head 1.84; access; symbols pkgsrc-2023Q4:1.82.0.4 pkgsrc-2023Q4-base:1.82 pkgsrc-2023Q3:1.82.0.2 pkgsrc-2023Q3-base:1.82 pkgsrc-2023Q2:1.81.0.6 pkgsrc-2023Q2-base:1.81 pkgsrc-2023Q1:1.81.0.4 pkgsrc-2023Q1-base:1.81 pkgsrc-2022Q4:1.81.0.2 pkgsrc-2022Q4-base:1.81 pkgsrc-2022Q3:1.79.0.2 pkgsrc-2022Q3-base:1.79 pkgsrc-2022Q2:1.78.0.2 pkgsrc-2022Q2-base:1.78 pkgsrc-2022Q1:1.77.0.2 pkgsrc-2022Q1-base:1.77 pkgsrc-2021Q4:1.74.0.2 pkgsrc-2021Q4-base:1.74 pkgsrc-2021Q3:1.73.0.10 pkgsrc-2021Q3-base:1.73 pkgsrc-2021Q2:1.73.0.8 pkgsrc-2021Q2-base:1.73 pkgsrc-2021Q1:1.73.0.6 pkgsrc-2021Q1-base:1.73 pkgsrc-2020Q4:1.73.0.4 pkgsrc-2020Q4-base:1.73 pkgsrc-2020Q3:1.73.0.2 pkgsrc-2020Q3-base:1.73 pkgsrc-2020Q2:1.72.0.2 pkgsrc-2020Q2-base:1.72 pkgsrc-2020Q1:1.71.0.2 pkgsrc-2020Q1-base:1.71 pkgsrc-2019Q4:1.71.0.4 pkgsrc-2019Q4-base:1.71 pkgsrc-2019Q3:1.70.0.2 pkgsrc-2019Q3-base:1.70 pkgsrc-2019Q2:1.69.0.2 pkgsrc-2019Q2-base:1.69 pkgsrc-2019Q1:1.68.0.2 pkgsrc-2019Q1-base:1.68 pkgsrc-2018Q4:1.67.0.2 pkgsrc-2018Q4-base:1.67 pkgsrc-2018Q3:1.65.0.2 pkgsrc-2018Q3-base:1.65 pkgsrc-2018Q2:1.64.0.2 pkgsrc-2018Q2-base:1.64 pkgsrc-2018Q1:1.58.0.2 pkgsrc-2018Q1-base:1.58 pkgsrc-2017Q4:1.55.0.2 pkgsrc-2017Q4-base:1.55 pkgsrc-2017Q3:1.54.0.4 pkgsrc-2017Q3-base:1.54 pkgsrc-2017Q2:1.51.0.2 pkgsrc-2017Q2-base:1.51 pkgsrc-2017Q1:1.48.0.2 pkgsrc-2017Q1-base:1.48 pkgsrc-2016Q4:1.43.0.4 pkgsrc-2016Q4-base:1.43 pkgsrc-2016Q3:1.43.0.2 pkgsrc-2016Q3-base:1.43 pkgsrc-2016Q2:1.39.0.2 pkgsrc-2016Q2-base:1.39 pkgsrc-2016Q1:1.38.0.2 pkgsrc-2016Q1-base:1.38 pkgsrc-2015Q4:1.33.0.2 pkgsrc-2015Q4-base:1.33 pkgsrc-2015Q3:1.27.0.2 pkgsrc-2015Q3-base:1.27 pkgsrc-2015Q2:1.26.0.4 pkgsrc-2015Q2-base:1.26 pkgsrc-2015Q1:1.26.0.2 pkgsrc-2015Q1-base:1.26 pkgsrc-2014Q4:1.25.0.2 pkgsrc-2014Q4-base:1.25 pkgsrc-2014Q3:1.24.0.2 pkgsrc-2014Q3-base:1.24 pkgsrc-2014Q2:1.23.0.2 pkgsrc-2014Q2-base:1.23 pkgsrc-2014Q1:1.18.0.2 pkgsrc-2014Q1-base:1.18 pkgsrc-2013Q4:1.15.0.4 pkgsrc-2013Q4-base:1.15 pkgsrc-2013Q3:1.15.0.2 pkgsrc-2013Q3-base:1.15 pkgsrc-2013Q2:1.14.0.2 pkgsrc-2013Q2-base:1.14 pkgsrc-2013Q1:1.10.0.4 pkgsrc-2013Q1-base:1.10 pkgsrc-2012Q4:1.10.0.2 pkgsrc-2012Q4-base:1.10 pkgsrc-2012Q3:1.6.0.6 pkgsrc-2012Q3-base:1.6 pkgsrc-2012Q2:1.6.0.4 pkgsrc-2012Q2-base:1.6 pkgsrc-2012Q1:1.6.0.2 pkgsrc-2012Q1-base:1.6; locks; strict; comment @# @; 1.84 date 2024.02.02.20.17.24; author adam; state Exp; branches; next 1.83; commitid JYGOiZb0HgLEJTWE; 1.83 date 2024.01.22.16.35.25; author adam; state Exp; branches; next 1.82; commitid uoUJxndw96qtRsVE; 1.82 date 2023.08.14.05.25.18; author wiz; state Exp; branches; next 1.81; commitid LOSB79OLVxvXjIAE; 1.81 date 2022.10.31.17.32.46; author adam; state Exp; branches; next 1.80; commitid Db7ikJdgFDc2ATZD; 1.80 date 2022.09.30.10.02.12; author sborrill; state Exp; branches; next 1.79; commitid ZSzqhrlKTb3j5SVD; 1.79 date 2022.06.30.11.18.51; author nia; state Exp; branches; next 1.78; commitid AhctUV91Vubws3KD; 1.78 date 2022.04.25.16.34.39; author jperkin; state Exp; branches; next 1.77; commitid PI038Bk14CHOkBBD; 1.77 date 2022.01.05.15.41.23; author wiz; state Exp; branches; next 1.76; commitid FQ77UruBIUsgzsnD; 1.76 date 2022.01.04.20.54.50; author wiz; state Exp; branches; next 1.75; commitid CYyhdK9qtoffkmnD; 1.75 date 2021.12.30.12.08.50; author adam; state Exp; branches; next 1.74; commitid qSlwkAbrb9VRAFmD; 1.74 date 2021.11.14.20.01.17; author adam; state Exp; branches; next 1.73; commitid NsMYGbmAx9QyGNgD; 1.73 date 2020.08.18.05.26.08; author tnn; state Exp; branches; next 1.72; commitid RJgEqlGm9fi6pvkC; 1.72 date 2020.05.16.17.45.49; author rillig; state Exp; branches; next 1.71; commitid o6h5tJfc76DUvu8C; 1.71 date 2019.11.13.14.47.59; author adam; state Exp; branches; next 1.70; commitid MTr5CLuelek7tHKB; 1.70 date 2019.07.08.18.54.22; author jperkin; state Exp; branches; next 1.69; commitid WqJXoDG3PCbmXguB; 1.69 date 2019.04.25.07.33.21; author maya; state Exp; branches; next 1.68; commitid 1FEMQBEPb9uTxHkB; 1.68 date 2019.02.28.10.21.21; author adam; state Exp; branches; next 1.67; commitid 5rnQ5e4OhfvWhwdB; 1.67 date 2018.10.25.09.08.37; author adam; state Exp; branches; next 1.66; commitid EeBvyxAJ85hqWjXA; 1.66 date 2018.10.23.13.42.43; author jperkin; state Exp; branches; next 1.65; commitid zmXNZtwrppwMw5XA; 1.65 date 2018.08.06.05.01.26; author tpaul; state Exp; branches; next 1.64; commitid eKBYg7viPZh991NA; 1.64 date 2018.06.20.15.00.15; author tpaul; state Exp; branches; next 1.63; commitid iArYjiag1dNmY1HA; 1.63 date 2018.06.20.11.50.56; author tpaul; state Exp; branches; next 1.62; commitid IxN6R4ydADgvV0HA; 1.62 date 2018.06.16.15.23.35; author adam; state Exp; branches; next 1.61; commitid W7cBxhly2gboewGA; 1.61 date 2018.06.16.14.17.21; author bsiegert; state Exp; branches; next 1.60; commitid ipyYEyNG0zLsRvGA; 1.60 date 2018.05.12.11.29.35; author maya; state Exp; branches; next 1.59; commitid 0aQP8IO5S97y30CA; 1.59 date 2018.04.13.07.58.22; author adam; state Exp; branches; next 1.58; commitid cSJiFgqBq3nHOfyA; 1.58 date 2018.02.28.13.37.23; author adam; state Exp; branches; next 1.57; commitid vKWDFhi5KlHX6DsA; 1.57 date 2018.02.07.11.11.23; author adam; state Exp; branches; next 1.56; commitid mVMa459pmEaSYUpA; 1.56 date 2018.01.21.13.28.07; author bsiegert; state Exp; branches; next 1.55; commitid feTzGaKHTzZnhKnA; 1.55 date 2017.10.11.09.40.28; author sborrill; state Exp; branches; next 1.54; commitid gX6UNKf8kYEmiCaA; 1.54 date 2017.08.21.10.28.29; author sborrill; state Exp; branches 1.54.4.1; next 1.53; commitid jJcEYh0pFenSc44A; 1.53 date 2017.08.01.12.09.57; author sborrill; state Exp; branches; next 1.52; commitid PXps4LdmujOXnv1A; 1.52 date 2017.07.05.11.02.16; author sborrill; state Exp; branches; next 1.51; commitid 1rYvoFbx03ldU1Yz; 1.51 date 2017.05.20.11.30.27; author adam; state Exp; branches; next 1.50; commitid 0Sys7YcBhY9yx7Sz; 1.50 date 2017.05.05.15.24.59; author jperkin; state Exp; branches; next 1.49; commitid hcLzfiXxwfkTjdQz; 1.49 date 2017.05.03.08.24.57; author sborrill; state Exp; branches; next 1.48; commitid ZL4i2JdynkGE3VPz; 1.48 date 2017.03.03.09.29.48; author sborrill; state Exp; branches; next 1.47; commitid RD6DbAbHcgz5n5Iz; 1.47 date 2017.02.09.15.01.20; author sborrill; state Exp; branches; next 1.46; commitid ZZM4n8t3olpfVhFz; 1.46 date 2017.02.06.12.48.18; author sborrill; state Exp; branches; next 1.45; commitid fPVLnZIQDEwAhTEz; 1.45 date 2017.02.03.13.39.00; author sborrill; state Exp; branches; next 1.44; commitid ehdkg1VAZb0FEvEz; 1.44 date 2017.01.01.14.43.58; author wiz; state Exp; branches; next 1.43; commitid TmfhF2MIYbgU4hAz; 1.43 date 2016.09.26.07.06.11; author jperkin; state Exp; branches; next 1.42; commitid pMwTGiejnjQkFLnz; 1.42 date 2016.09.19.13.34.37; author jperkin; state Exp; branches; next 1.41; commitid J7e9CEAFQJEb2Umz; 1.41 date 2016.07.21.17.05.39; author jperkin; state Exp; branches; next 1.40; commitid w9RA7a3PrMSx7dfz; 1.40 date 2016.07.09.13.04.07; author wiz; state Exp; branches; next 1.39; commitid k9A2yv7vTRunbEdz; 1.39 date 2016.04.21.11.36.03; author jperkin; state Exp; branches; next 1.38; commitid nE1xlFYByCANeu3z; 1.38 date 2016.02.16.01.52.34; author khorben; state Exp; branches; next 1.37; commitid i7J3c1iLGf1D55Vy; 1.37 date 2016.02.16.00.00.08; author khorben; state Exp; branches; next 1.36; commitid Ui6owUIiag2rt4Vy; 1.36 date 2016.02.09.14.23.04; author wiz; state Exp; branches; next 1.35; commitid zrsv84stAOcxtfUy; 1.35 date 2016.02.07.23.55.01; author sevan; state Exp; branches; next 1.34; commitid 0MkbcTmVw9QrF2Uy; 1.34 date 2016.02.04.22.05.36; author khorben; state Exp; branches; next 1.33; commitid rmkutaFkMHMacETy; 1.33 date 2015.12.11.00.27.06; author wiz; state Exp; branches 1.33.2.1; next 1.32; commitid xWCW0gGa69ZdMsMy; 1.32 date 2015.12.07.21.51.53; author wiz; state Exp; branches; next 1.31; commitid 7WHBxPWRbJg514My; 1.31 date 2015.12.05.21.25.59; author adam; state Exp; branches; next 1.30; commitid bgA0CynThkP3WNLy; 1.30 date 2015.12.04.09.13.33; author sborrill; state Exp; branches; next 1.29; commitid c3zsGy36QHEPUBLy; 1.29 date 2015.11.10.14.48.39; author sborrill; state Exp; branches; next 1.28; commitid l9uBEAdp01YSvyIy; 1.28 date 2015.10.14.15.46.34; author jperkin; state Exp; branches; next 1.27; commitid GEV9PLrsi5u2J5Fy; 1.27 date 2015.07.24.10.24.27; author jperkin; state Exp; branches; next 1.26; commitid lDvoxkDcIQOaAwuy; 1.26 date 2015.02.23.13.58.13; author imil; state Exp; branches; next 1.25; commitid rK2n3vl362UqC8by; 1.25 date 2014.11.05.16.52.00; author imil; state Exp; branches; next 1.24; commitid CyBYT8yvuzH771Xx; 1.24 date 2014.08.14.15.23.53; author imil; state Exp; branches; next 1.23; commitid E06E9dWBSS7lilMx; 1.23 date 2014.05.09.07.37.20; author wiz; state Exp; branches; next 1.22; commitid wfzXpL2biguCPPzx; 1.22 date 2014.05.06.10.57.48; author imil; state Exp; branches; next 1.21; commitid uZwQsEtIbSHk2tzx; 1.21 date 2014.04.18.11.25.06; author imil; state Exp; branches; next 1.20; commitid QLyG8lHAXRuGL9xx; 1.20 date 2014.04.17.16.33.47; author imil; state Exp; branches; next 1.19; commitid DF3RGdSMzpFmv3xx; 1.19 date 2014.04.17.11.24.11; author imil; state Exp; branches; next 1.18; commitid DWCV4bv5xi6jN1xx; 1.18 date 2014.03.30.12.31.17; author imil; state Exp; branches; next 1.17; commitid DMkcm91KAWXFJIux; 1.17 date 2014.01.27.18.41.15; author wiz; state Exp; branches; next 1.16; commitid GCXbE7QnKmwRMMmx; 1.16 date 2014.01.25.10.30.22; author wiz; state Exp; branches; next 1.15; commitid VOWgk3vYhVXj8umx; 1.15 date 2013.08.17.18.30.02; author imil; state Exp; branches; next 1.14; commitid QAAY2vzlAGMCXP1x; 1.14 date 2013.06.15.15.04.39; author imil; state Exp; branches; next 1.13; commitid uk8rjDy1RwQUQITw; 1.13 date 2013.05.11.18.26.19; author imil; state Exp; branches; next 1.12; commitid KIrNTXGeaFQX4fPw; 1.12 date 2013.05.05.12.26.23; author imil; state Exp; branches; next 1.11; 1.11 date 2013.04.28.09.46.24; author imil; state Exp; branches; next 1.10; 1.10 date 2012.12.06.08.01.21; author apb; state Exp; branches; next 1.9; 1.9 date 2012.10.23.19.51.22; author asau; state Exp; branches; next 1.8; 1.8 date 2012.10.05.09.37.53; author wiz; state Exp; branches; next 1.7; 1.7 date 2012.10.05.09.35.52; author apb; state Exp; branches; next 1.6; 1.6 date 2012.03.16.04.31.16; author obache; state Exp; branches; next 1.5; 1.5 date 2012.03.15.11.53.39; author obache; state Exp; branches; next 1.4; 1.4 date 2012.02.12.13.43.21; author obache; state Exp; branches; next 1.3; 1.3 date 2012.02.12.13.40.44; author obache; state Exp; branches; next 1.2; 1.2 date 2012.02.12.13.28.03; author wiz; state Exp; branches; next 1.1; 1.1 date 2012.01.21.20.26.58; author apb; state Exp; branches; next ; 1.54.4.1 date 2017.10.15.11.11.02; author spz; state Exp; branches; next ; commitid UwckHeepAlY6G8bA; 1.33.2.1 date 2016.02.20.21.24.10; author spz; state Exp; branches; next ; commitid 7ZsHC459yulbsHVy; desc @@ 1.84 log @salt: updated to 3006.6 SALT 3006.6 RELEASE NOTES CHANGED Salt no longer time bombs user installations on code using salt.utils.versions.warn_until_date FIXED Fix un-closed transport in tornado netapi SECURITY CVE-2024-22231 Prevent directory traversal when creating syndic cache directory on the master CVE-2024-22232 Prevent directory traversal attacks in the master's serve_file method. These vulerablities were discovered and reported by: Yudi Zhao(Huawei Nebula Security Lab),Chenwei Jiang(Huawei Nebula Security Lab) Update some requirements which had some security issues: Bump to pycryptodome==3.19.1 and pycryptodomex==3.19.1 due to https://github.com/advisories/GHSA-j225-cvw7-qrx7 Bump to gitpython==3.1.41 due to https://github.com/advisories/GHSA-2mqj-m65w-jghx Bump to jinja2==3.1.3 due to https://github.com/advisories/GHSA-h5c8-rqwp-cp95 @ text @# $NetBSD: Makefile,v 1.83 2024/01/22 16:35:25 adam Exp $ .include "Makefile.common" COMMENT= Remote execution and configuration management system DEPENDS+= ${PYPKGPREFIX}-cryptodome>=3.9.8:../../security/py-cryptodome DEPENDS+= ${PYPKGPREFIX}-distro>=1.0.1:../../devel/py-distro DEPENDS+= ${PYPKGPREFIX}-jinja2-[0-9]*:../../textproc/py-jinja2 DEPENDS+= ${PYPKGPREFIX}-jmespath-[0-9]*:../../textproc/py-jmespath DEPENDS+= ${PYPKGPREFIX}-looseversion-[0-9]*:../../devel/py-looseversion DEPENDS+= ${PYPKGPREFIX}-markupsafe-[0-9]*:../../textproc/py-markupsafe DEPENDS+= ${PYPKGPREFIX}-msgpack>=0.5.6:../../devel/py-msgpack DEPENDS+= ${PYPKGPREFIX}-packaging>=21.3:../../devel/py-packaging DEPENDS+= ${PYPKGPREFIX}-psutil>=5.0.0:../../sysutils/py-psutil DEPENDS+= ${PYPKGPREFIX}-requests>=2.5.0:../../devel/py-requests DEPENDS+= ${PYPKGPREFIX}-yaml-[0-9]*:../../textproc/py-yaml DEPENDS+= ${PYPKGPREFIX}-zmq>=20.0.0:../../net/py-zmq USE_PKG_RESOURCES= yes PYTHON_VERSIONS_INCOMPATIBLE= 27 BUILD_DEFS+= VARBASE PYSETUPARGS+= --salt-base-file-roots-dir=${VARBASE}/salt/file-roots PYSETUPARGS+= --salt-base-pillar-roots-dir=${VARBASE}/salt/pillar-roots PYSETUPARGS+= --salt-base-master-roots-dir=${VARBASE}/salt/master-roots PYSETUPARGS+= --salt-cache-dir=${VARBASE}/cache/salt PYSETUPARGS+= --salt-config-dir=${PKG_SYSCONFDIR} PYSETUPARGS+= --salt-logs-dir=${VARBASE}/log/salt PYSETUPARGS+= --salt-pidfile-dir=${VARBASE}/run PYSETUPARGS+= --salt-sock-dir=${VARBASE}/run/salt REPLACE_SH= salt/templates/git/ssh-id-wrapper RCD_SCRIPTS+= salt_master salt_minion salt_syndic SMF_INSTANCES= api master minion FILES_SUBST+= PYTHON=${PYTHONBIN:Q} PKG_SYSCONFSUBDIR= salt EGDIR= ${PREFIX}/share/examples/salt INSTALLATION_DIRS+= ${EGDIR} CONF_FILES+= ${EGDIR}/master ${PKG_SYSCONFDIR}/master CONF_FILES+= ${EGDIR}/minion ${PKG_SYSCONFDIR}/minion OWN_DIRS+= ${VARBASE}/salt/file-roots OWN_DIRS+= ${VARBASE}/salt/pillar-roots OWN_DIRS+= ${VARBASE}/salt/master-roots OWN_DIRS+= ${VARBASE}/cache/salt ${VARBASE}/run/salt OWN_DIRS+= ${VARBASE}/log/salt SUBST_CLASSES+= fix-path SUBST_STAGE.fix-path= pre-configure SUBST_MESSAGE.fix-path= Fixing hardcoded paths SUBST_FILES.fix-path= conf/* SUBST_FILES.fix-path+= doc/man/* salt/modules/munin.py setup.py SUBST_FILES.fix-path+= salt/utils/rsax931.py salt/grains/core.py SUBST_SED.fix-path= -e 's,/etc/salt,${PKG_SYSCONFDIR},g' SUBST_SED.fix-path+= -e 's,/srv/salt,${VARBASE}/salt/file-roots,g' SUBST_SED.fix-path+= -e 's,/srv/pillar,${VARBASE}/salt/pillar-roots,g' SUBST_SED.fix-path+= -e 's,/etc/munin,${PKG_SYSCONFBASEDIR}/munin,g' SUBST_SED.fix-path+= -e 's,share/man,${PKGMANDIR},g' SUBST_SED.fix-path+= -e 's,/opt/local/lib,${PREFIX}/lib,g' SUBST_SED.fix-path+= -e 's,/opt/local/etc,${PKG_SYSCONFBASEDIR},g' SUBST_SED.fix-path+= -e 's,/var/run,${VARBASE}/run,g' SUBST_SED.fix-path+= -e 's,/var/cache,${VARBASE}/cache,g' SUBST_SED.fix-path+= -e 's,/var/log,${VARBASE}/log,g' SUBST_NOOP_OK.fix-path= yes # Contains hardcoded paths to find installed libraries. CHECK_WRKREF_SKIP+= */salt/utils/rsax931.py CHECK_WRKREF_SKIP+= */smartos.* CHECK_PORTABILITY_SKIP+= pkg/*/* pkg/*/*/* post-install: ${INSTALL_DATA} ${WRKSRC}/conf/master ${DESTDIR}${EGDIR}/ ${INSTALL_DATA} ${WRKSRC}/conf/minion ${DESTDIR}${EGDIR}/ .include "../../lang/python/egg.mk" .include "../../mk/bsd.pkg.mk" @ 1.83 log @salt salt-docs: updated to 3006.5 SALT 3006.5 REMOVED Tech Debt - support for pysss removed due to functionality addition in Python 3.3 FIXED Improved error message when state arguments are accidentally passed as a string Allow pip.install to create a log file that is passed in if the parent directory is writeable Fixed merging of complex pillar overrides with salt-ssh states Fixed gpg pillar rendering with salt-ssh Made salt-ssh states not re-render pillars unnecessarily Made Salt maintain options in Debian package repo definitions Migrated all invoke tasks to python-tools-scripts. tasks/docs.py -> tools/precommit/docs.py tasks/docstrings.py -> tools/precommit/docstrings.py tasks/loader.py -> tools/precommit/loader.py tasks/filemap.py -> tools/precommit/filemap.py Fix salt user login shell path in Debian packages Fill out lsb_distrib_xxxx (best estimate) grains if problems with retrieving lsb_release data Fixed an issue in the file.directory state where the children_only keyword argument was not being respected. Move salt.ufw to correct location /etc/ufw/applications.d/ Fixed salt-ssh stacktrace when retcode is not an integer Fixed SSH shell seldomly fails to report any exit code Fixed some issues in x509_v2 execution module private key functions Fixed grp.getgrall() in utils/user.py causing performance issues Fix user.list_groups omits remote groups via sssd, etc. Ensure sync from _grains occurs before attempting pillar compilation in case custom grain used in pillar file Moved gitfs locks to salt working dir to avoid lock wipes Only attempt to create a keys directory when --gen-keys is passed to the salt-key CLI Fix nonce verification, request server replies do not stomp on eachother. speed up yumpkg list_pkgs by not requiring digest or signature verification on lookup. Fix pkg.latest failing on windows for winrepo packages where the package is already up to date Ensure kwarg is preserved when checking for kwargs. This change affects proxy minions when used with Deltaproxy, which had kwargs popped when targeting multiple minions id. Fixes traceback when state id is an int in a reactor SLS file. Install logrotate config as /etc/logrotate.d/salt-common for Debian packages Remove broken /etc/logrotate.d/salt directory from 3006.3 if it exists. Use sha256 as the default hash_type. It has been the default since Salt v2016.9 Preserve ownership on log rotation Ensure that the correct value of jid_inclue is passed if the argument is included in the passed keyword arguments. Uprade relenv to 0.14.2 Update openssl to address CVE-2023-5363. Fix bug in openssl setup when openssl binary can't be found. Add M1 mac support. Fix regex for filespec adding/deleting fcontext policy in selinux Ensure CLI options take priority over Saltfile options Test mode for state function saltmod.wheel no longer set's result to (None,) Client only process events which tag conforms to an event return. Fixes an issue setting user or machine policy on Windows when the Group Policy directory is missing Fix regression in file module which was not re-using a file client. pip.installed state will now properly fail when a specified user does not exists Publish channel connect callback method properly closes it's request channel. Ensured the pillar in SSH wrapper modules is the same as the one used in template rendering when overrides are passed Fix file.comment ignore_missing not working with multiline char Warn when an un-closed transport client is being garbage collected. Only generate the HMAC's for libssl.so.1.1 and libcrypto.so.1.1 if those files exist. Fixed an issue where Salt Cloud would fail if it could not delete lingering PAexec binaries ADDED Added Salt support for Debian 12 Added Salt support for Amazon Linux 2023 SECURITY Bump to cryptography==41.0.4 due to https://github.com/advisories/GHSA-v8gr-m533-ghj9 Bump to cryptography==41.0.7 due to https://github.com/advisories/GHSA-jfhm-5ghh-2f97 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.82 2023/08/14 05:25:18 wiz Exp $ d18 1 a18 1 DEPENDS+= ${PYPKGPREFIX}-zmq>=19.0.2:../../net/py-zmq d22 1 a22 1 PYTHON_VERSIONS_INCOMPATIBLE= 27 312 @ 1.82 log @*: recursive bump for Python 3.11 as new default @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.81 2022/10/31 17:32:46 adam Exp $ a2 1 PKGREVISION= 1 d11 1 d14 1 d22 2 @ 1.81 log @salt salt-docs: updated to 3005.1 3005.1 FIXED Fix arch parsing issue in apt source files Fixed parsing CDROM apt sources Use str() method instead of repo_line for when python3-apt is installed or not in aptpkg.py. Remove the connection_timeout from netmiko_connection_args before netmiko_connection_args is added to __context__["netmiko_device"]["args"] which is passed along to the Netmiko library. fixes #62553 by checking for disabled master_type before starting master connection and skipping it if set. Fix runas with cmd module when using the onedir bundled packages Fix the Pyinstaller hooks to preserve the environment if None is passed. pkgrepo.managed sets wrong permissions on keys installed to /etc/apt/keyring pkgrepo.managed creates zero byte gpg files when dearmoring contents to the same filename Ensure default values for IPC Buffers are correct type Fix a hang on salt-ssh when using sudo. Renderers now have access to the correct set of salt functions. Fix including Jinja template from absolute path include jmespath in package requirements Fix pkgrepo.managed signed-by in test=true mode Ensure the status of the service is captured when the beacon function is called, even when the event is not being emitted. The sub proxies controlled by Deltaproxy need to have their own req_channel otherwise there are timeout exceptions when the __master_req_channel_payload is fired and reacted on. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.80 2022/09/30 10:02:12 sborrill Exp $ d3 1 @ 1.80 log @salt: update HOMEPAGE @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.79 2022/06/30 11:18:51 nia Exp $ d3 1 a3 4 DISTNAME= salt-3004 PKGREVISION= 3 CATEGORIES= sysutils MASTER_SITES= ${MASTER_SITE_PYPI:=s/salt/} a4 2 MAINTAINER= pkgsrc-users@@NetBSD.org HOMEPAGE= https://saltproject.io/ a5 1 LICENSE= apache-2.0 d10 1 a17 2 PYTHON_VERSIONS_INCOMPATIBLE= 27 @ 1.79 log @*: Revbump packages that use Python at runtime without a PKGNAME prefix @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.78 2022/04/25 16:34:39 jperkin Exp $ d9 1 a9 1 HOMEPAGE= http://saltstack.org/ @ 1.78 log @salt: Skip more files with legitimate hardcoded paths. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.77 2022/01/05 15:41:23 wiz Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.77 log @python: egg.mk: add USE_PKG_RESOURCES flag This flag should be set for packages that import pkg_resources and thus need setuptools after the build step. Set this flag for packages that need it and bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.76 2022/01/04 20:54:50 wiz Exp $ d77 1 @ 1.76 log @*: bump PKGREVISION for egg.mk users They now have a tool dependency on py-setuptools instead of a DEPENDS @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.75 2021/12/30 12:08:50 adam Exp $ d4 1 a4 1 PKGREVISION= 1 d25 2 @ 1.75 log @py-contextvars: removed; was Python 3.6 only @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.74 2021/11/14 20:01:17 adam Exp $ d4 1 @ 1.74 log @salt salt-docs: updated to 3004 SALT 3004 RELEASE NOTES - CODENAME SILICON NEW FEATURES TRANSACTIONAL SYSTEM SUPPORT (MICROOS) A transactional system, like MicroOS, can present some challenges when the user decided to manage it via Salt. MicroOS provide a read-only rootfs and a tool, transactional-update, that takes care of the management of the system (updating, upgrading, installation or reboot, among others) in an atomic way. Atomicity is the main feature of MicroOS, and to guarantee this property, this model leverages snapper, zypper, btrfs and overlayfs to create snapshots that will be updated independently of the currently running system, and that are activated after the reboot. This implies, for example, that some changes made on the system are not visible until the next reboot, as those changes are living in a different snapshot of the file system. Salt 3004 (Silicon) support this type of system via two new modules (transactional_update and rebootmgr) and a new executor (transactional_update). The new modules will provide all the low level API for interacting with transactional systems, like defining a mantenance window where the system is free to reboot and activate the new state, or install new software in a new transaction. It will also provide hight level of abstractions that will allows us to execute Salt module functions or applying states inside new transactions. The execution module will help us to treat the transactional system transparently (like the traditional ones), using a mechanism that will delegate some Salt modules execution into the new transactional_update module. REMOVED Removed the deprecated glance state and execution module in favor of the glance_image state module and the glanceng execution module. Removed support for Ubuntu 16.04 Removed the deprecated support for gid_from_name from the user state module Removed deprecated virt.migrate_non_shared, virt.migrate_non_shared_inc, ssh from virt.migrate, and python2/python3 args from salt.utils.thin.gen_min and .gen_thin DEPRECATED The _ext_nodes alias to the master_tops function was added back in 3004 to maintain backwards compatibility with older supported versions. This alias will now be removed in 3006. This change will break Master and Minion communication compatibility with Salt minions running versions 3003 and lower. utils/boto3_elasticsearch is no longer needed Changed "manufacture" grain to "manufacturer" for Solaris on SPARC to unify the name across all platforms. The old "manufacture" grain is now deprecated and will be removed in Sulfur Deprecate salt.payload.Serial CHANGED Changed nginx.version to return version without nginx/ prefix. Updated Slack webhook returner to support event returns on salt-master Parsing Epoch out of version during pkg remove, since yum can't handle that in all of the cases. Add extra onfail req check in the state engine to allow onfail to be used with onchanges and other reqs in the same state Changed the default character set used by utils.pycrypto.secure_password() to include symbols and implemented arguments to control the used character set. FIXED Set default 'bootstrap_delay' to 0 Fixed issue where multiple args to netapi were not preserved Handle all repo formats in the aptpkg module. Do not break master_tops for minion with version lower to 3003 This is going to be removed in Salt 3006 (Sulfur) Reverting changes in 60150. Updating installed and removed functions to return changes when test=True. Handle signals and properly exit, instead of raising exceptions. Redirect imports of salt.ext.six to six Surface strerror to user state instead of returning false Fixing _get_envs() to preserve the order of pillar_roots. _get_envs() returned pillar_roots in a non-deterministic order. Fixes salt-cloud KeyError that occurs when there exists any subnets with no tags when profiles use subnetname Fixes postgres_local_cache by removing duplicate unicode encoding. Fixing the state aggregation system to properly handle requisities. Fixing pkg state to exclude packages from aggregation if the hold attribute is in the state. fix issue that allows case sensitive files to be carried through Allow GCE Salt Cloud to use previously created IP Addresses. Fixing rabbitmq.list_user_permissions to ensure we are returning a permission list with three elements even when some values are empty. Periodically restart the fileserver update process to avoid leaks Fix default value to dictionary for mine_function Allow user.present to work on Alpine Linux by fixing linux_shadow.info Ensure that zypper is called with only one --no-refresh parameter Fixed fileclient cachedir path switching from master to minion due to incorrect MasterMinion configuration Fixed the container detection inside virtual machines Fix invalid dnf command when obsoletes=True in pkg.update function Jinja renderer resolves wrong relative paths when importing subdirectories Fixed bug 55262 where salt.modules.iptables would call cmd.run and receive and interpret interspersed stdout and stderr output from subprocesses. Updated pcs support to handle auth and setup for new syntax supporting version 0.10 Reinstate ignore_cidr option in salt-cloud openstack driver Fix for network.wolmatch runner displaying 'invalid arguments' error with valid arguements Fixed bug 57490, which prevented package installation for Open Euler and Issabel PBX. Both Open Euler and Issabel PBX use Yum for package management, added them to yumpkg.py. Better handling of bad RSA public keys from minions Fixing various functions in the file state module that use user.info to get group information, certain hosts particularly proxy minions do not have the user.info function avaiable. Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules Fix --subset command line option, and support old 'sub' parameter name in cmd_subset for backwards compatibility When calling salt.utils.http.query with a HEAD method to check for the existence of a source ensure that decode_body is False, so the file is not downloaded into memory when we don't need the contents. Update the runas user on freebsd for postgres versions >9.5, since freebsd will be removing the package on 2021-05-13. Fix pip module linked requirements file parsing Fix incorrect hostname quoting in /etc/sysconfig/networking on Red Hat family OS. Fix Xen DomU virt detection in grains for long running machines. add encoding when windows encoding is not defaulting to utf8 Fix "aptpkg.normalize_name" in case the arch is "all" for DEB packages Astra Linux now considered a Debian family distro Reworking the mysql module and state so that passwordless does not try to use unix_socket until unix_socket is set to True. Fixed the zabbix module to read the connection data from pillar. Fix crash on "yumpkg" execution module when unexpected output at listing patches Remove return that had left over py2 code from win_path.py Don't create spicevmc channel for Xen virtual machines Fix win_servermanager.install so it will reboot when restart=True is passed Clear the cached network interface grains during minion init and grains refresh Normalized grain output for LXC containers Fix typo in 'salt/states/cmd.py' to use "comment" instead of "commnd". add aliyun linux support and set alinux as redhat family Don't fail updating network without netmask ip attribute Fixed using reserved keyword 'set' as function argument in modules/ipset.py Return empty changes when nothing has been done in virt.defined and virt.running states Import salt.utils.azurearm instead of using __utils__ from loader in azure cloud. This fixes an issue where __utils__ would become unavailable when we are using the ThreadPool in azurearm. Fix an issue with the LGPO module when the gpt.ini file contains unix style line endings (/n). This was happening on a Windows Server 2019 instance created in Google Cloud Platform (GCP). The ansiblegate module now correctly passes keyword arguments to Ansible module calls Make sure cmdmod._log_cmd handles tuples properly Updating the add, delete, modify, enable_job, and disable_job functions to return appropriate changes. Apply pre-commit changes to entire codebase. Fix Hetzner cloud driver does not recognize machines when rolling out a map Update Windows build deps & DLLs, Use Python 3.8, libsodium.dll 1.0.18, OpenSSL dlls to 1.1.1k Salt api verifies proper log file path when providing '--log-file' from the cli Detect Mendel Linux as Debian Fixed compilation of requisite_ins by also checking state type along with name/id Fix xen._get_vm() to not break silently when a VM and a template on XenServer have the same name. Added missing space for nftables.build_rule when using saddr or daddr. Add back support to load old entrypoints by iterating instead of type checking Fixed interrupting salt-call in a pdb session. Validate we can import map files in states Update alter_db to return True or False depending on the success of failure of the alter. Update grant_exists to only use the full list of available privileges when the grant is on the global level, eg. datbase is ".". Fixed firewalld.list_zones when any "rich rules" is set IPCMessageSubscriber objects expose their connect method as a corotine so they can be wrapped by SyncWrapper. Allow for Napalm dependency netmiko_mod to load correctly when used by Napalm with Cisco IOS Ensure proper access to the created temporary file when runas is passed to cmd.exec_code_all Fixed an IndexError in pkgng.latest_version when querying an unknown package. Fixed pkgng.latest_version when querying by origin (e.g. "shells/bash"). Gracefuly handle errors in virt.vm_info The LGPO Module now uses "Success and Failure" for normal audit settings and advanced audit settings Fixing tests/pytests/unit/utils/scheduler/test_eval.py tests so the sleep happens before the status, so the job is given time before we check it. Update the external ipaddress to the latest 3.9.5 version which has some security fixes. Updating the compat.p to use the vendored version if the python version is below 3.9.5 and only run the test_ipaddress.py tests if below 3.9.5. Fixed ValueError exception in state.show_state_usage Redact the username and password when something goes wrong when using an HTTP source and we raise an exception. Inject the Ansible functions into Salt's ansiblegate module which was broken on the 3001 release. Figure out the available Python version inside containers when executing "dockermod.call" function Handle IPv6 route types such as anycast, multicast, etc when returned from IPv6 route table queries Move the commonly used code that converts a list to a dictionary into salt.utils.beacons. Fixing inotify beacon close function to ensure the configuration is converted from the provided list format into a dictionary. Set name of engine subprocesses Properly discover block devices path in virt.running Avoid exceptions when handling some exception cases. Fixed faulty error message in npm.installed state. Port option reinstated for Junos Proxy (accidentally removed) Now hosts.rm_host can remove entries from /etc/hosts when this file have inline comments. Fixes issue where the full same name is not used when making rights assignments with group policy Fixed zabbix_host.present to not overwrite inventory_mode to "manual" everytime inventory is updated. Allowed zabbix_host.present to do partial updates of inventory, also don't erase everything if inventory is missing in state definition. Fixing the mysql_cache module to handle binary inserting binary data into the database. Initially adding tests. Fixed host_inventory_get to not throw an exception if host does not exist Check for /dev/kvm to detect KVM hypervisor. Fixing file.accumulated handling of dependencies when the state_id is used instead of {function: state_id} format. Adding the ability for yumpkg.remove to handle package names with widdcards. Pass emulator path to get guest capabilities from libvirt virt.get_disks: properly report qemu-img errors Make all platforms have psutils. This prevents a minion from starting if an instance is all ready running. Ignore configuration for 'enable_fqdns_grains' for AIX, Solaris and Juniper, assume False Remove check for TIAMAT_BUILD enforcing USE_STATIC_REQUIREMENTS, this is now controled by Tiamat v7.10.1 and above Have the beacon call run through a try...except, catching any errors, logging and firing an event that includes the error. Fixing the swapusage beacon to ensure value is a string before we attempt to filter out the %. Refactor loader into logical sub-modules Clean up references to ZMQDefaultLoop change dep warn from Silicon to Phosphorus for the cmd,show,system_info and add_config functions in the nxos module. Fix bug 60602 where the hetzner cloud provider isn't recognized correctly Fix the pwd.getpwnam caching issue on macOS user module Fixing beacons that can include a value in their configuration that may or may not included a percentage. We want to handle the situation where the percentage sign is not included and the value is not handled as a string. Fix RuntimeError in process manager Ensure all data that is being passed along to LDAP is in an OrderedSet and contains bytes. Update the AWS API version so VMs spun up by salt-cloud where the VPC has it enabled to assign ipv6 addresses by default, actually get ipv6 addresses assigned by default. Remove un-needed singletons from tranports ADDED Add windows support for file.patch with patch.exe from git for windows optional packages Added ability to pass exclude kwarg to salt.state inside orchestrate. Added success_stdout and success_stderr arguments to cmd.run, to override default return code behavior. The netbox pillar now been enhanced to add support for querying virtual machines (in addition to devices), as well as minion interfaces and associated IP addresses. Add support for transactional systems, like openSUSE MicroOS Added namespace headers to allow use of namespace from config to communicate with Vault Enterprise namespaces boto3mod unit tests New decorators allow_one_of() and require_one_of() Added nosync switch to disable initial raid synchronization Expanded the documentation for the netbox pillar. Rocky Linux has been added to the RedHat os_family. Add "poudriere -i -j jail_name" option to list jail information for poudriere Added the grains.uuid on Windows platform Add a salt.util.platform check to detect the AArch64 64-bit extension of the ARM architecture. Adding support for Deltaproxy controlled proxy minions into Salt Open. Added functions to slsutil execution module to test if files exist in the state tree Added funtion to slsutil execution module to search for a file by walking up the state tree Allow module_refresh to also refresh available beacons, eg. following a Python library being installed and "refresh_modules" being passed as an argument in a state. Add the detect_remote_minions and remote_minions_port options to allow the master to detect remote ports for connected minions. This will allow users to detect Heist-Salt minions the master is connected to over port 22 by default. Add the python rpm-vercmp library in the rpm_lowpkg.py module. Allow a user to use the aptpkg.py module without installing python-apt. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.73 2020/08/18 05:26:08 tnn Exp $ a23 5 .include "../../lang/python/pyversion.mk" .if ${_PYTHON_VERSION} == 36 DEPENDS+= ${PYPKGPREFIX}-contextvars-[0-9]*:../../devel/py-contextvars .endif @ 1.73 log @salt: skip portability checks in 3rd party packaging scripts @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.72 2020/05/16 17:45:49 rillig Exp $ d3 1 a3 1 DISTNAME= salt-2019.2.2 d12 2 d16 3 a18 1 DEPENDS+= ${PYPKGPREFIX}-msgpack-[0-9]*:../../devel/py-msgpack d20 1 a20 6 DEPENDS+= ${PYPKGPREFIX}-requests>=2.5.0:../../devel/py-requests DEPENDS+= ${PYPKGPREFIX}-tornado>=4.3:../../www/py-tornado DEPENDS+= ${PYPKGPREFIX}-psutil-[0-9]*:../../sysutils/py-psutil # zeromq transport requirements DEPENDS+= ${PYPKGPREFIX}-cryptodome-[0-9]*:../../security/py-cryptodome DEPENDS+= ${PYPKGPREFIX}-zmq>=2.2.0:../../net/py-zmq d22 1 a22 2 # Some modules are still not (as of 2019.2.0) 3.x compatible. PYTHON_VERSIONS_ACCEPTED= 27 d25 2 a26 2 .if ${_PYTHON_VERSION} == 27 DEPENDS+= ${PYPKGPREFIX}-futures-[0-9]*:../../devel/py-futures d86 1 a86 1 .include "../../lang/python/distutils.mk" @ 1.72 log @sysutils/salt: allow no-op SUBST block A typical case is that PKGMANDIR is man, not share/man. That path does not occur in the Python files, which would then make the build fail in SUBST_NOOP_OK=no mode. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.71 2019/11/13 14:47:59 adam Exp $ d82 2 @ 1.71 log @salt: updated to 2019.2.2 SALT 2019.2.2 RELEASE NOTES Version 2019.2.2 is a bugfix release for 2019.2.0. ISSUE 54817: (tomlaredo) [REGRESSION] git.latest displays errors (refs: 54844) * (garethgreenaway) [master] Fix to git state module when calling git.config_get_regexp 52fee6f Merge pull request 54844 from garethgreenaway/54817_git_latest_error_calling_git_config_get_regexp cb1b75a Adding test. 6ba8ff2 When calling git.config_get_regexp to check for filter.lfs. in git config, if the option is not available this would result with a return code of 1 which would result in an error being logged. Since one possible result is that the configuration would not be there, we ignore the return code. * (frogunder) update 2019.2.2 release notes d6593c2 Merge pull request 54973 from frogunder/update_releasenotes_2019.2.2 0c01cfb update 2019.2.2 release notes * (twangboy) Add missing docs for win_wusa state and module (2019.2.1) 7d253bc Merge pull request 54919 from twangboy/update_docs 57ff199 Add docs for win_wusa ISSUE 54941: (UtahDave) Pillar data is refreshed for EVERY salt command in 2019.2.1 and 2019.2.2 (refs: 54942) * (dwoz) Fix for 54941 pillar_refresh regression 2f817bc Merge pull request 54942 from dwoz/fix-54941 cb5d326 Add a test for 54941 using test.ping 348d1c4 Add regression tests for issue 54941 766f3ca Initial commit of a potential fix for 54941 * (bryceml) update version numbers to be correct f783108 Merge pull request 54897 from bryceml/2019.2.1_fix_docs e9a2a70 update version numbers to be correct * (bryceml) 2019.2.1 fix docs 3233663 Merge pull request 54894 from bryceml/2019.2.1_fix_docs c7b7474 modifying saltconf ads d48057b add new saltconf ads * (frogunder) remove in progress from releasenotes 2019.2.2 4b06eca Merge pull request 54858 from frogunder/releasenotes_remove2019.2.2 a697abd remove in progress from releasenotes 2019.2.2 * (frogunder) releasenotes 2019.2.2 aaf2d1c Merge pull request 54854 from frogunder/release_notes_2019.2.2 a41dc59 Update 2019.2.2.rst 9bea043 releasenotes 2019.2.2 * (frogunder) Update man pages for 2019.2.2 10d433f Merge pull request 54852 from frogunder/man_pages_2019.2.2 92bc4b2 Update man pages for 2019.2.2 * (s0undt3ch) Remove debug print 8ca6b20 Merge pull request 54845 from s0undt3ch/hotfix/event-return-fix-2019.2.1 3937890 Remove debug print ISSUE 54755: (Reiner030) 2019.2.1/2019.2.0 pip failures even when not using pip (refs: 54826) * (dwoz) Fix issue 54755 and add regression tests 9e3914a Merge pull request 54826 from dwoz/issue_54755 0bad9cb Handle locals and globals separatly bcbe9a2 Only purge pip when needed d2f98ca Fix issue 54755 and add regression tests * (frogunder) Add known issues to 2019.2.1 release notes ba569d0 Merge pull request 54830 from frogunder/update_relasenotes_2019.2.1 8cdb27b Update 2019.2.1.rst 14f955c Add known issues to 2019.2.1 release notes ISSUE 54521: (Oloremo) [Regression] Failhard, batch and retcodes (refs: 54806) * (Oloremo) [Regression] Batch with failhard fix 433b6fa Merge pull request 54806 from Oloremo/failhard-batch-fix-2019.2.1 6684793 Merge branch '2019.2.1' into failhard-batch-fix-2019.2.1 3e0e928 Added tests for cli and runner 2416516 Made batch work properly with failhard in cli and runner ISSUE 54820: (OrangeDog) schedule.present not idempotent when scheduler disabled (refs: 54828) * (garethgreenaway) [2019.2.1] Fix global disabling code in scheduler ed94aa5 Merge pull request 54828 from garethgreenaway/54820_fix_schedule_disabled_job_enabled_bug be15a28 Rework code that handles individual jobs being disabled and scheduler being globally being disabled. Previously disabling the schedule would result in individual jobs being disabled when they were run through eval. This change does not change schedule items. * (Akm0d) fix broken salt-cloud openstack query 435b40c Merge pull request 54778 from Akm0d/master_openstack_query_fix ba4ba2a fixed pylint errors in openstack test d9a8517 Added openstack tests for openstack --query fix 59214ad Fallback to image id if we don't have an image name 3a42a4d fixed pylint error 0074d18 created unit tests for openstack 4255e3e Merge branch '2019.2.1' of https://github.com/saltstack/salt into HEAD 1c2821b Return a configured provider, not a bool c585550 fix broken salt-cloud openstack query ISSUE 54762: (margau) 2019.2.1: Breaks Minion-Master Communication (refs: 54784, 54823, 54807) * (dhiltonp) ip_bracket can now accept ipv6 addresses with brackets 93b1c4d Merge pull request 54823 from dhiltonp/maybe-bracket faa1d98 ip_bracket can now accept ipv6 addresses with brackets ISSUE 54762: (margau) 2019.2.1: Breaks Minion-Master Communication (refs: 54784, 54823, 54807) * (dwoz) Fix pip state pip >=10.0 and <=18.0 * (OrlandoArcapix) Fix import of pip modules (refs: 54807) b61b30d Merge pull request 54807 from dwoz/patch-2 664806b Add unit test for pip state fix e637658 Revert change to pip version query 42810a2 Fix import of pip modules ISSUE 54741: (kjkeane) Schedulers Fail to Run (refs: 54799) * (garethgreenaway) Fix to scheduler when job without a time element is run with schedule.run_job 4ee1ff6 Merge pull request 54799 from garethgreenaway/54741_run_job_fails_without_time_element 44caa81 Merge branch '54741_run_job_fails_without_time_element' of github.com:garethgreenaway/salt into 54741_run_job_fails_without_time_element 3ae4f75 Merge branch '2019.2.1' into 54741_run_job_fails_without_time_element 8afd2d8 Removing extra, unnecessary code. 549cfb8 Fixing test_run_job test to ensure the right data is being asserted. Updating unit/test_module_names.py to include integration.scheduler.test_run_job. 7d716d6 Fixing lint. ec68591 If a scheduled job does not contains a time element parameter then running that job with schedule.run_job fails with a traceback because data['run'] does not exist. * (Ch3LL) Fix state.show_states when sls file missing in top file b90c3f2 Merge pull request 54785 from Ch3LL/fix_show_states 96540be Clean up files after state.show_states test ad265ae Fix state.show_states when sls file missing ISSUE 54768: (paul-palmer) 2019.2.1 Some Jinja imports not found (refs: 54780) ISSUE 54765: (awerner) 2019.2.1: Jinja from import broken (refs: 54780) * (dwoz) Fix masterless jinja imports b9459e6 Merge pull request 54780 from dwoz/fix-masterless-jinja-imports 5d873cc Merge branch '2019.2.1' into fix-masterless-jinja-imports e901a83 Add regression tests for jinja import bug 3925bb7 Fix broken jinja imports in masterless salt-call ISSUE 54776: (javierbertoli) Setting ping_interval in salt-minion's config (version 2019.2.1) prevents it from starting (refs: 54777) * (javierbertoli) Fix minion's remove_periodic_callback() 4c240e5 Merge pull request 54777 from netmanagers/2019.2.1 459c790 Merge branch '2019.2.1' into 2019.2.1 * (bryceml) improve lint job 83f8f5c Merge pull request 54805 from bryceml/2019.2.1_update_lint_salt ffa4ed6 improve lint job fa1a767 Merge branch '2019.2.1' into 2019.2.1 ISSUE 54751: (jnmatlock) NXOS_API Proxy Minions Error KeyError: 'proxy.post_master_init' after upgrading to 2019.2.1 (refs: 54783) * (garethgreenaway) Ensure metaproxy directory is included in sdist 6b43fbe Merge pull request 54783 from garethgreenaway/54751_fixing_missing_metaproxy_directory 67d9938 Merge branch '2019.2.1' into 54751_fixing_missing_metaproxy_directory a35e609 Adding __init__.py to metaproxy directory so that metaproxy is included when running setup.py. ISSUE 54762: (margau) 2019.2.1: Breaks Minion-Master Communication (refs: 54784, 54823, 54807) * (dhiltonp) fix dns_check to return uri-compatible ipv6 addresses, add tests 7912b67 Merge pull request 54784 from dhiltonp/ipv46 042a101 Merge branch '2019.2.1' into ipv46 * (frogunder) Add 2019.2.2 release notes 2f94b44 Merge pull request 54779 from frogunder/releasenotes_2019.2.2 67f564b Add 2019.2.2 release notes ac6b54f Merge branch '2019.2.1' into ipv46 93ebd09 update mock (py2) from 2.0.0 to 3.0.5 37bcc4c fix dns_check to return uri-compatible ipv6 addresses, add tests dd86c46 Merge pull request 1 from waynew/pull/54777-callback-typo a57f7d0 Add tests c19d0b0 Fix minion's remove_periodic_callback() * (pizzapanther) Fix returners not loading properly 46bec3c Merge pull request 54731 from pizzapanther/not-so-__new__-and-shiny bdf24f4 Make sure we tests salt-master's event_return setting 5499518 remove unnecessary import 3f8a382 fix module import 0746aa7 remove __new__ method since it was removed from parent class * (bryceml) 2019.2.1 ruby e2b86bf Merge pull request 54706 from bryceml/2019.2.1_ruby 168a6c1 switch to ruby 2.6.3 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.70 2019/07/08 18:54:22 jperkin Exp $ d77 1 @ 1.70 log @salt: Limit to python27. There are reports of some modules failing with Python 3.x so best to be more compatible for now. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.69 2019/04/25 07:33:21 maya Exp $ d3 1 a3 2 DISTNAME= salt-2019.2.0 PKGREVISION= 2 @ 1.69 log @PKGREVISION bump for anything using python without a PYPKGPREFIX. This is a semi-manual PKGREVISION bump. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.68 2019/02/28 10:21:21 adam Exp $ d4 1 a4 1 PKGREVISION= 1 d24 3 @ 1.68 log @salt: updated to 2019.2.0 2019.2.0: - NON-BACKWARD-COMPATIBLE CHANGE TO YAML RENDERER - ANSIBLE PLAYBOOK STATE AND EXECUTION MODULES - NETWORK AUTOMATION - NEW DOCKER PROXY MINION - GRAINS DICTIONARY PASSED INTO CUSTOM GRAINS - MORE PRECISE VIRTUAL GRAIN - CONFIGURABLE MODULE ENVIRONMENT - “VIRTUAL PACKAGE” SUPPORT DROPPED FOR APT - MINION STARTUP EVENTS - FAILHARD CHANGES - PASS THROUGH OPTIONS TO FILE.SERIALIZE STATE - FILE.PATCH STATE REWRITTEN - NEW NO_PROXY MINION CONFIGURATION - CHANGES TO SLACK ENGINE - ENHANCEMENTS TO WTMP BEACON @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.67 2018/10/25 09:08:37 adam Exp $ d4 1 @ 1.67 log @salt: updated to 2018.3.3 SALT 2018.3.3 CVE-2018-15751 Remote command execution and incorrect access control when using salt-api. CVE-2018-15750 Directory traversal vulnerability when using salt-api. Allows an attacker to determine what files exist on a server when querying /run or /events. Improves timezone detection by using the pytz module. The tojson filter (from Jinja 2.9 and later) has been ported to Salt, and will be used when this filter is not available. This allows older LTS releases such as CentOS 7 and Ubuntu 14.04 to use this filter. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.66 2018/10/23 13:42:43 jperkin Exp $ d3 1 a3 1 DISTNAME= salt-2018.3.3 @ 1.66 log @salt: Work around a check-wrkref failure. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.65 2018/08/06 05:01:26 tpaul Exp $ d3 1 a3 1 DISTNAME= salt-2018.3.2 d24 1 a24 1 .if "${PYPKGPREFIX}" == "py27" a38 1 #REPLACE_PYTHON= *.py */*.py */*/*.py a81 1 #.include "../../lang/python/application.mk" @ 1.65 log @Update salt to 2018.3.2 pkgsrc changes: - Add patch for NetBSD 8 support - Update patches to note they can be removed in the next release - Fix existing patch so it doesn't crash when running with swap enabled Changes: Version 2018.3.2 is a bugfix release for 2018.3.0. The 2018.3.2 release contains only a small number of fixes, which are detailed below. This release fixes two critical issues. The first is Issue #48038, which is a critical bug that occurs in a multi-syndic setup where the same job is run multiple times on a minion. The second issue is #48130. This bug appears in certain setups where the Master reports a Minion time-out, even though the job is still running on the Minion. Both of these issues have been fixed with this release. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.64 2018/06/20 15:00:15 tpaul Exp $ d76 3 @ 1.64 log @salt: fix broken patch bump PKGREVISION ok @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.63 2018/06/20 11:50:56 tpaul Exp $ d3 1 a3 2 DISTNAME= salt-2018.3.1 PKGREVISION= 2 @ 1.63 log @salt: don't crash if no swap is configured, apply pkgin module fixes patches/patch-salt_grains_core.py: - Reapply patch in a NetBSD/OpenBSD specific code block after package update to 2018.3.1, from PR pkg/53278 - upstream pull #47600 patches/patch-salt_modules_pkgin.py: - Apply patch in pkgin specific code block from PR pkg/53344 - upstream pull #47814 bump PKGREVISION ok @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.62 2018/06/16 15:23:35 adam Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.62 log @salt: updated to 2018.3.1 Version 2018.3.1 is a bugfix release for 2018.3.0. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.61 2018/06/16 14:17:21 bsiegert Exp $ d4 1 @ 1.61 log @Add missing dependency on py-psutil. From Travis Paul in PR pkg/53366. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.60 2018/05/12 11:29:35 maya Exp $ d3 1 a3 2 DISTNAME= salt-2018.3.0 PKGREVISION= 2 @ 1.60 log @salt: don't crash if no swap is configured (in a netbsd/openbsd specific code block) from Travis Paul in PR pkg/53278, also upstream pull #47600 bump PKGREVISION @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.59 2018/04/13 07:58:22 adam Exp $ d4 1 a4 1 PKGREVISION= 1 d19 1 @ 1.59 log @salt: updated to 2018.3.0 2018.3.0: LOTS OF DOCKER IMPROVEMENTS FULL API SUPPORT FOR NETWORK MANAGEMENT CUSTOM SUBNETS NETWORK CONFIGURATION IN DOCKER_CONTAINER.RUNNING() STATES USE SALTSSH MINIONS LIKE REGULAR MASTER-MINIONS EXCEPTIONS RAISED FOR AUTHENTICATION/AUTHORIZATION ERRORS COMPARISON OPERATORS IN PACKAGE INSTALLATION MASTER TOPS CHANGES SEVERAL JINJA FILTERS RENAMED RETURN CODES FOR RUNNER/WHEEL FUNCTIONS VARIABLE UPDATE INTERVALS FOR FILESERVER BACKENDS LDAP VIA EXTERNAL AUTHENTICATION CHANGES STORMPATH EXTERNAL AUTHENTICATION REMOVED NEW (PROXY) MINION CONFIGURATION OPTIONS ENVIRONMENT CONFIG OPTION RENAMED TO SALTENV LOCK_SALTENV CONFIG OPTION ADDED FAILED MINIONS FOR STATE/FUNCTION ORCHESTRATION JOBS ADDED TO CHANGES DICTIONARY NEW GRAINS SALT MINION AUTO-DISCOVERY @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.58 2018/02/28 13:37:23 adam Exp $ d4 1 @ 1.58 log @salt: updated to 2017.7.4 2017.7.4: Pin tornado version in requirements file Fix regression with identity file usage Add 2017.7.4 Release Notes with PRs use local config for vault when masterless @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.57 2018/02/07 11:11:23 adam Exp $ d3 1 a3 1 DISTNAME= salt-2017.7.4 d20 1 a20 1 DEPENDS+= ${PYPKGPREFIX}-zmq>=2.1.9:../../net/py-zmq d38 1 a38 1 REPLACE_PYTHON= *.py */*.py */*/*.py a74 1 d79 1 a79 9 # Dependencies are documented at # http://docs.saltstack.org/en/latest/topics/installation/index.html#dependencies # Jinja2 is documented as an optional dependency, but it's small so we # include it unconditionally. # # There's also an optional dependency on gcc, for Cython support, but # we don't bother with that here. # .include "../../lang/python/application.mk" @ 1.57 log @salt: updated to 2017.7.3 Version 2017.7.3 is a bugfix release for 2017.7.0. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.56 2018/01/21 13:28:07 bsiegert Exp $ d3 1 a3 1 DISTNAME= salt-2017.7.3 @ 1.56 log @Add ${VARBASE} replacements in example config. Patch from Travis Paul in PR pkg/52930. Bump revision. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.55 2017/10/11 09:40:28 sborrill Exp $ d3 1 a3 2 DISTNAME= salt-2017.7.2 PKGREVISION= 1 d19 1 a19 1 DEPENDS+= ${PYPKGPREFIX}-crypto-[0-9]*:../../security/py-crypto d58 16 a73 16 SUBST_CLASSES+= fix-paths SUBST_STAGE.fix-paths= pre-configure SUBST_MESSAGE.fix-paths=Fixing hardcoded paths SUBST_FILES.fix-paths= conf/* SUBST_FILES.fix-paths+= doc/man/* salt/modules/munin.py setup.py SUBST_FILES.fix-paths+= salt/utils/rsax931.py salt/grains/core.py SUBST_SED.fix-paths= -e 's,/etc/salt,${PKG_SYSCONFDIR},g' SUBST_SED.fix-paths+= -e 's,/srv/salt,${VARBASE}/salt/file-roots,g' SUBST_SED.fix-paths+= -e 's,/srv/pillar,${VARBASE}/salt/pillar-roots,g' SUBST_SED.fix-paths+= -e 's,/etc/munin,${PKG_SYSCONFBASEDIR}/munin,g' SUBST_SED.fix-paths+= -e 's,share/man,${PKGMANDIR},g' SUBST_SED.fix-paths+= -e 's,/opt/local/lib,${PREFIX}/lib,g' SUBST_SED.fix-paths+= -e 's,/opt/local/etc,${PKG_SYSCONFBASEDIR},g' SUBST_SED.fix-paths+= -e 's,/var/run,${VARBASE}/run,g' SUBST_SED.fix-paths+= -e 's,/var/cache,${VARBASE}/cache,g' SUBST_SED.fix-paths+= -e 's,/var/log,${VARBASE}/log,g' @ 1.55 log @salt: update to 2017.7.2 Changelog: https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html Fixes CVE-2017-14695 and CVE-2017-14696 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.54 2017/08/21 10:28:29 sborrill Exp $ d4 1 d72 4 @ 1.54 log @Update to 2017.7.1. Changelog here: https://docs.saltstack.com/en/latest/topics/releases/2017.7.1.html Includes a fix for CVE-2017-12791 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.53 2017/08/01 12:09:57 sborrill Exp $ d3 1 a3 1 DISTNAME= salt-2017.7.1 @ 1.54.4.1 log @Pullup ticket #5570 - requested by sevan sysutils/salt: security update Revisions pulled up: - sysutils/salt/Makefile 1.55 - sysutils/salt/distinfo 1.31 - sysutils/salt/patches/patch-salt_grains_core.py deleted ------------------------------------------------------------------- Module Name: pkgsrc Committed By: sborrill Date: Wed Oct 11 09:40:28 UTC 2017 Modified Files: pkgsrc/sysutils/salt: Makefile distinfo Removed Files: pkgsrc/sysutils/salt/patches: patch-salt_grains_core.py Log Message: salt: update to 2017.7.2 Changelog: https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html Fixes CVE-2017-14695 and CVE-2017-14696 To generate a diff of this commit: cvs rdiff -u -r1.54 -r1.55 pkgsrc/sysutils/salt/Makefile cvs rdiff -u -r1.30 -r1.31 pkgsrc/sysutils/salt/distinfo cvs rdiff -u -r1.1 -r0 pkgsrc/sysutils/salt/patches/patch-salt_grains_core.py @ text @d1 1 a1 1 # $NetBSD$ d3 1 a3 1 DISTNAME= salt-2017.7.2 @ 1.53 log @Update to 2017.7.0. Release notes: https://docs.saltstack.com/en/latest/topics/releases/2017.7.0.html The 2017.7 Salt Release adds initial Python 3 support. The default Python version of Salt will remain Python 2. Salt will no longer support Python 2.6. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.52 2017/07/05 11:02:16 sborrill Exp $ d3 1 a3 1 DISTNAME= salt-2017.7.0 @ 1.52 log @Update to 2016.11.6 Changelog here: https://docs.saltstack.com/en/latest/topics/releases/2016.11.6.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.51 2017/05/20 11:30:27 adam Exp $ d3 1 a3 1 DISTNAME= salt-2016.11.6 @ 1.51 log @Salt 2016.11.5: Due to the critical nature of issue 41230 we have decided to patch the 2016.11.5 packages with P.R.41244. This issue affects all calls to a salt-minion if there is an ipv6 nameserver set on the minion's host. The patched packages on repo.saltstack.com will divert from the v2016.11.5 tag and pypi packages due to the additional PR applied to the packages. Bug fixes. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.50 2017/05/05 15:24:59 jperkin Exp $ d3 1 a3 1 DISTNAME= salt-2016.11.5 @ 1.50 log @Add api SMF instance. From Jorge Schrauwen in joyent/pkgsrc#490. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.49 2017/05/03 08:24:57 sborrill Exp $ d3 1 a3 1 DISTNAME= salt-2016.11.4 d12 14 a25 10 DEPENDS+= zeromq>=2.1.9:../../net/zeromq DEPENDS+= ${PYPKGPREFIX}-zmq>=2.1.9:../../net/py-zmq DEPENDS+= ${PYPKGPREFIX}-m2crypto-[0-9]*:../../security/py-m2crypto DEPENDS+= ${PYPKGPREFIX}-crypto-[0-9]*:../../security/py-crypto DEPENDS+= ${PYPKGPREFIX}-msgpack-[0-9]*:../../devel/py-msgpack DEPENDS+= ${PYPKGPREFIX}-yaml-[0-9]*:../../textproc/py-yaml DEPENDS+= ${PYPKGPREFIX}-jinja2-[0-9]*:../../textproc/py-jinja2 DEPENDS+= ${PYPKGPREFIX}-apache-libcloud>=0.14.1:../../net/py-apache-libcloud DEPENDS+= ${PYPKGPREFIX}-requests>=2.5.0:../../devel/py-requests DEPENDS+= ${PYPKGPREFIX}-tornado>=4.3:../../www/py-tornado a28 5 PYTHON_VERSIONS_INCOMPATIBLE= 34 35 36 # py-m2crypto PYSETUPARGS+= --salt-config-dir=${PKG_SYSCONFDIR} PYSETUPARGS+= --salt-cache-dir=${VARBASE}/cache/salt PYSETUPARGS+= --salt-sock-dir=${VARBASE}/run/salt d32 2 d36 1 d48 1 a48 1 INSTALLATION_DIRS+= ${EGDIR} @ 1.49 log @Update to 2016.11.4. Changelog: https://docs.saltstack.com/en/latest/topics/releases/2016.11.4.html Also ensure PID file paths are correct. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.48 2017/03/03 09:29:48 sborrill Exp $ d40 1 a40 1 SMF_INSTANCES= master minion @ 1.48 log @Update to 2016.11.3. Lots of bug fixes (too many to list individually), but of note is a pull up of previous pkgsrc patch for NetBSD support. Full changelog here: https://docs.saltstack.com/en/latest/topics/releases/2016.11.3.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.47 2017/02/09 15:01:20 sborrill Exp $ d3 1 a3 1 DISTNAME= salt-2016.11.3 @ 1.47 log @Fix configuration paths by not specifying PREFIX as installation root. Move file server root paths to VARBASE/salt. Bump PKGREVISION @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.46 2017/02/06 12:48:18 sborrill Exp $ d3 1 a3 2 DISTNAME= salt-2016.11.2 PKGREVISION= 2 @ 1.46 log @Fix NetBSD sockstat parsing. Bump PKGREVISION @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.45 2017/02/03 13:39:00 sborrill Exp $ d4 1 a4 1 PKGREVISION= 1 a27 1 PYSETUPARGS+= --salt-root-dir=${PREFIX} d31 3 a33 3 PYSETUPARGS+= --salt-base-file-roots-dir=${PKG_SYSCONFDIR}/states PYSETUPARGS+= --salt-base-pillar-roots-dir=${PKG_SYSCONFDIR}/pillar PYSETUPARGS+= --salt-base-master-roots-dir=${PKG_SYSCONFDIR}/salt-master d51 3 a53 2 OWN_DIRS+= ${PKG_SYSCONFDIR}/states ${PKG_SYSCONFDIR}/pillar OWN_DIRS+= ${PKG_SYSCONFDIR}/salt-master d64 2 a65 2 SUBST_SED.fix-paths+= -e 's,/srv/salt,${PKG_SYSCONFDIR}/states,g' SUBST_SED.fix-paths+= -e 's,/srv/pillar,${PKG_SYSCONFDIR}/pillar,g' @ 1.45 log @Update sysutils/salt to 2016.11.2. As usual, the changelogs are far too long to be useful, but are available here: https://docs.saltstack.com/en/latest/topics/releases/2016.11.0.html https://docs.saltstack.com/en/latest/topics/releases/2016.11.2.html Thanks to Morgan @@ Precedence Technologies. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.44 2017/01/01 14:43:58 wiz Exp $ d4 1 @ 1.44 log @Add python-3.6 to incompatible versions. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.43 2016/09/26 07:06:11 jperkin Exp $ d3 1 a3 1 DISTNAME= salt-2016.3.3 d27 9 a35 9 PYSETUPINSTALLARGS+= --salt-root-dir=${PREFIX} PYSETUPINSTALLARGS+= --salt-config-dir=${PKG_SYSCONFDIR} PYSETUPINSTALLARGS+= --salt-cache-dir=${VARBASE}/cache/salt PYSETUPINSTALLARGS+= --salt-sock-dir=${VARBASE}/run/salt PYSETUPINSTALLARGS+= --salt-base-file-roots-dir=${PKG_SYSCONFDIR}/states PYSETUPINSTALLARGS+= --salt-base-pillar-roots-dir=${PKG_SYSCONFDIR}/pillar PYSETUPINSTALLARGS+= --salt-base-master-roots-dir=${PKG_SYSCONFDIR}/salt-master PYSETUPINSTALLARGS+= --salt-logs-dir=${VARBASE}/log/salt PYSETUPINSTALLARGS+= --salt-pidfile-dir=${VARBASE}/run @ 1.43 log @Fix DISTNAME. Pointed out by wiz. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.42 2016/09/19 13:34:37 jperkin Exp $ d25 1 a25 1 PYTHON_VERSIONS_INCOMPATIBLE= 34 35 # py-m2crypto @ 1.42 log @Update sysutils/salt to 2016.3.3. As usual the changelogs are far too long to be useful, but are available here: https://docs.saltstack.com/en/latest/topics/releases/2016.3.2.html https://docs.saltstack.com/en/latest/topics/releases/2016.3.3.html Based on joyent/pkgsrc#410 from Filip Chabik. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.41 2016/07/21 17:05:39 jperkin Exp $ d3 1 a3 1 DISTNAME= salt-2016.3.4 @ 1.41 log @Update sysutils/salt to 2016.3.1. There are a huge number of changes since the last pkgsrc update, way too many to list here. One of the more interesting changes for us though was much improved support for Solaris and illumos. For further details see the online changelogs here: https://docs.saltstack.com/en/latest/topics/releases/2016.3.1.html https://docs.saltstack.com/en/latest/topics/releases/2016.3.0.html https://docs.saltstack.com/en/latest/topics/releases/2015.8.11.html https://docs.saltstack.com/en/latest/topics/releases/2015.8.10.html https://docs.saltstack.com/en/latest/topics/releases/2015.8.9.html https://docs.saltstack.com/en/latest/topics/releases/2015.8.8.html https://docs.saltstack.com/en/latest/topics/releases/2015.8.7.html It appears there wasn't a 2015.8.6 release. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.40 2016/07/09 13:04:07 wiz Exp $ d3 1 a3 1 DISTNAME= salt-2016.3.1 @ 1.40 log @Remove python33: adapt all packages that refer to it. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.39 2016/04/21 11:36:03 jperkin Exp $ d3 1 a3 2 DISTNAME= salt-2015.8.5 PKGREVISION= 3 d37 2 a38 1 REPLACE_PYTHON= *.py */*.py */*/*.py @ 1.39 log @Use PKGMANDIR. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.38 2016/02/16 01:52:34 khorben Exp $ d26 1 a26 1 PYTHON_VERSIONS_INCOMPATIBLE= 33 34 35 # py-m2crypto @ 1.38 log @Avoid a crash on NetBSD when not every minion is present From the pull request pending, #31320: On NetBSD, Salt currently defaults to using lsof(8) to determine which minions are connected. It is however not always available, and even then quite unreliable. I found that just like on FreeBSD, sockstat(1) is a much safer alternative. Unfortunately its output is not exactly the same on NetBSD, where the port delimiter is a dot character instead. As a consequence I have decided to duplicate the relevant function for NetBSD; let me know if I should try to re-use the code supporting FreeBSD instead. See also https://github.com/saltstack/salt/pull/31230. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.37 2016/02/16 00:00:08 khorben Exp $ d66 1 a66 1 SUBST_SED.fix-paths+= -e 's,share/man,man,g' @ 1.37 log @Add an RC script for salt-syndic(1) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.36 2016/02/09 14:23:04 wiz Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.36 log @Add upstream patch fixing problem with cron on Solaris. From Travis Paul in PR 50567. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.35 2016/02/07 23:55:01 sevan Exp $ d4 1 a4 1 PKGREVISION= 1 d40 1 a40 1 RCD_SCRIPTS+= salt_master salt_minion @ 1.35 log @Update to 2015.8.5, from PR#50779 addresses CVE-2016-1866 Salt 2015.8.5 is identical to the 2015.8.4 release with the addition of a fix for issue 30820, fixed by PR #30833. SECURITY FIX CVE-2016-1866: Improper handling of clear messages on the minion, which could result in executing commands not sent by the master. This issue affects only the 2015.8.x releases of Salt. In order for an attacker to use this attack vector, they would have to execute a successful attack on an existing TCP connection between minion and master on the pub port. It does not allow an external attacker to obtain the shared secret or decrypt any encrypted traffic between minion and master. We recommend everyone upgrade to 2015.8.4 as soon as possible. CORE CHANGES PR #28994: timcharper Salt S3 module has learned how to assume IAM roles Added option mock=True for state.sls and state.highstate. This allows the salt state compiler to process sls data in a state run without actually calling the state functions, thus providing feedback on the validity of the arguments used for the functions beyond the preprocessing validation provided by state.show_sls (issue 30118 and issue 30189). salt '*' state.sls core,edit.vim mock=True salt '*' state.highstate mock=True salt '*' state.apply edit.vim mock=True CHANGES FOR V2015.8.3..V2015.8.4 Extended changelog courtesy of Todd Stansell (https://github.com/tjstansell/salt-changelogs): Generated at: 2016-01-25T17:48:35Z Total Merges: 320 Changes: PR #30613: (basepi) Fix minion/syndic clearfuncs PR #30609: (seanjnkns) Fix documentation for pillar_merge_lists which default is False, not … PR #30584: (julianbrost) file.line state: add missing colon in docstring PR #30589: (terminalmage) Merge 2015.5 into 2015.8 PR #30599: (multani) Documentation formatting fixes PR #30554: (rallytime) Make the salt-cloud actions output more verbose and helpful PR #30549: (techhat) Salt Virt cleanup PR #30553: (techhat) AWS: Support 17-character IDs PR #30532: (whiteinge) Add execution module for working in sls files PR #30529: (terminalmage) Merge 2015.5 into 2015.8 PR #30526: (twangboy) Added FlushKey to make sure it's changes are saved to disk PR #30521: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #30485: (jtand) Updated pip_state to work with pip 8.0 on 2015.8 PR #30494: (isbm) Zypper: info_installed — 'errors' flag change to type 'boolean' PR #30506: (jacksontj) Properly remove newlines after reading the file PR #30508: (rallytime) Fix Linode driver cloning functionality PR #30522: (terminalmage) Update git.list_worktree tests to reflect new return data PR #30483: (borgstrom) Pyobjects recursive import support (for 2015.8) PR #30491: (jacksontj) Add multi-IP support to network state PR #30496: (anlutro) Fix KeyError when adding ignored pillars PR #30359: (kingsquirrel152) Removes suspected copy/paste error for zmq_filtering functionailty PR #30448: (cournape) Fix osx scripts location PR #30457: (rallytime) Remove fsutils references from modules list PR #30453: (rallytime) Make sure private AND public IPs are listed for Linode driver PR #30458: (rallytime) Back-port #30062 to 2015.8 PR #30468: (timcharper) make note of s3 role assumption in upcoming changelog PR #30470: (whiteinge) Add example of the match_dict format to accept_dict wheel function PR #30450: (gtmanfred) fix extension loading in novaclient PR #30212: (abednarik) Fix incorrect file permissions in file.line PR #29947: (jfindlay) fileclient: decode file list from master PR #30363: (terminalmage) Use native "list" subcommand to list git worktrees PR #30445: (jtand) Boto uses False for is_default instead of None PR #30406: (frioux) Add an example of how to use file.managed/check_cmd PR #30424: (isbm) Check if byte strings are properly encoded in UTF-8 PR #30405: (jtand) Updated glusterfs.py for python2.6 compatibility. PR #30396: (pass-by-value) Remove hardcoded val PR #30391: (jtand) Added else statements PR #30375: (rallytime) Wrap formatted log statements with six.u() in cloud/__init__.py PR #30384: (isbm) Bugfix: info_available does not work correctly on SLE 11 series PR #30376: (pritambaral) Fix FLO_DIR path in 2015.8 PR #30389: (jtand) Older versions of ipset don't support comments PR #30373: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #30372: (jacobhammons) Updated man pages for 2015.8.4, updated copyright to 2016 PR #30370: (rallytime) Remove incomplete function PR #30366: (rallytime) Back-port #28702 to 2015.8 PR #30361: (cro) Flip the sense of the test for proxymodule imports, add more fns for esxi proxy PR #30267: (isbm) Fix RPM issues with the date/time and add package attributes filtering PR #30360: (jfindlay) file.remove, file.absent: mention recursive dir removal PR #30221: (mbarrien) No rolcatupdate for user_exist in Postgres>=9.5 `#26845`_ PR #30358: (terminalmage) Add libgit2 version to versions-report PR #30346: (pass-by-value) Prevent orphaned volumes PR #30349: (rallytime) Back-port #30347 to 2015.8 PR #30354: (anlutro) Make sure all ignore_missing SLSes are caught PR #30356: (nmadhok) Adding code author PR #30340: (jtand) Updated seed_test.py for changes made to seed module PR #30339: (jfindlay) Backport #26511 PR #30343: (rallytime) Fix 2015.8 from incomplete back-port PR #30342: (eliasp) Correct whitespace placement in error message PR #30308: (rallytime) Back-port #30257 to 2015.8 PR #30187: (rallytime) Back-port #27606 to 2015.8 PR #30223: (serge-p) adding support for DragonFly BSD PR #30238: (rallytime) Reinit crypto before calling RSA.generate when generating keys. PR #30246: (dmacvicar) Add missing return data to scheduled jobs (`#24237`_) PR #30292: (thegoodduke) ipset: fix test=true & add comment for every entry PR #30275: (abednarik) Add permanent argument in firewalld. PR #30328: (cachedout) Fix file test PR #30310: (pass-by-value) Empty bucket fix PR #30211: (techhat) Execute choot on the correct path PR #30309: (rallytime) Back-port #30304 to 2015.8 PR #30278: (nmadhok) If datacenter is specified in the config, then look for managed objects under it PR #30305: (jacobhammons) Changed examples to use the "example.com" domain instead of "mycompan… PR #30249: (mpreziuso) Fixes performance and timeout issues on win_pkg.install PR #30217: (pass-by-value) Make sure cloud actions can be called via salt run PR #30268: (terminalmage) Optimize file_tree ext_pillar and update file.managed to allow for binary contents PR #30245: (rallytime) Boto secgroup/iam_role: Add note stating us-east-1 is default region PR #30299: (rallytime) ESXi Proxy minions states are located at salt.states.esxi, not vsphere. PR #30202: (opdude) Fixed the periodic call to beacons PR #30303: (jacobhammons) Changed notes to indicate that functions are matched using regular ex… PR #30284: (terminalmage) salt.utils.gitfs: Fix Dulwich env detection and submodule handling PR #30280: (jfindlay) add state mocking to release notes PR #30273: (rallytime) Back-port #30121 to 2015.8 PR #30301: (cachedout) Accept whatever comes into hightstate mock for state tests PR #30282: (cachedout) Fix file.append logic PR #30289: (cro) Fix problems with targeting proxies by grains PR #30293: (cro) Ensure we don't log stuff we shouldn't PR #30279: (cachedout) Allow modules to be packed into boto utils PR #30186: (rallytime) Update CLI Examples in boto_ec2 module to reflect correct arg/kwarg positioning PR #30156: (abednarik) Add option in file.append to ignore_whitespace. PR #30189: (rallytime) Back-port #30185 to 2015.8 PR #30215: (jacobhammons) Assorted doc bug fixes PR #30206: (cachedout) Revert "Fix incorrect file permissions in file.line" PR #30190: (jacobhammons) Updated doc site banners PR #30180: (jfindlay) modules.x509._dec2hex: add fmt index for 2.6 compat PR #30179: (terminalmage) Backport #26962 to 2015.8 branch PR #29693: (abednarik) Handle missing source file in ssh_auth. PR #30155: (rallytime) Update boto_secgroup and boto_iam_role docs to only use region OR profile PR #30158: (rallytime) Move _option(value) calls to __salt__['config.option'] in boto utils PR #30160: (dmurphy18) Fix parsing disk usage for line with no number and AIX values in Kilos PR #30162: (rallytime) Update list_present and append grains state function docs to be more clear. PR #30163: (rallytime) Add warning about using "=" in file.line function PR #30164: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #30168: (abednarik) Fix incorrect file permissions in file.line PR #30154: (Oro) Fix file serialize on windows PR #30144: (rallytime) Added generic ESXCLI command ability to ESXi Proxy Minion PR #30142: (terminalmage) Fix dockerng.push, and allow for multiple images PR #30075: (joejulian) Convert glusterfs module to use xml PR #30129: (optix2000) Clean up _uptodate() in git state PR #30139: (rallytime) Back-port #29589 to 2015.8 PR #30124: (abednarik) Update regex to detect ip alias in OpenBSD. PR #30133: (stanislavb) Fix typo in gpgkey URL PR #30126: (stanislavb) Log S3 API error message PR #30128: (oeuftete) Log retryable transport errors as warnings PR #30096: (cachedout) Add rm_special to crontab module PR #30106: (techhat) Ensure last dir PR #30101: (gtmanfred) fix bug where nova driver exits with no adminPass PR #30090: (techhat) Add argument to isdir() PR #30094: (rallytime) Fix doc formatting for cloud.create example in module.py state PR #30095: (rallytime) Add the list_nodes_select function to linode driver PR #30082: (abednarik) Fixed saltversioninfo grain return PR #30084: (rallytime) Back-port #29987 to 2015.8 PR #30071: (rallytime) Merge branch '2015.5' into '2015.8' PR #30067: (ryan-lane) Pass in kwargs to boto_secgroup.convert_to_group_ids explicitly PR #30069: (techhat) Ensure that pki_dir exists PR #30064: (rallytime) Add Syndic documentation to miscellaneous Salt Cloud config options PR #30049: (rallytime) Add some more unit tests for the vsphere execution module PR #30060: (rallytime) Back-port #27104 to 2015.8 PR #30048: (jacobhammons) Remove internal APIs from rest_cherrypy docs. PR #30043: (rallytime) Be explicit about importing from salt.utils.jinja to avoid circular imports PR #30038: (rallytime) Back-port #30017 to 2015.8 PR #30036: (rallytime) Back-port #29995 to 2015.8 PR #30035: (rallytime) Back-port #29895 to 2015.8 PR #30034: (rallytime) Back-port #29893 to 2015.8 PR #30033: (rallytime) Back-port #29876 to 2015.8 PR #30029: (terminalmage) git.latest: Fix handling of nonexistent branches PR #30016: (anlutro) Properly normalize locales in locale.gen_locale PR #30015: (anlutro) locale module: don't escape the slash in \n PR #30022: (gqgunhed) Two minor typos fixed PR #30026: (anlutro) states.at: fix wrong variable being used PR #29966: (multani) Fix bigip state/module documentation + serializers documentation PR #29904: (twangboy) Improvements to osx packaging scripts PR #29950: (multani) boto_iam: fix deletion of IAM users when using delete_keys=true PR #29937: (multani) Fix states.boto_iam group users PR #29934: (multani) Fix state.boto_iam virtual name PR #29943: (cachedout) Check args correctly in boto_rds PR #29924: (gqgunhed) fixed: uptime now working on non-US Windows PR #29883: (serge-p) fix for nfs mounts in _active_mounts_openbsd() PR #29894: (techhat) Support Saltfile in SPM PR #29856: (rallytime) Added some initial unit tests for the salt.modules.vsphere.py file PR #29855: (rallytime) Back-port #29740 to 2015.8 PR #29890: (multani) Various documentation fixes PR #29850: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #29811: (anlutro) influxdb: add retention policy module functions PR #29814: (basepi) [2015.8][Windows] Fix multi-master on windows PR #29819: (rallytime) Add esxi module and state to docs build PR #29832: (jleimbach) Fixed typo in order to use the keyboard module for RHEL without systemd PR #29803: (rallytime) Add vSphere module to doc ref module tree PR #29767: (abednarik) Hosts file update in mod_hostname. PR #29772: (terminalmage) pygit2: skip submodules when traversing tree PR #29765: (gtmanfred) allow nova driver to be boot from volume PR #29773: (l2ol33rt) Append missing wget in debian installation guide PR #29800: (rallytime) Back-port #29769 to 2015.8 PR #29775: (paulnivin) Change listen requisite resolution from name to ID declaration PR #29754: (rallytime) Back-port #29719 to 2015.8 PR #29713: (The-Loeki) Pillar-based cloud providers still forcing use of deprecated 'provider' PR #29729: (rallytime) Further clarifications on "unless" and "onlyif" requisites. PR #29737: (akissa) fix pillar sqlite3 documentation examples PR #29743: (akissa) fix pillar sqlite not honouring config options PR #29723: (rallytime) Clarify db_user and db_password kwargs for postgres_user.present state function PR #29722: (rallytime) Link "stateful" kwargs to definition of what "stateful" means for cmd state. PR #29724: (rallytime) Add examples of using multiple matching levels to Pillar docs PR #29726: (cachedout) Disable some boto tests per resolution of moto issue PR #29708: (lagesag) Fix test=True for file.directory with recurse ignore_files/ignore_dirs. PR #29642: (cachedout) Correctly restart deamonized minions on failure PR #29599: (cachedout) Clean up minion shutdown PR #29675: (clinta) allow returning all refs PR #29683: (rallytime) Catch more specific error to pass the error message through elegantly. PR #29687: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #29681: (clinta) fix bare/mirror in git.latest PR #29644: (rallytime) Fixed a couple more ESXi proxy minion bugs PR #29645: (rallytime) Back-port #29558 to 2015.8 PR #29632: (jfindlay) reduce severity of tls module __virtual__ logging PR #29606: (abednarik) Fixed duplicate mtu entry in RedHat 7 network configuration. PR #29613: (rallytime) Various ESXi Proxy Minion Bug Fixes PR #29628: (DmitryKuzmenko) Don't create io_loop before fork PR #29609: (basepi) [2015.8][salt-ssh] Add ability to set salt-ssh command umask in roster PR #29603: (basepi) Fix orchestration failure-checking PR #29597: (terminalmage) dockerng: Prevent exception when API response contains empty dictionary PR #29596: (rallytime) Back-port #29587 to 2015.8 PR #29588: (rallytime) Added ESXi Proxy Minion Tutorial PR #29572: (gtmanfred) [nova] use old discover_extensions if available PR #29545: (terminalmage) git.latest: init submodules if not yet initialized PR #29548: (rallytime) Back-port #29449 to 2015.8 PR #29547: (rallytime) Refactored ESXCLI-based functions to accept a list of esxi_hosts PR #29563: (anlutro) Fix a call to deprecated method in python-influxdb PR #29565: (bdrung) Fix typos and missing release note PR #29540: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #29499: (rallytime) Initial commit of ESXi Proxy Minion PR #29526: (jfindlay) 2015.8.2 notes: add note about not being released PR #29531: (jfindlay) grains.core: handle undefined variable PR #29538: (basepi) [2015.8] [salt-ssh] Remove umask around actual execution for salt-ssh PR #29505: (rallytime) Update boto_rds state docs to include funky yaml syntax for "tags" option. PR #29513: (bdrung) Drop obsolete syslog.target from systemd services PR #29500: (rallytime) Back-port #29467 to 2015.8 PR #29463: (abednarik) Add **kwargs to debconf.set. PR #29399: (jfindlay) modules.status: add human_readable option to uptime PR #29433: (cro) Files for building .pkg files for MacOS X PR #29455: (jfindlay) modules.nova.__init__: do not return None PR #29454: (jfindlay) rh_service module __virtual__ return error messages PR #29476: (tbaker57) Doc fix - route_table_present needs subnet_names (not subnets) as a key PR #29487: (rallytime) Back-port #29450 to 2015.8 PR #29441: (rallytime) Make sure docs line up with blade_idrac function specs PR #29440: (rallytime) Back-port #28925 to 2015.8 PR #29435: (galet) Grains return wrong OS version and other OS related values for Oracle Linux PR #29430: (rall0r) Fix host.present state limitation PR #29417: (jacobhammons) Repo install updates PR #29402: (techhat) Add rate limiting to linode PR #29400: (twangboy) Fix #19332 PR #29398: (cachedout) Lint 29288 PR #29331: (DmitryKuzmenko) Bugfix - #29116 raet dns error PR #29390: (jacobhammons) updated version numbers in documentation PR #29381: (nmadhok) No need to deepcopy since six.iterkeys() creates a copy PR #29349: (cro) Fix mis-setting chassis names PR #29334: (rallytime) Back-port #29237 to 2015.8 PR #29300: (ticosax) [dockerng] Add support for volume management in dockerng PR #29218: (clan) check service enable state in test mode PR #29315: (jfindlay) dev tutorial doc: fix markup errors PR #29317: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #29240: (clan) handle acl_type [[d]efault:][user|group|mask|other] PR #29305: (lorengordon) Add 'file' as a source_hash proto PR #29272: (jfindlay) win_status module: handle 12 hour time in uptime PR #29289: (terminalmage) file.managed: Allow local file sources to use source_hash PR #29264: (anlutro) Prevent ssh_auth.absent from running when test=True PR #29277: (terminalmage) Update git_pillar runner to support new git ext_pillar config schema PR #29283: (cachedout) Single-quotes and use format PR #29139: (thomaso-mirodin) [salt-ssh] Add a range roster and range targeting options for the flat roster PR #29282: (cachedout) dev docs: add development tutorial PR #28994: (timcharper) add support to s3 for aws role assumption PR #29278: (techhat) Add verify_log to SPM PR #29067: (jacksontj) Fix infinite recursion in state compiler for prereq of SLSs PR #29207: (jfindlay) do not shadow ret function argument PR #29215: (rallytime) Back-port #29192 to 2015.8 PR #29217: (clan) show duration only if state_output_profile is False PR #29221: (ticosax) [dokcerng] Docu network mode PR #29269: (jfindlay) win_status module: fix function names in docs PR #29213: (rallytime) Move _wait_for_task func from vmware cloud to vmware utils PR #29271: (techhat) Pass full path for digest (SPM) PR #29244: (isbm) List products consistently across all SLES systems PR #29255: (garethgreenaway) fixes to consul module PR #29208: (whytewolf) Glance more profile errors PR #29200: (jfindlay) mount state: unmount by device is optional PR #29205: (trevor-h) Fixes #29187 - using winrm on EC2 PR #29170: (cachedout) Migrate pydsl tests to integration test suite PR #29198: (jfindlay) rh_ip module: only set the mtu once PR #29135: (jfindlay) ssh_known_hosts.present state: catch not found exc PR #29196: (s0undt3ch) We need novaclient imported to compare versions PR #29059: (terminalmage) Work around upstream pygit2 bug PR #29112: (eliasp) Prevent backtrace (KeyError) in ssh_known_hosts.present state @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.34 2016/02/04 22:05:36 khorben Exp $ d4 1 @ 1.34 log @Avoid a crash in "status.diskusage" when not on Linux or FreeBSD Bump PKGREVISION in the process. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.33 2015/12/11 00:27:06 wiz Exp $ d3 1 a3 2 DISTNAME= salt-2015.8.3 PKGREVISION= 1 @ 1.33 log @Update salt to 2015.8.3, provided by Travis Paul in PR 50507. Security Fix CVE-2015-8034: Saving state.sls cache data to disk with insecure permissions This affects users of the state.sls function. The state run cache on the minion was being created with incorrect permissions. This file could potentially contain sensitive data that was inserted via jinja into the state SLS files. The permissions for this file are now being set correctly. Thanks to @@zmalone for bringing this issue to our attention. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.32 2015/12/07 21:51:53 wiz Exp $ d4 1 @ 1.33.2.1 log @Pullup ticket #4926 - requested by bsiegert sysutils/salt: security fix Revisions pulled up: - sysutils/salt/Makefile 1.34-1.36 - sysutils/salt/PLIST 1.15 - sysutils/salt/distinfo 1.17-1.19 - sysutils/salt/patches/patch-salt_modules_cron.py 1.1 - sysutils/salt/patches/patch-salt_modules_status.py 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: khorben Date: Thu Feb 4 22:05:36 UTC 2016 Modified Files: pkgsrc/sysutils/salt: Makefile distinfo Added Files: pkgsrc/sysutils/salt/patches: patch-salt_modules_status.py Log Message: Avoid a crash in "status.diskusage" when not on Linux or FreeBSD Bump PKGREVISION in the process. To generate a diff of this commit: cvs rdiff -u -r1.33 -r1.34 pkgsrc/sysutils/salt/Makefile cvs rdiff -u -r1.16 -r1.17 pkgsrc/sysutils/salt/distinfo cvs rdiff -u -r0 -r1.1 \ pkgsrc/sysutils/salt/patches/patch-salt_modules_status.py ------------------------------------------------------------------- Module Name: pkgsrc Committed By: sevan Date: Sun Feb 7 23:55:01 UTC 2016 Modified Files: pkgsrc/sysutils/salt: Makefile PLIST distinfo Log Message: Update to 2015.8.5, from PR#50779 addresses CVE-2016-1866 Salt 2015.8.5 is identical to the 2015.8.4 release with the addition of a f= ix for issue 30820, fixed by PR #30833. SECURITY FIX CVE-2016-1866: Improper handling of clear messages on the minion, which cou= ld result in executing commands not sent by the master. This issue affects only the 2015.8.x releases of Salt. In order for an atta= cker to use this attack vector, they would have to execute a successful attack o= n an existing TCP connection between minion and master on the pub port. It does = not allow an external attacker to obtain the shared secret or decrypt any encry= pted traffic between minion and master. We recommend everyone upgrade to 2015.8.4 as soon as possible. CORE CHANGES PR #28994: timcharper Salt S3 module has learned how to assume IAM roles Added option mock=3DTrue for state.sls and state.highstate. This allows the= salt state compiler to process sls data in a state run without actually calling = the state functions, thus providing feedback on the validity of the arguments u= sed for the functions beyond the preprocessing validation provided by state.sho= w_sls (issue 30118 and issue 30189). salt '*' state.sls core,edit.vim mock=3DTrue salt '*' state.highstate mock=3DTrue salt '*' state.apply edit.vim mock=3DTrue CHANGES FOR V2015.8.3..V2015.8.4 Extended changelog courtesy of Todd Stansell (https://github.com/tjstansell/salt-changelogs): Generated at: 2016-01-25T17:48:35Z Total Merges: 320 Changes: PR #30613: (basepi) Fix minion/syndic clearfuncs PR #30609: (seanjnkns) Fix documentation for pillar_merge_lists which defau= lt is False, not =E2=80=A6 PR #30584: (julianbrost) file.line state: add missing colon in docstring PR #30589: (terminalmage) Merge 2015.5 into 2015.8 PR #30599: (multani) Documentation formatting fixes PR #30554: (rallytime) Make the salt-cloud actions output more verbose and helpful PR #30549: (techhat) Salt Virt cleanup PR #30553: (techhat) AWS: Support 17-character IDs PR #30532: (whiteinge) Add execution module for working in sls files PR #30529: (terminalmage) Merge 2015.5 into 2015.8 PR #30526: (twangboy) Added FlushKey to make sure it's changes are saved to= disk PR #30521: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #30485: (jtand) Updated pip_state to work with pip 8.0 on 2015.8 PR #30494: (isbm) Zypper: info_installed =E2=80=94 'errors' flag change to = type 'boolean' PR #30506: (jacksontj) Properly remove newlines after reading the file PR #30508: (rallytime) Fix Linode driver cloning functionality PR #30522: (terminalmage) Update git.list_worktree tests to reflect new ret= urn data PR #30483: (borgstrom) Pyobjects recursive import support (for 2015.8) PR #30491: (jacksontj) Add multi-IP support to network state PR #30496: (anlutro) Fix KeyError when adding ignored pillars PR #30359: (kingsquirrel152) Removes suspected copy/paste error for zmq_filtering functionailty PR #30448: (cournape) Fix osx scripts location PR #30457: (rallytime) Remove fsutils references from modules list PR #30453: (rallytime) Make sure private AND public IPs are listed for Lino= de driver PR #30458: (rallytime) Back-port #30062 to 2015.8 PR #30468: (timcharper) make note of s3 role assumption in upcoming changel= og PR #30470: (whiteinge) Add example of the match_dict format to accept_dict = wheel function PR #30450: (gtmanfred) fix extension loading in novaclient PR #30212: (abednarik) Fix incorrect file permissions in file.line PR #29947: (jfindlay) fileclient: decode file list from master PR #30363: (terminalmage) Use native "list" subcommand to list git worktree= s PR #30445: (jtand) Boto uses False for is_default instead of None PR #30406: (frioux) Add an example of how to use file.managed/check_cmd PR #30424: (isbm) Check if byte strings are properly encoded in UTF-8 PR #30405: (jtand) Updated glusterfs.py for python2.6 compatibility. PR #30396: (pass-by-value) Remove hardcoded val PR #30391: (jtand) Added else statements PR #30375: (rallytime) Wrap formatted log statements with six.u() in cloud/__init__.py PR #30384: (isbm) Bugfix: info_available does not work correctly on SLE 11 series PR #30376: (pritambaral) Fix FLO_DIR path in 2015.8 PR #30389: (jtand) Older versions of ipset don't support comments PR #30373: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #30372: (jacobhammons) Updated man pages for 2015.8.4, updated copyright= to 2016 PR #30370: (rallytime) Remove incomplete function PR #30366: (rallytime) Back-port #28702 to 2015.8 PR #30361: (cro) Flip the sense of the test for proxymodule imports, add mo= re fns for esxi proxy PR #30267: (isbm) Fix RPM issues with the date/time and add package attribu= tes filtering PR #30360: (jfindlay) file.remove, file.absent: mention recursive dir remov= al PR #30221: (mbarrien) No rolcatupdate for user_exist in Postgres>=3D9.5 `#2= 6845`_ PR #30358: (terminalmage) Add libgit2 version to versions-report PR #30346: (pass-by-value) Prevent orphaned volumes PR #30349: (rallytime) Back-port #30347 to 2015.8 PR #30354: (anlutro) Make sure all ignore_missing SLSes are caught PR #30356: (nmadhok) Adding code author PR #30340: (jtand) Updated seed_test.py for changes made to seed module PR #30339: (jfindlay) Backport #26511 PR #30343: (rallytime) Fix 2015.8 from incomplete back-port PR #30342: (eliasp) Correct whitespace placement in error message PR #30308: (rallytime) Back-port #30257 to 2015.8 PR #30187: (rallytime) Back-port #27606 to 2015.8 PR #30223: (serge-p) adding support for DragonFly BSD PR #30238: (rallytime) Reinit crypto before calling RSA.generate when gener= ating keys. PR #30246: (dmacvicar) Add missing return data to scheduled jobs (`#24237`_= ) PR #30292: (thegoodduke) ipset: fix test=3Dtrue & add comment for every ent= ry PR #30275: (abednarik) Add permanent argument in firewalld. PR #30328: (cachedout) Fix file test PR #30310: (pass-by-value) Empty bucket fix PR #30211: (techhat) Execute choot on the correct path PR #30309: (rallytime) Back-port #30304 to 2015.8 PR #30278: (nmadhok) If datacenter is specified in the config, then look fo= r managed objects under it PR #30305: (jacobhammons) Changed examples to use the "example.com" domain instead of "mycompan=E2=80=A6 PR #30249: (mpreziuso) Fixes performance and timeout issues on win_pkg.inst= all PR #30217: (pass-by-value) Make sure cloud actions can be called via salt r= un PR #30268: (terminalmage) Optimize file_tree ext_pillar and update file.man= aged to allow for binary contents PR #30245: (rallytime) Boto secgroup/iam_role: Add note stating us-east-1 i= s default region PR #30299: (rallytime) ESXi Proxy minions states are located at salt.states.esxi, not vsphere. PR #30202: (opdude) Fixed the periodic call to beacons PR #30303: (jacobhammons) Changed notes to indicate that functions are matc= hed using regular ex=E2=80=A6 PR #30284: (terminalmage) salt.utils.gitfs: Fix Dulwich env detection and submodule handling PR #30280: (jfindlay) add state mocking to release notes PR #30273: (rallytime) Back-port #30121 to 2015.8 PR #30301: (cachedout) Accept whatever comes into hightstate mock for state tests PR #30282: (cachedout) Fix file.append logic PR #30289: (cro) Fix problems with targeting proxies by grains PR #30293: (cro) Ensure we don't log stuff we shouldn't PR #30279: (cachedout) Allow modules to be packed into boto utils PR #30186: (rallytime) Update CLI Examples in boto_ec2 module to reflect co= rrect arg/kwarg positioning PR #30156: (abednarik) Add option in file.append to ignore_whitespace. PR #30189: (rallytime) Back-port #30185 to 2015.8 PR #30215: (jacobhammons) Assorted doc bug fixes PR #30206: (cachedout) Revert "Fix incorrect file permissions in file.line" PR #30190: (jacobhammons) Updated doc site banners PR #30180: (jfindlay) modules.x509._dec2hex: add fmt index for 2.6 compat PR #30179: (terminalmage) Backport #26962 to 2015.8 branch PR #29693: (abednarik) Handle missing source file in ssh_auth. PR #30155: (rallytime) Update boto_secgroup and boto_iam_role docs to only = use region OR profile PR #30158: (rallytime) Move _option(value) calls to __salt__['config.option= '] in boto utils PR #30160: (dmurphy18) Fix parsing disk usage for line with no number and A= IX values in Kilos PR #30162: (rallytime) Update list_present and append grains state function= docs to be more clear. PR #30163: (rallytime) Add warning about using "=3D" in file.line function PR #30164: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #30168: (abednarik) Fix incorrect file permissions in file.line PR #30154: (Oro) Fix file serialize on windows PR #30144: (rallytime) Added generic ESXCLI command ability to ESXi Proxy M= inion PR #30142: (terminalmage) Fix dockerng.push, and allow for multiple images PR #30075: (joejulian) Convert glusterfs module to use xml PR #30129: (optix2000) Clean up _uptodate() in git state PR #30139: (rallytime) Back-port #29589 to 2015.8 PR #30124: (abednarik) Update regex to detect ip alias in OpenBSD. PR #30133: (stanislavb) Fix typo in gpgkey URL PR #30126: (stanislavb) Log S3 API error message PR #30128: (oeuftete) Log retryable transport errors as warnings PR #30096: (cachedout) Add rm_special to crontab module PR #30106: (techhat) Ensure last dir PR #30101: (gtmanfred) fix bug where nova driver exits with no adminPass PR #30090: (techhat) Add argument to isdir() PR #30094: (rallytime) Fix doc formatting for cloud.create example in modul= e.py state PR #30095: (rallytime) Add the list_nodes_select function to linode driver PR #30082: (abednarik) Fixed saltversioninfo grain return PR #30084: (rallytime) Back-port #29987 to 2015.8 PR #30071: (rallytime) Merge branch '2015.5' into '2015.8' PR #30067: (ryan-lane) Pass in kwargs to boto_secgroup.convert_to_group_ids explicitly PR #30069: (techhat) Ensure that pki_dir exists PR #30064: (rallytime) Add Syndic documentation to miscellaneous Salt Cloud config options PR #30049: (rallytime) Add some more unit tests for the vsphere execution m= odule PR #30060: (rallytime) Back-port #27104 to 2015.8 PR #30048: (jacobhammons) Remove internal APIs from rest_cherrypy docs. PR #30043: (rallytime) Be explicit about importing from salt.utils.jinja to avoid circular imports PR #30038: (rallytime) Back-port #30017 to 2015.8 PR #30036: (rallytime) Back-port #29995 to 2015.8 PR #30035: (rallytime) Back-port #29895 to 2015.8 PR #30034: (rallytime) Back-port #29893 to 2015.8 PR #30033: (rallytime) Back-port #29876 to 2015.8 PR #30029: (terminalmage) git.latest: Fix handling of nonexistent branches PR #30016: (anlutro) Properly normalize locales in locale.gen_locale PR #30015: (anlutro) locale module: don't escape the slash in \n PR #30022: (gqgunhed) Two minor typos fixed PR #30026: (anlutro) states.at: fix wrong variable being used PR #29966: (multani) Fix bigip state/module documentation + serializers documentation PR #29904: (twangboy) Improvements to osx packaging scripts PR #29950: (multani) boto_iam: fix deletion of IAM users when using delete_keys=3Dtrue PR #29937: (multani) Fix states.boto_iam group users PR #29934: (multani) Fix state.boto_iam virtual name PR #29943: (cachedout) Check args correctly in boto_rds PR #29924: (gqgunhed) fixed: uptime now working on non-US Windows PR #29883: (serge-p) fix for nfs mounts in _active_mounts_openbsd() PR #29894: (techhat) Support Saltfile in SPM PR #29856: (rallytime) Added some initial unit tests for the salt.modules.vsphere.py file PR #29855: (rallytime) Back-port #29740 to 2015.8 PR #29890: (multani) Various documentation fixes PR #29850: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #29811: (anlutro) influxdb: add retention policy module functions PR #29814: (basepi) [2015.8][Windows] Fix multi-master on windows PR #29819: (rallytime) Add esxi module and state to docs build PR #29832: (jleimbach) Fixed typo in order to use the keyboard module for R= HEL without systemd PR #29803: (rallytime) Add vSphere module to doc ref module tree PR #29767: (abednarik) Hosts file update in mod_hostname. PR #29772: (terminalmage) pygit2: skip submodules when traversing tree PR #29765: (gtmanfred) allow nova driver to be boot from volume PR #29773: (l2ol33rt) Append missing wget in debian installation guide PR #29800: (rallytime) Back-port #29769 to 2015.8 PR #29775: (paulnivin) Change listen requisite resolution from name to ID declaration PR #29754: (rallytime) Back-port #29719 to 2015.8 PR #29713: (The-Loeki) Pillar-based cloud providers still forcing use of deprecated 'provider' PR #29729: (rallytime) Further clarifications on "unless" and "onlyif" requisites. PR #29737: (akissa) fix pillar sqlite3 documentation examples PR #29743: (akissa) fix pillar sqlite not honouring config options PR #29723: (rallytime) Clarify db_user and db_password kwargs for postgres_user.present state function PR #29722: (rallytime) Link "stateful" kwargs to definition of what "statef= ul" means for cmd state. PR #29724: (rallytime) Add examples of using multiple matching levels to Pi= llar docs PR #29726: (cachedout) Disable some boto tests per resolution of moto issue PR #29708: (lagesag) Fix test=3DTrue for file.directory with recurse ignore_files/ignore_dirs. PR #29642: (cachedout) Correctly restart deamonized minions on failure PR #29599: (cachedout) Clean up minion shutdown PR #29675: (clinta) allow returning all refs PR #29683: (rallytime) Catch more specific error to pass the error message through elegantly. PR #29687: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #29681: (clinta) fix bare/mirror in git.latest PR #29644: (rallytime) Fixed a couple more ESXi proxy minion bugs PR #29645: (rallytime) Back-port #29558 to 2015.8 PR #29632: (jfindlay) reduce severity of tls module __virtual__ logging PR #29606: (abednarik) Fixed duplicate mtu entry in RedHat 7 network configuration. PR #29613: (rallytime) Various ESXi Proxy Minion Bug Fixes PR #29628: (DmitryKuzmenko) Don't create io_loop before fork PR #29609: (basepi) [2015.8][salt-ssh] Add ability to set salt-ssh command = umask in roster PR #29603: (basepi) Fix orchestration failure-checking PR #29597: (terminalmage) dockerng: Prevent exception when API response con= tains empty dictionary PR #29596: (rallytime) Back-port #29587 to 2015.8 PR #29588: (rallytime) Added ESXi Proxy Minion Tutorial PR #29572: (gtmanfred) [nova] use old discover_extensions if available PR #29545: (terminalmage) git.latest: init submodules if not yet initialize= d PR #29548: (rallytime) Back-port #29449 to 2015.8 PR #29547: (rallytime) Refactored ESXCLI-based functions to accept a list o= f esxi_hosts PR #29563: (anlutro) Fix a call to deprecated method in python-influxdb PR #29565: (bdrung) Fix typos and missing release note PR #29540: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #29499: (rallytime) Initial commit of ESXi Proxy Minion PR #29526: (jfindlay) 2015.8.2 notes: add note about not being released PR #29531: (jfindlay) grains.core: handle undefined variable PR #29538: (basepi) [2015.8] [salt-ssh] Remove umask around actual executio= n for salt-ssh PR #29505: (rallytime) Update boto_rds state docs to include funky yaml syn= tax for "tags" option. PR #29513: (bdrung) Drop obsolete syslog.target from systemd services PR #29500: (rallytime) Back-port #29467 to 2015.8 PR #29463: (abednarik) Add **kwargs to debconf.set. PR #29399: (jfindlay) modules.status: add human_readable option to uptime PR #29433: (cro) Files for building .pkg files for MacOS X PR #29455: (jfindlay) modules.nova.__init__: do not return None PR #29454: (jfindlay) rh_service module __virtual__ return error messages PR #29476: (tbaker57) Doc fix - route_table_present needs subnet_names (not subnets) as a key PR #29487: (rallytime) Back-port #29450 to 2015.8 PR #29441: (rallytime) Make sure docs line up with blade_idrac function spe= cs PR #29440: (rallytime) Back-port #28925 to 2015.8 PR #29435: (galet) Grains return wrong OS version and other OS related valu= es for Oracle Linux PR #29430: (rall0r) Fix host.present state limitation PR #29417: (jacobhammons) Repo install updates PR #29402: (techhat) Add rate limiting to linode PR #29400: (twangboy) Fix #19332 PR #29398: (cachedout) Lint 29288 PR #29331: (DmitryKuzmenko) Bugfix - #29116 raet dns error PR #29390: (jacobhammons) updated version numbers in documentation PR #29381: (nmadhok) No need to deepcopy since six.iterkeys() creates a cop= y PR #29349: (cro) Fix mis-setting chassis names PR #29334: (rallytime) Back-port #29237 to 2015.8 PR #29300: (ticosax) [dockerng] Add support for volume management in docker= ng PR #29218: (clan) check service enable state in test mode PR #29315: (jfindlay) dev tutorial doc: fix markup errors PR #29317: (basepi) [2015.8] Merge forward from 2015.5 to 2015.8 PR #29240: (clan) handle acl_type [[d]efault:][user|group|mask|other] PR #29305: (lorengordon) Add 'file' as a source_hash proto PR #29272: (jfindlay) win_status module: handle 12 hour time in uptime PR #29289: (terminalmage) file.managed: Allow local file sources to use source_hash PR #29264: (anlutro) Prevent ssh_auth.absent from running when test=3DTrue PR #29277: (terminalmage) Update git_pillar runner to support new git ext_p= illar config schema PR #29283: (cachedout) Single-quotes and use format PR #29139: (thomaso-mirodin) [salt-ssh] Add a range roster and range target= ing options for the flat roster PR #29282: (cachedout) dev docs: add development tutorial PR #28994: (timcharper) add support to s3 for aws role assumption PR #29278: (techhat) Add verify_log to SPM PR #29067: (jacksontj) Fix infinite recursion in state compiler for prereq = of SLSs PR #29207: (jfindlay) do not shadow ret function argument PR #29215: (rallytime) Back-port #29192 to 2015.8 PR #29217: (clan) show duration only if state_output_profile is False PR #29221: (ticosax) [dokcerng] Docu network mode PR #29269: (jfindlay) win_status module: fix function names in docs PR #29213: (rallytime) Move _wait_for_task func from vmware cloud to vmware utils PR #29271: (techhat) Pass full path for digest (SPM) PR #29244: (isbm) List products consistently across all SLES systems PR #29255: (garethgreenaway) fixes to consul module PR #29208: (whytewolf) Glance more profile errors PR #29200: (jfindlay) mount state: unmount by device is optional PR #29205: (trevor-h) Fixes #29187 - using winrm on EC2 PR #29170: (cachedout) Migrate pydsl tests to integration test suite PR #29198: (jfindlay) rh_ip module: only set the mtu once PR #29135: (jfindlay) ssh_known_hosts.present state: catch not found exc PR #29196: (s0undt3ch) We need novaclient imported to compare versions PR #29059: (terminalmage) Work around upstream pygit2 bug PR #29112: (eliasp) Prevent backtrace (KeyError) in ssh_known_hosts.present state To generate a diff of this commit: cvs rdiff -u -r1.34 -r1.35 pkgsrc/sysutils/salt/Makefile cvs rdiff -u -r1.14 -r1.15 pkgsrc/sysutils/salt/PLIST cvs rdiff -u -r1.17 -r1.18 pkgsrc/sysutils/salt/distinfo ------------------------------------------------------------------- Module Name: pkgsrc Committed By: wiz Date: Tue Feb 9 14:23:04 UTC 2016 Modified Files: pkgsrc/sysutils/salt: Makefile distinfo Added Files: pkgsrc/sysutils/salt/patches: patch-salt_modules_cron.py Log Message: Add upstream patch fixing problem with cron on Solaris. >From Travis Paul in PR 50567. Bump PKGREVISION. To generate a diff of this commit: cvs rdiff -u -r1.35 -r1.36 pkgsrc/sysutils/salt/Makefile cvs rdiff -u -r1.18 -r1.19 pkgsrc/sysutils/salt/distinfo cvs rdiff -u -r0 -r1.1 \ pkgsrc/sysutils/salt/patches/patch-salt_modules_cron.py @ text @d1 1 a1 1 # $NetBSD$ d3 1 a3 2 DISTNAME= salt-2015.8.5 PKGREVISION= 1 @ 1.32 log @Fix typo in Makefile. Noted by Travis Paul in PR 50503. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.31 2015/12/05 21:25:59 adam Exp $ d3 1 a3 2 DISTNAME= salt-2015.8.1 PKGREVISION= 2 d5 1 a5 1 MASTER_SITES= https://pypi.python.org/packages/source/s/salt/ d60 1 d66 2 @ 1.31 log @Extend PYTHON_VERSIONS_INCOMPATIBLE to 35 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.30 2015/12/04 09:13:33 sborrill Exp $ d4 1 a4 1 PKGREVISION= 1 d31 1 a31 1 PYSETUPINSTALLARGS+= --salt-sock-dir==${VARBASE}/run/salt @ 1.30 log @Add dependency on www/py-tornado. Fixes PR/50494 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.29 2015/11/10 14:48:39 sborrill Exp $ d26 1 a26 1 PYTHON_VERSIONS_INCOMPATIBLE= 33 34 # py-m2crypto @ 1.29 log @Update to 2015.8.1 Changelogs from 2014.7.2: https://docs.saltstack.com/en/develop/topics/releases/2015.8.1.html https://docs.saltstack.com/en/develop/topics/releases/2015.8.0.html https://docs.saltstack.com/en/develop/topics/releases/2015.5.6.html https://docs.saltstack.com/en/develop/topics/releases/2015.5.5.html https://docs.saltstack.com/en/develop/topics/releases/2015.5.4.html https://docs.saltstack.com/en/develop/topics/releases/2015.5.3.html https://docs.saltstack.com/en/develop/topics/releases/2015.5.2.html https://docs.saltstack.com/en/develop/topics/releases/2015.5.1.html https://docs.saltstack.com/en/develop/topics/releases/2015.5.0.html https://docs.saltstack.com/en/develop/topics/releases/2014.7.6.html https://docs.saltstack.com/en/develop/topics/releases/2014.7.5.html https://docs.saltstack.com/en/develop/topics/releases/2014.7.4.html https://docs.saltstack.com/en/develop/topics/releases/2014.7.3.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.28 2015/10/14 15:46:34 jperkin Exp $ d4 1 d22 1 @ 1.28 log @Ensure pkgsrc directories are in PATH, fixes pkg module load failures. Fix submitted by Travis Paul. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.27 2015/07/24 10:24:27 jperkin Exp $ d3 1 a3 2 DISTNAME= salt-2014.7.2 PKGREVISION= 2 @ 1.27 log @Add SMF manifest, contributed by Jasper Siepkes in joyent/pkgsrc#279. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2015/02/23 13:58:13 imil Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.26 log @Updated salt to version 2014.7.2 Version 2014.7.2 is a bugfix release for 2014.7.0. The changes include: Fix erroneous warnings for systemd service enabled check (issue 19606) Fix FreeBSD kernel module loading, listing, and persistence kmod (issue 197151, issue 19682) Allow case-sensitive npm package names in the npm state. This may break behavior for people expecting the state to lowercase their npm package names for them. The npm module was never affected by mandatory lowercasing. (issue 20329) Deprecate the activate parameter for pip.install for both the module and the state. If bin_env is given and points to a virtualenv, there is no need to activate that virtualenv in a shell for pip to install to the virtualenv. Fix a file-locking bug in gitfs (issue 18839) Deprecated archive_user in favor of standardized user parameter in state and added group parameter. Salt 2014.7.0 changes * New Transport * RAET Transport Option * Salt SSH Enhancements * Install salt-ssh Using pip * Fileserver Backends * Saltfile Support * Ext Pillar * No More sshpass * Pure Python Shim * Custom Module Delivery * CP Module Support * More Thin Directory Options * State System Enhancements * New Imperative State Keyword "Listen" * Mod Aggregate Runtime Manipulator * New Requisites: onchanges and onfail * Global onlyif and unless * Use names to expand and override values * Major Features * Scheduler Additions * Red Hat 7 Family Support * Fileserver Backends in salt-call * Amazon Execution Modules * LXC Runner Enhancements * Next Gen Docker Management * Peer System Performance Improvements * SDB * GPG Renderer * OpenStack Expansion * Queues System * Multi Master Failover Additions * Chef Execution Module * salt-api Project Merge * Synchronous and Asynchronous Execution of Runner and Wheel Modules * rest_cherrypy Additions * Web Hooks * Generating and Accepting Minion Keys * Fileserver Backend Enhancements * New gitfs Features * Pygit2 and Dulwich * Mountpoints * Environment Whitelisting/Blacklisting * Expanded Authentication Support * New hgfs Features * Mountpoints * Environment Whitelisting/Blacklisting * New svnfs Features * Mountpoints * Environment Whitelisting/Blacklisting * Configurable Trunk/Branches/Tags Paths * New minionfs Features * Mountpoint * Changing the Saltenv from Which Files are Served * Minion Whitelisting/Blacklisting * Pyobjects Renderer * New Modules * New Runners * New External Pillars * New Salt-Cloud Providers * Salt Call Change * Deprecations * salt.modules.virtualenv_mod @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.25 2014/11/05 16:52:00 imil Exp $ d4 1 d40 1 @ 1.25 log @Updated salt to version 2014.1.13 Changes: * http://docs.saltstack.com/en/latest/topics/releases/2014.1.11.html * http://docs.saltstack.com/en/latest/topics/releases/2014.1.12.html * http://docs.saltstack.com/en/latest/topics/releases/2014.1.13.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.24 2014/08/14 15:23:53 imil Exp $ d3 1 a3 1 DISTNAME= salt-2014.1.13 d20 1 d57 1 a57 1 SUBST_FILES.fix-paths+= doc/man/* salt/modules/munin.py d62 1 @ 1.24 log @Updated Salt to version 2014.1.10 Details: http://docs.saltstack.com/en/latest/topics/releases/2014.1.4.html http://docs.saltstack.com/en/latest/topics/releases/2014.1.5.html http://docs.saltstack.com/en/latest/topics/releases/2014.1.6.html http://docs.saltstack.com/en/latest/topics/releases/2014.1.7.html http://docs.saltstack.com/en/latest/topics/releases/2014.1.8.html http://docs.saltstack.com/en/latest/topics/releases/2014.1.9.html http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.23 2014/05/09 07:37:20 wiz Exp $ d3 1 a3 1 DISTNAME= salt-2014.1.10 @ 1.23 log @Mark packages that are not ready for python-3.3 also not ready for 3.4, until proven otherwise. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.22 2014/05/06 10:57:48 imil Exp $ d3 1 a3 2 DISTNAME= salt-2014.1.3 PKGREVISION= 1 @ 1.22 log @More hardcoded paths fixing, here the munin module has its configuration hardcoded to plain /etc/munin. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2014/04/18 11:25:06 imil Exp $ d24 1 a24 1 PYTHON_VERSIONS_INCOMPATIBLE= 33 # py-m2crypto @ 1.21 log @Updated to 2014.1.3, thus fixing a severe regression that appeared in 2014.1.2 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2014/04/17 16:33:47 imil Exp $ d4 1 d57 1 a57 1 SUBST_FILES.fix-paths+= doc/man/* d61 1 @ 1.20 log @Bumped PKGREVISION: added net/py-apache-libcloud as a dependency so salt-cloud could run. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2014/04/17 11:24:11 imil Exp $ d3 1 a3 2 DISTNAME= salt-2014.1.2 PKGREVISION= 1 @ 1.19 log @Updated to Salt 2014.1.2, another bugfix release for 2014.1.0. Full changelog http://docs.saltstack.com/en/latest/topics/releases/2014.1.2.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2014/03/30 12:31:17 imil Exp $ d4 1 d20 1 @ 1.18 log @Updated salt to 2014.1.1, numerous bug and security fixes Details: * http://docs.saltstack.com/en/latest/topics/releases/0.16.4.html * http://docs.saltstack.com/en/latest/topics/releases/0.17.0.html * http://docs.saltstack.com/en/latest/topics/releases/0.17.1.html * http://docs.saltstack.com/en/latest/topics/releases/0.17.2.html * http://docs.saltstack.com/en/latest/topics/releases/0.17.3.html * http://docs.saltstack.com/en/latest/topics/releases/0.17.4.html * http://docs.saltstack.com/en/latest/topics/releases/0.17.5.html * http://docs.saltstack.com/en/latest/topics/releases/2014.1.1.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2014/01/27 18:41:15 wiz Exp $ d3 1 a3 1 DISTNAME= salt-2014.1.1 @ 1.17 log @Do not set FETCH_USING, should not be set in a package Makefile. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 2014/01/25 10:30:22 wiz Exp $ d3 1 a3 1 DISTNAME= salt-0.16.3 d20 2 d24 9 a32 13 SUBST_CLASSES+= fix-paths SUBST_STAGE.fix-paths= post-patch SUBST_MESSAGE.fix-paths=Fixing directory paths. SUBST_FILES.fix-paths+= conf/* SUBST_FILES.fix-paths+= doc/man/* SUBST_FILES.fix-paths+= salt/client.py SUBST_FILES.fix-paths+= salt/config.py SUBST_FILES.fix-paths+= salt/modules/mysql.py SUBST_FILES.fix-paths+= salt/modules/postgres.py SUBST_FILES.fix-paths+= salt/modules/tls.py SUBST_FILES.fix-paths+= salt/utils/parsers.py SUBST_FILES.fix-paths+= salt/utils/migrations.py SUBST_SED.fix-paths+= -e "s|/etc/salt|${PKG_SYSCONFDIR}|g" d34 1 a34 2 REPLACE_PYTHON+= salt/modules/munin.py REPLACE_PYTHON+= salt/returners/sentry_return.py d46 14 @ 1.16 log @Mark packages as not ready for python-3.x where applicable; either because they themselves are not ready or because a dependency isn't. This is annotated by PYTHON_VERSIONS_INCOMPATIBLE= 33 # not yet ported as of x.y.z or PYTHON_VERSIONS_INCOMPATIBLE= 33 # py-foo, py-bar respectively, please use the same style for other packages, and check during updates. Use versioned_dependencies.mk where applicable. Use REPLACE_PYTHON instead of handcoded alternatives, where applicable. Reorder Makefile sections into standard order, where applicable. Remove PYTHON_VERSIONS_INCLUDE_3X lines since that will be default with the next commit. Whitespace cleanups and other nits corrected, where necessary. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2013/08/17 18:30:02 imil Exp $ a5 1 FETCH_USING= curl @ 1.15 log @Updated salt to version 0.16.3. Many changes and updates since version 0.15.3, see: . http://docs.saltstack.com/topics/releases/0.16.0.html . http://docs.saltstack.com/topics/releases/0.16.2.html . http://docs.saltstack.com/topics/releases/0.16.3.html @ text @d1 1 a1 2 # $NetBSD: Makefile,v 1.14 2013/06/15 15:04:39 imil Exp $ # d13 10 a63 8 DEPENDS+= zeromq>=2.1.9:../../net/zeromq DEPENDS+= ${PYPKGPREFIX}-zmq>=2.1.9:../../net/py-zmq DEPENDS+= ${PYPKGPREFIX}-m2crypto-[0-9]*:../../security/py-m2crypto DEPENDS+= ${PYPKGPREFIX}-crypto-[0-9]*:../../security/py-crypto DEPENDS+= ${PYPKGPREFIX}-msgpack-[0-9]*:../../devel/py-msgpack DEPENDS+= ${PYPKGPREFIX}-yaml-[0-9]*:../../textproc/py-yaml DEPENDS+= ${PYPKGPREFIX}-jinja2-[0-9]*:../../textproc/py-jinja2 @ 1.14 log @Updated to version 0.15.3, bugfix release @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2013/05/11 18:26:19 imil Exp $ d4 1 a4 1 DISTNAME= salt-0.15.3 d6 2 a7 1 MASTER_SITES= http://pypi.python.org/packages/source/s/salt/ @ 1.13 log @Updated to version 0.15.1 This release fixes a serious security issue found in the way that RSA keys were being generated. It recommended that existing Salt keys be regenerated once 0.15.1 has been deployed on the master and all minions. A 'key_regen' routine has been added to 0.15.1 to make this transition easier. The following sequence is a convenient way to regenerate all keys in an environment: salt-run manage.key_regen You will be prompted to restart the master. Once completed, all keys in the environment will have been regenerated and you will need to accept the new keys using the following command: salt-key -A @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2013/05/05 12:26:23 imil Exp $ d4 1 a4 1 DISTNAME= salt-0.15.1 @ 1.12 log @. Fixed rc.d script by adding comment_interpreter . Updated salt to version 0.15.0 From SaltStack website: Salt 0.15.0 comes with many smaller features and a few larger ones. The Salt Mine First there was the peer system, allowing for commands to be executed from a minion to other minions to gather data live. Then there was the external job cache for storing and accessing long term data. Now the middle ground is being filled in with the Salt Mine. The Salt Mine is a system used to execute functions on a regular basis on minions and then store only the most recent data from the functions on the master, then the data is looked up via targets. The mine caches data that is public to all minions, so when a minion posts data to the mine all other minions can see it. IPV6 Support 0.13.0 saw the addition of initial IPV6 support but errors were encountered and it needed to be stripped out. This time the code covers more cases and must be explicitly enabled. But the support is much more extensive than before. Copy Files From Minions to the Master Minions have long been able to copy files down from the master file server, but until now files could not be easily copied from the minion up to the master. A new function called cp.push can push files from the minions up to the master server. The uploaded files are then cached on the master in the master cachedir for each minon. Better Template Debugging Template errors have long been a burden when writing states and pillar. 0.15.0 will now send the compiled template data to the debug log, this makes tracking down the intermittent stage templates much easier. So running state.sls or state.highstate with -l debug will now print out the rendered templates in the debug information. State Event Firing The state system is now more closely tied to the master's event bus. Now when a state fails the failure will be fired on the master event bus so that the reactor can respond to it. Major Syndic Updates The Syndic system has been basically re-written. Now it runs in a completely asynchronous way and functions primarily as an event broker. This means that the events fired on the syndic are now pushed up to the higher level master instead of the old method used which waited for the client libraries to return. This makes the syndic much more accurate and powerful, it also means that all events fired on the syndic master make it up the pipe as well making a reactor on the higher level master able to react to minions further downstream. Peer System Updates The Peer System has been updated to run using the client libraries instead of firing directly over the publish bus. This makes the peer system much more consistent and reliable. Minion Key Revocation In the past when a minion was decommissioned the key needed to be manually deleted on the master, but now a function on the minion can be used to revoke the calling minion's key: salt-call saltutil.revoke_auth Function Return Codes Functions can now be assigned numeric return codes to determine if the function executed successfully. While not all functions have been given return codes, many have and it is an ongoing effort to fill out all functions that might return a non-zero return code. Functions in Overstate The overstate system was originally created to just manage the execution of states, but with the addition of return codes to functions, requisite logic can now be used with respect to the overstate. This means that an overstate stage can now run single functions instead of just state executions. Pillar Error Reporting Previously if errors surfaced in pillar, then the pillar would consist of only and empty dict. Now all data that was successfully rendered stays in pillar and the render error is also made available. If errors are found in the pillar, states will refuse to run. Using Cached State Data Sometimes states are executed purely to maintain a specific state rather than to update states with new configs. This is grounds for the new cached state system. By adding cache=True to a state call the state will not be generated fresh from the master but the last state data to be generated will be used. If no previous state data is available then fresh data will be generated. Monitoring States The new monitoring states system has been started. This is very young but allows for states to be used to configure monitoring routines. So far only one monitoring state is available, the disk.status state. As more capabilities are added to Salt UI the monitoring capabilities of Salt will continue to be expanded. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2013/04/28 09:46:24 imil Exp $ d4 1 a4 1 DISTNAME= salt-0.15.0 @ 1.11 log @Update salt from 0.10.5 to 0.14.1 Major features . Salt - As a Cloud Controller . Libvirt State . New get Functions Full changelog is available at: http://docs.saltstack.com/topics/releases/0.14.0.html?highlight=changes @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2012/12/06 08:01:21 apb Exp $ d4 1 a4 1 DISTNAME= salt-0.14.1 d27 6 d35 4 a38 6 EGDIR= ${PREFIX}/share/examples/salt INSTALLATION_DIRS+= ${EGDIR} CONF_FILES+= ${EGDIR}/master ${PKG_SYSCONFDIR}/master CONF_FILES+= ${EGDIR}/minion ${PKG_SYSCONFDIR}/minion RCD_SCRIPTS+= salt_master salt_minion d52 1 @ 1.10 log @Update salt from 0.9.5 to 0.10.5. The new DESCR is taken from the "Introduction to Salt" at . Here's a copy of the introductory paragraphs from the release notes for all the intervening versions: Salt 0.9.6 Release Notes ======================== Salt 0.9.6 is a release targeting a few bugs and changes. This is primarily targeting an issue found in the names declaration in the state system. But a few other bugs were also repaired, like missing support for grains in extmods. Due to a conflict in distribution packaging msgpack will no longer be bundled with Salt, and is required as a dependency. Salt 0.9.7 Release Notes ======================== Salt 0.9.7 is here! The latest iteration of Salt brings more features and many fixes. This release is a great refinement over 0.9.6, adding many conveniences under the hood, as well as some features that make working with Salt much better. A few highlights include the new Job system, refinements to the requisite system in states, the ``mod_init`` interface for states, external node classification, search path to managed files in the file state, and refinements and additions to dynamic module loading. 0.9.7 also introduces the long developed (and oft changed) unit test framework and the initial unit tests. Salt 0.9.8 Release Notes ======================== Salt 0.9.8 is a big step forward, with many additions and enhancements, as well as a number of precursors to advanced future developments. This version of Salt adds much more power to the command line, making the old hard timeout issues a thing of the past and adds keyword argument support. These additions are also available in the salt client api, making the available api tools much more powerful. The new pillar system allows for data to be stored on the master and assigned to minions in a granular way similar to the state system. It also allows flexibility for users who want to keep data out of their state tree similar to 'external lookup' functionality in other tools. A new way to extend requisites was added, the "requisite in" statement. This makes adding requires or watch statements to external state decs much easier. Additions to requisites making them much more powerful have been added as well as improved error checking for sls files in the state system. A new provider system has been added to allow for redirecting what modules run in the background for individual states. Support for OpenSUSE has been added and support for Solaris has begun serious development. Windows support has been significantly enhanced as well. The matcher and target systems have received a great deal of attention. The default behavior of grain matching has changed slightly to reflect the rest of salt and the compound matcher system has been refined. A number of impressive features with keyword arguments have been added to both the cli and to the state system. This makes states much more powerful and flexible while maintaining the simple configuration everyone loves. The new batch size capability allows for executions to be rolled through a group of targeted minions a percentage or specific number at a time. This was added to prevent the "thundering herd" problem when targeting large numbers of minions for things like service restarts or file downloads. Salt 0.9.9 Release Notes ======================== 0.9.9 is out and comes with some serious bug fixes and even more serious features. This release is the last major feature release before 1.0.0 and could be considered the 1.0.0 release candidate. A few updates include more advanced kwargs support, the ability for salt states to more safely configure a running salt minion, better job directory management and the new state test interface. Many new tests have been added as well, including the new minion swarm test that allows for easier testing of Salt working with large groups of minions. This means that if you have experienced stability issues with Salt before, particularly in larger deployments, that these bugs have been tested for, found, and killed. Salt 0.10.0 Release Notes ========================= 0.10.0 has arrived! This release comes with MANY bug fixes, and new capabilities which greatly enhance performance and reliability. This release is primarily a bug fix release with many new tests and many repaired bugs. This release also introduces a few new key features which were brought in primarily to repair bugs and some limitations found in some of the components of the original architecture. Salt 0.10.2 Release Notes ========================= 0.10.2 is out! This release comes with enhancements to the pillar interface, cleaner ways to access the salt-call capabilities in the API, minion data caching and the event system has been added to salt minions. There have also been updates to the zeromq functions, many more tests (thanks to sponsors, the code sprint and many contributors) and a swath of bug fixes. Salt 0.10.3 Release Notes ========================= The latest taste of Salt has come, this release has many fixes and feature additions. Modifications have been made to make ZeroMQ connections more reliable, the begining of the ACL system is in place, a new command line parsing system has been added, dynamic module distribution has become more environment aware, the new `master_finger` option and many more! Salt 0.10.4 Release Notes ========================= Salt 0.10.4 is a monumental release for the Salt team, with two new module systems, many additions to allow granular access to Salt, improved platform support and much more. This release is also exciting because we have been able to shorten the release cycle back to under a month. We are working hard to keep up the aggressive pace and look forward to having releases happen more frequently! This release also includes a serious security fix and all users are very strongly recommended to upgrade. As usual, upgrade the master first, and then the minion to ensure that the process is smooth. Salt 0.10.5 Release Notes ========================= Salt 0.10.5 is ready, and comes with some great new features. A few more interfaces have been modularized, like the outputter system. The job cache system has been made more powerful and can now store and retrieve jobs archived in external databases. The returner system has been extended to allow minions to easily retrieve data from a returner interface. As usual, this is an exciting release, with many noteworthy additions! @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2012/10/23 19:51:22 asau Exp $ d4 1 a4 1 DISTNAME= salt-0.10.5 d6 1 a6 1 MASTER_SITES= http://cloud.github.com/downloads/saltstack/salt/ d24 1 d31 2 a32 2 CONF_FILES+= ${EGDIR}/master.template ${PKG_SYSCONFDIR}/master CONF_FILES+= ${EGDIR}/minion.template ${PKG_SYSCONFDIR}/minion d37 2 a38 2 ${INSTALL_DATA} ${WRKSRC}/conf/master.template ${DESTDIR}${EGDIR}/ ${INSTALL_DATA} ${WRKSRC}/conf/minion.template ${DESTDIR}${EGDIR}/ @ 1.9 log @Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2012/10/05 09:37:53 wiz Exp $ d4 1 a4 2 DISTNAME= salt-0.9.5 PKGREVISION= 2 a17 2 SUBST_FILES.fix-paths+= salt/__init__.py SUBST_FILES.fix-paths+= salt/cli/__init__.py d21 3 d29 3 a31 2 CONF_FILES+= ${EGDIR}/master ${PKG_SYSCONFDIR}/master CONF_FILES+= ${EGDIR}/minion ${PKG_SYSCONFDIR}/minion d35 12 d52 1 d54 1 @ 1.8 log @Remove PYTHON_VERSIONS_ACCEPTED line since it's the default. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2012/10/05 09:35:52 apb Exp $ a13 2 PKG_DESTDIR_SUPPORT= user-destdir @ 1.7 log @salt appears to work with python-2.7, not only 2.6. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2012/03/16 04:31:16 obache Exp $ a35 1 PYTHON_VERSIONS_ACCEPTED= 26 27 @ 1.6 log @Bump PKGREVISION from default python change to 2.7. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2012/03/15 11:53:39 obache Exp $ d36 1 a36 1 PYTHON_VERSIONS_ACCEPTED= 26 @ 1.5 log @Bump PKGREVISION from default python to 2.7. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2012/02/12 13:43:21 obache Exp $ d5 1 a5 1 PKGREVISION= 1 @ 1.4 log @Switch MASTER_SITES to http acceptable one. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2012/02/12 13:40:44 obache Exp $ d5 1 @ 1.3 log @Fix HOMEPAGE url. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2012/02/12 13:28:03 wiz Exp $ d6 1 a6 1 MASTER_SITES= https://github.com/downloads/saltstack/salt/ a14 2 FETCH_USING= curl @ 1.2 log @Set FETCH_USING curl as workaround for https master site. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2012/01/21 20:26:58 apb Exp $ d9 1 a9 1 HOMEPAGE= https://github.com/downloads/saltstack/salt/ @ 1.1 log @Add salt-0.9.5 Salt is a powerful remote execution manager that can be used to administer servers in a fast and efficient way. @ text @d1 1 a1 1 # $NetBSD$ d15 2 @