RHEA-2022:8117 - Product Enhancement Advisory

Topic

An update for rhel-system-roles is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
• Red Hat Enterprise Linux Server - AUS 9.6 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.2 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x

Fixes

• BZ - 2043010 - [Improvement] Allow System Role to reset to default Firewalld Settings
• BZ - 2044119 - [RHEL9] _storage_test_pool_pvs get wrong data type in test-verify-pool-members.yml
• BZ - 2051737 - [RFE] add an option to the metrics role to enable postfix metric collection
• BZ - 2052081 - sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has "Include > /etc/ssh/sshd_config.d/*.conf"
• BZ - 2052086 - sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL 9
• BZ - 2058799 - logging tests fail during cleanup if no cloud-init on system
• BZ - 2060523 - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run
• BZ - 2060525 - kernel_settings error configobj not found on RHEL 8.6 managed hosts
• BZ - 2061511 - Firewall system role Ansible deprecation warning related to "include"
• BZ - 2065337 - ha_cluster - support advanced corosync configuration
• BZ - 2065382 - network - consistently use ansible_managed in configuration files managed by role [rhel-9.1.0]
• BZ - 2065383 - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default [rhel-9.1.0]
• BZ - 2065392 - metrics - consistently use ansible_managed in configuration files managed by role [rhel-9.1.0]
• BZ - 2065393 - postfix - consistently use ansible_managed in configuration files managed by role [rhel-9.1.0]
• BZ - 2065394 - bond: fix typo in supporting the infiniband ports in active-backup mode [rhel-9.1.0]
• BZ - 2066911 - pytest failed when running with nm providers in the rhel-8.5 beaker machine [rhel-9.1.0]
• BZ - 2071804 - Tlog role - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
• BZ - 2072385 - [RFE] [network] Support managing the network through nmstate schema
• BZ - 2072742 - storage - support for adding/removing disks to/from storage pools
• BZ - 2072745 - storage - support for creating and managing LVM thin pools/LVs
• BZ - 2072746 - storage - support for attaching cache volumes to existing volumes
• BZ - 2073519 - ha_cluster - add support for configuring bundle resources
• BZ - 2073605 - FIPS mode detection in SSHD role is wrong
• BZ - 2075119 - Logging - RFE - support template, severity and facility options
• BZ - 2078989 - All roles should support running with gather_facts: false
• BZ - 2079622 - [RFE] Extend rhel-system-roles.network feature set to support routing rules
• BZ - 2079626 - ha_cluster - support SBD fencing
• BZ - 2079627 - RFE storage Less verbosity by default
• BZ - 2082736 - [RHEL9] [WARNING]: The loop variable 'storage_test_volume' is already in use. You should set the `loop_var` value in the `loop_control` option for the task to something else to avoid variable collisions and unexpected behavior.
• BZ - 2083376 - storage role cannot set mount_options for volumes
• BZ - 2083410 - storage role raid_level "striped" is not supported
• BZ - 2086965 - Rework the infiniband support
• BZ - 2089872 - network: the controller device is not completely cleaned up in the bond tests.
• BZ - 2093423 - state no longer required for masquerade and ICMP block inversion
• BZ - 2093438 - Move tasks that set up CI environment to roles tasks/ dir
• BZ - 2094096 - Update Ansible syntax in Firewall system role README.md file examples
• BZ - 2095523 - coverity scan - thinlv checked for None after access
• BZ - 2100251 - crypto_policies - rhel 8.7 default policy is FUTURE not DEFAULT
• BZ - 2100286 - document minimum supported redis version required by rhel-system-roles
• BZ - 2100292 - firewall - support add/modify/delete services
• BZ - 2100294 - metrics - restart pmie, pmlogger if changed, do not wait for handler
• BZ - 2100605 - forward_port should accept list of string or list of dict
• BZ - 2100942 - RFE: firewall-system-role: add ability to add interface to zone by PCI device ID
• BZ - 2109998 - ssh, sshd: RSAMinSize parameter definition is missing
• BZ - 2112145 - [RFE] Support startmsg.regex and endmsg.regex in the files inputs
• BZ - 2115152 - Add customization of port
• BZ - 2115154 - support for firewall_config - gather firewall facts
• BZ - 2115156 - Sets proper spacing for parameter rd.neednet=1
• BZ - 2115157 - Added setting of seuser and selevel for completeness
• BZ - 2115886 - fix IPRouteUtils.get_route_tables_mapping() to accept any whitespace sequence
• BZ - 2129873 - Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index