Fixes #36525 - kickstart's RHSM line only works on RHEL hosts

Fixes #36885 - Add Clevis/Tang disk encryption template

For disk encryption Clevis/Tang is often used. This commit introduces
partition templates for Kickstart and Autoinstall taking care of disk
encryption and a snippet responsible for binding the LUKS device via...

Fixes #37337 - Fix snapshot task and add Rocky 8 & 9

Fixes #37065 - report_row now explicitly accepts kwargs
also adds a test which fails without the fix

Fixes #37043 - Inheritance overrides host facets

Fixes #37179 - Clone hostgroup facets when cloning hostgroup

Fixes #37011 - Apply latest Ubuntu Autoinstall userdata changes

• Add explicit fallback for offline installation
• Replace deprecated lock-passwd with lock_passwd
• Remove empty ssh keys array if none provided

Fixes #37184 - Report template generates incorrect kernel version

Refs #36502 - update snapshots after template change

Refs #36849 - Enable strict keyword argument matching

Fixes #37015 - Refactor OwnerClassifier

- Introduce `classify_owner` class method for owner classification.
- Implement private method for input validation.
- Add error handling to raise the necessary exceptions.
- Add deprecation warning to the `user_or_usergroup` method.

Fixes #37102 - webpack 5

Refs #36849 - Remove deprecated URI.{encode,decode}

These are dropped in Ruby 3.0

Refs #36849 - Fix Ruby 3 kwargs handling

Fixes #37019 - Correct release names in OS factories

fixes #36160 - Redefine append domain names setting

This PR aims to unify the format of host names stored in the database and the way they are displayed.
With this change, the name of the host is always going to be stored with the domain name appended.
The setting formerly named `append_domain_name_for_hosts` is now renamed to `display_fqdn_for_hosts`...

Fixes #36796 - Make host_facts_updated event visible

Fixes #36723 - Remove Fedora/Red Hat Atomic related code

As far as I can see this has been EOL for a few years now. Red Hat
Atomic went EOL in 2021.

Fixes #36759 - only call allowed transpilers

CVE-2022-3874: OS command injection via ct_command and fcct_command

Instead of allowing to call any command by changing a setting, only
allow specific paths to ct/fcct. If the user needs a different path,
they can set it via settings.yaml.

Fixes #36466 - Allow gathering information on deleted records

Fixes #35124 - Fix preseed_kernel_options to work with full-host-bootdisk deployments

Update corresponding template snapshots.

Co-authored-by: Bastian Schmidt <schmidt@atix.de>

Refs #36677 - fix tests

Fixes #36660 - drop value from settings dsl

also update plugin docs to use a seed instead of a migration if they
need a value

Fixes #36639 - Use Templates feature on IPv6

This now looks at, and prefers, the IPv6 subnet on the
provision_interface to determine the template proxy. This allows using
the Templates feature in pure IPv6 provisioning setups.

Fixes #36651 - Support Minitest 5.19+

• This reverts commit 1c3a4155f286352e0abbf0d0b298e47e81c2d6c5.
  Thus un-pinning minitest again
• update minitest-spec-rails to 7.1+
  This contains a fix required for minitest 5.19+
• Update mocha to 2.1+ for minitest 5.19+ compat...

Fixes #36490 - Remove redundant ERB closing tag in coreos template

Refs #36490 - Regenerate template snapshots

Fixes #36189 - Add AlmaLinux UEFI provisioning support

In pxegrub2_chainload.erb various paths are tried, but the
/EFI/almalinux/grubx64.efi path is missing. This causes the server
to refuse to boot.

To make it easier to use the AlmaLinux installation medium is added.

Fixes #36395 - move value setting to seed

Fixes #36180 - iPXE provisioning template for Ubuntu autoinstall

Fixes #36017 - Remove spacing for array type settings

Fixes #35701 - Export button should use selectable columns

Fixes #36014 - Kickstart default - remove @core group

The Core group is always selected, it is not necessary to
specify it in the %packages section.

Fixes #35840 - Install chrony on RHEL 7

Fixes #29939 - drop category column from settings

Settings table was holding category column to support old style of
settings, but it is now ready to be decomissioned as plugins were given
enough time.

Fixes #35894 - Properly detect setting changes

Previously we missed setting changes which changed a setting back to its
default value.

Refs #34305 - Fix load_values test

Fixes #35286 - New PXEGrub2 template for Ubuntu Autoinstall

- Introduce new PXEGrub2 Autoinstall template
- Move network configuration out of PXELinux Autoinstall template to
new preseed_kernel_options_autoinstall snippet
- Add snapshot for preseed_kernel_options_autoinstall...

Refs #35796 - Reduce empty lines

In 699b7a3b4e9069237031b2dfbee8dba2bbaadf8c an additional empty line was
generated which broke the snapshots. This takes it a step further and
also removes various other lines in the generated output.

Fixes: 699b7a3b4e9069237031b2dfbee8dba2bbaadf8c

Fixes #35674 - Add more custom pre/post snippet hooks

Refs #35530 - Dont use shellescape on the filename

Fixes #35088 - Remove GCE Compute resource code

All code related to GCE compute resource
is now in Foreman Google plugin

https://github.com/theforeman/foreman_google

Fixes #35397 - Preseed Autoinstall incorporate host_params

• Param 'keyboard' to set default layout
• Param 'lang' to set default locale
• Adapt template snapshot accordingly

Co-authored-by: Bastian Schmidt <schmidt@atix.de>
Co-authored-by: Evgeni Golov <evgeni@golov.de>

Fixes #35696 - add bios info to reported data facet

Fixes #35583 - Skip dhclient installation

The dhclient package isn't available on the minimal ISO image for >= EL8, therefore installation fails because it tries to install this package. The IP address is managed by network manager.

Fixes #35473 - Add extlogin API endpoint

/users/extlogin endpoint is designed for UI interaction, thus
using this endpoint to create a session to be used via API will
fail with "Can't verify CSRF token authenticity" for any method
except GET. We need to have a separate endpoint to create a proper...

Fixes #35536 - Template input_resource macro & preview error (#9428)

Fixes #35658 - don't fail parsing Windows facts without os_name

When Ansible runs on Windows without Admin privileges, it will not
report `ansible_os_name` and `ansible_distribution` facts, as those
can't be read without being Admin. Don't fail to parse facts in this...

Fixes #35619 - Add kernel_version to reported data facet for new host UI

Fixes #35569 - set correct icons

Fixes #35547 - Include REX pull in kickstart default (#9430)

• Fixes #35547 - Include REX pull in kickstart default

• Refs #35547 - Output the snippet verbatim

Refs #35530 - Alternative approach to save_to_file

save_to_macro generates a command using cat and a heredoc string.
However, if the content to be written contains a heredoc using the same
delimiter, save_to_macro's heredoc will be terminated by it, leading to...

Fixes #35530 - Make save_to_file macro safer (#9426)

• Fixes #35530 - Make save_to_file macro safer

save_to_file does

cat <<EOF >$file
$content
EOF

but if `$content` contains a heredoc terminated with `EOF`, it
terminates the heredoc that save_to_file creates....

Fixes #35331 - Use Anaconda rhsm in kickstart for RHEL 9

Fixes #35137 - Permit setting puppet tag during install

Fixes #35177 - Option to switch to graphical kickstart

Fixes #35166 - Enable static IP for Ubuntu Autoinstall

• Make IP method flexible and enable to switch between DHCP and static
• Make BOOTIF default for multi-network device setup
• Remove unused parameters from options

Co-authored-by: Bastian Schmidt <schmidt@atix.de>

Fixes #35420 - Drop boot_settings.rb for early settings

With Rails 7 require_relative no longer works in a Gemfile (maybe it's
Zeitwerk?). Currently we only support Rails 6.1 anyway and if we can't
use the mechanism for Rails 7 this mechanism should be removed....

Refs #35274 - Revert "Make columns on host index page selectable (#9319)"

This reverts commit b1b46b6a17b21c8aec566ef846ab70a8b2aa931c.

Fixes #35306 - host_puppet_* template macros ignores host_param (#9334)

When host.puppet_server or host.puppet_ca_server returns
empty string we don't load the values from host parameters.

Fixes #35274 - Make columns on host index page selectable (#9319)

Fixes #35299 - Remove redundant mocha inclusion

Mocha is already included in test_helper, using the non-deprecated
version.

Fixes #35301 - minitest 5 deprecation fixes

This possibly overlaps with _() as a translation method. value() is also
an alias that can be used but using the assert* methods is more
consistent with the rest of the codebase

Fixes #4007 - updating users email to be optional (#9279)

Fixes #34975 - Removed ks=. is supplied by kernel options snippet (#9238)

• Fixes #34975 - Removed ks= from template. It is supplied by kernel options snippet.

• Refs #34975 - Update snapshots

Co-authored-by: garret <garret@foreman8.rumohr.me>
Co-authored-by: Oleh Fedorenko <ofedoren@redhat.com>

Fixes #35182 - Add Rocky Linux UEFI provisioning support

In pxegrub2_chainload.erb various paths are tried, but the
/EFI/rocky/grubx64.efi path is missing. This causes the server to refuse
to boot.

To make it easier to use the Rocky Linux installation medium is added.

Fixes #35196 - Use assert_equal to match rendered templates

This allows the report to properly show up in Jenkins, rather than the
unhelpful message that it didn't match.

Fixes #34941 - Enable Ubuntu Autoinstall smart proxy deployment

• Use foreman_request_addr to reference correct Foreman/smart proxy port
• Use kernel and boot file variables from medium provider instead of static paths

Co-authored-by: Evgeni Golov <evgeni@golov.de>

Fixes #35014 - Rework Net::HTTP extension

Fixes #32612 - Add some extra metadata to the default kickstart

Fixes #32881 - Expose previous application record revision through safemode (#9258)

Fixes #34969 - Set up REX pull on client setup (#9235)

- Import katello-pull-transport-migrate
- Setup rex pull on registration
- Setup rex pull during provisioning
- Pass config params to slots/fills in registration form

Fixes #34948 - drop missing owner notification

Fixes #34700 - autoinstall template enable root user

The `identity` field doesn't allow to add/edit root as a user.
Therefore, the user-data field must be used. Compare the Ubuntu
Autoinstall documentation:
https://ubuntu.com/server/docs/install/autoinstall-reference#identity...

Fixes #34305 - stop creating settings in DB (#9050)

With the setting DSL, we hold all the necessary values for settings in the memory.
We can now stop creating records for the settings in the database.

Fixes #34908 - Set hostname for Ubuntu Autoinstall

Fixes #34526 - Switch Rails version to 6.1

Changes overview:
- Set default Rails version to 6.1
- Required dynfow >= 1.6.5
- Cleanup deprecation warnings in config/as_deprecation_whitelist.yaml
- ActiveSupport::ParameterFilter instead of ActionDispatch::Http::ParameterFilter...

Fixes #34702 - use warning instead of halt for SCSI issues

Signed-off-by: Lukas Zapletal <lzap+git@redhat.com>

Fixes #34866 - Settings - Like operator for name

• Allow ~ operator for name
• Fix issue with double quote in search
• Raise exception for unsupported operators :and / :or

Fixes #34710 - Use foreman request address

Refs #34495 - Katello erros from Breadcrumb switcher

Fixes #34658 - Harmonize preseed templates

Fixes #32572 - PBKDF2 password hashing support

Signed-off-by: Lukas Zapletal <lzap+git@redhat.com>

Refs #34558 - update snapshots

Fixes #33782 - do not use fixtures for Settings

As we no longer require settings in DB, we may drop the fixtures for settings.

Refs #10413 - Remove unattended: false from tests

Fixes #34573 - encrypt DSL setting values

DSL setting values were not properly encrypted as the encryption flag has not been propagated into DB model.

Fixes #34525 - Call insights snippet by honoring host_registration_insights param during system build

Fixes #34339 - sanitize fqdn in tests

Tests were almost not using the fqdn defined in settings.yaml.test
That is quite confusing at first sight and we should not override this value by fixtures, only if overriden in the same test file.

Refs #34489 - update snapshot tests for Yast PXE

Fixes #34532 - disable EFI local chainloading by default

Signed-off-by: Lukas Zapletal <lzap+git@redhat.com>

Fixes #32632 - initial verison of Ubuntu autoinstall templates

Signed-off-by: Lukas Zapletal <lzap+git@redhat.com>

Fixes #34450 - Normalize CentOS casing from facts

This aligns Chef and Salt with the other fact parsers. The Salt fact
parser logic is changed so it's easier to read.

Fixes #30122 - remove usage of controller level force_ssl

Foreman's use case for HTTP-only is provisioning. Many installers, like Red
Hat's Anaconda or Debian Preseed, either do not support it or make it very hard
to use HTTPS. This is especially hard since often a custom CA is used so the...

Fixes #34375 - allow passing empty attributes for facets (#9083)

Facets were rejecting empty attributes to not create empty facet.
Originally this was to fix an issue in 5d64eef2cba8e56ad39510c3bd1d724bd52762eb
Tho we want to pass empty attributes to facets that already exists....

Fixes #34330 - fix rhsm puppet parser for IPv6

Signed-off-by: Lukas Zapletal <lzap+git@redhat.com>

Fixes #34323 - use defaults from memory

This loads values from database only if the values are in the database.
If there is no value populated for the Setting, we want to read the default from memory.

Refs #34323 - sanitize setting fixtures

Setting fixtures should not be used to override defaults for tests unless meant for every test.
If we mean to override the setting value for all tests, we should override value and not the default.

Fixes #34329 - Allow permissions to be excluded from default roles

Fixes #34006 - use rbac_registry for all plugin rbac

Before this change we have executed all the changes to the Roles and Permissions right away in the plugins.
This pushes all the changes into the rbac_registry and uses it to initialize the changes only after Rails are ready.

Fixes #34010 - add a setup hook to RbacRegistry

RbacRegistry should hold all the information about the Plugin RBAC.
This method will be responsible for initializing in the database in the future.