diff --git a/_service b/_service
index 55874fe..3f18d28 100644
--- a/_service
+++ b/_service
@@ -3,8 +3,8 @@
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="url">https://github.com/M0ses/kanku.git</param>
     <param name="scm">git</param>
-    <param name="changesgenerate">enable</param>
     <param name="extract">dist/kanku.spec</param>
+    <param name="extract">dist/kanku.changes</param>
     <param name="extract">dist/debian.changelog</param>
     <param name="extract">dist/debian.compat</param>
     <param name="extract">dist/debian.control</param>
diff --git a/debian.changelog b/debian.changelog
index 35bbea0..bd95414 100644
--- a/debian.changelog
+++ b/debian.changelog
@@ -1,3 +1,29 @@
+kanku (0.17.0) unstable; urgency=medium
+
+  * updated to upstream version 0.17.0
+    * FEATURES
+      * [dist] new package 'kanku-iptables' (Store and restore kanku iptables rules)
+      * [dist] added x-scheme-handler kankus://
+      * [core] configurable SigAuth for http(s) dependent libraries, e.g.:
+        - `Kanku::Handler::OBSCheck`
+        - `Kanku::Handler::ImageDownload`
+        - `Kanku::Util::CurlHttpDownload`
+      * [dist] improvments for rpm/debian packages
+      * [test] updated libraries in base check
+      * [dist] new kanku job 'test' to create a vm running kanku test suite
+      * [handler] removed obsolete OpenStack handler and modules
+      * [handler] OBSCheck: setter for api_url for later use
+      * [handler] removed deprecated K::H::OBSDownload
+      * [templates] examples for Net::OBS::Client authentication
+      * [util] deleted Kanku::Util::HTTPMirror
+    * BUGFIXES
+      * [handler] fix skip_all_checks in OBSCheck
+      * [util] DoD: fixed auth problem
+      * [dist] fix mkdir for system-user-kankurun.conf
+      * [dist] more fixes for spec
+
+  -- Frank Schreiner <fschreiner@suse.de>  Fri, 12 Apr 2024 13:35:09 +0000
+
 kanku (0.16.2) unstable; urgency=medium
 
   * updated to upstream version 0.16.2
diff --git a/debian.control b/debian.control
index 6d29f77..d74a419 100644
--- a/debian.control
+++ b/debian.control
@@ -10,5 +10,5 @@ Package: kanku
 Architecture: any
 Description: kanku is a utility for integration of kiwi images built
   by the Open Build Service (OBS) in a development and testing workflow.
-Depends: libmoosex-app-perl, libnamespace-autoclean-perl, libmoose-perl, libmodule-pluggable-perl, libpod-elemental-perl, libio-interactive-perl, liblog-log4perl-perl, libmoosex-singleton-perl, libyaml-pp-perl, liblwp-protocol-https-perl, libwww-perl, libjson-xs-perl, libpath-class-perl, libfile-homedir-perl, libterm-readkey-perl, libdbix-class-perl, libdbix-class-migration-perl, liblog-log4perl-perl, libjson-maybexs-perl, libtype-tiny-perl, libjson-maybexs-perl, libdevel-partialdump-perl, libsql-translator-perl, liblog-any-perl, libsys-virt-perl, libexpect-perl, libtemplate-perl, libnet-ip-perl, libxml-xpath-perl, libfile-libmagic-perl, libipc-run-perl, libnet-amqp-perl, libnet-amqp-rabbitmq-perl, libmath-int64-perl, libconst-fast-perl, libssh-session-perl, libuuid-perl, libdancer2-perl, libsession-token-perl,libdancer2-plugin-dbic-perl, libnet-obs-client-perl, libtest-exception-perl, libdbix-class-fixtures-perl, libdancer2-plugin-auth-extensible-perl, libxml-structured-perl, libmoosex-app-perl, libdata-dump-streamer-perl, libdancer2-plugin-websocket-perl, libdata-visitor-perl, libconfig-tiny-perl, libio-all-perl, gnupg2, libdbix-class-deploymenthandler-perl, liblog-contextual-perl, libmoosex-role-parameterized-perl, libsql-splitstatement-perl, libdbix-class-schema-loader-perl, libfile-sharedir-projectdistdir-perl, libdbd-sqlite3-perl, libdatetime-format-sqlite-perl, libmoosex-app-cmd-perl, libvirt-daemon-system, libarchive-cpio-perl, libfile-copy-recursive-perl
+Depends: libmoosex-app-perl, libnamespace-autoclean-perl, libmoose-perl, libmodule-pluggable-perl, libpod-elemental-perl, libio-interactive-perl, liblog-log4perl-perl, libmoosex-singleton-perl, libyaml-pp-perl, liblwp-protocol-https-perl, libwww-perl, libjson-xs-perl, libpath-class-perl, libfile-homedir-perl, libterm-readkey-perl, libdbix-class-perl, libdbix-class-migration-perl, liblog-log4perl-perl, libjson-maybexs-perl, libtype-tiny-perl, libjson-maybexs-perl, libdevel-partialdump-perl, libsql-translator-perl, liblog-any-perl, libsys-virt-perl, libexpect-perl, libtemplate-perl, libnet-ip-perl, libxml-xpath-perl, libfile-libmagic-perl, libipc-run-perl, libnet-amqp-perl, libnet-amqp-rabbitmq-perl, libmath-int64-perl, libconst-fast-perl, libssh-session-perl, libuuid-perl, libdancer2-perl, libsession-token-perl,libdancer2-plugin-dbic-perl, libnet-obs-client-perl (>= 0.1.2), libtest-exception-perl, libdbix-class-fixtures-perl, libdancer2-plugin-auth-extensible-perl, libxml-structured-perl, libmoosex-app-perl, libdata-dump-streamer-perl, libdancer2-plugin-websocket-perl, libdata-visitor-perl, libconfig-tiny-perl, libio-all-perl, gnupg2, libdbix-class-deploymenthandler-perl, liblog-contextual-perl, libmoosex-role-parameterized-perl, libsql-splitstatement-perl, libdbix-class-schema-loader-perl, libfile-sharedir-projectdistdir-perl, libdbd-sqlite3-perl, libdatetime-format-sqlite-perl, libmoosex-app-cmd-perl, libvirt-daemon-system, libarchive-cpio-perl, libfile-copy-recursive-perl
 Recommends: libyaml-pp-libyaml-perl
diff --git a/debian.dsc b/debian.dsc
index 439c22d..0216a83 100644
--- a/debian.dsc
+++ b/debian.dsc
@@ -2,8 +2,8 @@ Format: 1.0
 Source: kanku
 Binary: kanku
 Architecture: any
-Version: 0.16.2
+Version: 0.17.0
 Maintainer: Frank Schreiner <fschreiner@suse.de>
 Standards-Version: 3.8.2
 Homepage: https://github.com/M0ses/kanku
-Build-Depends: debhelper (>= 5), libmoosex-app-perl, libnamespace-autoclean-perl, libmoose-perl, libmodule-pluggable-perl, libpod-elemental-perl, libio-interactive-perl, liblog-log4perl-perl, libmoosex-singleton-perl, libyaml-perl, liblwp-protocol-https-perl, libwww-perl, libjson-xs-perl, libpath-class-perl, libfile-homedir-perl, libterm-readkey-perl, libdbix-class-perl, libdbix-class-migration-perl, liblog-log4perl-perl, libjson-maybexs-perl, libtype-tiny-perl, libjson-maybexs-perl, libdevel-partialdump-perl, libsql-translator-perl, liblog-any-perl, libsys-virt-perl, libexpect-perl, libtemplate-perl, libnet-ip-perl, libxml-xpath-perl, libfile-libmagic-perl, libipc-run-perl, libnet-amqp-perl, libnet-amqp-rabbitmq-perl, libmath-int64-perl, libconst-fast-perl, libuuid-perl, libdancer2-perl, libsession-token-perl,libdancer2-plugin-dbic-perl, libnet-obs-client-perl, libtest-exception-perl, libdbix-class-fixtures-perl, libdancer2-plugin-auth-extensible-perl, libxml-structured-perl, libmoosex-app-perl, libdata-dump-streamer-perl, libdancer2-plugin-websocket-perl, libdata-visitor-perl, libconfig-tiny-perl, libio-all-perl, gnupg2, libdbix-class-deploymenthandler-perl, liblog-contextual-perl, libmoosex-role-parameterized-perl, libsql-splitstatement-perl, libdbix-class-schema-loader-perl, libfile-sharedir-projectdistdir-perl, libdbd-sqlite3-perl, libdatetime-format-sqlite-perl, libmoosex-app-cmd-perl, libyaml-pp-perl, libssh-session-perl
+Build-Depends: debhelper (>= 5), libmoosex-app-perl, libnamespace-autoclean-perl, libmoose-perl, libmodule-pluggable-perl, libpod-elemental-perl, libio-interactive-perl, liblog-log4perl-perl, libmoosex-singleton-perl, libyaml-perl, liblwp-protocol-https-perl, libwww-perl, libjson-xs-perl, libpath-class-perl, libfile-homedir-perl, libterm-readkey-perl, libdbix-class-perl, libdbix-class-migration-perl, liblog-log4perl-perl, libjson-maybexs-perl, libtype-tiny-perl, libjson-maybexs-perl, libdevel-partialdump-perl, libsql-translator-perl, liblog-any-perl, libsys-virt-perl, libexpect-perl, libtemplate-perl, libnet-ip-perl, libxml-xpath-perl, libfile-libmagic-perl, libipc-run-perl, libnet-amqp-perl, libnet-amqp-rabbitmq-perl, libmath-int64-perl, libconst-fast-perl, libuuid-perl, libdancer2-perl, libsession-token-perl,libdancer2-plugin-dbic-perl, libnet-obs-client-perl (>= 0.1.2), libtest-exception-perl, libdbix-class-fixtures-perl, libdancer2-plugin-auth-extensible-perl, libxml-structured-perl, libmoosex-app-perl, libdata-dump-streamer-perl, libdancer2-plugin-websocket-perl, libdata-visitor-perl, libconfig-tiny-perl, libio-all-perl, gnupg2, libdbix-class-deploymenthandler-perl, liblog-contextual-perl, libmoosex-role-parameterized-perl, libsql-splitstatement-perl, libdbix-class-schema-loader-perl, libfile-sharedir-projectdistdir-perl, libdbd-sqlite3-perl, libdatetime-format-sqlite-perl, libmoosex-app-cmd-perl, libyaml-pp-perl, libssh-session-perl
diff --git a/kanku-0.16.2.tar.xz b/kanku-0.16.2.tar.xz
deleted file mode 100644
index ef63923..0000000
--- a/kanku-0.16.2.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:dc3ea605d8e0e105f3c57cb326f3ca5fbb3aeb0159ac3104085d8ace05d29c75
-size 2536428
diff --git a/kanku-0.17.0.tar.xz b/kanku-0.17.0.tar.xz
new file mode 100644
index 0000000..439cfbd
--- /dev/null
+++ b/kanku-0.17.0.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:16e2fd4b42326415ce743818be6963417ed5ba792332e8598ead62ce6f025327
+size 2534060
diff --git a/kanku.changes b/kanku.changes
index f2f3521..39f433a 100644
--- a/kanku.changes
+++ b/kanku.changes
@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Fri Apr 12 13:35:09 UTC 2024 - Frank Schreiner <fschreiner@suse.de>
+
+- Update to version 0.17.0:
+  * FEATURES
+    * [dist] new package 'kanku-iptables' (Store and restore kanku iptables rules)
+    * [dist] added x-scheme-handler kankus://
+    * [core] configurable SigAuth for http(s) dependent libraries, e.g.:
+      - `Kanku::Handler::OBSCheck`
+      - `Kanku::Handler::ImageDownload`
+      - `Kanku::Util::CurlHttpDownload`
+    * [dist] improvments for rpm/debian packages
+    * [test] updated libraries in base check
+    * [dist] new kanku job 'test' to create a vm running kanku test suite
+    * [handler] removed obsolete OpenStack handler and modules
+    * [handler] OBSCheck: setter for api_url for later use
+    * [handler] removed deprecated K::H::OBSDownload
+    * [templates] examples for Net::OBS::Client authentication
+    * [util] deleted Kanku::Util::HTTPMirror
+  * BUGFIXES
+    * [handler] fix skip_all_checks in OBSCheck
+    * [util] DoD: fixed auth problem
+    * [dist] fix mkdir for system-user-kankurun.conf
+    * [dist] more fixes for spec
+
 -------------------------------------------------------------------
 Tue Feb 13 17:44:07 UTC 2024 - FSchreiner@suse.com
 
diff --git a/kanku.spec b/kanku.spec
index e3ed4cf..09e0bd4 100644
--- a/kanku.spec
+++ b/kanku.spec
@@ -22,7 +22,7 @@
 
 Name:           kanku
 # Version gets set by obs-service-tar_scm
-Version:        0.16.2
+Version:        0.17.0
 Release:        0
 License:        GPL-3.0-only
 Summary:        Development and continuous integration
@@ -65,7 +65,7 @@ BuildRequires:  perl(Moose)
 BuildRequires:  perl(MooseX::App)
 BuildRequires:  perl(MooseX::Singleton)
 BuildRequires:  perl(Net::IP)
-BuildRequires:  perl(Net::OBS::Client) >= 0.1.0
+BuildRequires:  perl(Net::OBS::Client) >= 0.1.2
 BuildRequires:  perl(Libssh::Session)
 BuildRequires:  perl(Path::Class)
 BuildRequires:  perl(Plack)
@@ -97,6 +97,7 @@ Requires:       kanku-scheduler = %{version}
 Requires:       kanku-triggerd = %{version}
 Requires:       kanku-web = %{version}
 Requires:       kanku-worker = %{version}
+Requires:       kanku-iptables = %{version}
 
 %description
 kanku is a utility for integration of kiwi images built
@@ -117,7 +118,7 @@ e.g. to prepare development environments or run simple tests.
 
 %install
 %make_install DOCDIR=%{_defaultdocdir}/kanku/
-mkdir -p %{buildroot}/%{_sysusersdir}/system-user-%{kanku_user}.conf
+mkdir -p %{buildroot}/%{_sysusersdir}
 cp dist/system-user-%{kanku_user}.conf %{buildroot}/%{_sysusersdir}/system-user-%{kanku_user}.conf
 %fdupes %{buildroot}/opt/kanku/share
 ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rckanku-web
@@ -125,6 +126,7 @@ ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rckanku-worker
 ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rckanku-dispatcher
 ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rckanku-scheduler
 ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rckanku-triggerd
+ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rckanku-iptables
 
 %check
 # FIXME
@@ -137,7 +139,6 @@ ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rckanku-triggerd
 %package common
 Summary:        Common files for kanku
 
-Recommends:     apache2
 Recommends:     osc
 Recommends:     perl(IO::Uncompress::UnXz)
 Recommends:     perl(YAML::PP::LibYAML)
@@ -167,7 +168,7 @@ Requires:       perl(Moose)
 Requires:       perl(MooseX::App)
 Requires:       perl(MooseX::Singleton)
 Requires:       perl(Net::IP)
-Requires:       perl(Net::OBS::Client)
+Requires:       perl(Net::OBS::Client) >= 0.1.2
 Requires:       perl(Libssh::Session)
 Requires:       perl(Path::Class)
 Requires:       perl(Sys::Virt)
@@ -253,7 +254,6 @@ common config and lib files used in kanku
 /usr/lib/kanku/lib/Kanku/Util/
 /usr/lib/kanku/lib/Kanku/Util.pm
 /usr/lib/kanku/lib/Kanku/Task/
-/usr/lib/kanku/lib/OpenStack/
 /usr/lib/kanku/lib/Kanku/Config.pm
 %dir /usr/lib/kanku/lib/Kanku/Config/
 /usr/lib/kanku/lib/Kanku/Config/Defaults.pm
@@ -294,6 +294,7 @@ Requires:       (perl(Passwd::Keyring::Gnome) if gnome-keyring)
 Requires:       (perl(Passwd::Keyring::KDEWallet) if kwalletd5)
 Requires:       perl(IO::Interactive)
 Requires:       perl(Net::AMQP::RabbitMQ)
+Requires:       openssh-clients
 
 %description cli
 Command line client for kanku, mainly used for setup tasks
@@ -399,6 +400,8 @@ Requires:       server(smtp)
 %else
 Requires:       smtp_daemon
 %endif
+Recommends:     apache2
+Recommends:     rabbitmq-server-plugins
 
 %description web
 WebUI for kanku using perl Dancer
@@ -496,6 +499,7 @@ Requires:       kanku-common-server = %{version}
 Requires:       perl(Net::AMQP::RabbitMQ)
 Requires(pre):  sudo
 Recommends:     rabbitmq-server
+Recommends:     openvswitch
 
 %description dispatcher
 A dispatcher for kanku based on RabbitMQ.
@@ -579,7 +583,7 @@ Summary:        Url wrapper for kanku:// urls
 Requires:       desktop-file-utils
 Requires:       kanku-cli = %{version}
 Requires:       shared-mime-info
-Obsoletes:      kanku-url-wrapper
+Obsoletes:      kanku-url-wrapper =< 0.11.0
 
 %description urlwrapper
 A URL wrapper to start kanku from kanku:// urls in the browser.
@@ -610,8 +614,46 @@ update-desktop-database
 %dir /usr/share/icons/hicolor/64x64/apps
 /usr/share/icons/hicolor/64x64/apps/kanku.png
 
+%package iptables
+Summary: Store and restore kanku iptables rules
+# Requires: /usr/lib/kanku/network-setup.pl
+Requires: kanku-common
+
+%description iptables
+kanku-iptables.service is required to store/restore iptables rules for
+kanku guests which are using the 'autostart' flag.
+
+%post iptables
+%systemd_post kanku-iptables.service
+
+%preun iptables
+%systemd_preun kanku-iptables.service
+
+%postun iptables
+%systemd_postun_with_restart kanku-iptables.service
+
+%files iptables
+%{_unitdir}/kanku-iptables.service
+%{_sbindir}/rckanku-iptables
+
 %changelog
 
 %changelog cli
 
 %changelog common
+
+%changelog common-server
+
+%changelog web
+
+%changelog dispatcher
+
+%changelog urlwrapper
+
+%changelog scheduler
+
+%changelog triggerd
+
+%changelog iptables
+
+%changelog worker