-
maas (1.2+bzr1373+dfsg-0ubuntu1.2) quantal-security; urgency=low
* SECURITY UPDATE: incorrect Content-type header allowed cross-site
scripting vulnerability if an unknown API was used. (LP: #1251336)
- debian/patches/CVE-2013-1070.patch: Use Content-type text/plain to force
browsers to not render error messages as HTML.
- CVE-2013-1070
* SECURITY UPDATE: /etc/maas/txlongpoll.yaml contained a publicly readable
password. (LP: #1254034)
- debian/maas-region-controller.postinst: chown and chmod
/etc/maas/txlongpoll.yaml with correct permissions
- CVE-2013-1069
-- Seth Arnold <email address hidden> Tue, 11 Feb 2014 12:07:50 -0800
-
maas (1.2+bzr1373+dfsg-0ubuntu1.1) quantal-security; urgency=low
* SECURITY UPDATE: failure to authenticate downloaded content (LP: #1039513)
- debian/patches/CVE-2013-1058.patch: Authenticate downloaded files with
GnuPG and MD5SUM files. Thanks to Julian Edwards.
- CVE-2013-1058
* SECURITY UPDATE: configuration options may be loaded from current working
directory (LP: #1158425)
- debian/patches/CVE-2013-1057-1-2.patch: Do not load configuration
options from the current working directory. Thanks to Julian Edwards.
- CVE-2013-1057
-- Seth Arnold <email address hidden> Fri, 01 Nov 2013 17:15:48 -0700
-
maas (1.2+bzr1373+dfsg-0ubuntu1) quantal-proposed; urgency=low
* MAAS Stable Release Update (LP: #1109283):
This SRU brings a new upstream release of MAAS that removes
the usage of a cobbler code copy, 'maas-provision' as well as
several bug fixes. Exception has been granted by the Technical
Board to proceed. More information can be found in:
https://lists.ubuntu.com/archives/ubuntu-devel-announce/2013-February/001012.html
[ Andres Rodriguez ]
* debian/control:
- Change Conflicts/Replaces for Breaks/Replaces.
- Conflicts on tftpd-hpa and dnsmasq.
- Do not pre-depends, but Depends on ${misc:Depends} for 'maas'.
[ Steve Langasek ]
* postinst scripts are never called with 'reconfigure' as the script
argument. Remove references to this (mythical) invocation.
* always call 'set -e' from maintainer scripts instead of passing 'sh -e'
as the interpreter, so that scripts will behave correctly when run via
'sh -x'.
* invoke-rc.d is never allowed to not exist - simplify scripts (and make
them better policy-compliant) by invoking unconditionally. (The only
possible exception is in the postrm, where it's *theoretically* possible
for invoke-rc.d to be missing if the user has completely stripped
down their system; that's a fairly unreasonable corner case, but we
might as well be correct if it ever happens.)
* db_get+db_set is a no-op; don't call db_set to push back a value we just
got from db_get.
* Omit superfluous calls to 'exit 0' at the end of each script.
* Remove maas-cluster-controller prerm script, which called debconf for no
reason.
* Don't invoke debconf in the postrm script either, debhelper already does
this for us.
* Other miscellaneous maintainer script fixes
* debian/maas-common.postinst: call adduser and addgroup unconditionally;
the tools are already designed to DTRT, we don't need to check for the
user/group existence before calling them nor should we worry about
calling them only once on first install.
* debian/maas-common.postrm: delete the maas group, not just the user,
as the comment in the code implies we should do.
-- Andres Rodriguez <email address hidden> Thu, 07 Mar 2013 14:22:35 -0500
-
maas (0.1+bzr1269+dfsg-0ubuntu1) quantal-proposed; urgency=low
* New upstream bugfix release
- Fixes commissioning failing to set memory attribute. (LP: #1064638)
- Fixes node listing by adding pagination (LP: #1064672)
- Changes default bind rndc key which breaks initscripts (LP: #1066938)
- Fixes invalid DNS config once node is enlisted (LP: #1066958)
- Reference documentation link to correct URL (LP: #1067261)
[ Andres Rodriguez ]
* debian/rules: Change upstream branch.
[ Gavin Panella ]
* debian/maas-dns.postinst: Remove MAAS-related include lines from named's
config before adding a new one (LP: #1066929)
[ Raphael Badin ]
* debian/extras/maas-region-celeryd: Remove whitespace that affects DNS
rabbitmq queue. (LP: #1067929)
-- Andres Rodriguez <email address hidden> Tue, 16 Oct 2012 10:31:37 -0400
-
maas (0.1+bzr1264+dfsg-0ubuntu2) quantal; urgency=low
* Fix MAAS not working after CD/preseed install (LP: #1065763)
- debian/extras/maas-region-celeryd: Add wrapper to run celery from
the upstart job.
- debian/extras/maas-region-controller.maas-region-celery.upstart: Create
rabbitmq user if it does not exists.
* debian/control: Remove unneeded deps on python-txtftp for some binary pkgs.
* debian/maas-region-controller.postinst: Minor fix referencing variable.
-- Andres Rodriguez <email address hidden> Thu, 11 Oct 2012 17:38:08 -0400
-
maas (0.1+bzr1264+dfsg-0ubuntu1) quantal; urgency=low
* New upstream release.
[ Raphaël Badin ]
* debian/maas-region-controller.postinst: Enable proxy_http module.
* debian/maas-cluster-controller.postinst: Create /var/lib/maas. (LP: #1065062)
[ Andres Rodriguez ]
* Install maas-provision with python-maas-provisioningserver (LP: #1065171):
- debian/python-maas-provisioningserver.install: Install
- debian/control: Add Conflicts/Replaces with maas-cluster-controller
to handle upgrades.
* debian/patches/04-fix-ipmi-enlistment.patch: Drop. Merged Upstream.
* debian/control: Depends on maas-region-controller for maas-dns.
* debian/maas-region-controller.postinst: Set the correct host for
BROKER_URL (LP: #1065080)
* Handle creation of user/group in maas-common.
* debian/maas-region-controller.config: Always source dbconfig scripts.
-- Andres Rodriguez <email address hidden> Wed, 10 Oct 2012 11:17:21 -0400
-
maas (0.1+bzr1243+dfsg-0ubuntu3) quantal; urgency=low
* 04-fix-ipmi-enlistment.patch: retry maas-enlist without power parameters
on failure. This allows enlistment to continue working with Precise
ephemeral images before the Precise SRU for maas-enlist lands.
(LP: #1064922).
-- Robie Basak <email address hidden> Wed, 10 Oct 2012 13:29:16 +0000
-
maas (0.1+bzr1243+dfsg-0ubuntu2) quantal; urgency=low
* debian/patches/99-ipmi-user-too-long.patch: Fix username too long for
IPMI user created on enlistment (LP: #1064832)
-- Andres Rodriguez <email address hidden> Wed, 10 Oct 2012 01:00:29 -0400
-
maas (0.1+bzr1243+dfsg-0ubuntu1) quantal; urgency=low
* New upstream release. (LP: #1064596)
* debian/patches/99-temporary-fix-constraints.patch: Dropped.
* debian/control:
- ${python:Depends} for maas-common.
- Add missing Depends for python-maas-provisioningserver (LP: #1064542)
* debian/maas-cluster-controller.postinst: Create /var/log/maas if it
doesn't exist (LP: #1064539)
-- Andres Rodriguez <email address hidden> Mon, 08 Oct 2012 17:02:56 -0400
-
maas (0.1+bzr1223+dfsg-0ubuntu1) quantal; urgency=low
* New upstream release. (LP: #1062518)
[ Julian Edwards ]
* Split packaging of 'maas' into maas-{region,cluster}-controller
- debian/control: Update accordingly.
- debian/*.install: Move files accordingly
- debian/*.{postinst,postrm,preinst}: Move files accordingly.
* Ensure isc-dhcp-server is disabled when installing maas-dhcp.
* Ensure maas-dns creates the maas user before trying to chown files.
* Make maas-cluster-controller autoconfigure itself when upgrading from the
old maas package. (LP: #1059416)
* Add missing prerm file for maas-cluster-controller so that .pyc files
are cleaned up. (LP: #1059973)
[ Raphaël Badin ]
* Install maas_local_celeryconfig.py in /etc/maas and symlink to
/usr/share/maas.
* debian/maas.postinst: Create rabbitmq celery user/vhost.
* debian/maas.postinst: Update BROKER_URL in maas_local_celeryconfig.py.
* Use maas_local_celeryconfig_cluster.py as the local celery
configuration file for the cluster worker.
* debian/maas-region-controller.maas-region-celery.upstart: Add region
worker upstart script.
* Rename cluster worker upstart script into
maas-cluster-controller.maas-clluster-celery.upstart.
* maas-cluster-controller.maas-celery.upstart: use "celeryconfig_cluster"
as the Celery config module.
* debian/maas-common.install: Install celeryconfig_common.py.
* debian/maas-cluster-controller.install: Install celeryconfig_cluster.py.
* debian/maas-region-controller.install: Install celeryconfig.py.
* Split celery config into cluster and region configs.
* Add region celeryd upstart config.
* Define CELERY_CONFIG_MODULE in
maas-cluster-controller.maas-cluster-celery.upstart
[ Jeroen Vermeulen ]
* Make maas_local_celery_config.py non-world readable.
* Make maas_local_celeryconfig_cluster.py non-world readable.
* Set root:maas ownership of local cluster config only *after*
the maas user/group have been created
[ Andres Rodriguez ]
* debian/maas.postinst:
- Always restart apache2.
- Handle upgrades for new upstream release.
- Handle upgrades for celery rabbitmq worker.
* Add binary package to install client tool.
- debian/extras/maas-cli: Add binary.
- debian/maas-cli.install: Add. Install maascli and apiclient.
- debian/control: Add binary package.
* debian/control:
- Depends on freeipmi-tools instead of ipmitool.
- Conflicts/Replaces on maas for python-maas-client.
- Depends on python-netifaces, python-lxml.
* Add python-maas-client binary package:
- debian/python-maas-client.install: Add. Install 'apiclient' python module.
- debian/control: Add package. python-django-maas and maas-cli now
Depend on it.
* debian/rules: Install maas-dhcp-server upstart job.
* debian/maas.postrm: Remove celery worker rabbitmq user and host.
* debian/extras/99-maas-sudoers: Add for maas-dhcp-server upstart job
instead of isc-dhcp-server (LP: #1055951)
* debian/maas-region-controller.postinst: Cleanup upgrade rules.
* debian/maas-cluster-controller.postinst: Fix 'local' usage.
* debian/maas-common.install: Install celeryconfig in appropriate location.
* debian/maas-cluster-controller.postrm: Add and delete maas user.
* debian/maas-dhcp.postinst: Stop isc-dhcp-server not isc_dhcp_server.
* debian/maas-region-controller.postinst:
- Always update passwords on upgrade. No longer check versioning. (LP: #1060094).
- Add MAAS server to allowed mirror in squid-deb-proxy
- Source dbconfig conf file for maas-region-controller on upgrade because
it writes a new config file and no longer preservers the previous password.
* debian/maas-cluster-controller.maas-cluster-celery.upstart: Remove set{uid/gid}.
* debian/maas-region-controller.install: Install maas-import-squashfs
* Handle removal of non existant files (LP: #1059556):
- debian/maintscript: Added to handle removal of conffiles.
- debian/control: Add Pre-depends and bump debhelper version.
* update po files for the templates.
* debian/extras/99-maas: Install in usr/share/maas/conf and symlink to the
appropriate etc dir.
* debian/maas-cluster-controller.config: Source debconf at the beginning of the
script. (LP: #1063857)
* debian/patches/99-temporary-fix-constraints.patch: Fix constraints maaping
when deploying with juju. Temporary until it gets merged upstream
[ Robie Basak ]
* Add maas-cluster-controller dependency on uuid-runtime, needed for uuidgen
by postinst.
[ Scott Moser ]
* debian/maas-dhcp.{install,apparmor,postrm} install apparmor profile into
/etc/apparmor.d/dhcpd.d (LP: #1049177), and update apparmor profile for
/usr/sbin/dhcpd on install/remove
* get the ip address for the dhcp server in config
[ Diogo Matsubara ]
* Add initial tests to be run by autotests:
- debian/control: XS-Testsuite: autopkgtest
- debian/tests/control: Add
- debian/tests/maas-package-test: Add
- tests/maas-integration.py: Add
-- Andres Rodriguez <email address hidden> Mon, 08 Oct 2012 13:10:23 -0400
-
maas (0.1+bzr971+dfsg-0ubuntu2) quantal; urgency=low
* debian/extras/99-maas-sudoers: Add missing rule for
maas-provision. (LP: #1046397)
-- Andres Rodriguez <email address hidden> Wed, 05 Sep 2012 12:36:58 -0400
-
maas (0.1+bzr971+dfsg-0ubuntu1) quantal; urgency=low
* New upstream release (LP: #1044367)
[ Julian Edwards ]
* Fix 02-pserv-config.patch to handle new default tftp directory
[ Andres Rodriguez ]
* debian/maas.postinst:
- include '/MAAS' for DEFAULT_MAAS_URL.(LP: #1033956)
- Update bzr version to safely upgrade.
* Add maas-dns package that configures DNS in MAAS (LP: #1030860)
* Remove cobbler related bits
- debian/maas.postinst: Drop cobbler configuration
- debian/maas.install: Drop installation of snippets/preseeds.
- debian/control:
+ Drop Depends on maas-provision. (LP: #975473)
+ Depends on bind9utils.
+ Depends on python-lockfile (LP: #1037400)
Add necessary Conflicts/Replaces. Add conflicts to tftpd-hpa and dnsmasq.
Depends on isc-dhcp-server for maas-dhcp, and syslinux-common.
- debian/extras/maas-provision: Add missing "$@" (LP: #1040462)
- debian/patches:
+ 02-pserv-config.patch: Updated. Do not patch cobbler related bits.
patch tftp config to default.
* maas-dhcp: Re-add to handle initial configuration of MAAS DHCP server.
* Allow restart of 'isc-dhcp-server' by adding a sudoers file:
- debian/extras/99-maas-sudoers: Added.
- debian/maas.install: Install 99-maas-sudoers
* Minor improvements on dbconfig-common handling:
- debian/maas.config: Only call dbc_go when scripts present.
- debian/maas.postrm: Only call dbc_go when config file exists.
* debian/maas.maas-celery.upstart: Enable Beat and set scheduler db file.
* debian/maas-dns.postinst: Set correct permissions. (LP: #1042868)
* debian/maas-dhcp.config:
- Ask whether we want to enable DHCP (LP: #1044229)
- Add debconf question for network interfaces
* debian/maas.prerm: Stop services before removing database (LP: #1044559)
-- Andres Rodriguez <email address hidden> Thu, 02 Aug 2012 09:01:43 -0400
-
maas (0.1+bzr777+dfsg-0ubuntu1) quantal-proposed; urgency=low
* New upstream release
* Only run 'maas' command as root. (LP: #974046)
- debian/extras/maas: Check id.
- debian/maas.install: Install in 'sbin'.
* debian/maas.postinst:
- restart apache2 after everything gets processed.
- Update version to handle upgrades.
* debian/extras/maas-provision: Add wrapper to access 'maasprovisiong'
command line.
* debian/patches/99_temporary_fix_path.patch: Dropped. No longer needed.
-- Andres Rodriguez <email address hidden> Tue, 17 Jul 2012 08:28:36 -0400
-
maas (0.1+bzr745+dfsg-0ubuntu2) quantal; urgency=low
* debian/control: Build-Dep on python-django instead of
python-django-configglue
-- Andres Rodriguez <email address hidden> Tue, 17 Jul 2012 08:24:25 -0400
-
maas (0.1+bzr745+dfsg-0ubuntu1) quantal; urgency=low
* New Upstream Release
* debian/patches:
- 99_power_fixes.patch: Dropped. Merged Upstream.
- 99_enums_js.patch: Dropped. No longer needed.
* Automatically build enums.js:
- debian/control: Build-Depends on python-django-configglue
- debian/rules: Build and install enums.js.
* debian/maas.postinst: Update version to handle upgrades
-- Andres Rodriguez <email address hidden> Thu, 12 Jul 2012 16:34:11 -0400
-
maas (0.1+bzr740+dfsg-0ubuntu1) quantal; urgency=low
* New upstream release
* debian/control: Depends on python-txtftp.
* debian/rules: Do not ship python-tx-tftp.
* debian/maas.postinst: Update version to upgrade successfully.
* debian/patches:
- 02-pserv-config.patch: Refreshed.
- 99_enums_js.patch: Updated.
- 99_power_fixes.patch: Added temporarily to enable IPMI
- 99_temporary_fix_path.patch: Added temporarily to not fail when
importing celeryconfig
-- Andres Rodriguez <email address hidden> Tue, 03 Jul 2012 17:54:49 -0400
-
maas (0.1+bzr709+dfsg-0ubuntu1) quantal; urgency=low
* New Upstream release
* debian/control:
- Depends on python-celery, python-tempita, libjs-yui3-{full,min},
libjs-raphael
* debian/maas.install:
- Install apiclient, celeryconfig.py, maas-import-pxe-files, preseeds_v2.
- Update to install various files from chroot, rather tha manually copy
them from the source.
* debian/maas.links: symlink celeryconfig.py
* debian/maas.maas-celery.upstart: Add job.
* debian/rules:
- Install celery upstart job.
- Do not install jslibs as packages are now used.
- Drop copying of maas_local_settings_sample.py as source now ships
a maas_local_settings.py
* debian/patches:
- 04-maas-http-fix.patch: Drop. Merged upstream.
- 01-fix-database-settings.patch: Refreshed.
- 99_enums_js.patch: Added until creation of enum.js / build process
is fixed.
* debian/maas.postinst: Update bzr version to correctly handle upgrades.
-- Andres Rodriguez <email address hidden> Tue, 03 Jul 2012 17:42:37 -0400
-
maas (0.1+bzr482+dfsg-0ubuntu1) precise-proposed; urgency=low
* New upstream release (Fixes LP: #981103)
* debian/maas.postinst:
- Make sure rabbitmq and postgresql are started on upgrade (LP: #981282)
- Handle upgrades from any lower than 0.1+bzr462+dfsg-0ubuntu1 to
correctly re-generate passwords, and not have db sync/migrate issues
as config has changed upstream.
- Correctly set Passwords for PSERV, otherwise it won't set new passwords.
* Allow MAAS_DEFAULT_URL reconfiguration. (LP: #980970)
- debian/maas.config: Add reconfigure validation to correctly allow it,
and ask a question.
- debian/maas.postinst: Reconfigure DEFAULT_MAAS_URL as well as cobbler
server and next_server for PXE/Provisioning.
- debian/maas.templates: Add debconf question and update info.
* Do not lose MAAS_DEFAULT_URL settings on upgrade (LP: #984309)
* debian/maas.postinst:
- Set cobbler password in between quotes (LP: #984427)
- Do not change permissions to maas.log (LP: #980915)
* no longer use maas-cloudimg2ephemeral, but rather use premade images
at http://maas.ubuntu.com
-- Andres Rodriguez <email address hidden> Tue, 17 Apr 2012 23:44:46 -0700
