head	1.25;
access;
symbols
	pkgsrc-2026Q1:1.23.0.2
	pkgsrc-2026Q1-base:1.23
	pkgsrc-2025Q4:1.21.0.2
	pkgsrc-2025Q4-base:1.21
	pkgsrc-2025Q3:1.18.0.2
	pkgsrc-2025Q3-base:1.18
	pkgsrc-2025Q2:1.17.0.4
	pkgsrc-2025Q2-base:1.17
	pkgsrc-2025Q1:1.17.0.2
	pkgsrc-2025Q1-base:1.17
	pkgsrc-2024Q4:1.14.0.2
	pkgsrc-2024Q4-base:1.14
	pkgsrc-2024Q3:1.12.0.2
	pkgsrc-2024Q3-base:1.12
	pkgsrc-2024Q2:1.11.0.4
	pkgsrc-2024Q2-base:1.11
	pkgsrc-2024Q1:1.11.0.2
	pkgsrc-2024Q1-base:1.11
	pkgsrc-2023Q4:1.10.0.2
	pkgsrc-2023Q4-base:1.10
	pkgsrc-2023Q3:1.9.0.4
	pkgsrc-2023Q3-base:1.9
	pkgsrc-2023Q2:1.9.0.2
	pkgsrc-2023Q2-base:1.9
	pkgsrc-2023Q1:1.8.0.2
	pkgsrc-2023Q1-base:1.8
	pkgsrc-2022Q4:1.7.0.2
	pkgsrc-2022Q4-base:1.7
	pkgsrc-2022Q3:1.6.0.6
	pkgsrc-2022Q3-base:1.6
	pkgsrc-2022Q2:1.6.0.4
	pkgsrc-2022Q2-base:1.6
	pkgsrc-2022Q1:1.6.0.2
	pkgsrc-2022Q1-base:1.6
	pkgsrc-2021Q4:1.5.0.2
	pkgsrc-2021Q4-base:1.5
	pkgsrc-2021Q3:1.4.0.2
	pkgsrc-2021Q3-base:1.4
	pkgsrc-2021Q2:1.3.0.2
	pkgsrc-2021Q2-base:1.3
	pkgsrc-2021Q1:1.2.0.2
	pkgsrc-2021Q1-base:1.2;
locks; strict;
comment	@# @;


1.25
date	2026.05.15.09.58.58;	author adam;	state Exp;
branches;
next	1.24;
commitid	AbaMQjZsFUtxxTFG;

1.24
date	2026.04.23.13.11.14;	author adam;	state Exp;
branches;
next	1.23;
commitid	LMmwzKMhKxAmj5DG;

1.23
date	2026.02.06.11.01.42;	author adam;	state Exp;
branches;
next	1.22;
commitid	nRx15yveQDeu2jtG;

1.22
date	2026.02.02.09.48.56;	author adam;	state Exp;
branches;
next	1.21;
commitid	N7QojozVkZNnLMsG;

1.21
date	2025.10.19.13.49.29;	author adam;	state Exp;
branches;
next	1.20;
commitid	KJH6SY1YYQN4vbfG;

1.20
date	2025.09.27.09.57.32;	author wiz;	state Exp;
branches;
next	1.19;
commitid	GSXfRJoW2938VkcG;

1.19
date	2025.09.27.07.00.56;	author adam;	state Exp;
branches;
next	1.18;
commitid	6HIMr6Fv89hPWjcG;

1.18
date	2025.08.20.11.35.07;	author wiz;	state Exp;
branches;
next	1.17;
commitid	lgT5N7I1hRAxGs7G;

1.17
date	2025.02.19.18.02.21;	author wiz;	state Exp;
branches;
next	1.16;
commitid	tgBBFLeqwXb7G6KF;

1.16
date	2025.01.27.23.03.10;	author wiz;	state Exp;
branches;
next	1.15;
commitid	GSQETUqX5bxk5bHF;

1.15
date	2024.12.29.15.09.56;	author adam;	state Exp;
branches;
next	1.14;
commitid	oeKjyQMgtu2FopDF;

1.14
date	2024.11.22.15.31.29;	author ryoon;	state Exp;
branches;
next	1.13;
commitid	U1iCBeeuP6ISHEyF;

1.13
date	2024.10.04.03.49.32;	author ryoon;	state Exp;
branches;
next	1.12;
commitid	W6qyL3zvAllroisF;

1.12
date	2024.08.25.06.19.06;	author wiz;	state Exp;
branches;
next	1.11;
commitid	BcrSL94SO85mvanF;

1.11
date	2023.12.29.18.24.55;	author adam;	state Exp;
branches;
next	1.10;
commitid	CbzM4kTH4d8WeoSE;

1.10
date	2023.10.24.22.10.19;	author wiz;	state Exp;
branches;
next	1.9;
commitid	MTsrqKm6aGrQAVJE;

1.9
date	2023.04.23.14.26.28;	author adam;	state Exp;
branches;
next	1.8;
commitid	Laj8GRA8jxylXemE;

1.8
date	2023.01.22.17.34.20;	author ryoon;	state Exp;
branches;
next	1.7;
commitid	VyjPTi9ewVPgVyaE;

1.7
date	2022.12.08.21.27.21;	author he;	state Exp;
branches;
next	1.6;
commitid	9VEGVm8DLpzNEN4E;

1.6
date	2022.01.10.01.46.41;	author ryoon;	state Exp;
branches;
next	1.5;
commitid	Cj0KeHK24VPiN1oD;

1.5
date	2021.09.29.19.01.07;	author adam;	state Exp;
branches;
next	1.4;
commitid	WsBUbBM52TSePSaD;

1.4
date	2021.06.23.20.33.14;	author nia;	state Exp;
branches;
next	1.3;
commitid	L7RJ3CFGxS3ruiYC;

1.3
date	2021.04.21.13.25.09;	author adam;	state Exp;
branches;
next	1.2;
commitid	RAyVO2K5RkoQ8aQC;

1.2
date	2021.01.17.13.22.26;	author wiz;	state Exp;
branches;
next	1.1;
commitid	CxizHIYVwqUw95EC;

1.1
date	2021.01.15.00.37.17;	author wiz;	state Exp;
branches;
next	;
commitid	wH57GdvbJdc9ZKDC;


desc
@@


1.25
log
@revbump for boost-libs
@
text
@# $NetBSD: Makefile,v 1.24 2026/04/23 13:11:14 adam Exp $

DISTNAME=	icinga2-2.16.0
PKGREVISION=	1
CATEGORIES=	net sysutils
MASTER_SITES=	${MASTER_SITE_GITHUB:=icinga/}
GITHUB_TAG=	v${PKGVERSION_NOREV}

MAINTAINER=	ef@@math.uni-bonn.de
HOMEPAGE=	https://icinga.com/docs/icinga-2/latest/doc/01-about/
COMMENT=	Monitoring system
LICENSE=	gnu-gpl-v3

ICINGA2_USER?=		icinga
ICINGA2_GROUP?=		icinga
ICINGA2_COMMAND_GROUP?=	icingacmd

PLUGINDIR=		${PREFIX}/libexec/nagios

PKG_USERS=		${ICINGA2_USER}:${ICINGA2_GROUP}
PKG_GROUPS=		${ICINGA2_GROUP} ${ICINGA2_COMMAND_GROUP}
PKG_USERS_VARS+=	ICINGA2_USER
PKG_GROUPS_VARS+=	ICINGA2_GROUP ICINGA2_COMMAND_GROUP
BUILD_DEFS+=		ICINGA2_USER ICINGA2_GROUP ICINGA2_COMMAND_GROUP VARBASE PKG_SYSCONFBASE

USE_CXX_FEATURES=	c++17
USE_LANGUAGES=		c c++
USE_TOOLS+=		flex bison

RCD_SCRIPTS=		icinga2
FILES_SUBST+=		ICINGA2_USER=${ICINGA2_USER}
FILES_SUBST+=		ICINGA2_GROUP=${ICINGA2_GROUP} ICINGA2_COMMAND_GROUP=${ICINGA2_COMMAND_GROUP}
FILES_SUBST+=		NAGIOS_PLUGIN_STATE_DIRECTORY=${VARBASE}/spool/nagios
FILES_SUBST+=		RUNDIR=${RUNDIR}

PKG_SYSCONFSUBDIR=	icinga2
EGDIR_PARENT=		${PREFIX}/share/examples
EGDIR=			${EGDIR_PARENT}/icinga2
DOCDIR=			${PREFIX}/share/doc/icinga2
INSTALLATION_DIRS+=	${EGDIR} ${DOCDIR}
INSTALLATION_DIRS+=	${EGDIR_PARENT}/bash_completion.d
#! intall into BASHCOMPDIR=${PREFIX}/share/bash-completion/completions?
INSTALLATION_DIRS+=	${EGDIR}/conf.d
INSTALLATION_DIRS+=	${EGDIR}/features-available
INSTALLATION_DIRS+=	${EGDIR}/scripts
INSTALLATION_DIRS+=	${EGDIR}/zones.d

.include "../../mk/bsd.prefs.mk"
.include "options.mk"

RUNDIR_PARENT=		${VARBASE}/run
RUNDIR=			${RUNDIR_PARENT}/icinga2

SPOOLDIR_PARENT=		${VARBASE}/spool
SPOOLDIR=			${SPOOLDIR_PARENT}/icinga2
PKG_HOME.${ICINGA2_USER}=	${SPOOLDIR}

# All the _PERMS values are chosen to mimic what icinga2.spec says

MAKE_DIRS+=		${VARBASE}/cache
OWN_DIRS_PERMS+=	${VARBASE}/cache/icinga2 ${ICINGA2_USER} ${ICINGA2_COMMAND_GROUP} 0750
MAKE_DIRS+=		${VARBASE}/log
OWN_DIRS_PERMS+=	${VARBASE}/log/icinga2 ${ICINGA2_USER} ${ICINGA2_COMMAND_GROUP} 0755 # spec: 0750
OWN_DIRS_PERMS+=	${VARBASE}/log/icinga2/crash ${ICINGA2_USER} ${ICINGA2_GROUP} 0750
.if !empty(PKG_OPTIONS:Micinga2-compat)
OWN_DIRS_PERMS+=	${VARBASE}/log/icinga2/compat ${ICINGA2_USER} ${ICINGA2_COMMAND_GROUP} 0750
OWN_DIRS_PERMS+=	${VARBASE}/log/icinga2/archive ${ICINGA2_USER} ${ICINGA2_COMMAND_GROUP} 0750
.endif
MAKE_DIRS+=		${VARBASE}/lib
OWN_DIRS_PERMS+=	${VARBASE}/lib/icinga2 ${ICINGA2_USER} ${ICINGA2_COMMAND_GROUP} 0750
#OWN_DIRS+=		${VARBASE}/lib/icinga2/api
#OWN_DIRS+=		${VARBASE}/lib/icinga2/api/log
#OWN_DIRS+=		${VARBASE}/lib/icinga2/api/repository
#OWN_DIRS+=		${VARBASE}/lib/icinga2/api/zones
# These need to be created in the RC script since RUNDIR may reside on a tempfs
#MAKE_DIRS+=		${RUNDIR_PARENT}
#OWN_DIRS_PERMS+=	${RUNDIR} ${ICINGA2_USER} ${ICINGA2_COMMAND_GROUP} 0751 # spec: 0750
#OWN_DIRS_PERMS+=	${RUNDIR}/cmd ${ICINGA2_USER} ${ICINGA2_COMMAND_GROUP} 2750
MAKE_DIRS+=		${SPOOLDIR_PARENT}
OWN_DIRS_PERMS+=	${SPOOLDIR} ${ICINGA2_USER} ${ICINGA2_GROUP} 0750
.if !empty(PKG_OPTIONS:Micinga2-perfdata)
OWN_DIRS_PERMS+=	${SPOOLDIR}/perfdata ${ICINGA2_USER} ${ICINGA2_GROUP} 0770
.endif
OWN_DIRS_PERMS+=	${SPOOLDIR}/tmp ${ICINGA2_USER} ${ICINGA2_GROUP} 0750

#OWN_DIRS_PERMS+=	${PKG_SYSCONFDIR} ${REAL_ROOT_USER} ${ICINGA2_GROUP} 0750
OWN_DIRS_PERMS+=	${PKG_SYSCONFDIR}/conf.d ${ICINGA2_USER} ${ICINGA2_GROUP} 0750
.for f in app commands downtimes groups hosts notifications services templates timeperiods users
CONF_FILES_PERMS+=	${EGDIR}/conf.d/${f}.conf ${PKG_SYSCONFDIR}/conf.d/${f}.conf ${ICINGA2_USER} ${ICINGA2_GROUP} 0640
.endfor
OWN_DIRS_PERMS+=	${PKG_SYSCONFDIR}/features-available ${ICINGA2_USER} ${ICINGA2_GROUP} 0750
OWN_DIRS_PERMS+=	${PKG_SYSCONFDIR}/features-enabled ${ICINGA2_USER} ${ICINGA2_GROUP} 0750
FEATURES=		api debuglog mainlog syslog
.if !empty(PKG_OPTIONS:Micinga2-checker)
FEATURES+=		checker
.endif
.if !empty(PKG_OPTIONS:Micinga2-compat)
FEATURES+=		command compatlog
.endif
.if !empty(PKG_OPTIONS:Micinga2-livestatus)
FEATURES+=		livestatus
.endif
.if !empty(PKG_OPTIONS:Mmysql)
FEATURES+=		ido-mysql
.endif
.if !empty(PKG_OPTIONS:Micinga2-notification)
FEATURES+=		notification
.endif
.if !empty(PKG_OPTIONS:Micinga2-perfdata)
FEATURES+=		elasticsearch gelf graphite influxdb influxdb2 opentsdb perfdata
.endif
.if !empty(PKG_OPTIONS:Mpgsql)
FEATURES+=		ido-pgsql
.endif
.for f in ${FEATURES}
CONF_FILES_PERMS+=	${EGDIR}/features-available/${f}.conf ${PKG_SYSCONFDIR}/features-available/${f}.conf ${ICINGA2_USER} ${ICINGA2_GROUP} 0640
.endfor
OWN_DIRS+=		${PKG_SYSCONFDIR}/scripts
.for f in mail-host-notification.sh mail-service-notification.sh
CONF_FILES_PERMS+=	${EGDIR}/scripts/${f} ${PKG_SYSCONFDIR}/scripts/${f} ${ICINGA2_USER} ${ICINGA2_GROUP} 0755
.endfor
OWN_DIRS_PERMS+=	${PKG_SYSCONFDIR}/zones.d ${ICINGA2_USER} ${ICINGA2_GROUP} 0750
.for f in constants.conf icinga2.conf zones.conf zones.d/README
CONF_FILES_PERMS+=	${EGDIR}/${f} ${PKG_SYSCONFDIR}/${f} ${ICINGA2_USER} ${ICINGA2_GROUP} 0640
.endfor
#OWN_DIRS+=		${PKG_SYSCONFDIR}/keys
#OWN_DIRS+=		${PKG_SYSCONFDIR}/pki

CMAKE_CONFIGURE_ARGS+=	-DICINGA2_USER=${ICINGA2_USER} -DICINGA2_GROUP=${ICINGA2_GROUP}
CMAKE_CONFIGURE_ARGS+=	-DICINGA2_GIT_VERSION_INFO=OFF
CMAKE_CONFIGURE_ARGS+=	-DICINGA2_COMMAND_GROUP=${ICINGA2_COMMAND_GROUP}
#CMAKE_CONFIGURE_ARGS+=	-DICINGA2_UNITY_BUILD=???	# Whether to perform a unity build; defaults to `ON`
#CMAKE_CONFIGURE_ARGS+=	-DICINGA2_LTO_BUILD=???		# Whether to use link time optimization (LTO); defaults to `OFF`
CMAKE_CONFIGURE_ARGS+=	-DICINGA2_PLUGINDIR=${PLUGINDIR}
CMAKE_CONFIGURE_ARGS+=	-DICINGA2_RUNDIR=${RUNDIR_PARENT}
CMAKE_CONFIGURE_ARGS+=	-DCMAKE_INSTALL_SYSCONFDIR=${PKG_SYSCONFBASE} # not PKG_SYSCONFDIR!
#CMAKE_CONFIGURE_ARGS+=	-DICINGA2_SYSCONFIGFILE=???	# Where to put the config file the initscript/systemd pulls it's dirs from; defaults to `CMAKE_INSTALL_PREFIX/etc/sysconfig/icinga2`
CMAKE_CONFIGURE_ARGS+=	-DCMAKE_INSTALL_LOCALSTATEDIR=${VARBASE}
# For ICINGA2_WITH_XXX see options.mk
CMAKE_CONFIGURE_ARGS+=	-DICINGA2_WITH_TESTS=OFF
CMAKE_CONFIGURE_ARGS+=	-DCMAKE_POLICY_VERSION_MINIMUM=3.5

# The configuration files are installed in etc/icinga2.  You can't tell CMAKE
# to put them elsewhere because the program and the config files contain
# references to the config dir.  So move them to share/examples after
# installation.
post-install:
	${MV} ${DESTDIR}${PKG_SYSCONFDIR}/* ${DESTDIR}${EGDIR}

CHECK_FILES_SKIP=	${PREFIX}/etc/bash_completion.d/icinga2
CHECK_FILES_SKIP+=	${PREFIX}/share/examples/icinga2/features-enabled/checker.conf
CHECK_FILES_SKIP+=	${PREFIX}/share/examples/icinga2/features-enabled/mainlog.conf
CHECK_FILES_SKIP+=	${PREFIX}/share/examples/icinga2/features-enabled/notification.conf

#CMAKE_CONFIGURE_ARGS+=	-DCMAKE_SKIP_BUILD_RPATH=FALSE
#CMAKE_CONFIGURE_ARGS+=	-DCMAKE_BUILD_WITH_INSTALL_RPATH=FALSE
#CMAKE_CONFIGURE_ARGS+=	-DCMAKE_INSTALL_RPATH=${PREFIX}/lib/icinga2
#CMAKE_CONFIGURE_ARGS+=	-DCMAKE_INSTALL_RPATH_USE_LINK_PATH=FALSE

LDFLAGS+=	${COMPILER_RPATH_FLAG}${PREFIX}/lib/icinga2

.include "../../devel/boost-libs/buildlink3.mk"
.include "../../devel/cmake/build.mk"
.include "../../devel/libexecinfo/buildlink3.mk"
.include "../../devel/protobuf/buildlink3.mk"
.include "../../security/openssl/buildlink3.mk"
.include "../../mk/atomic64.mk"
.include "../../mk/bsd.pkg.mk"
@


1.24
log
@icinga2: updated to 2.16.0

2.16.0 (2026-04-23)

With this release the license of the project was updated to GPLv3 or later.

In this release we've added the `OTLPMetricsWriter`, a new perfdata writer targeting backends that support the
OpenTelemetry protocol. We recommend users to replace other perfdata writers with this one if possible, especially
`ElasticsearchWriter`, which is now deprecated and scheduled for removal in v2.18.

Another big improvement is the addition of streaming support to our HTTP handlers. Most handlers now use chunked
encoding to reduce the amount of the generated JSON document that has to be kept in memory at any one time. Some
endpoints, notably `v1/objects/query`, will also start to stream the response immediately, as the results are processed.
This should solve most of the memory issues users were seeing when using the Icinga 2 API on large clusters.

We've also redone our Docker images with this version, with some changes to how the `/data` directory is mounted and
initialized, so make sure you read the new documentation page for
[installing Icinga 2 in containers](https://icinga.com/docs/icinga-2/latest/doc/02-installation/For-Container).

Below is a summary of the changes relevant for our users. For the complete list of issues and PRs, please see the
[milestone on GitHub](https://github.com/Icinga/icinga2/issues?q=is%3Aclosed+milestone%3A2.16.0).
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.23 2026/02/06 11:01:42 adam Exp $
d4 1
@


1.23
log
@icinga2: do not set PKG_RCD_SCRIPTS
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.22 2026/02/02 09:48:56 adam Exp $
d3 1
a3 1
DISTNAME=	icinga2-2.15.2
d11 1
a11 1
LICENSE=	gnu-gpl-v2
d25 1
a26 1
USE_CXX_FEATURES=	c++17
d164 1
@


1.22
log
@icinga2: updated to 2.15.2

2.15.2 (2026-01-29)

This security release fixes a problem in the Icinga 2 Windows MSI that did not
set proper permissions for `%ProgramData%\icinga2\var`. Additionally, it includes
two minor bug fixes regarding our SELinux policy and updates the OpenSSL version
shipped on Windows.

* CVE-2026-24413: Fix permissions of `%ProgramData%\icinga2\var` on Windows.
* Windows: Update to OpenSSL 3.0.19.
* SELinux: Fix policy to allow `logrotate` to execute the `icinga2` binary in order to send `SIGUSR1` for log rotation.
* SELinux: Fix policy to allow `icinga2` to send `SIGTERM` to nagios plugins processes on timeout.
* doc: Update Windows development docs to use Visual Studio 2022 instead of 2019.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.21 2025/10/19 13:49:29 adam Exp $
a28 1
PKG_RCD_SCRIPTS=	YES
@


1.21
log
@icinga2: updated to 2.15.1

2.15.1 (2025-10-16)

This release fixes multiple security issues. Two of them allow authenticated
API users to learn restricted information or crash Icinga 2. A third issue
affects the scripts provided with Icinga 2 and allows a limited privilege
escalation where the Icinga 2 daemon user can trick root into sending signals to
arbitrary processes.

In addition, this version also includes bug fixes regarding config deployments
and improvements to allow for better debugging of problems related to JSON-RPC
cluster communication.

Note that one fix affects the logrotate configuration. If it was modified
locally, it might not be updated automatically by the package manager and
applying the changes manually is necessary. For details, please check the
[upgrading docs](https://icinga.com/docs/icinga-2/latest/doc/16-upgrading-icinga-2/#upgrading-to-2-15-1).

Security

* CVE-2025-61907: Prevent API users from accessing variables and objects they
  don't have access to within filter expressions. This allowed authenticated
  API users to learn information they aren't allowed to access directly.
* CVE-2025-61908: Add a missing null pointer check while evaluating
  expressions. This allowed authenticated API users to crash the Icinga 2
  daemon by supplying a crafted filter expression.
* CVE-2025-61909: Don't send signals as root in safe-reload script and
  logrotate config. This allowed a limited privilege escalation from the Icinga
  2 service user to root. The scope is limited to sending SIGHUP or SIGUSR1 to
  an arbitrary process.
* Windows: Update to OpenSSL 3.0.18.

Bugfixes

* When a reload triggered from Icinga Director (or the /v1/config API) fails,
  the corresponding state is cleared, allowing to deploy a new config without
  having to restart Icinga 2 manually first.

Enhancements

* Add JSON-RPC utilization metrics and troubleshooting docs.
* When sending cluster messages to other zones, prefer endpoints in the order
  as specified in the zone configuration.
* Track the number of JSON-RPC messages received for each message type per
  endpoint.
* Add support for building with Boost v1.89 and use it on Windows.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.20 2025/09/27 09:57:32 wiz Exp $
d3 1
a3 1
DISTNAME=	icinga2-2.15.1
@


1.20
log
@*: recursive bump for boost 1.89
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.19 2025/09/27 07:00:56 adam Exp $
d3 1
a3 2
DISTNAME=	icinga2-2.15.0
PKGREVISION=	1
@


1.19
log
@icinga2: updated to 2.15.0

Icinga 2 v2.15.0

This Icinga 2 release is focused on adding Icinga 2 dependencies support to
Icinga DB, but also includes a number of bugfixes, enhancements and code
quality improvements. Below is a summary of the most important changes, for the
complete list of issues and PRs, please see the milestone on GitHub.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.18 2025/08/20 11:35:07 wiz Exp $
d4 1
@


1.18
log
@*: fix build with cmake 4
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.17 2025/02/19 18:02:21 wiz Exp $
d3 1
a3 1
DISTNAME=	icinga2-2.14.5
a142 5
# Avoid a name clash with Boost header on case-insensitive file systems.
# Remove outdated GNUInstallDirs.cmake.
post-extract:
	${RM} ${WRKSRC}/third-party/cmake/GNUInstallDirs.cmake

d162 1
a163 1
.include "../../mk/atomic64.mk"
d166 1
a166 1
.include "../../devel/boost-libs/buildlink3.mk"
@


1.17
log
@icinga2: update to 2.14.5.

Update to latest version, including an upstream patch for supporting
boost 1.87. Clean up some pkglint and incorrect option names.

## 2.14.5 (2025-02-06)

This release fixes a regression introduced in 2.14.4 that caused the `icinga2 node setup`,
`icinga2 node wizard`, and `icinga2 pki request` commands to fail if a certificate was
requested from a node that has to forward the request to another node for signing.
Additionally, it fixes a small bug in the performance data normalization and includes
various documentation improvements.

### Bug Fixes

* Don't close anonymous connections before sending the response for a certificate request #10337
* Performance data: Don't discard min/max values even if crit/warn thresholds aren’t given #10339
* Fix a failing test case on systems `time_t` is only 32 bits #10343

### Documentation

* Document the -X option for the mail-host-notification and mail-service-notification commands #10335
* Include Nagios in the migration docs #10324
* Remove RHEL 7 from installation instructions #10334
* Add instructions for installing build dependencies on Windows Server #10336

## 2.14.4 (2025-01-23)

This bugfix release is focused on improving HA cluster stability and easing
troubleshooting of issues in this area. It also addresses several crashes,
in the core itself and both in Icinga DB and IDO (numbers out of range).
In addition, it fixes several other issues such as lost notifications
or TimePeriod/ScheduledDowntime exceeding specified date ranges.

### Crash Fixes

* Invalid `DateTime#format()` arguments in config and console on Windows Server 2016 and older. #10112
* Downtime scheduling at runtime with non-existent trigger. #10049
* Object creation at runtime during Icinga DB initialization. #10151
* Comment on a service of a non-existent host. #9861

### Miscellaneous Bugfixes

* Lost notifications after recovery outside the notification time period. #10187
* TimePeriod/ScheduledDowntime exceeding specified date range. #9983 #10107
* Clean up failure for obsolete Downtimes. #10062
* ifw-api check command: use correct process-finished handler. #10140
* Email notification scripts: strip 0x0D (CR) for a proper Content-Type. #10061
* Several fixes and improvements of the code quality. #10066 #10214 #10254 #10263 #10264

### Cluster and API

* Sync runtime objects in topological order to honor their dependencies. #10000
* Make parallel config syncs more robust. #10013
* After object creation via API fails, clean up properly for the next try. #10111
* Close HTTPS connections properly to prevent leaks. #10005 #10006
* Reduce the number of cluster messages in memory at the same time. #9991 #9999 #10210
* Once a cluster connection shall be closed, stop communicating. #10213 #10221
* Remove unnecessary blocking of semaphores. #9992 #9994
* Reduce unnecessary cluster messages setting the next check time. #10011

### Icinga DB and IDO

* IDO: fix object relations after aborted synchronization. #10065
* Icinga DB, IDO: limit all timestamps to four year digits. #10058 #10059
* Icinga DB: limit execution\_time and latency (milliseconds) to database schema. #10060

### Troubleshooting

* Add `/v1/debug/malloc_info` which calls `malloc_info(3)` if available. #10015
* Add log messages about own network I/O. #9993 #10141 #10207
* Several fixes and improvements of log messages. #9997 #10021 #10209

### Windows

* Update OpenSSL shipped on Windows to v3.0.15. #10170
* Update Boost shipped on Windows to v1.86. #10114
* Support CMake v3.29. #10037
* Don't require to build .msi as admin. #10137
* Build configuration scripts: allow custom `$CMAKE_ARGS`. #10312

### Documentation

* Distributed Monitoring: add section "External CA/PKI". #9825
* Explain how to enable/disable debug logging on the fly. #9981
* Update supported OS versions and repository configuration. #10064 #10090 #10120 #10135 #10136 #10205
* Several fixes and improvements. #9960 #10050 #10071 #10156 #10194
* Replace broken links. #10115 #10118 #10282
* Fix typographical and similarly trivial errors. #9953 #9967 #10056 #10116 #10152 #10153 #10204

## 2.14.3 (2024-11-12)

This security release fixes a TLS certificate validation bypass.
Given the severity of that issue, users are advised to upgrade all nodes immediately.

* Security: fix TLS certificate validation bypass. CVE-2024-49369
* Security: update OpenSSL shipped on Windows to v3.0.15.
* Windows: sign MSI packages with a certificate the OS trusts by default.

## 2.14.2 (2024-01-18)

Version 2.14.2 is a hotfix release for master nodes that mainly
fixes excessive disk usage caused by the InfluxDB writers.

* InfluxDB: truncate timestamps to whole seconds to save disk space. #9969
* HttpServerConnection: log request processing time as well. #9970
* Update Boost shipped on Windows to v1.84. #9970

## 2.14.1 (2023-12-21)

Version 2.14.1 is a hotfix release for masters and satellites that mainly
prevents permanent disintegration of a whole cluster due to root CA expiry.

### Security

* Automatically renew own root CA and distribute it to all nodes. #9933
* Update OpenSSL shipped on Windows to v3.0.12. #9946
* Disable TLS renegotiation (handshake on existing connection). #9946

### Bugfixes

* Icinga DB feature: fix crash due to missing NULL pointer check. #9946
* Icinga DB feature: fix data written into Redis crashing the Go daemon. #9946
* GelfWriter: fix deadlock on stop/reload caused by busy queue. #9947
* Don't lose notifications due to too long output, truncate it. #9947

### Enhancements

* Discard duplicate problem notifications due to state filtering. #9932
* Speed up API filters targeting specific hosts/services to O(1). #9944
* POST /v1/console/\*: return HTTP 503 while Icinga is reloading. #9947
* Update Boost shipped on Windows to v1.83. #9946
* Documentation: several fixes and improvements. #9921

## 2.14.0 (2023-07-12)

[Issues and PRs](https://github.com/Icinga/icinga2/issues?q=is%3Aclosed+milestone%3A2.14.0)

### Notes

Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-2-14

### Breaking Changes

* Remove CheckResultReader (which has been deprecated since v2.9). #9714
* Remove StatusDataWriter (which has been deprecated since v2.9). #9715
* ElasticsearchWriter: drop support for Elasticsearch < v7. #9812
* Consider a checkable unreachable once one Dependency fails.
  Previously all of them had to fail. (Consult the upgrading docs.) #8218
* API: reject config modifications during reload with HTTP status 503. #9445
* `icinga2 daemon`: to reduce config load time, write file needed by
  `icinga2 object list` only if `--dump-objects` is given. #9586 #9591
* Default email notification scripts: link to Icinga DB Web,
  not the monitoring module. (Consult the upgrading docs.) #9742 #9757
* API: for security reasons hide TicketSalt in /v1/variables. #7863

#### Icinga 2 Config DSL

* Disallow global variable modification after config commit start (i.e.
  inside `object/apply T "x" { ... }`) to reduce config load time. #9740
* Forbid Dependency cycles at config load time. #8389
* Allow only strings in the arrays Host#groups, Service#groups and
  User#groups. Needed for consistency, especially by the IDO. #9057
* Disallow empty object names. (They worked only partially anyway.) #9409

### Enhancements

* Significantly reduce config load time of large setups.
  #8118 #9555 #9557 #9572 #9577 #9603 #9608 #9627 #9648 #9657 #9662
* Allow to connect dependencies via redundancy groups. Only parents within
  one group are assumed to provide redundancy for each other. #8218
* Built-in check command ifw-api, communicates directly with the Icinga for
  Windows REST API. (Doesn't spawn a PowerShell process for that.) #9062
* JournaldLogger which logs to systemd journal. #9000
* API: POST /v1/objects: allow to discard some previously modified attributes,
  i.e. to restore the config files' values. #9783
* ElasticsearchWriter: support Elasticsearch v8. #9812
* Support `$env.ENV_VAR_NAME$` macros. #8302
* Speed up Icinga DB config dump. #9524
* Default mail notification scripts: also print `$host.notes$` and `$service.notes$`. #9713
* Enable built-in OpenSSL DH parameters to allow DHE TLS ciphers. #9811
* Clean up global default TLS cipher list to improve security. #9809
* Influxdb(2)Writer: write more precise timestamps (nanoseconds). #9599

### Bugfixes

* Icinga DB feature: normalize several Redis data not to crash the Go daemon.
  #9772 #9775 #9792 #9793 #9794 #9805
* Fix parsing of perfdata across multiple lines in plugin output. #8969
* icinga check: fix last reload failure time. #8429 #9827
* Resolve macros inside custom vars of IcingaApplication. #9779
* SELinux: allow Icinga and its plugins to write to syslog. #9688
* ElasticsearchWriter: fix data buffer flush race condition during stop. #9810
* Trigger flexible downtimes not in the past if checkable is already down. #9726
* Send downtime expiration notifications immediately, not after up to a minute. #9726

#### Cluster

* Don't hang in timed out connection attempt. #9711 #9725
* Fix lost acknowledgements after re-connect. #9718
* cluster-zone check: don't complain about not connected
  other local zone members if there aren't any. #8595
* Allow agent to update executions delegated to it via /v1/actions/execute-command. #8627

#### API

* Disallow breaking inter-object relationships by changing
  relationship attributes at runtime, e.g. `Service#host_name`. #9407
* Correct several HTTP response status codes. #7958 #9354
* Correct Boolean field types previously reported by /v1/types as Number. #9514

#### CLI

* `icinga2 daemon`: fix -DConfiguration.Concurrency= flag
  which now allows to override the number of threads. #9643
* `icinga2 node wizard`: avoid unnecessary chown(2) which may fail and abort the wizard. #8744
* Correct several log messages. #8895 #8965 #9663

### ITL

Add `linux_netdev` check command. #9045

#### Command Argument Changes

* `disk`: don't pass -m (`disk_megabytes`) by default. #9642
* `disk`: pass -X fuse.portal (`disk_exclude_type`) by default. #9459
* `http`: support multiple -k (`http_header`) as array. #8574
* `icmp`: double defaults for -w (`icmp_wpl`) and -c (`icmp_cpl`). #9041
* `logfiles`: pass --winwarncrit (`logfiles_winwarncrit`) without argument. #9056
* `nwc_health`: pass SNMPv3-only args only when using SNMPv3. #9095
* `vmware-esx-dc-runtime-tools` and `vmware-esx-soap-vm-runtime-tools`:
  rename `--open-vm-tools` to `--open_vm_tools_ok` (`vmware_openvmtools`). #9611

#### New Command Arguments

| Command                            | Argument                     | Custom Variable                          | PR    |
|------------------------------------|------------------------------|------------------------------------------|-------|
| `disk`                             | `-P`                         | `disk_inode_perfdata`                    | #9494 |
| `esxi_hardware`                    | `--format`                   | `esxi_hardware_format`                   | #9435 |
| `esxi_hardware`                    | `--pretty`                   | `esxi_hardware_pretty`                   | #9435 |
| `http`                             | `--verify-host`              | `http_verify_host`                       | #8005 |
| `icingacli-businessprocess`        | `--ack-is-ok`                | `icingacli_businessprocess_ackisok`      | #9103 |
| `icingacli-businessprocess`        | `--blame`                    | `icingacli_businessprocess_blame`        | #9103 |
| `icingacli-businessprocess`        | `--colors`                   | `icingacli_businessprocess_colors`       | #9103 |
| `icingacli-businessprocess`        | `--downtime-is-ok`           | `icingacli_businessprocess_downtimeisok` | #9103 |
| `icingacli-businessprocess`        | `--root-cause`               | `icingacli_businessprocess_rootcause`    | #9103 |
| `mem`                              | `-a`                         | `mem_available`                          | #9385 |
| `mongodb`                          | `--disable_retry_writes`     | `mongodb_disableretrywrites`             | #9539 |
| `mongodb`                          | `--ssl-ca-cert-file`         | `mongodb_ssl_ca_cert_file`               | #9610 |
| `mysql`                            | `--extra-opts`               | `mysql_extra_opts`                       | #9197 |
| `nrpe`                             | `-3`                         | `nrpe_version_3`                         | #9296 |
| `nrpe`                             | `-D`                         | `nrpe_no_logging`                        | #9016 |
| `nrpe`                             | `-P`                         | `nrpe_payload_size`                      | #9032 |
| `pgsql`                            | `--extra-opts`               | `pgsql_extra_opts`                       | #9197 |
| `postgres`                         | `$PGCONTROLDATA` (env. var.) | `postgres_pgcontroldata`                 | #8929 |
| `postgres`                         | `--datadir`                  | `postgres_datadir`                       | #8924 |
| `postgres`                         | `--language`                 | `postgres_language`                      | #8924 |
| `postgres`                         | `--perflimit`                | `postgres_perflimit`                     | #8924 |
| `ssl_cert`                         | `--ignore-host-cn`           | `ssl_cert_ignore_host_cn`                | #9512 |
| `ssl_cert`                         | `--ignore-ocsp-errors`       | `ssl_cert_ignore_ocsp_errors`            | #9512 |
| `ssl_cert`                         | `--ignore-ocsp-timeout`      | `ssl_cert_ignore_ocsp_timeout`           | #9512 |
| `ssl_cert`                         | `--ignore-tls-renegotiation` | `ssl_cert_ignore_tls_renegotiation`      | #9042 |
| `ssl_cert`                         | `--proxy`                    | `ssl_cert_proxy`                         | #8927 |
| `tcp`                              | `--sni`                      | `tcp_sni`                                | #9347 |
| `vmware-esx-dc-runtime-tools`      | `--no_vm_tools_ok`           | `vmware_novmtools`                       | #9611 |
| `vmware-esx-soap-vm-runtime-tools` | `--no_vm_tools_ok`           | `vmware_novmtools`                       | #9611 |

### Miscellaneous

* Require GCC 7+ for building to enable C++17. #9133 #9485 #9489
* Require CMake v2.8.12+ for building.
  (Compatibility with older ones will be removed from a future CMake version.) #9706
* Repair config reload on OpenBSD by using waitpid(2), not a SIGCHLD handler. #9518
* Ignore SIGHUP in main process to allow `/etc/rc.d/icinga2 reload`
  sending it to all Icinga 2 processes on OpenBSD. #9622
* Fix crash in debug build on macOS when API and debug log are enabled. #9497
* Update Boost shipped on Windows to v1.82. #9761
* Update OpenSSL shipped on Windows to v3.0.9. #9787
* Update vendored https://github.com/nlohmann/json to v3.9.1. #9675
* Update vendored https://github.com/nemtrif/utfcpp to v3.2.3. #9683
* Documentation: several fixes and improvements.  #8954 #9741 #9763 #9767 #9769 #9777
* Several code quality improvements. #8815 #9106 #9250
  #9508 #9517 #9537 #9594 #9605 #9606 #9641 #9658 #9702 #9717 #9738

## 2.13.10 (2024-11-12)

This security release fixes a TLS certificate validation bypass.
Given the severity of that issue, users are advised to upgrade all nodes immediately.

* Security: fix TLS certificate validation bypass. CVE-2024-49369
* Security: update OpenSSL shipped on Windows to v3.0.15.
* Windows: sign MSI packages with a certificate the OS trusts by default.

## 2.13.9 (2023-12-21)

Version 2.13.9 is a hotfix release for masters and satellites that mainly
prevents permanent disintegration of a whole cluster due to root CA expiry.

### Security

* Automatically renew own root CA and distribute it to all nodes. #9934
* Update OpenSSL shipped on Windows to v3.0.12. #9945
* Disable TLS renegotiation (handshake on existing connection). #9945

### Bugfixes

* Icinga DB feature: fix crash due to missing NULL pointer check. #9945
* Icinga DB feature: fix data written into Redis crashing the Go daemon. #9945

### Updates

* Update Boost shipped on Windows to v1.83. #9945

## 2.13.8 (2023-07-12)

Version 2.13.8 is a maintenance release that fixes some bugs,
especially Icinga DB crashes, and updates several bundled libraries.

### Bugfixes

* Icinga DB feature: normalize several Redis data not to crash the Go daemon. #9814
* Don't hang in timed out connection attempt. #9815
* Trigger flexible downtimes not in the past if checkable is already down. #9817
* ElasticsearchWriter: fix data buffer flush race condition during stop. #9818
* SELinux: allow Icinga and its plugins to write to syslog. #9819
* Fix lost acknowledgements after re-connect. #9820
* Fix parsing of perfdata across multiple lines in plugin output. #9821
* cluster-zone check: don't complain about not connected
  other local zone members if there aren't any. #9822

### Updates

* Update Boost shipped on Windows to v1.82. #9816
* Update OpenSSL shipped on Windows to v3.0.9. #9816
* Update vendored https://github.com/nlohmann/json to v3.9.1. #9816
* Update vendored https://github.com/nemtrif/utfcpp to v3.2.3. #9816

## 2.13.7 (2023-02-16)

This security release updates Boost and OpenSSL libraries bundled on Windows
and repairs broken SELinux policies. By the way it fixes several other bugs.

### Security

* Windows: update bundled OpenSSL to v1.1.1t. #9672

### Bugfixes

* SELinux: fix user and domain creation by explicitly setting the role. #9690
* Signal handlers: don't interrupt and break plugins spawning. #9682
* Icinga DB: take check\_period into account during overdue calculation. #9679
* Avoid corrupted files: use fsync(2)/FlushFileBuffers() everywhere. #9681
* Solaris: fix compile error. #9680

### Enhancements

* Windows: update bundled Boost to v1.81. #9678
* Documentation: several fixes and improvements. #9671

## 2.13.6 (2022-11-08)

The main focus of version 2.13.6 is improved performance of Icinga DB and apply rules.
Additionally, it includes bug fixes related to config loading and API permissions.

### Bugfixes

* Improve the throughput of the Icinga DB feature. #9550
* Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
* Fix a possible crash on config loading related to `ignore_on_error`. #9560
* Check API user permission on objects returned by joins. #9561
* Windows: update bundled Boost and OpenSSL versions. #9562 #9567

## 2.13.5 (2022-08-11)

Version 2.13.5 is a maintenance release that fixes some bugs,
improves logging and updates the documentation as well as a bundled library.

### Bugfixes

* Ensure not to write an incomplete (i.e. corrupt) state file. #9467
* ITL: Render vars.apt\_upgrade=true as --upgrade, not --upgrade=true. #9458
* Icinga DB: Don't surprise (and crash) the Go daemon with config types it doesn't know. #9480
* Icinga DB: Add missing Redis SELinux policy. #9473
* Windows: Don't spam the event log with non-error startup messages. #9457
* Windows: Update bundled version of OpenSSL. #9460
* Docs: Update RHEL 8 installation instructions. #9482
* Docs: Add RHEL 9 installation instructions. #9482

## 2.13.4 (2022-06-30)

This release brings the final changes needed for the Icinga DB 1.0 release.
Addtionally, it includes some fixes and a performance improvement resulting
in faster config validation and reload times.

### Bugfixes

* Fix a race-condition involving object attribute updates that could result in a crash. #9395
* After a host recovered, only send problem notifications for services after
  they have been rechecked afterwards to avoid false notifications. #9348
* Speed up config validation by avoiding redundant serialization of objects. #9400
* Add a `separator` attribute to allow using arguments like `--key=value` as required by some
  check plugins. This fixes the `--upgrade` and `--dist-upgrade` arguments of `check_apt`. #9397
* Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415

### Icinga DB

* Add an `icingadb` CheckCommand to allow checking if Icinga DB is healthy. #9417
* Update documentation related to Icinga DB. #9423
* Fix a bug where history events could miss the environment ID. #9396
* Properly serialize attributes of command arguments when explicitly set to `null`. #9398
* Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
* Make the error message more helpful if the API isn't set up #9418

## 2.13.3 (2022-04-14)

This version includes bugfixes for many features of Icinga 2, including fixes for multiple crashes.
It also includes a number of fixes and improvements for Icinga DB.

### API

* The /v1/config/stages endpoint now immediately rejects parallel config updates
  instead of accepting and then later failing to verify and activate them. #9328

### Certificates

* The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
* Compare cluster certificate tickets in constant time. #9333

### Notifications

* Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
* Fix missing or redundant notifications after certain combinations of state changes happened
  while notifications were suppressed, for example during a downtime. #9285

### Checks and Commands

* Fix a deadlock when processing check results for checkables with dependencies. #9228
* Fix a message routing loop that can happen for event commands that are executed within a zone
  using `command_endpoint` that resulted in excessive execution of the command. #9260

### Downtimes

* Fix scheduling of downtimes for all services on child hosts. #9159
* Creating fixed downtimes starting immediately now send a corresponding notification. #9158
* Fix some issues involving daylight saving time changes that could result in an hour missing
  from scheduled downtimes. This fix applies to time periods as well. #9238

### Configuration

* Fix the evaluation order of default templates when used in combination with apply rules.
  Now default templates are imported first as stated in the documentation and
  as it already happens for objects defined without using apply. #9290

### IDO

* Fix an issue where contacts were not written correctly to the notification history
  if multiple IDO instances are active on the same node. #9242
* Explicitly set the encoding for MySQL connections as a workaround for changed defaults
  in Debian bullseye. #9312
* Ship a MySQL schema upgrade that fixes inconsistent version information in the
  full schema file and upgrade files which could have resulted in inaccurate reports
  of an outdated schema version. #9139

### Performance Data Writers

* Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
* Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
* All writers no longer send metrics multiple times after HA failovers. #9322

### Build

* Fix the order of linker flags to fix builds on some ARM platforms. #9164
* Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
* Fix an issue when building within an unrelated Git repository,
  version information from that repository could incorrectly be used for Icinga 2. #9155
* Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325

### Internals

* Fix some race conditions due to missing synchronization.
  These race conditions should not have caused any practical problems
  besides incorrect numbers in debug log message. #9306
* Move the startup.log and status files created when validating incoming cluster config updates
  to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335

### Icinga DB

* The `severity` attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
  The documentation for this attribute was already incorrect before and was updated
  to reflect the current functionality. #9239 #9240
* Fix the `is_sticky` attribute for comments. #9303
* Fix missing updates of `is_reachable` and `severity` in the state tables. #9241
* Removing an acknowledgement no longer incorrectly writes comment history. #9302
* Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
* Fix that history events are no longer written when state information should be updated. #9252
* Fix an issue where incomplete comment history events were generated. #9301
  **Note:** when removing comments using the API, the dedicated remove-comment action
  should be used instead of the objects API, otherwise no history event will be generated.
* Fix handling of non-integer values for the order attribute of command arguments. #9181
  **Note:** You should only specify integer values for order, other values are converted to integer
  before use so using fractional numbers there has no effect.
* Add a dependency on icingadb-redis.service to the systemd service file
  so that Redis is stopped after Icinga 2. #9304
* Buffer history events in memory when the Redis connection is lost. #9271
* Add the previous soft state to the state tables. #9214
* Add missing locking on object runtime updates. #9300

## 2.13.2 (2021-11-12)

This version only includes changes needed for the release of Icinga DB 1.0.0 RC2 and doesn't include any other bugfixes or features.

### Icinga DB

* Prefix command_id with command type #9085
* Decouple environment from Icinga 2 Environment constant #9082
* Make icinga:history:stream:*#event_id deterministic #9076
* Add downtime.duration & service_state.host_id to Redis #9084
* Sync checkables along with their states first #9081
* Flush both buffered states and state checksums on initial dump #9079
* Introduce icinga:history:stream:downtime#scheduled_by #9080
* Actually write parent to parent_id of zones #9078
* Set value in milliseconds for program_start in stats/heartbeat #9077
* Clean up vanished objects from icinga:checksum:*:state #9074
* Remove usernotification history stream #9073
* Write IDs of notified users into notification history stream #9071
* Make CheckResult#scheduling_source available to Icinga DB #9072
* Stream runtime state updates only to icinga:runtime:state #9068
* Publish Redis schema version via XADD icinga:schema #9069
* Don't include checkable types in history IDs #9070
* Remove unused Redis key 'icinga:zone:parent' #9075
* Make sure object relationships are handled correctly during runtime updates #9089
* Only log queries at debug level #9088

## 2.13.1 (2021-08-19)

The main focus of this version is a security vulnerability in the TLS certificate verification of our metrics writers ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer.

Version 2.13.1 also fixes two issues indroduced with the 2.13.0 release.

### Security

* Add TLS server certificate validation to ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer ([GHSA-cxfm-8j5v-5qr2](https://github.com/Icinga/icinga2/security/advisories/GHSA-cxfm-8j5v-5qr2))

Depending on your setup, manual intervention beyond installing the new versions
may be required, so please read the more detailed information in the
[release blog post](https://icinga.com/blog/2021/08/19/icinga-2-13-1-security-release//)
carefully

### Bugfixes

* IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
* ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961

## 2.13.0 (2021-08-03)

[Issues and PRs](https://github.com/Icinga/icinga2/issues?utf8=%E2%9C%93&q=milestone%3A2.13.0)

### Notes

Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-v213

### Enhancements

* Core
  * PerfdataValue: Add units of measurement #7871
  * Flapping: Allow to ignore states in flapping detection #8600
* Cluster
  * Display log message if two nodes run on incompatible versions #8088
* API
  * /v1/actions/remove-downtime: Also remove child downtimes #8913
  * Add API endpoint: /v1/actions/execute-command #8040
  * /v1/actions/add-comment: Add param expiry #8035
  * API-Event StateChange & CheckResult: Add acknowledgement and downtime_depth #7736
  * Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  * Implement scheduling_endpoint attribute to checkable #6326
* Windows
  * Add support for Windows Event Log and write early log messages to it #8710
* IDO
  * MySQL: support larger host and service names #8425
* ITL
  * Add -S parameter for esxi_hardware ITL #8814
  * Add CheckCommands for Thola #8683
  * Add option ignore-sct for ssl_cert to ITL #8625
  * Improve check_dns command when used with monitoring-plugins 2.3 #8589
  * Add parameter -f to snmp-process #8569
  * Add systemd CheckCommand #8568
  * Add new options for ipmi-sensor #8498
  * check_snmp_int: support -a #8003
  * check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  * check_nrpe: Add parameters needed for PKI usage #7907
* Metrics
  * Support InfluxDB 2.0 #8719
  * Add support for InfluxDB basic auth #8314
* Docs
  * Add info about ongoing support for IDO #8446
  * Improve instructions on how to setup a Windows dev env #8400
  * Improve instructions for installing wixtoolset on Windows #8397
  * Add section about usage of satellites #8458
  * Document command for verifying the parent node's certificate #8221
  * Clarify TimePeriod/ScheduledDowntime time zone handling #8001
* Misc
  * Support TLS 1.3 #8718
  * Livestatus: append app name to program_version #7931
  * sd_notify() systemd about what we're doing right now #7874

### Bugfixes

* Core
  * Fix state not being UNKNOWN after process timeout #8937
  * Set a default severity for loggers #8846
  * Fix integer overflow when converting large unsigned integers to string #8742
  * StartUnixWorker(): don't exit() on fork() failure #8427
  * Fix perf data parser not recognizing scientific notation #8492
  * Close FDs based on /proc/self/fd #8442
  * Fix check source getting overwritten on passive check result #8158
  * Clean up temp files #8157
  * Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  * On check timeout first send SIGTERM #7918
* Cluster
  * Drop passive check results for unreachable hosts/services #8267
  * Fix state timestamps set by the same check result differing across nodes #8101
* API
  * Do not override status codes that are not 200 #8532
  * Update the SSL context after accepting incoming connections #8515
  * Allow to create API User with password #8321
  * Send Content-Type as API response header too #8108
  * Display a correct status when removing a downtime #8104
  * Display log message if a permission error occurs #8087
  * Replace broken package name validation regex #8825 #8946
* Windows
  * Fix Windows command escape for \" #7092
* Notifications/Downtimes
  * Fix no re-notification for non OK state changes with time delay #8562
  * TimePeriod/ScheduledDowntime: Improve DST handling #8921
  * Don't send notifications while suppressed by checkable #8513
  * Fix a crash while removing a downtime from a disappeared checkable #8229
* IDO
  * Update program status on stop #8730
  * Also mark objects inactive in memory on object deactivation #8626
  * IdoCheckTask: Don't override checkable critical with warn state #8613
  * PostgreSQL: Do not set standard_conforming_strings to off #8123
* ITL
  * check_http: Fix assignment of check_adress blocking check by hostname #8109
  * check_mysql: Don't set -H if -s is given #8020
* Metrics
  * OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2025/01/27 23:03:10 wiz Exp $
d141 1
@


1.16
log
@icinga2: update HOMEPAGE
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.15 2024/12/29 15:09:56 adam Exp $
d3 1
a3 2
DISTNAME=	icinga2-2.12.11
PKGREVISION=	1
d26 1
a26 1
USE_CXX_FEATURES=	c++14
d98 1
a98 1
FEATURES+=		command compatlog statusdata
d103 1
a103 1
.if !empty(PKG_OPTIONS:Micinga2-mysql)
d110 1
a110 1
FEATURES+=		elasticsearch gelf graphite influxdb opentsdb perfdata
d112 1
a112 1
.if !empty(PKG_OPTIONS:Micinga2-pgsql)
@


1.15
log
@revbump after updating boost
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2024/11/22 15:31:29 ryoon Exp $
d10 1
a10 1
HOMEPAGE=	https://www.icinga.com/products/icinga-2/
@


1.14
log
@net/icinga2: Update to 2.12.11

Changelog:
2.12.11:
This security release fixes a TLS certificate validation bypass.
Given the severity of that issue, users are advised to upgrade all nodes immediately.

    Security: fix TLS certificate validation bypass. CVE-2024-49369
    Security: update OpenSSL shipped on Windows to v3.0.15.
    Windows: sign MSI packages with a certificate the OS trusts by default.

2.12.10:
This security release updates Boost and OpenSSL libraries bundled on Windows
and repairs broken SELinux policies.
Security

    Windows: update bundled OpenSSL to v1.1.1t. #9686

Bugfixes

    SELinux: fix user and domain creation by explicitly setting the role. #9689

Enhancements

    Windows: update bundled Boost to v1.81. #9686
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2024/10/04 03:49:32 ryoon Exp $
d4 1
@


1.13
log
@*: Recursive revbump from Boost 1.86.0
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2024/08/25 06:19:06 wiz Exp $
d3 1
a3 2
DISTNAME=	icinga2-2.12.9
PKGREVISION=	4
d25 3
a27 3
USE_LANGUAGES=	c c++ c++11
USE_CMAKE=	yes
USE_TOOLS+=	flex bison
d166 1
@


1.12
log
@*: replace CMAKE_ARGS with CMAKE_CONFIGURE_ARGS
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2023/12/29 18:24:55 adam Exp $
d4 1
a4 1
PKGREVISION=	3
@


1.11
log
@revbump for boost-libs
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2023/10/24 22:10:19 wiz Exp $
d130 10
a139 10
CMAKE_ARGS+=	-DICINGA2_USER=${ICINGA2_USER} -DICINGA2_GROUP=${ICINGA2_GROUP}
CMAKE_ARGS+=	-DICINGA2_GIT_VERSION_INFO=OFF
CMAKE_ARGS+=	-DICINGA2_COMMAND_GROUP=${ICINGA2_COMMAND_GROUP}
#CMAKE_ARGS+=	-DICINGA2_UNITY_BUILD=???	# Whether to perform a unity build; defaults to `ON`
#CMAKE_ARGS+=	-DICINGA2_LTO_BUILD=???		# Whether to use link time optimization (LTO); defaults to `OFF`
CMAKE_ARGS+=	-DICINGA2_PLUGINDIR=${PLUGINDIR}
CMAKE_ARGS+=	-DICINGA2_RUNDIR=${RUNDIR_PARENT}
CMAKE_ARGS+=	-DCMAKE_INSTALL_SYSCONFDIR=${PKG_SYSCONFBASE} # not PKG_SYSCONFDIR!
#CMAKE_ARGS+=	-DICINGA2_SYSCONFIGFILE=???	# Where to put the config file the initscript/systemd pulls it's dirs from; defaults to `CMAKE_INSTALL_PREFIX/etc/sysconfig/icinga2`
CMAKE_ARGS+=	-DCMAKE_INSTALL_LOCALSTATEDIR=${VARBASE}
d141 1
a141 1
CMAKE_ARGS+=	-DICINGA2_WITH_TESTS=OFF
d160 4
a163 4
#CMAKE_ARGS+=	-DCMAKE_SKIP_BUILD_RPATH=FALSE
#CMAKE_ARGS+=	-DCMAKE_BUILD_WITH_INSTALL_RPATH=FALSE
#CMAKE_ARGS+=	-DCMAKE_INSTALL_RPATH=${PREFIX}/lib/icinga2
#CMAKE_ARGS+=	-DCMAKE_INSTALL_RPATH_USE_LINK_PATH=FALSE
@


1.10
log
@*: bump for openssl 3
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2023/04/23 14:26:28 adam Exp $
d4 1
a4 1
PKGREVISION=	2
@


1.9
log
@revbump for boost
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2023/01/22 17:34:20 ryoon Exp $
d4 1
a4 1
PKGREVISION=	1
@


1.8
log
@icinga2: Update to 2.12.9

* Remove some patches backported from upstream.
* Fix build with Boost 1.81.0.

Changelog:
Not available for 2.12.9
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2022/12/08 21:27:21 he Exp $
d4 1
@


1.7
log
@net/icinga2: use mk/atomix64.mk, fixes macppc build problem.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2022/01/10 01:46:41 ryoon Exp $
d3 1
a3 2
DISTNAME=	icinga2-2.12.3
PKGREVISION=	4
a144 1
	${MV} ${WRKSRC}/VERSION ${WRKSRC}/ICINGA2_VERSION
@


1.6
log
@*: Recursive revbump from boost 1.78.0
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2021/09/29 19:01:07 adam Exp $
d168 1
@


1.5
log
@revbump for boost-libs
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2021/06/23 20:33:14 nia Exp $
d4 1
a4 1
PKGREVISION=	3
@


1.4
log
@Revbump for MySQL default change
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2021/04/21 13:25:09 adam Exp $
d4 1
a4 1
PKGREVISION=	2
@


1.3
log
@revbump for boost-libs
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2021/01/17 13:22:26 wiz Exp $
d4 1
a4 1
PKGREVISION=	1
@


1.2
log
@icinga2: fix build/package on macOS

From MAINTAINER Edgar Fuß.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2021/01/15 00:37:17 wiz Exp $
d4 1
@


1.1
log
@net/icinga2: import icinga2-2.12.3

Packaged by Edgar Fuß for pkgsrc-wip.

Icinga 2 is an open source monitoring system which checks the
availability of your network resources, notifies users of outages,
and generates performance data for reporting.

Scalable and extensible, Icinga 2 can monitor large, complex
environments across multiple locations.
@
text
@d1 1
a1 1
# $NetBSD: Makefile $
d142 6
@