SHA256
1
0
forked from pool/salt
Go to file
Dominique Leuenberger 9c44978ac7 Accepting request 1058037 from systemsmanagement:saltstack
- Allow entrypoint compatibility for "importlib-metadata>=5.0.0" (bsc#1207071)
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch

- Add missing patch after rebase to fix collections Mapping issues
- Added:
  * fixes-for-python-3.10-502.patch

- Prevent deadlocks in salt-ssh executions
- Added:
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch

- Create new salt-tests subpackage containing Salt tests

- Update to Salt release version 3005.1
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch

OBS-URL: https://build.opensuse.org/request/show/1058037
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/salt?expand=0&rev=134
2023-01-13 23:02:27 +00:00
_lastrevision osc copypac from project:systemsmanagement:saltstack:testing package:salt revision:454 2023-01-12 16:26:02 +00:00
_service https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
.gitattributes Accepting request 541865 from systemsmanagement:saltstack:products:unstable.py3 2017-11-16 09:11:11 +00:00
.gitignore Accepting request 175205 from devel:languages:python 2013-05-16 09:38:22 +00:00
activate-all-beacons-sources-config-pillar-grains.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-custom-suse-capabilities-as-grains.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-environment-variable-to-know-if-yum-is-invoked-f.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-migrated-state-and-gpg-key-management-functions-.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-publish_batch-to-clearfuncs-exposed-methods.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-salt-ssh-support-with-venv-salt-minion-3004-493.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-sleep-on-exception-handling-on-minion-connection.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-standalone-configuration-file-for-enabling-packa.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-support-for-gpgautoimport-539.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
add-support-for-name-pkgs-and-diff_attr-parameters-t.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
allow-entrypoint-compatibility-for-importlib-metadat.patch osc copypac from project:systemsmanagement:saltstack:testing package:salt revision:454 2023-01-12 16:26:02 +00:00
allow-vendor-change-option-with-zypper.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
async-batch-implementation.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
avoid-excessive-syslogging-by-watchdog-cronjob-58.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
bsc-1176024-fix-file-directory-user-and-group-owners.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
change-the-delimeters-to-prevent-possible-tracebacks.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
clarify-pkg.installed-pkg_verify-documentation.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
debian-info_installed-compatibility-50453.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
detect-module.run-syntax.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
dnfnotify-pkgset-plugin-implementation-3002.2-450.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
don-t-use-shell-sbin-nologin-in-requisites.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
drop-serial-from-event.unpack-in-cli.batch_async.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
early-feature-support-config.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
enable-passing-a-unix_socket-for-mysql-returners-bsc.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
enhance-openscap-module-add-xccdf_eval-call-386.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-bsc-1065792.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-for-suse-expanded-support-detection.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-issue-2068-test.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-missing-minion-returns-in-batch-mode-360.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-ownership-of-salt-thin-directory-when-using-the-.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-regression-with-depending-client.ssh-on-psutil-b.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-salt.states.file.managed-for-follow_symlinks-tru.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-state.apply-in-test-mode-with-file-state-module-.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-test_ipc-unit-tests.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-the-regression-for-yumnotify-plugin-456.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fix-traceback.print_exc-calls-for-test_pip_state-432.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fixes-for-python-3.10-502.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
fopen-workaround-bad-buffering-for-binary-mode-563.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
html.tar.bz2 https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
ignore-erros-on-reading-license-files-with-dpkg_lowp.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
ignore-extend-declarations-from-excluded-sls-files.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
ignore-non-utf8-characters-while-reading-files-with-.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
include-aliases-in-the-fqdns-grains.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
include-stdout-in-error-message-for-zypperpkg-559.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
info_installed-works-without-status-attr-now.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
make-aptpkg.list_repos-compatible-on-enabled-disable.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
make-pass-renderer-configurable-other-fixes-532.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
make-setup.py-script-to-not-require-setuptools-9.1.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
make-sure-saltcacheloader-use-correct-fileclient-519.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
normalize-package-names-once-with-pkg.installed-remo.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
pass-the-context-to-pillar-ext-modules.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
prevent-shell-injection-via-pre_flight_script_args-4.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
read-repo-info-without-using-interpolation-bsc-11356.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
README.SUSE Accepting request 541865 from systemsmanagement:saltstack:products:unstable.py3 2017-11-16 09:11:11 +00:00
restore-default-behaviour-of-pkg-list-return.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
retry-if-rpm-lock-is-temporarily-unavailable-547.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
return-the-expected-powerpc-os-arch-bsc-1117995.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
revert-fixing-a-use-case-when-multiple-inotify-beaco.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
run-salt-api-as-user-salt-bsc-1064520.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
run-salt-master-as-dedicated-salt-user.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
salt-tmpfiles.d osc copypac from project:systemsmanagement:saltstack:testing package:salt revision:418 2021-09-16 07:59:31 +00:00
salt.changes osc copypac from project:systemsmanagement:saltstack:testing package:salt revision:454 2023-01-12 16:26:02 +00:00
salt.spec osc copypac from project:systemsmanagement:saltstack:testing package:salt revision:454 2023-01-12 16:26:02 +00:00
save-log-to-logfile-with-docker.build.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
set-default-target-for-pip-from-venv_pip_target-envi.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
state.apply-don-t-check-for-cached-pillar-errors.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
state.orchestrate_single-does-not-pass-pillar-none-4.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
switch-firewalld-state-to-use-change_interface.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
temporary-fix-extend-the-whitelist-of-allowed-comman.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
transactional_update.conf osc copypac from project:systemsmanagement:saltstack:testing package:salt revision:418 2021-09-16 07:59:31 +00:00
travis.yml Accepting request 541865 from systemsmanagement:saltstack:products:unstable.py3 2017-11-16 09:11:11 +00:00
update-documentation.sh osc copypac from project:systemsmanagement:saltstack:testing package:salt revision:374 2021-01-08 12:41:50 +00:00
update-target-fix-for-salt-ssh-to-process-targets-li.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
use-adler32-algorithm-to-compute-string-checksums.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
use-rlock-to-avoid-deadlocks-in-salt-ssh.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
use-salt-bundle-in-dockermod.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
v3005.1.tar.gz https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
x509-fixes-111.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00
zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch https://bugzilla.opensuse.org/show_bug.cgi?id=1207071 2023-01-12 14:44:08 +00:00

Salt-master as non-root user
============================

With this version of salt the salt-master will run as salt user.

Why an extra user
=================

While the current setup runs the master as root user, this is considered a security issue
and not in line with the other configuration management tools (eg. puppet) which runs as a
dedicated user. 

How can I undo the change
=========================

If you would like to make the change before you can do the following steps manually:
1. change the user parameter in the master configuration
   user: root
2. update the file permissions:
   as root: chown -R root /etc/salt /var/cache/salt /var/log/salt /var/run/salt
3. restart the salt-master daemon:
   as root: rcsalt-master restart or systemctl restart salt-master

NOTE
====

Running the salt-master daemon as a root user is considers by some a security risk, but
running as root, enables the pam external auth system, as this system needs root access to check authentication.

For more information:
http://docs.saltstack.com/en/latest/ref/configuration/nonroot.html