[El-errata] ELBA-2021-0552 Oracle Linux 8 cloud-init bug fix and enhancement update

Tue Feb 23 06:56:19 PST 2021

Oracle Linux Bug Fix Advisory ELBA-2021-0552

http://linux.oracle.com/errata/ELBA-2021-0552.html

The following updated rpms for Oracle Linux 8 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
cloud-init-19.4-11.0.3.el8_3.2.noarch.rpm

aarch64:
cloud-init-19.4-11.0.3.el8_3.2.noarch.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/cloud-init-19.4-11.0.3.el8_3.2.src.rpm

Description of changes:

[19.4-11.0.3.el8_3.2]
- Added missing services in rhel/systemd/cloud-init.service [Orabug: 
32183938]
- Added missing services in cloud-init.service.tmpl for sshd [Orabug: 
32183938]
- Forward port applicable cloud-init 18.4-2.0.3 changes to 
cloud-init-18-5 [Orabug: 30435672]
- Update OCI Datasource to support IMDSv2
- limit permissions [Orabug: 31352433]
- Changes to ignore all enslaved interfaces [Orabug: 30092148]
- Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
- Make Oracle datasource detect dracut based config files [Orabug: 29956753]
- add modified version of 
enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
2. Apply stop retrying to get ec2 metadata to helper/openstack.py 
MetadataReader
Resolves: Oracle-Bug:41660 (Bugzilla)
- added OL to list of known distros

[19.4-11.el8_3.2]
- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1916839]
- Resolves: bz#1916839
([Azure] Update existing user password RHEL8x [rhel-8.3.0.z])

[19.4-11.el8_3.1]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1879989]
- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1890551]
- ci-Add-config-modules-for-controlling-IBM-PowerVM-RMC.-.patch [bz#1894014]
- ci-Explicit-set-IPV6_AUTOCONF-and-IPV6_FORCE_ACCEPT_RA-.patch [bz#1894015]
- ci-net-fix-rendering-of-static6-in-network-config-77.patch [bz#1894015]
- Resolves: bz#1879989
([Azure][RHEL 8] cloud-init Permission denied with the use of mount 
option noexec [rhel-8.3.0.z])
- Resolves: bz#1890551
([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: 
No suitable device found for this connection [rhel-8.3.0.z])
- Resolves: bz#1894014
(Support for cloud-init config modules for PowerVM Hypervisor in Red Hat 
cloud-init [rhel-8.3.0.z])
- Resolves: bz#1894015
(Add support for ipv6_autoconf[rhel-8.3.0.z])

[19.4-11.el8]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1794664]
- Resolves: bz#1794664
([RHEL8] swapon fails with "swapfile has holes" when created on a xfs 
filesystem by cloud-init)

[19.4-10.el8]
- ci-Changing-notation-of-subp-call.patch [bz#1839662]
- Resolves: bz#1839662
([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM 
on ESXi platform)

[19.4-9.el8]
- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1794664]
- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1794664]
- ci-Detect-kernel-version-before-swap-file-creation-428.patch [bz#1794664]
- Resolves: bz#1794664
([RHEL8] swapon fails with "swapfile has holes" when created on a xfs 
filesystem by cloud-init)

[19.4-8.el8]
- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839662]
- ci-ssh-exit-with-non-zero-status-on-disabled-user-472.patch [bz#1833874]
- Resolves: bz#1833874
([rhel-8.3]using root user error should cause a non-zero exit code)
- Resolves: bz#1839662
([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM 
on ESXi platform)

[19.4-7.el8]
- Fixing cloud-init-generator permissions [bz#1834173]
- Resolves: bz#1834173
([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)

[19.4-6.el8]
- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1822343]
- Resolves: bz#1822343
([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)

[19.4-5.el8]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1822343]
- ci-Render-the-generator-from-template-instead-of-cp.patch [bz#1834173]
- ci-Change-from-redhat-to-rhel-in-systemd-generator-tmpl.patch [bz#1834173]
- ci-cloud-init.service.tmpl-use-rhel-instead-of-redhat-4.patch [bz#1834173]
- Resolves: bz#1822343
([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)
- Resolves: bz#1834173
([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)

[19.4-4.el8]
- ci-changing-ds-identify-patch-from-usr-lib-to-usr-libex.patch [bz#1834173]
- Resolves: bz#1834173
([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)

[19.4-3.el8]
- ci-Make-cloud-init.service-execute-after-network-is-up.patch [bz#1803928]
- Resolves: bz#1803928
([RHEL8.3] Race condition of starting cloud-init and NetworkManager)

[19.4-2.el8]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812171]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812174]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1814152]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1840648]
- Resolves: bz#1812171
(CVE-2020-8632 cloud-init: Too short random password length in 
cc_set_password in config/cc_set_passwords.py [rhel-8])
- Resolves: bz#1812174
(CVE-2020-8631 cloud-init: Use of random.choice when generating random 
password [rhel-8])
- Resolves: bz#1814152
(CVE-2018-10896 cloud-init: default configuration disabled deletion of 
SSH host keys [rhel-8])
- Resolves: bz#1840648
([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot 
(initial instance is ok))

[19.4-1.el8]
- Rebase to cloud-init 19.4 [bz#1803095]
- Resolves: bz#1803095
([RHEL-8.3.0] cloud-init rebase to 19.4)

[18.5-12.el8]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1807797]
- Resolves: bz#1807797
([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot 
(initial instance is ok))

[18.5-11.el8]
- ci-azure-avoid-re-running-cloud-init-when-instance-id-i.patch [bz#1788684]
- ci-net-skip-bond-interfaces-in-get_interfaces.patch [bz#1768770]
- ci-net-add-is_master-check-for-filtering-device-list.patch [bz#1768770]
- Resolves: bz#1768770
(cloud-init complaining about enslaved mac)
- Resolves: bz#1788684
([RHEL-8] cloud-init Azure byte swap (hyperV Gen2 Only))

[18.5-10.el8]
- ci-cmd-main.py-Fix-missing-modules-init-key-in-modes-di.patch [bz#1802140]
- Resolves: bz#1802140
([cloud-init][RHEL8.2]cloud-init cloud-final.service fail with KeyError: 
'modules-init' after upgrade to version 18.2-1.el7_6.1 in RHV)

[18.5-9.el8]
- ci-Removing-cloud-user-from-wheel.patch [bz#1785648]
- Resolves: bz#1785648
([RHEL8]cloud-user added to wheel group and sudoers.d causes 'sudo -v' 
prompts for passphrase)

[18.5-8.el8]
- ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1706482]
- ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744718]
- Resolves: bz#1706482
([cloud-init][RHVM]cloud-init network configuration does not persist 
reboot [RHEL 8.2.0])
- Resolves: bz#1744718
([cloud-init][RHEL8][OpenStack] cloud-init can't persist instance-data.json)

[18.5-7.el8]
- Fixing TPS [bz#1729864]
- Resolves: bz#1729864
(cloud-init tps fail)

[18.5-6.el8]
- ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1692914]
- ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1691986]
- Resolves: bz#1691986
([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)
- Resolves: bz#1692914
([8.1] [WALA][cloud] cloud-init dhclient-hook script has some unexpected 
side-effects on Azure)

[18.5-4.el8]
- ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1691986]
- ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1691986]
- ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1691986]
- ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1691986]
- ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1691986]
- Resolves: bz#1691986
([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)

[18.5-3.el8]
- ci-Adding-gating-tests-for-Azure-ESXi-and-AWS.patch [bz#1682786]
- Resolves: bz#1682786
(cloud-init changes blocked until gating tests are added)

[18.5-2]
- Adding gating.yaml file
- Resolves: rhbz#1682786
(cloud-init changes blocked until gating tests are added)

* Wed Apr 10 2019 Danilo de Paula <ddepaula at redhat.com: - 18.5-1.el8
- Rebase to cloud-init 18.5
- Resolves: bz#1687563
(cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 8.0.1])

[18.2-6.el8]
- ci-net-Make-sysconfig-renderer-compatible-with-Network-.patch [bz#1602784]
- Resolves: bz#1602784
(cloud-init: Sometimes image boots fingerprints is configured, there's a 
network device present but it's not configured)

[18.2-5.el8]
- ci-Fix-string-missmatch-when-mounting-ntfs.patch [bz#1664227]
- Resolves: bz#1664227
([Azure]String missmatch causes the /dev/sdb1 mounting failed after 
stop&start VM)

[18.2-4.el8]
- ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1644335]
- Resolves: bz#1644335
([ESXi][RHEL8.0]Enable cloud-init by default on VMware)

[18.2-3.el8]
- ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1615599]
- ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1615599]
- ci-azure-Add-reported-ready-marker-file.patch [bz#1615599]
- ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1615599]
- Resolves: bz#1615599
([Azure] cloud-init fails to mount /dev/sdb1 after 
stop(deallocate)&&start VM)

[18.2-2.el7]
- Revert "remove 'tee' command from logging configuration" [bz#1626117]
- Resolves: rhbz#1626117]
(cloud-init-0.7.9-9 doesn't feed cloud-init-output.log)

[18.2-1.el7]
- Rebase to 18.2 [bz#1515909]
Resolves: rhbz#1515909

[0.7.9-24]
- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
published correctly when bouncing the network.
Resolves: rhbz#1434109

[0.7.9-23]
- Fix a bug tha caused cloud-init to fail as a result of trying
to rename bonds.
Resolves: rhbz#1512247

[0.7.9-22]
- Apply patch from -21
Resolves: rhbz#1489270

[0.7.9-21]
- sysconfig: Fix a potential traceback introduced in the
0.7.9-17 build
Resolves: rhbz#1489270

[0.7.9-20]
- sysconfig: Correct rendering for dhcp on ipv6
Resolves: rhbz#1519271

[0.7.9-19]
- sysconfig: Fix rendering of default gateway for ipv6
Resolves: rhbz#1492726

[0.7.9-18]
- Start the cloud-init init local service after the dbus socket is created
so that the hostnamectl command works.
Resolves: rhbz#1450521

[0.7.9-17]
- Correctly render DNS and DOMAIN for sysconfig
Resolves: rhbz#1489270

[0.7.9-16]
- Disable NetworkManager management of resolv.conf if nameservers
are specified by configuration.
Resolves: rhbz#1454491

[0.7.9-15]
- Fix a null reference error in the rh_subscription module
Resolves: rhbz#1498974

[0-7.9-14]
- Include gateway if it's included in subnet configration
Resolves: rhbz#1492726

[0-7.9-13]
- Do proper cleanup of systemd units when upgrading from versions
0.7.9-3 through 0.7.9-8.
Resolves: rhbz#1465730

[0.7.9-12]
- Prevent Azure NM and dhclient hooks from running when cloud-init is
disabled (rhbz#1474226)

[0.7.9-11]
- Fix rendering of multiple static IPs per interface file
Resolves: rhbz#bz1497954

[0.7.9-10]
- AliCloud: Add support for the Alibaba Cloud datasource (rhbz#1482547)

[0.7.9-9]
- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. 
(rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 
rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)

[0.7.9-8]
- Update patches

[0.7.9-7]
- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are 
present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. 
(rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files 
(rhbz#1385172)

[0.7.9-6]
- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. 
(rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)

[0.7.9-5]
- systemd: replace generator with unit conditionals (rhbz#1440831)

[0.7.9-4]
- Import to RHEL 7
Resolves: rhbz#1427280

[0.7.9-3]
- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)

[0.7.9-2]
- use timeout from datasource config in openstack get_data (rhbz#1408589)

[0.7.9-1]
- Rebased on upstream 0.7.9.
- Remove dependency on run-parts

[0.7.6-8]
- make rh_subscription plugin do nothing in the absence of a valid
configuration [RH:1295953]
- move rh_subscription module to cloud_config stage

[0.7.6-7]
- correct permissions on /etc/ssh/sshd_config [RH:1296191]

[0.7.6-6]
- rebuild for ppc64le

[0.7.6-5]
- bump revision for new build

[0.7.6-4]
- ensure rh_subscription plugin is enabled by default

[0.7.6-3]
- added dependency on python-jinja2 [RH:1215913]
- added rhn_subscription plugin [RH:1227393]
- require pyserial to support smartos data source [RH:1226187]

[0.7.6-2]
- Rebased RHEL version to Fedora rawhide
- Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1246485
- Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1411829

[0.7.6-1]
- New upstream version [RH:974327]
- Drop python-cheetah dependency (same as above bug)