keepalived/keepalived.changes

278 lines
11 KiB
Plaintext
Raw Normal View History

-------------------------------------------------------------------
Mon Jan 22 13:03:55 UTC 2018 - mrueckert@suse.de
- enable json stats and config dump support
new BR: pkgconfig(json-c)
- disable dynamic loading of libipset and link it instead
- enable stacktrace support
- turn on snmp-rfcv2 and snmp-rfcv3 support
- do not reference the keepalived.socket in the rpm scriptlets
Accepting request 563827 from home:lrupp:branches:network - update to 1.4.0 * Add Linux build and runtime versions to -v output. * Log kernel version and build kernel version to log at startup. * Don't sleep for 1 send when exiting vrrp process if no vrrp instances. * With large configurations the syslog can get flooded and drop output. This commit adds options to not log to syslog, and also to log all output to files. * Add option to only flush log files before forking. * Don't poll netlink for all interfaces each time add a VMAC. We can poll for the individual interface details which significantly reduces what we have to process. * Print interface details in keepalived.data output. * Add high performace child finder code. The code to find the relevant thread to execute afer a child process (either a vrrp track script or a misc_check healthchecker) was doing a linear search for the matching pid, which if there are a large number of child processes running could become time consuming. The code now will enable high performance child finding, based on using mlists hashed by the pid, if there are 32 or more vrrp track scripts or misc check healthcheckers. The size of the mlist is based on the number of scripts, with a limit of 256. * Improve high performance child termination timeout code. * Preserve filename in script path name resolution. Some executables change their behaviour depending on the name by which they are invoked (e.g. /usr/sbin/pidof when it is a link to /usr/sbin/killall5). Using realpath() changes the file name part if it is a symbolic link. This commit resolves all symbolic links to directories, but leaves the file name part unaltered. It then checks the security of both the path to the link and the path to the real file. OBS-URL: https://build.opensuse.org/request/show/563827 OBS-URL: https://build.opensuse.org/package/show/network/keepalived?expand=0&rev=38
2018-01-15 15:17:04 +00:00
-------------------------------------------------------------------
Fri Jan 12 08:53:51 UTC 2018 - lars@linux-schulserver.de
- update to 1.4.0
* Add Linux build and runtime versions to -v output.
* Log kernel version and build kernel version to log at startup.
* Don't sleep for 1 send when exiting vrrp process if no vrrp instances.
* With large configurations the syslog can get flooded and drop output.
This commit adds options to not log to syslog, and also to log all
output to files.
* Add option to only flush log files before forking.
* Don't poll netlink for all interfaces each time add a VMAC.
We can poll for the individual interface details which significantly
reduces what we have to process.
* Print interface details in keepalived.data output.
* Add high performace child finder code.
The code to find the relevant thread to execute afer a child process
(either a vrrp track script or a misc_check healthchecker) was doing
a linear search for the matching pid, which if there are a large number
of child processes running could become time consuming.
The code now will enable high performance child finding, based on using
mlists hashed by the pid, if there are 32 or more vrrp track scripts or
misc check healthcheckers. The size of the mlist is based on the number
of scripts, with a limit of 256.
* Improve high performance child termination timeout code.
* Preserve filename in script path name resolution.
Some executables change their behaviour depending on the name by
which they are invoked (e.g. /usr/sbin/pidof when it is a link to
/usr/sbin/killall5). Using realpath() changes the file name part
if it is a symbolic link. This commit resolves all symbolic links
to directories, but leaves the file name part unaltered. It then
checks the security of both the path to the link and the path to
the real file.
* Handle scripts names that are symbolic links properly.
* Fix some RFC SNMP issues.
* Fix removing left-over addresses if keepalived aborts.
* Update openssl use to stop using deprecated functions
openssl from version 1.1 deprecated certain functions that keepalived
was using. This commit ceases using those functions if the version
of openssl is >= 1.1.
* Allow sync groups with only 1 member, but issue a warning.
* Add replaceable parameters in configuration files.
* Add multiline configuration definitions.
* Fix keepalived.conf(5) man page.
* Suppress error message when removing leftover addresses at startup.
=> find more changes at /usr/share/doc/packages/keepalived/
- rebase keepalive-init.patch
- use upstream systemd service file instead providing an own one
=> removed keepalived.service
- remove executable bit from samples in docdir
- check that LVS support is enabled
- optionally enable dump configuration and stats as JSON (via bcond)
=> BuildRequire libjson-c-devel
- restrict /etc/keepalived permissions to root
-------------------------------------------------------------------
Mon Nov 27 11:26:58 UTC 2017 - jengelh@inai.de
- Do not suppress errors from useradd.
- Ensure neutrality of description.
-------------------------------------------------------------------
Thu Nov 27 09:11:55 UTC 2017 - igarcia@suse.com
- update to 1.3.9:
Revert using github tarball and use original source again.
Too many fixes and features to list, refer to
/usr/share/doc/packages/keepalived/ChangeLog for a detailed list.
-------------------------------------------------------------------
Thu Nov 23 13:38:30 UTC 2017 - rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
-------------------------------------------------------------------
Thu Feb 16 12:27:53 UTC 2017 - mrueckert@suse.de
- use tarball from https://github.com/acassen/keepalived/issues/524
the original tarball did not build. This has the necessary fix
applied. for the 1.3.4 update see the TODO entry in the preamble.
-------------------------------------------------------------------
Wed Feb 15 11:38:16 UTC 2017 - mrueckert@suse.de
- update to 1.3.3
Some minor fix, extensions and updates. snapcraft support. Refer
to /usr/share/doc/packages/keepalived/ChangeLog for more infos.
-------------------------------------------------------------------
Mon Dec 12 14:05:25 UTC 2016 - mrueckert@suse.de
- fix building with libnfnetlink. the additional include path needs
to be in CPPFLAGS instead of CFLAGS now.
- enabled a few more features:
- enhanced snmp support (V2/V3 RFC)
- make sure we build with ipset/libiptc and routes support
- prepared dbus support: waiting for boo#1015141
-------------------------------------------------------------------
Mon Dec 12 12:59:54 UTC 2016 - mrueckert@suse.de
- update 1.3.2
- Security focused on notify heplers. Some minor fix and
extensions.
- changes from 1.3.1
- Quick script fix for regression brought by last release.
- changes from 1.3.0
- New MAJOR release with stabilization fixes. Support to DBus.
Conf extensions. Parser error log. Security extensions to run
scripts more secure.
- changes from 1.2.24
- MAJOR release with stabilization fixes and new features like
support to network namespace.
Refer to /usr/share/doc/packages/keepalived/ChangeLog
for more infos.
-------------------------------------------------------------------
Wed Jul 20 09:07:35 UTC 2016 - michael@stroeder.com
- update to 1.2.23
Some VRRP fixes. Some Healthcheckers fixes.
Refer to ChangeLog for more infos.
-------------------------------------------------------------------
Fri Jul 8 10:32:22 UTC 2016 - mrueckert@suse.de
- update to 1.2.22
Some VRRP fixes. Refer to ChangeLog for more infos.
- update to 1.2.21
Some fixes for last major release 1.2.20. Extensions on vrrp
framework. Refer to ChangeLog for more infos.
- update to 1.2.20
BUNCH of extensions, fixes, cleanup & production considerations.
Distro packages maintainers are strongly encouraged to upgrade.
- new BR libnfnetlink-devel
- we no longer ship the VRRP-MIB
-------------------------------------------------------------------
Thu Feb 11 10:44:31 UTC 2016 - lars@linux-schulserver.de
- enhanced keepalive-init.patch :
+ replace tabs with spaces
+ read /etc/sysconfig/keepalived, if exists and use the settings
there instead of the default KEEPALIVED_OPTIONS in case the
user changed them
-------------------------------------------------------------------
Thu Jan 28 12:13:36 UTC 2016 - mrueckert@suse.de
- use package name buildrequires on sle11 to fix building
-------------------------------------------------------------------
Thu Jan 28 11:46:11 UTC 2016 - mrueckert@suse.de
- enable snmp for better monitoring
- enable sha1 support
-------------------------------------------------------------------
Wed Oct 7 11:45:41 UTC 2015 - dimstar@opensuse.org
- Update to version 1.2.19:
+ vrrp: fix checksum computation in vrrp v2 for socket family
AF_INET.
+ Some cosmetics at Makefile stuff.
- Changes from version 1.2.18:
+ some cosmetics changes (in memory and parser).
+ remove dead/not used code.
+ revert notify script brought by last release.
+ revert VRRP preemption speed up extension.
+ vrrp: ix vrrp removes incorrect IPv4 address when VIPs are
removed.
+ vrrp: Re-enable VRRPv2 checksum on inbound pkts.
- Changes from version 1.2.17:
+ zalloc use xalloc for consistency.
+ memory: fix wrong size calculation in zfree.
+ Fix keepalived snmp configuration.
+ Change comments to match kernel style.
+ smtp: Fix wrong algorithm in RCPT-TO building.
+ Lots of vrrp fixes.
- Changes from version 1.2.16:
+ Properly close netlink channel to avoid fd leak.
+ Use getaddrinfo instead of gethostbyname to workaround glibc
gethostbyname function buffer overflow (boo#949238).
+ Lots of ipvs fixes.
-------------------------------------------------------------------
Wed Oct 7 10:31:50 UTC 2015 - mrueckert@suse.de
- no longer install the init script on systemd systems
-------------------------------------------------------------------
Wed Mar 11 13:21:29 UTC 2015 - dimstar@opensuse.org
- Update to version 1.2.15:
+ Bugfixes.
- Changes from version 1.2.14:
+ VRRP bugfixes and extensions. IPVS bugfixes and code code
cleanup.
- Changes from version 1.2.13:
+ VRRP fixes and extensions. Extrend and unify checker
framework.
-------------------------------------------------------------------
Mon Feb 2 01:32:37 UTC 2015 - crrodriguez@opensuse.org
- Build with -DOPENSSL_NO_SSL_INTERN, if package starts accessing
the SSL library internals it must fail to build now, in upcoming
openSSL versions structures are opaque.
- BuildRequire libnl3
- Do not strip binaries, fix -debuginfo packages.
-------------------------------------------------------------------
Sun Nov 09 05:21:00 UTC 2014 - Led <ledest@gmail.com>
- fix bashisms in pre script
-------------------------------------------------------------------
Thu Jul 31 14:28:08 UTC 2014 - dimstar@opensuse.org
- Rename rpmlintrc to %{name}-rpmlintrc.
Follow the packaging guidelines.
-------------------------------------------------------------------
Tue Feb 11 08:12:55 UTC 2014 - boris@steki.net
- updated to latest upstream version 1.2.12
+ Fix reallocation issue introduced in last merge.
+ Fix some minor memory leaks.
+ Better libnl support and selection.
+ VRRP unicast TTL fix.
+ Support to newer libnl.
+ More IPv6 support.
+ Fix/extend VRRP gratuitous ARP handling.
+ Support xmit VRRP packets from base VMAC interface.
+ VRRP multicast group tweaking.
+ Fixed VRRP socket sync while leaving FAULT state.
+ Code cleanup and cosmetics.
-------------------------------------------------------------------
Tue Jan 7 10:55:42 UTC 2014 - speilicke@suse.com
- Add cyrus-sasl for old distros
-------------------------------------------------------------------
Tue Nov 19 14:01:47 UTC 2013 - speilicke@suse.com
- Update to version 1.2.9:
+ Extended VRRP code for faster sync and transition.
+ Fixed VRRP unicast code to support routed packet.
+ Fixed VRRP checksum computation.
+ Extended VRRP code tweaking IPv6 VIP install by disabling DAD algo and setting deprecated flag.
+ Fixed some issues in checker framework while processing hysteresis.
+ Extended checker framework to support use of status_code and digest at a time.
- Changes from version 1.2.8:
+ Add support for VRRP unicast.
+ Add support for VRRP IPv6 routes.
+ Add support to LVS One-Packet Scheduling.
+ Add CLI core framework.
+ Misc bugfixes, typo and cosmetics.
- Drop keepalived_man_fix.patch: merged upstream
-------------------------------------------------------------------
Tue Nov 20 16:11:59 UTC 2012 - mrueckert@suse.de
- initial package of 1.2.7