SUSE Manager Proxy 4.2 and SUSE Manager Retail Branch Server 4.2

Release Notes
2022-05-18 14:40:47 +0200
Table of Contents

  * Version revision history
  * About SUSE Manager Proxy 4.2
  * System requirements
  * SUSE Manager Proxy distribution
  * Installation and setup
  * Upgrade from previous version
  * SUSE Manager Server versions
  * Major changes since SUSE Manager Proxy 4.2 GA
      + Features and changes
          o Version 4.2.7
              # Salt 3004
          o Version 4.2.6
          o Version 4.2.5
              # Change proxy used for clients from the WebUI
          o Version 4.2.4
              # New product enabled
              # CentOS 8 support
              # Monitoring - Prometheus Blackbox exporter
          o Version 4.2.3
              # Monitoring Formulas
          o Version 4.2.2
              # Prometheus available for SUSE Manager Proxy and Retail Branch
                Server
              # Ansible
          o Version 4.2.1
      + Patches
          o Version 4.2.7
          o Version 4.2.6
          o Version 4.2.5
          o Version 4.2.4
          o Version 4.2.3
          o Version 4.2.2
          o Version 4.2.1
  * Major Changes Since SUSE Manager Proxy 4.1
      + Salt 3002
      + SLES 15 SP3 JeOS as a Base System
      + Base System Upgrade
  * Known issues
      + Proxy password
      + Single Sign On, API and CLI tools
  * Support
      + Support for CentOS 8
      + Future deprecation of the traditional stack
  * Providing feedback
  * Resources
  * Legal Notices
  * Colophon

This SUSE product includes materials licensed to SUSE under the GNU General
Public License (GPL). The GPL requires that SUSE makes available certain source
code that corresponds to the GPL-licensed material. The source code is
available for download.

For up to three years after SUSE?s distribution of the SUSE product, SUSE will
mail a copy of the source code upon request. Requests should be sent by e-mail
or as otherwise instructed here. SUSE may charge a fee to recover reasonable
costs of distribution.

Version revision history

  * June 20th 2022: 4.2.7 release

  * April 25th 2022: 4.2.6 release

  * Feburary 2022: 4.2.5 release

  * December 3rd, 2021: 4.2.4 release

  * October 27th, 2021: 4.2.3 release

  * September 20th, 2021: 4.2.2 release

  * August 12th, 2021: 4.2.1 release

  * June 21st, 2021: 4.2 GA

About SUSE Manager Proxy 4.2

SUSE Manager Proxy provides mirroring proxy support for large and distributed
environments.

Operation of the proxy is completely transparent. The SUSE Manager Proxy looks
like a managed client to SUSE Manager Server, and like a server to the managed
clients. Managed clients talk to the Proxy only, and the Proxy in turn
communicates to the SUSE Manager Server.

All software packages that pass the SUSE Manager Proxy are cached and
subsequent client requests for these packages are resolved from the cache.

System requirements

SUSE Manager Proxy is available for x86_64 architecture only. We recommend you
have at least 8 GB main memory, and approximately 50 GB of disk space per
distribution or channel.

Consider additional disk space required for storing images for retail
terminals.

For more details on system requirements, see the Installation Guide on https://
documentation.suse.com/suma/4.2/.

SUSE Manager Proxy distribution

SUSE Manager Proxy 4.2 is provided through SUSE Customer Center and can be
installed with the unified installer for SUSE Linux Enterprise 15 SP3.

Installation and setup

Installation of SUSE Manager Proxy 4.2 is done with the SUSE Manager Server 4.2
Web interface.

For more details on installing and configuring SUSE Manager Proxy 4.2, see the
Installation Guide on https://documentation.suse.com/suma/4.2/.

Upgrade from previous version

To upgrade an existing SUSE Manager Proxy 4.1 or 4.0 system to SUSE Manager
Proxy 4.2, you can do an in-place upgrade, or you can set up a new system to
replace the old one.

For more information about upgrading, see the Upgrade Guide on https://
documentation.suse.com/suma/4.2/.

SUSE Manager Server versions

SUSE Manager Proxy 4.2 works only with SUSE Manager 4.2 Server.

SUSE Manager Server 4.2 works with SUSE Manager Proxy 4.0 and SUSE Manager
Proxy 4.1 but only for migration purposes. The product is not intended to be
used in a mixed-version scenario in production.

Major changes since SUSE Manager Proxy 4.2 GA

Features and changes

Version 4.2.7

Salt 3004

Salt has been upgraded to upstream version 3004, plus a number of patches,
backports, and enhancements by SUSE, for the SUSE Manager Server, Proxy, Retail
Branch server and some Client Tools(where the client operating system supports
Python 3.5+; otherwise Salt 3000 or 2016.11.10 are used).

Salt 3004 only works with Python 3.5+, therefore:

  * Salt 3004 is only available on SLE 15, RHEL 8 (and clones: CentOS, Oracle
    Linux, SLES Expanded Support and AlmaLinux), Ubuntu 18.04 and 20.04, Debian
    10 and Debian 11. There is no Python 2 version for Salt 3004.

  * Salt 3000 is still the version of Salt for SLE 12, RHEL 7 (and clones:
    CenOS, Oracle Linux, SLES Expanded Support, Amazon Linux and Alibaba Cloud
    Linux) and Debian 9. Only a Python 2 version is provided for Salt 3000.

  * Salt 2016.11.10 is still the version of Salt for SLE 11 SP4. Only a Python
    2 version is provided.

We intend to regularly upgrade Salt to more recent versions, including those
which are still on Salt 3000.

For more details, see the Salt 3004 upstream release notes.

Version 4.2.6

Bugfix release.

Version 4.2.5

Change proxy used for clients from the WebUI

It is now possible to change the proxy used by an Uyuni client using the WebUI.

This can be done from the Connection tab at the Details tab for any Salt
client, using the new link Change to change the connection type.

Using System Set Manager is supported as well, and can be done from the Misc
tab, and then Proxy tab.

NOTE: Changing the connection for a Proxy to move it, is not supported at this
moment. The Connection tab will not show the Change link for proxies.

Version 4.2.4

New product enabled

  * SUSE Linux Enterprise Server 15 SP2 LTSS

CentOS 8 support

CentOS 8 will be End of Life on 31st December 2021, and with that the SUSE
Manager support for this product will end as well.

Please refer to support section for more information.

Monitoring - Prometheus Blackbox exporter

SUSE Manager 4.2.4 comes with the Blackbox exporter, which allows blackbox
probing of endpoints over HTTP, HTTPS, DNS, TCP, and ICMP. Please note that it
needs to be installed next to the Prometheus server and not on the clients.
Prometheus formula has been extended to configure blackbox exporter.

The package prometheus-blackbox_exporter has been added as recommended for the
Proxy.

Version 4.2.3

Monitoring Formulas

One of the limitations of the current formulas is that they are listed against
every client, even if the supported packages are not available for that OS
version or service pack. While we are continuously focused on improving the
formulas, for now, starting with the monitoring formulas it will be mentioned
in docs if applying those formulas would actually work in the case of a
particular client.

In 4.2.2, we made the Prometheus package available for SUSE Manager Proxy and
Retail Branch Server but that is not the case with Grafana.

  * Prometheus is available for the client tools for SLE12/SLE15/openSUSE15/
    SUSE Manager proxy/Retail Branch Server

  * Grafana is available for the client tools for SLE12/SLE15/openSUSE15

Version 4.2.2

Prometheus available for SUSE Manager Proxy and Retail Branch Server

From this version, the Prometheus package will also be available for SUSE
Manager Proxy and Retail Branch Server. In case you plan to use the branch
server or proxy as a monitoring server with Prometheus, be aware that
Prometheus demands additional hardware resources.

Ansible

The Ansible package will also be available for SUSE Manager Proxy and Retail
Branch Server, which makes it possible to use SUSE Manager Proxy and Retail
Branch Server as Ansible control Node.

When making SUSE Manager Proxy or Retail Branch Server an Ansible control Node,
the extra load can affect the performance of this critical component. Bad
performance of the Branch Server can further affect attached clients.

Version 4.2.1

Bugfix release.

Patches

The SUSE Patch Finder is a simple online service to view released patches.

Version 4.2.7

POS_Image-RPi-Bootstrap:

  * Remove obsolete suseConfig call

  * Replace baseStripDocs call

  * Remove obsolete baseCleanMount

spacecmd:

  * Version 4.2.17-1

      + parse boolean paramaters correctly (bsc#1197689)

spacewalk-backend:

  * Version 4.2.21-1

      + Improve parsing deb packages dependencies (bsc#1194594)

spacewalk-certs-tools:

  * Version 4.2.16-1

      + Add Salt Bundle support to bootstrap script generator

spacewalk-web:

  * Version 4.2.27-1

      + increase web page default timeout (bsc#1187333)

      + Add ssh_salt_pre_flight_script and ssh_use_salt_thin parameters to
        default rhn_web.conf

      + Upgrade minimist to fix CVE-2021-44906

      + susemanager-nodejs-sdk-devel is now provided by spacewalk-web

      + Resolve race conditions in CLM (bsc#1195710)

Version 4.2.6

mgr-cfg:

  * Version 4.2.8-1

      + Fix the condition for preventing building python 2 subpackage for SLE15
        (bsc#1197579)

  * Version 4.2.7-1

      + Fix installation problem for SLE15SP4 due missing python-selinux

mgr-osad:

  * Version 4.2.8-1

      + Fix the condition for preventing building python 2 subpackage for SLE15

mgr-push:

  * Version 4.2.5-1

      + Fix the condition for preventing building python 2 subpackage for SLE15

patterns-suse-manager:

  * Golang-github-wrouesnel-postgres_exporter was renamed to
    prometheus-postgres_exporter

rhnlib:

  * Version 4.2.6-1

      + Fix the condition for preventing building python 2 subpackage for SLE15

spacecmd:

  * Version 4.2.16-1

      + implement system.bootstrap (bsc#1194909)

      + Fix interactive mode for "system_applyerrata" and "errata_apply" (bsc#
        1194363)

spacewalk-backend:

  * Version 4.2.20-1

      + Fix reposync update notice formatting and date parsing (bsc#1194447)

      + implement more decompression algorithms for reposync (bsc#1196704)

      + enable check for client certificates in reposync

      + remove auto inherit of host entitlements for virtual guests

spacewalk-certs-tools:

  * Version 4.2.15-1

      + Add dynamic version for bootstrap script header (bsc#1186336)

spacewalk-client-tools:

  * Version 4.2.18-1

      + Fix the condition for preventing building python 2 subpackage for SLE15

  * Version 4.2.17-1

      + Update translation strings

spacewalk-oscap:

  * Version 4.2.4-1

      + Fix the condition for preventing building python 2 subpackage for SLE15

spacewalk-proxy:

  * Version 4.2.10-1

      + Expose release notes to www_path

spacewalk-proxy-html:

  * Version 4.2.3-1

      + Expose release notes to www_path

spacewalk-web:

  * Version 4.2.26-1

      + Provide link to Sync page when unsynced patches message show up (bsc#
        1196094)

      + Provide a search box on section name for Formulas content

      + Add expand/collapse all button for formula sections

      + Improved large data support in channel selection

      + Provide link for CVEs

      + Improved error handling in the product setup page

      + Suggest Product Migration when patch for CVE is in a successor Product
        (bsc#1191360)

      + susemanager-web-libs is now packaged as a part of spacewalk-html

suseRegisterInfo:

  * Version 4.2.6-1

      + Fix the condition for preventing building python 2 subpackage for SLE15

Version 4.2.5

mgr-cfg:

  * Version 4.2.6-1

      + Do not build python 2 package for SLE15SP4 and higher

  * Version 4.2.5-1

      + do not build python 2 package for SLE15

  * Version 4.2.4-1

      + Fix python selinux package name depending on build target (bsc#1193600)

mgr-custom-info:

  * Version 4.2.3-1

      + require python macros for building

mgr-osad:

  * Version 4.2.7-1

      + Do not build python 2 package for SLE15SP4 and higher

      + require python macros for building

mgr-push:

  * Version 4.2.4-1

      + Do not build python 2 package for SLE15SP4 and higher

rhnlib:

  * Version 4.2.5-1

      + do not build python 2 package for SLE15

spacecmd:

  * Version 4.2.15-1

      + require python macros for building

spacewalk-backend:

  * Version 4.2.19-1

      + Retrieve and store copyright information about patches

      + SLES PAYG client support on cloud

      + Add headers to update proxy auth token in listChannels (bsc#1193585)

      + require python macros for building

      + exchange zypp-plugin dependency to use the python3 version (bsc#1192514
        )

spacewalk-client-tools:

  * Version 4.2.16-1

      + do not build python 2 package for SLE15

      + require python macros for building

spacewalk-oscap:

  * Version 4.2.3-1

      + Do not build python 2 package for SLE15SP4 and higher

      + require python macros for building

spacewalk-proxy:

  * Version 4.2.9-1

      + Update the token in case a channel can?t be found in the cache. (bsc#
        1193585)

spacewalk-remote-utils:

  * Version 4.2.2-1

      + require python macros for building

spacewalk-web:

  * Version 4.2.25-1

      + Add support for custom SSH port for SSH minions

      + SLES PAYG client support on cloud

      + Migrate the displaying of the date/time to rhn:formatDate, get rid of
        the legacy fmt:formatDate glue

      + Fix header search autofocus

      + Fix virtual systems list request error (bsc#1194397)

      + UI for changing proxy

      + Fix legacy timepicker passing wrong time to the backend if server and
        user time differ (bsc#1192699)

      + Fix legacy timepicker passing wrong time to the backend if selected
        date is in summer time (bsc#1192776)

suseRegisterInfo:

  * Version 4.2.5-1

      + require python macros for building

      + Do not build python 2 package for SLE15 and higher

uyuni-common-libs:

  * Version 4.2.6-1

      + Read modularity data from DISTTAG tag as fallback (bsc#1192487)

      + require python macros for building

Version 4.2.4

patterns-suse-manager:

  * Add prometheus-blackbox_exporter as recommended for the Proxy

spacecmd:

  * Update translation strings

spacewalk-backend:

  * Reposync: replace architecture variables in mirror lists

  * Minor spec update.

  * Added RHN config parameter httpd_config_dir.

  * Avoid GPG errors messages in reposync caused by rpm not understanding
    signatures (bsc#1191538)

  * Improved the diskcheck script to return an exit value and to allow
    performing the check without sending notification

spacewalk-certs-tools:

  * Make bootstrap script to use bash when called with a different interpreter
    (bsc#1191656)

  * set key format to PEM when generating key for traditional clients push ssh
    (bsc#1189643)

spacewalk-client-tools:

  * Update translation strings

spacewalk-proxy:

  * Fix traceback on handling sslerror (bsc#1187673)

spacewalk-web:

  * Implement using re-activation keys when bootstrapping with the Web UI

  * Disable the SPA engine for download links (bsc#1190964)

  * Fix CLM filter edit modal opening (bsc#1190867)

  * Display a warning in the login page if the available disk space on the
    server is running out

  * add Content Lifecycle Management filter for package provides

Version 4.2.3

patterns-suse-manager:

  * Virtualization-host-formula was renamed to virtualization-formulas

spacecmd:

  * Version 4.2.13-1

      + Update translation strings

      + configchannel_updatefile handles directory properly (bsc#1190512)

      + Add schedule_archivecompleted to mass archive actions (bsc#1181223)

      + Remove whoami from the list of unauthenticated commands (bsc#1188977)

spacewalk-backend:

  * Version 4.2.17-1

      + Update translations strings

      + handle download of metadata filesnames with checksums (bsc#1188315)

      + Sanitize cached filename for custom SSL certs used by reposync (bsc#
        1190751)

spacewalk-certs-tools:

  * Version 4.2.13-1

      + add GPG keys using apt-key on debian machines (bsc#1187998)

spacewalk-client-tools:

  * Version 4.2.14-1

      + Update translation strings

spacewalk-proxy:

  * Version 4.2.7-1

      + remove SSLProtocol configuration which should be done in the ssl
        configuration file

spacewalk-proxy-installer:

  * Version 4.2.7-1

      + use system default for SSLProtocol

spacewalk-web:

  * Version 4.2.23-1

      + Fix datetime format parsing with moment (bsc#1191348)

  * Version 4.2.22-1

      + Add 'Last build date' column to Content Lifecycle Management project
        list (jsc#PM-2644) (jsc#SUMA-61)

      + Fix 'Type' input in Content Lifecycle Management source edit form (bsc#
        1190820)

      + Add 'Flush cache' checkbox to Ansible playbook execution page (bsc#
        1190405)

      + Fix the VM creation and editing submit button action (bsc#1190602)

      + Improved timezone support

      + Enhance the default base channel help message (bsc#1171520)

Version 4.2.2

mgr-daemon:

  * Update translation strings

spacecmd:

  * Update translation strings

  * Make schedule_deletearchived to get all actions without display limit

  * Allow passing a date limit for schedule_deletearchived on spacecmd (bsc#
    1181223)

  * Use correct API endpoint in list_proxies (bsc#1188042)

  * Add schedule_deletearchived to bulk delete archived actions (bsc#1181223)

spacewalk-backend:

  * Update translation strings

  * Fix typo "verfication" instead of "verification"

spacewalk-certs-tools:

  * Prepare the bootstrap script generator for Rocky Linux 8

spacewalk-client-tools:

  * Update translation strings

spacewalk-proxy-installer:

  * Add new refresh_pattern to the squid.conf to fix a case where the repodata
    was invalid due to being cached (bsc#1186026)

spacewalk-web:

  * Don?t capitalize acronyms

  * Update translation strings

  * 'AppStreams with defaults' filter template in CLM

  * Add a link to OS image store dir in image list page

  * Link to CLM filter creation from system details page

  * Expose UEFI parameters in the VM creation/editing pages

  * Add virt-tuner templates to VM creation

  * Fix cleanup always being executed on delete system (bsc#1189011)

  * Add support for Kiwi options

  * Fix virtualization guests to handle null HostInfo

  * Compare lowercase CPU arch with libvirt domain capabilities

  * Refresh JWT virtual console token before it expires

  * Handle virtual machines running on pacemaker cluster

susemanager-build-keys:

  * Add Debian 11

  * Add Rocky Linux 8

susemanager-tftpsync-recv:

  * Adapt configure-tftpsync.sh to work on machines with multiple IP?s (bsc#
    1189263)

Version 4.2.1

spacecmd:

  * Make spacecmd aware of retracted patches/packages

spacewalk-backend:

  * Fix rpm handling of empty package group and devicefiles tag (bsc#1186650)

  * Check if batch needs to be imported even after failure (bsc#1183151)

  * Show better error message when reposync failed

spacewalk-certs-tools:

  * Generate SSL private keys FIPS 140-2 compatible (bsc#1187593)

spacewalk-web:

  * Add option to run Ansible playbooks in 'test' mode

  * New filter template: Live patching based on a system

  * Fix bugged search in formula catalog

  * Convert Virtualization modal dialogs to react-modal

  * Update the version for the WebUI

uyuni-common-libs:

  * Handle broken RPM packages to prevent exceptions causing fails on
    repository synchronization (bsc#1186650)

Major Changes Since SUSE Manager Proxy 4.1

Salt 3002

Salt has been upgraded to upstream version 3002, plus a number of patches,
backports and enhancements by SUSE, for the SUSE Manager Server, Proxy and
Client Tools (where the client operating system supports Python 3.5+; otherwise
Salt 3000 or 2016.11 are used).

We intend to regularly upgrade Salt to more recent versions.

For more details about changes in your manually-created Salt states, see the
Salt 3002 upstream release notes.

SLES 15 SP3 JeOS as a Base System

The SUSE Manager 4.1 Proxy and Retail Branch Server can now be installed on top
of SLES 15 SP3 JeOS edition.

Base System Upgrade

The base system was upgraded to SUSE Linux Enterprise 15 SP3.

Known issues

Proxy password

Do not use the '@' character in the SUSE Manager Proxy password, as it is not
escaped correctly.

Single Sign On, API and CLI tools

Single Sign On can be used to authenticate in the Web UI but not with the API
or CLI tools. This will be fixed in a future release of SUSE Manager.

Support

Support for CentOS 8

CentOS 8 will be End of Life on 31st December 2021, ending the SUSE Manager
support for this product as well.

We recommend you to migrate your workload to CentOS 8 alternatives (AlmaLinux
8, Rocky Linux 8) as soon as possible so you can continue managing your
infrastructure with SUSE Manager.

Please note "end of support" from the SUSE Manager side means these products
and their client tools remain available in the SUSE Manager product tree and
can still be added, mirrored and used. But in case they stop working at some
point in time, support will only be provided as on a best-effort basis (which
in general means if the issue can be reproduced with a supported operating
system, it will be fixed; but if the issue is specific to the unsupported
operating system, a fix should not be expected).

Future deprecation of the traditional stack

This version of SUSE Manager is compatible with Salt and traditional clients.
SUSE will deprecate traditional clients and traditional proxies in the next
SUSE Manager 4.3 release. The release that follows SUSE Manager 4.3 will not
support traditional clients and traditional proxies, and is planned for 2023.
We encourage all new deployments to use Salt clients and Salt proxies
exclusively, and to migrate existing traditional clients and proxies to Salt.

Providing feedback

If you encounter a bug in any SUSE product, please report it through your SUSE
Customer Service or Sales representatives.

You can also provide feedback using SUSE forums, or the upstream Uyuni Project
community.

Resources

Latest product documentation: https://documentation.suse.com/suma/4.2/.

Technical product information for SUSE Manager: https://www.suse.com/products/
suse-manager/

These release notes are available online: https://www.suse.com/releasenotes/

Visit https://www.suse.com for the latest Linux product news from SUSE.

Visit https://www.suse.com/download-linux/source-code.html for additional
information on the source code of SUSE Linux Enterprise products.

Legal Notices

SUSE LLC
Maxfeldstr. 5
D-90409 N?rnberg
Tel: +49 (0)911 740 53 - 0
Email: feedback@suse.com
Registrierung/Registration Number: HRB 36809 AG N?rnberg
Gesch?ftsf?hrer/Managing Director: Felix Imend?rffer
Steuernummer/Sales Tax ID: DE 192 167 791
Erf?llungsort/Legal Venue: N?rnberg

SUSE makes no representations or warranties with regard to the contents or use
of this documentation, and specifically disclaims any express or implied
warranties of merchantability or fitness for any particular purpose. Further,
SUSE reserves the right to revise this publication and to make changes to its
content, at any time, without the obligation to notify any person or entity of
such revisions or changes.

Further, SUSE makes no representations or warranties with regard to any
software, and specifically disclaims any express or implied warranties of
merchantability or fitness for any particular purpose. Further, SUSE reserves
the right to make changes to any and all parts of SUSE software, at any time,
without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be
subject to U.S. export controls and the trade laws of other countries. You
agree to comply with all export control regulations and to obtain any required
licenses or classifications to export, re-export, or import deliverables. You
agree not to export or re-export to entities on the current U.S. export
exclusion lists or to any embargoed or terrorist countries as specified in U.S.
export laws. You agree to not use deliverables for prohibited nuclear, missile,
or chemical/biological weaponry end uses. Please refer to the SUSE Legal
information page for more information on exporting SUSE software. SUSE assumes
no responsibility for your failure to obtain any necessary export approvals.

Copyright ? 2012-2021 SUSE LLC.

This release notes document is licensed under a Creative Commons
Attribution-NoDerivatives 4.0 International License (CC-BY-ND-4.0). You should
have received a copy of the license along with this document. If not, see
https://creativecommons.org/licenses/by-nd/4.0/.

SUSE has intellectual property rights relating to technology embodied in the
product that is described in this document. In particular, and without
limitation, these intellectual property rights may include one or more of the
U.S. patents listed at https://www.suse.com/company/legal/ and one or more
additional patents or pending patent applications in the U.S. and other
countries.

For SUSE trademarks, see SUSE Trademark and Service Mark list (https://
www.suse.com/company/legal/). All third-party trademarks are the property of
their respective owners.

Colophon

Thank you for using SUSE Manager Proxy and/or SUSE Manager Retail Branch Server
in your business.

Your SUSE Manager Team.

Last updated 2022-05-18 14:40:47 +0200
