@@ -26,11 +26,12 @@ OS compatibility
26
26
This release is known to work with:
27
27
28
28
* CentOS 7.0 2009 x86_64
29
- * CentOS 8.4 2105 x86_64
29
+ * CentOS 8.5 2111 x86_64
30
+ * CentOS 8 Stream 20220423 x86_64
30
31
* OEL 7.9 x86_64
31
- * OEL 8.4 x86_64
32
+ * OEL 8.5 x86_64
32
33
* RHEL 7.9 x86_64
33
- * RHEL 8.4 x86_64
34
+ * RHEL 8.5 x86_64
34
35
35
36
36
37
Full support for EL8
@@ -213,19 +214,19 @@ Puppet RPMs
213
214
214
215
The following Puppet RPMs are packaged with the SIMP 6.6.0 ISOs:
215
216
216
- +-----------------------------+----------------------------- +
217
- | Package | Version |
218
- +=============================+============================= +
219
- | :package: `puppet-agent ` | FIXME 6.22 .1-1 or 7.12 .0-1 |
220
- +-----------------------------+----------------------------- +
221
- | :package: `puppet-bolt ` | FIXME 3.19.0 -1 or FIXME |
222
- +-----------------------------+----------------------------- +
223
- | :package: `puppetdb ` | FIXME 6.16.1 -1 or 7.7.0-1 |
224
- +-----------------------------+----------------------------- +
225
- | :package: `puppetdb-termini ` | FIXME 6.16.1 -1 or 7.7.0-1 |
226
- +-----------------------------+----------------------------- +
227
- | :package: `puppetserver ` | FIXME 6.15.3 -1 or 7.4.1 -1 |
228
- +-----------------------------+----------------------------- +
217
+ +-----------------------------+----------------------+
218
+ | Package | Version |
219
+ +=============================+======================+
220
+ | :package: `puppet-agent ` | 6.27 .1-1 or 7.16 .0-1 |
221
+ +-----------------------------+----------------------+
222
+ | :package: `puppet-bolt ` | 3.22.1 -1 |
223
+ +-----------------------------+----------------------+
224
+ | :package: `puppetdb ` | 6.21.0 -1 or 7.10.1-1 |
225
+ +-----------------------------+----------------------+
226
+ | :package: `puppetdb-termini ` | 6.21.0 -1 or 7.10.1-1 |
227
+ +-----------------------------+----------------------+
228
+ | :package: `puppetserver ` | 6.19.0 -1 or 7.7.0 -1 |
229
+ +-----------------------------+----------------------+
229
230
230
231
Removed Puppet Modules
231
232
----------------------
@@ -235,6 +236,17 @@ The following modules were removed from the release:
235
236
* :package: `simp_pki_service `
236
237
* :package: `simp_bolt `
237
238
239
+ Replaced Puppet Modules
240
+ -----------------------
241
+
242
+ +---------------------------+-------------------------+
243
+ | Original | Replacement |
244
+ +===========================+=========================+
245
+ | :pupmod: `aboe/chrony ` | :pupmod: `puppet/chrony ` |
246
+ +---------------------------+-------------------------+
247
+ | :pupmod: `camptocamp/kmod ` | :pupmod: `puppet/kmod ` |
248
+ +---------------------------+-------------------------+
249
+
238
250
.. _changelog-6.6.0-fixed-bugs :
239
251
240
252
Fixed Bugs
@@ -355,8 +367,12 @@ pupmod-simp-pupmod
355
367
356
368
* Changed all instances of setting items in the :code: `master ` section to use
357
369
:code: `server ` instead
370
+ * Updated :code: `pupmod::conf ` to automcatically switch :code: `master ` to :code: `server `
371
+ * Automatically remove items from the puppet config in the :code: `master ` section that are set in
372
+ the :code: `server ` section
358
373
* Added :code: `pupmod::master::sysconfig::use_code_cache_flushing ` to reduce
359
374
excessive memory usage
375
+ * Removed SHA1 ciphers from the server cipher list
360
376
* Disconnected the puppetserver from the system FIPS libraries since it causes
361
377
conflicts with the vendor provided settings
362
378
* Allow :code: `pupmod::puppet_server ` to accept Arrays
@@ -414,6 +430,8 @@ pupmod-simp-selinux
414
430
pupmod-simp-simp
415
431
^^^^^^^^^^^^^^^^
416
432
433
+ * Updated :code: `simp::yum::repo::local_os_updates ` to use the gpg keys installed into :file: `<yum
434
+ directory>/SIMP/GPGKEYS ` to work around changes in EL8
417
435
* Corrected the :code: `HeapDumpOnOutOfMemoryError ` setting for :program: `puppetdb `
418
436
* Ensure that :program: `nsswitch ` :program: `SSSD ` options for :file: `sudoers ` do
419
437
not stop on files
@@ -448,6 +466,11 @@ pupmod-simp-simp_gitlab
448
466
* Fixed a bug where the :program: `change_gitlab_root_password ` script did not
449
467
work with GitLab after 13.6.0
450
468
469
+ pupmod-simp-simp_grub
470
+ ^^^^^^^^^^^^^^^^^^^^^
471
+
472
+ * Updated the documentation to better reflect GRUB2
473
+
451
474
pupmod-simp-simp_nfs
452
475
^^^^^^^^^^^^^^^^^^^^
453
476
@@ -469,6 +492,7 @@ pupmod-simp-simp_openldap
469
492
pupmod-simp-simplib
470
493
^^^^^^^^^^^^^^^^^^^
471
494
495
+ * Fixed the call to `klist ` to properly handle cache issues
472
496
* Increased randomization in :code: `simplib::gen_random_password `
473
497
* :code: `simplib::cron::hour_entry ` now supports comma separated lists
474
498
* :code: `simplib::cron::minute_entry ` now supports comma separated lists
@@ -495,6 +519,8 @@ pupmod-simp-ssh
495
519
pupmod-simp-sssd
496
520
^^^^^^^^^^^^^^^^
497
521
522
+ * Added an option to :code: `sssd::install ` to prevent installation of the :program: `sssd ` client to
523
+ increase compatibility with other operating systems
498
524
* Fixed multiple compatibility issues with non-OpenLDAP LDAP servers
499
525
* No longer use :code: `concat ` but instead drop configuration items into the
500
526
:file: `/etc/sssd/conf.d ` directory
@@ -523,6 +549,7 @@ pupmod-simp-swap
523
549
pupmod-simp-tlog
524
550
^^^^^^^^^^^^^^^^
525
551
552
+ * Add a :code: `file ` resource if the file writer is specified
526
553
* Corrected the login in :file: `tlog.sh.epp ` in the case where a user does not
527
554
have a login shell
528
555
@@ -555,6 +582,8 @@ simp-gpgkeys
555
582
^^^^^^^^^^^^
556
583
557
584
* Fixed the target location for copying the GPG keys into the YUM repository
585
+ * Removed EL6 keys
586
+ * Updated the Red Hat release key
558
587
559
588
simp-rsync
560
589
^^^^^^^^^^
@@ -606,6 +635,11 @@ pupmod-simp-ds389
606
635
607
636
* New module for managing 389 DS
608
637
638
+ pupmod-simp-simp_firewalld
639
+ ^^^^^^^^^^^^^^^^^^^^^^^^^^
640
+
641
+ * Added the :pupmod: `simp/simp_firewalld ` module and set it to the default on EL8+
642
+
609
643
pupmod-simp-gnome
610
644
^^^^^^^^^^^^^^^^^
611
645
@@ -622,6 +656,8 @@ pupmod-simp-logrotate
622
656
pupmod-simp-pam
623
657
^^^^^^^^^^^^^^^
624
658
659
+ * Added `dictcheck ` and `faillock_log_file ` parameter support
660
+ * Added Amazon Linux 2 support
625
661
* Added a :program: `pre ` section for setting auth file content to work with
626
662
third party plugins
627
663
* Added the ability to set extra content in the :program: `su ` configuration
@@ -663,6 +699,7 @@ numerous changes!
663
699
pupmod-simp-simp
664
700
^^^^^^^^^^^^^^^^
665
701
702
+ * Added EL8 support
666
703
* Added :code: `simp::puppetdb::disable_update_checking ` to disable default
667
704
analytics in accordance with NIST guidance
668
705
* :program: `puppetdb ` now sets :code: `UseCodeCacheFlushing ` by default
@@ -709,6 +746,12 @@ pupmod-simp-simplib
709
746
* Added :program: `net.ipv6.conf.all.disable_ipv6 ` to the :program: `simplib_sysctl ` fact
710
747
* Added a :program: `simplib__cryhpto_policy_state ` fact
711
748
749
+ pupmod-simp-ssh
750
+ ^^^^^^^^^^^^^^^
751
+
752
+ * Added an option to turn off managing the :code: `AuthorizedKeysFile ` parameter in
753
+ :file: `/etc/ssh/sshd_config `
754
+
712
755
pupmod-simp-sssd
713
756
^^^^^^^^^^^^^^^^
714
757
@@ -719,6 +762,11 @@ pupmod-simp-sssd
719
762
* Users can optionally purge the :file: `/etc/sssd/conf.d ` directory if they want
720
763
puppet to be authoritative
721
764
765
+ pupmod-simp-sudo
766
+ ^^^^^^^^^^^^^^^^
767
+
768
+ * Added the ability for users to create :code: `include ` clauses in :file: `/etc/sudoers `
769
+
722
770
pupmod-simp-tpm2
723
771
^^^^^^^^^^^^^^^^
724
772
@@ -759,7 +807,7 @@ Known Bugs and Limitations
759
807
Below are bugs and limitations known to affect this release. If you discover
760
808
additional problems, please `submit an issue `_ to let use know.
761
809
762
- * SSSD does not always start the ds389 LDAP server immediately after kickstarting
810
+ * :program: ` sssd ` does not always start the :program: ` ds389 ` LDAP server immediately after kickstarting
763
811
an EL8 system. An additional puppet run clears the problem. The error in the log is
764
812
765
813
sssd.dataprovider.getDomains: Error [1432158215]: DP target is not configured
0 commit comments