Foreman » Installer

07/30/2020

04:05 PM Bug #30019 (Need more information): Installation failed when using --foreman-db-manage false and --katello-candlepin-manage-db false

Does that resolve the issue? Ewoud Kohl van Wijngaarden

03:01 PM Feature #30078 (Closed): Manage configuration of default_hostgroup plugin

Applied in changeset commit:puppet-foreman|8e4c89a9eb36cc6f396c1abfd0a0d12c7ff8424c. Anonymous

02:30 PM Bug #28385 (Closed): When upgrading to pg10 candlepin migration fails if --upgrade is forgotten

We've dropped --upgrade in the most recent versions and it should just do the right thing. Ewoud Kohl van Wijngaarden

02:26 PM Bug #28693 (Need more information): Candlepin fails to talk to qpidd listening on ::1 when connecting by hostname "localhost"

Now that we have Artemis and qpid isn't there anymore, I think this can closed? Ewoud Kohl van Wijngaarden

02:24 PM Bug #28577 (Closed): running installer inside forklift fails due to scl being enabled

This will have been resolved now that it uses SCL itself. Ewoud Kohl van Wijngaarden

02:20 PM Bug #28964 (Duplicate): Foreman proxy realm plugin missing xmlrpc -- needs to install rh-ruby25-rubygem-xmlrpc

Fixed in #30040 Ewoud Kohl van Wijngaarden

02:15 PM Revision 8e4c89a9 (puppet-foreman): Fixes #30078 - add parameter to accept a hostgroup config hash

Anand Patel

02:08 PM Feature #30284: Provide clearer Smart Proxy registration errors with as much context as possible based on the error

Removing the milestone since I don't think we'll get to this before 2.2.0 and it shouldn't block. Ewoud Kohl van Wijngaarden

01:21 PM Bug #30523 (Ready For Testing): Make Candlepin database migration idempotent

The Foreman Bot

12:24 PM Revision 75968523 (installer): Refs #30506: Install crane-selinux if pulp enabled

Eric Helms

12:13 PM Revision 1caf701a (puppet-foreman_proxy): Improve the readability of the provided grub.cfg

Peter Bray

07/29/2020

10:53 PM Bug #30523 (Closed): Make Candlepin database migration idempotent

The Candlepin database migration happens on every installer run because we cannot reliably detect if there are pendin... Eric Helms

11:55 AM Bug #30489: CVE-2020-14335 world-readable OMAPI secret

You are right, not enabling the omapi at all is stupid.
I do not believe enforcing the key should be part of this ... Ondřej Ezr

07/28/2020

04:29 PM Feature #30284: Provide clearer Smart Proxy registration errors with as much context as possible based on the error

Perhaps we can also use the #28384 to provide better debug instructions. I've asked @ https://github.com/theforeman/f... Ewoud Kohl van Wijngaarden

04:08 PM Refactor #30507 (Ready For Testing): Use katello_enabled? throughout hooks

The Foreman Bot

02:09 PM Refactor #30507 (Closed): Use katello_enabled? throughout hooks

Eric Helms

04:07 PM Revision 54def6c7 (installer): Refs #30506: Check modern selinux enabled fact

Eric Helms

03:01 PM Feature #30506 (Closed): Install selinux packages via a hook

Applied in changeset commit:installer|115a55787b7b5077ee4364d5e2cc23429f82bf1b. Eric Helms

01:57 PM Feature #30506 (Ready For Testing): Install selinux packages via a hook

The Foreman Bot

01:49 PM Feature #30506 (Closed): Install selinux packages via a hook

Eric Helms

02:20 PM Revision 115a5578 (installer): Fixes #30506: Ensure selinux packages are installed before puppet run

Eric Helms

12:51 PM Revision 5e681e59 (puppet-katello): Refs #30346 - override candlepin client keypair group

Jonathon Turel

10:55 AM Bug #30489: CVE-2020-14335 world-readable OMAPI secret

Setting the mode on /etc/dhcp/dhcpd.conf to 640 breaks things because we don't set an ACL in that - only the director... Ewoud Kohl van Wijngaarden

09:26 AM Bug #30489: CVE-2020-14335 world-readable OMAPI secret

Are you sure this works? It looks like it disables omapi unless a key and secret are set. This is something that the ... Ewoud Kohl van Wijngaarden

07/27/2020

04:32 PM Feature #30497 (New): Allow using katello::candlepin and katello::application without sharing any files

It should be possible to deploy candlepin and the katello application without sharing any files. This allows deployme... Eric Helms

03:04 PM Revision 354cad34 (puppet-certs): Refs #30346 - allow override of candlepin client keypair group

Jonathon Turel

11:03 AM Feature #30284: Provide clearer Smart Proxy registration errors with as much context as possible based on the error

Noting down so I don't forget: we can also retry on some HTTP errors, like 5xx errors on listing. Ewoud Kohl van Wijngaarden

07/24/2020

10:49 PM Bug #30489: CVE-2020-14335 world-readable OMAPI secret

Adding a proposed patch Ondřej Ezr

09:55 PM Bug #30489 (Closed): CVE-2020-14335 world-readable OMAPI secret

Ondřej Ezr

07/23/2020

03:13 PM Revision a4747281 (puppet-pulpcore): Introduce a curl_command helper

This aims to reduce the duplication in curl verifications and also
allows checking both the body and the response code. Ewoud Kohl van Wijngaarden

12:13 PM Feature #28961 (Duplicate): Remove Pulp 2 as a backend for Katello

Ewoud Kohl van Wijngaarden

12:10 PM Feature #28961 (New): Remove Pulp 2 as a backend for Katello

Ewoud Kohl van Wijngaarden

12:08 PM Feature #30359 (Duplicate): Remove Pulp 2 from being deployed on foreman-proxy with content

Ewoud Kohl van Wijngaarden

12:06 PM Bug #30474 (Resolved): Installer should manage /etc/foreman-proxy/settings.d/pulpcore.yml

Ewoud Kohl van Wijngaarden

11:50 AM Bug #30474: Installer should manage /etc/foreman-proxy/settings.d/pulpcore.yml

Thanks for the link Ewoud.
I was searching for option --foreman-proxy-plugin-pulp-pulp-url and --foreman-proxy-plug... Suraj Patil

11:38 AM Bug #30474 (Need more information): Installer should manage /etc/foreman-proxy/settings.d/pulpcore.yml

This file is already managed by foreman_proxy::plugin::pulp (see https://github.com/theforeman/puppet-foreman_proxy/b... Ewoud Kohl van Wijngaarden

11:30 AM Bug #30474 (Resolved): Installer should manage /etc/foreman-proxy/settings.d/pulpcore.yml

puppet-pulpcore should manage pulp_url and content_app_url in /etc/foreman-proxy/settings.d/pulpcore.yml.
Suraj Patil

11:57 AM Support #29935 (Rejected): getting error while creating location for the first time

This looks like a bug in some plugin. https://community.theforeman.org/c/support/10 is a better place for this. Ewoud Kohl van Wijngaarden

11:56 AM Support #30008 (Rejected): installing SSL certificate for katello

There is insufficient data here to act on. Ewoud Kohl van Wijngaarden

11:54 AM Feature #30309: Drop Pulp 2 related parameters from puppet-foreman_proxy Pulp plugin

IMHO we should only drop the options when the plugin itself has dropped them. I'd suggest that this is blocked on a n... Ewoud Kohl van Wijngaarden

11:50 AM Feature #30308 (Duplicate): Remove Pulp 2 and Qpid from puppet-katello

Ewoud Kohl van Wijngaarden

07/22/2020

04:29 PM Bug #30465 (Ready For Testing): Pulpcore services run unconfined in SELinux

The Foreman Bot

07/21/2020

04:28 PM Bug #30465 (Closed): Pulpcore services run unconfined in SELinux

Currently the services run unconfined because pulpcore-selinux only labels /usr/{local,lib/pulp}/bin/{gunicorn,rq} bu... Ewoud Kohl van Wijngaarden

11:01 AM Bug #30456 (Closed): icons missing on /pub download page

Applied in changeset commit:puppet-foreman|9bb72cee31c3d7265f4f83c9dc222f7205848fed. Adam Ruzicka

08:55 AM Bug #30456 (Ready For Testing): icons missing on /pub download page

The Foreman Bot

08:42 AM Bug #30456 (Assigned): icons missing on /pub download page

Adam Ruzicka

08:41 AM Bug #30456 (Closed): icons missing on /pub download page

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1841818
*Description of problem:*
Index of /pub has no... Adam Ruzicka

10:26 AM Revision 9bb72cee (puppet-foreman): Fixes #30456 - Fix missing icons on /pub page

The requests for /icons/* were being proxy-passed to puma, which didn't know
about any icons and returned 404s. Adam Ruzicka

07/20/2020

03:58 PM Bug #30449 (Ready For Testing): Foreman Proxy HTTPBoot feature should not require tftp

The Foreman Bot

03:52 PM Bug #30449 (Closed): Foreman Proxy HTTPBoot feature should not require tftp

Foreman Proxy's HTTPBoot feature used to require tftp, but since Foreman Proxy 1.22 this is no longer true (commit:db... Ewoud Kohl van Wijngaarden

11:10 AM Bug #29649: The system does not seem to be IPA-enrolled

After reading the code a bit and looking what was actually requested I hacked around a bit and came up with this:
Of... Han Boetes

07/18/2020

03:59 AM Feature #30436: As a developer I'd like to set the exportable paths via installer

Note you will also have to set the permissions/ownershjp to apache:pulp for the directories you are creating and allo... Partha Aji

03:57 AM Feature #30436: As a developer I'd like to set the exportable paths via installer

Also check out https://docs.pulpproject.org/settings.html#allowed-export-paths Partha Aji

03:52 AM Feature #30436 (Closed): As a developer I'd like to set the exportable paths via installer

We need to be able to add to /etc/pulp/settings.py ... Partha Aji

07/17/2020

04:08 PM Revision a53affa0 (puppet-pulpcore): Sort plugins in acceptance test

Ewoud Kohl van Wijngaarden

07/16/2020

10:59 PM Bug #30423 (Ready For Testing): pulp 3 is configured to store downloaded content in /var/lib/pulp/docroot/

The Foreman Bot

07:27 PM Bug #30423 (Closed): pulp 3 is configured to store downloaded content in /var/lib/pulp/docroot/

Pulp3 uses this setting to configure where things are downloaded:
MEDIA_ROOT
we are currently setting it to "/... Justin Sherrill

06:02 PM Refactor #29801 (Ready For Testing): Move --tuning option to hooks/

The Foreman Bot

03:45 PM Revision 8c66bff5 (puppet-pulpcore): Run pulpcore-manager as the pulp user

Ewoud Kohl van Wijngaarden

12:56 PM Bug #30402 (New): Passing --upgrade causes error

Yep, the solution is to NOT pass the '--upgrade' flag, it is no longer needed Justin Sherrill

12:50 PM Bug #30402 (Resolved): Passing --upgrade causes error

Solution: Documentation was recently updated to just execute foreman-installer. Prior upgrade commands had paramet... David Goetschius

12:02 PM Revision fbeae282 (puppet-pulpcore): Use pulpcore-manager

This requires at least Pulp 3.2.0, but since
f59265ebb9fbe9cceddad37400849f8935538d1e that's been the required
minimu... Ewoud Kohl van Wijngaarden

11:01 AM Feature #29895 (Closed): Enable pulp_deb plugin for pulpcore

Applied in changeset commit:puppet-pulpcore|c36c05b8d0705c2ae3c40f8e5ea978e3191c5074. Markus Bucher

07/15/2020

07:01 PM Bug #29296 (Closed): Drop --upgrade flag from katello hooks

Applied in changeset commit:installer|79f509685e75141038f03e0505018ba7e0a920de. William Clark

06:04 PM Bug #29296 (Ready For Testing): Drop --upgrade flag from katello hooks

The Foreman Bot

06:21 PM Revision 79f50968 (installer): Fixes #29296 - remove --upgrade

William Clark

05:52 PM Bug #30402: Passing --upgrade causes error

Thanks for the report. Do you mind opening a thread on our support forum to get some more feedback on your issue? You... Jonathon Turel

03:57 PM Bug #30402: Passing --upgrade causes error

The command that is failing: # foreman-installer --scenario katello --upgrade
Return Code: 1
stderr: |-
/opt... David Goetschius

05:40 PM Refactor #29799 (Ready For Testing): Add --clear-pulp-content to hooks/ and scope on katello module being enabled

The Foreman Bot

03:24 PM Revision c36c05b8 (puppet-pulpcore): Fixes #29895 - add pulp_deb plugin

Markus Bucher

01:15 PM Bug #29649: The system does not seem to be IPA-enrolled

... Han Boetes

07/14/2020

03:53 PM Bug #30402 (Closed): Passing --upgrade causes error

msg: non-zero return code
rc: 1
start: '2020-07-14 11:29:33.872937'
stderr: |-
/opt/theforeman/tfm/ro... David Goetschius

03:01 PM Feature #29797 (Closed): Merge --reset-foreman-db and --reset into --reset-data

Applied in changeset commit:installer|7ca7d88d42ec5a340c3af256096fdede35a3ebe9. William Clark

02:20 PM Revision 7ca7d88d (installer): Fixes #29797 - Merge --reset-foreman-db and --reset into --reset-data

William Clark

02:50 AM Refactor #30363 (Ready For Testing): Generate bootstrap RPM with rpm directly

The Foreman Bot

07/13/2020

03:33 PM Feature #30388 (New): use common naming convention for foreman, candlepin, pulpcore db parameters

postgresql database parameters such as host, port, db name, username, password, management, and ssl parameters should... William Clark

07/10/2020

03:48 PM Revision 953261ff (puppet-certs): Refs #30316: Drop bootstrap RPM code

Eric Helms

03:37 PM Revision da397e90 (puppet-foreman_proxy_content): Bump puppet-certs maximum to 10.0.0

Eric Helms

03:01 PM Refactor #30316 (Closed): Move bootstrap RPM creation to puppet-foreman_proxy_content

Applied in changeset commit:puppet-foreman_proxy_content|7bf101dc5507c90936b9e6169b91848ef106fe0f. Eric Helms

02:02 PM Revision 7bf101dc (puppet-foreman_proxy_content): Fixes #30316: Move bootstrap RPM generation from puppet-certs

Eric Helms

02:01 PM Feature #30346 (Closed): Split Candlepin keystore and truststore to different files

Applied in changeset commit:puppet-katello|ba567747abcaeeb19c960a015bc14e1776f4ae9d. Eric Helms

01:56 PM Revision ba567747 (puppet-katello): Fixes #30346: Pass truststore to Candlepin

Eric Helms

01:56 PM Revision 55f83d44 (puppet-certs): Bump version to 9.0.0

Eric Helms

12:47 PM Bug #30366 (Closed): Set permissions on Candlepin config files to be owned by root:tomcat

Eric Helms

12:15 AM Bug #30364 (New): Add destructive process warning to foreman-installer

The foreman-installer process is destructive to existing configurations on the server as documented here:
https://pr... E.S. Rosenberg

12:11 AM Bug #8916: The Foreman installer should not destroy /etc/httpd/conf*

I can understand that due to limitations of what is being used this is unavoidable, what I can't understand though is... E.S. Rosenberg

12:11 AM Refactor #30363 (Closed): Generate bootstrap RPM with rpm directly

Eric Helms

07/09/2020

11:17 PM Refactor #30362 (New): Allow passing certificates to katello/application.pp

Eric Helms

11:11 PM Feature #30360 (Ready For Testing): Stop deploying Pulp 2 on Katello deployments

The Foreman Bot

08:37 PM Feature #30360 (Closed): Stop deploying Pulp 2 on Katello deployments

Eric Helms

08:37 PM Feature #30359 (Duplicate): Remove Pulp 2 from being deployed on foreman-proxy with content

Eric Helms

07:28 PM Revision a3dc6298 (puppet-candlepin): Refs #30346: Expect an actual truststore instead of re-using keystore

Eric Helms

05:45 PM Revision 2708f130 (puppet-certs): Refs #30346: Generate a separate truststore for Candlepin

Eric Helms

09:27 AM Bug #30349 (Ready For Testing): An empty /var/opt/rh/rh-postgresql12/lib/pgsql/data breaks upgrades

The Foreman Bot

07/08/2020

03:57 PM Bug #30349 (Rejected): An empty /var/opt/rh/rh-postgresql12/lib/pgsql/data breaks upgrades

Installing rh-postgresql12-postgresql-server creates /var/opt/rh/rh-postgresql12/lib/pgsql/data but leaves it empty. ... Ewoud Kohl van Wijngaarden

01:11 PM Feature #30346 (Ready For Testing): Split Candlepin keystore and truststore to different files

The Foreman Bot

12:47 PM Feature #30346 (Closed): Split Candlepin keystore and truststore to different files

Eric Helms

11:57 AM Revision 4ba1170c (puppet-pulpcore): Add the GPL license text

While metadata.json lists this as GPL 3+, Github doesn't detect this. By
adding a LICENSE file, it should correctly d... Ewoud Kohl van Wijngaarden

07/07/2020

04:01 PM Feature #30312 (Closed): Drop unsupported deployments from rhsm-reconfigure script

Applied in changeset commit:puppet-certs|c68c1c806fd1274563495d09ca5f37b0ac967065. Eric Helms

03:57 PM Feature #30338 (New): Drop trusting Foreman CA or customer certificates system wide on installation

Eric Helms

03:51 PM Revision c68c1c80 (puppet-certs): Fixes #30312: Drop docker, atomic and goferd support from consumer RPM

Eric Helms

07/06/2020

06:33 PM Revision b7067082 (puppet-pulpcore): Get full test coverage

With this, all resources are covered in tests. Ewoud Kohl van Wijngaarden

06:33 PM Revision 622a1b08 (puppet-pulpcore): Remove trailing whitespace

Ewoud Kohl van Wijngaarden

06:33 PM Revision 9431274b (puppet-pulpcore): Nest PG SSL test

Ewoud Kohl van Wijngaarden

01:01 PM Bug #30057 (Closed): support configuring number of pulp3 workers

Applied in changeset commit:puppet-foreman_proxy_content|91759d2c6a47af6ee730b1e1f09f6f3e807034dd. William Clark

12:37 PM Revision 91759d2c (puppet-foreman_proxy_content): Fixes #30057 - Expose Pulpcore Worker Count in Puppet-FPC

William Clark

07/04/2020

12:12 AM Refactor #30320 (Ready For Testing): Manage Candlepin certificates group and mode within puppet-candlepin

The Foreman Bot

12:08 AM Refactor #30320 (Ready For Testing): Manage Candlepin certificates group and mode within puppet-candlepin

Eric Helms

07/02/2020

07:17 PM Refactor #30316 (Ready For Testing): Move bootstrap RPM creation to puppet-foreman_proxy_content

The Foreman Bot

05:55 PM Refactor #30316 (Closed): Move bootstrap RPM creation to puppet-foreman_proxy_content

Eric Helms

05:55 PM Tracker #30315 (Resolved): Remove bootstrap RPM creation's dependency on puppet-certs and katello-certs-tools

Eric Helms

02:21 PM Feature #30312 (Ready For Testing): Drop unsupported deployments from rhsm-reconfigure script

The Foreman Bot

02:11 PM Feature #30312 (Closed): Drop unsupported deployments from rhsm-reconfigure script

Eric Helms

12:54 PM Feature #30309 (New): Drop Pulp 2 related parameters from puppet-foreman_proxy Pulp plugin

Eric Helms

12:54 PM Feature #30308 (Duplicate): Remove Pulp 2 and Qpid from puppet-katello

Eric Helms

12:53 PM Feature #30307 (Rejected): Remove Pulp 2 and Qpid code from puppet-foreman_proxy_content

Eric Helms

12:51 PM Tracker #30306 (New): Drop support for Pulp 2

Eric Helms

12:24 PM Feature #30299 (Ready For Testing): Switch puppet-foreman SSL defaults to foreman_pki certificates

The Foreman Bot

12:21 PM Feature #30299 (Ready For Testing): Switch puppet-foreman SSL defaults to foreman_pki certificates

Eric Helms

11:43 AM Feature #30292 (Ready For Testing): The SSL key permissions and ownership for smart-proxy should be managed

The Foreman Bot

11:30 AM Feature #30292 (Ready For Testing): The SSL key permissions and ownership for smart-proxy should be managed

Eric Helms

11:34 AM Feature #30294 (New): Installer for foreman_webhooks plugin

Regular plugin, no deviations from expected behavior. Lukas Zapletal

09:47 AM Refactor #29806 (Duplicate): Move param_value to Kafo

Ewoud Kohl van Wijngaarden

07/01/2020

08:36 PM Revision 1e41eb3e (puppet-pulpcore): Refs #30057 - Configure Pulpcore Worker Count

William Clark

06:23 PM Feature #30284 (Closed): Provide clearer Smart Proxy registration errors with as much context as possible based on the error

Handle the following:... Eric Helms

06:01 PM Feature #29963 (Closed): Remove the dependency on foreman-maintain

Applied in changeset commit:installer|826d106b529018f5682bf51ad79172cf1f518f3b. Ewoud Kohl van Wijngaarden

05:31 PM Revision 826d106b (installer): Fixes #29963 - Manage services without foreman-maintain

Currently foreman-maintain is called to stop and start services in the
EL7 upgrade. However, foreman-maintain is unav... Ewoud Kohl van Wijngaarden

01:03 PM Bug #29345 (Resolved): foreman-installer `Foreman_proxy::Register` fails before restarting services

Ewoud Kohl van Wijngaarden

12:55 PM Bug #29345: foreman-installer `Foreman_proxy::Register` fails before restarting services

I haven't seen it recently, so I think it's safe to close. Ian Ballou

12:23 PM Bug #29345: foreman-installer `Foreman_proxy::Register` fails before restarting services

We now have systemd socket activation which should prevent this. Have you recently seen this or can we close it? Ewoud Kohl van Wijngaarden

12:54 PM Revision 673514f8 (puppet-candlepin): Use the namespaced pg password function

Since puppetlabs/postgresql 6.5.0 the non-namespaced function raises a
deprecation warning. This uses the modern vers... Ewoud Kohl van Wijngaarden

12:25 PM Tracker #28999 (Closed): Deploy Foreman with Puma as the application server by default

Even though not all linked tasks are complete, this is the default in 2.1. Ewoud Kohl van Wijngaarden

11:30 AM Revision 476dfbee (puppet-foreman_proxy): Drop puppetca_split_configs parameter

Since module version 13 this module is Foreman 2.0+ which means we must
always use split configs. That makes this par... Ewoud Kohl van Wijngaarden