File opsiconfd.spec of Package opsiconfd

Overview Repositories Revisions Requests Users Attributes Meta

File opsiconfd.spec of Package opsiconfd (Revision 7c50e20c710877f9de1853829323d6a7)

Currently displaying revision 7c50e20c710877f9de1853829323d6a7 , Show latest

Summary: opsi configuration service
Name: opsiconfd
Version: 4.2.0.298
Release: 1
Group: Productivity/Networking/opsi
License: AGPL-3.0
URL: https://www.opsi.org
Vendor: uib GmbH <info@uib.de>
Packager: uib GmbH <info@uib.de>
Source: opsiconfd_4.2.0.298-1.tar.gz
BuildRoot: %{_tmppath}/opsiconfd-4.2.0.298-build
BuildRequires: systemd
Requires: (librsync or librsync2 or librsync1)
Requires: pigz
AutoReqProv: no

%description
opsi configuration service

%global debug_package %{nil}
%clean

%prep

%setup -n opsiconfd-4.2.0.298

%define _build_id_links none
%build

%install
>INSTALLED_FILES
if [ %{_arch} = 'x86_64' ]; then
   sys_arch="amd64"
elif [ "%{_arch}" = "i386" ]; then
   sys_arch="i586"
elif [ "%{_arch}" = "i386" ]; then
   sys_arch="i586"
elif [ "%{_arch}" = "aarch64" ]; then
   sys_arch="arm64"
elif [ "%{_arch}" = "noarch" ]; then
   sys_arch="all"
fi
for rootfs in rootfs rootfs-${sys_arch}; do
   if [ -d ${rootfs} ]; then
      find  ${rootfs} -type d -print0 | while read -d $'\0' file; do
      dst=$(echo $file | sed s"#^${rootfs}##")
         [ "$dst" == "" ] && continue
         mkdir -p "${RPM_BUILD_ROOT}${dst}"
         [ "$dst" == "/usr/bin" -o "$dst" == "/usr/lib" ] && continue
         echo "%dir \"${dst}\"" >>INSTALLED_FILES
      done
      find ${rootfs} -not -type d -print0 | while read -d $'\0' file; do
         dst=$(echo $file | sed s"#^${rootfs}##")
         cp -a "$file" "${RPM_BUILD_ROOT}${dst}"
         if [[ $dst == /etc/logrotate.d/* ]]; then
            echo "%config \"${dst}\"" >>INSTALLED_FILES
         elif [[ $dst == /etc/* ]]; then
            echo "%config(noreplace) \"${dst}\"" >>INSTALLED_FILES
         else
            echo "\"${dst}\"" >>INSTALLED_FILES
         fi
      done
   fi
done
mkdir -p %{buildroot}%{_unitdir}
for unit in systemd_units/*; do
   install -D -m 0644 $unit %{buildroot}%{_unitdir}/
   echo "\"%{_unitdir}/$(basename $unit)\"" >>INSTALLED_FILES
done
INSTALLED_FILES="$(echo $INSTALLED_FILES | tr " " "\n" | sort -u)"
cat INSTALLED_FILES

%files -f INSTALLED_FILES
%defattr(-,root,root)

%post 
dist=$(grep PRETTY_NAME /etc/os-release | cut -d'"' -f2)

# Distribution specific workarounds
if [[ "$dist" =~ "Red Hat Enterprise Linux 8" ]] || [[ "$dist" =~ "CentOS Linux 8" ]] || [[ "$dist" =~ "AlmaLinux 8" ]] || [[ "$dist" =~ "Rocky Linux 8" ]] || [[ "$dist" =~ "Oracle Linux Server 8" ]]; then
  # PAM unable to dlopen(/usr/lib64/security/pam_unix.so): /usr/lib/opsiconfd/libcrypto.so.1.1: version `OPENSSL_1_1_1b' not found (required by /lib64/libk5crypto.so.3)
  cp /usr/lib64/libcrypto.so.1.1 /usr/lib/opsiconfd/libcrypto.so.1.1
elif [[ "$dist" =~ "SUSE Linux Enterprise Server 15 SP1" ]]; then
  # opsiconfd setup: /bin/sh: /usr/lib/opsiconfd/libreadline.so.7: no version information available (required by /bin/sh)
  cp /lib64/libreadline.so.7 /usr/lib/opsiconfd/libreadline.so.7
elif [[ "$dist" =~ "SUSE Linux Enterprise Server 15 SP2" ]]; then
  # /usr/lib/opsiconfd/libssl.so.1.1: symbol EVP_idea_cbc, version OPENSSL_1_1_0 not defined in file libcrypto.so.1.1
  cp /usr/lib64/libssl.so.1.1 /usr/lib/opsiconfd/libssl.so.1.1
fi

# Use pam_unix.so from system
# Authentication failure (auth_type=auth-module)...
# ARM64: ubuntu: /usr/lib/aarch64-linux-gnu, debian: /lib/aarch64-linux-gnu
for libdir in /usr/lib/x86_64-linux-gnu /lib/x86_64-linux-gnu /lib64  /usr/lib/aarch64-linux-gnu /lib/aarch64-linux-gnu; do
  [ -e ${libdir}/libpam.so.0 ] && cp ${libdir}/libpam.so.0 /usr/lib/opsiconfd/libpam.so.0
done

# Remove obsolete files
[ -e /etc/logrotate.d/opsiconfd ] && rm /etc/logrotate.d/opsiconfd || true
rm /etc/rc*/*opsiconfd 2>/dev/null || true
[ -e /etc/init.d/opsiconfd ] && rm /etc/init.d/opsiconfd
[ -e /etc/opsi/systemdTemplates ] && rm -r /etc/opsi/systemdTemplates
[ -e /etc/systemd/system/opsiconfd.service.simple ] && rm /etc/systemd/system/opsiconfd.service.simple
[ -e /etc/systemd/system/opsiconfd.service ] && rm /etc/systemd/system/opsiconfd.service
systemctl daemon-reload || true

# Setup opsiconfd
/usr/bin/opsiconfd setup --log-level-stderr=5 --log-level-file=0 --run-as-user=opsiconfd || true
grep "run-as-user" /etc/opsi/opsiconfd.conf >/dev/null || echo -e "run-as-user = opsiconfd" >> /etc/opsi/opsiconfd.conf

%systemd_post %{name}.service

%systemd_preun %{name}.service

%systemd_postun_with_restart %{name}.service

%changelog
* Wed Dec 14 2022 uib GmbH <info@uib.de> 4.2.0.298-1
- Bugfix:  webdav dir browser
* Fri Dec 09 2022 uib GmbH <info@uib.de> 4.2.0.297-1
- Improvement:  updated python-opsi to 4.2.0.318 to allow control files in toml format
* Mon Nov 28 2022 uib GmbH <info@uib.de> 4.2.0.296-1
- Improvement:  add check_opsi_licenses
- Improvement:  Update python packages
- Improvement:  New file permissions for opsi CA key
* Fri Nov 25 2022 uib GmbH <info@uib.de> 4.2.0.295-1
- Improvement:  server health check
- Improvement:  config allow host key only auth
- Improvement:  add server health check
* Fri Nov 11 2022 uib GmbH <info@uib.de> 4.2.0.294-1
- Improvement:  Update python packages
* Thu Nov 03 2022 uib GmbH <info@uib.de> 4.2.0.293-1
- Improvement:  Update python packages
* Mon Oct 31 2022 uib GmbH <info@uib.de> 4.2.0.292-1
- Bugfix:  python-opsi dependencies
* Fri Oct 21 2022 uib GmbH <info@uib.de> 4.2.0.291-1
- No public changes
* Wed Oct 05 2022 uib GmbH <info@uib.de> 4.2.0.290-1
- Improvement:  Split skip-setup "ssl" into "server_cert" and "opsi_ca"
* Fri Sep 30 2022 uib GmbH <info@uib.de> 4.2.0.289-1
- Improvement:  Update python packages
* Mon Sep 26 2022 uib GmbH <info@uib.de> 4.2.0.288-1
- Bugfix:  session max age on admin page
- Improvement:  Update xterm.js to 5.0.0
- Bugfix:  Fix write_error_log
- Improvement:  New default for --symlink-logs is true
* Fri Sep 09 2022 uib GmbH <info@uib.de> 4.2.0.287-1
- Bugfix:  fix ucs44 reboot
- Improvement:  Update python packages
- Improvement:  welcome page add link to webgui (if loaded)
* Mon Sep 05 2022 uib GmbH <info@uib.de> 4.2.0.286-1
- Improvement:  Update python packages
* Wed Aug 17 2022 uib GmbH <info@uib.de> 4.2.0.285-1
- Bugfix:  Fix admin interface logout button
- Improvement:  Update python packages
- Bugfix:  updated opsicommon to 4.2.0.293 - fixed jsonrpc cleanup
* Mon Aug 01 2022 uib GmbH <info@uib.de> 4.2.0.283-1
- No public changes
* Fri Jul 22 2022 uib GmbH <info@uib.de> 4.2.0.282-1
- Improvement:  Allow access to /boot for hosts
* Thu Jul 21 2022 uib GmbH <info@uib.de> 4.2.0.281-1
- Improvement:  Update python packages
- Bugfix:  Always ignore max sessions for depot servers
* Mon Jul 18 2022 uib GmbH <info@uib.de> 4.2.0.280-1
- Improvement:  Update python-opsi (4.2.0.301 -> 4.2.0.305)
- Improvement:  Update python packages
* Thu Jul 14 2022 uib GmbH <info@uib.de> 4.2.0.279-1
- Improvement:  Update python packages
* Wed Jul 13 2022 uib GmbH <info@uib.de> 4.2.0.278-1
- Improvement:  Update python packages
* Tue Jul 12 2022 uib GmbH <info@uib.de> 4.2.0.277-1
- Improvement:  Update python packages
* Thu Jul 07 2022 uib GmbH <info@uib.de> 4.2.0.276-1
- Improvement:  Send WWW-Authenticate header but not on XMLHttpRequest
* Wed Jul 06 2022 uib GmbH <info@uib.de> 4.2.0.275-1
- Bugfix:  error in rest api with dict response
* Wed Jul 06 2022 uib GmbH <info@uib.de> 4.2.0.274-1
- No public changes
* Tue Jul 05 2022 uib GmbH <info@uib.de> 4.2.0.273-1
- Improvement:  Update python packages
- Improvement:  Use /etc/os-release instead of lsb_release
* Fri Jun 10 2022 uib GmbH <info@uib.de> 4.2.0.272-1
- Bugfix:  Fix WebDAV mount on Windows
* Wed Jun 08 2022 uib GmbH <info@uib.de> 4.2.0.271-1
- Feature:  ReverseProxy grafana websocket support
* Wed Jun 08 2022 uib GmbH <info@uib.de> 4.2.0.270-1
- Improvement:  Show login page after session timeout
- Feature:  Implement login page
* Wed Jun 01 2022 uib GmbH <info@uib.de> 4.2.0.269-1
- Improvement:  Preserve host for grafana proxy
* Tue May 31 2022 uib GmbH <info@uib.de> 4.2.0.268-1
- Bugfix:  Fix grafana redirect
* Tue May 31 2022 uib GmbH <info@uib.de> 4.2.0.267-1
- Improvement:  Update python packages
* Wed May 25 2022 uib GmbH <info@uib.de> 4.2.0.266-1
- Improvement:  Update python packages
* Wed May 25 2022 uib GmbH <info@uib.de> 4.2.0.265-1
- Improvement:  Replace "Configed" tab with "Links"
- Improvement:  Redirect stdin to /dev/null
* Mon May 23 2022 uib GmbH <info@uib.de> 4.2.0.264-1
- Improvement:  Update python packages
* Fri May 20 2022 uib GmbH <info@uib.de> 4.2.0.263-1
- Improvement:  Speedup session handling
* Thu May 19 2022 uib GmbH <info@uib.de> 4.2.0.262-1
- Improvement:  Update python-opsi (4.2.0.291 -> 4.2.0.292)
- Improvement:  Improve redis connection handling
* Fri May 13 2022 uib GmbH <info@uib.de> 4.2.0.261-1
- Improvement:  Update python packages
- Bugfix:  fix adminpage tab line break
* Mon May 09 2022 uib GmbH <info@uib.de> 4.2.0.260-1
- Improvement:  Update python packages
* Wed May 04 2022 uib GmbH <info@uib.de> 4.2.0.259-1
- Feature:  Show JSONRPC method documentation in Admin interface if available
- Improvement:  Update python packages
- Improvement:  Add buttons to change terminal font size
* Fri Apr 29 2022 uib GmbH <info@uib.de> 4.2.0.258-1
- Improvement:  Update python packages
- Bugfix:  Fix grafana auto login / set-cookie
* Tue Apr 26 2022 uib GmbH <info@uib.de> 4.2.0.257-1
- Improvement:  Update python packages
* Fri Apr 22 2022 uib GmbH <info@uib.de> 4.2.0.256-1
- No public changes
* Wed Apr 20 2022 uib GmbH <info@uib.de> 4.2.0.255-1
- Improvement:  config change welcome page type to str2bool
* Thu Apr 14 2022 uib GmbH <info@uib.de> 4.2.0.254-1
- Bugfix:  bug with welcome page
- Improvement:  install addon show messages (error/success)
* Fri Apr 08 2022 uib GmbH <info@uib.de> 4.2.0.253-1
- Improvement:  new version
* Thu Apr 07 2022 uib GmbH <info@uib.de> 4.2.0.252-1
- Improvement:  Update python packages
* Wed Apr 06 2022 uib GmbH <info@uib.de> 4.2.0.250-1
- Improvement:  update python-opsi / python-opsi-common
- Improvement:  admin page clear license cache
* Fri Apr 01 2022 uib GmbH <info@uib.de> 4.2.0.249-1
- Improvement:  Update python packages
- Improvement:  Retry backend connection on master failure
- Improvement:  add welcome page
* Mon Mar 28 2022 uib GmbH <info@uib.de> 4.2.0.248-1
- Improvement:  Update python packages
- Improvement:  Update cookie via websocket message
- Improvement:  Rework admin interface log viewer
- Improvement:  Improve layout, maximize tab
- Feature:  Terminal resize
* Wed Mar 23 2022 uib GmbH <info@uib.de> 4.2.0.247-1
- Improvement:  Update python packages
* Sat Mar 12 2022 uib GmbH <info@uib.de> 4.2.0.246-1
- No public changes
* Wed Mar 09 2022 uib GmbH <info@uib.de> 4.2.0.245-1
- Improvement:  Always wait for session to be stored in redis
* Fri Feb 25 2022 uib GmbH <info@uib.de> 4.2.0.244-1
- Bugfix:  Fix reading RedisTimeSeries data
* Fri Feb 25 2022 uib GmbH <info@uib.de> 4.2.0.243-1
- Improvement:  Update python-opsi-common (4.2.0.276 -> 4.2.0.277)
* Thu Feb 24 2022 uib GmbH <info@uib.de> 4.2.0.242-1
- Improvement:  Add licensing tab
- Improvement:  Impove grafana setup
- Improvement:  Update python-opsi-common (4.2.0.275 -> 4.2.0.276)
- Bugfix:  Fix creating grafana dashboard user
* Thu Feb 24 2022 uib GmbH <info@uib.de> 4.2.0.241-1
- Improvement:  Update python packages
* Wed Feb 23 2022 uib GmbH <info@uib.de> 4.2.0.240-1
- Improvement:  Update python packages
* Mon Feb 21 2022 uib GmbH <info@uib.de> 4.2.0.239-1
- Improvement:  Add config admin-interface-terminal-shell
- Improvement:  Use configured user shell
* Mon Feb 21 2022 uib GmbH <info@uib.de> 4.2.0.238-1
- Improvement:  Update python-opsi (4.2.0.272 -> 4.2.0.273)
- Improvement:  Update python packages
- Bugfix:  Fix nagios disk usage check
* Fri Feb 18 2022 uib GmbH <info@uib.de> 4.2.0.237-1
- Improvement:  Update python packages
- Improvement:  Improve terminal latency
* Wed Feb 16 2022 uib GmbH <info@uib.de> 4.2.0.236-1
- Feature:  Allow to disable admin interface features
- Improvement:  Update python packages
- Improvement:  Admin page hash links
- Feature:  Terminal file upload
- Feature:  Add terminal application
- Improvement:  Log config on setup
* Tue Feb 08 2022 uib GmbH <info@uib.de> 4.2.0.235-1
- Improvement:  Update python packages
* Mon Feb 07 2022 uib GmbH <info@uib.de> 4.2.0.234-1
- Improvement:  Updated python packages
* Thu Feb 03 2022 uib GmbH <info@uib.de> 4.2.0.233-1
- Improvement:  Show days until cert renewal in admin interface
- Feature:  Add WebDAV link on admin interface
- Improvement:  Config file is optional
* Fri Jan 28 2022 uib GmbH <info@uib.de> 4.2.0.232-1
- Improvement:  Update python pacakages
- Feature:  Add central webdav share /webdav
* Wed Jan 26 2022 uib GmbH <info@uib.de> 4.2.0.231-1
- Improvement:  Recreate server cert if ca is renewed
* Tue Jan 25 2022 uib GmbH <info@uib.de> 4.2.0.230-1
- Improvement:  Check server cert against ca
- Improvement:  Improve ssl info in admin interface
- Improvement:  Version 4.2.0.230 running with python 3.10
- Improvement:  Update fastapi to 0.73
- Improvement:  Update python packages
* Fri Jan 21 2022 uib GmbH <info@uib.de> 4.2.0.229-1
- No public changes
* Wed Jan 12 2022 uib GmbH <info@uib.de> 4.2.0.228-1
- No public changes
* Wed Jan 12 2022 uib GmbH <info@uib.de> 4.2.0.227-1
- Improvement:  Update python packages
* Fri Jan 07 2022 uib GmbH <info@uib.de> 4.2.0.226-1
- Improvement:  Recreate server cert if key or cert unreadable
- Improvement:  Check server cert and key mismatch
- Improvement:  Add lsb-release to dependencies
- Bugfix:  Fix setting RLIMIT_NOFILE
- Improvement:  Update python packages
* Wed Dec 22 2021 uib GmbH <info@uib.de> 4.2.0.225-1
- Improvement:  Log System Volume Information MKCOL error with debug level
- Bugfix:  Make /public readonly
* Fri Dec 17 2021 uib GmbH <info@uib.de> 4.2.0.224-1
- Improvement:  Update python-opsi
* Wed Dec 15 2021 uib GmbH <info@uib.de> 4.2.0.223-1
- Feature:  adminpage unlock all products
- Feature:  adminpage unlock products
- Bugfix:  monitoring product status -d all
- Feature:  adminpage show locked products
* Wed Dec 15 2021 uib GmbH <info@uib.de> 4.2.0.222-1
- Bugfix:  Fix grafana / session problem
* Mon Dec 13 2021 uib GmbH <info@uib.de> 4.2.0.221-1
- Improvement:  Disable max session per ip for depot servers
- Bugfix:  Fix webdav handling of special characters in filenames
* Fri Dec 10 2021 uib GmbH <info@uib.de> 4.2.0.220-1
- Improvement:  monitoring test if depot exists and if clients match
* Fri Dec 03 2021 uib GmbH <info@uib.de> 4.2.0.219-1
- Bugfix:  Fix login for recent grafana version
* Wed Dec 01 2021 uib GmbH <info@uib.de> 4.2.0.218-1
- Improvement:  Update opsi packages
* Fri Nov 26 2021 uib GmbH <info@uib.de> 4.2.0.217-1
- No public changes
* Thu Nov 25 2021 uib GmbH <info@uib.de> 4.2.0.216-1
- Improvement:  Log rotation for client logs
- Improvement:  Update python packages
* Wed Nov 24 2021 uib GmbH <info@uib.de> 4.2.0.215-1
- Bugfix:  Skip server certificate check if ssl in skip-setup
* Thu Nov 18 2021 uib GmbH <info@uib.de> 4.2.0.214-1
- Bugfix:  added postinst fix for SSL library incompatibility of SLES15-X
* Mon Nov 15 2021 uib GmbH <info@uib.de> 4.2.0.213-1
- Bugfix:  Update python-opsi to fix onetime password auth
* Mon Nov 15 2021 uib GmbH <info@uib.de> 4.2.0.212-1
- Improvement:  Update python packages
* Wed Nov 10 2021 uib GmbH <info@uib.de> 4.2.0.211-1
- Bugfix:  Fix addon reload
* Mon Nov 08 2021 uib GmbH <info@uib.de> 4.2.0.210-1
- Feature:  List and install addons via admin interface
* Fri Oct 29 2021 uib GmbH <info@uib.de> 4.2.0.208-1
- Feature:  Show sessions on admin page
- Feature:  Show routes on info page
* Mon Oct 11 2021 uib GmbH <info@uib.de> 4.2.0.207-1
- Improvement:  updated python-opsi to 4.2.0.247 (minor cleanup)
- Feature:  Reload button on admininterface
- Feature:  Implement AddonManager
* Wed Oct 06 2021 uib GmbH <info@uib.de> 4.2.0.206-1
- Bugfix:  Fix ipv6 client session handling
* Fri Oct 01 2021 uib GmbH <info@uib.de> 4.2.0.205-1
- Improvement:  Update python packages
* Tue Sep 28 2021 uib GmbH <info@uib.de> 4.2.0.204-1
- Improvement:  add debug option: rpc error log
* Wed Sep 22 2021 uib GmbH <info@uib.de> 4.2.0.203-1
- Bugfix:  arm64 pam workaround
- Bugfix:  logger reload (stderr,file)
* Tue Sep 21 2021 uib GmbH <info@uib.de> 4.2.0.202-1
- Improvement:  Update python-opsi
* Tue Sep 21 2021 uib GmbH <info@uib.de> 4.2.0.201-1
- Improvement:  Update python-opsi
* Mon Sep 20 2021 uib GmbH <info@uib.de> 4.2.0.200-1
- Improvement:  add arm64 build
* Thu Sep 16 2021 uib GmbH <info@uib.de> 4.2.0.199-1
- Improvement:  New defaults for session-lifetime and max-session-per-ip
- Improvement:  Do not keep zsync2 sessions
* Thu Sep 16 2021 uib GmbH <info@uib.de> 4.2.0.198-1
- No public changes
* Thu Sep 16 2021 uib GmbH <info@uib.de> 4.2.0.197-1
- Improvement:  Update python-opsi
* Wed Sep 15 2021 uib GmbH <info@uib.de> 4.2.0.196-1
- Improvement:  Update python packages
- Bugfix:  Delete session on backend_exit
- Improvement:  Update python-opsi
* Thu Sep 02 2021 uib GmbH <info@uib.de> 4.2.0.195-1
- Improvement:  Update python-opsi
- Bugfix:  Check if log file exists before rotate
- Improvement:  Answer with jsonrpc 2.0 response if client sends jsonrpc 2.0 request
* Fri Aug 27 2021 uib GmbH <info@uib.de> 4.2.0.194-1
- Improvement:  Follow jsonrpc 2.0 spec
- Improvement:  Update python packages
- Feature:  WebDAV ignore case filesystem access on depot
* Tue Aug 24 2021 uib GmbH <info@uib.de> 4.2.0.193-1
- Feature:  Show username
- Feature:  Logout button
- Improvement:  Require file admin rights to access depot
- Feature:  Show Server-Timinig on JSONRPC-Interface page
* Tue Aug 10 2021 uib GmbH <info@uib.de> 4.2.0.192-1
- Bugfix:  problem with file logging
* Fri Aug 06 2021 uib GmbH <info@uib.de> 4.2.0.190-1
- Bugfix:  Fix pam_unix error on ubuntu 20.04
* Mon Aug 02 2021 uib GmbH <info@uib.de> 4.2.0.189-1
- Improvement:  Workaround for pam issues on SLES15 SP3
* Fri Jul 23 2021 uib GmbH <info@uib.de> 4.2.0.188-1
- Improvement:  OBS: build ARM packages
* Thu Jul 22 2021 uib GmbH <info@uib.de> 4.2.0.187-1
- Bugfix:  update python opsi - fix mysql connection charset
* Tue Jul 20 2021 uib GmbH <info@uib.de> 4.2.0.186-1
- Improvement:  update python-opsi
* Fri Jul 16 2021 uib GmbH <info@uib.de> 4.2.0.185-1
- Bugfix:  Fix pam authentication on debian 11
* Thu Jul 15 2021 uib GmbH <info@uib.de> 4.2.0.184-1
- Bugfix:  Fix logging issues in case of worker errors
- Improvement:  Update python packages
* Tue Jul 06 2021 uib GmbH <info@uib.de> 4.2.0.183-1
- Improvement:  Update python-opsi
* Fri Jun 25 2021 uib GmbH <info@uib.de> 4.2.0.181-1
- Improvement:  Update python-opsi
- Improvement:  Improve help text
* Fri Jun 18 2021 uib GmbH <info@uib.de> 4.2.0.180-1
- Improvement:  Update python packages
- Feature:  Allow client certificate creation
* Thu Jun 17 2021 uib GmbH <info@uib.de> 4.2.0.179-1
- Improvement:  Removed isDefault flag from opsiconfd grafana datasource
* Mon Jun 14 2021 uib GmbH <info@uib.de> 4.2.0.178-1
- Improvement:  Update python-opsi
* Fri Jun 11 2021 uib GmbH <info@uib.de> 4.2.0.177-1
- Improvement:  Update python-opsi
- Feature:  Add config ssl-trusted-certs
- Feature:  Add config grafana-verify-cert
* Fri Jun 11 2021 uib GmbH <info@uib.de> 4.2.0.176-1
- Improvement:  Process /var/lib/opsi/public in setup
- Improvement:  Do not verify grafana ssl cert
* Thu Jun 10 2021 uib GmbH <info@uib.de> 4.2.0.175-1
- Improvement:  Auto upgrade grafana plugin grafana-simple-json-datasource
- Feature:  add new public webdav share (/var/lib/opsi/public)
- Improvement:  Redirect /admin/grafana only
- Improvement:  Add favicon.ico
- Improvement:  Changed WsgiDAV dir browser configuration
* Mon Jun 07 2021 uib GmbH <info@uib.de> 4.2.0.174-1
- Bugfix:  fix postinst add run-as-user to config
- Bugfix:  Do not open multiple log websockets
- Improvement:  Update python-opsi
- Bugfix:  Fix maxmimum number of log records in redis streams
- Feature:  Get number of log records in redis
* Mon May 31 2021 uib GmbH <info@uib.de> 4.2.0.173-1
- Improvement:  Deactivating client panel because it slows down grafana a lot in big environments
* Thu May 27 2021 uib GmbH <info@uib.de> 4.2.0.172-1
- Improvement:  Update python-opsi
* Fri May 21 2021 uib GmbH <info@uib.de> 4.2.0.171-1
- Improvement:  Do not return localdomain in getDomain()
- Bugfix:  Fix monitoring user authentication
- Improvement:  Add node_name to redis log key
- Improvement:  Update python-opsi
- Bugfix:  Use session-lifetime from config
- Improvement:  Always use the same server fqdn from config
- Feature:  Show ca and cert expiry on status page
- Feature:  Warn if common name of CA changes
- Feature:  Start webgui application
- Improvement:  Add missing newline in config file
- Feature:  Add configuration --ssl-ca-subject-cn
- Improvement:  Implement force-stop
- Feature:  Add config --worker-stop-timeout and it for systemd
- Feature:  Limitation of the log records in redis streams
- Improvement:  Improve zeroconf registration
- Improvement:  Refactor zeroconf
- Feature:  Run mysql update in setup tasks
- Bugfix:  Fix monitoring path
- Feature:  Monitor redis memory usage
- Bugfix:  check disk if hostid != fqdn
- Bugfix:  some fixes monitoring
- Improvement:  Update python opsi
- Feature:  Add actions "status" and "restart"
- Improvement:  Show certificate serail number on admin interface and remove subjectKeyIdentifier
- Feature:  Auto recreate server cert on runtime
- Improvement:  Cleanup file headers
- Feature:  adminpage: show num server/clients
- Bugfix:  Fix opsiconfd reload with running log-viewer
- Improvement:  Add ipv6 addresses to cert alternative names
- Bugfix:  Determine correct arbiter pid
- Improvement:  Check if another opsiconfd arbiter is running
- Improvement:  Add opsi CA download link on info page
- Improvement:  adminpage: mv config -> info; add ssl info
- Bugfix:  Fix worker reloading
- Improvement:  Install opsi ca into system store
- Improvement:  Improve help text for --ssl-ciphers
- Feature:  Log warning if client calls deprecated method
- Bugfix:  Fix redis reconnect
- Improvement:  Set default executor-workers to 10
- Bugfix:  Fix ipv6 listen with one worker
- Improvement:  Improve worker memory usage
- Improvement:  Do not use libjemalloc by default
- Improvement:  Use jemalloc by default
- Improvement:  If jemalloc is configured but not available, log an error but continue
- Improvement:  Measure worker memory usage over an interval of a hour
- Feature:  Set default executor workers to 8
- Improvement:  Always use the supervisor
- Improvement:  Improve log viewer
- Feature:  New config --restart-worker-mem to restart workers with high mem usage
- Feature:  Implement a worker supervisor
- Feature:  Memory profiling with objgraph
- Bugfix:  Add jsonrpc metrics to retention
- Bugfix:  Fix rentention aggregation
- Feature:  Implement opsiconfd log-viewer
- Improvement:  ca key file only accessible by root
- Improvement:  Add full context on logging
- Feature:  Change ssl handling and defaults
- Improvement:  new config parameter grafana-data-source-url
- Improvement:  Lower memory usage
- Bugfix:  Fix file permissions of dhcpd.conf
- Feature:  Allow to run opsiconfd with jemalloc
- Improvement:  Align timeseries timestamps for grafana 7.4 stacking
- Improvement:  Change ssl file permissions
- Improvement:  Create group shadow, PAM libcrypto workaround for red hat 8
- Feature:  Store CA and server key encrypted
- Improvement:  Store CA key encrypted
- Feature:  admininterface memory profiler
- Improvement:  Speed up redis time series using redis pipe and ON_DUPLICATE SUM
- Feature:  Cleanup log file dir
- Improvement:  Rework metrics storage
- Bugfix:  Limit memory usage on WebDAV file sending
- Bugfix:  Fix avg_http_response_bytes statistics
- Bugfix:  Fix closing of log files
- Feature:  Export workbench via WebDAV, depot rw
- Improvement:  WebDAV speedup by wsgi zero-copy
- Bugfix:  Add missing content-length header
- Feature:  Publish opsi config service with zeroconf
- Improvement:  Sort config dictionary
- Feature:  Implement msgpack-rpc
- Improvement:  Improve config file migration and defaults
- Feature:  Allow to download opsi ca
- Feature:  Reverse proxy support
- Improvement:  Improved ipv6 handling
- Improvement:  Rework admin page
- Improvement:  grafana autologin
- Bugfix:  Correct date in log viewer
- Feature:  Add subject alternative names and ips to cert
- Feature:  opsiconfd devcontainer
- Improvement:  Correct rights on dhcpd.conf
- Improvement:  Remove remote-fs.target from Requires in unit file
- Improvement:  do not depend on remote-fs.target
- Improvement:  Allow systemctl daemon-reload to fail
- Improvement:  start opsiconfd after mysql, mariadb and redis if installed
- Improvement:  Set permissions on ssl dir
- Feature:  Create and keep opsi CA, check certificate expiry
- Feature:  jsonrpc method getProductOrdering now cached in redis
- Feature:  allow to configure setup tasks to skip
- Feature:  SSL cipher suites configurable
- Feature:  opsiconfd monitoring
- Improvement:  speed up redis session handling
- Feature:  Log Server-Timing with info level
- Bugfix:  fix grafana refresh interval
- Improvement:  Change default grafana dashboard refresh interval to 60s
- Improvement:  Log warning if no available connections in redis connection pool
- Improvement:  change defaults for max-auth-failures and auth-failures-interval
- Feature:  deliver correct client domain not default domain with getDomain
- Feature:  implement lz4 compression / decompression
- Feature:  implement zlib and gzip compression of jsonrpc responses
- Feature:  Allow to specify networks which are allowed to connect
- Improvement:  init client backend on worker start to speed up first request
- Improvement:  speed up session handling
- Improvement:  set default log format in log viewer
- Improvement:  always initalize backends on --setup
- Improvement:  speed up big webdav uploads by 25x
- Improvement:  Log a warning if a worker disappears
- Bugfix:  update python-opsi to fix librsync segementation faults on debian 10
- Improvement:  change default for grafana-external-url
- Improvement:  update python-opsi, sqlalchemy and opsi-dev-tools
- Bugfix:  fix file permissions on setup
- Improvement:  remove obsolete /etc/logrotate.d/opsiconfd in postinst
- Bugfix:  fix rpc backend_exit
- Improvement:  always setup opsiconfd user and groups on startup
- Feature:  Update ip address and lastseen in backend
- Feature:  Allow to filter logs with --log-filter
- Improvement:  rpc interface moved to admin page
- Feature:  redis interface on adminpage
- Feature:  auto setup grafana on startup
- Feature:  Show defaults in --help output
- Feature:  adminpage show list of blocked clients / sort RPC table
- Feature:  admininterface show rpc info
- Bugfix:  Fix websockets patch
- Bugfix:  Assert that functions to patch are unchanged
- Feature:  Send correct Server header
- Bugfix:  Update to python-opsi 4.2.0.35 which fixes usage of opsipxeconfd backend
- Feature:  opsiconfd admin web interface
- Bugfix:  Fix websocket error responses
- Feature:  Improved signal handling for single process environments
- Feature:  opsiconfd will now reload config file on SIGHUP
- Bugfix:  Fix timezone handling for metrics
- Bugfix:  fix cookie header parsing

Places

File opsiconfd.spec of Package opsiconfd (Revision 7c50e20c710877f9de1853829323d6a7)

Places