File Minimal.changes of Package minimal-vm
-------------------------------------------------------------------
Mon Nov 3 19:19:10 UTC 2025 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
- Add security=apparmor to cmdline to avoid error if machine was not rebooted between
the bootloader and the apparmor states getting applied
- Remove default mitigations parameter from cmdline to fully match cmdline with Salt,
further avoiding the need for an additional reboot after the first highstate
-------------------------------------------------------------------
Wed Oct 1 00:38:30 UTC 2025 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
- Update KIWI NG schema to version 7.4
-------------------------------------------------------------------
Tue Sep 30 13:49:59 UTC 2025 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
- Update to Leap 16.0
-------------------------------------------------------------------
Wed Jan 15 22:52:30 UTC 2025 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
- Drop numad (deprecated and already set to be removed by Salt)
-------------------------------------------------------------------
Thu Jul 4 10:24:15 UTC 2024 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
- No longer delete /var/lib/systemd/random-seed
(no longer present with udev in 15.6 if installed through Kiwi?)
-------------------------------------------------------------------
Thu Jul 4 09:13:57 UTC 2024 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
- Disable defective keytable setting
-------------------------------------------------------------------
Tue Jun 11 13:57:14 UTC 2024 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
- Update to Leap 15.6
-------------------------------------------------------------------
Fri Apr 26 18:39:06 UTC 2024 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
- Add shim (managed by Salt, but pre-install to satisfy initial bootloader state)
-------------------------------------------------------------------
Sun Oct 22 13:15:17 UTC 2023 - Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>
- Drop cron, dhcp-client, firewalld, rsync, screen and suse-online-update
(no longer needed or managed by Salt)
- Remove zypper configuration
(managed by Salt)
-------------------------------------------------------------------
Sun Oct 22 12:39:13 UTC 2023 - Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>
Remove more settings manageable by Salt:
- DNS configuration
- openSUSE:infrastructure key import
- Service configuration
-------------------------------------------------------------------
Fri Sep 22 11:38:50 UTC 2023 - Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>
- Rename description and file names to reflect Minimal instead of JeOS
- Drop site-specific configuration
- Update configuration with changes from 15.5 minimal template
- Remove redundant code / use more native Kiwi functions
- Drop non-oss repository completely
- Overwrite default securetty
- Drop configuration managed by Salt (Postfix, Monitoring)
- Drop no longer needed packages, as well as ones installed by Salt
- Drop tuned service (not used on most existing machines)
- No longer disable non-existing services
- Switch from legacy boot UEFI
- Switch from ext4 to Btrfs
- Support Btrfs snapshots
- Build qcow2 image in addition to raw
- Set default disk size to 15GB
- Drop disabling of RPM signature checking (true is the default)
- Clean up XML file (run `xmllint --format`)
- Clean up configuration script
- Update repository key
-------------------------------------------------------------------
Thu Jun 8 07:53:26 UTC 2023 - Christian Boltz <suse-beta@cboltz.de>
- update to 15.5
-------------------------------------------------------------------
Thu Dec 29 21:00:47 UTC 2022 - Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>
- no longer install openSUSE-release-ftp, python2 + remove systemd-sysvinit dependency
- no longer add openSUSE:Infrastructure repository, conflicts with initial Salt highstate
- remove initial_setup.sh from tarball, install via opensuse-infrastructure-vm-bootstrap package instead
- Admin Team -> Heroes
-------------------------------------------------------------------
Wed Aug 3 10:46:49 UTC 2022 - Lars Vogdt <lars@linux-schulserver.de>
- openSUSE:Infrastructure switched to only use $releasever
- as xinetd only starts nrpe - switch to this service directly
+ includes adding the IP of the monitoring to nrpe.cfg
-------------------------------------------------------------------
Thu Jan 6 12:49:26 UTC 2022 - Lars Vogdt <lars@linux-schulserver.de>
- 15.4
-------------------------------------------------------------------
Wed Dec 29 12:02:07 UTC 2021 - Lars Vogdt <lars@linux-schulserver.de>
- add new SLE and backport repos per default
-------------------------------------------------------------------
Thu Dec 9 12:54:43 UTC 2021 - Lars Vogdt <lars@linux-schulserver.de>
- add cron to the list of installed packages
- allow user nagios to run suse-online-update in check_zypper
-------------------------------------------------------------------
Tue Nov 16 10:38:35 UTC 2021 - Lars Vogdt <lars@linux-schulserver.de>
- update to 0.4.1
- add/change sysctl settings:
+ do not use the privacy extension, we disabled it anyway:
'net.ipv6.conf.default.use_tempaddr=0'
-> disable_ipv6_autoconf.conf
+ make it easier to allow to disable/enable route verification on
all interfaces via net.ipv4.conf.all.rp_filter
-> rp_filter.conf
+ Disable response to broadcasts. You don't want yourself becoming
a Smurf amplifier: 'net.ipv4.icmp_echo_ignore_broadcasts=1'
-> ignore_broadcasts.conf
- added new nrpe check definitions:
+ check_external.cfg
+ check_private.cfg
+ check_apache_status.cfg
+ check_connections.cfg
+ check_cpu_stats.cfg
+ check_partition_var.cfg
+ check_ntp.cfg
+ check_logrotate_status.cfg
+ check_iostat_vdb.cfg
+ check_mysql.cfg
+ check_rsyslog.cfg
+ check_running_kernel.cfg
+ check_eth1.cfg
They are covering some defaults of the new monitoring setup.
- added udev rules to rename eth0 to private
- adjust /root/bin/initial_setup.sh
+ follow the renaming
+ add interactive mode for people, that need it
+ add the IP of the remote syslog server in /etc/hosts, as it might
happen, that the DNS resolution comes up too late for rsyslog
- install additional packages:
+ bzip2 (needed by some scripts for tar.bz2 files)
+ xfsprogs (to create/handle xfs filesystems)
- switch from EFI boot mode to legacy boot (saves some space on the
root disk of the VM. EFI is not really needed there atm.
- enforced to clean-up config.sh from deprecated values
+ moved /etc/hosts modification from config.sh to initial_setup.sh
- use releasever variable instead of hardcoded Leap version in
zypper repositories, which makes an upgrade easier
- remove check_mk from xinetd: not needed/used any longer
- be a bit more verbose in config.sh: makes debugging easier
- install nnd activate umad and tuned for performance tuning
- use systemctl to enable/disable services, as baseInsertService and
baseRemoveService seem not to work reliably at the moment
- disable a couple of (for a VM) unneeded services:
+ IPv4 & IPv6 DHCP
+ Network nanny
+ Raid/mdadm checks
+ lvm2 services
+ battery check timer
- switch to mq-deadline scheduler for vd* devices:
/etc/udev/rules.d/88-persistent-scheduler.rules
-------------------------------------------------------------------
Tue May 18 15:52:46 UTC 2021 - Lars Vogdt <lars@linux-schulserver.de>
- introduce new internal network 192.168.87.0/24 for QSC based hosts
-------------------------------------------------------------------
Tue Jan 26 20:23:25 UTC 2021 - Lars Vogdt <lars@linux-schulserver.de>
- added the following packages:
+ monitoring-plugins-connections
+ monitoring-plugins-cpu_stats
+ monitoring-plugins-rsyslog
+ monitoring-plugins-running_kernel
-------------------------------------------------------------------
Thu Jan 21 13:17:08 UTC 2021 - Lars Vogdt <lars@linux-schulserver.de>
- enhance initial_setup.sh with information for hosts in Provo
- re-add lsof, as this package is needed by zypper to run 'zypper ps'
-------------------------------------------------------------------
Sat Dec 21 12:48:05 UTC 2019 - Lars Vogdt <lars@linux-schulserver.de>
- initial version, based on the 0.2.1 version for openSUSE Leap 15.1
