@ -11,11 +11,6 @@ BuildRequires: ansible-core >= 2.11.0
%bcond_with collection_artifact
# This is to avoid ansible-test errors like
# ERROR: lsr_role2coll_extra_script-vpn:1:1: unexpected non-module shebang: b'#!/usr/bin/bash'
# we use /usr/bin/env bash in all of our scripts - we don't want rpm to fix them
%undefine __brp_mangle_shebangs
%if 0%{?rhel}
Name: rhel-system-roles
%else
@ -23,8 +18,8 @@ Name: linux-system-roles
%endif
Url: https://github.com/linux-system-roles
Summary: Set of interfaces for unified system management
Version: 1.88.9
Release: 0. 1%{?dist}
Version: 1.23.0
Release: 2.2 1%{?dist}
License: GPLv3+ and MIT and BSD and Python
%global _pkglicensedir %{_licensedir}/%{name}
@ -86,107 +81,101 @@ Requires: (ansible-core >= 2.11.0 or ansible >= 2.9.0)
%%global rolestodir %%{?rolestodir} %%{roletodir%{1}}
}
%global mainid 1.88.9
%global mainid 11ad785c9bb72611244e7909450ca4247e12db4d
Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar.gz
# BEGIN AUTOGENERATED SOURCES
%global rolename1 postfix
%deftag 1 1.5.1
%deftag 1 1.4.3
%global rolename2 selinux
%deftag 2 1.8.0
%deftag 2 1.7.4
%global rolename3 timesync
%deftag 3 1.9.0
%deftag 3 1.8.2
%global rolename4 kdump
%deftag 4 1.4.7
%deftag 4 1.4.4
%global rolename5 network
%deftag 5 1.16.4
%deftag 5 1.15.1
%global rolename6 storage
%deftag 6 1.18.7
%deftag 6 1.16.2
%global rolename7 metrics
%deftag 7 1.10.6
%deftag 7 1.10.1
%global rolename8 tlog
%deftag 8 1.3.6
%deftag 8 1.3.3
%global rolename9 kernel_settings
%deftag 9 1.3 .2
%deftag 9 1.2 .2
%global rolename10 logging
%deftag 10 1.13 .4
%deftag 10 1.12 .4
%global rolename11 nbde_server
%deftag 11 1.4.7
%deftag 11 1.4.3
%global rolename12 nbde_client
%deftag 12 1.3.0
%deftag 12 1.2.17
%global rolename13 certificate
%deftag 13 1.3.6
%deftag 13 1.3.3
%global rolename14 crypto_policies
%deftag 14 1.4.0
%deftag 14 1.3.2
%global forgeorg15 https://github.com/willshersystems
%global repo15 ansible-sshd
%global rolename15 sshd
%deftag 15 v0.25.0
%deftag 15 v0.23.2
%global rolename16 ssh
%deftag 16 1.5.0
%deftag 16 1.3.2
%global rolename17 ha_cluster
%deftag 17 1.19.2
%deftag 17 1.14.0
%global rolename18 vpn
%deftag 18 1.6.6
%deftag 18 1.6.3
%global rolename19 firewall
%deftag 19 1.8.0
%deftag 19 1.7.4
%global rolename20 cockpit
%deftag 20 1.5.10
%deftag 20 1.5.5
%global rolename21 podman
%deftag 21 1.6. 4
%deftag 21 1.4.7
%global rolename22 ad_integration
%deftag 22 1.4.6
%deftag 22 1.4.2
%global rolename23 rhc
%deftag 23 1.6.6
%deftag 23 1.6.0
%global rolename24 journald
%deftag 24 1.3 .3
%deftag 24 1.2 .3
%global rolename25 postgresql
%deftag 25 1.3.8
%deftag 25 1.3.5
%global rolename26 systemd
%deftag 26 1.2.0
%deftag 26 1.1.2
%global rolename27 keylime_server
%deftag 27 1.1.5
%deftag 27 1.1.2
%global rolename28 fapolicyd
%deftag 28 1.1.7
%deftag 28 1.1.1
%global rolename29 bootloader
%deftag 29 1.0.7
%deftag 29 1.0.3
%global rolename30 snapshot
%deftag 30 1.4.1
%global rolename31 gfs2
%deftag 31 1.0.0
%global rolename32 sudo
%deftag 32 1.1.0
%deftag 30 1.3.1
Source1: %{archiveurl1}
Source2: %{archiveurl2}
@ -218,8 +207,6 @@ Source27: %{archiveurl27}
Source28: %{archiveurl28}
Source29: %{archiveurl29}
Source30: %{archiveurl30}
Source31: %{archiveurl31}
Source32: %{archiveurl32}
# END AUTOGENERATED SOURCES
# Includes with definitions/tags that differ between RHEL and Fedora
@ -238,6 +225,15 @@ Source1004: vendoring-build.inc
Source995: CHANGELOG.md
BuildArch: noarch
# there is no ansible on i686, so when we get a builder that uses
# this arch, the build fails with
# No matching package to install: 'ansible-core >= 2.11.0'
# unfortunately, this causes the src rpm build tasks to be reported
# with the arch of the builder :-( which causes problems with internal
# test infrastructure - while we get those issues sorted out, revert
# this change - this means that centpkg builds may fail and may have
# to be retried
# ExcludeArch: i686
# Requirements for galaxy_transform.py
BuildRequires: python3
@ -285,7 +281,7 @@ end
%prep
# BEGIN AUTOGENERATED SETUP
%setup -q -a1 -a2 -a3 -a4 -a5 -a6 -a7 -a8 -a9 -a10 -a11 -a12 -a13 -a14 -a15 -a16 -a17 -a18 -a19 -a20 -a21 -a22 -a23 -a24 -a25 -a26 -a27 -a28 -a29 -a30 -a31 -a32 - n %{getarchivedir 0}
%setup -q -a1 -a2 -a3 -a4 -a5 -a6 -a7 -a8 -a9 -a10 -a11 -a12 -a13 -a14 -a15 -a16 -a17 -a18 -a19 -a20 -a21 -a22 -a23 -a24 -a25 -a26 -a27 -a28 -a29 -a30 -n %{getarchivedir 0}
# END AUTOGENERATED SETUP
# vendoring prep steps, if any
@ -360,10 +356,16 @@ rm %{rolename5}/tests/playbooks/roles
# when python2 is default python.
rm %{rolename5}/scripts/print_all_options.py
rm %{rolename5}/tests/ensure_provider_tests.py
# Drop storage tests/scripts
rm -rf %{rolename6}/tests/scripts
# fix system_roles fingerprint in "external" roles
python3 lsr_fingerprint.py
# transform ambiguous #!/usr/bin/env python shebangs to python3 to stop brp-mangle-shebangs complaining
find -type f -executable -name '*.py' -exec \
sed -i -r -e '1s@^(#! */usr/bin/env python)(\s|$)@#\13\2@' '{}' +
%build
# remove upstream-only documentation - for example, documentation
# about collection dependencies is not needed in Fedora and EL RPMs
@ -456,18 +458,6 @@ for role in %{rolenames}; do
%{collection_build_path}/roles/$role/README.md
done
# we have removed some files - ensure that the ignore files refer only to
# existing files
for ignore_file in %{collection_build_path}/tests/sanity/ignore-*.txt; do
cp "$ignore_file" "$ignore_file.tmp"
while read -r file rest; do
if [ ! -f "%{collection_build_path}/$file" ]; then
sed "\,^${file} ,d" -i "$ignore_file"
fi
done < "$ignore_file.tmp"
rm "$ignore_file.tmp"
done
# Remove test only collection dependencies
# NOTE: These should not be in meta/collection-requirements.yml, they should be
# in tests/collection-requirements.yml, but they can't be moved yet
@ -687,149 +677,6 @@ find %{buildroot}%{ansible_roles_dir} -mindepth 1 -maxdepth 1 | \
%endif
%changelog
* Fri Sep 13 2024 Rich Megginson <rmeggins@redhat.com> - 1.88.9-0.1
- Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
- logging - test issue with imuxsock and loginctl used by podman - restart systemd-logind to fix podman tests
- updates collection README for new Automation Hub format
* Wed Sep 11 2024 Rich Megginson <rmeggins@redhat.com> - 1.88.8-0.1
- Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
- podman - previous fix broke ansible 2.9 + el8 with volume cleanup
- logging - test issue with imuxsock and journald - restart dbus-broker
* Wed Sep 4 2024 Rich Megginson <rmeggins@redhat.com> - 1.88.7-0.2
- Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
- fapolicyd - fix method used to read from journald to determine when daemon is listening
- storage - fix tests to use blkid instead of lsblk to get partition table
- storage - skip stratis tests on el8
- logging - tests_combination.yml needs fact gathering
- same as 1.88.7-0.1 but needed to bump N-V-R and rebuild for exception
* Wed Sep 4 2024 Rich Megginson <rmeggins@redhat.com> - 1.88.7-0.1
- Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
- fapolicyd - fix method used to read from journald to determine when daemon is listening
- storage - fix tests to use blkid instead of lsblk to get partition table
- storage - skip stratis tests on el8
- logging - tests_combination.yml needs fact gathering
* Mon Aug 26 2024 Rich Megginson <rmeggins@redhat.com> - 1.88.4-0.1
- Resolves: RHEL-53896 : kernel_settings - fix: Use tuned files instead of using it as a module
- recent tuned in el9 changed the profile directory back to the old one
- so had to change the role to detect directory
* Thu Aug 22 2024 Rich Megginson <rmeggins@redhat.com> - 1.88.3-0.1
- Resolves: RHEL-34214 : gfs2 - New Role
- no el10, aarch64 support for gfs2
- network role docs
* Wed Aug 21 2024 Rich Megginson <rmeggins@redhat.com> - 1.88.2-0.1
- Resolves: RHEL-55295 : ha_cluster - Fixes for new pcs and ansible
- several fixes for ostree issues
* Tue Aug 20 2024 Rich Megginson <rmeggins@redhat.com> - 1.88.0-0.1
- Resolves: RHEL-55295 : ha_cluster - Fixes for new pcs and ansible
- fix gather_facts issue with fapolicyd
- fix gather_facts issue with ha_cluster
- fix bond test firewall issue with network
* Mon Aug 19 2024 Rich Megginson <rmeggins@redhat.com> - 1.87.2-0.1
- Resolves: RHEL-50825 : System Roles: No module documentation
- Fix storage role tests_lvm_pool_pv_grow issue with pvcreate hang on el7
- podman - skip quadlet tests on non-x86_64 arch
- journald - fix the test pattern that looks for the max size
- network - fix the bond tests issue with firewall
- sshd - add new parameters for openssh 9.8
* Fri Aug 16 2024 Rich Megginson <rmeggins@redhat.com> - 1.87.1-0.1
- Resolves: RHEL-30888 : storage - Fingerprint storage RHEL System Role managed config files
- s390x issue fix requires fix for architecture fact
* Fri Aug 16 2024 Rich Megginson <rmeggins@redhat.com> - 1.87.0-0.1
- Resolves: RHEL-48227 : snapshot - feat: rewrite snapshot.py as an Ansible module / add support for thin origins
- some test fixes in snapshot, network
* Fri Aug 9 2024 Rich Megginson <rmeggins@redhat.com> - 1.86.0-0.1
- Resolves: RHEL-53896 : kernel_settings - fix: Use tuned files instead of using it as a module
- Resolves: RHEL-3252 : network - support route src parameter
- Resolves: RHEL-53902 : rhc - fix: drop usage of "auto_attach" of the "redhat_subscription" module
* Thu Aug 1 2024 Rich Megginson <rmeggins@redhat.com> - 1.85.0-0.1
- Resolves: RHEL-49596 : ha_cluster - alerts support
- other fixes for el10 support
- add timesync_provider.sh side car doc for Automation Hub rendering issue
* Tue Jul 23 2024 Rich Megginson <rmeggins@redhat.com> - 1.84.1-0.1
- Resolves: RHEL-46590 : logging - RFE - system-roles - logging: Add truncate options for local file inputs
- Resolves: RHEL-40273 : logging - redhat.rhel_system_roles.logging role fails to process logging_outputs: of type: "custom"
- Resolves: RHEL-34935 : logging - [RFE] Add the umask settings or enable a variable in linux-system-roles.logging
- Resolves: RHEL-50102 : podman - fix: proper cleanup for networks; ensure cleanup of resources
- Resolves: RHEL-30888 : storage - Fingerprint storage RHEL System Role managed config files
* Mon Jul 15 2024 Rich Megginson <rmeggins@redhat.com> - 1.83.0-0.1
- Resolves: RHEL-46854 : postfix - feat: Added postfix_files feature as a simple means to add extra files/maps to config
- Resolves: RHEL-48227 : snapshot - feat: rewrite snapshot.py as an Ansible module / add support for thin origins
* Tue Jul 02 2024 Rich Megginson <rmeggins@redhat.com> - 1.82.0-0.1
- Resolves: RHEL-41090 : cockpit - cockpit install all wildcard match does not work in newer el9
- Resolves: RHEL-45717 : nbde_client - feat: Allow initrd configuration to be skipped
- Implements meta/main.yml el10 support in most roles
* Wed Jun 12 2024 Rich Megginson <rmeggins@redhat.com> - 1.79.0-0.3
- add patch for https://github.com/containers/ansible-podman-collections/pull/784
this is blocking gating tests
* Tue Jun 11 2024 Rich Megginson <rmeggins@redhat.com> - 1.79.0-0.2
- Resolves: RHEL-39996 : bootloader - Set user.cfg path to /boot/grub2/ on EL 9 UEFI
- Resolves: RHEL-35561 : logging - Setup imuxsock using rhel-system-roles.logging causing an error
fix test
- Resolves: RHEL-40761 : podman - fix: grab name of network to remove from quadlet file
- Resolves: RHEL-39438 : podman - Create podman secret when skip_existing=True and it does not exist
- Resolves: RHEL-40180 : ssh - Add new configuration options and remove false positives in the test
- Resolves: RHEL-31854 : storage - [RFE] manage stratis
- Resolves: RHEL-25777 : storage - rhel-system-role.storage is not idempotent
- Resolves: RHEL-14862 : storage - [RHEL9][RFE] resize LVM PVs
- Resolves: RHEL-25994 : storage - var unused_disks get different sector size disks
* Tue May 21 2024 Sergei Petrosian <spetrosi@redhat.com> - 1.79.0-0.1
- Resolves: RHEL-35561 : logging - Setup imuxsock using rhel-system-roles.logging causing an error
- Resolves: RHEL-37549 : sudo - Add sudo system role
* Thu Apr 25 2024 Rich Megginson <rmeggins@redhat.com> - 1.78.1-0.1
- fix some issues with ansible-test
- Resolves: RHEL-34214 : gfs2 - New Role
* Mon Apr 22 2024 Rich Megginson <rmeggins@redhat.com> - 1.77.0-0.1
- Resolves: RHEL-18075 : - package rhel-system-roles.noarch does not provide docs for ansible-doc
- Resolves: RHEL-33532 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - Utilization Support
- Resolves: RHEL-33076 : ha_cluster - Fix inconsistent approach for multiple `attributes.attrs` in `ha_cluster_node_options`
- Resolves: RHEL-32872 : network - Fix testing Failures due to connection.autoconnect-ports Unknown Property
- Resolves: RHEL-33547 : podman - feat: manage TLS cert/key files for registry connections and validate certs
- Resolves: RHEL-30185 : podman - podman role should support default credentials and per-unit credentials
- Resolves: RHEL-30183 : podman - podman role should support containers-auth.json
- Resolves: RHEL-25777 : storage - rhel-system-role.storage is not idempotent
* Mon Apr 15 2024 Rich Megginson <rmeggins@redhat.com> - 1.76.2-0.1
- Fix ansible-test issues
Ensure "WARNING: " is quoted in description string
Package doc_fragments for vendored modules
Fix wrong collection deprecation error
undefine __brp_mangle_shebangs because ansible-test does not like shebangs in executable files
ensure that any files removed during the build/install process are also removed
from ignore files
- Resolves: RHEL-28658 : ad_integration - fix: Sets domain name lower case in realmd.conf section header
- Resolves: RHEL-26714 : bootloader - bootloader role tests do not work on ostree
- Resolves: RHEL-30111 : ha_cluster - [RFE] ha_cluster_node_options allows per-node addresses and SBD options to be set
- Resolves: RHEL-27186 : ha_cluster - [RFE] make it easier to install cloud agents
- Resolves: RHEL-17271 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - ACL Support
- Resolves: RHEL-30170 : journald - feat: Add options for rate limit interval and burst
- Resolves: RHEL-25264 : network - Make sure that the network role CI is solid robust
- Resolves: RHEL-32464 : podman - fix: do not use become for changing hostdir ownership, and expose subuid/subgid info
- Resolves: RHEL-32382 : podman - fix: use correct user for cancel linger file name
- Resolves: RHEL-30185 : podman - podman role should support default credentials and per-unit credentials
- Resolves: RHEL-29309 : sshd - second SSHD service broken
- Resolves: RHEL-30959 : storage - [RHEL9] storage role resize volume failed
- Resolves: RHEL-29874 : storage - Running rhel-system-roles.storage w/ type: raid a second time, fails if existing RAID device has stratis installed on them.
* Mon Feb 26 2024 Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.21
- Resolves: RHEL-16336 : bootloader - Create bootloader role (MVP)
fix issue with path on arches other than x86_64, and EFI systems