From cb742211ded2bd74299d31f6352f9f67f271e0a9 Mon Sep 17 00:00:00 2001 From: Steven Spencer Date: Thu, 6 Oct 2022 10:10:07 -0500 Subject: [PATCH 1/9] [WIP] Framework, baseline for Rocky Linux 8.7 release notes * The starting point for 8.7 release notes. --- docs/release_notes/8_7.md | 88 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 88 insertions(+) create mode 100644 docs/release_notes/8_7.md diff --git a/docs/release_notes/8_7.md b/docs/release_notes/8_7.md new file mode 100644 index 0000000000..50cb547352 --- /dev/null +++ b/docs/release_notes/8_7.md @@ -0,0 +1,88 @@ +--- +title: Current Release 8.7 +tags: + - 8.7 + - 8.7 release + - Rocky 8.7 +--- + +# Release Notes for Rocky Linux 8.7 + +## Major Changes + +For a complete list of major changes, please see the upstream listing [here](https://access.redhat.com/documentation/en-us/red_hat_enter +prise_linux/8/html/8.7_release_notes/overview#overview-major-changes). + +Below are some highlights. + +### Security + +* Network Security Services (NSS) no longer supports RSA keys shorter than 1023 bits. +* SCAP Security Guide (SSG) rebased to 0.1.63 along with several other changes relating to SSG and DISA STIG. See the [upstream document](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/new-features#enhancement_security) for more. +* `clevis-luks-askpass` is now enabled by default. +* `fapolicyd` rebased to 1.1.3 + +### Networking + +* NetworkManager rebased to 1.40. For notable changes see the [upstream release notes here](https://github.com/NetworkManager/NetworkManager/blob/nm-1-40/NEWS). +* NetworkManager now stores the DHCP lease information in the`/run/NetworkManager/devices/` directory + +### Filesystem And Storage + +* `nfsrahead` has been added. Can be used to modify `readahead` value for NFS mounts, and thus affect the NFS read performance. +* `rpcctl` command now displays SunRPC connection information. +* `multipath.conf` can now include protocol-specific configuration overrides in DM Multipath + +### Dynamic Programming Languages, Web and Database Servers + +* New module stream `ruby:3.1` +* New module stream `mercurial:6.2` +* `mariadb-java-client` rebased to version 2.7.1 +* `redis` rebased to 6.2.7 +* A new default for the `LimitRequestBody` directive in `httpd` configuration + +For more on these changes, visit the [upstream page](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/new-features#enhancement_dynamic-programming-languages-web-and-database-servers) dealing with these additions and changes. + +### Compilers And Development Tools + +* GCC Toolset 12: Annobin rebased to version 10.79 +* GCC Toolset 12: `binutils` rebased to version 2.38 +* GCC 12 and later supports `_FORTIFY_SOURCE` level 3 +* DNS stub resolver option now supports `no-aaaa` option +* GCC Toolset 12: GDB rebased to version 11.2 +* `libpfm` now supports AMD Zen 2 and Zen 3 processors +* `papi` now supports AMD Zen 2 and Zen 3 processors +* Improved hardware identification for ARM processors +* Rust Toolset rebased to version 1.62.1 +* LLVM Toolset rebased to version 14.0.0 +* The `LLVM gold plugin` is now available on the IBM Z architecture +* A new module stream: `maven:3.8` + +### Identity Management + +* SSSD now supports memory caching for SID requests +* IdM now supports configuring an AD Trust with Windows Server 2022 +* IdM now indicates whether a given name is a user or a group in a trusted AD domain during a name search +* New `ipasmartcard_server` and `ipasmartcard_client` roles +* `samba` rebased to version 4.16.1 +* SSSD now supports direct integration with Windows Server 2022 + +### Virtualization + +* open-vm-tools rebased to 12.0.5 +* ESXi hypervisor and SEV-ES is now fully supported + +## Upgrading From Rocky Linux 8.6 + +Simply run `sudo dnf -y upgrade` + +## Known Issues + +## Reporting Bugs + +Please report any bugs you encounter to the [Rocky Linux Bug Tracker](https://bugs.rockylinux.org/). We also welcome you to join our com +munity in any way you wish be it on our [Forums](https://forums.rockylinux.org), [Mattermost](https://chat.rockylinux.org), [IRC on Libe +ra.Chat](irc://irc.liberachat/rockylinux), [Reddit](https://reddit.com/r/rockylinux), [Mailing Lists](https://lists.resf.org), or any ot +her way you wish to participate! + + From b27ede5d559a5ccc934aee4f654d770f05e61d7d Mon Sep 17 00:00:00 2001 From: Steven Spencer Date: Mon, 17 Oct 2022 10:05:37 -0500 Subject: [PATCH 2/9] Changes to organization and structure * changed the way the release notes were structured * some additional detail added * kept module streams together by category --- docs/release_notes/8_7.md | 58 +++++++++++++++++++++++++++++++-------- 1 file changed, 47 insertions(+), 11 deletions(-) diff --git a/docs/release_notes/8_7.md b/docs/release_notes/8_7.md index 50cb547352..32f115d5b7 100644 --- a/docs/release_notes/8_7.md +++ b/docs/release_notes/8_7.md @@ -18,10 +18,22 @@ Below are some highlights. ### Security * Network Security Services (NSS) no longer supports RSA keys shorter than 1023 bits. -* SCAP Security Guide (SSG) rebased to 0.1.63 along with several other changes relating to SSG and DISA STIG. See the [upstream document](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/new-features#enhancement_security) for more. * `clevis-luks-askpass` is now enabled by default. * `fapolicyd` rebased to 1.1.3 +#### DISA STIG + +This release modifies the `scap-security-guide` so that it is better aligned with DISA. For more information on this and other security related changes, see the [upstream document](https://access.redhat.com/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/new-features#enahancement_security) + +* SCAP Security Guide (SSG) rebased to 0.1.63 along with several other changes relating to SSG and DISA STIG. + +### Shells and command-line Tools + +* `xmlstarlet` - a new tool that provides a simple set of command-line utilities for parsing XML files. +* `opencryptoki` updated to 3.18.0 +* `powerpc-utils` updated to 1.3.10 +* `libva` updated to 2.13.0 + ### Networking * NetworkManager rebased to 1.40. For notable changes see the [upstream release notes here](https://github.com/NetworkManager/NetworkManager/blob/nm-1-40/NEWS). @@ -35,28 +47,52 @@ Below are some highlights. ### Dynamic Programming Languages, Web and Database Servers -* New module stream `ruby:3.1` -* New module stream `mercurial:6.2` +#### Module Streams + +Later versions of the following components are now available as new module streams: + +* `ruby:3.1` +* `mercurial:6.2` +* `Node.js 18` + +#### Additional Changes + * `mariadb-java-client` rebased to version 2.7.1 * `redis` rebased to 6.2.7 * A new default for the `LimitRequestBody` directive in `httpd` configuration For more on these changes, visit the [upstream page](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/new-features#enhancement_dynamic-programming-languages-web-and-database-servers) dealing with these additions and changes. +### Infrastructure Services + +* `chrony` updated to 4.2 +* `unbound` updated to 1.16.2 + ### Compilers And Development Tools -* GCC Toolset 12: Annobin rebased to version 10.79 -* GCC Toolset 12: `binutils` rebased to version 2.38 -* GCC 12 and later supports `_FORTIFY_SOURCE` level 3 -* DNS stub resolver option now supports `no-aaaa` option -* GCC Toolset 12: GDB rebased to version 11.2 +#### Changes Related to Processors and Machines + * `libpfm` now supports AMD Zen 2 and Zen 3 processors -* `papi` now supports AMD Zen 2 and Zen 3 processors +* `papi` mow supports AMD Zen 2 and Zen 3 processors * Improved hardware identification for ARM processors +* The `LLVM gold plugin` is now available on the IBM Z architecture + +#### GCC Toolset 12 + +* Annobin rebased to version 10.79 +* `binutils` rebased to version 2.38 +* GCC 12 and later supports `_FORTIFY_SOURCE` level 3 +* GDB rebased to version 11.2 + +#### Module Streams + +* New module stream `maven:3.8` + +#### Other + +* DNS stub resolver option now supports `no-aaaa` option * Rust Toolset rebased to version 1.62.1 * LLVM Toolset rebased to version 14.0.0 -* The `LLVM gold plugin` is now available on the IBM Z architecture -* A new module stream: `maven:3.8` ### Identity Management From e6165dfa01520d278750e5a9184bc0146fd0f14c Mon Sep 17 00:00:00 2001 From: Steven Spencer Date: Wed, 19 Oct 2022 15:21:49 -0500 Subject: [PATCH 3/9] 8_7 Release notes changes * suggestion to move Upgrading and Known Issues to the top of the document. --- docs/release_notes/8_7.md | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/docs/release_notes/8_7.md b/docs/release_notes/8_7.md index 32f115d5b7..78229884e1 100644 --- a/docs/release_notes/8_7.md +++ b/docs/release_notes/8_7.md @@ -8,10 +8,15 @@ tags: # Release Notes for Rocky Linux 8.7 +## Upgrading From Any Rocky Linux 8 Version + +Simply run `sudo dnf -y upgrade` + +## Known Issues + ## Major Changes -For a complete list of major changes, please see the upstream listing [here](https://access.redhat.com/documentation/en-us/red_hat_enter -prise_linux/8/html/8.7_release_notes/overview#overview-major-changes). +For a complete list of major changes, please see the upstream listing [here](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/overview#overview-major-changes). Below are some highlights. @@ -61,7 +66,7 @@ Later versions of the following components are now available as new module strea * `redis` rebased to 6.2.7 * A new default for the `LimitRequestBody` directive in `httpd` configuration -For more on these changes, visit the [upstream page](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/new-features#enhancement_dynamic-programming-languages-web-and-database-servers) dealing with these additions and changes. +For more on these changes, visit the [upstream page](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/new-features#enhancement_dynamic-programming-languages-web-and-database-servers) dealing with these changes. ### Infrastructure Services @@ -108,12 +113,6 @@ For more on these changes, visit the [upstream page](https://access.redhat.com/d * open-vm-tools rebased to 12.0.5 * ESXi hypervisor and SEV-ES is now fully supported -## Upgrading From Rocky Linux 8.6 - -Simply run `sudo dnf -y upgrade` - -## Known Issues - ## Reporting Bugs Please report any bugs you encounter to the [Rocky Linux Bug Tracker](https://bugs.rockylinux.org/). We also welcome you to join our com From 410fa46356841e1bcde0c363164dc9b1d13aab21 Mon Sep 17 00:00:00 2001 From: Steven Spencer Date: Thu, 10 Nov 2022 20:43:13 -0600 Subject: [PATCH 4/9] 8_7 known issue * minimal ISO: missing things like rsyslog --- docs/release_notes/8_7.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/release_notes/8_7.md b/docs/release_notes/8_7.md index 78229884e1..1a18e37096 100644 --- a/docs/release_notes/8_7.md +++ b/docs/release_notes/8_7.md @@ -14,6 +14,8 @@ Simply run `sudo dnf -y upgrade` ## Known Issues +* minimal ISO: When doing an installation with the minimal ISO, be prepared to be missing packages, most notably from the AppStream repository (rsyslog, policycoreutils-python-utils, etc.). This is to be expected. + ## Major Changes For a complete list of major changes, please see the upstream listing [here](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/overview#overview-major-changes). From c693319cc89e83c42dc6810307c4adff09e3598f Mon Sep 17 00:00:00 2001 From: Steven Spencer Date: Sat, 12 Nov 2022 10:52:59 -0600 Subject: [PATCH 5/9] 8_7 release notes changes * Move the mimimal ISO note from "Known Issues" to a "note" at the top of the document. * Add section for "Cloud Images" --- docs/release_notes/8_7.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/docs/release_notes/8_7.md b/docs/release_notes/8_7.md index 1a18e37096..b60fad7415 100644 --- a/docs/release_notes/8_7.md +++ b/docs/release_notes/8_7.md @@ -8,13 +8,21 @@ tags: # Release Notes for Rocky Linux 8.7 +!!! note "Minimal ISO" + + The minimal ISO does not contain the Appstream repository. This means that packages that come from Appstream (rsyslog, policycoreutils-python-utils, etc.) will not exist after an install of the Minimal ISO. This is not a bug and is to be expected. + ## Upgrading From Any Rocky Linux 8 Version Simply run `sudo dnf -y upgrade` +## Cloud Images + +As well as the normal install images, there are several images available for cloud platforms. (Neil fill this in) + ## Known Issues -* minimal ISO: When doing an installation with the minimal ISO, be prepared to be missing packages, most notably from the AppStream repository (rsyslog, policycoreutils-python-utils, etc.). This is to be expected. +There are no known issues currently found in 8.7. We will add them here later if they show up after the release. ## Major Changes From e69ddfd907799d259a5356d570691090154efb94 Mon Sep 17 00:00:00 2001 From: Steven Spencer Date: Sat, 12 Nov 2022 11:03:30 -0600 Subject: [PATCH 6/9] Make "Other" = "Additional Changes" * fix one inconsistency --- docs/release_notes/8_7.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/release_notes/8_7.md b/docs/release_notes/8_7.md index b60fad7415..e9f590311a 100644 --- a/docs/release_notes/8_7.md +++ b/docs/release_notes/8_7.md @@ -103,7 +103,7 @@ For more on these changes, visit the [upstream page](https://access.redhat.com/d * New module stream `maven:3.8` -#### Other +#### Additional Changes * DNS stub resolver option now supports `no-aaaa` option * Rust Toolset rebased to version 1.62.1 From 7645b69ac2538375fe3c3c7c0ab25095054cc355 Mon Sep 17 00:00:00 2001 From: Steven Spencer Date: Sat, 12 Nov 2022 11:29:26 -0600 Subject: [PATCH 7/9] Fix link * fix external link --- docs/release_notes/8_7.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/release_notes/8_7.md b/docs/release_notes/8_7.md index e9f590311a..7a79d72338 100644 --- a/docs/release_notes/8_7.md +++ b/docs/release_notes/8_7.md @@ -38,7 +38,7 @@ Below are some highlights. #### DISA STIG -This release modifies the `scap-security-guide` so that it is better aligned with DISA. For more information on this and other security related changes, see the [upstream document](https://access.redhat.com/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/new-features#enahancement_security) +This release modifies the `scap-security-guide` so that it is better aligned with DISA. For more information on this and other security related changes, see the [upstream document](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/new-features#enhancement_security) * SCAP Security Guide (SSG) rebased to 0.1.63 along with several other changes relating to SSG and DISA STIG. From 67f7dd5e9d36729ff016e3460566b31d8136c28b Mon Sep 17 00:00:00 2001 From: Steven Spencer Date: Sat, 12 Nov 2022 11:39:39 -0600 Subject: [PATCH 8/9] Fix bad formatting in final section * probably a copy & paste issue... fixing --- docs/release_notes/8_7.md | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/docs/release_notes/8_7.md b/docs/release_notes/8_7.md index 7a79d72338..2aaa038b63 100644 --- a/docs/release_notes/8_7.md +++ b/docs/release_notes/8_7.md @@ -125,9 +125,6 @@ For more on these changes, visit the [upstream page](https://access.redhat.com/d ## Reporting Bugs -Please report any bugs you encounter to the [Rocky Linux Bug Tracker](https://bugs.rockylinux.org/). We also welcome you to join our com -munity in any way you wish be it on our [Forums](https://forums.rockylinux.org), [Mattermost](https://chat.rockylinux.org), [IRC on Libe -ra.Chat](irc://irc.liberachat/rockylinux), [Reddit](https://reddit.com/r/rockylinux), [Mailing Lists](https://lists.resf.org), or any ot -her way you wish to participate! +Please report any bugs you encounter to the [Rocky Linux Bug Tracker](https://bugs.rockylinux.org/). We also welcome you to join our community in any way you wish be it on our [Forums](https://forums.rockylinux.org), [Mattermost](https://chat.rockylinux.org), [IRC on Libera.Chat](irc://irc.liberachat/rockylinux), [Reddit](https://reddit.com/r/rockylinux), [Mailing Lists](https://lists.resf.org), or any other way you wish to participate! From 3e80c1248db33ea849904a9ca7b53f545d838ea3 Mon Sep 17 00:00:00 2001 From: Neil Hanlon Date: Sun, 13 Nov 2022 16:09:41 -0500 Subject: [PATCH 9/9] Add in cloud image information --- docs/release_notes/8_7.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/docs/release_notes/8_7.md b/docs/release_notes/8_7.md index 2aaa038b63..eed7d6f173 100644 --- a/docs/release_notes/8_7.md +++ b/docs/release_notes/8_7.md @@ -18,7 +18,13 @@ Simply run `sudo dnf -y upgrade` ## Cloud Images -As well as the normal install images, there are several images available for cloud platforms. (Neil fill this in) +As well as the normal install images, there are several images available for new and existing cloud platforms. + +In between Rocky Linux 8.6 and 8.7, images for Oracle Cloud Platform (OCP) were developed and released. The Oracle images join our existing set of images including GenericCloud, Amazon AWS (EC2), Container RootFS/OCI, Vagrant (Libvirt, VirtualBox, and VMWare), Google Cloud Platform, Microsoft Azure, and other CSP-maintained images. + +Additionally, The GenericCloud, EC2, and Azure images now have a variant which uses an LVM partition for the root filesystem, allowing systems administrators additional flexibility and options for configuring their systems. + +More information on the artifacts produced by the Cloud Special Interest Group, as well as information on how to get involved can be found on the [SIG/Cloud Wiki](https://sig-cloud.rocky.page/) page. ## Known Issues