RHEA-2022:7568 - Product Enhancement Advisory

Topic

An update for rhel-system-roles is now available for Red Hat Enterprise Linux 8.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.8 x86_64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64

Fixes

• BZ - 1996731 - [RFE] Extend rhel-system-roles.network feature set to support routing rules
• BZ - 2043009 - [Improvement] Allow System Role to reset to default Firewalld Settings
• BZ - 2056480 - RFE storage Less verbosity by default
• BZ - 2058807 - logging tests fail during cleanup if no cloud-init on system
• BZ - 2060377 - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run [rhel-8.7.0]
• BZ - 2060378 - kernel_settings error configobj not found on RHEL 8.6 managed hosts [rhel-8.7.0]
• BZ - 2064067 - bond: fix typo in supporting the infiniband ports in active-backup mode
• BZ - 2065215 - metrics - consistently use ansible_managed in configuration files managed by role [rhel-8.7.0]
• BZ - 2065216 - postfix - consistently use ansible_managed in configuration files managed by role [rhel-8.7.0]
• BZ - 2065217 - pytest failed when running with nm providers in the rhel-8.5 beaker machine [rhel-8.7.0]
• BZ - 2065218 - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default [rhel-8.7.0]
• BZ - 2065339 - ha_cluster - support advanced corosync configuration
• BZ - 2065670 - network - consistently use ansible_managed in configuration files managed by role [rhel-8.7.0]
• BZ - 2066868 - ha_cluster - support SBD fencing
• BZ - 2066876 - storage - support for creating and managing LVM thin pools/LVs
• BZ - 2066880 - storage - support for adding/removing disks to/from storage pools
• BZ - 2066881 - storage - support for attaching cache volumes to existing volumes
• BZ - 2071011 - NBDE client system role does not support servers with static IP addresses [rhel-8.7.0]
• BZ - 2072749 - Tlog role - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
• BZ - 2073518 - ha_cluster - add support for configuring bundle resources
• BZ - 2075116 - Logging - RFE - support template, severity and facility options
• BZ - 2075338 - FIPS mode detection in SSHD role is wrong
• BZ - 2078650 - Firewall system role Ansible deprecation warning related to "include"
• BZ - 2079008 - All roles should support running with gather_facts: false
• BZ - 2079114 - [RFE] add an option to the metrics role to enable postfix metric collection
• BZ - 2081839 - Update Ansible syntax in Firewall system role README.md file examples
• BZ - 2082391 - [RHEL8] [WARNING]: The loop variable 'storage_test_volume' is already in use. You should set the `loop_var` value in the `loop_control` option for the task to something else to avoid variable collisions and unexpected behavior.
• BZ - 2083378 - storage role cannot set mount_options for volumes
• BZ - 2083426 - storage role raid_level "striped" is not supported
• BZ - 2086869 - Rework the infiniband support
• BZ - 2086934 - sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has "Include > /etc/ssh/sshd_config.d/*.conf"
• BZ - 2086935 - sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL 9
• BZ - 2089868 - network: the controller device is not completely cleaned up in the bond tests.
• BZ - 2093437 - state no longer required for masquerade and ICMP block inversion
• BZ - 2093500 - Move tasks that set up CI environment to roles tasks/ dir
• BZ - 2096397 - coverity scan - thinlv checked for None after access
• BZ - 2100285 - document minimum supported redis version required by rhel-system-roles
• BZ - 2100297 - firewall - support add/modify/delete services
• BZ - 2100298 - metrics - restart pmie, pmlogger if changed, do not wait for handler
• BZ - 2100939 - RFE: firewall-system-role: add ability to add interface to zone by PCI device ID
• BZ - 2100979 - [RFE] [network] Support managing the network through nmstate schema
• BZ - 2101607 - forward_port should accept list of string or list of dict
• BZ - 2109997 - ssh, sshd: RSAMinSize parameter definition is missing
• BZ - 2112143 - [RFE] Support startmsg.regex and endmsg.regex in the files inputs
• BZ - 2115159 - Add customization of port
• BZ - 2115160 - support for firewall_config - gather firewall facts
• BZ - 2115161 - Sets proper spacing for parameter rd.neednet=1
• BZ - 2115162 - Added setting of seuser and selevel for completeness
• BZ - 2115884 - fix IPRouteUtils.get_route_tables_mapping() to accept any whitespace sequence
• BZ - 2129875 - Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles [rhel-8.7]

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index