RHEA-2023:6390 - Product Enhancement Advisory

Topic

An update for rhel-system-roles is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

• BZ - 2123859 - when firewalld.service is masked, firewall role fails
• BZ - 2151373 - [RFE] system role for PostgreSQL management
• BZ - 2161712 - allow container networking configuration
• BZ - 2168692 - Storage: mounted devices that are in use cannot be resized
• BZ - 2175324 - use ansible-galaxy collection build/install instead of tar
• BZ - 2179026 - [RFE] New role for Red Hat subscription management, insights management [rhel-9.3.0]
• BZ - 2179455 - support quadlet units
• BZ - 2179457 - support for healthchecks and healthcheck actions
• BZ - 2179458 - use the proxy provider - the files provider is deprecated in sssd
• BZ - 2179460 - use restorecon -T 0 on supported platforms
• BZ - 2180902 - add mode parameter to change permissions for cert files
• BZ - 2181656 - RFE for the storage system role to support configuring the stripe size for RAID LVM volumes
• BZ - 2181657 - [RFE] user-specified mount point owner and permissions
• BZ - 2185002 - spec: Remove doc fragments from vendored modules
• BZ - 2185062 - fingerprint in config files managed by roles
• BZ - 2185065 - support for resource and operation defaults
• BZ - 2185066 - use pcs to setup qdevice certificates if available
• BZ - 2185067 - Add possibility to load SBD watchdog kernel modules
• BZ - 2186218 - RHC system role: activation key registration fails if system is already registered
• BZ - 2186253 - add ad_integration_force_rejoin
• BZ - 2193058 - Cannot set chunk size for RAID: Unsupported parameters for (blivet) module: pools.raid_chunk_size
• BZ - 2209200 - rhc system role does not apply Insights tags
• BZ - 2210916 - [RHEL9] Failed to commit changes to disk: Failed to format device: Input/output error
• BZ - 2211187 - support auto_reset_crashkernel, dracut_args, deprecate /etc/sysconfig/kdump
• BZ - 2211194 - Support configuring auto-dns setting
• BZ - 2211748 - implement rhc_proxy.scheme
• BZ - 2211984 - Podman system role: Unable to use podman_registries_conf to set unqualified-search-registries
• BZ - 2213691 - [RHEL8] Unexpected behavior when creating ext4 filesystem with invalid parameter
• BZ - 2216481 - cluster and quorum can have distinct passwords
• BZ - 2216520 - Don't install python(3)-firewall it's a dependency of firewalld
• BZ - 2216753 - add ssh_backup option with default true
• BZ - 2218592 - Support no-aaaa DNS option
• BZ - 2222428 - Check mode fails when creating new firewall service
• BZ - 2222761 - should have option to disable conflicting services
• BZ - 2223032 - facts being gathered unnecessarily
• BZ - 2223764 - fix: reload on resetting to defaults
• BZ - 2224090 - RAID volume pre cleanup - remove existing data from member disks as needed before creation
• BZ - 2224138 - rhel-system-roles.certificate does not re-issue after updating key_size
• BZ - 2224384 - systemd system role for managing systemd units
• BZ - 2224385 - keylime_server system role for managing keylime servers
• BZ - 2227821 - rhc: baseurl in rhsm.conf is empty when rhc_baseurl is not specified
• BZ - 2229802 - missing module in linux-system-roles.firewall to create an ipset
• BZ - 2232231 - kdump system role fails if kdump_ssh_user doesn't have a .ssh/authorized_keys file in home directory
• BZ - 2232241 - kdump role: "Write new authorized_keys if needed" task idempotency issues

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index