2686359b2c
- Update to Salt release version 3006.0 (jsc#PED-3139) * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add python3-looseversion as new dependency for salt - Add python3-packaging as new dependency for salt - Drop conflictive patch dicarded from upstream - Fix SLS rendering error when Jinja macros are used - Fix version detection and avoid building and testing failures - Added: * fix-version-detection-and-avoid-building-and-testing.patch * make-sure-the-file-client-is-destroyed-upon-used.patch - Modified: * 3005.1-implement-zypper-removeptf-573.patch * activate-all-beacons-sources-config-pillar-grains.patch * add-custom-suse-capabilities-as-grains.patch * add-environment-variable-to-know-if-yum-is-invoked-f.patch * add-migrated-state-and-gpg-key-management-functions-.patch * add-publish_batch-to-clearfuncs-exposed-methods.patch * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch * add-sleep-on-exception-handling-on-minion-connection.patch * add-standalone-configuration-file-for-enabling-packa.patch * add-support-for-gpgautoimport-539.patch * allow-vendor-change-option-with-zypper.patch * async-batch-implementation.patch * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch * bsc-1176024-fix-file-directory-user-and-group-owners.patch * change-the-delimeters-to-prevent-possible-tracebacks.patch * control-the-collection-of-lvm-grains-via-config.patch * debian-info_installed-compatibility-50453.patch * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch * don-t-use-shell-sbin-nologin-in-requisites.patch * drop-serial-from-event.unpack-in-cli.batch_async.patch * early-feature-support-config.patch * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch * enhance-openscap-module-add-xccdf_eval-call-386.patch * fix-bsc-1065792.patch * fix-for-suse-expanded-support-detection.patch * fix-issue-2068-test.patch * fix-missing-minion-returns-in-batch-mode-360.patch * fix-ownership-of-salt-thin-directory-when-using-the-.patch * fix-regression-with-depending-client.ssh-on-psutil-b.patch * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch * fix-the-regression-for-yumnotify-plugin-456.patch * fix-traceback.print_exc-calls-for-test_pip_state-432.patch * fixes-for-python-3.10-502.patch * include-aliases-in-the-fqdns-grains.patch * info_installed-works-without-status-attr-now.patch * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch * make-aptpkg.list_repos-compatible-on-enabled-disable.patch * make-setup.py-script-to-not-require-setuptools-9.1.patch * pass-the-context-to-pillar-ext-modules.patch * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch * prevent-shell-injection-via-pre_flight_script_args-4.patch * read-repo-info-without-using-interpolation-bsc-11356.patch * restore-default-behaviour-of-pkg-list-return.patch * return-the-expected-powerpc-os-arch-bsc-1117995.patch * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch * run-salt-api-as-user-salt-bsc-1064520.patch * run-salt-master-as-dedicated-salt-user.patch * save-log-to-logfile-with-docker.build.patch * skip-package-names-without-colon-bsc-1208691-578.patch * switch-firewalld-state-to-use-change_interface.patch * temporary-fix-extend-the-whitelist-of-allowed-comman.patch * update-target-fix-for-salt-ssh-to-process-targets-li.patch * use-adler32-algorithm-to-compute-string-checksums.patch * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch * use-salt-bundle-in-dockermod.patch * x509-fixes-111.patch * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch - Removed: * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch * allow-entrypoint-compatibility-for-importlib-metadat.patch * clarify-pkg.installed-pkg_verify-documentation.patch * detect-module.run-syntax.patch * fix-salt.states.file.managed-for-follow_symlinks-tru.patch * fix-state.apply-in-test-mode-with-file-state-module-.patch * fix-test_ipc-unit-tests.patch * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch * fopen-workaround-bad-buffering-for-binary-mode-563.patch * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch * ignore-extend-declarations-from-excluded-sls-files.patch * ignore-non-utf8-characters-while-reading-files-with-.patch * include-stdout-in-error-message-for-zypperpkg-559.patch * make-pass-renderer-configurable-other-fixes-532.patch * make-sure-saltcacheloader-use-correct-fileclient-519.patch * normalize-package-names-once-with-pkg.installed-remo.patch * retry-if-rpm-lock-is-temporarily-unavailable-547.patch * set-default-target-for-pip-from-venv_pip_target-envi.patch * state.apply-don-t-check-for-cached-pillar-errors.patch * state.orchestrate_single-does-not-pass-pillar-none-4.patch OBS-URL: https://build.opensuse.org/request/show/1084999 OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:saltstack/salt?expand=0&rev=210 |
||
---|---|---|
_lastrevision | ||
_service | ||
.gitattributes | ||
.gitignore | ||
3005.1-implement-zypper-removeptf-573.patch | ||
activate-all-beacons-sources-config-pillar-grains.patch | ||
add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch | ||
add-custom-suse-capabilities-as-grains.patch | ||
add-environment-variable-to-know-if-yum-is-invoked-f.patch | ||
add-migrated-state-and-gpg-key-management-functions-.patch | ||
add-publish_batch-to-clearfuncs-exposed-methods.patch | ||
add-salt-ssh-support-with-venv-salt-minion-3004-493.patch | ||
add-sleep-on-exception-handling-on-minion-connection.patch | ||
add-standalone-configuration-file-for-enabling-packa.patch | ||
add-support-for-gpgautoimport-539.patch | ||
add-support-for-name-pkgs-and-diff_attr-parameters-t.patch | ||
align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch | ||
allow-entrypoint-compatibility-for-importlib-metadat.patch | ||
allow-vendor-change-option-with-zypper.patch | ||
async-batch-implementation.patch | ||
avoid-excessive-syslogging-by-watchdog-cronjob-58.patch | ||
bsc-1176024-fix-file-directory-user-and-group-owners.patch | ||
change-the-delimeters-to-prevent-possible-tracebacks.patch | ||
clarify-pkg.installed-pkg_verify-documentation.patch | ||
control-the-collection-of-lvm-grains-via-config.patch | ||
debian-info_installed-compatibility-50453.patch | ||
detect-module.run-syntax.patch | ||
dnfnotify-pkgset-plugin-implementation-3002.2-450.patch | ||
do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch | ||
don-t-use-shell-sbin-nologin-in-requisites.patch | ||
drop-serial-from-event.unpack-in-cli.batch_async.patch | ||
early-feature-support-config.patch | ||
enable-passing-a-unix_socket-for-mysql-returners-bsc.patch | ||
enhance-openscap-module-add-xccdf_eval-call-386.patch | ||
fix-bsc-1065792.patch | ||
fix-for-suse-expanded-support-detection.patch | ||
fix-issue-2068-test.patch | ||
fix-missing-minion-returns-in-batch-mode-360.patch | ||
fix-ownership-of-salt-thin-directory-when-using-the-.patch | ||
fix-regression-with-depending-client.ssh-on-psutil-b.patch | ||
fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch | ||
fix-salt.states.file.managed-for-follow_symlinks-tru.patch | ||
fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch | ||
fix-state.apply-in-test-mode-with-file-state-module-.patch | ||
fix-test_ipc-unit-tests.patch | ||
fix-the-regression-for-yumnotify-plugin-456.patch | ||
fix-traceback.print_exc-calls-for-test_pip_state-432.patch | ||
fix-version-detection-and-avoid-building-and-testing.patch | ||
fixes-for-python-3.10-502.patch | ||
fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch | ||
fopen-workaround-bad-buffering-for-binary-mode-563.patch | ||
html.tar.bz2 | ||
ignore-erros-on-reading-license-files-with-dpkg_lowp.patch | ||
ignore-extend-declarations-from-excluded-sls-files.patch | ||
ignore-non-utf8-characters-while-reading-files-with-.patch | ||
include-aliases-in-the-fqdns-grains.patch | ||
include-stdout-in-error-message-for-zypperpkg-559.patch | ||
info_installed-works-without-status-attr-now.patch | ||
let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch | ||
make-aptpkg.list_repos-compatible-on-enabled-disable.patch | ||
make-pass-renderer-configurable-other-fixes-532.patch | ||
make-setup.py-script-to-not-require-setuptools-9.1.patch | ||
make-sure-saltcacheloader-use-correct-fileclient-519.patch | ||
make-sure-the-file-client-is-destroyed-upon-used.patch | ||
normalize-package-names-once-with-pkg.installed-remo.patch | ||
pass-the-context-to-pillar-ext-modules.patch | ||
prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch | ||
prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch | ||
prevent-shell-injection-via-pre_flight_script_args-4.patch | ||
read-repo-info-without-using-interpolation-bsc-11356.patch | ||
README.SUSE | ||
restore-default-behaviour-of-pkg-list-return.patch | ||
retry-if-rpm-lock-is-temporarily-unavailable-547.patch | ||
return-the-expected-powerpc-os-arch-bsc-1117995.patch | ||
revert-fixing-a-use-case-when-multiple-inotify-beaco.patch | ||
run-salt-api-as-user-salt-bsc-1064520.patch | ||
run-salt-master-as-dedicated-salt-user.patch | ||
salt-tmpfiles.d | ||
salt.changes | ||
salt.spec | ||
save-log-to-logfile-with-docker.build.patch | ||
set-default-target-for-pip-from-venv_pip_target-envi.patch | ||
skip-package-names-without-colon-bsc-1208691-578.patch | ||
state.apply-don-t-check-for-cached-pillar-errors.patch | ||
state.orchestrate_single-does-not-pass-pillar-none-4.patch | ||
switch-firewalld-state-to-use-change_interface.patch | ||
temporary-fix-extend-the-whitelist-of-allowed-comman.patch | ||
transactional_update.conf | ||
travis.yml | ||
update-documentation.sh | ||
update-target-fix-for-salt-ssh-to-process-targets-li.patch | ||
use-adler32-algorithm-to-compute-string-checksums.patch | ||
use-rlock-to-avoid-deadlocks-in-salt-ssh.patch | ||
use-salt-bundle-in-dockermod.patch | ||
v3006.0.tar.gz | ||
x509-fixes-111.patch | ||
zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch |
Salt-master as non-root user ============================ With this version of salt the salt-master will run as salt user. Why an extra user ================= While the current setup runs the master as root user, this is considered a security issue and not in line with the other configuration management tools (eg. puppet) which runs as a dedicated user. How can I undo the change ========================= If you would like to make the change before you can do the following steps manually: 1. change the user parameter in the master configuration user: root 2. update the file permissions: as root: chown -R root /etc/salt /var/cache/salt /var/log/salt /var/run/salt 3. restart the salt-master daemon: as root: rcsalt-master restart or systemctl restart salt-master NOTE ==== Running the salt-master daemon as a root user is considers by some a security risk, but running as root, enables the pam external auth system, as this system needs root access to check authentication. For more information: http://docs.saltstack.com/en/latest/ref/configuration/nonroot.html