Recommended update for suse-migration-rpm, suse-migration-services

Announcement ID: SUSE-RU-2025:4415-1
Release Date: 2025-12-16T14:43:32Z
Rating: critical
References:
Affected Products:
  • openSUSE Leap 15.6

An update that contains one feature and has six fixes can now be installed.

Description:

This update for suse-migration-rpm, suse-migration-services fixes the following issues:

Changes for suse-migration-services: - Fix mount_system unit - Run ssh precheck only for SLE16 target - Only generate wicked xml if service is the active network - Fix unit link check and no use of path.join - Fixed migration live image package requires - Update setup_host_network service - Fix backup processing - Fix log handler setup - Drop and backup /etc/sysconfig/network - Skip migration if wicked is not the default network config service - Add package_installed method - Backup drop_path data - Check if package exists prior drop - Fixed use of suse version macros - Drop README_QA.rst - Update conditional requires per review - Consolidate project documentation - Fixed spec file regarding wicked2nm - Fix update_version helper - Fix mount_system - Fix order of reboot service - Improve dracut logging - Drop wicked component after nm migration - Move script package to the main migration provider - Add DropComponents class - Fixed spec file - Create systemd.link files for biosdevname (bsc#1253963) - Create lib file for common network-prereq tasks - update PAM configurations to use pam_unix.so (jsc#PED-13640) - Omit cio_ignore kernel commandline on zkvm (bsc#1250003) - Refactor mount_system service - Fix order of reboot service - Add support for wicked2nm in container workflow - Fix unit test for solver test case - Fixes for btrfs_snapshot_pre_migration - Set systemd offline for Zypper in chroot mode - Fix apparmor install procedure - Fixed azuremetadata device lookup - Use of f-strings not allowed in the DMS (bsc#1248137) - Simplify interface naming by disabling predictable names at boot - Fixed test_check_lsm_migration unit test - Fix setup_host_network_test by mocking os.makedirs - wicked2nm: log network state on nm-online failure - Fixed LSM pre checks to be more robust - shellcheck heavily complained - Do not evaluate wicked2nm output in precheck - Fix unit test for lsm check - prechecks/lsm.py: remove _apparmor_analyze_profiles() - LSM migration check for AppArmor -> SELinux - Improve pre-check message - Fix MinSLEVersion value depending on target - Reduce package set on migration image - Fixed behavior of wicked2m pre check - Implementation of sshd root login pre-check - Fixed selinux to apparmor migration - Fixed reading of migration config for target class - Add recursion guard to MigrationConfig::_merge_config_dicts - Shrink migration image - container/sle16/config.sh - sle16/config.sh - use dropin for s390 migration-config - doc: fix indentation - Check for migration target by matching ISO file name - config: introduce dropin dir migration-config.d/ - Apply SLE16 live image setup to container setup - Bind mount only required subdirectories under /run into chroot - Fix: Migration is done, but we get messages about core dumps (bsc#1250078) - Add missing package requirement - check migration target before testing for architecture version - setup_host_network: simplify code - use os.makedirs() - Create systemd.link files for virtual VMware/Hyper-V NICs (bsc#1250076) - Preserve systemd.link files from /etc/systemd/network/ - Add changes for newest wicked2nm - Ensure wicked2nm is a dependency of pre-checks for SLE 16 migration - Apply sysctl to migration system - Implement x86_64 CPU architecture check as a pre-check - Activation packages can no longer be noarch - Fix update of image .changes files - Architecture check before allowing migration to be activated - Improve error logs when wicked2nm fails - Include image changelog to version bump - Ensure wicked2nm migration is always running, despite warnings - Fix: add "--no-recommends on patterns-base-selinux installation" - Update suse-migration-services for container use - Update README - Update SLE16 migration container - Update SAP live migration image - Add missing pre snapshot setup to run_migration - Follow up fix for the wicked to nm migration - Add wicked2nm network migration - Add glob support to preserve_files - Setup ExclusiveArch for activation packages - Build sles4sap migration for cloud on x86_64 only - Do not build sles4sap migration on s390x - Use systemctl kexec - Fix: return the correct kernel path based on machine type - Fixed glob pattern match for package name - Remove mentioning of SLES 12-SP4 - Make activation package require by provides tag - Do not use list[str] type hint - Fix error evaluation from offline_migrations API - Fix logging from non unit files - Fix product related requirement settings - Repos for migration image must be in kiwi - Added .ssh to migration user for SAP 15 live image - Added SLES15-SAP_Migration Makefile target - Fix typo in service name - Drop obsolete check for resolv.conf - Fix migration user home dir setup for SLE16 - Update README_QA.rst - test: split unit test for setup_name_resolver - Install patterns-base-selinux for Apparmor migration - Ensure the rebuild counter is not stripped from the rpm - Exit silently if no migration iso is found - Ensure rpmlintrc file is part of suse-migration-services SRPM - Ignore fixup! entries when generating changelog - Increase python test matrix - Remove redundant requires on itself - Fix ordering of pre-checks and actual migration - Add SLES15-Migration target to Makefile - Fix suse-migration-console-log service - Fix typo in README_QA - Fix: split name resolver setup into its own service - Fix: Migration from 15SP7 to SLE 16: suse-migration-setup-host-network.service fails reporting "Could not find /system-root/etc/resolv.conf" (bsc#1246513) - Fix: set path according to current arch in grub.d/99_migration - Add support to enable single rpm transaction for upgrade - Enable suse-migration-ha.service in the migration image - Migration for high availability extension - RPM wrapper fixes - Cleanup specfile to follow python singlespec policy - Support product specifier in ISO name - Ensure sle16 images can build on all supported platforms - Use name pattern compatible to suse-migration-rpm - Fix SLE15 migration images - SAP product should migrate to 15 SP4 - Add SLES15-SAP-Migration - Update bumpversion config - Handle selinux boot option when using kexec - Ensure migration to SLES16 uses selinux, not apparmor - Improve os-release parsing - Ensure SLES16 is also detected in SCC precheck - Add high availability extension check - Fix package names for python packages on SLE16 - Relax on the shim-install call - Fixup package name for SLE16 and SLE16 container - Fix changelog references for activation packages - Fix and cleanup update_bootloader service - Add product migration check

Changes for suse-migration-rpm: - Fix MinSLEVersion value depending on target - Add product requirement according to image name. - Exit silently if no migration iso is found. - Add build and perl(Date::Parse) to ensure we can append changelog entries to generated package.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.6
    zypper in -t patch openSUSE-SLE-15.6-2025-4415=1

Package List:

  • openSUSE Leap 15.6 (noarch)
    • python3-migration-2.1.29-150000.1.83.1
    • suse-migration-services-2.1.29-150000.1.83.1
    • suse-migration-pre-checks-2.1.29-150000.1.83.1
  • openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
    • suse-migration-rpm-1.0.1-150000.1.20.1

References: