ ++ Old inventory formats are still supported via plugins
+ ++ Inline host_list is also an inventory plugin, an example alternative
+ advanced_host_list is also provided (it supports ranges)
+ ++ New configuration option to list enabled plugins and precedence
+ order: whitelist_inventory in ansible.cfg
+ ++ vars_plugins have been reworked, they are now run from Vars manager
+ and API has changed (need docs)
+ ++ Loading group_vars/host_vars is now a vars plugin and can be overridden
+ ++ It is now possible to specify mulitple inventory sources in the
+ command line (-i /etc/hosts1 -i /opt/hosts2)
+ ++ Inventory plugins can use the cache plugin (i.e. virtualbox) and
+ is affected by meta: refresh_inventory
+ ++ Group variable precedence is now configurable via new 'precedence'
+ option in ansible.cfg (needs docs)
+ ++ Improved warnings and error messages across the board
+ + Configuration has been changed from a hardcoded listing in the
+ constants module to dynamically loaded from yaml definitions
+ ++ Also added an ansible-config CLI to allow for listing config options
+ and dumping current config (including origin)
+ ++ TODO: build upon this to add many features detailed in ansible-config
+ proposal https://github.com/ansible/proposals/issues/35
+ + Windows modules now support the use of multiple shared module_utils
+ files in the form of Powershell modules (.psm1), via
+ #Requires -Module Ansible.ModuleUtils.Whatever.psm1
+ + Python module argument_spec now supports custom validation logic
+ by accepting a callable as the type argument.
+ + Windows become_method: runas now works across all authtypes and
+ will auto-elevate under UAC if WinRM user has "Act as part of the
+ operating system" privilege
+ - please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
+ further changes
+- added ansible-inventory and ansible-config binaries and manpages
+- package contrib and examples directories in docdir
+- package all *md files as documentation for now
+- recommend the following new packages for (open)SUSE:
+ + python-httplib2
+ + python-keyczar
+ + python-six
+- enable/fix build for RHEL and Fedora by redefining __python2 and
+ adding/enhancing the needed (build)requires if needed
+
+-------------------------------------------------------------------
Tue Aug 8 17:06:10 UTC 2017 - michael@stroeder.com
- update to 2.3.2.0 (final)
Index: ansible.spec
===================================================================
--- ansible.spec (revision 89)
+++ ansible.spec (revision 7)
@@ -24,7 +24,7 @@
BuildArch: noarch
%endif
Name: ansible
-Version: 2.3.2.0
+Version: 2.4.0.0
Release: 0
Summary: Radically simple IT automation
License: GPL-3.0
@@ -33,14 +33,19 @@
Source: https://releases.ansible.com/ansible/ansible-%{version}.tar.gz
Source99: ansible-rpmlintrc
BuildRoot: %{_tmppath}/%{name}-%{version}-build
+
+# SuSE/openSuSE
%if 0%{?suse_version}
BuildRequires: python-devel
BuildRequires: python-setuptools
-Requires: python-setuptools
Recommends: python-dnspython
Recommends: python-dopy
Recommends: python-pywinrm
Recommends: sshpass
+Recommends: python-httplib2
+Recommends: python-keyczar
+Recommends: python-six
+Requires: python-setuptools
%if 0%{?suse_version} >= 01130
BuildRequires: python-Jinja2
BuildRequires: python-PyYAML
@@ -52,20 +57,52 @@
Requires: python-pycrypto >= 2.6
%endif
%endif
-# RHEL == 6
-%if 0%{?rhel} == 6
-Requires: python-crypto2.6
+
+# RHEL <=5
+%if 0%{?rhel} && 0%{?rhel} <= 5
+BuildRequires: python26-devel
+BuildRequires: python26-setuptools
+Requires: python26-PyYAML
+Requires: python26-httplib2
+Requires: python26-jinja2
+Requires: python26-keyczar
+Requires: python26-paramiko
+Requires: python26-setuptools
+Requires: python26-six
+Requires: sshpass
%endif
# RHEL > 5
%if 0%{?rhel} && 0%{?rhel} >= 5
BuildRequires: python-setuptools
BuildRequires: python2-devel
Requires: PyYAML
+Requires: python-jinja2
+Requires: python-paramiko
+Requires: python-setuptools
+Requires: python-six
+Requires: sshpass
+%endif
+# RHEL == 6
+%if 0%{?rhel} == 6
+Requires: python-crypto
+%endif
+# RHEL >=7
+%if 0%{?rhel} >= 7
+Requires: python2-cryptography
+BuildRequires: perl(Exporter)
+%endif
+%if 0%{?fedora} >= 18
+BuildRequires: python-devel
+BuildRequires: python-setuptools
+Requires: PyYAML
Requires: python-httplib2
Requires: python-jinja2
Requires: python-keyczar
Requires: python-paramiko
Requires: python-setuptools
+Requires: python-six
+Requires: sshpass
+%define __python %{__python2}
%endif
%description
@@ -76,12 +113,14 @@
%prep
%setup -q -n ansible-%{version}
+find . -name .git_keep -delete
+find contrib/ -type f -exec chmod 644 {} \;
%build
-python setup.py build
+%{__python} setup.py build
%install
-python setup.py install --prefix=%{_prefix} --root=%{buildroot}
+%{__python} setup.py install --prefix=%{_prefix} --root=%{buildroot}
mkdir -p %{buildroot}%{_sysconfdir}/ansible/
cp examples/hosts %{buildroot}%{_sysconfdir}/ansible/
@@ -92,20 +131,24 @@
%files
%defattr(-,root,root,-)
-%doc COPYING README.md CHANGELOG.md
+%doc COPYING *.md contrib examples
%{_bindir}/ansible
+%{_bindir}/ansible-config
%{_bindir}/ansible-connection
%{_bindir}/ansible-console
-%{_bindir}/ansible-playbook
-%{_bindir}/ansible-pull
%{_bindir}/ansible-doc
%{_bindir}/ansible-galaxy
+%{_bindir}/ansible-inventory
+%{_bindir}/ansible-playbook
+%{_bindir}/ansible-pull
%{_bindir}/ansible-vault
%{python_sitelib}/*
%{_mandir}/man1/ansible.1*
+%{_mandir}/man1/ansible-config.1*
%{_mandir}/man1/ansible-console.1*
%{_mandir}/man1/ansible-doc.1*
%{_mandir}/man1/ansible-galaxy.1*
+%{_mandir}/man1/ansible-inventory.1*
%{_mandir}/man1/ansible-playbook.1*
%{_mandir}/man1/ansible-pull.1*
%{_mandir}/man1/ansible-vault.1*
Index: ansible-2.4.0.0.tar.gz
===================================================================
Binary file ansible-2.4.0.0.tar.gz (revision 7) added
Index: ansible-2.3.2.0.tar.gz
===================================================================
Binary file ansible-2.3.2.0.tar.gz (revision 89) deleted
OBS-URL: https://build.opensuse.org/request/show/528397
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=90
- update to 2.0.1.0:
* Fixes a major compatibility break in the synchronize module shipped
with 2.0.0.x. That version of synchronize ran sudo on the controller
prior to running rsync. In 1.9.x and previous, sudo was run on the
host that rsync connected to. 2.0.1 restores the 1.9.x behaviour.
* Additionally, several other problems with where synchronize chose
to run when combined with delegate_to were fixed. In particular, if
a playbook targetted localhost and then delegated_to a remote host
the prior behavior (in 1.9.x and 2.0.0.x) was to copy files between
the src and destination directories on the delegated host. This has
now been fixed to copy between localhost and the delegated host.
* Fix a regression where synchronize was unable to deal with unicode paths.
* Fix a regression where synchronize deals with inventory hosts that
use localhost but with an alternate port.
* Fixes a regression where the retry files feature was not implemented.
* Fixes a regression where the any_errors_fatal option was implemented
in 2.0 incorrectly, and also adds a feature where any_errors_fatal
can be set at the block level.
* Fix tracebacks when playbooks or ansible itself were located in
directories with unicode characters.
* Fix bug when sending unicode characters to an external pager
for display.
* Fix a bug with squashing loops for special modules (mostly package
managers). The optimization was squashing when the loop did not
apply to the selection of packages. This has now been fixed.
* Temp files created when using vault are now "shredded" using the
unix shred program which overwrites the file with random data.
* Some fixes to cloudstack modules for case sensitivity
* Fix non-newstyle modules (non-python modules and old-style modules)
to disabled pipelining.
OBS-URL: https://build.opensuse.org/request/show/369111
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=60
This release addresses several bugs, most notably those related to
the yum module (introduced in 1.9.3):
+ Fixes a bug where yum state=latest would error if there were no
updates to install.
+ Fixes a bug where yum state=latest did not work with wildcard
package names.
+ Fixes a bug in lineinfile relating to escape sequences.
+ Fixes a bug where vars_prompt was not keeping passwords private
by default.
+ Fix ansible-galaxy and the hipchat callback plugin to check that
the host it is contacting matches its TLS Certificate.
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=51
- Security fixes to check that hostnames match certificates with
https urls (CVE-2015-3908):
+ get_url and uri modules
+ url and etcd lookup plugins
- Security fixes to the zone (Solaris containers), jail (bsd
containers), and chroot connection plugins. These plugins can be
used to connect to their respective container types in leiu of the
standard ssh connection. Prior to this fix being applied these
connection plugins didn't properly handle symlinks within the containers
which could lead to files intended to be written to or read from the
container being written to or read from the host system instead. (CVE
pending)
- Fixed a bug in the service module where init scripts were being
incorrectly used instead of upstart/systemd.
- Fixed a bug where sudo/su settings were not inherited from
ansible.cfg correctly.
- Fixed a bug in the rds module where a traceback may occur due to an
unbound variable.
- Fixed a bug where certain remote file systems where the SELinux
context was not being properly set.
- Re-enabled several windows modules which had been partially merged
(via action plugins):
+ win_copy.ps1
+ win_copy.py
+ win_file.ps1
+ win_file.py
+ win_template.py
- Fix bug using with_sequence and a count that is zero. Also allows
counting backwards isntead of forwards
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=46
- updated to version 1.9.1
* Fixed a bug related to Kerberos auth when using winrm with a domain account.
* Fixing several bugs in the s3 module.
* Fixed a bug with upstart service detection in the service module.
* Fixed several bugs with the user module when used on OSX.
* Fixed unicode handling in some module situations (assert and shell/command execution).
* Fixed a bug in redhat_subscription when using the activationkey parameter.
* Fixed a traceback in the gce module on EL6 distros when multiple pycrypto installations are available.
* Added support for PostgreSQL 9.4 in rds_param_group
* Several other minor fixes.
OBS-URL: https://build.opensuse.org/request/show/304448
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=44
- updated package to latest release ## 1.8.1 "You Really Got Me"
* Various bug fixes in postgresql and mysql modules.
* Fixed a bug related to lookup plugins used within roles not
finding files based on the relative paths to the roles files/ directory.
* Fixed a bug related to vars specified in plays being templated too early,
resulting in incorrect variable interpolation.
* Fixed a bug related to git submodules in bare repos.
* fact caching support, pluggable, initially supports Redis (DOCS pending)
* 'serial' size in a rolling update can be specified as a percentage
* added new Jinja2 filters, 'min' and 'max' that take lists
* new 'ansible_version' variable available contains a dictionary of version info
* For ec2 dynamic inventory, ec2.ini can has various new configuration options
* 'ansible vault view filename.yml' opens filename.yml decrypted in a pager.
* no_log parameter now surpressess data from callbacks/output as well as syslog
* ansible-galaxy install -f requirements.yml allows advanced options and installs
from non-galaxy SCM sources and tarballs.
* command_warnings feature will warn about when usage of the shell/command module
can be simplified to use core modules - this can be enabled in ansible.cfg
* new omit value can be used to leave off a parameter when not set, like so
module_name: a=1 b={{ c | default(omit) }}, would not pass value for b (not even
an empty value) if c was not set.
* developers: 'baby JSON' in module responses, originally intended for writing modules
in bash, is removed as a feature to simplify logic, script module remains available
for running bash scripts.
* async jobs started in "fire & forget" mode can now be checked on at a later time.
* added ability to subcategorize modules for docs.ansible.com
* added ability for shipped modules to have aliases with symlinks
* added ability to deprecate older modules by starting with "_" and
including "deprecated: message why" in module docs
+ New Modules:
OBS-URL: https://build.opensuse.org/request/show/263653
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=33
- update to 1.7.2:
- Fixes a bug in accelerate mode which caused a traceback when trying to use that connection method.
- Fixes a bug in vault where the password file option was not being used correctly internally.
- Improved multi-line parsing when using YAML literal blocks (using > or |).
- Fixed a bug with the file module and the creation of relative symlinks.
- Fixed a bug where checkmode was not being honored during the templating of files.
- Other various bug fixes.
- Switch to xz for source package
OBS-URL: https://build.opensuse.org/request/show/258481
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=31
Major new features:
+ Windows support (alpha) using native PowerShell remoting
+ Tasks can now specify run_once: true, meaning they will be executed
exactly once. This can be combined with delegate_to to trigger actions
you want done just the one time versus for every host in inventory.
New Modules:
+ cloud: azure
+ cloud: rax_meta
+ cloud: rax_scaling_group
+ cloud: rax_scaling_policy
+ windows: version of setup module
+ windows: version of slurp module
+ windows: win_feature
+ windows: win_get_url
+ windows: win_msi
+ windows: win_ping
+ windows: win_user
+ windows: win_service
+ windows: win_group
New inventory scripts:
+ SoftLayer
+ Windows Azure
Docker module bug fixes:
+ Fixed support for specifying rw/ro bind modes for volumes
+ Fixed support for allowing the tag in the image parameter
Other notable changes:
+ Performance enhancements related to previous security fixes, which
could cause slowness when modules returned very large JSON results.
This specifically impacted the unarchive module frequently, which
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=28
* Security updates to further protect against the incorrect
execution of untrusted data
* Additional tweaks to prevent the incorrect execution of
untrusted data
* Security update to prevent local operations from executing as
the result of specifically crafted untrusted data
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=26
* The deprecated legacy variable templating system has been
finally removed. Use {{ foo }} always not $foo or ${foo}.
* Any data file can also be JSON. Use sparingly -- with great power
comes great responsibility. Starting file with "{" or "[" denotes JSON.
* Added 'gathering' param for ansible.cfg to change the default
gather_facts policy.
* Accelerate improvements:
+ multiple users can connect with different keys, when
accelerate_multi_key = yes is specified in the ansible.cfg.
+ daemon lifetime is now based on the time from the last activity,
not the time from the daemon's launch.
* ansible-playbook now accepts --force-handlers to run handlers
even if tasks result in failures.
* Added VMWare support with the vsphere_guest module.
* many new modules and ther notable changes, please read
/usr/share/doc/packages/ansible/CHANGELOG.md for details
- use new upstream URL(s)
- require python-httplib2 and python-setuptools
- ignore "wrong" permissions of synchronize.py
- ignore rpmlint warning about requiring python-httplib2 explicitely
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=24
* Fixes to the git module related to host key checking
* Force command action to not be executed by the shell unless
specifically enabled.
* Validate SSL certs accessed through urllib*.
* Implement new default cipher class AES256 in ansible-vault.
* Misc bug fixes.
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=22
Major features/changes:
* when_foo which was previously deprecated is now removed, use
"when:" instead. Code generates appropriate error suggestion.
* include + with_items which was previously deprecated is now
removed, ditto. Use with_nested / with_together, etc.
* only_if, which is much older than when_foo and was deprecated,
is similarly removed.
* ssh connection plugin is now more efficient if you add
'pipelining=True' in ansible.cfg under [ssh_connection],
see example.cfg
* localhost/127.0.0.1 is not required to be in inventory if
referenced, if not in inventory, it does not implicitly appear
in the 'all' group.
* git module has new parameters (accept_hostkey, key_file, ssh_opts)
to ease the usage of git and ssh protocols.
* when using accelerate mode, the daemon will now be restarted
when specifying a different remote_user between plays.
* added no_log: option for tasks. When used, no logging information
will be sent to syslog during the module execution.
* acl module now handles 'default' and allows for either shorthand
entry or specific fields per entry section
* play_hosts is a new magic variable to provide a list of hosts
in scope for the current play.
* ec2 module now accepts 'exact_count' and 'count_tag' as a way to
enforce a running number of nodes by tags.
* all ec2 modules that work with Eucalyptus also now support a
'validate_certs' option, which can be set to 'off' for installations
using self-signed certs.
* Start of new integration test infrastructure (WIP)
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=19
+ Fixed issue with newer versions of pip not having --use-mirrors
+ Fixed role_path parsing from ansible.cfg
+ Fixed default role templates
+ Fixed a few bugs related to unicode
+ Fixed errors in the ssh connection method with large data returns
+ Miscellaneous fixes for a few modules
+ Add the ansible-galaxy command
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement/ansible?expand=0&rev=17
