Hello community, here is the log from the commit of package rmt-server for openSUSE:Factory checked in at 2018-04-27 16:09:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rmt-server (Old) and /work/SRC/openSUSE:Factory/.rmt-server.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "rmt-server" Fri Apr 27 16:09:18 2018 rev:8 rq:601636 version:0.0.7 Changes: -------- --- /work/SRC/openSUSE:Factory/rmt-server/rmt-server.changes 2018-04-11 14:02:16.474188989 +0200 +++ /work/SRC/openSUSE:Factory/.rmt-server.new/rmt-server.changes 2018-04-27 16:09:18.962304615 +0200 @@ -1,0 +2,30 @@ +Thu Apr 26 14:58:45 UTC 2018 - tmuntaner@suse.com + +- Added supportconfig plugin + See: https://github.com/SUSE/rmt/pull/146 +- Rename organizations_products.json to organizations_products_unscoped.json (fixes bsc#1088687) + See: https://github.com/SUSE/rmt/pull/151 +- Improved log formatting in journald + See: https://github.com/SUSE/rmt/pull/145 + +------------------------------------------------------------------- +Wed Apr 25 14:47:18 UTC 2018 - tmuntaner@suse.com + +- version 0.0.7 +- Fixed offline repository sync with usb (bsc#1089038) + See: https://github.com/SUSE/rmt/pull/147 +- Removed unique index for uuid in HwInfo table + See: https://github.com/SUSE/rmt/pull/142 +- "rmt-cli products enable ..." enables recommended extensions in SLE 15 + See: https://github.com/SUSE/rmt/pull/141 +- Added RMT header in requests for Connect API + See: https://github.com/SUSE/rmt/pull/139 + +------------------------------------------------------------------- +Thu Apr 19 15:09:41 UTC 2018 - skotov@suse.com + +- version 0.0.6 +- storing hardware info + https://github.com/SUSE/rmt/pull/138 + +------------------------------------------------------------------- Old: ---- rmt-server-0.0.5.tar.bz2 New: ---- rmt-server-0.0.7.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rmt-server.spec ++++++ --- /var/tmp/diff_new_pack.NkqGpe/_old 2018-04-27 16:09:20.502248135 +0200 +++ /var/tmp/diff_new_pack.NkqGpe/_new 2018-04-27 16:09:20.502248135 +0200 @@ -27,7 +27,7 @@ %define rmt_group nginx Name: rmt-server -Version: 0.0.5 +Version: 0.0.7 Release: 0 Summary: Repository mirroring tool and registration proxy for SCC License: GPL-2.0-or-later @@ -150,6 +150,10 @@ -e 's/^BUNDLE_JOBS: .*/BUNDLE_JOBS: "1"/' \ %{buildroot}%{app_dir}/.bundle/config +# supportconfig plugin +mkdir -p %{buildroot}%{_libexecdir}/supportconfig/plugins +install -D -m 544 support/rmt %{buildroot}%{_libexecdir}/supportconfig/plugins/rmt + # cleanup of /usr/bin/env commands grep -rl '\/usr\/bin\/env ruby' %{buildroot}%{lib_dir}/vendor/bundle/ruby | xargs \ sed -i -e 's@\/usr\/bin\/env ruby.ruby2\.5@\/usr\/bin\/ruby\.ruby2\.5@g' \ @@ -182,12 +186,14 @@ %defattr(-,root,root) %attr(-,%{rmt_user},%{rmt_group}) %{app_dir} %attr(-,%{rmt_user},%{rmt_group}) %{data_dir} +%dir %{_libexecdir}/supportconfig +%dir %{_libexecdir}/supportconfig/plugins +%dir %{_sysconfdir}/nginx +%dir %{_sysconfdir}/nginx/vhosts.d %config(noreplace) %{_sysconfdir}/rmt.conf %config(noreplace) %{_sysconfdir}/nginx/vhosts.d/rmt-server-http.conf %config(noreplace) %{_sysconfdir}/nginx/vhosts.d/rmt-server-https.conf %doc %{_mandir}/man8/rmt.8.gz -%{_sysconfdir}/nginx -%{_sysconfdir}/nginx/vhosts.d %{_bindir}/rmt-cli %{_sbindir}/rcrmt %{_sbindir}/rcrmt-migration @@ -202,6 +208,7 @@ %{_unitdir}/rmt-server-sync.timer %{_libdir}/rmt +%{_libexecdir}/supportconfig/plugins/rmt %pre getent group %{rmt_group} >/dev/null || %{_sbindir}/groupadd -r %{rmt_group} ++++++ rmt-migration.service ++++++ --- /var/tmp/diff_new_pack.NkqGpe/_old 2018-04-27 16:09:20.574245495 +0200 +++ /var/tmp/diff_new_pack.NkqGpe/_new 2018-04-27 16:09:20.574245495 +0200 @@ -7,6 +7,7 @@ [Service] Type=oneshot User=_rmt +Environment=LOG_TO_JOURNALD=1 WorkingDirectory=/usr/share/rmt ExecStart=/usr/share/rmt/bin/rails db:create db:migrate RAILS_ENV=production ++++++ rmt-server-0.0.5.tar.bz2 -> rmt-server-0.0.7.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/rmt-server/rmt-server-0.0.5.tar.bz2 /work/SRC/openSUSE:Factory/.rmt-server.new/rmt-server-0.0.7.tar.bz2 differ: char 11, line 1 ++++++ rmt-server-mirror.service ++++++ --- /var/tmp/diff_new_pack.NkqGpe/_old 2018-04-27 16:09:20.630243440 +0200 +++ /var/tmp/diff_new_pack.NkqGpe/_new 2018-04-27 16:09:20.634243294 +0200 @@ -6,6 +6,7 @@ [Service] Type=simple Restart=no +Environment=LOG_TO_JOURNALD=1 ExecStart=/usr/share/rmt/bin/rmt-cli mirror [Install] ++++++ rmt-server-sync.service ++++++ --- /var/tmp/diff_new_pack.NkqGpe/_old 2018-04-27 16:09:20.690241241 +0200 +++ /var/tmp/diff_new_pack.NkqGpe/_new 2018-04-27 16:09:20.694241094 +0200 @@ -6,6 +6,7 @@ [Service] Type=simple Restart=no +Environment=LOG_TO_JOURNALD=1 ExecStart=/usr/share/rmt/bin/rmt-cli sync [Install] ++++++ rmt.8.gz ++++++ --- /var/tmp/diff_new_pack.NkqGpe/_old 2018-04-27 16:09:20.734239627 +0200 +++ /var/tmp/diff_new_pack.NkqGpe/_new 2018-04-27 16:09:20.734239627 +0200 @@ -137,6 +137,44 @@ .SH "Configuration" Available configuration options can be found in the \fBetc/rmt\.conf\fR file\. . +.P +The recommended way to perform initial configuration is using the YaST RMT module \fIhttps://github\.com/SUSE/yast2\-rmt\fR\. The RPM package is available on OBS \fIhttps://build\.opensuse\.org/package/show/systemsmanagement:SCC:RMT/yast2\-rmt\fR\. The YaST RMT module will take care of configuring SCC credentials, setting up the database and creating SSL certificates\. +. +.SS "SSL certificates & HTTPS" +By default access to API endpoints consumed by SUSEConnect is limited to HTTPS only\. nginx is configured to use SSL certificate and private key from the following locations: +. +.IP "\(bu" 4 +Certificate: /usr/share/rmt/ssl/rmt\-server\.crt +. +.IP "\(bu" 4 +Private key: /usr/share/rmt/ssl/rmt\-server\.key +. +.IP "" 0 +. +.P +YaST RMT module generates a custom certificate authority which is used to sign HTTPS certificates, which means that in order to register, this certificate authority must be trusted by the client machines\. +. +.IP "\(bu" 4 +When registration is performed during installation from the media or with YaST Registration module, a message will appear, prompting to trust the server certificate\. +. +.IP "\(bu" 4 +\fBclientSetup4RMT\.sh\fR script is provided for registering on the command line at the following URL: \fBhttp://rmt\.hostname/tools/clientSetup4RMT\.sh\fR\. The script requires only the RMT server hostname as a mandatory parameter, e\.g\.: +. +.IP "" 4 +. +.nf + + \./clientSetup4RMT\.sh https://rmt\.hostname/ +. +.fi +. +.IP "" 0 +. +.IP +Executing this script will import the RMT CA\'s certificate into the trusted store and after that run SUSEConnect to register the client with the RMT\. +. +.IP "" 0 +. .SS "Mirroring settings" . .IP "\(bu" 4 ++++++ rmt.service ++++++ --- /var/tmp/diff_new_pack.NkqGpe/_old 2018-04-27 16:09:20.766238453 +0200 +++ /var/tmp/diff_new_pack.NkqGpe/_new 2018-04-27 16:09:20.766238453 +0200 @@ -9,7 +9,7 @@ Type=simple User=_rmt PrivateTmp=yes -Environment=RAILS_LOG_TO_STDOUT=1 +Environment=LOG_TO_JOURNALD=1 WorkingDirectory=/usr/share/rmt ExecStart=/usr/share/rmt/bin/rails server -e production Restart=always