v1.6.2

LinuxAid Release Version v1.6.2

Bug Fixes

• 77634d3 fix: update chrony config path based on OS family

Other Changes

• 9fd206a Extend Eit_types::UserName pattern to support Samba @group syntax
• f0109d1 Fixed the logrotate failure due to file already exists error

v1.6.1

LinuxAid Release Version v1.6.1

Features

• 9f9c2da feat(wireguard): add default NAT masquerade rules for tunnels

Bug Fixes

• 4955f59 fix(logrotate): use systemd scheduling for Suse15 to prevent duplicate rotations
• d0cdbcf fix: allow Ubuntu 24.x releases to trigger PPA installation
• 9b9fff6 fix(mailcow): guard netfilter-mailcow and acme-mailcow depends_on with $letsencrypt
• 1fd93c8 fix: cleanup haproxy when disabled

Other Changes

• 6747351 Update the sssd status check service to wait for sssd to get ready first
• 9a99e2f add restart: unless-stopped to packagesign compose services
• fd205a7 Fix chrony config path from /etc/chrony.conf to /etc/chrony/chrony.conf

v1.6.0

LinuxAid Release Version v1.6.0

Bug Fixes

• fe44fa9 fix(wireguard): enforce wg-quick provider for managed interfaces
• f2d2ca8 fix: declare systemd class before monitor to avoid duplicate Class[Systemd] on atat.enableit

Other Changes

• 79e3c5a Fix duplicate Service[nginx] declaration and dependency cycle
• 0676472 Ensure dnsmasq override directory exists before managing unit file
• 9d77b97 Ensure sssd override directory exists and enforce resource ordering

v1.5.9

LinuxAid Release Version v1.5.9

Bug Fixes

• b73d8a4 fix: align puppet configuration with manual acme fixes
• f56757e fix: resolve dependency cycle between native_acme and basic_config
• e898186 fix: resolve syntax error in native_acme manifest map block
• 86c4eaa fix: handle missing obmondo fact gracefully in publicip
• c5c6406 fix: replace deprecated uniq function with unique
• 5f84262 fix: correctly assemble domain-specific dummy SSL certificates
• 46fbc3a fix: cast disable_ipv6 boolean to string for sysctl
• 1129245 fix: resolve config validation race condition
• 2d82f58 fix: resolve apt install error for haproxy 3.x
• 7130314 fix: remove reference of /etc/ssl/private from dummy cert for haproxy
• b748ac9 fix(catalog-diff): drop duplicate docker.sock mount in workflow

Configuration Changes

• 0835d8c chore: remove systemd drop-in configuration validation
• 8fb120e chore: increase cert persistence frequency to 30 minutes
• b01aecd chore: update linuxaid-cli version to v1.5.0
• 2de29da chore(catalog-diff): migrate all catalog-diff tooling to catalogdiff-ci

Other Changes

• c75375b updated the dump cert script
• ae63e06 refactor: simplify dump-certs.timer ExecStart to direct script call
• f11d797 refactor: gate vbernat PPA on Ubuntu 24.04 only
• c5e0a5f refactor: colocate dump-certs persistence with native_acme
• d3fa6ce refactor: switch HAProxy 3.x ACME to native crt-list flow
• a42ca7c ci(catalog-diff): run catalogdiff diff on PRs that touch Puppet code
• 1a4e42c add cron to delete snapshot from package-sign after 60 days

v1.5.8

LinuxAid Release Version v1.5.8

Features

• 97e5ca4 feat(gitlab-ci-runner): add shell and multiple docker runner support
• 183fcac feat(logrotate): add /var/log/syslog to rotation list
• 0b6a3db feat: improve catalog-diff with SSH facts, kube context support, and multiple output formats
• 1c41ab3 feat(linuxaid-cli): add SECURITY_EXPORTER_URL to env file

Bug Fixes

• 9b3c998 fix: remove duplicate Package[socat] declaration in eit_haproxy

Configuration Changes

• 5d6ab77 chore(prometheus): set 30m scrape interval for security exporter job

Other Changes

• cf996c3 Added the functionality to install conda forge packages
• ba2a270 Upate Linuxaid-cli package version to 1.4.0
• 4bb4aa1 Updated the mailcow type
• 2ec9258 Updated the mailcow template based on latest version
• 2391c56 Upgrade cadvisor docker image
• f78f6ea Fix wireguard_exporter metrics collection
• 83c4b94 doc: fix comparisons filename
• 9bff922 Enhance Splunk forwarder setup with user, group and ACL configuration

v1.5.7

LinuxAid Release Version v1.5.7

Bug Fixes

• 784c23d fix(docs): correct SELinux anchor links after namespace change
• 837dffd fix: Replaced profile::system::systemd with common::system::systemd so that systemd parameters are sourced from the common class

Other Changes

• 786b1b8 Add openvas module v0.0.2
• 7b3a3f9 Added splunk add ons
• 25639ca Updated the network wait online for bonded interace
• 2d37c1a use group adm for ubuntu-24 for logrotate
• 306349a Added the support to add splunk add-ons
• 64ebd8d Added a support to provide thinlinc license source path
• 06e45c7 doc: fix email markdown
• 0558fb9 add: noop_value and ensure for jumphost
• ed00bcc updating the class name form common::setup::obmondo_admin to common::system::obmondo_admin

v1.5.6

LinuxAid Release Version v1.5.6

Bug Fixes

• c23177b fix: update extra options and remove stale dropin
• 96f51a0 fix: update deprecated fields

Configuration Changes

• d0fe9d7 chore: pin puppet-openvas module @v0.0.1

Other Changes

• 5c861d0 gitea-backup: fix perform_local_backup_rotation func to only look at gitea-dump-* files

v1.5.5

LinuxAid Release Version v1.5.5

Bug Fixes

• 22bb13b fix(security): correct exporter config — timeout, field name, CA

Configuration Changes

• d4c105d chore(fix): changed the response key name, based on latest changes in api

Other Changes

• ce05f82 Refactor Hiera namespaces to standardize system lookups
• c236ae6 refactor: move profile::certs to profile::system::certs namespace
• ffbe858 Update enableit modules dependencies and metadata
• d3f7bb5 Change disabled_services data values from Hash to Array in hiera file to fix CI
• 3ffa7e9 Remove Redmine module

v1.5.4

LinuxAid Release Version v1.5.4

Bug Fixes

• 9361696 fix: nil safety for linuxaid_tag in ENC and add ENC documentation
• 53fb30a fix: handle linuxaid-tag for branch and tags

Other Changes

• 349fb9f ci: update docstring ci to v0.1.0
• 0d4cc16 refactor: replace common::services::systemd with systemd::unit_file
• c9babc2 Fix typo in openvmtools class name
• 5a819eb update security exporter to use Vuls server config

v1.5.3

LinuxAid Release Version v1.5.3

Bug Fixes

• 9747c6f fix: remove cron_jobs param since it's not being referenced anywhere
• 39622c4 fix: skip rsyslog if facter is unset
• 2e7974d fix(haproxy): gate HAProxy 3.x to Ubuntu 24.04+ only
• edb9733 fix: replace dummy cert creation with snake oil