Hello community, here is the log from the commit of package salt for openSUSE:Factory checked in at 2015-10-19 22:52:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/salt (Old) and /work/SRC/openSUSE:Factory/.salt.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "salt" Changes: -------- --- /work/SRC/openSUSE:Factory/salt/salt.changes 2015-08-31 22:59:07.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.salt.new/salt.changes 2015-10-20 00:06:23.000000000 +0200 @@ -1,0 +2,214 @@ +Thu Oct 15 09:43:16 UTC 2015 - mrueck...@suse.de + +- update to 2015.8.1 + - Add support for ``spm.d/*.conf`` configuration of SPM + (:issue:`27010`) + - Fix ``proxy`` grains breakage for non-proxy minions + (:issue:`27039`) + - Fix global key management for git state + - Fix passing http auth to ``util.http`` from ``state.file`` + (:issue:`21917`) + - Fix ``multiprocessing: True`` in windows (on by default`) + - Add ``pkg.info`` to pkg modules + - Fix name of ``serial`` grain (this was accidentally renamed in + 2015.8.0`) + - Merge config values from ``master.d``/``minion.d`` conf files + (rather than flat update`) + - Clean grains cache on grains sync (:issue:`19853`) + - Remove streamed response for fileclient to avoid HTTP + redirection problems (:issue:`27093`) + - Fixed incorrect warning about ``osrelease`` grain + (:issue:`27065`) + - Fix authentication via Salt-API with tokens (:issue:`27270`) + - Fix winrepo downloads from https locations (:issue:`27081`) + - Fix potential error with salt-call as non-root user + (:issue:`26889`) + - Fix global minion provider overrides (:issue:`27209`) + - Fix backward compatibility issues for pecl modules + - Fix Windows uninstaller to only remove ``./bin``, ``salt*``, + ``nssm.exe``, ``uninst.exe`` (:issue:`27383`) + - Fix misc issues with mongo returner. + - Add sudo option to cloud config files (:issue:`27398`) + - Fix regression in RunnerClient argument handling + (:issue:`25107`) + - Fix ``dockerng.running`` replacing creation hostconfig with + runtime hostconfig (:issue:`27265`) + - Fix dockerng.running replacing creation hostconfig with runtime + hostconfig (:issue:`27265`) + - Increased performance on boto asg/elb states due to + ``__states__`` integration + - Windows minion no longer requires powershell to restart + (:issue:`26629`) + - Fix x509 module to support recent versions of OpenSSL + (:issue:`27326`) + - Some issues with proxy minions were corrected. +- drop salt-2015.8-backports-susemanager.diff: included in update +- guard raet buildrequires with bcond_with raet and comment out the + recommends for salt-raet. + +------------------------------------------------------------------- +Mon Oct 12 10:11:33 UTC 2015 - tampak...@opensuse.org + +- remove pygit2 global recommends, it is only needed in the master +- remove git-core, pygit2 should pull it as a dependency +- add a (currently disabled) %check + +------------------------------------------------------------------- +Mon Oct 12 10:08:57 UTC 2015 - toddrme2...@gmail.com + +- Add salt-2015.8-backports-susemanager.diff + Returns detailed information about a package + +------------------------------------------------------------------- +Mon Oct 12 08:48:25 UTC 2015 - dmacvi...@suse.de + +- ifdef Recommends to build on RHEL based distros +- use _initddir instead of _sysconfdir/init.d as + it works on both platforms. + +------------------------------------------------------------------- +Mon Oct 12 08:19:45 UTC 2015 - dmacvi...@suse.de + +- allow to disable docs in preparation for building + on other platforms without all dependencies. + +------------------------------------------------------------------- +Mon Oct 12 08:07:01 UTC 2015 - dmacvi...@suse.de + +- python-libnacl, python-ioflo are _not_ required to build the + package. They are anyways requires of python-raet, which is + also not required to build the package. + +------------------------------------------------------------------- +Sat Oct 10 00:00:39 UTC 2015 - mrueck...@suse.de + +- merge (build)requires/recommends with requirements/*txt and + setup.py + +------------------------------------------------------------------- +Fri Oct 9 23:35:05 UTC 2015 - mrueck...@suse.de + +- add raet subpackage which will pull all requires for it and + provides config snippets to enable it for the minion and master. + +------------------------------------------------------------------- +Fri Oct 9 15:34:16 UTC 2015 - mrueck...@suse.de + +- add tmpfiles.d file + +------------------------------------------------------------------- +Fri Oct 9 14:12:39 UTC 2015 - dmacvi...@suse.de + +- Remove requires on python-ioflo and python-libnacl + they will be pulled by python-raet, + which is optional. + +------------------------------------------------------------------- +Fri Oct 9 12:12:48 UTC 2015 - dmacvi...@suse.de + +- python-raet is optional, so make it a Recommends + +------------------------------------------------------------------- +Fri Oct 9 12:04:03 UTC 2015 - dmacvi...@suse.de + +- update backports patch from 2015.8 branch + +------------------------------------------------------------------- +Wed Oct 7 20:06:19 UTC 2015 - mrueck...@suse.de + +- update use-forking-daemon.patch: + the original intention was to get rid of the python systemd + dependency. for this we do not have daemonize the whole process. + just switching to simple mode is enough. + +------------------------------------------------------------------- +Wed Oct 7 19:15:54 UTC 2015 - mrueck...@suse.de + +- drop fdupes: + 1. it broke python byte code handling + 2. the only part of the package which would really benefit from + it would be the doc package. but given we only install the + files via %doc, we can not use it for that either. +- reenable completions on distros newer than sle11 +- do not use _datarootdir, use _datadir instead. + +------------------------------------------------------------------- +Wed Oct 7 14:34:18 UTC 2015 - mrueck...@suse.de + +- package all directories in /var/cache/salt and /etc/salt and + have permissions set for non root salt master +- update use-salt-user-for-master.patch: + - also patch the logrotate file to include the su option + +------------------------------------------------------------------- +Tue Oct 6 12:27:49 UTC 2015 - mrueck...@suse.de + +- remove duplicated recommends +- never require pygit2 and git. the master can run fine without. + always use recommends + +------------------------------------------------------------------- +Tue Oct 6 11:36:13 UTC 2015 - tampak...@opensuse.org + +- cleanup dependencies: + - remove a lot of unneeded buildrequires + - fdupes not present on SLE10 + - python-certifi needed on SLE11 + - python-zypp not needed any more + - python-pygit2 is not a global requirement + - convert python-pysqlite to recommends as it is not available on python <=2.7 +- sles_version -> suse_version +- %exclude the cloud/deploy/*.sh scripts to fix build issue on SLE11 + +------------------------------------------------------------------- +Mon Oct 5 12:44:40 UTC 2015 - tampak...@opensuse.org + +- Remove python-PyYAML from the dependencies list, as python-yaml is the same +- Build the -completion subpackages in SLE11 as well +- Add salt-proxy (by dmacvi...@suse.de) +- Create salt user/group only in the -master subpkg + +------------------------------------------------------------------- +Sat Oct 3 17:37:20 UTC 2015 - infr...@gmail.com + +- Fix typo in use-forking-daemon.patch, that prevented daemon loading + +------------------------------------------------------------------- +Thu Oct 1 08:13:58 UTC 2015 - toddrme2...@gmail.com + +- Fix typo in Requires + +------------------------------------------------------------------- +Tue Sep 29 09:11:38 UTC 2015 - toddrme2...@gmail.com + +- Cleanup requirements + +------------------------------------------------------------------- +Wed Sep 23 18:06:52 UTC 2015 - abo...@gmail.com + +- New Major release 2015.8.0 + + for more details: + http://docs.saltstack.com/en/latest/topics/releases/2015.8.0.html + +- Cleaned the spec file with spec-cleaner +- Added the use-salt-user-for-master.patch see README.SUSE +- Updated the files ownership with salt user +- removed m2crypto depency ++++ 17 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/salt/salt.changes ++++ and /work/SRC/openSUSE:Factory/.salt.new/salt.changes Old: ---- salt-2015.5.5.tar.gz New: ---- salt-2015.8.1.tar.gz salt-tmpfiles.d use-salt-user-for-master.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ salt.spec ++++++ ++++ 953 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/salt/salt.spec ++++ and /work/SRC/openSUSE:Factory/.salt.new/salt.spec ++++++ README.SUSE ++++++ --- /var/tmp/diff_new_pack.HSGPRj/_old 2015-10-20 00:06:25.000000000 +0200 +++ /var/tmp/diff_new_pack.HSGPRj/_new 2015-10-20 00:06:25.000000000 +0200 @@ -1,10 +1,7 @@ Salt-master as non-root user ============================ -With the latest version of the salt-master package a new user has been added. -The user salt be used in later versions as the default user for the salt-master daemon. - -For now the default user for the salt-master daemon will be root. +With this version of salt the salt-master will run as salt user. Why an extra user ================= @@ -13,23 +10,22 @@ and not in line with the other configuration management tools (eg. puppet) which runs as a dedicated user. -How can I make the change +How can I undo the change ========================= If you would like to make the change before you can do the following steps manually: -1. uncomment the user parameter in the master configuration - user: salt +1. change the user parameter in the master configuration + user: root 2. update the file permissions: - as root: chown -R salt /etc/salt /var/cache/salt /var/log/salt /var/run/salt + as root: chown -R root /etc/salt /var/cache/salt /var/log/salt /var/run/salt 3. restart the salt-master daemon: as root: rcsalt-master restart or systemctl restart salt-master NOTE ==== -Running the salt-master daemon as a non-root user has some consequences, some salt operations -cannot be executed correctly when the master is not running as root, specifically the pam external -auth system, as this system needs root access to check authentication. +Running the salt-master daemon as a root user is considers by some a security risk, but +running as root, enables the pam external auth system, as this system needs root access to check authentication. For more information: http://docs.saltstack.com/en/latest/ref/configuration/nonroot.html \ No newline at end of file ++++++ salt-2015.5.5.tar.gz -> salt-2015.8.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/salt/salt-2015.5.5.tar.gz /work/SRC/openSUSE:Factory/.salt.new/salt-2015.8.1.tar.gz differ: char 5, line 1 ++++++ salt-tmpfiles.d ++++++ # Type Path Mode UID GID Age Argument d /var/run/salt 0750 root salt d /var/run/salt/master 0750 salt salt d /var/run/salt/minion 0750 root root ++++++ use-forking-daemon.patch ++++++ --- /var/tmp/diff_new_pack.HSGPRj/_old 2015-10-20 00:06:25.000000000 +0200 +++ /var/tmp/diff_new_pack.HSGPRj/_new 2015-10-20 00:06:25.000000000 +0200 @@ -1,17 +1,13 @@ -Index: salt-2014.7.4/pkg/salt-master.service +Index: salt-2015.8.0/pkg/salt-master.service =================================================================== ---- salt-2014.7.4.orig/pkg/salt-master.service -+++ salt-2014.7.4/pkg/salt-master.service -@@ -3,8 +3,10 @@ Description=The Salt Master Server - After=syslog.target network.target +--- salt-2015.8.0.orig/pkg/salt-master.service ++++ salt-2015.8.0/pkg/salt-master.service +@@ -4,7 +4,7 @@ After=syslog.target network.target [Service] + LimitNOFILE=16384 -Type=notify --ExecStart=/usr/bin/salt-master -+Type=forking -+ExecStart=/usr/bin/salt-master --daemon -+# Daemon mode doesn't seem to work reliably without PIDFile -+PIDFile=/var/run/salt-master.pid ++Type=simple + ExecStart=/usr/bin/salt-master [Install] - WantedBy=multi-user.target ++++++ use-salt-user-for-master.patch ++++++ Index: salt-2015.8.0/conf/master =================================================================== --- salt-2015.8.0.orig/conf/master +++ salt-2015.8.0/conf/master @@ -25,7 +25,7 @@ # permissions to allow the specified user to run the master. The exception is # the job cache, which must be deleted if this user is changed. If the # modified files cause conflicts, set verify_env to False. -#user: root +user: salt # Max open files # Index: salt-2015.8.0/pkg/salt-common.logrotate =================================================================== --- salt-2015.8.0.orig/pkg/salt-common.logrotate +++ salt-2015.8.0/pkg/salt-common.logrotate @@ -1,4 +1,5 @@ /var/log/salt/master { + su salt salt weekly missingok rotate 7 @@ -7,6 +8,7 @@ } /var/log/salt/minion { + su salt salt weekly missingok rotate 7 @@ -15,6 +17,7 @@ } /var/log/salt/key { + su salt salt weekly missingok rotate 7
