Compare commits
No commits in common. 'c9' and 'c8-beta-stream-DL1' have entirely different histories.
c9
...
c8-beta-st
@ -0,0 +1,29 @@
|
||||
From 0f485a0921a39c08e7259f9b38f0b10e425384a5 Mon Sep 17 00:00:00 2001
|
||||
From: root <root@ipa.example.test>
|
||||
Date: Mon, 5 Dec 2022 16:17:17 -0500
|
||||
Subject: [PATCH] Fix logging issue related to dtype
|
||||
|
||||
It is an integer in earlier versions of python3-dns and a class
|
||||
in later versions. Log the integer value.
|
||||
|
||||
Related: #2099484
|
||||
---
|
||||
src/ipahealthcheck/ipa/idns.py | 2 +-
|
||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||
|
||||
diff --git a/ipa/idns.py b/ipa/idns.py
|
||||
index e294db2..1adb69d 100644
|
||||
--- a/src/ipahealthcheck/ipa/idns.py
|
||||
+++ b/src/ipahealthcheck/ipa/idns.py
|
||||
@@ -176,7 +176,7 @@ class IPADNSSystemRecordsCheck(IPAPlugin):
|
||||
qname = "ipa-ca." + api.env.domain + "."
|
||||
ipa_ca_records = []
|
||||
for dtype in (rdatatype.A, rdatatype.AAAA):
|
||||
- logger.debug("Search DNS for %s records of %s", dtype.name, qname)
|
||||
+ logger.debug("Search DNS for %s records of %s", dtype, qname)
|
||||
try:
|
||||
answers = resolve(qname, dtype)
|
||||
except DNSException as e:
|
||||
--
|
||||
2.31.1
|
||||
|
||||
@ -1,142 +0,0 @@
|
||||
From 4906c52b629bfce275558d4701c083f4c020ef32 Mon Sep 17 00:00:00 2001
|
||||
From: Rob Crittenden <rcritten@redhat.com>
|
||||
Date: Fri, 30 Jun 2023 14:35:40 -0400
|
||||
Subject: [PATCH] Catch exceptions during user/group name lookup in FileCheck
|
||||
|
||||
It's possible that one or more of the allowed users/groups
|
||||
in a file check do not exist on the system. Catch this
|
||||
exception and try to proceed as best as possible.
|
||||
|
||||
https://github.com/freeipa/freeipa-healthcheck/issues/296
|
||||
|
||||
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
|
||||
---
|
||||
src/ipahealthcheck/core/files.py | 33 +++++++++++++++++++++++----
|
||||
tests/test_core_files.py | 38 ++++++++++++++++++++++++++++++++
|
||||
2 files changed, 67 insertions(+), 4 deletions(-)
|
||||
|
||||
diff --git a/src/ipahealthcheck/core/files.py b/src/ipahealthcheck/core/files.py
|
||||
index 59e8b76..85d42bc 100644
|
||||
--- a/src/ipahealthcheck/core/files.py
|
||||
+++ b/src/ipahealthcheck/core/files.py
|
||||
@@ -3,12 +3,15 @@
|
||||
#
|
||||
|
||||
import grp
|
||||
+import logging
|
||||
import os
|
||||
import pwd
|
||||
|
||||
from ipahealthcheck.core import constants
|
||||
from ipahealthcheck.core.plugin import Result, duration
|
||||
|
||||
+logger = logging.getLogger()
|
||||
+
|
||||
|
||||
class FileCheck:
|
||||
"""Generic check to validate permission and ownership of files
|
||||
@@ -77,14 +80,25 @@ class FileCheck:
|
||||
|
||||
found = False
|
||||
for o in owner:
|
||||
- fowner = pwd.getpwnam(o)
|
||||
+ try:
|
||||
+ fowner = pwd.getpwnam(o)
|
||||
+ except Exception as e:
|
||||
+ logging.debug('user lookup "%s" for "%s" failed: %s',
|
||||
+ o, path, e)
|
||||
+ continue
|
||||
if fowner.pw_uid == stat.st_uid:
|
||||
found = True
|
||||
break
|
||||
|
||||
if not found:
|
||||
- actual = pwd.getpwuid(stat.st_uid)
|
||||
key = '%s_owner' % path.replace('/', '_')
|
||||
+ try:
|
||||
+ actual = pwd.getpwuid(stat.st_uid)
|
||||
+ except Exception:
|
||||
+ yield Result(self, constants.WARNING, key=key,
|
||||
+ path=path, type='owner', expected=owner,
|
||||
+ got='Unknown uid %s' % stat.st_uid)
|
||||
+ continue
|
||||
if len(owner) == 1:
|
||||
msg = 'Ownership of %s is %s and should ' \
|
||||
'be %s' % \
|
||||
@@ -104,14 +118,25 @@ class FileCheck:
|
||||
|
||||
found = False
|
||||
for g in group:
|
||||
- fgroup = grp.getgrnam(g)
|
||||
+ try:
|
||||
+ fgroup = grp.getgrnam(g)
|
||||
+ except Exception as e:
|
||||
+ logging.debug('group lookup "%s" for "%s" failed: %s',
|
||||
+ g, path, e)
|
||||
+ continue
|
||||
if fgroup.gr_gid == stat.st_gid:
|
||||
found = True
|
||||
break
|
||||
|
||||
if not found:
|
||||
key = '%s_group' % path.replace('/', '_')
|
||||
- actual = grp.getgrgid(stat.st_gid)
|
||||
+ try:
|
||||
+ actual = grp.getgrgid(stat.st_gid)
|
||||
+ except Exception:
|
||||
+ yield Result(self, constants.WARNING, key=key,
|
||||
+ path=path, type='group', expected=group,
|
||||
+ got='Unknown gid %s' % stat.st_gid)
|
||||
+ continue
|
||||
if len(group) == 1:
|
||||
msg = 'Group of %s is %s and should ' \
|
||||
'be %s' % \
|
||||
diff --git a/tests/test_core_files.py b/tests/test_core_files.py
|
||||
index 6e3ec38..924d7fa 100644
|
||||
--- a/tests/test_core_files.py
|
||||
+++ b/tests/test_core_files.py
|
||||
@@ -197,3 +197,41 @@ def test_files_not_found(mock_exists):
|
||||
for result in my_results.results:
|
||||
assert result.result == constants.SUCCESS
|
||||
assert result.kw.get('msg') == 'File does not exist'
|
||||
+
|
||||
+
|
||||
+@patch('os.stat')
|
||||
+@patch('pwd.getpwnam')
|
||||
+@patch('pwd.getpwuid')
|
||||
+def test_files_owner_not_found(mock_pwuid, mock_pwnam, mock_stat):
|
||||
+ mock_pwuid.side_effect = KeyError('getpwnam(): name not found')
|
||||
+ mock_pwnam.side_effect = KeyError('getpwuid(): uid not found')
|
||||
+ mock_stat.return_value = make_stat()
|
||||
+
|
||||
+ f = FileCheck()
|
||||
+ f.files = files
|
||||
+
|
||||
+ results = capture_results(f)
|
||||
+
|
||||
+ my_results = get_results(results, 'owner')
|
||||
+ for result in my_results.results:
|
||||
+ assert result.result == constants.WARNING
|
||||
+ assert result.kw.get('got') == 'Unknown uid 0'
|
||||
+
|
||||
+
|
||||
+@patch('os.stat')
|
||||
+@patch('grp.getgrnam')
|
||||
+@patch('grp.getgrgid')
|
||||
+def test_files_group_not_found(mock_grgid, mock_grnam, mock_stat):
|
||||
+ mock_grgid.side_effect = KeyError('getgrnam(): name not found')
|
||||
+ mock_grnam.side_effect = KeyError('getgruid(): gid not found')
|
||||
+ mock_stat.return_value = make_stat()
|
||||
+
|
||||
+ f = FileCheck()
|
||||
+ f.files = files
|
||||
+
|
||||
+ results = capture_results(f)
|
||||
+
|
||||
+ my_results = get_results(results, 'group')
|
||||
+ for result in my_results.results:
|
||||
+ assert result.result == constants.WARNING
|
||||
+ assert result.kw.get('got') == 'Unknown gid 0'
|
||||
--
|
||||
2.41.0
|
||||
|
||||
@ -1,324 +0,0 @@
|
||||
%if 0%{?rhel}
|
||||
%global prefix ipa
|
||||
%global productname IPA
|
||||
%global alt_prefix freeipa
|
||||
%else
|
||||
# Fedora
|
||||
%global prefix freeipa
|
||||
%global productname FreeIPA
|
||||
%global alt_prefix ipa
|
||||
%endif
|
||||
%global debug_package %{nil}
|
||||
%global python3dir %{_builddir}/python3-%{name}-%{version}-%{release}
|
||||
%{!?python3_sitelib: %global python3_sitelib %(%{__python3} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}
|
||||
%global alt_name %{alt_prefix}-healthcheck
|
||||
|
||||
%bcond_without tests
|
||||
|
||||
Name: %{prefix}-healthcheck
|
||||
Version: 0.12
|
||||
Release: 4%{?dist}
|
||||
Summary: Health check tool for %{productname}
|
||||
BuildArch: noarch
|
||||
License: GPLv3
|
||||
URL: https://github.com/freeipa/freeipa-healthcheck
|
||||
Source0: https://github.com/freeipa/freeipa-healthcheck/archive/%{version}.tar.gz
|
||||
Source1: ipahealthcheck.conf
|
||||
|
||||
Patch0001: 0001-Remove-ipaclustercheck.patch
|
||||
Patch0002: 0002-Disable-two-failing-tests.patch
|
||||
Patch0003: 0003-Skip-AD-domains-with-posix-ranges-in-the-catalog-che.patch
|
||||
Patch0004: 0004-Catch-exceptions-during-user-group-name-lookup-in-Fi.patch
|
||||
Patch0005: 0005-Don-t-error-in-DogtagCertsConnectivityCheck-with-ext.patch
|
||||
|
||||
Requires: %{name}-core = %{version}-%{release}
|
||||
Requires: %{prefix}-server
|
||||
Requires: python3-ipalib
|
||||
Requires: python3-ipaserver
|
||||
Requires: python3-lib389 >= 1.4.2.14-1
|
||||
# cronie-anacron provides anacron
|
||||
Requires: anacron
|
||||
Requires: logrotate
|
||||
Requires(post): systemd-units
|
||||
Requires: %{name}-core = %{version}-%{release}
|
||||
BuildRequires: python3-devel
|
||||
BuildRequires: python3-setuptools
|
||||
BuildRequires: systemd-devel
|
||||
%{?systemd_requires}
|
||||
# packages for make check
|
||||
%if %{with tests}
|
||||
BuildRequires: python3-pytest
|
||||
BuildRequires: python3-ipalib
|
||||
BuildRequires: python3-ipaserver
|
||||
%endif
|
||||
BuildRequires: python3-lib389
|
||||
BuildRequires: python3-libsss_nss_idmap
|
||||
|
||||
# Cross-provides for sibling OS
|
||||
Provides: %{alt_name} = %{version}
|
||||
Conflicts: %{alt_name}
|
||||
Obsoletes: %{alt_name} < %{version}
|
||||
|
||||
%description
|
||||
The %{productname} health check tool provides a set of checks to
|
||||
proactively detect defects in a FreeIPA cluster.
|
||||
|
||||
|
||||
%package -n %{name}-core
|
||||
Summary: Core plugin system for healthcheck
|
||||
|
||||
# Cross-provides for sibling OS
|
||||
Provides: %{alt_name}-core = %{version}
|
||||
Conflicts: %{alt_name}-core
|
||||
Obsoletes: %{alt_name}-core < %{version}
|
||||
|
||||
|
||||
%description -n %{name}-core
|
||||
Core plugin system for healthcheck, usable standalone with other
|
||||
packages.
|
||||
|
||||
|
||||
%prep
|
||||
%autosetup -p1 -n freeipa-healthcheck-%{version}
|
||||
|
||||
|
||||
%build
|
||||
%py3_build
|
||||
|
||||
|
||||
%install
|
||||
%py3_install
|
||||
|
||||
mkdir -p %{buildroot}%{_sysconfdir}/ipahealthcheck
|
||||
install -m644 %{SOURCE1} %{buildroot}%{_sysconfdir}/ipahealthcheck
|
||||
|
||||
mkdir -p %{buildroot}/%{_unitdir}
|
||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/systemd/ipa-healthcheck.service %{buildroot}%{_unitdir}
|
||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/systemd/ipa-healthcheck.timer %{buildroot}%{_unitdir}
|
||||
|
||||
mkdir -p %{buildroot}/%{_libexecdir}/ipa
|
||||
install -p -m755 %{_builddir}/freeipa-healthcheck-%{version}/systemd/ipa-healthcheck.sh %{buildroot}%{_libexecdir}/ipa/
|
||||
|
||||
mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
|
||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/logrotate/ipahealthcheck %{buildroot}%{_sysconfdir}/logrotate.d
|
||||
|
||||
mkdir -p %{buildroot}/%{_localstatedir}/log/ipa/healthcheck
|
||||
|
||||
mkdir -p %{buildroot}/%{_mandir}/man8
|
||||
mkdir -p %{buildroot}/%{_mandir}/man5
|
||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/man/man8/ipa-healthcheck.8 %{buildroot}%{_mandir}/man8/
|
||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/man/man5/ipahealthcheck.conf.5 %{buildroot}%{_mandir}/man5/
|
||||
|
||||
(cd %{buildroot}/%{python3_sitelib}/ipahealthcheck && find . -type f | \
|
||||
grep -v '^./core' | \
|
||||
grep -v 'opt-1' | \
|
||||
sed -e 's,\.py.*$,.*,g' | sort -u | \
|
||||
sed -e 's,\./,%%{python3_sitelib}/ipahealthcheck/,g' ) >healthcheck.list
|
||||
|
||||
|
||||
%if %{with tests}
|
||||
%check
|
||||
PYTHONPATH=src PATH=$PATH:$RPM_BUILD_ROOT/usr/bin pytest-3 tests/test_*
|
||||
%endif
|
||||
|
||||
|
||||
%post
|
||||
%systemd_post ipa-healthcheck.service
|
||||
|
||||
|
||||
%preun
|
||||
%systemd_preun ipa-healthcheck.service
|
||||
|
||||
|
||||
%postun
|
||||
%systemd_postun_with_restart ipa-healthcheck.service
|
||||
|
||||
|
||||
%files -f healthcheck.list
|
||||
%{!?_licensedir:%global license %%doc}
|
||||
%license COPYING
|
||||
%doc README.md
|
||||
%{_bindir}/ipa-healthcheck
|
||||
%dir %{_sysconfdir}/ipahealthcheck
|
||||
%dir %{_localstatedir}/log/ipa/healthcheck
|
||||
%config(noreplace) %{_sysconfdir}/ipahealthcheck/ipahealthcheck.conf
|
||||
%config(noreplace) %{_sysconfdir}/logrotate.d/ipahealthcheck
|
||||
%{python3_sitelib}/ipahealthcheck-%{version}-*.egg-info/
|
||||
%{python3_sitelib}/ipahealthcheck-%{version}-*-nspkg.pth
|
||||
%{_unitdir}/*
|
||||
%{_libexecdir}/*
|
||||
%{_mandir}/man8/*
|
||||
%{_mandir}/man5/*
|
||||
|
||||
|
||||
%files -n %{name}-core
|
||||
%{!?_licensedir:%global license %%doc}
|
||||
%license COPYING
|
||||
%doc README.md
|
||||
%{python3_sitelib}/ipahealthcheck/core/
|
||||
|
||||
|
||||
%changelog
|
||||
* Mon Jul 24 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-4
|
||||
- Error in DogtagCertsConnectivityCheckCA with external CA (#2224595)
|
||||
|
||||
* Thu Jul 06 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-3
|
||||
- Catch exceptions during user/group name lookup in FileCheck (#2218912)
|
||||
|
||||
* Tue Apr 25 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-2
|
||||
- Skip AD domains with posix ranges in the catalog check (#2188135)
|
||||
|
||||
* Thu Dec 01 2022 Rob Crittenden <rcritten@redhat.com> - 0.12-1
|
||||
- Update to upstream 0.12 (#2139531)
|
||||
|
||||
* Wed Jul 06 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-9
|
||||
- Add support for the DNS URI type (#2104495)
|
||||
|
||||
* Wed May 18 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-8
|
||||
- Validate that a known output type has been selected (#2079698)
|
||||
|
||||
* Wed May 04 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-7
|
||||
- debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
|
||||
- Validate value formats in the ipahealthcheck.conf file (#2079739)
|
||||
- Validate output_type options from ipahealthcheck.conf file (#2079698)
|
||||
|
||||
* Thu Apr 28 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-6
|
||||
- Allow multiple file modes in the FileChecker (#2072708)
|
||||
|
||||
* Wed Apr 06 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-5
|
||||
- Add CLI options to healthcheck configuration file (#2070981)
|
||||
|
||||
* Wed Mar 30 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-4
|
||||
- Use the subject base from the IPA configuration, not REALM (#2067213)
|
||||
|
||||
* Tue Oct 12 2021 Rob Crittenden <rcritten@redhat.com> - 0.9-3
|
||||
- IPATrustControllerServiceCheck doesn't handle HIDDEN_SERVICE (#1976878)
|
||||
|
||||
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 0.9-2
|
||||
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
||||
Related: rhbz#1991688
|
||||
|
||||
* Thu Jun 17 2021 Rob Crittenden <rcritten@redhat.com> - 0.9-1
|
||||
- Rebase to upstream 0.9 (#1969539)
|
||||
|
||||
* Thu Apr 22 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-7.2
|
||||
- rpminspect: specname match on suffix to allow for differing
|
||||
spec/package naming (#1951733)
|
||||
|
||||
* Mon Apr 19 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-7.1
|
||||
- Switch from tox to pytest as the test runner. tox is being deprecated
|
||||
in some distros. (#1942157)
|
||||
|
||||
* Mon Apr 19 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-7
|
||||
- Add check to validate the KRA Agent is correct (#1894781)
|
||||
|
||||
* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 0.8-6.1
|
||||
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
||||
|
||||
* Fri Mar 12 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.8-5.1
|
||||
- Re-enable package self-tests after bootstrap
|
||||
|
||||
* Mon Mar 8 2021 François Cami <fcami@redhat.com> - 0.8-5
|
||||
- Make the spec file distribution-agnostic (rhbz#1935773).
|
||||
|
||||
* Tue Mar 2 2021 Alexander Scheel <ascheel@redhat.com> - 0.8-4
|
||||
- Make the spec file more distribution-agnostic
|
||||
- Use tox as the test runner when tests are enabled
|
||||
|
||||
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.8-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
||||
|
||||
* Mon Jan 18 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-2
|
||||
- A bad file group was reported as a python list, not a string
|
||||
|
||||
* Wed Jan 13 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-1
|
||||
- Update to upstream 0.8
|
||||
- Fix FTBFS in F34/rawhide (#1915256)
|
||||
|
||||
* Wed Dec 16 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-3
|
||||
- Include upstream patch to fix parsing input from json files
|
||||
|
||||
* Tue Nov 17 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-2
|
||||
- Include upstream patch to fix collection of AD trust domains
|
||||
- Include upstream patch to fix failing not-valid-after test
|
||||
|
||||
* Thu Oct 29 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-1
|
||||
- Update to upstream 0.7
|
||||
|
||||
* Wed Jul 29 2020 Rob Crittenden <rcritten@redhat.com> - 0.6-4
|
||||
- Set minimum Requires on python3-lib389
|
||||
- Don't assume that all users of healthcheck-core provide the same
|
||||
set of options.
|
||||
|
||||
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.6-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
||||
|
||||
* Fri Jul 24 2020 Rob Crittenden <rcritten@redhat.com> - 0.6-2
|
||||
- Don't collect IPA servers in MetaCheck
|
||||
- Skip if dirsrv not available in IPAMetaCheck
|
||||
|
||||
* Wed Jul 1 2020 Rob Crittenden <rcritten@redhat.com> - 0.6-1
|
||||
- Update to upstream 0.6
|
||||
- Don't include cluster checking yet
|
||||
|
||||
* Tue Jun 23 2020 Rob Crittenden <rcritten@redhat.com> - 0.5-5
|
||||
- Add BuildRequires on python3-setuptools
|
||||
|
||||
* Tue May 26 2020 Miro Hrončok <mhroncok@redhat.com> - 0.5-4
|
||||
- Rebuilt for Python 3.9
|
||||
|
||||
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.5-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
||||
|
||||
* Mon Jan 27 2020 Rob Crittenden <rcritten@redhat.com> - 0.5-2
|
||||
- Rebuild
|
||||
|
||||
* Thu Jan 2 2020 Rob Crittenden <rcritten@redhat.com> - 0.5-1
|
||||
- Update to upstream 0.5
|
||||
|
||||
* Mon Dec 2 2019 François Cami <fcami@redhat.com> - 0.4-2
|
||||
- Create subpackage to split out core processing (#1771710)
|
||||
|
||||
* Mon Dec 2 2019 François Cami <fcami@redhat.com> - 0.4-1
|
||||
- Update to upstream 0.4
|
||||
- Change Source0 to something "spectool -g" can use.
|
||||
- Correct URL (#1773512)
|
||||
- Errors not translated to strings (#1752849)
|
||||
- JSON output not indented by default (#1729043)
|
||||
- Add dependencies to checks to avoid false-positives (#1727900)
|
||||
- Verify expected DNS records (#1695125
|
||||
|
||||
* Thu Oct 03 2019 Miro Hrončok <mhroncok@redhat.com> - 0.3-3
|
||||
- Rebuilt for Python 3.8.0rc1 (#1748018)
|
||||
|
||||
* Mon Aug 19 2019 Miro Hrončok <mhroncok@redhat.com> - 0.3-2
|
||||
- Rebuilt for Python 3.8
|
||||
|
||||
* Thu Jul 25 2019 François Cami <fcami@redhat.com> - 0.3-1
|
||||
- Update to upstream 0.3
|
||||
- Add logrotate configs + depend on anacron and logrotate
|
||||
|
||||
* Thu Jul 25 2019 François Cami <fcami@redhat.com> - 0.2-6
|
||||
- Fix permissions
|
||||
|
||||
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.2-5
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
||||
|
||||
* Thu Jul 11 2019 François Cami <fcami@redhat.com> - 0.2-4
|
||||
- Fix ipa-healthcheck.sh installation path (rhbz#1729188)
|
||||
- Create and own log directory (rhbz#1729188)
|
||||
|
||||
* Tue Apr 30 2019 François Cami <fcami@redhat.com> - 0.2-3
|
||||
- Add python3-lib389 to BRs
|
||||
|
||||
* Tue Apr 30 2019 François Cami <fcami@redhat.com> - 0.2-2
|
||||
- Fix changelog
|
||||
|
||||
* Thu Apr 25 2019 Rob Crittenden <rcritten@redhat.com> - 0.2-1
|
||||
- Update to upstream 0.2
|
||||
|
||||
* Thu Apr 4 2019 François Cami <fcami@redhat.com> - 0.1-2
|
||||
- Explicitly list dependencies
|
||||
|
||||
* Tue Apr 2 2019 François Cami <fcami@redhat.com> - 0.1-1
|
||||
- Initial package import
|
||||
@ -0,0 +1,255 @@
|
||||
%global project freeipa
|
||||
%global shortname healthcheck
|
||||
%global longname ipa%{shortname}
|
||||
%global debug_package %{nil}
|
||||
%global python3dir %{_builddir}/python3-%{name}-%{version}-%{release}
|
||||
%{!?python3_sitelib: %global python3_sitelib %(%{__python3} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}
|
||||
|
||||
|
||||
Name: ipa-healthcheck
|
||||
Version: 0.12
|
||||
Release: 3%{?dist}
|
||||
Summary: Health check tool for IdM
|
||||
BuildArch: noarch
|
||||
License: GPLv3
|
||||
URL: https://github.com/%{project}/freeipa-healthcheck
|
||||
Source0: https://github.com/%{project}/%{name}/archive/%{version}.tar.gz#/%{version}.tar.gz
|
||||
Source1: %{longname}.conf
|
||||
|
||||
Patch0001: 0001-Remove-ipaclustercheck.patch
|
||||
Patch0002: 0002-Disable-two-failing-tests.patch
|
||||
Patch0003: 0003-Fix-logging-issue-related-to-dtype.patch
|
||||
Patch0004: 0004-Skip-AD-domains-with-posix-ranges-in-the-catalog-che.patch
|
||||
Patch0005: 0005-Don-t-error-in-DogtagCertsConnectivityCheck-with-ext.patch
|
||||
|
||||
Requires: %{name}-core = %{version}-%{release}
|
||||
Requires: ipa-server
|
||||
Requires: python3-ipalib
|
||||
Requires: python3-ipaserver
|
||||
Requires: python3-lib389
|
||||
# cronie-anacron provides anacron
|
||||
Requires: anacron
|
||||
Requires: logrotate
|
||||
Requires(post): systemd-units
|
||||
Requires: %{name}-core = %{version}-%{release}
|
||||
BuildRequires: python3-devel
|
||||
BuildRequires: systemd-devel
|
||||
%{?systemd_requires}
|
||||
|
||||
|
||||
%description
|
||||
The FreeIPA health check tool provides a set of checks to
|
||||
proactively detect defects in a FreeIPA cluster.
|
||||
|
||||
%package -n %{name}-core
|
||||
Summary: Core plugin system for healthcheck
|
||||
# No Requires on %%{name} = %%{version}-%%{release} since this can be
|
||||
# installed standalone
|
||||
Conflicts: %{name} < 0.4
|
||||
|
||||
%description -n %{name}-core
|
||||
Core files
|
||||
|
||||
|
||||
%prep
|
||||
%autosetup -p1 -n %{project}-%{shortname}-%{version}
|
||||
|
||||
|
||||
%build
|
||||
%py3_build
|
||||
|
||||
|
||||
%install
|
||||
%py3_install
|
||||
|
||||
mkdir -p %{buildroot}%{_sysconfdir}/%{longname}
|
||||
install -m644 %{SOURCE1} %{buildroot}%{_sysconfdir}/%{longname}
|
||||
|
||||
mkdir -p %{buildroot}/%{_unitdir}
|
||||
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/systemd/ipa-%{shortname}.service %{buildroot}%{_unitdir}
|
||||
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/systemd/ipa-%{shortname}.timer %{buildroot}%{_unitdir}
|
||||
|
||||
mkdir -p %{buildroot}/%{_libexecdir}/ipa
|
||||
install -p -m755 %{_builddir}/%{project}-%{shortname}-%{version}/systemd/ipa-%{shortname}.sh %{buildroot}%{_libexecdir}/ipa/
|
||||
|
||||
mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
|
||||
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/logrotate/%{longname} %{buildroot}%{_sysconfdir}/logrotate.d
|
||||
|
||||
mkdir -p %{buildroot}/%{_localstatedir}/log/ipa/%{shortname}
|
||||
|
||||
mkdir -p %{buildroot}/%{_mandir}/man8
|
||||
mkdir -p %{buildroot}/%{_mandir}/man5
|
||||
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/man/man8/ipa-%{shortname}.8 %{buildroot}%{_mandir}/man8/
|
||||
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/man/man5/%{longname}.conf.5 %{buildroot}%{_mandir}/man5/
|
||||
|
||||
(cd %{buildroot}/%{python3_sitelib}/ipahealthcheck && find . -type f | \
|
||||
grep -v '^./core' | \
|
||||
grep -v 'opt-1' | \
|
||||
sed -e 's,\.py.*$,.*,g' | sort -u | \
|
||||
sed -e 's,\./,%%{python3_sitelib}/ipahealthcheck/,g' ) >healthcheck.list
|
||||
|
||||
%post
|
||||
%systemd_post ipa-%{shortname}.service
|
||||
|
||||
|
||||
%preun
|
||||
%systemd_preun ipa-%{shortname}.service
|
||||
|
||||
|
||||
%postun
|
||||
%systemd_postun_with_restart ipa-%{shortname}.service
|
||||
|
||||
|
||||
%files -f healthcheck.list
|
||||
%{!?_licensedir:%global license %%doc}
|
||||
%license COPYING
|
||||
%doc README.md
|
||||
%{_bindir}/ipa-%{shortname}
|
||||
%dir %{_sysconfdir}/%{longname}
|
||||
%dir %{_localstatedir}/log/ipa/%{shortname}
|
||||
%config(noreplace) %{_sysconfdir}/%{longname}/%{longname}.conf
|
||||
%config(noreplace) %{_sysconfdir}/logrotate.d/%{longname}
|
||||
%{python3_sitelib}/%{longname}-%{version}-*.egg-info/
|
||||
%{python3_sitelib}/%{longname}-%{version}-*-nspkg.pth
|
||||
%{_unitdir}/*
|
||||
%{_libexecdir}/*
|
||||
%{_mandir}/man8/*
|
||||
%{_mandir}/man5/*
|
||||
|
||||
%files -n %{name}-core
|
||||
%{!?_licensedir:%global license %%doc}
|
||||
%license COPYING
|
||||
%doc README.md
|
||||
%{python3_sitelib}/%{longname}/core/
|
||||
|
||||
|
||||
%changelog
|
||||
* Mon Jul 24 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-3
|
||||
- Error in DogtagCertsConnectivityCheckCA with external CA (#2223942)
|
||||
|
||||
* Wed May 03 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-2
|
||||
- Skip AD domains with posix ranges in the catalog check (#1775199)
|
||||
|
||||
* Thu Dec 01 2022 Rob Crittenden <rcritten@redhat.com> - 0.12-1
|
||||
- Update to upstream 0.12 (#2139529)
|
||||
- Verify that the number of krb5kdc worker processes is aligned to the
|
||||
number of configured CPUs (#2052930)
|
||||
- IPADNSSystemRecordsCheck displays warning message for 2 expected
|
||||
ipa-ca AAAA records (#2099484)
|
||||
|
||||
* Wed May 25 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-14
|
||||
- Add CLI options to healthcheck configuration file (#1872467)
|
||||
|
||||
* Fri Apr 29 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-13
|
||||
- Allow multiple file modes in the FileChecker (#2058239)
|
||||
|
||||
* Thu Mar 31 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-12
|
||||
- Use the subject base from the IPA configuration, not REALM (#2066308)
|
||||
|
||||
* Fri Mar 18 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-11
|
||||
- Add support for the DNS URI type (#2037847)
|
||||
|
||||
* Thu Feb 17 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-10
|
||||
- Don't depend on IPA status when suppressing pki checks (#2055316)
|
||||
|
||||
* Mon Jan 17 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-9
|
||||
- Don't assume the entry_point order when determining if there is a
|
||||
CA installed (#2041995)
|
||||
|
||||
* Thu Jan 06 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-8
|
||||
- Suppress the CRLManager check false positive when a CA is not
|
||||
configured (#1983060)
|
||||
- Fix the backport of the pki.server.healthcheck suppression (#1983060)
|
||||
|
||||
* Thu Oct 07 2021 Rob Crittenden <rcritten@redhat.com> - 0.7-7
|
||||
- ipa-healthcheck command takes some extra time to complete when dirsrv
|
||||
instance is stopped (#1776687)
|
||||
- ipa-healthcheck complains about pki.server.healthcheck errors even CA
|
||||
is not configured on the replica (#1983060)
|
||||
|
||||
* Mon Jun 14 2021 Rob Crittenden <rcritten@redhat.com> - 0.7-6
|
||||
- Fix patch fuzz issues, apply add'l upstream for log files (#1780020)
|
||||
|
||||
* Wed Jun 2 2021 Rob Crittenden <rcritten@redhat.com> - 0.7-5
|
||||
- Return a user-friendly message when no issues are found (#1780062)
|
||||
- Report on FIPS status (#1781107)
|
||||
- Detect mismatches beteween certificates in LDAP and filesystem (#1886770)
|
||||
- Verify owner/perms for important log files (#1780020)
|
||||
|
||||
* Tue Apr 6 2021 Rob Crittenden <rcritten@redhat.com> - 0.7-4
|
||||
- Add check to validate the KRA Agent is correct (#1894781)
|
||||
|
||||
* Fri Dec 4 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-3
|
||||
- Translate result names when reading input from a json file (#1866558)
|
||||
|
||||
* Tue Nov 3 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-2
|
||||
- Fix collection of AD trust domains (#1891505)
|
||||
|
||||
* Tue Nov 3 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-1
|
||||
- Update to upstream 0.7 (#1891850)
|
||||
- Include Directory Server healthchecks (#1824193)
|
||||
- Document that default output format is JSON (#1780328)
|
||||
- Fix return value on exit with --input-file (#1866558)
|
||||
- Fix examples in man page (#1809215)
|
||||
- Replace man page reference to output-format with output-type (#1780303)
|
||||
- Add dependencies on services to avoid false positives (#1780510)
|
||||
|
||||
* Wed Aug 19 2020 Rob Crittenden <rcritten@redhat.com> - 0.4-6
|
||||
- The core subpackage can be installed standalone, drop the Requires
|
||||
on the base package. (#1852244)
|
||||
- Add Conflicts < 0.4 to to core to allow downgrading with
|
||||
--allowerasing (#1852244)
|
||||
|
||||
* Tue Aug 4 2020 Rob Crittenden <rcritten@redhat.com> - 0.4-5
|
||||
- Remove the Obsoletes < 0.4 and add same-version Requires to each
|
||||
subpackage so that upgrades from 0.3 will work (#1852244)
|
||||
|
||||
* Thu Jan 16 2020 Rob Crittenden <rcritten@redhat.com> - 0.4-4
|
||||
- Allow plugins to read contents from config during initialization (#1784037)
|
||||
|
||||
* Thu Dec 5 2019 Rob Crittenden <rcritten@redhat.com> - 0.4-3
|
||||
- Add Obsoletes to core subpackage (#1780121)
|
||||
|
||||
* Mon Dec 2 2019 Rob Crittenden <rcritten@redhat.com> - 0.4-2
|
||||
- Abstract processing so core package is standalone (#1771710)
|
||||
|
||||
* Mon Dec 2 2019 Rob Crittenden <rcritten@redhat.com> - 0.4-1
|
||||
- Rebase to upstream 0.4 (#1770346)
|
||||
- Create subpackage to split out core processing (#1771710)
|
||||
- Correct URL (#1773512)
|
||||
- Errors not translated to strings (#1752849)
|
||||
- JSON output not indented by default (#1729043)
|
||||
- Add dependencies to checks to avoid false-positives (#1727900)
|
||||
- Verify expected DNS records (#1695125)
|
||||
|
||||
* Mon Aug 12 2019 Rob Crittenden <rcritten@redhat.com> - 0.3-4
|
||||
- Lookup AD user by SID and not by hardcoded username (#1739500)
|
||||
|
||||
* Thu Aug 8 2019 Rob Crittenden <rcritten@redhat.com> - 0.3-3
|
||||
- The AD trust agent and controller are not being initialized (#1738314)
|
||||
|
||||
* Mon Aug 5 2019 Rob Crittenden <rcritten@redhat.com> - 0.3-2
|
||||
- Change DNA plugin to return WARNING if no range is set (#1737492)
|
||||
|
||||
* Mon Jul 29 2019 François Cami <fcami@redhat.com> - 0.3-1
|
||||
- Update to upstream 0.3 (#1701351)
|
||||
- Add logrotate configs + depend on anacron and logrotate (#1729207)
|
||||
|
||||
* Thu Jul 11 2019 François Cami <fcami@redhat.com> - 0.2-4
|
||||
- Fix ipa-healthcheck.sh installation path (rhbz#1729188)
|
||||
- Create and own log directory (rhbz#1729188)
|
||||
|
||||
* Tue Apr 30 2019 François Cami <fcami@redhat.com> - 0.2-3
|
||||
- Add python3-lib389 to BRs
|
||||
|
||||
* Tue Apr 30 2019 François Cami <fcami@redhat.com> - 0.2-2
|
||||
- Fix changelog
|
||||
|
||||
* Thu Apr 25 2019 Rob Crittenden <rcritten@redhat.com> - 0.2-1
|
||||
- Update to upstream 0.2
|
||||
|
||||
* Thu Apr 4 2019 François Cami <fcami@redhat.com> - 0.1-2
|
||||
- Explicitly list dependencies
|
||||
|
||||
* Tue Apr 2 2019 François Cami <fcami@redhat.com> - 0.1-1
|
||||
- Initial package import
|
||||
Loading…
Reference in new issue