- Issued:
- 2018-02-19
- Updated:
- 2018-02-19
RHBA-2018:0330 - Bug Fix Advisory
Synopsis
Satellite Maintenance bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
A new version of foreman-maintain and satellite-clone have been released to fix various bugs and add various enhancements to the tool set.
Description
Satellite Maintenance is a set of tools for managing and operating Red Hat Satellite Server.
Bug Fixes
- Improvements to foreman-maintain code for determining release
versions and repositories has been made. (BZ#1486445, BZ#1524800, BZ#1527730)
- If an upgrade failed, it was possible to start an upgrade to a different target version, which would fail. The code now prevents using a different target if an upgrade has already been started. (BZ#1487539)
- A failed check or update had exit status 0 when it should be 1 or another non-zero error code. This has been fixed. (BZ#1487546)
- An improvement to error messages for foreman-maintain has been made. (BZ#1495568)
- The foreman-tasks-not-running check failed to detect a running task started from the web UI. The code now detects running tasks initiated in the web UI. (BZ#1496384)
- The foreman-maintain tool did not handle beta repositories for upgrade testing. This has been fixed, beta repositories can now be used for upgrade testing. (B#1496590)
- The --version option was missing in the usage statement for "foreman-maintain advanced procedure run repositories-setup". This is now fixed. (BZ#1497130)
- The satellite-clone script now ensures cloned Satellites cannot synchronize to Capsules in the source environment if the upgrade fails. (BZ#1500386)
- A manual page has been added for Satellite-clone. (BZ#1505481)
- The --state option was missing in the usage statement for "foreman-maintain advanced procedure run foreman-tasks-fetch-tasks-status". This is now fixed.(BZ#1506119)
- The "foreman-maintain health check" test has been changed to ignore email polling tasks. (BZ#1508454)
- Upgrading failed on disabling synchronization plans because of incorrect permissions for "/etc/profile" and "/etc/profile.d/*". This is now fixed. (BZ#1509364)
- When migrating a system from Red Hat Enterprise Linux 6 to 7, the satellite-clone scripts incorrectly ran twice. This is now fixed. (BZ#1511362)
- The python-pulp-agent-lib package was moved into the tools repository for 6.3. Consequently, if the package was installed and the satellite-tools repository not enabled, upgrading from 6.2 to 6.3-Beta failed due to missing dependencies. The foreman-maintain code has been improved to enable the tools repository during an upgrade. (BZ#1512959)
- After migrating with satellite-clone and a backup was restored, the Content Host and All Host pages failed to load because REX was disabled as part of satellite-clone. Now, REX is not disabled during the cloning process. (BZ#1514383)
- When cloning from backup, if IPA authentication was configured on the old server and but not on the new server, the installer failed. The "--foreman-ipa-authentication false" option is now applied in the installer phase and the problem no longer occurs. (BZ#1515917)
- Before starting the clone process, the satellite-clone tool now checks that there is no Satellite package installed on the server. (BZ#1517729)
- During Satellite clone, a failed Ansible task caused the Ansible run to be repeated. Now satellite-clone just runs once. (BZ#1542292)
Enhancements
- The satellite-clone tool now has a --start-at-task option to enable starting from a specific task. It is also now possible to interactively skip tasks. (BZ#1515391)
- Satellite-clone removes entries from the "/etc/hosts" file by default. An "overwrite_etc_hosts" flag has been added to "roles/satellite-clone/defaults/main.yml" to enable this function to be disabled. (BZ#1515847)
- The satellite-clone tool will no longer register to the portal by default, allowing for a smaller set of default parameters. (BZ#1519515, BZ#1527338)
- Satellite clone now shows the Ansible task progress. (BZ#1523954)
Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat Enterprise Linux Server 7 x86_64
- Red Hat Enterprise Linux Workstation 7 x86_64
Fixes
- BZ - 1486445 - foreman-maintain upgrade fails to properly enable 6.2 repos
- BZ - 1487539 - Don't allow to run against different --target-version if one upgrade is already in progress
- BZ - 1487546 - Failed check/procedure/upgrade should exit with non-zero error code
- BZ - 1495568 - Providing invalid phase in foreman-maintain upgrade run shows undefined method `to_hash' for nil:NilClass
- BZ - 1496384 - check for foreman-tasks-not-running is not working
- BZ - 1496590 - Upgrades: Need a way to skip the repository settings or use the BETA repos during 6.3 beta
- BZ - 1497130 - --version is missing in foreman-maintain advanced procedure run repositories-setup -h
- BZ - 1500386 - satellite-clone can still cause cloned Satellite to sync to live capsules
- BZ - 1505481 - [RFE] Satellite-clone needs a man page
- BZ - 1506119 - option '--state' is missing in foreman-maintain advanced procedure run foreman-tasks-fetch-tasks-status -h
- BZ - 1508454 - Running tasks test doesn't ignore 'Actions::Insights::EmailPoller'
- BZ - 1511362 - satellite-clone migrating Sat6 from RHEL6 causes Sync Plans are run twice
- BZ - 1512959 - Upgrade from 6.2 -> 6.3 failed due to dependency issue in case python-pulp-agent-lib package installed on satellite
- BZ - 1514383 - After restoring satellite backup using satellite-clone utility, upon login to webui/accessing "All Hosts" and "Content Hosts" page fails with error "ActiveRecord::SubclassNotFound:" for HostStatus::ExecutionStatus
- BZ - 1515391 - [RFE] Allow satellite-clone to skip/resume some tasks
- BZ - 1515847 - satellite-clone removed needed /etc/hosts entries
- BZ - 1515917 - IPA authentication causes issues on sat-clone
- BZ - 1517729 - Ensure Satellite isn't installed before starting clone process
- BZ - 1519515 - Make portal registration false by default
- BZ - 1523954 - [RFE] Need a progress bar for satellite-clone command
- BZ - 1523957 - While running foreman-maintain (for 6.1 to 6.2) upgrade, it fails while stopping services due to incorrect option
- BZ - 1525006 - Package fio not available
- BZ - 1527338 - Satellite-clone fails with mandatory parameters warning message.
- BZ - 1542292 - Running satellite-clone triggers the playbook run twice
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 7
SRPM | |
---|---|
ansible-2.4.2.0-2.el7.src.rpm | SHA-256: 24f6e9de9991db4720ea171198c5a646a9d677390e7814eb6fdb02f3447dd94e |
fio-3.1-2.el7.src.rpm | SHA-256: 907f80d5fc4d0870a1ce07a47106d966f0075d1bf6b9174e0c90fa037658e948 |
python-jmespath-0.9.0-4.el7ae.src.rpm | SHA-256: 39cad65a0eda393d3a9f3fa65d357081036c3bd276b26b60aaa16f8356e8cc75 |
rubygem-foreman_maintain-0.1.3-1.el7sat.src.rpm | SHA-256: 254654951ffefcb417f73fd9d61dca535cb0e6f5b8053169257f22ec2361fffa |
satellite-clone-1.2.2-1.el7sat.src.rpm | SHA-256: 22204a3d2860e8ae3ae1fc0bbbd5a9e446a1ba2b57255a89a43192a67ef9426c |
x86_64 | |
ansible-2.4.2.0-2.el7.noarch.rpm | SHA-256: 84256a2d89ec877df9b646e83eab50ac57a3db3d0fd13f4b6835aa52c80337ec |
fio-3.1-2.el7.x86_64.rpm | SHA-256: 72f34d727c62867364916bce6b08383e8dbc6e21c3d9e4c159e68ed7fe7039e2 |
fio-debuginfo-3.1-2.el7.x86_64.rpm | SHA-256: 25d65d827c9aa01a16a8a9f56781fe7b69bfdcd3aed077c3862be617f08584e0 |
python2-jmespath-0.9.0-4.el7ae.noarch.rpm | SHA-256: 766862f83804267ea5fc1d6e5d2deb7a0bd29763b7c9b253ca76e83fe53eb842 |
rubygem-foreman_maintain-0.1.3-1.el7sat.noarch.rpm | SHA-256: bab9847d084eca717523b9ae99d0b0f19adb39f8d02b59996822801d40eccd98 |
satellite-clone-1.2.2-1.el7sat.noarch.rpm | SHA-256: bfe8079d017b6d681aec0dca560a1003cb0fba6a36ad803ee49689b91260bb1d |
Red Hat Enterprise Linux Workstation 7
SRPM | |
---|---|
ansible-2.4.2.0-2.el7.src.rpm | SHA-256: 24f6e9de9991db4720ea171198c5a646a9d677390e7814eb6fdb02f3447dd94e |
fio-3.1-2.el7.src.rpm | SHA-256: 907f80d5fc4d0870a1ce07a47106d966f0075d1bf6b9174e0c90fa037658e948 |
python-jmespath-0.9.0-4.el7ae.src.rpm | SHA-256: 39cad65a0eda393d3a9f3fa65d357081036c3bd276b26b60aaa16f8356e8cc75 |
rubygem-foreman_maintain-0.1.3-1.el7sat.src.rpm | SHA-256: 254654951ffefcb417f73fd9d61dca535cb0e6f5b8053169257f22ec2361fffa |
satellite-clone-1.2.2-1.el7sat.src.rpm | SHA-256: 22204a3d2860e8ae3ae1fc0bbbd5a9e446a1ba2b57255a89a43192a67ef9426c |
x86_64 | |
ansible-2.4.2.0-2.el7.noarch.rpm | SHA-256: 84256a2d89ec877df9b646e83eab50ac57a3db3d0fd13f4b6835aa52c80337ec |
fio-3.1-2.el7.x86_64.rpm | SHA-256: 72f34d727c62867364916bce6b08383e8dbc6e21c3d9e4c159e68ed7fe7039e2 |
fio-debuginfo-3.1-2.el7.x86_64.rpm | SHA-256: 25d65d827c9aa01a16a8a9f56781fe7b69bfdcd3aed077c3862be617f08584e0 |
python2-jmespath-0.9.0-4.el7ae.noarch.rpm | SHA-256: 766862f83804267ea5fc1d6e5d2deb7a0bd29763b7c9b253ca76e83fe53eb842 |
rubygem-foreman_maintain-0.1.3-1.el7sat.noarch.rpm | SHA-256: bab9847d084eca717523b9ae99d0b0f19adb39f8d02b59996822801d40eccd98 |
satellite-clone-1.2.2-1.el7sat.noarch.rpm | SHA-256: bfe8079d017b6d681aec0dca560a1003cb0fba6a36ad803ee49689b91260bb1d |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.