Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

google-compute-engine-oslogin-32bit-20190801-4.38.1 RPM for x86_64

From OpenSuSE Leap 15.4 for x86_64

Name: google-compute-engine-oslogin-32bit Distribution: SUSE Linux Enterprise 15
Version: 20190801 Vendor: SUSE LLC <https://www.suse.com/>
Release: 4.38.1 Build date: Wed Jul 8 08:59:51 2020
Group: System/Daemons Build host: goat12
Size: 2799200 Source RPM: google-compute-engine-20190801-4.38.1.src.rpm
Packager: https://www.suse.com/
Url: https://github.com/GoogleCloudPlatform/compute-image-packages
Summary: OS Login Functionality for Google Compute Engine
Libraries and scripts  to enable OS Login functionality for
Google Compute Engine. Modifies sshd, nsswitch, and sshd_pam configurations.

Provides

Requires

License

Apache-2.0

Changelog

* Sat Jun 20 2020 adrian.glaubitz@suse.com
  - Don't enable and start google-network-daemon.service when it's
    already installed (bsc#1169978)
* Tue Apr 28 2020 rjschwei@suse.com
  - Add gceosl-no-def-sysgrps.patch (bsc#1170719, bsc#1170720)
    + Do not add the created user to the adm (CVE-2020-8903),
      docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups
      if they exist (bsc#1173258)
* Wed Apr 08 2020 rjschwei@suse.com
  - Rename the sysctl file that applies the GCE network settings (bsc#1167810)
    + The file 11-gce-network-security.conf applies network configuration
      settings. Specifically the value for net.ipv4.conf.all.rp_filter is also
      part of the system defaults in /usr/lib/sysctl.d/50-default.conf and thus
      the default setting was applied, instead of the desired setting. As
      50-default is processed after 11-gce-network-security.
* Tue Oct 22 2019 rjschwei@suse.com
  - Add gcei-waitlimit-dns.patch (bsc#1151398)
    + Add a wait limit to retrying DNS resolution to avoid a forever loop
* Tue Sep 17 2019 rjschwei@suse.com
  - Fix file list
    + On i586 Python code is also under _libdir thus creating a conflict between
      the packages.
* Wed Sep 11 2019 rjschwei@suse.com
  - Add gcei_disableipv6.patch (bsc#1150058)
    + Upstream introduced an interface named "DisableIpv6" but the
      implementation was incomplete and the interface was missing for SUSE
      distros
* Tue Aug 20 2019 adrian.glaubitz@suse.com
  - Fix install location of NSS and PAM shared libraries (bsc#1146172)
  - Switch RPM group for oslogin package from Hardware to System/Daemons
* Tue Aug 06 2019 adrian.glaubitz@suse.com
  - Add patch to normalize setup version of Python code
    + gcei-normalize-python-version.patch
  - Fix file matching patterns in %files section for oslogin package
* Mon Aug 05 2019 adrian.glaubitz@suse.com
  - Update to version 20190801 (bsc#1144092, bsc#1144170)
    + Google Compute Engine
    * Re-enable boto config without plugin.
    * Fix metadata script retrieval for python 2 and 3.
    + Google Compute Engine OS Login
    * Fix for 2FA on RHEL 8.
  - from version 20190730
    + Google Compute Engine
    * Support for Debian 10.
    * New package versioning.
    * Support for Google Private Access over IPv6.
    * Support root disk expansion in RHEL 8 and Debian 10.
    + Google Compute Engine OS Login
    * Bug fixes for sudoers.
    * Initial groups support (not yet enabled).
  - Add patch to explicitly link NSS and PAM shared
    libraries against libboost_regex on SLE-12
    + gcei-link-boost_regex.patch
  - Refresh patches for new version
    + gcei-scripts-after-reg.patch
  - Set StandardOutput=journal+console in custom systemd service files
    + google-optimize-local-ssd.service
    + google-set-multiqueue.service
  - Stop installing configuration file for systemd-journald
    + Logging is now configured through systemd service files
  - Update file matching patterns in %files section for new version
* Mon May 27 2019 adrian.glaubitz@suse.com
  - Update to version 20190522 (bsc#1136266, bsc#1136267)
    + Google Compute Engine
    * Fix guest attributes flow in Python 3.
    + Google Compute Engine OS Login
    * Update OS Login control file for FreeBSD support.
  - from version 20190521
    + Google Compute Engine
    * Retry download for metadata scripts.
    * Fix script retrieval in Python 3.
    * Disable boto config in Python 3.
    * Update SSH host keys in guest attributes.
    * Fix XPS settings with more than 64 vCPUs.
* Thu May 16 2019 adrian.glaubitz@suse.com
  - Update to version 20190416 (bsc#1128392, bsc#1134179)
    + Google Compute Engine
    * FreeBSD fixes: syslog socket location and OS detection.
    * Upstart systems: only run startup scripts at boot.
    + Google Compute Engine OS Login
    * Fix pam_group ordering detection.
    * Restart cron from the OS Login control file.
    * Add PAM entry to su:account stack.
  - from version 20190315
    + Google Compute Engine OS Login
    * Fix alternate challenge section for two factor authentication.
    * Fix FreeBSD compatibility issues in the control file.
  - from version 20190304
    + Google Compute Engine
    * Set oom_score_adjust for google_accounts_daemon.
    + Google Compute Engine OS Login
    * Use pam_group to provide users with default groups.
    * Add compat.h to support FreeBSD.
    * Exit immediately after a two factor authentication failure.
    * Add support for Google phone prompt challenges.
  - Adjust paths for new upstream directory layout in %build and %install
  - Include systemd service file to run google_optimize_local_ssd command
    + google-optimize-local-ssd.service
  - Include systemd service file to run google_set_multiqueue command
    + google-set-multiqueue.service
  - Install journald configuration files into /usr/lib/systemd/journald.conf.d
  - Refresh patches for new version
    + gcei-hide-py-deps.patch
    + gcei-scripts-after-reg.patch
    + gcei-set-run_dir.patch
* Wed Jan 30 2019 adrian.glaubitz@suse.com
  - Update to version 20190124 (bsc#1123671, bsc#1123672)
    + Google Compute Engine
    * Fix metadata script retrieval to support Python 3.
* Mon Jan 21 2019 rjschwei@suse.com
  - Remove dropped service from systemd setup macros (bsc#1122172)
  - Drop use of restart_on_update, force service restart with  -f option
    on service_del_preun and service_del_postun
  - Detect and handle removed services in pre rather than post
* Tue Dec 11 2018 adrian.glaubitz@suse.com
  - Update to version 20181206 (bsc#1119029, bsc#1119110)
    + Google Compute Engine
    * Support enabling OS Login two factor authentication.
    * Improve accounts support for FreeBSD.
    + Google Compute Engine OS Login
    * Support OS Login two factor authentication (Alpha).
    * Improve SELinux support.
  - from version 20181023
    + Google Compute Engine
    * Fix: Update sudoer group membership without overriding local groups.
  - from version 20181018
    + Google Compute Engine
    * Fix: Remove users from sudoers group on account removal.
* Sun Nov 25 2018 rjschwei@suse.com
  - Remove conditions for distributions older than Leap 42.3 and SLE 12
    + Delete init scripts google-accounts-daemon.suse,
      google-clock-skew-daemon.suse, google-instance-setup.suse,
      google-network-daemon.suse, google-shutdown-scripts.suse,
      google-startup-scripts.suse
  - Fix build for distributions with gcc version less than 4.9
    + Add new dependency on boost
* Fri Oct 12 2018 adrian.glaubitz@suse.com
  - Update to version 20181011
    + Google Compute Engine
    * Revert: Remove users from sudoers group on account removal.
  - from version 20181008
    + Google Compute Engine
    * Remove users from sudoers group on account removal.
    * Remove gsutil dependency for metadata scripts.
  - from version 20180905
    + Google Compute Engine
    * Remove ntp package dependency.
    * Support Debian 10 Buster.
    * Restart the network daemon if networking is restarted.
    * Prevent setup of the default ethernet interface.
    * Accounts daemon verifies username is 32 characters or less.
    + Google Compute Engine OS Login
    * Add user name validation to pam modules.
    * Return false on failed final load.
    * Support FreeBSD.
    * Support Debian 10 Buster.
  - from version 20180611
    + Google Compute Engine
    * Prevent IP forwarding daemon log spam.
    * Make default shell configurable when executing metadata scripts.
    * Rename distro directory to distro_lib.
  - Refresh patches for new version
    + gcei-set-run_dir.patch
* Mon Jun 18 2018 adrian.glaubitz@suse.com
  - Ensure that google-ip-forwarding-daemon service and
    google-network-setup are stopped and disabled
    during upgrade
  - Ensure that google-network-daemon service is enabled
    and started during upgrade
* Thu Jun 14 2018 adrian.glaubitz@suse.com
  - Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
    + gcei-set-run_dir.patch
  - Drop deleted patch from spec file
    + gcei-lnx-distro-py3.patch
* Tue May 29 2018 rjschwei@suse.com
  - Remove gcei-lnx-distro-py3.patch
    + Upstream intention is to depend on distro module from GitHub
  - Add dependency on python3-distro for SLE/Leap 15 and later
* Mon May 21 2018 rjschwei@suse.com
  - Add patch gcei-lnx-distro-py3.patch (bsc#1094074)
* Fri May 11 2018 adrian.glaubitz@suse.com
  - Update to version 20180510 (bsc#1092214)
    + Prevent delay in configuring IP forwarding routes.
    + Improve instance setup support for FreeBSD.
  - Include new google-network-daemon
    + Add google-network-daemon.service activation in
      %pre and %post sections
    + Add google-network-daemon.suse init script for SysV
  - Stop shipping deprecated google-ip-forwarding-daemon service
    + Remove google-ip-forwarding-daemon.service activation in
      %pre and %post sections
    + Drop google-ip-forwarding-daemon.suse from source distribution
  - Add missing association with "init" package for  %pre, %post,
    %preun and %postun sections
  - Install google_oslogin_nss_cache binary into oslogin package
* Tue May 08 2018 adrian.glaubitz@suse.com
  - Update to version 20180504 (bsc#1092214)
    + Create a new network daemon.
    + Refactor the IP forwarding daemon and network setup.
    + Improvements for using NSS cache in the accounts daemon.
    + Include libnss cache as part of the OS Login package.
  - Refresh patches for new version:
    + gcei-scripts-after-reg.patch
* Mon Apr 16 2018 adrian.glaubitz@suse.com
  - Update to version 20180227 (bsc#1066273)
    + Add distro specific logic.
    + Support SLES 11 and 12 in multi-nic setup.
    + Fix boto config documentation.
    + Add modprobe blacklist for nouveau and floppy modules.
    + Fix irqbalance conflict in Debian package.
    + Fix conflict with other applications that use curl and SSL.
  - Install new kernel module blacklist into /etc/modprobe.d.
  - Refresh patches for new version:
    + gcei-hide-py-deps.patch
* Fri Feb 02 2018 adrian.glaubitz@suse.com
  - Update to version 20180129 (bsc#1078349, bsc#1079077)
    + Improve rsyslog daemon reset when using the dhcp exit hook.
    + The OS Login feature is generally available.
    + Change the OS Login uid restriction to allow uid 1000.
    + Close socket connections after requesting metadata.
  - From version 20171213
    + Force IPv4 for Debian apt configs.
* Sun Dec 03 2017 adrian.glaubitz@suse.com
  - Update to version 20171129 (bsc#1070895, bsc#1070918)
    + Generate SSH host keys when none are present.
    + Improve logging when activating OS Login.
    + Fix parsing logic for expiration time on SSH public keys.
    + Fix home directory creation PAM config.
* Fri Nov 03 2017 rjschwei@suse.com
  - Change dependencies -init depends on -oslogin
    + oslogin feature is now enabled by the initialization code
      when appropriate
  - Do not start the oslogin feature upon package install
* Fri Oct 27 2017 rjschwei@suse.com
  - Fix build for SLES 11
* Thu Oct 26 2017 adrian.glaubitz@suse.com
  - Update to version 20171025 (bsc#1064356, bsc#1065308)
    + Add apt configuration to prevent auto-removal of Google packages.
    + Rename set_hostname to prevent naming conflicts.
    + Remove logging when checking OS Login status.
  - From version 20171019
    + Support the enable-oslogin metadata key for activating OS Login.
    + Improve packaging to restart services.
    + OS Login is available in Beta.
    + Add status option to the OS Login control file.
  - From version 20171006
    + Fix system hang during VM shutdown.
    + JSON parser accepts string types for int64 values.
  - From version 20170921
    + JSON parser casts uid and gid to unsigned integers.
  - From version 20170914
    + Remove fstab barrier options in EL 7.
    + Use curl to download metadata script files for SSL certificate validation.
    + Use netifaces for retrieving MAC address names if the import exists.
* Tue Sep 19 2017 rjschwei@suse.com
  - Ship the udevrules with the -init package only
* Tue Sep 12 2017 rjschwei@suse.com
  - Fix baslibs.conf, use package, not files
  - Include rpmlintrc and baslibc.conf as source
* Mon Sep 11 2017 rjschwei@suse.com
  - Add gcei-scripts-after-reg.patch (bsc#1057671)
* Sat Sep 09 2017 rjschwei@suse.com
  - Update to version 20170829 (bsc#1049242, FATE#323757)
    + Support oslogin feature
    + Add rpmlintrc
      ~ We ship pam and nss modules in -oslogin we do not want
      to name the package according to the shared library naming policy
    + Add baslibs.config
      ~ Handle the nss and pam modules provided by oslogin properly
  - From version 20170718
    + Allow nologin paths other than /sbin/nologin.
    + Try to download GCS URLs with curl if gsutil is not installed.
    + Fix control scripts to correctly restart sshd and nscd if they exist.
    + Retry HTTP requests if error 500 is received.
    + Move oslogin sudoers directory locations.
  - Setup for Python 3 build oSTW and SLE 15
  - Source package renamed to google-compute-engine
    + Binary subpackages -init -oslogin
* Fri Jan 13 2017 rjschwei@suse.com
  - The startup script attempts a network connection, thus it must
    run after network setup
* Thu Jan 12 2017 rjschwei@suse.com
  - Scripts that are one-shot should not be marked as "stop_on_removal"
    as there is no process running (bsc#1017395)
  - One-shot scripts should not run with startproc
* Mon Dec 19 2016 rjschwei@suse.com
  - Update to version 20161213 (bsc#1015829, bsc#1016372)
    + Remove gcei-handle-failed-open.patch included upstream
    + Remove gcei-handle-missing-gsutil.patch included upstream
    + Forward port gcei-hide-py-deps.patch
    + Improved alias IP support
  - From 20161118
    + Add support for alias IPs in the IP forwarding daemon.
    + IP forwarding daemon adds back local routes after network restart.
    + Account daemon removes expired key access without metadata change.
    + Account daemon ignores SSH keys with non-ascii characters.
    + Improved exception handling.
    + Fix for syslog startup on systemd.
    + Add a route to the metadata server to /etc/hosts.
  - From 20160930
    + Provide a service to enable network interfaces on boot.
    + Create a common library for inspecting network interfaces.
    + Allow metadata script output that is not UTF-8.
    + Fixed instance config file logic.
    + Fixed accounts management Python 3 compatibility.
    + Fixed IP forwarding Python 3 compatibility.
    + Improved style consistency.
    + Run a service on boot to enable additional network interfaces.
    + Update dhclient-script on EL 6 to fix local routing.
* Sun Oct 30 2016 jengelh@inai.de
  - Resolve description inaccuracy
  - Call %service_* just once, but with all args
* Wed Oct 26 2016 rjschwei@suse.com
  - Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)
* Thu Oct 20 2016 rjschwei@suse.com
  - Update gcei-handle-failed-open.patch to match upstream PR
* Wed Oct 19 2016 rjschwei@suse.com
  - Add gcei-handle-failed-open.patch
    * Do not exit with a traceback if the sudoers file cannot be written
* Wed Oct 19 2016 rjschwei@suse.com
  - Package the rsyslog config unconditionally, rsyslog also available on
    SLE 11
* Wed Oct 19 2016 rjschwei@suse.com
  - Add sysvinit scripts for SUSE, upstream scripts are RHEL specific
    * google-accounts-daemon.suse
    * google-clock-skew-daemon.suse
    * google-instance-setup.suse
    * google-ip-forwarding-daemon.suse
    * google-shutdown-scripts.suse
    * google-startup-scripts.suse
* Mon Oct 17 2016 rjschwei@suse.com
  - Own the udev directories, fixes issue with SLE 12 build
* Mon Oct 17 2016 rjschwei@suse.com
  - Conflict with the previous generation of initialization code.
    * According to upstream and update path is not supported and
      has too many corner cases to reliably work. Thus running instances are
      not expected to upgrade.
* Mon Oct 17 2016 rjschwei@suse.com
  - Initial build
    - Version 20160803

Files

/lib/security
/lib/security/pam_oslogin_admin.so
/lib/security/pam_oslogin_login.so
/usr/lib/libnss_cache_oslogin-20190801.00.so
/usr/lib/libnss_cache_oslogin.so.2
/usr/lib/libnss_oslogin-20190801.00.so
/usr/lib/libnss_oslogin.so.2


Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Jul 9 16:00:25 2024