Format: 1.8 Date: Tue, 02 Jan 2024 21:36:56 +0000 Source: salt Binary: salt-api salt-cloud salt-common salt-dbg salt-master salt-minion salt-ssh salt-syndic Architecture: source arm64 Version: 3007.0rc1 Distribution: stable Urgency: medium Maintainer: Debian Salt Team Changed-By: Salt Project Packaging Description: salt-api - Generic, modular network access system salt-cloud - public cloud VM management system salt-common - shared libraries that salt requires for all packages salt-dbg - Salt debug symbols salt-master - remote manager to administer servers via salt salt-minion - client package for salt, the distributed remote execution system salt-ssh - remote manager to administer servers via Salt SSH salt-syndic - master-of-masters for salt, the distributed remote execution syst Changes: salt (3007.0rc1) stable; urgency=medium . # Removed . * Removed RHEL 5 support since long since end-of-lifed [#62520](https://github.com/saltstack/salt/issues/62520) * Removing Azure-Cloud modules from the code base. [#64322](https://github.com/saltstack/salt/issues/64322) * Dropped Python 3.7 support since it's EOL in 27 Jun 2023 [#64417](https://github.com/saltstack/salt/issues/64417) * Remove salt.payload.Serial [#64459](https://github.com/saltstack/salt/issues/64459) * Remove netmiko_conn and pyeapi_conn from salt.modules.napalm_mod [#64460](https://github.com/saltstack/salt/issues/64460) * Removed 'transport' arg from salt.utils.event.get_event [#64461](https://github.com/saltstack/salt/issues/64461) * Removed the usage of retired Linode API v3 from Salt Cloud [#64517](https://github.com/saltstack/salt/issues/64517) . # Deprecated . * Deprecate all Proxmox cloud modules [#64224](https://github.com/saltstack/salt/issues/64224) * Deprecate all the Vault modules in favor of the Vault Salt Extension https://github.com/salt-extensions/saltext-vault. The Vault modules will be removed in Salt core in 3009.0. [#64893](https://github.com/saltstack/salt/issues/64893) * Deprecate all the Docker modules in favor of the Docker Salt Extension https://github.com/saltstack/saltext-docker. The Docker modules will be removed in Salt core in 3009.0. [#64894](https://github.com/saltstack/salt/issues/64894) * Deprecate all the Zabbix modules in favor of the Zabbix Salt Extension https://github.com/salt-extensions/saltext-zabbix. The Zabbix modules will be removed in Salt core in 3009.0. [#64896](https://github.com/saltstack/salt/issues/64896) * Deprecate all the Apache modules in favor of the Apache Salt Extension https://github.com/salt-extensions/saltext-apache. The Apache modules will be removed in Salt core in 3009.0. [#64909](https://github.com/saltstack/salt/issues/64909) * Deprecation warning for Salt's backport of ``OrderedDict`` class which will be removed in 3009 [#65542](https://github.com/saltstack/salt/issues/65542) * Deprecate Kubernetes modules for move to saltext-kubernetes in version 3009 [#65565](https://github.com/saltstack/salt/issues/65565) * Deprecated all Pushover modules in favor of the Salt Extension at https://github.com/salt-extensions/saltext-pushover. The Pushover modules will be removed from Salt core in 3009.0 [#65567](https://github.com/saltstack/salt/issues/65567) . # Changed . * Masquerade property will not default to false turning off masquerade if not specified. [#53120](https://github.com/saltstack/salt/issues/53120) * Addressed Python 3.11 deprecations: . * Switch to `FullArgSpec` since Py 3.11 no longer has `ArgSpec`, deprecated since Py 3.0 * Stopped using the deprecated `cgi` module. * Stopped using the deprecated `pipes` module * Stopped using the deprecated `imp` module [#64457](https://github.com/saltstack/salt/issues/64457) * changed 'gpg_decrypt_must_succeed' default from False to True [#64462](https://github.com/saltstack/salt/issues/64462) . # Fixed . * When an NFS or FUSE mount fails to unmount when mount options have changed, try again with a lazy umount before mounting again. [#18907](https://github.com/saltstack/salt/issues/18907) * fix autoaccept gpg keys by supporting it in refresh_db module [#42039](https://github.com/saltstack/salt/issues/42039) * Made cmd.script work with files from the fileserver via salt-ssh [#48067](https://github.com/saltstack/salt/issues/48067) * Made slsutil.renderer work with salt-ssh [#50196](https://github.com/saltstack/salt/issues/50196) * Fixed defaults.merge is not available when using salt-ssh [#51605](https://github.com/saltstack/salt/issues/51605) * Fix extfs.mkfs missing parameter handling for -C, -d, and -e [#51858](https://github.com/saltstack/salt/issues/51858) * Fixed Salt master does not renew token [#51986](https://github.com/saltstack/salt/issues/51986) * Fixed salt-ssh continues state/pillar rendering with incorrect data when an exception is raised by a module on the target [#52452](https://github.com/saltstack/salt/issues/52452) * Fix extfs.tune has 'reserved' documented twice and is missing the 'reserved_percentage' keyword argument [#54426](https://github.com/saltstack/salt/issues/54426) * Fix the ability of the 'selinux.port_policy_present' state to modify. [#55687](https://github.com/saltstack/salt/issues/55687) * Fixed config.get does not support merge option with salt-ssh [#56441](https://github.com/saltstack/salt/issues/56441) * Removed an unused assignment in file.patch [#57204](https://github.com/saltstack/salt/issues/57204) * Fixed vault module fetching more than one secret in one run with single-use tokens [#57561](https://github.com/saltstack/salt/issues/57561) * Use brew path from which in mac_brew_pkg module and rely on _homebrew_bin() everytime [#57946](https://github.com/saltstack/salt/issues/57946) * Fixed Vault verify option to work on minions when only specified in master config [#58174](https://github.com/saltstack/salt/issues/58174) * Fixed vault command errors configured locally [#58580](https://github.com/saltstack/salt/issues/58580) * Fixed issue with basic auth causing invalid header error and 401 Bad Request, by using HTTPBasicAuthHandler instead of header. [#58936](https://github.com/saltstack/salt/issues/58936) * Make the LXD module work with pyLXD > 2.10 [#59514](https://github.com/saltstack/salt/issues/59514) * Return error if patch file passed to state file.patch is malformed. [#59806](https://github.com/saltstack/salt/issues/59806) * Handle failure and error information from tuned module/state [#60500](https://github.com/saltstack/salt/issues/60500) * Fixed sdb.get_or_set_hash with Vault single-use tokens [#60779](https://github.com/saltstack/salt/issues/60779) * Fixed state.test does not work with salt-ssh [#61100](https://github.com/saltstack/salt/issues/61100) * Made slsutil.findup work with salt-ssh [#61143](https://github.com/saltstack/salt/issues/61143) * Allow all primitive grain types for autosign_grains [#61416](https://github.com/saltstack/salt/issues/61416), [#63708](https://github.com/saltstack/salt/issues/63708) * `ipset.new_set` no longer fails when creating a set type that uses the `family` create option [#61620](https://github.com/saltstack/salt/issues/61620) * Fixed Vault session storage to allow unlimited use tokens [#62380](https://github.com/saltstack/salt/issues/62380) * fix the efi grain on FreeBSD [#63052](https://github.com/saltstack/salt/issues/63052) * Fixed gpg.receive_keys returns success on failed import [#63144](https://github.com/saltstack/salt/issues/63144) * Fixed GPG state module always reports success without changes [#63153](https://github.com/saltstack/salt/issues/63153) * Fixed GPG state module does not respect test mode [#63156](https://github.com/saltstack/salt/issues/63156) * Fixed gpg.absent with gnupghome/user, fixed gpg.delete_key with gnupghome [#63159](https://github.com/saltstack/salt/issues/63159) * Fixed service module does not handle enable/disable if systemd service is an alias [#63214](https://github.com/saltstack/salt/issues/63214) * Made x509_v2 compound match detection use new runner instead of peer publishing [#63278](https://github.com/saltstack/salt/issues/63278) * Need to make sure we update __pillar__ during a pillar refresh to ensure that process_beacons has the updated beacons loaded from pillar. [#63583](https://github.com/saltstack/salt/issues/63583) * This implements the vpc_uuid parameter when creating a droplet. This parameter selects the correct virtual private cloud (private network interface). [#63714](https://github.com/saltstack/salt/issues/63714) * pkg.installed no longer reports failure when installing packages that are installed via the task manager [#63767](https://github.com/saltstack/salt/issues/63767) * mac_xattr.list and mac_xattr.read will replace undecode-able bytes to avoid raising CommandExecutionError. [#63779](https://github.com/saltstack/salt/issues/63779) [#63779](https://github.com/saltstack/salt/issues/63779) * Fix aptpkg.latest_version performance, reducing number of times to 'shell out' [#63982](https://github.com/saltstack/salt/issues/63982) * Added option to use a fresh connection for mysql cache [#63991](https://github.com/saltstack/salt/issues/63991) * [lxd] Fixed a bug in `container_create` which prevented devices which are not of type `disk` to be correctly created and added to the container when passed via the `devices` parameter. [#63996](https://github.com/saltstack/salt/issues/63996) * Skipped the `isfile` check to greatly increase speed of reading minion keys for systems with a large number of minions on slow file storage [#64260](https://github.com/saltstack/salt/issues/64260) * Fix utf8 handling in 'pass' renderer [#64300](https://github.com/saltstack/salt/issues/64300) * Upgade tornado to 6.3.2 [#64305](https://github.com/saltstack/salt/issues/64305) * Prevent errors due missing 'transactional_update.apply' on SLE Micro and MicroOS. [#64369](https://github.com/saltstack/salt/issues/64369) * Fix 'unable to unmount' failure to return False result instead of None [#64420](https://github.com/saltstack/salt/issues/64420) * Fixed issue uninstalling duplicate packages in ``win_appx`` execution module [#64450](https://github.com/saltstack/salt/issues/64450) * Clean up tech debt, IPC now uses tcp transport. [#64488](https://github.com/saltstack/salt/issues/64488) * Made salt-ssh more strict when handling unexpected situations and state.* wrappers treat a remote exception as failure, excluded salt-ssh error returns from mine [#64531](https://github.com/saltstack/salt/issues/64531) * Fix flaky test for LazyLoader with isolated mocking of threading.RLock [#64567](https://github.com/saltstack/salt/issues/64567) * Fix possible `KeyError` exceptions in `salt.utils.user.get_group_dict` while reading improper duplicated GID assigned for the user. [#64599](https://github.com/saltstack/salt/issues/64599) * changed vm_config() to deep-merge vm_overrides of specific VM, instead of simple-merging the whole vm_overrides [#64610](https://github.com/saltstack/salt/issues/64610) * Fix the way Salt tries to get the Homebrew's prefix . The first attempt to get the Homebrew's prefix is to look for the `HOMEBREW_PREFIX` environment variable. If it's not set, then Salt tries to get the prefix from the `brew` command. However, the `brew` command can fail. So a last attempt is made to get the prefix by guessing the installation path. [#64924](https://github.com/saltstack/salt/issues/64924) * Add missing MySQL Grant SERVICE_CONNECTION_ADMIN to mysql module. [#64934](https://github.com/saltstack/salt/issues/64934) * Fixed slsutil.update with salt-ssh during template rendering [#65067](https://github.com/saltstack/salt/issues/65067) * Keep track when an included file only includes sls files but is a requisite. [#65080](https://github.com/saltstack/salt/issues/65080) * Fixed `gpg.present` succeeds when the keyserver is unreachable [#65169](https://github.com/saltstack/salt/issues/65169) * Fix issue with openscap when the error was outside the expected scope. It now returns failed with the error code and the error [#65193](https://github.com/saltstack/salt/issues/65193) * Fix typo in nftables module to ensure unique nft family values [#65295](https://github.com/saltstack/salt/issues/65295) * Dereference symlinks to set proper __cli opt [#65435](https://github.com/saltstack/salt/issues/65435) * Made salt-ssh merge master top returns for the same environment [#65480](https://github.com/saltstack/salt/issues/65480) * Account for situation where the metadata grain fails because the AWS environment requires an authentication token to query the metadata URL. [#65513](https://github.com/saltstack/salt/issues/65513) * Improve the condition of overriding target for pip with VENV_PIP_TARGET environment variable. [#65562](https://github.com/saltstack/salt/issues/65562) * Added SSH wrapper for logmod [#65630](https://github.com/saltstack/salt/issues/65630) * Include changes in the results when schedule.present state is run with test=True. [#65652](https://github.com/saltstack/salt/issues/65652) * Fixed Salt-SSH pillar rendering and state rendering with nested SSH calls when called via saltutil.cmd or in an orchestration [#65670](https://github.com/saltstack/salt/issues/65670) * Fix extfs.tune doesn't pass retcode to module.run [#65686](https://github.com/saltstack/salt/issues/65686) * Fix boto execution module loading [#65691](https://github.com/saltstack/salt/issues/65691) * Removed PR 65185 changes since incomplete solution [#65692](https://github.com/saltstack/salt/issues/65692) * Return an error message when the DNS plugin is not supported [#65739](https://github.com/saltstack/salt/issues/65739) . # Added . * Allowed publishing to regular minions from the SSH wrapper [#40943](https://github.com/saltstack/salt/issues/40943) * Added syncing of custom salt-ssh wrappers [#45450](https://github.com/saltstack/salt/issues/45450) * Made salt-ssh sync custom utils [#53666](https://github.com/saltstack/salt/issues/53666) * Add ability to use file.managed style check_cmd in file.serialize [#53982](https://github.com/saltstack/salt/issues/53982) * Revised use of deprecated net-tools and added support for ip neighbour with IPv4 ip_neighs, IPv6 ip_neighs6 [#57541](https://github.com/saltstack/salt/issues/57541) * Added password support to Redis returner. [#58044](https://github.com/saltstack/salt/issues/58044) * Added keyring param to gpg modules [#59783](https://github.com/saltstack/salt/issues/59783) * Added new grain to detect the Salt package type: onedir, pip or system [#62589](https://github.com/saltstack/salt/issues/62589) * Added Vault AppRole and identity issuance to minions [#62823](https://github.com/saltstack/salt/issues/62823) * Added Vault AppRole auth mount path configuration option [#62825](https://github.com/saltstack/salt/issues/62825) * Added distribution of Vault authentication details via response wrapping [#62828](https://github.com/saltstack/salt/issues/62828) * Add salt package type information. Either onedir, pip or system. [#62961](https://github.com/saltstack/salt/issues/62961) * Added signature verification to file.managed/archive.extracted [#63143](https://github.com/saltstack/salt/issues/63143) * Added signed_by_any/signed_by_all parameters to gpg.verify [#63166](https://github.com/saltstack/salt/issues/63166) * Added match runner [#63278](https://github.com/saltstack/salt/issues/63278) * Added Vault token lifecycle management [#63406](https://github.com/saltstack/salt/issues/63406) * adding new call for openscap xccdf eval supporting new parameters [#63416](https://github.com/saltstack/salt/issues/63416) * Added Vault lease management utility [#63440](https://github.com/saltstack/salt/issues/63440) * implement removal of ptf packages in zypper pkg module [#63442](https://github.com/saltstack/salt/issues/63442) * add JUnit output for saltcheck [#63463](https://github.com/saltstack/salt/issues/63463) * Add ability for file.keyvalue to create a file if it doesn't exist [#63545](https://github.com/saltstack/salt/issues/63545) * added cleanup of temporary mountpoint dir for macpackage installed state [#63905](https://github.com/saltstack/salt/issues/63905) * Add pkg.installed show installable version in test mode [#63985](https://github.com/saltstack/salt/issues/63985) * Added patch option to Vault SDB driver [#64096](https://github.com/saltstack/salt/issues/64096) * Added flags to create local users and groups [#64256](https://github.com/saltstack/salt/issues/64256) * Added inline specification of trusted CA root certificate for Vault [#64379](https://github.com/saltstack/salt/issues/64379) * Add ability to return False result in test mode of configurable_test_state [#64418](https://github.com/saltstack/salt/issues/64418) * Switched Salt's onedir Python version to 3.11 [#64457](https://github.com/saltstack/salt/issues/64457) * Added support for dnf5 and its new command syntax [#64532](https://github.com/saltstack/salt/issues/64532) * Adding a new decorator to indicate when a module is deprecated in favor of a Salt extension. [#64569](https://github.com/saltstack/salt/issues/64569) * Add jq-esque to_entries and from_entries functions [#64600](https://github.com/saltstack/salt/issues/64600) * Added ability to use PYTHONWARNINGS=ignore to silence deprecation warnings. [#64660](https://github.com/saltstack/salt/issues/64660) * Add follow_symlinks to file.symlink exec module to switch to os.path.lexists when False [#64665](https://github.com/saltstack/salt/issues/64665) * Added win_appx state and execution modules for managing Microsoft Store apps and deprovisioning them from systems [#64978](https://github.com/saltstack/salt/issues/64978) * Add support for show_jid to salt-run . Adds support for show_jid master config option to salt*run, so its behaviour matches the salt cli command. [#65008](https://github.com/saltstack/salt/issues/65008) * Add ability to remove packages by wildcard via apt execution module [#65220](https://github.com/saltstack/salt/issues/65220) * Added support for master top modules on masterless minions [#65479](https://github.com/saltstack/salt/issues/65479) * Allowed accessing the regular mine from the SSH wrapper [#65645](https://github.com/saltstack/salt/issues/65645) * Allow enabling backup for Linode in Salt Cloud [#65697](https://github.com/saltstack/salt/issues/65697) * Add a backup schedule setter fFunction for Linode VMs [#65713](https://github.com/saltstack/salt/issues/65713) * Add acme support for manual plugin hooks [#65744](https://github.com/saltstack/salt/issues/65744) . # Security . * Upgrade to `tornado>=6.3.3` due to https://github.com/advisories/GHSA-qppv-j76h-2rpx [#64989](https://github.com/saltstack/salt/issues/64989) * Update to `gitpython>=3.1.35` due to https://github.com/advisories/GHSA-wfm5-v35h-vwf4 and https://github.com/advisories/GHSA-cwvm-v4w8-q58c [#65137](https://github.com/saltstack/salt/issues/65137) Checksums-Sha1: ff56366dc4633181ec7dc40925e2424706d1d727 1299 salt_3007.0rc1.dsc 70a37c752ea697b42a75ebaa693bfbaf15002d83 87675388 salt_3007.0rc1.tar.xz 6b780bad229389fdeef2e28b734b01695e377cce 70932 salt-api_3007.0rc1_arm64.deb 83995b544557ebd36894e97f0df396a8184f7990 73700 salt-cloud_3007.0rc1_arm64.deb 6414fedfe5f30f89d30e29b358554c9097232bf4 41302820 salt-common_3007.0rc1_arm64.deb 512123f5830eb7bc68b107ab9ec1c45046f8ea24 26170072 salt-dbg_3007.0rc1_arm64.deb 0694fbf1d471efd8cf313c48e3035638c8f559a2 99256 salt-master_3007.0rc1_arm64.deb 4cf73a3518cb5d0e7e3b554aacc81844485fe755 86812 salt-minion_3007.0rc1_arm64.deb 56d3b463ff4b47797391a8e6e394dc9d75d1e839 73212 salt-ssh_3007.0rc1_arm64.deb a85e9eec03e41e356c3fb91a2b22ddaa673a92ca 71348 salt-syndic_3007.0rc1_arm64.deb eac9836f0d4f876c9c77145b392d2bbf48191cbc 6880 salt_3007.0rc1_arm64.buildinfo Checksums-Sha256: 3a184a1baa4899a1a8b24e3c357735cb152845c16ec4736375160851d255ab98 1299 salt_3007.0rc1.dsc 30593de0359402dcc62f3503afb840de0244328cf972a1498a943f057887d97d 87675388 salt_3007.0rc1.tar.xz 8f47e5d9ca1e2f873f4bb7aa24043648fbd665d8f56915351384a09ae65e4f0e 70932 salt-api_3007.0rc1_arm64.deb e79f2eb6be7193f4d68bbcbc50c0d4d2d656996f8e69b9e16c23f2db55860cde 73700 salt-cloud_3007.0rc1_arm64.deb ced504aaf8e0fa5d75c32f6308ea0c29e2d5517c50175dcfe7efc1b3d84a25d5 41302820 salt-common_3007.0rc1_arm64.deb c14669ad5e2bd53085e833b084a5c18b5f4d4aae7b3930b97f303c03f015f457 26170072 salt-dbg_3007.0rc1_arm64.deb fd95ff052dcf5bcd0462aad85594c1b73f3707aa1a973c1174370c1e995822f4 99256 salt-master_3007.0rc1_arm64.deb f6ff18d1caf10c3e7f6847b3f765c89de9ccd1a945e9a058c7c2c84867450c48 86812 salt-minion_3007.0rc1_arm64.deb f971e9e207da7dc1d84570325bd1f8c668e23f9af1ce5f1f1f44a66b1f868ed2 73212 salt-ssh_3007.0rc1_arm64.deb 35bbe97d5e339ba3c1a9217b61567ee8bbe67fc8101bdd34b048e2af91f3b86f 71348 salt-syndic_3007.0rc1_arm64.deb 872ab69d8dc2affa7aa92b8850e510c4afe67336b4485c130e456ef00476f837 6880 salt_3007.0rc1_arm64.buildinfo Files: 11b7470dc2c9303cc35d1f91347fd165 1299 admin optional salt_3007.0rc1.dsc ff9bc2bc65e6dd81375f3eff2a35ae26 87675388 admin optional salt_3007.0rc1.tar.xz 02ef5202405b8d7d3e96819468b84ab1 70932 admin optional salt-api_3007.0rc1_arm64.deb b7abe53ede53a01af0e4ef1c96e0aba3 73700 admin optional salt-cloud_3007.0rc1_arm64.deb 6e01683b971121a3dcc7bec61d0233f2 41302820 admin optional salt-common_3007.0rc1_arm64.deb 98e71c21c16474bb211abfd2e9901bd3 26170072 debug extra salt-dbg_3007.0rc1_arm64.deb 38810a7c9d7ba6f324c901f7a1ffec1e 99256 admin optional salt-master_3007.0rc1_arm64.deb cceb5c35b3275a2e8bd906e49b2fa9b7 86812 admin optional salt-minion_3007.0rc1_arm64.deb 29618e28d5015a8472e3b354b99595ef 73212 admin optional salt-ssh_3007.0rc1_arm64.deb 19f9aac38c5cef4d85e64f5e72f65b08 71348 admin optional salt-syndic_3007.0rc1_arm64.deb 2ddb64e383588bf0e42f42ae4b691c9c 6880 admin optional salt_3007.0rc1_arm64.buildinfo