openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:0487-1 Rating: moderate References: #1133891 #1149131 #1177149 #1183521 #1183539 #1183856 #1184529 #1185224 #1185226 #1185625 #1185766 #1186213 #1186775 #1186842 #1188110 #1188322 #1188648 #1189728 #1189807 #1190383 #1190574 #1190788 #1191475 #1191945 #1192078 #1192242 #1192302 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has 27 recommended fixes can now be installed. Description: This update for transactional-update fixes the following issues: - Version 3.6.2 - Bind mount root file system snapshot on itself, this makes the temporary directory in '/tmp' unnecessary; also fixes to return the correct snapshot's working directory via API call. (bsc#1188110) - Use separate mount namespace for transactional-update; this should fix several applications that fail to run if a mount point has the 'unbindable' mount flag set - Version 3.6.1 - Fix rsyncing '/etc' into the running system with '--drop-if-no-change'. (bsc#1192242) - Version 3.6.0 - Simplify mount hierarchy by just using a single slave bind mount as the root of the update environment; this may avoid the error messages of failed unmounts. (bsc#1191945) - Version 3.5.7 Various fixes affecting Salt support: - t-u: Don't squash stderr messages into stdout - t-u: Correctly handle case when the snapshot has been deleted due to using --drop-if-no-change: Don't show reboot messages and avoid an awk error message. (bsc#1191475) - tukit: Make inotify handler less sensitive / ignore more directories (bsc#1191475) - Version 3.5.6 - tukit: Add S/390 bootloader support (bsc#1189807) - t-u: support purge-kernels with t-u patch (bsc#1190788) - Version 3.5.5 - t-u: Use tukit for SUSEConnect call (bsc#1190574) Correctly registers repositories - Version 3.5.4 - tukit: Fix resolved support (bsc#1190383) - Version 3.5.3 - t-u: Purge kernels as part of package operations Required for live patching support (bsc#1189728) - Version 3.5.2 - tukit: Fix overlay syncing errors with SELinux (bsc#1188648) - Don't print message for `shell` with --quiet - Version 3.5.1 - t-u: Disable status file generation by default The new experimental `status` command requires the availability of /etc/YaST2/control.xml, which is not present on all systems. Hide the creation of the corresponding status file behind a new EXPERIMENTAL_STATUS option to try out this functionality. - Increase library version - Version 3.5.0 - Add alias setDiscardIfUnchanged for setDiscard. The old method name wasn't really clear and will be removed if we should have an API break in the future - Replace 'mkinitrd' with direct dracut call. (bsc#1186213) - tukit: Add configuration file support (/etc/tukit.conf) - Allow users to configure additional bind mounts (see /usr/etc/tukit.conf for an example and limitations). (bsc#1188322) - Add 'transactional-update status' call. This is a POC for obtaining a hash of a system to verify its integrity. - Internal bugfixes / optimizations - Version 3.4.0 - Apply 'SElinux' context on '/etc' in transaction. (bsc#1185625, bsc#1185766, bsc#1186842, bsc#1186775) - Implement inotify handling in C instead of Bash; this makes the --drop-if-no-change option work on SLE Micro. (bsc#1184529) - Use `tukit call` for up, dup and patch to allow resuming an update after zypper updated itself in the snapshot. (bsc#1185226) - Fix obsolete output type messages in 'initrd'. (bsc#1177149) - Make different base snapshot warning more visible. (bsc#1185224) - Version 3.3.0 - Add support for more package managers by bind mounting their directories - Support snapshots without dedicated overlay [bsc#1183539], (bsc#1183539) - Link RPM database correctly with older zypper versions (bsc#1183521) - Don't discard manual changes in fstab (bsc#1183856, bsc#1192302) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-487=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libtukit-devel-3.6.2-150300.3.3.1 libtukit0-3.6.2-150300.3.3.1 libtukit0-debuginfo-3.6.2-150300.3.3.1 transactional-update-3.6.2-150300.3.3.1 transactional-update-debuginfo-3.6.2-150300.3.3.1 transactional-update-debugsource-3.6.2-150300.3.3.1 tukit-3.6.2-150300.3.3.1 tukit-debuginfo-3.6.2-150300.3.3.1 - openSUSE Leap 15.3 (noarch): dracut-transactional-update-3.6.2-150300.3.3.1 transactional-update-zypp-config-3.6.2-150300.3.3.1 References: https://bugzilla.suse.com/1133891 https://bugzilla.suse.com/1149131 https://bugzilla.suse.com/1177149 https://bugzilla.suse.com/1183521 https://bugzilla.suse.com/1183539 https://bugzilla.suse.com/1183856 https://bugzilla.suse.com/1184529 https://bugzilla.suse.com/1185224 https://bugzilla.suse.com/1185226 https://bugzilla.suse.com/1185625 https://bugzilla.suse.com/1185766 https://bugzilla.suse.com/1186213 https://bugzilla.suse.com/1186775 https://bugzilla.suse.com/1186842 https://bugzilla.suse.com/1188110 https://bugzilla.suse.com/1188322 https://bugzilla.suse.com/1188648 https://bugzilla.suse.com/1189728 https://bugzilla.suse.com/1189807 https://bugzilla.suse.com/1190383 https://bugzilla.suse.com/1190574 https://bugzilla.suse.com/1190788 https://bugzilla.suse.com/1191475 https://bugzilla.suse.com/1191945 https://bugzilla.suse.com/1192078 https://bugzilla.suse.com/1192242 https://bugzilla.suse.com/1192302