Recommended update for transactional-update

Announcement ID: SUSE-RU-2022:0487-1
Rating: moderate
References:
Affected Products:
  • openSUSE Leap 15.3
  • SUSE Linux Enterprise Server 15 SP3
  • SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3
  • Transactional Server Module 15-SP3

An update that has 27 fixes can now be installed.

Description:

This update for transactional-update fixes the following issues:

  • Version 3.6.2
  • Bind mount root file system snapshot on itself, this makes the temporary directory in '/tmp' unnecessary; also fixes to return the correct snapshot's working directory via API call. (bsc#1188110)

  • Use separate mount namespace for transactional-update; this should fix several applications that fail to run if a mount point has the 'unbindable' mount flag set

  • Version 3.6.1

  • Fix rsyncing '/etc' into the running system with '--drop-if-no-change'. (bsc#1192242)

  • Version 3.6.0

  • Simplify mount hierarchy by just using a single slave bind mount as the root of the update environment; this may avoid the error messages of failed unmounts. (bsc#1191945)

  • Version 3.5.7 Various fixes affecting Salt support:

  • t-u: Don't squash stderr messages into stdout
  • t-u: Correctly handle case when the snapshot has been deleted due to using --drop-if-no-change: Don't show reboot messages and avoid an awk error message. (bsc#1191475)

  • tukit: Make inotify handler less sensitive / ignore more directories (bsc#1191475)

  • Version 3.5.6

  • tukit: Add S/390 bootloader support (bsc#1189807)

  • t-u: support purge-kernels with t-u patch (bsc#1190788)

  • Version 3.5.5

  • t-u: Use tukit for SUSEConnect call (bsc#1190574) Correctly registers repositories

  • Version 3.5.4

  • tukit: Fix resolved support (bsc#1190383)

  • Version 3.5.3

  • t-u: Purge kernels as part of package operations Required for live patching support (bsc#1189728)

  • Version 3.5.2

  • tukit: Fix overlay syncing errors with SELinux (bsc#1188648)

  • Don't print message for shell with --quiet

  • Version 3.5.1

  • t-u: Disable status file generation by default The new experimental status command requires the availability of /etc/YaST2/control.xml, which is not present on all systems. Hide the creation of the corresponding status file behind a new EXPERIMENTAL_STATUS option to try out this functionality.

  • Increase library version

  • Version 3.5.0

  • Add alias setDiscardIfUnchanged for setDiscard. The old method name wasn't really clear and will be removed if we should have an API break in the future
  • Replace 'mkinitrd' with direct dracut call. (bsc#1186213)
  • tukit: Add configuration file support (/etc/tukit.conf)
  • Allow users to configure additional bind mounts (see /usr/etc/tukit.conf for an example and limitations). (bsc#1188322)
  • Add 'transactional-update status' call. This is a POC for obtaining a hash of a system to verify its integrity.

  • Internal bugfixes / optimizations

  • Version 3.4.0

  • Apply 'SElinux' context on '/etc' in transaction. (bsc#1185625, bsc#1185766, bsc#1186842, bsc#1186775)
  • Implement inotify handling in C instead of Bash; this makes the --drop-if-no-change option work on SLE Micro. (bsc#1184529)
  • Use tukit call for up, dup and patch to allow resuming an update after zypper updated itself in the snapshot. (bsc#1185226)
  • Fix obsolete output type messages in 'initrd'. (bsc#1177149)

  • Make different base snapshot warning more visible. (bsc#1185224)

  • Version 3.3.0

  • Add support for more package managers by bind mounting their directories
  • Support snapshots without dedicated overlay [bsc#1183539], (bsc#1183539)
  • Link RPM database correctly with older zypper versions (bsc#1183521)
  • Don't discard manual changes in fstab (bsc#1183856, bsc#1192302)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.3
    zypper in -t patch SUSE-2022-487=1
  • Transactional Server Module 15-SP3
    zypper in -t patch SUSE-SLE-Module-Transactional-Server-15-SP3-2022-487=1

Package List:

  • openSUSE Leap 15.3 (noarch)
    • transactional-update-zypp-config-3.6.2-150300.3.3.1
    • dracut-transactional-update-3.6.2-150300.3.3.1
  • openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586)
    • tukit-debuginfo-3.6.2-150300.3.3.1
    • libtukit-devel-3.6.2-150300.3.3.1
    • transactional-update-3.6.2-150300.3.3.1
    • tukit-3.6.2-150300.3.3.1
    • transactional-update-debugsource-3.6.2-150300.3.3.1
    • libtukit0-debuginfo-3.6.2-150300.3.3.1
    • libtukit0-3.6.2-150300.3.3.1
    • transactional-update-debuginfo-3.6.2-150300.3.3.1
  • Transactional Server Module 15-SP3 (noarch)
    • transactional-update-zypp-config-3.6.2-150300.3.3.1
    • dracut-transactional-update-3.6.2-150300.3.3.1
  • Transactional Server Module 15-SP3 (aarch64 ppc64le s390x x86_64)
    • tukit-debuginfo-3.6.2-150300.3.3.1
    • transactional-update-3.6.2-150300.3.3.1
    • tukit-3.6.2-150300.3.3.1
    • transactional-update-debugsource-3.6.2-150300.3.3.1
    • libtukit0-debuginfo-3.6.2-150300.3.3.1
    • libtukit0-3.6.2-150300.3.3.1
    • transactional-update-debuginfo-3.6.2-150300.3.3.1

References: