Release 0.22.0

[pirat89]

Announce

This is the last upstream release covering IPU 7 -> 8. The system_upgrade_el7toel8 repository is going to be removed from further releases. Other artifacts related to IPU 7 -> 8 are going to be removed too.

In the same time it's the last release compatible with Python 2.7. Since now we are going to develope and test the code only for Python 3.6 and newer.

Packaging

• [IPU 9 -> 10] Require libdb-utils on RHEL 9 (Update pam_userdb database backend for RHEL10 #1289)
• Require leapp-framework 6.0+ (Add RHUI configuration #1142)
• Update leapp-deps package to satisfy leapp_framework_deps 6 (Add RHUI configuration #1142)

Upgrade handling

Fixes

• Activate LVM VGs with --sysinit option to correct the use in the upgrade initramfs (Use --sysinit when calling vgchange from mount_usr.sh #1329)
• Cap max size of the sparse files to 1TiB when storage with large amount of space (overlaygen: cap max sparse file size #1294)
• Fix IPU being blocked by resource limitations (Fix IPU being blocked by resource limitations #1256)
• Fix pes events scanner crashing when there are duplicate packages in the received instructions (pes_events_scanner: fix processing of RpmTransactionTasks #1296)
• Fix pes events scanner not respecting user’s transaction configuration (pes_events_scanner: fix processing of RpmTransactionTasks #1296)
• Fix storage scanner crashing when command outputs contain colon character (Fix storage scanner parsing error #1258)
• Fix the report when handling broken parsing of kernel cmdline (ReadOfKernelArgsError: fix no attribute error #1290)
• Generate proper error message instead ModelViolationError when parsing invalid repository definition (Fix ModelViolationError while parsing repo files #1266)
• Handle default kernel cmdline when multiple boot entries for the default kernel are defined (Handle default kernel cmdline if multiple boot entries for the default kernel are defined #1302)
• Load all available obsoleted keys (properly scope try/except when loading obsoleted keys #1286)
• Prevent a possible crash with LiveMode when adding the upgrade boot entry on LVM systems (fix(add_upgrade_boot_entry): convert arg list into a tuple #1313)
• Prevent failure for upgrade paths when obsoleted keys are not defined (don't require all versions to be defined for obsoleted keys #1285)
• [IPU 7 -> 8] Ignore invalid firewalld configuration (fix(firewalldfactsactor): handle parse errors #1341)
• [IPU 7 -> 8] scangrubdevpartitionlayout: Skip warning msgs from fdisk (IPU 7 -> 8: scangrubdevpartitionlayout: Skip warning msgs #1306)
• [IPU 8 -> 9] Fix problems with the bootloader when upgrading to RHEL 9.6 on ARM (Workaround for ARM Upgrades from RHEL8 to RHEL9.5 onwards (GRUB and kernel incompatibility) #1275, ARMageddon: When Bootloader Configuration Goes Rogue #1331, fix(arm,bootloaders): use correct blsdir when boot is not separate #1339)
• [IPU 9 -> 10] Fix output of commands executed inside systemd-nspawn containers (Fix unreadable output in upgrade log #1323)
• [IPU 9 -> 10] Fix remediation instructions for deprecated NM configuration (Fix remediation message in the networkdeprecations actor #1330)
• [IPU 9 -> 10] Obsolete RHEL9 GPG key signed with SHA1 (IPU 9 -> 10: obsolete GPG key with SHA1 signature #1325)

Enhancements

• Add RHEL 9.6 and 10.0 product certificates (Add RHEL 10.0 prod-certs #1287, Enable IPU for EL 9.6 (and drop EL 8.8/9.2) #1309)
• Introduce new IPU paths 8.10 -> 9.6 and 9.6 -> 10.0 (Enable IPU for EL 9.6 (and drop EL 8.8/9.2) #1309)
• Add possibility to use net.naming-scheme (for IPU 8 -> 9 only for now) (feature: add possibility to use net.naming-scheme #1215, feat(net-naming-scheme): enable by default #1312)
• Drop upgrade paths related to RHEL 8.8, 9.2, and 9.5 (Enable IPU for EL 9.6 (and drop EL 8.8/9.2) #1309, Drop 9.5 and add 9to10 tests #1344)
• Enable upgrade for EL8+ systems with LUKS bound to Clevis with TPM 2.0 token (Add LUKS support via Clevis TPM 2 token #1200)
• Enable upgrade with RHUI on Alibaba cloud for ARM machines (rhui setups support alibaba cloud for arm64 #1277)
• Introduce a possibility to configure leapp actors covering RHUI on clouds (Add RHUI configuration #1142)
• Minor improvements in preupgrade reports (Update postgresqlcheck.py report #1315, redhatsignedrpmcheck: Add remediation hint and URL #1326, checkmicroarchitecture: IPU 9 -> 10: report URL for x86_64-v3 #1342)
• Raise an inhibitor if unsupported target version supplied instead of error (Verify supported target OS version in actors #1328)
• Skip checking of (PKI) directory-hash dir to speedup the upgrade process and clean logs (Skip checking files under .../directory-hash/ dir #1297)
• Update leapp upgrade data files (Update data files to a newer version. #1307, data: update leapp data files for final build #1349)
• [IPU 9 -> 10] Cover upgrades for MySQL and PostgreSQL databases (Add actors for databases migration - postgresql/mariadb RHEL9 -> RHEL 10 #1316, el9to10: actors: mysql #1343)
• [IPU 9 -> 10] Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf (OpenSslEnginesCheck: New actor for OpenSSL engines (9->10)  #1338)
• [IPU 9 -> 10] Detect XFS file systems with problematic parameters (Inhibit upgrades with unsupported XFS #1318)
• [IPU 9 -> 10] Detect deprecated network-scripts (ifcfg) files (CheckNetworkDeprecations9to10: Check for ifcfg artifacts #1332, networkdeprecations: Update summary to include list of files (#1332 follow-up) #1347)
• [IPU 9 -> 10] Detect whether subscribed systems are using SCA (Inhibit upgrades with non-SCA registration  #1333)
• [IPU 9 -> 10] Handle correctly switch of symlink to directory when upgrading Ruby IRB (Add el9toel10 actor to handle symlink -> directory with ruby IRB. #1304)
• [IPU 9 -> 10] Inform user about Libdb removal if present (Add Libdb actor #1319)
• [IPU 9 -> 10] Inhibit the upgrade for Intel CPUs with microarchitecture x86_64-v2 (check_microarch: require x86_64-v3 for RHEL10 #1196)
• [IPU 9 -> 10] Move crypto-policies related actors to the system_upgrade_common repository to apply it for IPU 9 -> 10 as well
• [IPU 9 -> 10] Update checks for SAP HANA (checksaphana: Update link name to upgrade guide #1346)
• [IPU 9 -> 10] Update pam_userdb database backend for RHEL10 (Update pam_userdb database backend for RHEL10 #1289)

Additional changes interesting for devels

• Introducing new upstream documentation focused on the leapp-repository project at https://leapp-repository.readthedocs.io/introduce-docs/. The documentation is still under reconstruction at this time, however we consider it a big step. All PRs impacting stuff that should be documented will be required to do so before they could be merged.

[github-actions]

Thank you for contributing to the Leapp project!

Please note that every PR needs to comply with the Leapp Guidelines and must pass all tests in order to be mergeable.
If you want to request a review or rebuild a package in copr, you can use following commands as a comment:

• review please @oamg/developers to notify leapp developers of the review request
• /packit copr-build to submit a public copr build using packit

Packit will automatically schedule regression tests for this PR's build and latest upstream leapp build.
However, here are additional useful commands for packit:

• /packit test to re-run manually the default tests
• /packit retest-failed to re-run failed tests manually
• /packit test oamg/leapp#42 to run tests with leapp builds for the leapp PR#42 (default is latest upstream - main - build)

Note that first time contributors cannot run tests automatically - they need to be started by a reviewer.

It is possible to schedule specific on-demand tests as well. Currently 2 test sets are supported, beaker-minimal and kernel-rt, both can be used to be run on all upgrade paths or just a couple of specific ones.
To launch on-demand tests with packit:

• /packit test --labels kernel-rt to schedule kernel-rt tests set for all upgrade paths
• /packit test --labels beaker-minimal-8.10to9.4,kernel-rt-8.10to9.4 to schedule kernel-rt and beaker-minimal test sets for 8.10->9.4 upgrade path

See other labels for particular jobs defined in the .packit.yaml file.

Please open ticket in case you experience technical problem with the CI. (RH internal only)

Note: In case there are problems with tests not being triggered automatically on new PR/commit or pending for a long time, please contact leapp-infra.

[pirat89]

@oamg/developers keeping as draft until the docs PR is merged

[matejmatuska]

LGTM!!!! 🚀 ❤️