RHBA-2021:4159 - Bug Fix Advisory

Topic

An update for rhel-system-roles is now available for Red Hat Enterprise
Linux 8.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.5 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
• Red Hat Enterprise Linux Server - AUS 8.6 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.8 x86_64
• Red Hat Enterprise Linux Server - TUS 8.6 x86_64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

• BZ - 1757869 - rhel-system-roles should not reload the SELinux policy if its not changed
• BZ - 1848683 - [RFE] Ability to install custom SELinux module via Ansible
• BZ - 1854187 - storage: calltrace observed when set type: partition for storage_pools
• BZ - 1866544 - Documentation error in rhel-system-roles postfix readme file
• BZ - 1873589 - storage test tests_luks_pool.yml often fails with Failed to commit changes to disk: (FSError('format failed: 1',)
• BZ - 1876315 - storage: relabel doesn't support
• BZ - 1879785 - [storage] main-blivet.yml:90 test failed when persist stratis in system
• BZ - 1882475 - RFE: Request that VDO be added to the Ansible (redhat-system-roles)
• BZ - 1894642 - [RFE] storage: support volume sizes as a percentage of pool
• BZ - 1915017 - network: tests_bond_initscripts.yml leaves behind unusable resolv.conf in CI
• BZ - 1918210 - [network-role] Test tests_bond_initscripts.yml failed to create interface
• BZ - 1918252 - [network-role] Test tests_bond_nm.yml failed when checking interface after created
• BZ - 1931962 - Remove non-inclusive language leftover from README.md
• BZ - 1932699 - Error: device becoming unmanaged and pytest not reproducible in tests_integration_pytest.yml
• BZ - 1937938 - [Rebase] Rebase to latest upstream
• BZ - 1938014 - do not use ignore_errors in timesync role
• BZ - 1938016 - [RFE] support for timesync_max_distance to configure maxdistance/maxdist parameter
• BZ - 1938020 - [RFE] support for ntp xleave, filter, and hw timestamping
• BZ - 1938023 - [RFE] support for free form configuration for chrony
• BZ - 1939711 - support for ipv6_disabled to disable ipv6 for address
• BZ - 1943679 - [RFE] Release Ansible role for vpn in rhel-system-roles
• BZ - 1952090 - sshd role README.md examples use incorrect role name
• BZ - 1952620 - ha_cluster - cannot read preshared key in binary format
• BZ - 1954747 - Bug fixes for Collection/Automation Hub
• BZ - 1956823 - collections - create tarball, no HTML in collection roles directories
• BZ - 1957849 - Add hybrid_e2e option to PTP domain
• BZ - 1957876 - [Rebase] Rebase to latest upstream - 2
• BZ - 1958963 - postfix: Use FQRN in README
• BZ - 1959649 - network role: Support ethtool -G|--set-ring options
• BZ - 1960375 - the postfix role is not idempotent
• BZ - 1961858 - Postfix RHEL system role README.md missing variables under the "Role Variables" section
• BZ - 1962374 - logging README.html is rendered incorrectly
• BZ - 1962976 - Internal links in README.md are broken
• BZ - 1963283 - RFE: add pacemaker resources configuration
• BZ - 1966681 - selinux task for semanage says Fedora in name but also runs on RHEL/CentOS 8
• BZ - 1966711 - Unable to set sshd_hostkey_group and sshd_hostkey_mode
• BZ - 1967335 - metrics role task to enable logging for targeted hosts not working
• BZ - 1970642 - RFE: sshd - support for appending a snippet to configuration file
• BZ - 1970664 - RFE: timesync support for Network Time Security (NTS)
• BZ - 1970666 - [Rebase] Rebase to latest upstream - 3
• BZ - 1978357 - metrics role: Grafana dashboard not working after metrics role run unless services manually restarted
• BZ - 1978776 - main.yml: Add EL 9 support for all roles
• BZ - 1982897 - crypto_policies - rename 'policy modules' to 'subpolicies'
• BZ - 1982913 - RFE: ha_cluster - add pacemaker cluster properties configuration
• BZ - 1985572 - storage - covscan error - DEADCODE - vdopool if create_vdo else parent
• BZ - 1986284 - storage_test_actual_size != storage_test_requested_size observed with tests_lvm_auto_size_cap.yml
• BZ - 1986463 - [RFE] logging - Add a support for list value to server_host in the elasticsearch output
• BZ - 1987096 - Instead of the archive module, use "tar" command for backup.
• BZ - 1988574 - storage - allow skipping tests that use NVME and SCSI
• BZ - 1989199 - drop support for Ansible 2.8
• BZ - 1989638 - sshd: Add support for RHEL-9: add vars/RedHat_9.yml
• BZ - 1990142 - logging: tests_tests_relp.yml; Can't detect any of the required Python libraries cryptography (>= 1.2.3) or PyOpenSSL (>= 0.6)
• BZ - 1990793 - [storage role] Get syntax errors in tests_lvm_errors.yml
• BZ - 1990947 - sshd: failed to validate: error:Missing Match criteria for all Bad Match condition
• BZ - 1991141 - storage - tests_create_lvmvdo_then_remove fails - Module dm-vdo not found
• BZ - 1994580 - logging - Update the certificates copy tasks
• BZ - 1996317 - selinux - some tests give USER_AVC denied errors

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/index