openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File sos.changes of Package sos

-------------------------------------------------------------------
Tue Feb 20 10:12:36 UTC 2024 - ecsos <ecsos@opensuse.org>

- Update to 4.7.0
  * Global Changes
    - Added support for S3 uploads.
  * Policy Changes
    - Fixed dist_version() for Ubuntu.
    - Dropped the RedHatAtomic policy.
    - Changed the authentication for RHEL uploads to use device auth instead of username/password.
  * Report Changes
    - Added a new preset for app_eda (Ansible Automation Platform Event Drive Ansible).
  * Plugin Changes
    - New plugins: aide, app_eda, coredump', infinidat, vectordev.
    - The networking plugin now uses a predicate for ss commands on Ubuntu.
    - Enabled the kubernetes plugin for Debian.
    - Dropped the atomic plugin.
    - Fixed an issue with the command predicate for the lxd plugin when enabled via a snap.
    - The nvme plugin now collects additional files per nvme drive on the host.
  * Collect Changes
    Added a transport for Saltstack.
  * Cleaner Changes
    - clean will no longer try to obfuscate words that are 3 characters or less in length.
    - clean will now properly obfuscate the upload password (if provided) in our own logs.

-------------------------------------------------------------------
Mon Jan 15 14:47:26 UTC 2024 - ecsos <ecsos@opensuse.org>

- Update to 4.6.1
  * Global Change
    - Fixed code warnings for file not always closed and for mixing implicit and explicit returns.
    - `packaging.version' is now preferred for package version parsing.
    - Packaging and testing on deb packages has been started.
    - Copr builds for centos stream are newly configured.
  * Report Changes
    - Flatpak package manager is added.
  * Plugin Changes
    - More ovn and ovnkube logs collected.
    - New MAAS 3.5 data collected.
    - Added two new plugins for OpenStack Masakari.
    - New Greenboot plugin separated from Microshift plugin.
    - Several improvements have been made to the Microshift plugin.
    - Dynaconf and auth passwords are properly obfuscated in both Pulp plugins.
    - Microceph plugin now collects mgr data and ceph daemon commands in OSD node.
    - Salt plugin collects more data about services, grains or pillars.
  * Collector Changes
    - get_pty functionality has been refactored.
- Changes from 4.6.0
  * Report Changes
    - sos report will no longer use a non / sysroot for network device enumeration
  * Plugin Changes
    - New plugins: slurm
    - The containerd plugin now enables off the containerd.io package
    - The ceph_common plugin will no longer enable automatically on cinder nodes
    - The discovery plugin will now be enabled by the presence of relevant containers
    - The ubuntu plugin will no longer collect ua_tools_status output if the tls module is not loaded
    - The firewall_tables plugin will now always capture the nat table, where previously it could be erroneously missed
    - The openshift_ovn plugin will now collect ovn db files
  * Cleaner Changes
    - Archive extraction now uses fully_trusted_filter as per requirements for python-3.10+ runtimes
- Changes from 4.5.6
  * Global Changes
    snaps are now automatically built and pushed with new releases.
    Fixed an incompatibility issue with python-3.12 runtimes.
  * Report Changes
    Added a new ceph profile for use in those types of environments.
  * Plugin Changes
    Fixed an issue with the enablement of ceph plugins possibly be erroneously enabled.
    Fixed an issue with multiline regexes raising exceptions on python 3.11 runtimes.
    The lustre plugin now collects more debug parameters.
    The ssh plugin now controls collection of user ~/.ssh/config files via the userconfs option.
        The default for the option is set to true/on/enabled, preserving previous behavior.
  * Cleaner Changes
    Obfuscated files will now have their permissions set to match the source file.
    Refined the regex used to extract MAC addresses, and will now match underscore separated addresses.
- Changes from 4.5.5
  * Global Changes
    sos.spec has been updated to more closely align with Fedora guidelines.
    Build snaps as part of merging to main should be more reliable now.
  * Report Changes
    Fixed a bug where scrubbing certificate content would fail as a result of us implicitly using the re.I flag for plugin-based postprocessing.
  * Plugin Changes
    New plugins: cxl, vault
    Fixed a bug where if sos was running inside a container, and a plugin attempted to collect a symlink to a host file, that the plugin would instead capture the container's version of that file.
    Fixed a bug where redundant attempts to create a plugin's sos_commands/ subdirectory would result in an exception.
    The apache plugin will now collect all /etc/httpd/conf/*.conf files by default.
    The ipa plugin will now collect SID and EPN logs.
    The grub2 plugin will now collect user-created config files.
    Spaces are now handled properly when scrubbing passwords within the sssd plugin.
    The docker plugin will now function for Debian based systems.
  * Collect Changes
    The ocp cluster profile will now more gracefully handle timeouts when trying to remove the temporary project after collections complete. Users are now also notified that if this occurs, they will need to manually delete the temporary project.
    Report execution errors handled within SosNode are now more consistently printed to console.
  * Cleaner Changes
    Refined MAC address parsing, so we should have more complete coverage of MAC address obfuscation
    The process of preparing cleaner mappings has been abstracted out into new Prepper objects. These preppers allow more flexible ways to extract relevant items for preparing mappings and parsers before the bulk obfuscation work begins. This is the first step in moving to a more efficient concurrency design, and subsequent changes and refinements are expected over the next few releases.
- Changes from 4.5.4
  * Policies
    Added a snap package manager abstraction so that policies and plugins may inspect package installations using the snap manager.
    Added a MultiPackagerManager that allows policies to leverage multiple package managers on the same system - e.g. a system using both dpkg and snaps.
    The Ubuntu policy will now use both the dpkg and snap package managers, so plugins will be enabled based on the installation of a package in either dpkg or snap format.
    The dpkg package manager will now properly remove recently-uninstalled packages from the returned package list.
    The Mariner policy has been renamed to Azure Linux to match the new upstream naming.
  * Report Changes
    Plugins will now collect truncated strings into the report before collecting command output.
  * Plugin Changes
    New plugins: rhc, microk8s
    The alternatives plugin now supports Ubuntu installations.
    The dnf plugin has removed the superflous use of --assumeno from commands that cannot generate the need for user input. Command file names will change accordingly.
    The apport plugin will now collect /var/crash if --all-logs is used.
    The lxd plugin will now collect logs and configuration files from locations based on snap installations as well.
    The apt plugin will now obfuscate credentials in list files.
    The kernel plugin will now collect /var/lib/systemd/pstore.
    The powerpc plugin will now collect RMC status logs and invscout logs.
    The foreman plugin will now collect qpid-stat output.
    The landscape plugin now collects more logs.
  * Collect Changes
    Fixed a bug that would prevent the juju cluster from collections when a subbordinate's parent or its units were missing.
    Fixed a bug where collect could end up skipping the local node if that node was part of the cluster but was not forcibly removed via strict_node_list (primarily pacemaker clusters).
- Changes from 4.5.3
  * Policy Changes
    Added a policy for CBL-Mariner Linux
    Fixed an issue in the ubuntu policy that could prevent archive uploads when users specified a manual --upload-url
  * Report Changes
    Usage of --enable-plugins, --skip-plugins, and --only-plugins from the command line will now properly override those values set by a preset if the preset added them to a conflicting option
  * Plugin Changes
    The lustre plugin will now collect ldiskfs information
    The zfs plugin will now collect from /proc/spl
    The firewalld plugin will now collect the ipsets, policies, and helpers subdirectories within /etc/firewalld/
    The iscsi plugin will now properly obfuscate password_in strings in collected files
    The ceph plugin will now collect a dump of mon's config database
    The powerpc plugin will now collect lsslot, amsstat, and opal elogs output
    The virsh plugin will now scrub spice passwords in virt-manager logs
  * Collect changes
    Added both a new transport and cluster profile for Juju environments
- Changes from 4.5.2
  * Global Changes
    Several stale dependencies have been dropped from the rpm packaging
    sos.spec has been migrated to using SPDX license syntax
    RPM builds of sos will now include a tmpfiles configuration so skip over /var/tmp/sos*, thus avoiding constant AVC errors from the service
  * Report Changes
    New option journal-size: controls how large sos will collect journal output of. Default is 100MB
    New option low-priority: will now cause sos to attempt to self-constrain its impact on the system.
        This option currently attempts to set the sos process to an idle IO class, and sets our niceness to 19
    New preset minimal: uses the low-priority option as well as reducing plugin timeouts and file collection sizes
    Archive contents are now ordered such that version.txt, manifest.json, and sos_logs/ are now first in the tarball, which should assist with any in-memory handling of tarballs via automation
    Fixed a bug that would cause double logging if a preset set verbosity levels
  * Plugin Changes
    The frr plugin will now collect command output from a container if that is how it is deployed

The unpackaged plugin will now list unpackaged symlinks and not the symlink's target

The iprconfig plugin is now gated by the sg kernel mod being loaded

Fixed a bug that would cause the CosLogs variant to be loaded for every distribution

The microshift plugin has been updated to use oc get commands

Plugin.do_file_sub() for plugin post-processing is now always case-insensitive in pattern matching
  * Cleaner Changes
    - Fix a bug where the finalizing the archive would fail if cleaner was instructed to obfuscate the keyword tmp
- Changes from 4.5.1
  * Global Changes
    Build failures for snaps will now be available within the CI run in which a particular build failed.
  * Report Changes
    A plethora of new tags and changed tags have been implemented across many collections to assist with Insights inspection.
    Fixed a bug where a potential duplicate command when run in a container could result in an incorrectly handled exception within the archive. If duplicate commands are called within the same container from the same plugin, there will no longer be an error.
    The ocp preset will no longer use the --verify option
  * Plugin Changes
    New plugins: ceph_iscsi, microshift, microshift_ovn
    The azure plugin has been updated to use a newer endpoint for metadata retrieval
    The rhui plugin will now properly obfuscate certain sensitive keys from collections
    The composer plugin will now capture /etc/osbuild-composer
    Running an ostree fsck is now gated behind the new ostree.fsck plugin option, and not tied to --verify
- Changes from 4.5.0
  * Global
    Snaps are now created automatically whenever a change is pushed to main. These snaps are available via snapcraft under latest/edge
    python3-magic is now a soft dependency, and if not present sos will use a less sophisticated method for determining if a file is binary or not
    distutils usage has been fully replaced by setuptools
  * Policies
    Added support for Anolis OS
    Added support for Circle Linux
    Added support for OpenCloudOS
    When loaded for an sos collect execution, a policy's remote_exec will now directly use the loaded transport's run_command functionality, rather than re-building command strings
    The Debian policy has been updated to correctly identify many more and newer Debian versions
    Fixed an issue with the RHEL policy that would prevent non-anonymous upload to the failover SFTP server if a case ID was not provided
  * Report
    A "tag_summary" section has been added to the report manifest.json. This is a dictionary with keys being tags that were created during collection, with values being all files sharing that tag
    sos_get_command_output() timeout handling will now properly handle the situation where a command's child process deadlocks but the timeout wrapper was able to kill the parent process, but left the child behind.
    Estimate mode for report will now report real disk usage, rather than apparent size
  * Plugins
    New plugins: containerd, fapolicyd
    The kernel plugin will now collect modprobe.d/*conf files
    The hpssm plugin will now collect show detail output per array and slot
    The crio plugin now supports CoS systems
    The dnf plugin will now properly obfuscate password variable values
    The flow of plugin code execution has been changed
        setup() is now strictly for determining what collections to perform, outside of calls to collect_cmd_output() in order to build further sets of commands
        _collect_plugin() is now used to actually perform the collections specfied by setup(). This now includes tailed file collections which were previously part of setup()
        collect() can now be used to perform ad-hoc/manual collections that are not strictly part of command output collection. If a plugin needs to manipulate data from commands or system information and then write it out manually (such as with the rpm plugin generating package output), it should now be done inside the collect() method
    The composer plugin has been overhauled and updated for the new versions of composer
    Enablement triggers have been expanded for the xfs, nvme, firewall_tables, and krb5 plugins
    The virsh plugin will now collect more information about the host/hypervisor system
    The various ceph_* plugins have been updated to collect the appropriate data for both older and more recent versions of ceph, including traditional installations and those deployed with cephadm
  * Collect
    Cluster profiles may now directly specify sos options to enforce on per-node report collections
    Added a new cluster profile for Red Hat Ceph Storage 5
        This new profile may work for other Ceph environments deployed with cephadm, but that is not tested
    Added a new saltstack transport
  * Cleaner|Mask
    The --domains option is now validated for items that look like a domain
    Fixed an issue where a file with encoding issues would be aborted by clean, but left in the archive. Files will now either show replaced content or be removed from the archive, rather than being left unobfuscated in any manner
    sos will no longer attempt to obfuscate the temp directory the archive is in before moving the archive at the end of cleaning
    Added a new parser to support IPv6 obfuscation

-------------------------------------------------------------------
Fri Dec 23 14:34:21 UTC 2022 - ecsos <ecsos@opensuse.org>

- Initial version 4.4

Places

File sos.changes of Package sos

Places