[Puppet Users] Re: dropping support for ruby 1.85?

Ohad Levy
Wed, 16 Nov 2011 07:58:34 -0000

On Wed, Nov 16, 2011 at 6:30 AM, Jo Rhett <jrhett@netconsonance.com>
wrote:
> On Nov 9, 2011, at 5:47 AM, Ohad Levy wrote:
>
> Ruby 1.87 support
> Foreman 0.4 would be the last major version supporting Ruby older then
1.87.
> This has to be done since the upstream rails community no longer
> supports older versions, which means that critical security patches
> are no longer available if we keep supporting that.
>
> if required, we would release 0.4.x maintenance releases, but since
> ruby 1.87+ is available on most distribution these days, you are
> encouraged to upgrade.
>
> No distribution based on RHEL5 has a supported version of ruby other than
> 1.85 AFAIK.  It''s pretty much a roll-your-own-RPM for 1.87, and
that''s not
> possible for most sites.

The way I see it:

Don''t upgrade to ruby 1.87 ==> known security holes that could
exploit
your foreman server (impacting everyone).
Upgrade to ruby 1.87 ==> Pain of migrating foreman to a newer
distribution (impacting only a subset of the users)**

We are also planning to have a maintenance release in the 0.4.x
versions, so critical bugs (and probably less than critical) would be
fixed there as well.

Ohad

** which imho is a non issue, as :
1. there is a fully automated puppet module to install foreman
2. you only need to pass the db and a couple of config files.