|
|
|
@ -1,6 +1,6 @@
|
|
|
|
|
.\" Man page generated from reStructuredText.
|
|
|
|
|
.
|
|
|
|
|
.TH "SALT" "7" "Oct 26, 2020" "3002.1" "Salt"
|
|
|
|
|
.TH "SALT" "7" "Nov 14, 2020" "3002.2" "Salt"
|
|
|
|
|
.SH NAME
|
|
|
|
|
salt \- Salt Documentation
|
|
|
|
|
.
|
|
|
|
@ -5103,7 +5103,7 @@ Salt should run on any Unix\-like platform so long as the dependencies are met.
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fI\%Python\fP \- Python2 >= 2.7, Python3 >= 3.4
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fI\%msgpack\-python\fP \- High\-performance message interchange format
|
|
|
|
|
\fI\%msgpack\fP \- High\-performance message interchange format
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fI\%YAML\fP \- Python YAML bindings
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -12199,6 +12199,12 @@ master_type: failover
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
|
|
|
|
|
.SS \fBcolor\fP
|
|
|
|
|
.sp
|
|
|
|
|
Default: \fBTrue\fP
|
|
|
|
|
.sp
|
|
|
|
|
By default output is colored. To disable colored output, set the color value to
|
|
|
|
|
\fBFalse\fP\&.
|
|
|
|
|
.SS \fBipv6\fP
|
|
|
|
|
.sp
|
|
|
|
|
Default: \fBNone\fP
|
|
|
|
@ -15782,7 +15788,7 @@ The format of the console logging messages. See also
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.INDENT 3.5
|
|
|
|
|
Log colors are enabled in \fBlog_fmt_console\fP rather than the
|
|
|
|
|
\fBcolor\fP config since the logging system is loaded before the
|
|
|
|
|
\fI\%color\fP config since the logging system is loaded before the
|
|
|
|
|
minion config.
|
|
|
|
|
.sp
|
|
|
|
|
Console log colors are specified by these additional formatters:
|
|
|
|
@ -18356,11 +18362,14 @@ and \fBmine_functions\fP\&.
|
|
|
|
|
# enabled and can be disabled by changing this value to False.
|
|
|
|
|
#clean_dynamic_modules: True
|
|
|
|
|
#
|
|
|
|
|
# Normally, the minion is not isolated to any single environment on the master
|
|
|
|
|
# Renamed from \(ga\(gaenvironment\(ga\(ga to \(ga\(gasaltenv\(ga\(ga. If \(ga\(gaenvironment\(ga\(ga is used,
|
|
|
|
|
# \(ga\(gasaltenv\(ga\(ga will take its value. If both are used, \(ga\(gaenvironment\(ga\(ga will be
|
|
|
|
|
# ignored and \(ga\(gasaltenv\(ga\(ga will be used.
|
|
|
|
|
# Normally the minion is not isolated to any single environment on the master
|
|
|
|
|
# when running states, but the environment can be isolated on the minion side
|
|
|
|
|
# by statically setting it. Remember that the recommended way to manage
|
|
|
|
|
# environments is to isolate via the top file.
|
|
|
|
|
#environment: None
|
|
|
|
|
#saltenv: None
|
|
|
|
|
#
|
|
|
|
|
# Isolates the pillar environment on the minion side. This functions the same
|
|
|
|
|
# as the environment setting, but for pillar instead of states.
|
|
|
|
@ -41648,7 +41657,7 @@ Will insert the following message in the minion logs:
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Profiling
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
When working with a very large codebase, it becomes increasingly imperative to
|
|
|
|
@ -58756,7 +58765,7 @@ twice, even though \fBqa1\fP appears twice.
|
|
|
|
|
\fBWARNING:\fP
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.INDENT 3.5
|
|
|
|
|
In the 3002 release \fBsls_path\fP, \fBtplfile\fP, and \fBtpldir\fP have had some significant
|
|
|
|
|
In the 3002.2 release \fBsls_path\fP, \fBtplfile\fP, and \fBtpldir\fP have had some significant
|
|
|
|
|
improvements which have the potential to break states that rely on old and
|
|
|
|
|
broken functionality. These fixes can be enabled by setting the
|
|
|
|
|
\fBenable_slsvars_fixes\fP feature flag to \fBTrue\fP in your minion\(aqs config file.
|
|
|
|
@ -151130,7 +151139,7 @@ verify or set the code page before the command \fIcmd\fP is executed.
|
|
|
|
|
Code page 65001 corresponds with UTF\-8 and allows international localization of Windows.
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -155623,7 +155632,7 @@ New in version 2018.3.0.
|
|
|
|
|
If \fBFalse\fP, remote https file sources (\fBhttps://\fP) and source_hash
|
|
|
|
|
will not attempt to validate the servers certificate. Default is True.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
@ -171373,7 +171382,7 @@ New in version 3001.
|
|
|
|
|
If \fBFalse\fP, remote https file sources (\fBhttps://\fP)
|
|
|
|
|
will not attempt to validate the servers certificate. Default is True.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -171444,7 +171453,7 @@ Changed in version 3001: selinux attributes added
|
|
|
|
|
If \fBFalse\fP, remote https file sources (\fBhttps://\fP) and source_hash
|
|
|
|
|
will not attempt to validate the servers certificate. Default is True.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
@ -172334,7 +172343,7 @@ New in version 2016.3.0.
|
|
|
|
|
If \fBFalse\fP, remote https file sources (\fBhttps://\fP) and source_hash
|
|
|
|
|
will not attempt to validate the servers certificate. Default is True.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
@ -172435,7 +172444,7 @@ Salt fileserver (i.e. one beginning with \fBsalt://\fP).
|
|
|
|
|
If \fBFalse\fP, remote https file sources (\fBhttps://\fP) and source_hash
|
|
|
|
|
will not attempt to validate the servers certificate. Default is True.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
@ -173479,7 +173488,7 @@ New in version 3001.
|
|
|
|
|
If \fBFalse\fP, remote https file sources (\fBhttps://\fP)
|
|
|
|
|
will not attempt to validate the servers certificate. Default is True.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
@ -191324,7 +191333,7 @@ Passes through all the parameters described in the
|
|
|
|
|
\fI\%utils.http.query function\fP:
|
|
|
|
|
.INDENT 7.0
|
|
|
|
|
.TP
|
|
|
|
|
.B salt.utils.http.query(url, method=\(aqGET\(aq, params=None, data=None, data_file=None, header_dict=None, header_list=None, header_file=None, username=None, password=None, auth=None, decode=False, decode_type=\(aqauto\(aq, status=False, headers=False, text=False, cookies=None, cookie_jar=None, cookie_format=\(aqlwp\(aq, persist_session=False, session_cookie_jar=None, data_render=False, data_renderer=None, header_render=False, header_renderer=None, template_dict=None, test=False, test_url=None, node=\(aqminion\(aq, port=80, opts=None, backend=None, ca_bundle=None, verify_ssl=None, cert=None, text_out=None, headers_out=None, decode_out=None, stream=False, streaming_callback=None, header_callback=None, handle=False, agent=\(aqSalt/3002\-1\-gf77463ca35\(aq, hide_fields=None, raise_error=True, formdata=False, formdata_fieldname=None, formdata_filename=None, decode_body=True, **kwargs)
|
|
|
|
|
.B salt.utils.http.query(url, method=\(aqGET\(aq, params=None, data=None, data_file=None, header_dict=None, header_list=None, header_file=None, username=None, password=None, auth=None, decode=False, decode_type=\(aqauto\(aq, status=False, headers=False, text=False, cookies=None, cookie_jar=None, cookie_format=\(aqlwp\(aq, persist_session=False, session_cookie_jar=None, data_render=False, data_renderer=None, header_render=False, header_renderer=None, template_dict=None, test=False, test_url=None, node=\(aqminion\(aq, port=80, opts=None, backend=None, ca_bundle=None, verify_ssl=None, cert=None, text_out=None, headers_out=None, decode_out=None, stream=False, streaming_callback=None, header_callback=None, handle=False, agent=\(aqSalt/3002.2\-108\-g4f096201ea\(aq, hide_fields=None, raise_error=True, formdata=False, formdata_fieldname=None, formdata_filename=None, decode_body=True, **kwargs)
|
|
|
|
|
Query a resource, and decode the return data
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.INDENT 7.0
|
|
|
|
@ -191542,7 +191551,7 @@ salt \(aq*\(aq icinga2.save_cert domain.tld master.domain.tld
|
|
|
|
|
.sp
|
|
|
|
|
This module provides access to idem execution modules
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
@ -216784,7 +216793,7 @@ be used to properly interact with the service.
|
|
|
|
|
\fBNOTE:\fP
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.INDENT 3.5
|
|
|
|
|
As of the 3002 release, if a service name of \fBsalt\-minion\fP is passed this
|
|
|
|
|
As of the 3002.2 release, if a service name of \fBsalt\-minion\fP is passed this
|
|
|
|
|
module will convert it over to it\(aqs macOS equivalent name, in this case
|
|
|
|
|
to \fBcom.saltstack.salt.minion\fP\&. This is true for \fBsalt\-master\fP
|
|
|
|
|
\fBsalt\-api\fP, and \fBsalt\-syndic\fP as well.
|
|
|
|
@ -242989,7 +242998,7 @@ salt \(aq*\(aq nftables.flush filter input family=ipv6
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
|
.B salt.modules.nftables.get_policy(table=\(aqfilter\(aq, chain=None, family=\(aqipv4\(aq)
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Return the current policy for the specified table/chain
|
|
|
|
@ -243072,7 +243081,7 @@ salt \(aq*\(aq nftables.get_rules family=ipv6
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
|
.B salt.modules.nftables.get_rules_json(family=\(aqipv4\(aq)
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Return a list of dictionaries comprising the current, in\-memory rules
|
|
|
|
@ -243230,7 +243239,7 @@ salt \(aq*\(aq nftables.new_table filter family=ipv6
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
|
.B salt.modules.nftables.save(filename=None, family=\(aqipv4\(aq)
|
|
|
|
|
Changed in version 3002.
|
|
|
|
|
Changed in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Save the current in\-memory rules to disk. On systems where /etc/nftables is
|
|
|
|
@ -243252,7 +243261,7 @@ salt \(aq*\(aq nftables.save /etc/nftables
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
|
.B salt.modules.nftables.set_policy(table=\(aqfilter\(aq, chain=None, policy=None, family=\(aqipv4\(aq)
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Set the current policy for the specified table/chain. This only works on
|
|
|
|
@ -277514,7 +277523,7 @@ Send message to Slack incoming webhook.
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBmessage\fP \-\- The topic of message.
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBattachment\fP \-\- The message to send to the Slacke WebHook.
|
|
|
|
|
\fBattachment\fP \-\- The message to send to the Slack WebHook.
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBcolor\fP \-\- The color of border of left side
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -277718,7 +277727,7 @@ minion, and it is using a different module (or gives an error similar to
|
|
|
|
|
Returns \fBTrue\fP if the specified service is available, otherwise returns
|
|
|
|
|
\fBFalse\fP\&.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277738,7 +277747,7 @@ salt \(aq*\(aq service.available sshd
|
|
|
|
|
.B salt.modules.slackware_service.disable(name, **kwargs)
|
|
|
|
|
Disable the named service to start at boot
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277758,7 +277767,7 @@ salt \(aq*\(aq service.disable <service name>
|
|
|
|
|
.B salt.modules.slackware_service.disabled(name)
|
|
|
|
|
Return True if the named service is enabled, false otherwise
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277778,7 +277787,7 @@ salt \(aq*\(aq service.disabled <service name>
|
|
|
|
|
.B salt.modules.slackware_service.enable(name, **kwargs)
|
|
|
|
|
Enable the named service to start at boot
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277798,7 +277807,7 @@ salt \(aq*\(aq service.enable <service name>
|
|
|
|
|
.B salt.modules.slackware_service.enabled(name, **kwargs)
|
|
|
|
|
Return True if the named service is enabled, false otherwise
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277818,7 +277827,7 @@ salt \(aq*\(aq service.enabled <service name>
|
|
|
|
|
.B salt.modules.slackware_service.force_reload(name)
|
|
|
|
|
Force\-reload the named service
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277838,7 +277847,7 @@ salt \(aq*\(aq service.force_reload <service name>
|
|
|
|
|
.B salt.modules.slackware_service.get_all()
|
|
|
|
|
Return all available boot services
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277858,7 +277867,7 @@ salt \(aq*\(aq service.get_all
|
|
|
|
|
.B salt.modules.slackware_service.get_disabled()
|
|
|
|
|
Return a set of services that are installed but disabled
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277878,7 +277887,7 @@ salt \(aq*\(aq service.get_disabled
|
|
|
|
|
.B salt.modules.slackware_service.get_enabled()
|
|
|
|
|
Return a list of service that are enabled on boot
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277900,7 +277909,7 @@ The inverse of service.available.
|
|
|
|
|
Returns \fBTrue\fP if the specified service is not available, otherwise returns
|
|
|
|
|
\fBFalse\fP\&.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277920,7 +277929,7 @@ salt \(aq*\(aq service.missing sshd
|
|
|
|
|
.B salt.modules.slackware_service.reload_(name)
|
|
|
|
|
Reload the named service
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277940,7 +277949,7 @@ salt \(aq*\(aq service.reload <service name>
|
|
|
|
|
.B salt.modules.slackware_service.restart(name)
|
|
|
|
|
Restart the named service
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277960,7 +277969,7 @@ salt \(aq*\(aq service.restart <service name>
|
|
|
|
|
.B salt.modules.slackware_service.start(name)
|
|
|
|
|
Start the specified service
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -277982,7 +277991,7 @@ Return the status for a service.
|
|
|
|
|
If the name contains globbing, a dict mapping service name to True/False
|
|
|
|
|
values is returned.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.INDENT 7.0
|
|
|
|
|
.TP
|
|
|
|
@ -278019,7 +278028,7 @@ salt \(aq*\(aq service.status <service name> [service signature]
|
|
|
|
|
.B salt.modules.slackware_service.stop(name)
|
|
|
|
|
Stop the specified service
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
CLI Example:
|
|
|
|
@ -298244,7 +298253,7 @@ all migration functions
|
|
|
|
|
.SS Units
|
|
|
|
|
Units specification
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
The string should contain a number optionally followed
|
|
|
|
@ -299571,7 +299580,7 @@ Initialize a new vm
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBmem\fP \-\-
|
|
|
|
|
.sp
|
|
|
|
|
Amount of memory to allocate to the virtual machine in MiB. Since 3002, a dictionary can be used to
|
|
|
|
|
Amount of memory to allocate to the virtual machine in MiB. Since 3002.2, a dictionary can be used to
|
|
|
|
|
contain detailed configuration which support memory allocation or tuning. Supported parameters are \fBboot\fP,
|
|
|
|
|
\fBcurrent\fP, \fBmax\fP, \fBslots\fP, \fBhard_limit\fP, \fBsoft_limit\fP, \fBswap_hard_limit\fP and \fBmin_guarantee\fP\&. The
|
|
|
|
|
structure of the dictionary is documented in \fI\%Memory parameter definition\fP\&. Both decimal and binary base are supported.
|
|
|
|
@ -299597,7 +299606,7 @@ an integer.
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
Changed in version 3002.
|
|
|
|
|
Changed in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -300280,7 +300289,7 @@ Shared storage migration
|
|
|
|
|
.sp
|
|
|
|
|
True to connect over ssh
|
|
|
|
|
.sp
|
|
|
|
|
Deprecated since version 3002.
|
|
|
|
|
Deprecated since version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -300358,7 +300367,7 @@ username: Username to connect with target host
|
|
|
|
|
password: Password to connect with target host
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -300413,7 +300422,7 @@ Attempt to execute non\-shared storage "all" migration
|
|
|
|
|
.sp
|
|
|
|
|
True to connect over ssh
|
|
|
|
|
.sp
|
|
|
|
|
Deprecated since version 3002.
|
|
|
|
|
Deprecated since version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -300485,7 +300494,7 @@ username: Username to connect with target host
|
|
|
|
|
password: Password to connect with target host
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -300537,7 +300546,7 @@ Attempt to execute non\-shared storage "inc" migration
|
|
|
|
|
.sp
|
|
|
|
|
True to connect over ssh
|
|
|
|
|
.sp
|
|
|
|
|
Deprecated since version 3002.
|
|
|
|
|
Deprecated since version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -300609,7 +300618,7 @@ username: Username to connect with target host
|
|
|
|
|
password: Password to connect with target host
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -302500,7 +302509,7 @@ Update the definition of an existing domain.
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBmem\fP \-\-
|
|
|
|
|
.sp
|
|
|
|
|
Amount of memory to allocate to the virtual machine in MiB. Since 3002, a dictionary can be used to
|
|
|
|
|
Amount of memory to allocate to the virtual machine in MiB. Since 3002.2, a dictionary can be used to
|
|
|
|
|
contain detailed configuration which support memory allocation or tuning. Supported parameters are \fBboot\fP,
|
|
|
|
|
\fBcurrent\fP, \fBmax\fP, \fBslots\fP, \fBhard_limit\fP, \fBsoft_limit\fP, \fBswap_hard_limit\fP and \fBmin_guarantee\fP\&. The
|
|
|
|
|
structure of the dictionary is documented in \fI\%Memory parameter definition\fP\&. Both decimal and binary base are supported.
|
|
|
|
@ -302522,7 +302531,7 @@ is mapped to \fBnull\fP in sls file, pass \fBnull\fP in sls file instead.
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
Changed in version 3002.
|
|
|
|
|
Changed in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -302590,7 +302599,7 @@ Values can be \fBhd\fP, \fBfd\fP, \fBcdrom\fP or \fBnetwork\fP\&.
|
|
|
|
|
.sp
|
|
|
|
|
By default, the value will \fB"hd"\fP\&.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -385563,7 +385572,7 @@ swap:
|
|
|
|
|
|
|
|
|
|
mappedbyuuid:
|
|
|
|
|
crypted.mapped:
|
|
|
|
|
\- device: UUID=066e0200\-2867\-4ebe\-b9e6\-f30026ca2314
|
|
|
|
|
\- device: UUID=066e0200\-2867\-4ebe\-b9e6\-f3002.26ca2314
|
|
|
|
|
\- keyfile: /etc/keyfile.key
|
|
|
|
|
\- config: /etc/alternate\-crypttab
|
|
|
|
|
.ft P
|
|
|
|
@ -385584,7 +385593,7 @@ The name under which the device is to be mapped
|
|
|
|
|
.TP
|
|
|
|
|
.B device
|
|
|
|
|
The device name, typically the device node, such as \fB/dev/sdb1\fP
|
|
|
|
|
or \fBUUID=066e0200\-2867\-4ebe\-b9e6\-f30026ca2314\fP\&.
|
|
|
|
|
or \fBUUID=066e0200\-2867\-4ebe\-b9e6\-f3002.26ca2314\fP\&.
|
|
|
|
|
.TP
|
|
|
|
|
.B keyfile
|
|
|
|
|
Either \fBNone\fP if the password is to be entered manually on boot, or
|
|
|
|
@ -395589,7 +395598,7 @@ create_config_file:
|
|
|
|
|
If \fBFalse\fP, remote https file sources (\fBhttps://\fP) and source_hash
|
|
|
|
|
will not attempt to validate the servers certificate. Default is True.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -396638,7 +396647,7 @@ New in version 2015.8.0.
|
|
|
|
|
Write the data as this format. See the list of
|
|
|
|
|
all\-salt.serializers for supported output formats.
|
|
|
|
|
.sp
|
|
|
|
|
Changed in version 3002: \fBserializer\fP argument added as an alternative to \fBformatter\fP\&.
|
|
|
|
|
Changed in version 3002.2: \fBserializer\fP argument added as an alternative to \fBformatter\fP\&.
|
|
|
|
|
Both are accepted, but using both will result in an error.
|
|
|
|
|
|
|
|
|
|
.TP
|
|
|
|
@ -401391,7 +401400,7 @@ Icinga2 master node for which this certificate will be saved
|
|
|
|
|
.sp
|
|
|
|
|
This state provides access to idem states
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
@ -401431,29 +401440,18 @@ The directory containing sls files
|
|
|
|
|
.sp
|
|
|
|
|
.nf
|
|
|
|
|
.ft C
|
|
|
|
|
|
|
|
|
|
cheese:
|
|
|
|
|
idem.state:
|
|
|
|
|
\- runtime: parallel
|
|
|
|
|
\- sls:
|
|
|
|
|
\- idem_state.sls
|
|
|
|
|
\- sls_source
|
|
|
|
|
.ft P
|
|
|
|
|
.fi
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.INDENT 7.0
|
|
|
|
|
.TP
|
|
|
|
|
.B cheese:
|
|
|
|
|
.INDENT 7.0
|
|
|
|
|
.TP
|
|
|
|
|
.B idem.state:
|
|
|
|
|
.INDENT 7.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
runtime: parallel
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
sls:
|
|
|
|
|
\- idem_state.sls
|
|
|
|
|
\- sls_source
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.INDENT 7.0
|
|
|
|
|
.TP
|
|
|
|
|
.B Maturity
|
|
|
|
|
new
|
|
|
|
|
.TP
|
|
|
|
@ -407226,7 +407224,7 @@ The name of the Volume Group on which the Logical Volume resides
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
|
.B salt.states.lvm.lv_present(name, vgname=None, size=None, extents=None, snapshot=None, pv=\(aq\(aq, thinvolume=False, thinpool=False, force=False, resizefs=False, **kwargs)
|
|
|
|
|
Create a new Logical Volume
|
|
|
|
|
Ensure that a Logical Volume is present, creating it if absent.
|
|
|
|
|
.INDENT 7.0
|
|
|
|
|
.TP
|
|
|
|
|
.B name
|
|
|
|
@ -407239,7 +407237,9 @@ The name of the Volume Group on which the Logical Volume resides
|
|
|
|
|
The size of the Logical Volume
|
|
|
|
|
.TP
|
|
|
|
|
.B extents
|
|
|
|
|
The number of logical extents to allocate
|
|
|
|
|
The number of logical extents allocated to the Logical Volume
|
|
|
|
|
It can be a percentage allowed by lvcreate\(aqs syntax, in this case
|
|
|
|
|
it will set the Logical Volume initial size and won\(aqt be resized.
|
|
|
|
|
.TP
|
|
|
|
|
.B snapshot
|
|
|
|
|
The name of the snapshot
|
|
|
|
@ -407271,7 +407271,7 @@ New in version 2018.3.0.
|
|
|
|
|
Assume yes to all prompts
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
New in version to_complete.
|
|
|
|
|
New in version 3002.2.0.
|
|
|
|
|
|
|
|
|
|
.INDENT 7.0
|
|
|
|
|
.TP
|
|
|
|
@ -410204,7 +410204,7 @@ Mount any type of mountable filesystem with the mounted function:
|
|
|
|
|
|
|
|
|
|
/srv/bigdata:
|
|
|
|
|
mount.mounted:
|
|
|
|
|
\- device: UUID=066e0200\-2867\-4ebe\-b9e6\-f30026ca2314
|
|
|
|
|
\- device: UUID=066e0200\-2867\-4ebe\-b9e6\-f3002.26ca2314
|
|
|
|
|
\- fstype: xfs
|
|
|
|
|
\- opts: nobootwait,noatime,nodiratime,nobarrier,logbufs=8
|
|
|
|
|
\- dump: 0
|
|
|
|
@ -410342,7 +410342,7 @@ The path to the location where the device is to be mounted
|
|
|
|
|
.TP
|
|
|
|
|
.B device
|
|
|
|
|
The device name, typically the device node, such as \fB/dev/sdb1\fP
|
|
|
|
|
or \fBUUID=066e0200\-2867\-4ebe\-b9e6\-f30026ca2314\fP or \fBLABEL=DATA\fP
|
|
|
|
|
or \fBUUID=066e0200\-2867\-4ebe\-b9e6\-f3002.26ca2314\fP or \fBLABEL=DATA\fP
|
|
|
|
|
.TP
|
|
|
|
|
.B fstype
|
|
|
|
|
The filesystem type, this will be \fBxfs\fP, \fBext2/3/4\fP in the case of classic
|
|
|
|
@ -414021,7 +414021,7 @@ argument.
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Network Teaming (RHEL/CentOS 7 and later)
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -414961,7 +414961,7 @@ Networking family, either ipv4 or ipv6
|
|
|
|
|
New in version 2014.7.0.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Changed in version 3002.
|
|
|
|
|
Changed in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Verify a chain exists in a table.
|
|
|
|
@ -415005,7 +415005,7 @@ specified as \fIconnstate\fP instead of \fIstate\fP (not to be confused with
|
|
|
|
|
New in version 2014.7.0.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Changed in version 3002.
|
|
|
|
|
Changed in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Flush current nftables state
|
|
|
|
@ -415018,7 +415018,7 @@ Networking family, either ipv4 or ipv6
|
|
|
|
|
If set to True, attempts to flush a non\-existent table will not
|
|
|
|
|
result in a failed state.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -415047,7 +415047,7 @@ specified as \fIconnstate\fP instead of \fIstate\fP (not to be confused with
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
|
.B salt.states.nftables.set_policy(name, table=\(aqfilter\(aq, family=\(aqipv4\(aq, **kwargs)
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Sets the default policy for nftables chains
|
|
|
|
@ -415073,7 +415073,7 @@ or /etc/nftables/salt\-all\-in\-one.nft if the former is a directory)
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
|
.B salt.states.nftables.table_absent(name, family=\(aqipv4\(aq, **kwargs)
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Ensure an nftables table is absent
|
|
|
|
@ -415089,7 +415089,7 @@ Networking family, either ipv4 or ipv6
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.TP
|
|
|
|
|
.B salt.states.nftables.table_present(name, family=\(aqipv4\(aq, **kwargs)
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.sp
|
|
|
|
|
Ensure an nftables table is present
|
|
|
|
@ -420498,7 +420498,7 @@ the regular package manager commands.
|
|
|
|
|
.B copr
|
|
|
|
|
Use community packages outside of the main package repository.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.INDENT 7.0
|
|
|
|
|
.INDENT 3.5
|
|
|
|
@ -420612,7 +420612,7 @@ reverse will be passed as \fBenabled\fP\&. For example passing
|
|
|
|
|
Fedora and RedHat based distributions only. Use community packages
|
|
|
|
|
outside of the main package repository.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
.TP
|
|
|
|
|
.B humanname
|
|
|
|
@ -430116,7 +430116,7 @@ New in version 3001.
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBmem\fP \-\-
|
|
|
|
|
.sp
|
|
|
|
|
Amount of memory to allocate to the virtual machine in MiB. Since 3002, a dictionary can be used to
|
|
|
|
|
Amount of memory to allocate to the virtual machine in MiB. Since 3002.2, a dictionary can be used to
|
|
|
|
|
contain detailed configuration which support memory allocation or tuning. Supported parameters are \fBboot\fP,
|
|
|
|
|
\fBcurrent\fP, \fBmax\fP, \fBslots\fP, \fBhard_limit\fP, \fBsoft_limit\fP, \fBswap_hard_limit\fP and \fBmin_guarantee\fP\&. The
|
|
|
|
|
structure of the dictionary is documented in init\-mem\-def\&. Both decimal and binary base are supported.
|
|
|
|
@ -430142,7 +430142,7 @@ an integer.
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
Changed in version 3002.
|
|
|
|
|
Changed in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -430219,7 +430219,7 @@ Values can be \fBhd\fP, \fBfd\fP, \fBcdrom\fP or \fBnetwork\fP\&.
|
|
|
|
|
.sp
|
|
|
|
|
By default, the value will \fB"hd"\fP\&.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -430823,7 +430823,7 @@ New in version 2016.3.0.
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBmem\fP \-\-
|
|
|
|
|
.sp
|
|
|
|
|
Amount of memory to allocate to the virtual machine in MiB. Since 3002, a dictionary can be used to
|
|
|
|
|
Amount of memory to allocate to the virtual machine in MiB. Since 3002.2, a dictionary can be used to
|
|
|
|
|
contain detailed configuration which support memory allocation or tuning. Supported parameters are \fBboot\fP,
|
|
|
|
|
\fBcurrent\fP, \fBmax\fP, \fBslots\fP, \fBhard_limit\fP, \fBsoft_limit\fP, \fBswap_hard_limit\fP and \fBmin_guarantee\fP\&. The
|
|
|
|
|
structure of the dictionary is documented in init\-mem\-def\&. Both decimal and binary base are supported.
|
|
|
|
@ -430845,7 +430845,7 @@ is mapped to \fBnull\fP in sls file, pass \fBnull\fP in sls file instead.
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
Changed in version 3002.
|
|
|
|
|
Changed in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -431028,7 +431028,7 @@ Values can be \fBhd\fP, \fBfd\fP, \fBcdrom\fP or \fBnetwork\fP\&.
|
|
|
|
|
.sp
|
|
|
|
|
By default, the value will \fB"hd"\fP\&.
|
|
|
|
|
.sp
|
|
|
|
|
New in version 3002.
|
|
|
|
|
New in version 3002.2.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -445561,7 +445561,7 @@ def some_function(bar=False, foo=None):
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
Development begins on the \fBAluminum\fP release when the \fB3002\fP branch is
|
|
|
|
|
Development begins on the \fBAluminum\fP release when the \fB3002.2\fP branch is
|
|
|
|
|
forked from the develop branch. Once this occurs, all uses of the
|
|
|
|
|
\fBwarn_until\fP function targeting \fBAluminum\fP, along with the code they are
|
|
|
|
|
warning about should be removed from the code.
|
|
|
|
@ -445796,7 +445796,7 @@ Install Salt (and dependencies) into the virtualenv:
|
|
|
|
|
.sp
|
|
|
|
|
.nf
|
|
|
|
|
.ft C
|
|
|
|
|
pip install pyzmq PyYAML pycrypto msgpack\-python jinja2 psutil futures tornado
|
|
|
|
|
pip install pyzmq PyYAML pycrypto msgpack jinja2 psutil futures tornado
|
|
|
|
|
pip install \-e ./salt # the path to the salt git clone from above
|
|
|
|
|
.ft P
|
|
|
|
|
.fi
|
|
|
|
@ -454644,7 +454644,7 @@ information about the version numbering scheme.
|
|
|
|
|
.sp
|
|
|
|
|
Release Candidate
|
|
|
|
|
.SS Previous Releases
|
|
|
|
|
.SS Salt 3002 Release Notes \- Codename Magnesium
|
|
|
|
|
.SS Salt 3002.2 Release Notes \- Codename Magnesium
|
|
|
|
|
.SS New Features
|
|
|
|
|
.SS Network Teaming Support Added (RHEL/CentOS)
|
|
|
|
|
.sp
|
|
|
|
@ -454949,6 +454949,21 @@ Added features config option for feature flags. Added a feature flag
|
|
|
|
|
This flag will be depricated in the Phosphorus release when this functionality
|
|
|
|
|
becomes the default. (#58652)
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Salt 3002.2.1 Release Notes
|
|
|
|
|
.sp
|
|
|
|
|
Version 3002.2.1 is a CVE fix release for 3002.2\&.
|
|
|
|
|
.SS Fixed
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Prevent shell injections in netapi ssh client (cve\-2020\-16846)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Prevent creating world readable private keys with the tls execution module. (cve\-2020\-17490)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Properly validate eauth credentials and tokens along with their ACLs.
|
|
|
|
|
Prior to this change eauth was not properly validated when calling
|
|
|
|
|
Salt ssh via the salt\-api. Any value for \(aqeauth\(aq or \(aqtoken\(aq would allow a user
|
|
|
|
|
to bypass authentication and make calls to Salt ssh. (CVE\-2020\-25592)
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Salt 3001 Release Notes \- Codename Sodium
|
|
|
|
|
.SS Python 2 Dropped
|
|
|
|
|
.sp
|
|
|
|
@ -455259,9 +455274,9 @@ Version 3001.2 is a CVE fix release for 3001\&.
|
|
|
|
|
.SS Fixed
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
CVE\-2020\-16846 \- Prevent shell injections in netapi ssh client (cve\-2020\-16846)
|
|
|
|
|
Prevent shell injections in netapi ssh client (cve\-2020\-16846)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Fix CVE\-2020\-17490 Prevent creating world readable private keys with the tls execution module. (#58216)
|
|
|
|
|
Prevent creating world readable private keys with the tls execution module. (cve\-2020\-17490)
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Salt 3001.3 Release Notes
|
|
|
|
|
.sp
|
|
|
|
@ -455269,8 +455284,8 @@ Version 3001.3 is a CVE fix release for 3001\&.
|
|
|
|
|
.SS Fixed
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
CVE\-2020\-25592 \- Properly validate eauth credentials and tokens along with
|
|
|
|
|
their ACLs. Prior to this change eauth was not properly validated when calling
|
|
|
|
|
Properly validate eauth credentials and tokens along with their ACLs.
|
|
|
|
|
Prior to this change eauth was not properly validated when calling
|
|
|
|
|
Salt ssh via the salt\-api. Any value for \(aqeauth\(aq or \(aqtoken\(aq would allow a user
|
|
|
|
|
to bypass authentication and make calls to Salt ssh. (CVE\-2020\-25592)
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -457308,6 +457323,27 @@ Contributors: \fB2\fP (\fI\%dwoz\fP, \fI\%frogunder\fP)
|
|
|
|
|
\fBPR\fP \fI\%#57100\fP: (\fI\%dwoz\fP) Address Issues in CVE Release
|
|
|
|
|
@ \fI2020\-05\-05 22:09:25 UTC\fP
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Salt 3000.4 Release Notes
|
|
|
|
|
.sp
|
|
|
|
|
Version 3000.4 is a CVE fix release for 3000\&.
|
|
|
|
|
.SS Fixed
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Prevent shell injections in netapi ssh client (cve\-2020\-16846)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Prevent creating world readable private keys with the tls execution module. (cve\-2020\-17490)
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Salt 3000.5 Release Notes
|
|
|
|
|
.sp
|
|
|
|
|
Version 3000.5 is a CVE fix release for 3000\&.
|
|
|
|
|
.SS Fixed
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Properly validate eauth credentials and tokens along with their ACLs.
|
|
|
|
|
Prior to this change eauth was not properly validated when calling
|
|
|
|
|
Salt ssh via the salt\-api. Any value for \(aqeauth\(aq or \(aqtoken\(aq would allow a user
|
|
|
|
|
to bypass authentication and make calls to Salt ssh. (CVE\-2020\-25592)
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Salt 2019.2.0 Release Notes \- Codename Fluorine
|
|
|
|
|
.SS Python 2.7 Deprecation
|
|
|
|
|
.sp
|
|
|
|
@ -467074,6 +467110,27 @@ ca303f7c0c Add link to salt\-announce to documentation
|
|
|
|
|
c63253ef9c Address issues in cve release
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Salt 2019.2.6 Release Notes
|
|
|
|
|
.sp
|
|
|
|
|
Version 2019.2.6 is a CVE fix release for 2019.2.0\&.
|
|
|
|
|
.SS Fixed
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Prevent shell injections in netapi ssh client (cve\-2020\-16846)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Prevent creating world readable private keys with the tls execution module. (cve\-2020\-17490)
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Salt 2019.2.7 Release Notes
|
|
|
|
|
.sp
|
|
|
|
|
Version 2019.2.7 is a CVE fix release for 2019.2.0\&.
|
|
|
|
|
.SS Fixed
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
Properly validate eauth credentials and tokens along with their ACLs.
|
|
|
|
|
Prior to this change eauth was not properly validated when calling
|
|
|
|
|
Salt ssh via the salt\-api. Any value for \(aqeauth\(aq or \(aqtoken\(aq would allow a user
|
|
|
|
|
to bypass authentication and make calls to Salt ssh. (CVE\-2020\-25592)
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.SS Salt 2018.3.0 Release Notes \- Codename Oxygen
|
|
|
|
|
.sp
|
|
|
|
|
\fBWARNING:\fP
|
|
|
|
@ -489505,15 +489562,15 @@ ab1b099730 Merge pull request \fI\%#42948\fP from Ch3LL/2017.7.0_follow_up
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBISSUE\fP \fI\%#42989\fP: (\fI\%blbradley\fP) GitFS GitPython performance regression in 2017.7.1 (refs: \fI\%#43002\fP)
|
|
|
|
|
\fBISSUE\fP \fI\%#42989\fP: (\fI\%blbradley\fP) GitFS GitPython performance regression in 2017.7.1 (refs: \fI\%#43002.2\fP)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#43034\fP: (\fI\%rallytime\fP) Back\-port \fI\%#43002\fP to 2017.7
|
|
|
|
|
\fBPR\fP \fI\%#43034\fP: (\fI\%rallytime\fP) Back\-port \fI\%#43002.2\fP to 2017.7
|
|
|
|
|
@ \fI2017\-08\-17 23:18:16 UTC\fP
|
|
|
|
|
.INDENT 2.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#43002\fP: (\fI\%the\-glu\fP) Try to fix \fI\%#42989\fP (refs: \fI\%#43034\fP)
|
|
|
|
|
\fBPR\fP \fI\%#43002.2\fP: (\fI\%the\-glu\fP) Try to fix \fI\%#42989\fP (refs: \fI\%#43034\fP)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
bcbb973a71 Merge pull request \fI\%#43034\fP from rallytime/bp\-43002
|
|
|
|
|
bcbb973a71 Merge pull request \fI\%#43034\fP from rallytime/bp\-43002.2
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
350c0767dc Try to fix \fI\%#42989\fP by doing sslVerify and refspecs for origin remote only if there is no remotes
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -490647,7 +490704,7 @@ ab21bd9b5b Sync cloud modules when saltutil.sync_all is run
|
|
|
|
|
@ \fI2017\-07\-27 22:32:07 UTC\fP
|
|
|
|
|
.INDENT 2.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
e2dd443002 Merge pull request \fI\%#42601\fP from rallytime/merge\-2017.7
|
|
|
|
|
e2dd443002.2 Merge pull request \fI\%#42601\fP from rallytime/merge\-2017.7
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
36a1bcf8c5 Merge branch \(aq2016.11\(aq into \(aq2017.7\(aq
|
|
|
|
|
.INDENT 2.0
|
|
|
|
@ -506391,7 +506448,7 @@ abe4eb3b98 fix encoding problem aws responses
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
1001987f64 Catch possible exception from lsb_release (\fI\%#37962\fP)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
330021cd8b Handle empty tokens safely (\fI\%#37961\fP)
|
|
|
|
|
33002.21cd8b Handle empty tokens safely (\fI\%#37961\fP)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
ea46639ce7 Merge pull request \fI\%#37272\fP from vutny/fix\-getting\-default\-logging\-opts
|
|
|
|
|
.INDENT 2.0
|
|
|
|
@ -534080,7 +534137,7 @@ a6c1d0b408 Fixed a bug where logging_command wasnt set as a key in a couple spot
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
8bb7cb7ff4 Use correct indexes
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
c3483002b0 [2015.8] Fixup salt\-cloud logging
|
|
|
|
|
c3483002.2b0 [2015.8] Fixup salt\-cloud logging
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#27332\fP: (\fI\%terminalmage\fP) Adjust dockerng/dockerio docstrings
|
|
|
|
@ -545028,7 +545085,7 @@ f7e58a241c Merge branch \(aq2015.5\(aq into \(aq2015.8\(aq
|
|
|
|
|
1cb1c2da07 Fixes wrong function scope
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
1c6c9b1a06 Merge pull request \fI\%#30025\fP from jtand/boto_tests
|
|
|
|
|
1c6c9b1a06 Merge pull request \fI\%#3002.25\fP from jtand/boto_tests
|
|
|
|
|
.INDENT 2.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
e706642152 Skipping some Boto tests until resolved moto issue
|
|
|
|
@ -545200,11 +545257,11 @@ a257249789 Add versionadded to SSH Port docs
|
|
|
|
|
0bb83e51aa Updated Cloud msic section.
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#30029\fP: (\fI\%terminalmage\fP) git.latest: Fix handling of nonexistant branches
|
|
|
|
|
\fBPR\fP \fI\%#3002.29\fP: (\fI\%terminalmage\fP) git.latest: Fix handling of nonexistant branches
|
|
|
|
|
@ \fI2015\-12\-28 19:39:29 UTC\fP
|
|
|
|
|
.INDENT 2.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
a5f7d9c2fc Merge pull request \fI\%#30029\fP from terminalmage/git.latest\-nonexistant\-branch
|
|
|
|
|
a5f7d9c2fc Merge pull request \fI\%#3002.29\fP from terminalmage/git.latest\-nonexistant\-branch
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
0b95894c9f git.latest: Fix handling of nonexistant branches
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -545227,11 +545284,11 @@ e7fe24dc64 Merge pull request \fI\%#30016\fP from alprs/fix\-gen_locale_normaliz
|
|
|
|
|
5799729aee locale module: don\(aqt escape the slash in n
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#30022\fP: (\fI\%gqgunhed\fP) Two minor typos fixed
|
|
|
|
|
\fBPR\fP \fI\%#3002.22\fP: (\fI\%gqgunhed\fP) Two minor typos fixed
|
|
|
|
|
@ \fI2015\-12\-28 15:22:24 UTC\fP
|
|
|
|
|
.INDENT 2.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
b871ce5310 Merge pull request \fI\%#30022\fP from gqgunhed/winrepo_typo
|
|
|
|
|
b871ce5310 Merge pull request \fI\%#3002.22\fP from gqgunhed/winrepo_typo
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
a052ff016e fixed minor typos and a :ref: link
|
|
|
|
|
.IP \(bu 2
|
|
|
|
@ -545240,11 +545297,11 @@ e47db1a076 Merge remote\-tracking branch \(aqrefs/remotes/saltstack/2015.8\(aq i
|
|
|
|
|
0c4c8b9b5c Merge remote\-tracking branch \(aqrefs/remotes/saltstack/2015.8\(aq into 2015.8
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#30026\fP: (\fI\%anlutro\fP) states.at: fix wrong variable being used
|
|
|
|
|
\fBPR\fP \fI\%#3002.26\fP: (\fI\%anlutro\fP) states.at: fix wrong variable being used
|
|
|
|
|
@ \fI2015\-12\-28 15:21:23 UTC\fP
|
|
|
|
|
.INDENT 2.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
4b8ac20d45 Merge pull request \fI\%#30026\fP from alprs/fix\-at_without_tag_job
|
|
|
|
|
4b8ac20d45 Merge pull request \fI\%#3002.26\fP from alprs/fix\-at_without_tag_job
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
c0fe9c09bd states.at: fix wrong variable being used
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -551452,9 +551509,9 @@ b869a92eea Change Zypper calls to a single point
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#33017\fP: (\fI\%rallytime\fP) Update the docs for saltutil.find_job to be more clear/accurate
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#33031\fP: (\fI\%rallytime\fP) Back\-port \fI\%#33002\fP to 2015.8
|
|
|
|
|
\fBPR\fP \fI\%#33031\fP: (\fI\%rallytime\fP) Back\-port \fI\%#33002.2\fP to 2015.8
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#33002\fP: (\fI\%whiteinge\fP) Add saltenv to the cmd.script state function (refs: \fI\%#33031\fP)
|
|
|
|
|
\fBPR\fP \fI\%#33002.2\fP: (\fI\%whiteinge\fP) Add saltenv to the cmd.script state function (refs: \fI\%#33031\fP)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#33021\fP: (\fI\%UtahDave\fP) Fix syndic regression (refs: \fI\%#33044\fP)
|
|
|
|
|
.UNINDENT
|
|
|
|
@ -567007,13 +567064,13 @@ cfbfd58afe Noting that file_roots and "state tree" should both be avoided, becau
|
|
|
|
|
1cb1c2da07 Fixes wrong function scope
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#30025\fP: (\fI\%justinta\fP) Skipping some Boto tests until resolved moto issue
|
|
|
|
|
\fBPR\fP \fI\%#3002.25\fP: (\fI\%justinta\fP) Skipping some Boto tests until resolved moto issue
|
|
|
|
|
@ \fI2015\-12\-28 15:21:45 UTC\fP
|
|
|
|
|
.INDENT 2.0
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
\fBPR\fP \fI\%#29725\fP: (\fI\%cachedout\fP) Disable some boto tests per resolution of moto issue (refs: \fI\%#30025\fP)
|
|
|
|
|
\fBPR\fP \fI\%#29725\fP: (\fI\%cachedout\fP) Disable some boto tests per resolution of moto issue (refs: \fI\%#3002.25\fP)
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
1c6c9b1a06 Merge pull request \fI\%#30025\fP from jtand/boto_tests
|
|
|
|
|
1c6c9b1a06 Merge pull request \fI\%#3002.25\fP from jtand/boto_tests
|
|
|
|
|
.IP \(bu 2
|
|
|
|
|
e706642152 Skipping some Boto tests until resolved moto issue
|
|
|
|
|
.UNINDENT
|
|
|
|
|