orcharhino 7.5 Release Notes

Release Highlights

Show provisioning templates support status

orcharhino 7.5 now marks templates which are tested by the orcharhino team, making it easier to build a fully supported solution.

CV Filter Debian/Ubuntu Errata

orcharhino 7.5 delivers on the promise to provide best support for Debian and Ubuntu as well. Now also Erratas are filtered by Content View filters. This way you can avoid to deliver packages and updates for packages not wanted to be available on the Hosts, giving you more control and by this increased security options.

Proxy Content repair via GUI

orcharhino 7.5 makes it easier to repair out-of-sync repositories used by distributed Proxy servers. A simple GUI option gives easy access to this function, without the need to use the command line. More information: My Managed Host Runs

Deprecations

• Application Centric Deployment: ACD is deprecated and support will be removed from orcharhino in a future version.
• Compute Resource: Proxmox 7 is deprecated and support will be removed from orcharhino in a future version.

Changelog Features

• Administering orcharhino: Clarified requirements to perform snapshot-based and LVM-based backups of orcharhino Server: Learn more
• Ansible: Use host parameters in Ansible-based remote execution jobs: Learn more
• Configuration Management (Salt): Install the Salt plugin for Hammer CLI using orcharhino-installer: Learn more
• Content Management: Deleting a repository from a rolling content view no longer requires long running asynchronous UpdateContentCounts tasks to update the orcharhino Proxy Servers.
• Content Management: Added API validation that rejects the environment_ids parameter when creating or updating content views that are not rolling content views.
• Documentation: Added a note to the puppet upgrade chapter, that rubygems, like r10k need to be reinstalled after puppet upgrade from version 7 to version 8.
• Documentation: clarify wording that unlocked templates are not supported.
  Host Deployment (Windows): Added HTTP proxy support to the Ansible automation to setup Windows UEFI deployment.
• Host Provisioning (Debian/Ubuntu): The provisioning templates for Debian/Ubuntu used to modify the SSHD config to allow remote login to the root account with password. We now removed this change such that the SSHD config will follow the operating system default, which is usually to allow key-based login, but forbid password-based login for the root user. In case you rely on being able to log into a newly provisioned Debian/Ubuntu host with the root user and password, you need to take care of this yourself, e.g. by creating a custom post template for the “Preseed orcharhino finish” provisioning template, as described here: Learn more
• Host Provisioning (Windows): Enhanced installation process for Windows operating systems to automatically assign provisioning templates and create the operating system entry after the initial orcharhino setup.
• Host Provisioning: Clarified the use case of custom provisioning snippets: You can use them to run custom code during host registration or host provisioning without editing the default templates provided by orcharhino: Learn more
• Host Provisioning: During orcharhino installation, assign additional templates and snippets to the organization to enable provisioning and management of specific operating systems.
• Host Provisioning: orcharhino management UI highlights officially supported provisioning templates: Learn more
• Managing Content: Reworked the “Managing Errata” chapter to simplify and clarify procedures to apply errata to hosts: Learn more
• Managing Security Compliance: Extended documentation on how to get SCAP contents for different Client operating systems: You can download data stream files from either the ComplianceAsCode upstream project or extract natively packaged SCAP security guidelines: Learn more
• New All Host Page (Tech Preview): You can now manage Debian content via the bulk action ‘Manage Content’ –> ‘Packages’ menu.
• orcharhino Maintenance: The new foreman-rake ‘orcharhino_core:reset_template’ script resets individual templates to their original state.
• SCC Manager: ‘location_id’ and ‘organization_id’ are not showing up in the apidoc anymore.
• SCC Manager: The ‘–name’ option for the Hammer CLI extension of SCC accounts was throwing an error.
• SCC Manager: Install the SCC Manager plugin for Hammer CLI using orcharhino-installer: Learn more

Changelog Bugfixes

• [TP] Content Management Errata / New Hosts Overview page: Only show installable errata in the Bulk Errata Wizard.
• A service necessary to run remote execution if used with the pull provider was not enabled automatically after host provisioning.
• Backup up orcharhino: Clarified in the orcharhino documentation that you can use “orcharhino-maintain backup {offline|online}” with external databases: Learn more
• Content Management (Debian/Ubuntu): Content views now honor the Debian errata include/exclude filters.
• Content Management (Debian/Ubuntu): Fixed a regression with lenient validation in Debian Release files that do not fully adhere to Debian specifications.
• Content Management (Debian/Ubuntu): Terminate gpg-agent after private key import to avoid race condition on cleanup.
• Content Management (Debian/Ubuntu): The content view filter rules form for Debian/Ubuntu reset all previous values when editing.
• Content Management: Cannot delete a rolling content view that still contains a repository containing RHEL content that was added via a Red Hat manifest file.
• Content Management: Race condition when deleting a repository from a rolling content view will sometimes cause the task to fail.
• Content Management: Uploading of large content, e.g. RPM packages to orcharhino, failed with ‘Invalid request parameters: total query size exceeds limit’.
• Fixed installation of the SCAP client using the Ansible role on newer Debian / Ubuntu operating system versions.
• Host Deployment (Debian 13): Fix local disk boot for network deployment on UEFI.
• Host Deployment: Host group data was not loaded when creating a host from the ‘Host Groups’ page.
• Host Provisioning (Windows): Update documentation to retrieve iPXE binary from alternative source to have working iPXE binary for Windows network provisioning.
• Host Provisioning: Added a warning in the API documentation / Hammer CLI that changing the hostgroup will overwrite parameters taken from the hostgroup if you do not specify them in the update command again.
• Managing hosts: Added note about managing packages on multiple hosts that run different operating systems: package managers in remote execution jobs might return different return codes for various package actions.
• New Host Details Page (Technical Preview): A wrong subset of repositories was shown for Debian-based hosts with more than one content view environment.
• orcharhino Installer: Sanity check incorrectly prevented continuation of a failed installation with the “install_orcharhino.sh” script.
• orcharhino Proxy Servers: Add missing package dependency to ensure executable to rename FQDN of orcharhino Proxy Servers is installed by default: Learn more
• Provisioning hosts: Fixed “too few arguments” error which was caused by parsing of user data templates in Proxmox server when provisioning a host on Proxmox.
• SCC Manager: The pagination did not work using API or Hammer CLI.