Foreman » Installer

03/28/2024

05:51 PM Bug #37308 (Ready For Testing): Fix apache config so REMOTE_USER is not unset for pulpcore registry

The Foreman Bot

04:54 PM Bug #37308 (Closed): Fix apache config so REMOTE_USER is not unset for pulpcore registry

Any calls to /pulpcore_registry/v2/ lose REMOTE_USER in the headers. This header is necessary to authenticate with Pu... Ian Ballou

05:00 PM Bug #37306 (Closed): Puppet server ciphers updated in 2.0 but old ciphers can remain in answers

Applied in changeset commit:installer|0764f7e886fa5650b8e2c46e25e9f754e8c11311. Ewoud Kohl van Wijngaarden

01:10 PM Bug #37306 (Ready For Testing): Puppet server ciphers updated in 2.0 but old ciphers can remain in answers

The Foreman Bot

12:42 PM Bug #37306 (Closed): Puppet server ciphers updated in 2.0 but old ciphers can remain in answers

In foreman-installer 2.0 we updated the ciphers for puppetserver, but didn't introduce a migration to update existing... Ewoud Kohl van Wijngaarden

04:55 PM Revision 0764f7e8 (installer): Fixes #37306 - Reset Puppetserver ciphers if needed

In foreman-installer 2.0 we updated[1] the ciphers for puppetserver, but
didn't introduce a migration to update exist... Ewoud Kohl van Wijngaarden

03/27/2024

06:03 AM Revision 9d9f48f2 (installer): Refs #37298 - Add migrations to drop setup plugin

Fixes: e4338f1d7ea9 ("Fixes #37298 - Drop foreman_setup plugin") Ewoud Kohl van Wijngaarden

03/26/2024

03:00 PM Refactor #37298 (Closed): Drop setup plugin

Applied in changeset commit:installer|e4338f1d7ea939fd09e25be49c9767a1178d0665. Ewoud Kohl van Wijngaarden

12:16 PM Refactor #37298 (Ready For Testing): Drop setup plugin

The Foreman Bot

12:10 PM Refactor #37298 (Closed): Drop setup plugin

Per https://community.theforeman.org/t/retire-foreman-setup-plugin/36594 this plugin is unmaintained and largely broken. Ewoud Kohl van Wijngaarden

02:55 PM Revision e4338f1d (installer): Fixes #37298 - Drop foreman_setup plugin

This plugin is unmaintained and largely broken. Ewoud Kohl van Wijngaarden

02:17 PM Revision a04117e6 (puppet-candlepin): Drop cpinit

Eric Helms

03/25/2024

06:57 PM Revision 1a26d778 (puppet-candlepin): Use /etc/tomcat as configuration directory

The /usr/share/tomcat/conf path is already a symlink to /etc/tomcat so
this just makes it more explicit. Ewoud Kohl van Wijngaarden

05:02 PM Feature #37297 (Ready For Testing): Default PostgreSQL password encryption to SCRAM

The Foreman Bot

04:58 PM Feature #37297 (Closed): Default PostgreSQL password encryption to SCRAM

PostgreSQL supports SCRAM encryption and PostgreSQL 14 will also default to this. Moving to it sooner helps removing ... Ewoud Kohl van Wijngaarden

04:31 PM Refactor #37296 (Ready For Testing): Retire foreman-hooks from installer

The Foreman Bot

04:30 PM Refactor #37296 (Closed): Retire foreman-hooks from installer

Adam Ruzicka

09:40 AM Bug #37029: YAML scenario - server_ssl_chain is ignored

Meanwhile I switched to Foreman 3.9, the installer does not have this issue (or I wasn't able to reproduce it), feel ... Francesco Di Nucci

03/23/2024

12:43 PM Revision f7249849 (installer): Refs #37291 - Only reset puppetserver's JVM if it's /usr/bin/java

The intent was to only reset it if it was the default value, not just
any value.
Fixes: 19310592c8d7f16b2c59f0995463... Ewoud Kohl van Wijngaarden

03/22/2024

06:42 PM Revision 19310592 (installer): Refs #37291 - Reset Puppet's java_bin

In theforeman/puppet 19.2.0 the puppet::server_jvm_java_bin parameter
was changed to undef and determined at runtime.... Ewoud Kohl van Wijngaarden

06:00 PM Bug #37291 (Closed): Ensure correct Java is used with Puppetserver 8

Applied in changeset commit:puppet-puppet|b6088261c08ddfa8d3426ba01c6b35a3d1b1d3a2. Ewoud Kohl van Wijngaarden

11:39 AM Bug #37291 (Ready For Testing): Ensure correct Java is used with Puppetserver 8

The Foreman Bot

11:32 AM Bug #37291 (Closed): Ensure correct Java is used with Puppetserver 8

The packaging of puppetserver doesn't ensure properly that it uses the correct JRE because it uses /usr/bin/java whic... Ewoud Kohl van Wijngaarden

05:04 PM Revision b6088261 (puppet-puppet): Fixes #37291 - Use explicit java on RH with Puppetserver 8

The /usr/bin/java file may point to any version. This changes the logic
to determine the java version (unless explici... Ewoud Kohl van Wijngaarden

03/21/2024

02:13 PM Revision b5243548 (puppet-puppet): test upgrades on EL9 and Ubuntu 22.04

Evgeni Golov

02:13 PM Revision 82548282 (puppet-puppet): raise minimum version for upgrades to 7.10.0 to avoid issues with facter

Evgeni Golov

12:25 PM Revision 285e62fb (puppet-puppet): Disable FIPS on EL8+

Eric Helms

12:06 PM Revision 39713ae8 (puppet-certs): Drop RPMs from being included in tarball

Eric Helms

12:52 AM Revision 547a6456 (puppet-katello): Remove Qpid

Eric Helms

03/20/2024

11:44 PM Revision 5cb07de5 (puppet-certs): Remove all qpid related certificate handling

Eric Helms

11:44 PM Revision b0efdf56 (installer): Remove smart_proxy_dynflow_core.service

Eric Helms

11:44 PM Revision 5d15b807 (installer): Drop inclusion of Qpid module

Eric Helms

04:06 PM Revision 1c787b10 (puppet-foreman_proxy_content): Remove qpid class

Eric Helms

07:38 AM Revision 1402c4b7 (installer): Check if /opt/puppetlabs is mounted noexec

It was reported[1] that facter can't be found if puppet is installed on
a filesystem that's mounted noexec.
[1]: htt... Ewoud Kohl van Wijngaarden

03/19/2024

04:41 PM Revision 80d6498b (puppet-foreman): Add support for Debian 12

Evgeni Golov

04:24 PM Revision 5da646fd (puppet-foreman_proxy): Add support for Debian 12

Evgeni Golov

03:02 PM Revision dcbfcf0f (puppet-dhcp): Add support for Debian 12

Evgeni Golov

02:58 PM Revision 7662cfc3 (puppet-tftp): Add support for Debian 12

Evgeni Golov

01:56 PM Revision 738ca5a4 (puppet-pulpcore): allow setting gpgkey url in acceptance tests

Evgeni Golov

03/18/2024

09:21 AM Revision 0425650f (installer): Allow puppetlabs/apache 12.x

We need 12.0.3+ for Puppet 8 support due to https://github.com/puppetlabs/puppetlabs-apache/pull/2525 Evgeni Golov

08:40 AM Revision 0de03b2b (puppet-foreman_proxy_content): Allow puppetlabs/apache 12.x

We need 12.0.3+ for Puppet 8 support due to https://github.com/puppetlabs/puppetlabs-apache/pull/2525 Evgeni Golov

08:40 AM Revision 88f8f332 (puppet-katello): Allow puppetlabs/apache 12.x

We need 12.0.3+ for Puppet 8 support due to https://github.com/puppetlabs/puppetlabs-apache/pull/2525 Evgeni Golov

08:40 AM Revision 7f48ca85 (puppet-pulpcore): Allow puppetlabs/apache 12.x

We need 12.0.3+ for Puppet 8 support due to https://github.com/puppetlabs/puppetlabs-apache/pull/2525 Evgeni Golov

08:39 AM Revision 914e6467 (puppet-foreman): Allow puppetlabs/apache 12.x

We need 12.0.3+ for Puppet 8 support due to https://github.com/puppetlabs/puppetlabs-apache/pull/2525 Evgeni Golov

03/15/2024

07:10 PM Revision c2e868ed (puppet-foreman_proxy_content): Refs #37130 - Set the mode on the generated bootstrap RPM

Eric Helms

09:53 AM Revision e7f7e00a (puppet-pulpcore): Allow setting baseurl fact during acceptance tests

Odilon Sousa

03/14/2024

02:23 PM Feature #37261 (Ready For Testing): Add gitlab CI config

The Foreman Bot

10:53 AM Feature #37261 (Closed): Add gitlab CI config

For downstream projects using gitlab dosas please_edit_me

09:42 AM Bug #37260 (New): Have to run foreman-installer twice. First install fail due to pki-core module not enabled.

First time I run @foreman-installer --scenario katello@. I get this error:... Rune Philosof

09:28 AM Bug #34130: Puppetserver runs under Java 8 instead of Java 11 in Katello scenario

It is no longer @tomcatjss@, but the result is still the same. @pki-servlet-engine@ requires @java-1.8.0@.... Rune Philosof

03/13/2024

01:39 PM Feature #37253 (New): katello-certs-check and foreman-installer --scenario katello should support not using chain

`katello-certs-check` and `foreman-installer --scenario katello` should support not using chain certificate file.
Ap... Rune Philosof

11:25 AM Bug #29279: Drop use of SSLCertificateChainFile and combine CA certs

Ewoud Kohl van Wijngaarden wrote in #note-1:
> That's not how we use it. We use SSLCertificateChainFile as the CA th... Rune Philosof

10:55 AM Bug #37029: YAML scenario - server_ssl_chain is ignored

Ewoud Kohl van Wijngaarden wrote in #note-2:
> > I'm installing Foreman 3.8.0 on AlmaLinux 8.9, using a custom scena... Rune Philosof

03/11/2024

06:55 PM Revision 9cd5deb0 (puppet-candlepin): Convert candlepin.conf from ERB to EPP

Like the previous changes, this brings proper handling of Sensitive.
Previously the oauth credentials couldn't be pas... Ewoud Kohl van Wijngaarden

06:55 PM Revision 881e02db (puppet-candlepin): Rewrite _candlepin_database.conf from ERB to EPP

Like the tomcat changes, this also implements better secret handling.
This bumps the required PostgreSQL module versi... Ewoud Kohl van Wijngaarden

06:55 PM Revision e28b3904 (puppet-candlepin): Remove unused log_dir parameter from postgresql.pp

Ewoud Kohl van Wijngaarden

06:55 PM Revision 21940d0c (puppet-candlepin): Convert server.xml from ERB to EPP

Like with broker.xml this gives proper handling of sensitive values. Ewoud Kohl van Wijngaarden

06:55 PM Revision 08d0ed98 (puppet-candlepin): Convert broker.xml to EPP

This converts from ERB to EPP and implements proper Sensitive handling.
After this the diff content of broker.xml is ... Ewoud Kohl van Wijngaarden

06:55 PM Revision bcd84043 (puppet-candlepin): Remove redundant assertion

2 lines below there is exactly the same assertion with additional ones. Ewoud Kohl van Wijngaarden

02:55 PM Bug #37029: YAML scenario - server_ssl_chain is ignored

> I'm installing Foreman 3.8.0 on AlmaLinux 8.9, using a custom scenario YAML. I'm setting up SSL/TLS, so amongst oth... Ewoud Kohl van Wijngaarden

01:00 PM Feature #37177 (Closed): Upgrade to PostgreSQL 13 on EL8

Applied in changeset commit:installer|3f846ff16a586032fb457f64d392e19cddcac1d9. Evgeni Golov

12:21 PM Revision 3f846ff1 (installer): Fixes #37177 - Upgrade PostgreSQL to 13 on EL8

Evgeni Golov

03/06/2024

12:58 PM Revision ed3e297e (puppet-dns): Add support for zone masterfile format

This commit adds support for the zone masterfile format in the Zone resource. Jean-François Roche

10:55 AM Revision ea57c5ce (puppet-foreman): Add support for Ubuntu 22.04

Evgeni Golov

10:54 AM Revision 8efe45c2 (puppet-tftp): Add Ubuntu 22.04 support

Evgeni Golov

10:54 AM Revision 9aa6e72a (puppet-dhcp): Add Ubuntu 22.04 support

Evgeni Golov

01:45 AM Revision a0d0eee2 (puppet-foreman_proxy): Add support for Ubuntu 22.04

Evgeni Golov

03/05/2024

01:15 PM Bug #33643 (Rejected): Skipping checks no longer working because of tuning profile

Evgeni Golov

10:04 AM Bug #37219 (Rejected): foreman-installer fails with puppet error on unknown literal $slowlog_log_slower_than

Evgeni Golov

10:04 AM Bug #37219: foreman-installer fails with puppet error on unknown literal $slowlog_log_slower_than

That's a Puppet bug as discussed in https://community.theforeman.org/t/puppet-7-29-0-8-5-0-breaks-our-installer/37075... Evgeni Golov

03/04/2024

08:17 AM Bug #37219 (Rejected): foreman-installer fails with puppet error on unknown literal $slowlog_log_slower_than

Background: sos tool runs CI jobs also on CentOS8 with foreman where we recently spotted constant failures in the tes... Pavel Moravec