Recommended update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor

Announcement ID: SUSE-RU-2025:4131-1
Release Date: 2025-11-18T15:56:53Z
Rating: important
References:
Affected Products:
  • Basesystem Module 15-SP7
  • SAP Applications Module 15-SP7
  • SUSE Linux Enterprise Desktop 15 SP7
  • SUSE Linux Enterprise Real Time 15 SP7
  • SUSE Linux Enterprise Server 15 SP7
  • SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that has 18 fixes can now be installed.

Description:

This update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor fixes the following issues:

Changes for suse-migration-sle16-activation:

  • Simplify interface naming by disabling predictable names at boot
  • shellcheck heavily complained
  • check migration target before testing for architecture version
  • Create systemd.link files for virtual VMware/Hyper-V NICs
  • Add changes for newest wicked2nm
  • Activation packages can no longer be noarch
  • Architecture check before allowing migration to be activated
  • Add missing pre snapshot setup to run_migration
  • Add wicked2nm network migration
  • Setup ExclusiveArch for activation packages
  • Make activation package require by provides tag
  • Fix product related requirement settings

Changes for SLES16-Migration:

  • Added .ssh directory for migration user
  • Add etc/motd overlay file Print message how to show migration progress information
  • Fix build on more architectures
  • Initial changelog

Changes for SLES16-SAP_Migration:

  • Support wicked2nm migration
  • Migration live image for SLES4SAP 15 to 16

Changes for suse-migration-services:

  • Set systemd offline for Zypper in chroot mode
  • Fix apparmor install procedure
  • Fixed azuremetadata device lookup
  • Use of f-strings not allowed in the DMS
  • Simplify interface naming by disabling predictable names at boot
  • Fixed test_check_lsm_migration unit test
  • Fix setup_host_network_test by mocking os.makedirs
  • wicked2nm: log network state on nm-online failure
  • Fixed LSM pre checks to be more robust
  • shellcheck heavily complained
  • Do not evaluate wicked2nm output in precheck
  • Fix unit test for lsm check
  • prechecks/lsm.py: remove _apparmor_analyze_profiles()
  • LSM migration check for AppArmor -> SELinux
  • Improve pre-check message
  • Fix MinSLEVersion value depending on target
  • reduce package set on migration image
  • Fixed behavior of wicked2m pre check
  • implementation of sshd root login pre-check
  • Fixed selinux to apparmor migration
  • Fixed reading of migration config for target class
  • Add recursion guard to MigrationConfig::_merge_config_dicts
  • shrink migration image
  • container/sle16/config.sh
  • sle16/config.sh - use dropin for s390 migration-config
  • doc: fix indentation
  • check for migration target by matching ISO file name
  • config: introduce dropin dir migration-config.d/
  • Apply SLE16 live image setup to container setup
  • bind mount only required subdirectories under /run into chroot
  • Add missing package requirement
  • check migration target before testing for architecture version
  • setup_host_network: simplify code - use os.makedirs()
  • Create systemd.link files for virtual VMware/Hyper-V NIC
  • Preserve systemd.link files from /etc/systemd/network/
  • Add changes for the newest wicked2nm
  • Ensure wicked2nm is a dependency of pre-checks for SLE 16 migration
  • Activation packages can no longer be noarch
  • Fix update of image .changes files
  • Architecture check before allowing migration to be activated
  • Improve error logs when wicked2nm fails
  • Include image changelog to version bump
  • Ensure wicked2nm migration is always running, despite warnings
  • Fix: add --no-recommends on patterns-base-selinux installation
  • Update suse-migration-services for container use
  • Update SLE16 migration container
  • Update SAP live migration image
  • Add missing pre snapshot setup to run_migration
  • Follow up fix for the wicked to nm migration
  • Add wicked2nm network migration
  • Add glob support to preserve_files
  • Setup ExclusiveArch for activation packages
  • Build sles4sap migration for cloud on x86_64 only
  • Do not build sles4sap migration on s390x
  • Use systemctl kexec
  • Fix: return the correct kernel path based on machine type
  • Fixed glob pattern match for package name
  • Remove menitoning of SLES 12-SP4
  • Make activation package require by provides tag
  • Added SLES16-SAP_Migration live image
  • Do not use list[str] type hint
  • Fix error evaluation from offline_migrations API
  • Fix logging from non unit files
  • Fix product related requirement settings
  • Repos for migration image must be in kiwi
  • Added .ssh to migration user for SAP 15 live image
  • Added SLES15-SAP_Migration Makefile target
  • Add proper release package for SLE16 migration
  • Fix typo in service name
  • Drop obsolete check for resolv.conf
  • Fix migration user home dir setup for SLE16
  • Update README_QA.rst
  • test: split unit test for setup_name_resolver
  • Install patterns-base-selinux for Apparmor migration
  • Ensure the rebuild counter is not stripped from the rpm
  • Exit silently if no migration iso is found
  • Ensure rpmlintrc file is part of suse-migration-services SRPM
  • Ignore fixup! entries when generating changelog
  • Increase python test matrix
  • Remove redundanct requires on itself
  • Fix ordering of pre-checks and actual migration
  • Add SLES15-Migration target to Makefile
  • Fix suse-migration-console-log service
  • Fix typo in REA- Activate only connections if present in the current system
  • Improve error output, exit codes and add flag to disable user hints
  • Add support for autoip-fallback
  • Issue only a info when dhcp.update is non default
  • Add ipv4_static broadcast
  • Apply dhcp settings to mirror wicked client id
  • Fix test.sh, fail if migration succeed but expect fail
  • Fix sysctl handling
  • Avoid cloning in parsing of route
  • Fix continue migration to show all warnings beforehand
  • Improve warning messages - show interface, element names
  • Remove unwrap in route parsing
  • bump slab from 0.4.10 to 0.4.11 to address CVE-2025-55159 (bsc#1248010)
  • Fix netconfig handling with proper priority setting
  • Add ovs support
  • Use agama-network instead of agama-(lib|server)
  • Only activate connections marked with autostart
  • Give hint in error message how to ignore warnings
  • Update README.md with updated installation and usage infos
  • Add support for Leap 15
  • Remove BuildRequires that are no longer necessary due to the agama-network switch.
  • The agama-network switch also removes the vulnerable and unmaintained 'users' crate from the dependencies. (bsc#1244188)DME_QA
  • Fix: split name resolver setup into its own service
  • Fix: set path according to current arch in grub.d/99_migration
  • Add support to enable single rpm transaction for upgrade
  • enable suse-migration-ha.service in the migration image
  • Migration for high availability extension
  • RPM wrapper fixes
  • Cleanup secfile to follow python singlespec policy
  • Support product specifier in ISO name
  • Ensure sle16 images can build on all supported platforms
  • Use name pattern compatible to suse-migration-rpm
  • Fix SLE15 migration images
  • SAP product should migrate to 15 SP4
  • Add SLES15-SAP-Migration
  • Bump target to SLE15 SP7
  • Update bumpversion config Include sle16 container build to version bump
  • Handle selinux boot option when using kexec
  • Ensure migration to SLES16 uses selinux, not apparmor
  • improve os-release parsing
  • Ensure SLES16 is also detected in SCC precheck
  • Add high availablity extension check
  • Fix package names for python packages on SLE16
  • Relax on the shim-install call
  • Fixup package name for SLE16 and SLE16 container
  • Fix changelog references for activation packages
  • Add product migration check

Changes for suse-migration-rpm:

  • Fix MinSLEVersion value depending on target
  • Add product requirement according to image name.
  • Exit silently if no migration iso is found.
  • Add build and perl(Date::Parse) to ensure we can append changelog entries to generated package.

Changes for wicked2nm:

  • Activate only connections if present in the current system
  • Improve error output, exit codes and add flag to disable user hints
  • Add support for autoip-fallback
  • Issue only a info when dhcp.update is non default
  • Add ipv4_static broadcast
  • Apply dhcp settings to mirror wicked client id
  • Fix test.sh, fail if migration succeed but expect fail
  • Fix sysctl handling
  • Avoid cloning in parsing of route
  • Fix continue migration to show all warnings beforehand
  • Improve warning messages - show interface, element names
  • Remove unwrap in route parsing
  • bump slab from 0.4.10 to 0.4.11 to address CVE-2025-55159 (bsc#1248010)
  • Fix netconfig handling with proper priority setting
  • Add ovs support
  • Use agama-network instead of agama-(lib|server)
  • Only activate connections marked with autostart
  • Give hint in error message how to ignore warnings
  • Update README.md with updated installation and usage infos
  • Add support for Leap 15
  • Remove BuildRequires that are no longer necessary due to the agama-network switch.
  • The agama-network switch also removes the vulnerable and unmaintained 'users' crate from the dependencies. (bsc#1244188)

Chages for image-janitor: - Fix packaging (add doc, license) - Release 0.2.0 with configuration files packaged - Initial packag

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SAP Applications Module 15-SP7
    zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP7-2025-4131=1
  • Basesystem Module 15-SP7
    zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-4131=1

Package List:

  • SAP Applications Module 15-SP7 (ppc64le x86_64)
    • SLES16-SAP_Migration-2.1.26-15.14.4
  • Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64)
    • wicked2nm-debuginfo-1.4.0-150700.15.7.2
    • wicked2nm-1.4.0-150700.15.7.2
    • wicked2nm-debugsource-1.4.0-150700.15.7.2
    • SLES16-Migration-2.1.26-15.22.4
  • Basesystem Module 15-SP7 (noarch)
    • python3-Cerberus-1.3.2-150700.20.2.10
    • python3-migration-2.1.26-150700.16.12.1
    • suse-migration-pre-checks-2.1.26-150700.16.12.1
  • Basesystem Module 15-SP7 (aarch64 ppc64le x86_64)
    • suse-migration-sle16-activation-2.1.26-150700.15.9.1

References: