salt/doc/topics/releases/0.16.2.rst

Salt 0.16.2 Release Notes

release

2013-08-01

Version 0.16.2 is a bugfix release for 0.16.0 <release-0-16-0>, and contains a number of fixes.

Windows

• Only allow Administrator's group and SYSTEM user access to C:\salt. This eliminates a race condition where a non-admin user could modify a template or managed file before it is executed by the minion (which is running as an elevated user), thus avoiding a potential escalation of privileges. (6361)

Grains

• Fixed detection of virtual grain on OpenVZ hardware nodes
• Gracefully handle lsb_release data when it is enclosed in quotes
• LSB grains are now prefixed with lsb_distrib_ instead of simply lsb_. The old naming is not preserved, so SLS may be affected.
• Improved grains detection on MacOS

Pillar

• Don't try to load git_pillar <salt.pillar.git_pillar> if not enabled in master config (6052)
• Functions pillar.item <salt.modules.pillar.item> and pillar.items <salt.modules.pillar.items> added for parity with grains.item <salt.modules.grains.item>/grains.items <salt.modules.grains.items>. The old function pillar.data is preserved for backwards compatibility.
• Fixed minion traceback when Pillar SLS is malformed (5910)

Peer Publishing

• More gracefully handle improperly quoted publish commands (5958)
• Fixed traceback when timeout specified via the CLI fo publish.publish <salt.modules.publish.publish>, publish.full_data <salt.modules.publish.full_data> (5959)
• Fixed unintended change in output of publish.publish <salt.modules.publish.publish> (5928)

Minion

• Fixed salt-key usage in minionswarm script
• Quieted warning about SALT_MINION_CONFIG environment variable on minion startup and for CLI commands run via salt-call (5956)
• Added minion config parameter random_reauth_delay to stagger re-auth attempts when the minion is waiting for the master to approve its public key. This helps prevent SYN flooding in larger environments.

User/Group Management

• Implement previously-ignored unique option for user.present <salt.states.user.present> states in FreeBSD
• Report in state output when a group.present <salt.states.group.present> state attempts to use a gid in use by another group
• Fixed regression that prevents a user.present <salt.states.user.present> state to set the password hash to the system default (i.e. an unset password)
• Fixed multiple group.present <salt.states.group.present> states with the same group (6439)

File Management

• Fixed file.mkdir setting incorrect permissions (6033)
• Fixed cleanup of source files for templates when /tmp is in file_roots (6118)
• Fixed caching of zero-byte files when a non-empty file was previously cached at the same path
• Added HTTP authentication support to the cp module (5641)
• Diffs are now suppressed when binary files are changed

Package/Repository Management

• Fixed traceback when there is only one target for pkg.latest <salt.states.pkg.latest> states
• Fixed regression in detection of virtual packages (apt)
• Limit number of pkg database refreshes to once per state.sls <salt.modules.state.sls>/state.highstate <salt.modules.state.highstate>
• YUM: Allow 32-bit packages with arches other than i686 to be managed on 64-bit systems (6299)
• Fixed incorrect reporting in pkgrepo.managed states (5517)
• Fixed 32-bit binary package installs on 64-bit RHEL-based distros, and added proper support for 32-bit packages on 64-bit Debian-based distros (6303)
• Fixed issue where requisites were inadvertently being put into YUM repo files (6471)

Service Management

• Fixed inaccurate reporting of results in service.running <salt.states.service.running> states when the service fails to start (5894)
• Fixed handling of custom initscripts in RHEL-based distros so that they are immediately available, negating the need for a second state run to manage the service that the initscript controls

Networking

• Function network.hwaddr renamed to network.hw_addr <salt.modules.network.hw_addr> to match network.ip_addrs <salt.modules.network.ip_addrs> and network.ip_addrs6 <salt.modules.network.ip_addrs6>. All three functions also now work without the underscore in the name, as well.
• Fixed traceback in bridge.show <salt.modules.bridge.show> when interface is not present (6326)

SSH

• Fixed incorrect result reporting for some ssh_known_hosts.present <salt.states.ssh_known_hosts.present> states
• Fixed inaccurate reporting when ssh_auth.present <salt.states.ssh_auth.present> states are run with test=True, when rsa/dss is used for the enc param instead of ssh-rsa/ssh-dss (5374)

pip

• Properly handle -f lines in pip freeze output
• Fixed regression in pip.installed states with specifying a requirements file (6003)
• Fixed use of editable argument in pip.installed <salt.states.pip.installed> states (6025)
• Deprecated runas parameter in execution function calls, in favor of user

MySQL

• Allow specification of MySQL <salt.modules.mysql> connection arguments via the CLI, overriding/bypassing minion config params
• Allow mysql_user.present <salt.states.mysql_user.present> states to set a passwordless login (5550)
• Fixed endless loop when mysql.processlist <salt.modules.mysql.processlist> is run (6297)

PostgreSQL

• Fixed traceback in postgres.user_list <salt.modules.postgres.user_list> (6352)

Miscellaneous

• Don't allow npm states <salt.states.npm> to be used if npm module <salt.modules.npm> is not available
• Fixed alternatives.install <salt.states.alternatives.install> states for which the target is a symlink (6162)
• Fixed traceback in sysbench module <salt.modules.sysbench> (6175)
• Fixed traceback in job cache
• Fixed tempfile cleanup for windows
• Fixed issue where SLS files using the pydsl renderer <salt.renderers.pydsl> were not being run
• Fixed issue where returners were being passed incorrect information (5518)
• Fixed traceback when numeric args are passed to cmd.script <salt.states.cmd.script> states
• Fixed bug causing cp.get_dir <salt.modules.cp.get_dir> to return more directories than expected (6048)
• Fixed traceback when supervisord.running <salt.states.supervisord.running> states are run with test=True (6053)
• Fixed tracebacks when Salt encounters problems running rbenv (5888)
• Only make the monit module <salt.modules.monit> available if monit binary is present (5871)
• Fixed incorrect behavior of img.mount_image <salt.modules.img.mount_image>
• Fixed traceback in tomcat.deploy_war <salt.modules.tomcat.deploy_war> in Windows
• Don't re-write /etc/fstab if mount fails
• Fixed tracebacks when Salt encounters problems running gem (5886)
• Fixed incorrect behavior of selinux.boolean <salt.states.selinux.boolean> states (5912)
• RabbitMQ <salt.modules.rabbitmq>: Quote passwords to avoid symbols being interpolated by the shell (6338)
• Fixed tracebacks in extfs.mkfs <salt.modules.extfs.mkfs> and extfs.tune <salt.modules.extfs.tune> (6462)
• Fixed a regression with the module.run <salt.states.module.run> state where the m_name and m_fun arguments were being ignored (6464)