Activity
From 09/04/2023 to 10/03/2023
10/03/2023
- 03:43 PM Revision 4f3fc5cd (puppet-katello): Release 24.1.0
- 03:38 PM Bug #36760: CVE-2023-4886: World readable tomcat server.xml contains passwords
- Yes. You can verify this:...
- 03:13 PM Bug #36760: CVE-2023-4886: World readable tomcat server.xml contains passwords
- And to be clear, you still need root access to do anythng with the password?
- 02:46 PM Bug #36760: CVE-2023-4886: World readable tomcat server.xml contains passwords
- This is the installer patch that forces the credentials to also be reset. I started on a proper fix (https://github.c...
09/29/2023
- 01:49 PM Revision 6e49a288 (puppet-tftp): Drop Fedora support
- While there is no Fedora specific code, we can't run acceptance tests on
currently supported versions since there's n... - 12:17 PM Revision 9c9394c1 (puppet-tftp): Drop Puppet 6 support
09/27/2023
- 04:00 PM Feature #36784 (Closed): Drop Apache mpm_event MaxRequestPerChild values from tuning profiles
- Applied in changeset commit:installer|4462c6d4fc34cfdfe73d31c63cbf39eb979f73e6.
- 11:54 AM Feature #36784 (Ready For Testing): Drop Apache mpm_event MaxRequestPerChild values from tuning profiles
- 11:53 AM Feature #36784: Drop Apache mpm_event MaxRequestPerChild values from tuning profiles
- Foreman 3.8 was the first version to include puppetlabs-apache 9.0.0.
- 11:52 AM Feature #36784 (Closed): Drop Apache mpm_event MaxRequestPerChild values from tuning profiles
- Since puppetlabs-apache 9.0.0 (https://github.com/puppetlabs/puppetlabs-apache/commit/cedd45b63be89ea54bd2a596e6cd3a3...
- 03:11 PM Revision 4462c6d4 (installer): Fixes #36784 - Drop MaxRequestsPerChild tuning
- Since puppetlabs-apache 9.0.0 this tuning does nothing, since the
parameter was dropped. For older versions it may al... - 12:38 AM Revision 027e2cb1 (puppet-certs): puppetlabs/stdlib: Require 9.x
09/26/2023
- 07:29 PM Revision 0520eb4b (puppet-certs): Remove default_ca parameter
- 04:00 PM Bug #36772 (Closed): Add support for container gateway sqlite timeout tuning
- Applied in changeset commit:puppet-foreman_proxy|b10ba9be674c43f167270269d116a754cd8db513.
- 03:56 PM Revision b10ba9be (puppet-foreman_proxy): Fixes #36772 - container gateway db timeout tuning
- 03:38 PM Revision 672d2833 (puppet-certs): Document certs::apache parameters
- 03:23 PM Revision 3419d96a (puppet-certs): Set required params and autorequire
- Some fields are always required and things break if they are not set.
It's also possible to automatically require the... - 01:00 PM Feature #36694 (Closed): Show failed resources in failed installation report
- Applied in changeset commit:installer|0d2fb671ea579bf1f44b93dded089c0db159b536.
- 12:44 PM Revision 0d2fb671 (installer): Fixes #36694 - Show failed resources on installation
- Kafo 7.1.0 has started to capture Puppet reports and in 7.2.0 it was
extended for better messages. This allows showin... - 09:00 AM Feature #36697 (Closed): Expose candlepin logging parameter in the installer
- Applied in changeset commit:puppet-katello|aecdaff568f4fb0a41bb5576298f3a469991a273.
- 08:58 AM Revision aecdaff5 (puppet-katello): Fixes #36697 - Expose candlepin loggers parameter
- 08:55 AM Revision 3ab514e4 (puppet-katello): Mark compatible with puppetlabs/apache 11.x
09/25/2023
- 09:28 PM Revision 41d6f1f7 (puppet-pulpcore): Mark compatible with puppetlabs/apache 11.x
- 07:42 PM Revision 1f9ddf94 (puppet-foreman): Mark compatible with puppetlabs/apache 11.x
- 05:12 PM Revision 8d68a3dd (puppet-foreman): Fix postgresql service name in test expectations
- The puppetlabs/postgresql module has been refactored for multi-instance
support. This means the internal implementati... - 02:05 PM Revision 0fdb575a (puppet-pulpcore): Remove EL7 compatiblity in acceptance tests
- 12:43 PM Revision 3c3e0bda (puppet-foreman_proxy_content): Mark compatible with puppetlabs/apache 11.x
09/22/2023
- 09:37 PM Bug #36772 (Ready For Testing): Add support for container gateway sqlite timeout tuning
- 09:33 PM Bug #36772 (Closed): Add support for container gateway sqlite timeout tuning
- Adds support for new sqlite_timeout param to reduce busy SQLite DB errors.
Related: https://projects.theforeman.or... - 08:46 PM Revision 7242612e (puppet-certs): Remove unused full_path method
- 05:15 PM Revision 4ba477a6 (puppet-certs): Deploy the CA password file to ssl build directory
- As the pki_dir is intended for deployment rather than generation,
and the CA password file is needed primarily for ce... - 04:26 PM Revision dd726d79 (puppet-certs): Manage the build_dir
- 01:37 PM Feature #36769 (Duplicate): Add ANSIBLE_PERMISSION_CLASSES support for pulp_ansible regression
09/21/2023
- 10:03 PM Feature #36769 (Duplicate): Add ANSIBLE_PERMISSION_CLASSES support for pulp_ansible regression
- A regression on pulp ansible that's in the pulpcore 3.28 repo will stop users from being able to sync ansible content...
09/20/2023
- 03:41 PM Revision 9cba747e (puppet-foreman): correct sendmail configuration
- the `email_` prefix is wrong, the settings have no such prefix
Fixes: 6c902a4f1f484137ebccafe4d3390881fd0b3d61 - 09:21 AM Bug #36760 (Closed): CVE-2023-4886: World readable tomcat server.xml contains passwords
- The file /etc/tomcat/server.xml contains passwords and is world readable. The actual keystore is limited by file perm...
09/18/2023
- 03:42 PM Revision 2579642d (puppet-foreman_proxy_content): Release 25.0.0
- 03:00 PM Bug #36709 (Closed): Set ANSIBLE_PERMISSION_CLASSES as empty list to allow syncing collection repos on capsule without RBAC access to Galaxy endpoints
- Applied in changeset commit:puppet-foreman_proxy_content|5f61c86bb3db59929c1e37247ee9bf9266caa9e9.
- 02:37 PM Revision 5f61c86b (puppet-foreman_proxy_content): Fixes #36709 - Set ANSIBLE_PERMISSION_CLASSES to empty list
- This allows syncing collection repos on capsule without RBAC access to
Galaxy endpoints. - 02:14 PM Revision e86d7fbc (puppet-katello): Release 24.0.0
- 02:11 PM Revision baaa3ced (puppet-dns): Release 10.1.0
- 01:58 PM Revision 2b3588d5 (puppet-pulpcore): Release 8.5.0
09/15/2023
- 01:09 PM Revision cf568c84 (puppet-dns): Change sysconfig_file for Debian/Ubuntu to '/etc/default/named'
- It is was changed quite a while back[1].
[1] https://salsa.debian.org/dns-team/bind9/-/commit/6fd962a36bb54e0106e001...
09/14/2023
09/12/2023
- 11:10 AM Revision 889b267b (installer): Remove qpid tunings from tuning profiles
- 11:10 AM Revision 390f51fc (installer): Remove unused key enable_katello_agent from foreman.hiera/common.yaml
- katello-agent was deprecated before, now it is removed altogether
- 11:10 AM Revision 188a71ff (puppet-katello): Remove katello-agent
- 11:09 AM Revision 491a3fc5 (puppet-foreman_proxy_content): Remove katello-agent
09/04/2023
- 07:47 PM Revision cd9f8901 (puppet-foreman): Allow puppet/systemd 5.x and 6.x
- 5.x dropped Puppet 6 support, which we don't support anyway
6.x dropped Ubuntu 18.04 support, which we should drop soon - 07:29 PM Revision 47568f2f (puppet-puppet): Allow puppet/systemd 5.x and 6.x
- 5.x dropped Puppet 6 support, which we don't support anyway
6.x dropped Ubuntu 18.04 support, which we don't support ...
Also available in: Atom