November 2020 - ARCHIVED: Uyuni Users - openSUSE Mailing Lists

[uyuni-users] Fw: Mailing Lists Migration 10. Nov
by Pau Garcia 09 Nov '20

09 Nov '20

Hello This already happeneded to our mailing lists. Unfortunately, we were taken as canaries without notice. Please update your filters accordingly. Thank you Pau Garcia Quiles SUSE Manager Product Owner & Technical Project Manager Phone: +1 385-666-5608 SUSE Software Solutions Spain ________________________________ From: openSUSE Admins <admin(a)opensuse.org> Sent: Monday, November 9, 2020 9:59 AM To: Pau Garcia <pau.garcia(a)suse.com> Subject: Mailing Lists Migration 10. Nov Hi, We will be temporarly freezing the openSUSE Mailing Lists infrastructure for the time of migration on 10. Nov 2020 after 10:00 CET. We will send out another email confirming the details of the migration once it's finished. You can read on the details of the migration at https://en.opensuse.org/openSUSE:Mailing_Lists_Migration You are subscribed to the following mailing lists: opensuse-buildservice opensuse-project To unsubscribe from a mailing list, send an email to {listname}+unsubscribe(a)opensuse.org (for example opensuse-factory+unsubscribe(a)opensuse.org for the opensuse-factory mailing list) Sorry for the inconvenience, openSUSE Mailing Lists Admins

1 0

[uyuni-users] test
by per＠opensuse.org 08 Nov '20

08 Nov '20

testing 2

2 1

[uyuni-users] Special update for CVE-2020-16846, CVE-2020-17490 and CVE-2020-25592
by Pau Garcia 06 Nov '20

06 Nov '20

Hello Today we have released an unscheduled update for Uyuni 2020.09, for 3 security issues affecting the Salt master and minions: CVE-2020-16846, CVE-2020-17490 and CVE-2020-25592. First, a small warning. The current salt on openSUSE Leap 15.1/15.2 fixes the CVEs already, but contains a regression that breaks onboarding from WebUI and salt ssh managed minions. A fix for this is already in the openSUSE queue and should be released soon. Server ====== Please make sure you are on the most recent release (2020.09) and use the following commands on the Uyuni server: # zypper addrepo https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Stable… # zypper refresh # spacewalk-service stop # zypper update # spacewalk-service start This will download the required spacewalk-java and py26-compat-salt packages, as well as salt from openSUSE Leap 15.2 Proxies and Clients =================== Just sync your channels on the Uyuni Server for all operating systems, and that will get the updated salt packages. Then apply the updates to all your clients as you would do for any other security updates. More information ================ https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclo… https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16846/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25592/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17490/ Thank you Pau Garcia Quiles SUSE Manager Product Owner & Technical Project Manager SUSE Software Solutions Spain

1 0

[uyuni-users] Special update for CVE-2020-8028 (bsc#1175884)
by Julio González Gil 06 Nov '20

06 Nov '20

Dear lists, Today we released an unscheduled release on top of Uyuni 2020.09, for CVE-2020-16846, CVE-2020-17490 and CVE-2020-25592 that affect salt master and clients. First, a small warning. The current salt on openSUSE Leap 15.2/15.2 fixes the CVEs already, but contains a regression that breaks onboarding from WebUI and salt ssh manage minions. A fix for this is already in the openSUSE queue and should be released soon. Server ====== Please make sure you are on the most recent release (2020.09) and use the following commands on the Uyuni server: zypper addrepo https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Stable… zypper refresh spacewalk-service stop zypper update spacewalk-service start This will download the required spacewalk-java and py26-compat-salt packages and packages, as well as salt from openSUSE Leap 15.2 Proxies and Clients =================== Just sync your channels on the Uyuni Server for all operating systems, and that will get the updated salt packages. Then apply the updates to all your clients as you would do for any other security updates. More information ================ https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclo… https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16846/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25592/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17490/ -- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez(a)suse.com

1 1

[uyuni-users] Centos 7 Bootstrap fails with enabled Epel7
by Markus.Thum＠iese.fraunhofer.de 04 Nov '20

04 Nov '20

Hallo, I'm new to Uyuni and trying to bootstrap a centos 7 client. Uyuni Server is at 2020.09. My problem: if the Epel7 Channel is added, the bootstrap fails. Without the bootstrapping succeeds. What I found out so far: Without EPEL the bootstrap x86_64 directory contains: PyYAML-3.10-11.el7.x86_64.rpm dmidecode-3.2-3.el7.x86_64.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm openssl-1.0.2k-19.el7.x86_64.rpm openssl-libs-1.0.2k-19.el7.x86_64.rpm python-backports-1.0-8.el7.x86_64.rpm python-futures-2.1.3-0.8.8.uyuni.x86_64.rpm python-markupsafe-0.11-10.el7.x86_64.rpm python-msgpack-python-0.4.6-2.8.uyuni.x86_64.rpm python-psutil-1.2.1-0.10.8.uyuni.x86_64.rpm python-pycrypto-2.6.1-2.8.uyuni.x86_64.rpm python-simplejson-3.3.1-2.8.uyuni.x86_64.rpm python-tornado-4.2.1-5.el7.x86_64.rpm python-zmq-14.5.0-3.8.uyuni.x86_64.rpm python2-salt-3000-19.1.uyuni.x86_64.rpm python2-uyuni-common-libs-4.2.1-2.1.uyuni.x86_64.rpm rpm-python-4.11.3-43.el7.x86_64.rpm salt-3000-19.1.uyuni.x86_64.rpm salt-minion-3000-19.1.uyuni.x86_64.rpm zeromq-4.0.5-1.8.uyuni.x86_64.rpm With EPEL: PyYAML-3.10-11.el7.x86_64.rpm dmidecode-3.2-3.el7.x86_64.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm openssl-1.0.2k-19.el7.x86_64.rpm openssl-libs-1.0.2k-19.el7.x86_64.rpm python-backports-1.0-8.el7.x86_64.rpm python-futures-2.1.3-0.8.8.uyuni.x86_64.rpm python-markupsafe-0.11-10.el7.x86_64.rpm python-msgpack-python-0.4.6-2.8.uyuni.x86_64.rpm python-psutil-1.2.1-0.10.8.uyuni.x86_64.rpm python-pycrypto-2.6.1-2.8.uyuni.x86_64.rpm python-simplejson-3.3.1-2.8.uyuni.x86_64.rpm python-tornado-4.2.1-5.el7.x86_64.rpm python-zmq-14.5.0-3.8.uyuni.x86_64.rpm python2-salt-3000-19.1.uyuni.x86_64.rpm python2-uyuni-common-libs-4.2.1-2.1.uyuni.x86_64.rpm rpm-python-4.11.3-43.el7.x86_64.rpm salt-3000-19.1.uyuni.x86_64.rpm salt-minion-3000-19.1.uyuni.x86_64.rpm zeromq-4.1.4-6.el7.x86_64.rpm The difference is an newer zeromq. Running bottstrap.sh on the client fails with the error message: ---> Package python-zmq.x86_64 0:14.5.0-3.8.uyuni will be installed --> Processing Dependency: libzmq.so.4()(64bit) for package: python-zmq-14.5.0-3.8.uyuni.x86_64 --> Running transaction check ---> Package python-backports.x86_64 0:1.0-8.el7 will be installed ---> Package python-zmq.x86_64 0:14.5.0-3.8.uyuni will be installed --> Processing Dependency: libzmq.so.4()(64bit) for package: python-zmq-14.5.0-3.8.uyuni.x86_64 --> Finished Dependency Resolution Error: Package: python-zmq-14.5.0-3.8.uyuni.x86_64 (susemanager:bootstrap) Requires: libzmq.so.4()(64bit) Am I doing something wrong? Gruß Markus

2 1

[uyuni-users] Use non-privileged user for ssh_push registered client
by Bidault, Philippe 04 Nov '20

04 Nov '20

Hi all, I want to use non-root user for ssh-push server registration and patch management. However, I can't find any documentation regarding this. This link https://www.uyuni-project.org/uyuni-docs/uyuni/client-configuration/contact… only seems to apply for bootstrapping through ssh. >From what I can see, this unprivileged user would need write/read permissions on /etc/yum.repo.d, /etc/apt/sources.list.d or /etc/zypp depending of the OS, and permissions to execute yum/apt/zypper commands. And I guess some extra configurations needed as the Uyuni server will sudo the commands. Does somebody already worked on this ? Regards, Philippe. Philippe Bidault | Unix Engineer Getronics ________________________________ M. 34617301667 | E. Philippe.Bidault(a)Getronics.com | W. www.getronics.com Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you. Legal disclaimer: http://www.getronics.com/legal/

2 2

[uyuni-users] DNF module support Uyuni
by Bidault, Philippe 04 Nov '20

04 Nov '20

Hi all, Does somebody know when the DNF modules available in CentOS 8 for example will be supported in Uyuni ? If we enable some DNF modules on a CentOS 8, we currently have mismatch between updates showed in the Web UI and real available updates. Regards, Philippe. Philippe Bidault | Unix Engineer Getronics ________________________________ M. 34617301667 | E. Philippe.Bidault(a)Getronics.com | W. www.getronics.com Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you. Legal disclaimer: http://www.getronics.com/legal/

4 8

[uyuni-users] What do YOU want?
by Pau Garcia 03 Nov '20

03 Nov '20

Hello What features and enhancements would you like to see in the future in Uyuni? Is it Terraform integration? Ansible integration? Split it in several applications to make it slimmer? Support for more operating systems? Which ones? Remove some feature? Let's open the thread here and let's also discuss that at hour Uyuni Community Hours, today at 4pm CET! Thank you Pau Garcia Quiles SUSE Manager Product Owner & Technical Project Manager SUSE Software Solutions Spain

5 4

[uyuni-users] errata-import.py
by Paul-Andre Panon 02 Nov '20

02 Nov '20

Hi, I was a little confused because, while diving in the archives for how to fix errata-import.py failing to import Ubuntu Errata, I came across Philippe Bidault's August 7 e-mail where he said: >I have noticed that the CVE ID were truncated, importing them from the philicious script >(https://github.com/philicious/spacewalk-scripts/blob/master/errata-impor t.py) > >Truncated because of the regexp limitation "CVE = "(?P<cve>CVE-\d{4}-\d{4})". > >I have modified it to accept 5 digits ( CVE = "(?P<cve>CVE-\d{4}-\d{5} ), but >to be able to import them again, I would need to remove all the erratas from >the Ubuntu repositories. but I couldn't actually find that regexp in the errata-import.py script, so I'm not quite sure how to apply that fix. However I did see another reference to PR23 for errata-import.pl and used that info to create --- errata-import.py.old 2020-10-31 00:36:47.471814842 -0700 +++ errata-import.py 2020-10-31 01:01:28.297772339 -0700 @@ -3,6 +3,7 @@ # Pedro Andujar || twitter: pandujar || email: @segfault.es || @digitalsec.net # # Changelog: +# 2020-10-31 - Allow to work also with API 24 on Uyuni 2020.06 and later # 2017-11-06 - Set UTF-8 caracter encoding to import errata from Spacewalk correctly # 2015-08-25 - Fix to support python2.6. Added reattempts # 2015-06-19 - Limit description 4000 chars @@ -35,6 +36,7 @@ client = '' publish = True attempts = 0 +apiversion = 0 #xmlrpc connect to server and retrieve key def connect(url, login, passwd): @@ -43,6 +45,8 @@ client = xmlrpclib.Server(url, verbose=0) key = client.auth.login(login, passwd) print "[+] Connected to %s" % url + apiversion = int(client.api.get_version()) + print "[+] with API version %d" % apiversion except Exception, e: print "[-] Error connecting to %s: %s" % (url, e) sys.exit(1) @@ -104,7 +108,10 @@ def createErratum(key, erratum, issue_date, erratainfo, keywords, packageids, cves, publish, channels): try: print "[+] Creating errata %s:" % erratum - print client.errata.create(key, erratainfo, bug, keywords, [], publish, list(set(channels))) + if apiversion < 24: + print client.errata.create(key, erratainfo, bug, keywords, [], publish, list(set(channels))) + else: + print client.errata.create(key, erratainfo, bug, keywords, [], list(set(channels))) #Include aditional info using setDetails method (not supported by create method) #http://www.spacewalkproject.org/documentation/api/2.3/handlers/ErrataHand ler.html#setDetails client.errata.setDetails(key, erratum, {'update_date': issue_date}) That patch updates errata-import.py (which I have used for parsing and submitting Ubuntu errata/patches into Spacewalk) to work with Uyuni. If someone wants to submit it to philicious as a PR, feel free to do so. Cheers, Paul-Andre Panon, B.Sc. Senior Systems Administrator Video Security & Analytics -- *For more information on how and why we collect your personal information, please visit our Privacy Policy <https://www.motorolasolutions.com/en_us/about/privacy-policy.html?elqTrackI…>.* -- To unsubscribe, e-mail: uyuni-users+unsubscribe(a)opensuse.org To contact the owner, e-mail: uyuni-users+owner(a)opensuse.org

1 2