orcharhino 6.5.0

Next-Generation orcharhino Delivery Platform

• With orcharhino 6.5, users will be automatically registered at the next-generation orcharhino delivery platform OCC (orcharhino Customer Center).
• This will further improve the reliability and speed of orcharhino installations.
• For more information, see Registering orcharhino Server to OCC in the ATIX Service Portal.

orcharhino Clients

• New orcharhino Client for Debian 12 „Bookworm“
• New orcharhino Client for SLES15 SP5
• New orcharhino Client for Oracle Linux 8.8
• We are introducing the concept of orcharhino Client „generations“ to ensure graceful upgrades from now on:
  • Breaking orcharhino Client changes will only be introduced as part of a new orcharhino Client generation.
  • As a new orcharhino Client generation may include breaking changes, existing orcharhino Servers will have to change the Upstream URL or add a new orcharhino Client repository to use it.
  • After a new orcharhino Client generation has been released, the old generation remains available, but will no longer receive updates other than bug fixes and security patches.
  • New installations of orcharhino 6.5 will automatically receive orcharhino Clients „gen2“.
  • Significant changes between orcharhino Clients „gen1“ and „gen2“ include:
  • orcharhino Clients for Enterprise Linux 8 and higher (excluding Oracle Linux) no longer provide subscription-manager; instead, the OS platform version of subscription-manager will be used.
  • orcharhino Clients for Oracle Linux 8 and higher now provide a separate orcharhino Client for every minor release of Oracle Linux 8 from 8.0 to 8.8. By default, the latest available Y version will be used.
  • orcharhino Clients for Debian and Ubuntu now support „structured APT“ mode. For more information, see the „Structured APT tech preview“ below.
  • For more information, see Using orcharhino Clients gen2 in the ATIX Service Portal.

Documentation

• We now provide the documentation on docs.orcharhino.com for multiple orcharhino versions in parallel. You can select your orcharhino version in the top right-hand corner.

Structured APT tech preview

• In the course of the coming releases, orcharhino will transition to a new way of presenting APT content to registered hosts that mirrors the structure of the upstream APT repository that was synced to orcharhino more closely.
• This will improve compatibility with client-side features, such as APT pinning or the „apt list –upgradable“ command.
• It will also allow for a significant sync performance boost once the transition is fully completed.
• orcharhino 6.5 includes these new features as tech preview.
• For more information, see Enabling the technical preview for structured APT content on orcharhino 6.5 in the ATIX Service Portal.

• Added new script to list repository changes between orcharhino versions for use during offline upgrades.
• Added errata provisioning for the Ubuntu Bionic ESM (Expanded Security Maintenance) program.
• orcharhino installations automatically configure the orcharhino Client for the latest minor release of Oracle Linux 8.Y. If you require a specific 8.Y version, you have to setup the repository manually. For more information, see https://atixservice.zendesk.com/hc/de/articles/9833499769116
• Added a list of partitions and their disk usage to the hosts page for hosts using vSphere.
• New update_packages job template will allow you to update all packages of a host by running the job without setting a package name. In addition, you can use the new „refresh_subscription“ option to force a refresh of the subscription state before any packages are installed.
• Improved the formatting of the answers.yaml file written by the orcharhino installer GUI.
• Added UEFI provisioning support for AlmaLinux.
• Added support for upgrading orcharhino Servers in a disconnected environment to orcharhino-maintain.
• Added iPXE provisioning template for Ubuntu autoinstall (20.04.3+).

• Documented the migration from ACC to OCC delivery server during the upgrade to orcharhino 6.5.
• Documented the „Snapshot Mode“ menu in the Snapshot Management plug-in. You can create snapshots of VMs on VMware and Proxmox with or without their system memory. For more information, see https://docs.orcharhino.com/or/docs/sources/guides/rocky_linux/managing_hosts/administering_hosts.html# Creating_Snapshots_of_a_Managed_Host_managing-hosts.
• Documented the configuration of content credentials for Debian 12 (bookworm).
• Added a hint on verifying the DNF module configuration on orcharhino Proxies before upgrading.

Deprecations

• With the release of orcharhino 6.5, we will no longer provide support for orcharhino 5.12.
• Replaced the update_all_packages job template with the update_packages job template.
• Removed the orcharhino_proxy_structured_sync setting in /etc/foreman/plugins/katello.yaml that was introduced with orcharhino 6.4 because it is no longer needed.

Changelog Bugfixes

• Fixed a bug causing the orcharhino-installer to fail when the salt plugin is enabled.
• Updated Django to fix CVE-2023-23969, CVE-2023-24580, and CVE-2023-31047.
• Updated the Ansible role used by the „orcharhino Proxy Content“ job for compatibility with Ansible >= 2.14.
• Added a parameter to orcharhino-installer to ignore changes to errata in synced Yum repositories. For more information, see https://atixservice.zendesk.com/hc/de/articles/9638418742940.
• Fixed a bug where katello-upload-profile is not installed when using Register Host for a Debian or Ubuntu host.
• Fixed a bug that was causing Proxmox notifications to display „unknown string“ instead of the VM name.
• Fixed a Proxmox Compute Resource bug that was changing the MAC address every time the VM was edited.
• Fixed a bug preventing use of the VNC/remote console for Proxmox QEMU hosts. Documented how to use the VNC/remote console.
• Fixed a Proxmox Compute Resource bug that prevented the use of image based provisioning.
• Fixed the orcharhino proxy sync for proxies that use one network interface to communicate with the orcharhino server and another for attached hosts.
• Fixed a bug where the lifecycle and content view association was missing from the UI when cloning a host.
• Fixed a bug where VNC for libvirt only allows a maximum password length of 8 characters.
• Fixed the Ansible API URL configuration needed to install Ansible content.