Jacob Helwig
2011-Oct-07 20:47 UTC
Open Source Team iteration & planning summary 2011-10-07
Good news, everyone! The Windows work is (nearly) done. There are a
couple of topic branches that are left to review and merge but other
than these we''re back to our regularly scheduled program/backlog.
Currently, the plan is to divide our effort roughly equally between
catching back up on reviewing the changes that have been submitted so
far (both from the list in Patchwork[1], and the pull requests opened in
the various repositories on GitHub) and the backlog listed at the end of
this email.
Changes since last time:
Ricky Zhou provided the security fix for CVE-2011-3870 (#9790).
Puppet will now drop privileges before creating and chmoding SSH
keys. This has been released in several versions of Puppet, with
further details available in the ticket.
Erik Hermansen discovered CVE-2011-3848 which consists of a
directory traversal attack. This has been fixed in released
versions, with further details available in the release
announcement[2].
A Ruby 1.9 compatibility fix was provided by Whyme Lyu (commit
8b6a775b). This addresses a behavior change in Array#join between
Ruby 1.8 and 1.9. This has been merged into the 2.7.x branch and is
available in 2.7.6rc1.
Puppet no longer raises an exception trying to retrieve the exit
status of a failed command on Windows (#8410). Previously Puppet
was trying to call #exitstatus on the raw Fixnum when on Windows.
This has been merged into the 2.7.x branch, and is available in
2.7.6rc1.
Puppet agent reports that it cannot daemonize on Windows (and
defaults to not daemonizing) rather than erroring (#9329). This has
been merged into the 2.7.x branch and is available in 2.7.6rc1.
Puppet file log destinations now properly recognize absolute Windows
paths (#9435). This has been merged into the 2.7.x branch and is
available in 2.7.6rc1.
Puppet no longer attempts to log to syslog on Windows (#9435). Log
destinations are now able to tell Puppet whether they are suitable
or not when attempting to register them. This has been merged into
the 2.7.x branch and is available in 2.7.6rc1.
Puppet now supports managing password in the Windows user provider
(#9326). Currently this requires that passwords be specified in
plain-text in the manifest. This has been merged into the 2.7.x
branch and is available in 2.7.6rc1.
There is a new internal (library) method for handling retrieval of
local user and group SIDs given a user or group name (#9328). This
has been merged into the 2.7.x branch and is available in 2.7.6rc1.
Puppet again handles running "puppet" without any arguments or
running "puppet ${unknown_subcommand}" properly (#9458). Previously
Puppet would raise an undefined method error due to
Puppet::Util.which attempting to use
Puppet.features.microsoft_windows?. This has been merged into 2.7.x
and is available in 2.7.6rc1.
There have been several improvements around the file type &
providers, as well as their behavior on Windows. These changes
include clean-up and increased coverage of the unit & integration
tests, improved handling of paths, improved handling of file and
directory modes, among others. The full changes can be viewed in
the commit range ec587b44^1..ec587b44^2. This has been merged into
2.7.x and is available in 2.7.6rc1.
The groupadd provider no longer needlessly warns about not being
able to manage the ia_load_module attribute (#9027). This is a
mirror of the fix for #7137 (same problem with the useradd
provider). This has been merged into the 2.7.x branch and is
available in 2.7.6rc1.
Puppet now supports managing Scheduled Tasks on Windows through the
new scheduled_task type (#8414). This has been merged into the
2.7.x branch and is scheduled to be available after the 2.7.6 RC
series.
[1] https://patchwork.puppetlabs.com
[2]
http://groups.google.com/group/puppet-users/browse_thread/thread/e57ce2740feb9406/66bfcbfb43533736
Completed items:
* #8410 - Exec provider for Windows
* #9329 - Puppet agent daemonize option doesn''t work on Windows
* #9435 - Log destinations are broken on Windows
* #9326 - Password management on windows
* #9328 - Retrieve user and group SIDs on windows
* #9458 - Puppet fails to run when no subcommand specified
* #9027 - groupadd provider throws spurious warnings about AIX feature on
non-AIX platforms.
* #8414 - Task scheduler type/provider for Windows
* #9459 - (Review) Puppet fails to create user when groups are specified
* #8411 - File type working on Windows
* #9460 - Puppet agent fails if the PuppetLabs/puppet directory
doesn''t exist on Windows
* #9461 - Puppet resource package fails on Windows
Current backlog:
* #7316 - puppet applications delivered via pluginsync don''t work.
* #5517 - Overriding parameters on included & inherited classes
* #3741 - Custom facts loaded multiple times
* #4916 - Plugins should not be able to override core functionality.
* #7788 - Puppet should allow rubygems to deliver new functionality
* #3910 - Server is not authoritative over client environment when specified in
an ENC
* #3534 - Dashboard should support ability to set variables as arrays in the
ENC
* #2247 - enablerepo and disablerepo for yum type
--
Jacob Helwig