preparing FreeIPA 4.8.9 release
by Alexander Bokovoy
Hi,
it is time for another FreeIPA 4.8 release. My plan is to do a release
either tomorrow, Friday, August 7th, or early next week, depending how
fast the following pull requests would be acked and backported to ipa-4-8:
PyCryptography 2.7+ compatibility:
https://github.com/freeipa/freeipa/pull/4936
CA cert permissions in CA-less setup:
https://github.com/freeipa/freeipa/pull/4989
Figuring out translations' updates:
https://github.com/freeipa/freeipa/pull/4981 and off-band research. I
might push the changes manually directly to Pagure to shortcut the
process as these are robot-produced ones and initial commit will be
huge.
Container platforms support:
https://github.com/freeipa/freeipa/pull/4992
Reliable client and server installation checks:
https://github.com/freeipa/freeipa/pull/4895
Web UI fixes for object class evaluator of user details facet:
https://github.com/freeipa/freeipa/pull/4720
We also have a breakage in Fedora Rawhide right now where Dogtag was
rebuilt against Java 11 and currently does not work due to missing
dependencies: https://bugzilla.redhat.com/show_bug.cgi?id=1866570
This one is being investigated by the Dogtag team, hopefully will be
fixed before the release.
Current draft of the release notes for ipa-4-8 branch are available at
https://vda.li/drafts/freeipa-4.8.9-release-notes.html
As usual, you can add release notes by modifying a 'changelog' field of
the corresponding Pagure ticket. For changes known in advance please add
them directly in the commit messages with RN: prefix. If you know
changes that warrant to do a release note but don't have time to add the
changelog entries yourself, please respond to this thread with your
comments and I'll incorporate them myself.
The list is generated using a slightly modified version of a release
notes tool from freeipa-tools. The changes are mostly around providing
bugzilla references from 'rhbz' field in Pagure ticket.
I'll push my changes soon but if you are interested in the run
arguments for the release notes tool, they are
python3 release/release-notes.py \
4.8.9 2020-08-07 4.8.8 4.8 release-4-8-8..origin/ipa-4-8 "FreeIPA 4.8" \
--links --token-file ~/.ipa/pagure.token --repo ~/src/freeipa-clean \
--nomilestones > ~/todo/freeipa-4.8.9-release-notes.txt
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
3 years, 8 months
[freeipa PR#4992][opened] Treat container subplatforms like main platform
by tiran
URL: https://github.com/freeipa/freeipa/pull/4992
Author: tiran
Title: #4992: Treat container subplatforms like main platform
Action: opened
PR body:
"""
ipa-server-upgrade does not like platform mismatches. Upgrade from an
old container to recent container fails with error message:
```
IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
("Unable to execute IPA upgrade: platform mismatch (expected 'fedora', current 'fedora_container')", 1)
```
Upgrade state now treats a container subplatform like its main platform.
``fedora_container`` is really a ``fedora`` platform with some paths
redirected to ``/data`` partition.
The patch also enhances debug logging for installer and upgrader.
Related: https://pagure.io/freeipa/issue/8401
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4992/head:pr4992
git checkout pr4992
3 years, 8 months