Table of Contents
Release Notes for SIMP 6.4.0
Related Decision Logs
- SIMP 6.4+: The ISO installation/Puppetfile workflow — implementation changes for ISO / simp config
- SIMP 6.4.0: What r10k-friendly RPM features should it include? — implementation changes for RPM + simp-adapter
- How to restructure the RPM installation sequence to be more r10k/Code Manager friendly — initial architecture discussion, some portions have been updated/obsoleted by the discussions above
- SIMP 6.4.0: What r10k-friendly RPM features should it include? — implementation changes for RPM + simp-adapter
- Public SIMP yum repository structure and usage
- Should we roll out CentOS 7.6 support in a new version of 6.3 (6.3.1 or 6.3.0-1) or start with 6.4.0-Alpha1?
Related Design Pages
- SIMP 6.4: Map old/new files and capabilities
- SIMP 6.4+: Design `simp environment` command
- SIMP Environments ― terminology of Environments
How to use this page
- Go to the row of your module
- If the "proposed version" is green, then it has been released and tagged
- If the "proposed version" is blue, verify that the tests have all passed, bold the text
- If the "proposed version" is bold, tag and release the component, and color the column green
Component Selection
| BLUE | New version since last SIMP release |
| YELLOW | New component since last SIMP release |
| GRAY | Omitted component |
| WHITE | Same version as last SIMP release |
| RED | TBD: Outstanding problem |
| BOLD | Ready to release |
| BOLD ITALICS | Tag published but not verified as released |
| GREEN | New version tagged, Forge released, or RPM released |
Update in progress of component section:
Alpha Notes:
The ISO was built without the docs.
Some modules were included in the release with branches instead of tags.
rubygem_simp_cli:
repo: https://github.com/lnemsick-simp/rubygem-simp-cli
commit: d550c93c0f20046a0c301ec411e289b3c85a5c28
simp_bolt
repo: https://github.com/simp/pupmod-simp-simp_bolt
commit: b01b64c3e5c2a897eed99931c04c7910a77b8b1e
The SIMP 6.4.0 ALPHA ISO installation instructions are found here.
Release Testing Procedure
The full release testing procedure is documented in the Official SIMP Docs.
Puppet Versions Testing
Puppet version for GitLab and TravisCI
Puppet modules will be tested in GitLab and TravisCI with the following versions:
Puppet version for simp-core (integration) and SIMP ISO testing
| Release | Puppet | Ruby | Notes |
|---|---|---|---|
| SIMP 6.4.0 | 5.5.14 | 2.4.5 | Version to be included in SIMP 6.4.0 ISOs |
| Release | Puppet | Ruby | Notes |
|---|---|---|---|
| PE 2018.1.8 | 5.5.14 | 2.4.5 | |
OS Versions For Testing
- SIMP acceptance tests will be executed with the following OS versions:
- CentOS 7.6
- CentOS 6.10
- RedHat 7.6
- RedHat 6.10
- OracleLinux 7.6
- OracleLinux 6.10
- SIMP 6.4.0 ISOs for CentOS 7.6 and CentOS 6.10 will be built and tested.
- If licenses are available, SIMP 6.4.0 ISOs for RedHat 7.6 and RedHat 6.10 will be built and tested.
Tests - New/Changed Features
The tests in this section focus on new features or major, SIMP-wide changes.
Legend:
- Means this version needs to be tested
- This version does not need to be tested.
- Testing probably sufficient from other versions.
- Testing has failed.
- Testing completed and Passed.
blank - This test is not OS specific
| green | these test are automated |
|---|
| Component | Required Tasks | Test | EL7 | EL6 | OL7 | OL6 | RH7 | RH6 | Status | Notes | |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | simp-core | Verify Puppet File matches release versions | | | SIMP-6717 - Getting issue details... STATUS | ||||||
| 2 | installation | Verify installation from RPM | SIMP-6718 - Getting issue details... STATUS | This should be a simp-core task. | |||||||
| 3 | installation | Documentation | SIMP-6719 - Getting issue details... STATUS SIMP-6210 - Getting issue details... STATUS | The installation changed significantly this release, make sure the docs have been updated and make sense. | |||||||
| 4 | simp-doc | Create and verify Changelog.rst | | | SIMP-6720 - Getting issue details... STATUS | clone simp-core and run bundle exec rake deps:changelog2 and review documentation. | |||||
| 5 | simp-doc, | 'Upgrading SIMP' has an entry for the latest version and is correct | | | SIMP-6721 - Getting issue details... STATUS | Verify Site module and local modules are not removed when upgrading. | |||||
| 6 | simp-integration_test | SIMP server upgrade from RPM using the upgrade instructions. Document any steps that are needed outside the ordinary upgrade. Then, if there are additional steps, have someone else use the docs to do the upgrade to verify. | SIMP-6347 - Getting issue details... STATUS SIMP-6722 - Getting issue details... STATUS | See simp-integration_test for automated upgrade test. this should be done for servers in both FIPS and NOFIPS mode. | |||||||
| 7 | RPMs and Released Modules | Dogfooding | | | SIMP-6723 - Getting issue details... STATUS | Or "drink your own home brew", which ever you prefer.
| |||||
| 8 | Final RPM testing | RPMs have been uploaded to packagecloud | Run the simp-core install_from_rpm test and versify that it passes. This will pull the packages from packagecloud.io and do an install. | SIMP-6724 - Getting issue details... STATUS | in simp-core run
and then do it all again with BEAKER_fips=yes | ||||||
| 9 | Puppet Forge Testing | After modules have been tag with an annotated tag | run the simp-core test install_from_core_module test to test the modules pushed to Puppet Forge | SIMP-6725 - Getting issue details... STATUS | in simp-core run
and then do it all again with BEAKER_fips=yes | ||||||
| 10 | simp_packer | Need ISO built | run simp_packer and create vagrant boxes for testing | SIMP-6680 - Getting issue details... STATUS SIMP-6727 - Getting issue details... STATUS | Each OS versions should have a fips, nofips and encrypted and unencrypted in order to test all options. | ||||||
| 11 | New Modules/Features | Review new features and make sure documentation is up to date for SIMP modules and they work. Purpose of this is to have someone other then the person who wrote the modules set up and use it. Make sure 3rd party modules install. | SIMP-6728 - Getting issue details... STATUS | NOTe: The person who wrote these modules should not be the person who verifies them. simp_bolt simp_grub hirs_provisioner ruby_task helper? freeradius rkhunter oath 3rd Party modules: posix_acl? mount_providers locales kdump | |||||||
| 12 | auto_fs | check if autofs was fixed in 7.6 | SIMP-6729 - Getting issue details... STATUS | If autofs was fixed in 7.6 and 6.10 and works with stunnel, update the documentation. (See read the docs for information.) | |||||||
| 13 | compliance markup | Turn on compliance markup and validation and make sure it runs without errors. | SIMP-6730 - Getting issue details... STATUS | ||||||||
| 14 | Verify Password changes dont mess with upgrade | SIMP-6747 - Getting issue details... STATUS | According to change log, the password requirements have changed. Make sure old passwords still work after upgrading. |
Tests - Regression/Integration Testing
The tests in this section are regression tests to ensure unmodified capabilities still function. These tests should use the packer boxes created in the New/Changed Feature tests, were applicable.
| Test | EL6 | EL7 | Status | Notes | |
|---|---|---|---|---|---|
| 1 | Verify non-standard BIOS boot options from the ISO:
| SIMP-6731 - Getting issue details... STATUS Note that most of these test should eventually be automated by simp-packer, simp-integration_test, or simp-core tests so check there and remove them from these list as they are automated elsewhere. | (SIMP, FIPS and Encryption are all tested by Packer.) | ||
| 2 | Verify all boot Options in UEFI mode from ISO:
| SIMP-6735 - Getting issue details... STATUS | |||
| 3 | PXE Boot Testing BIOS | SIMP-6732 - Getting issue details... STATUS | |||
| 4 | PXE Boot Testing UEFI | SIMP-6733 - Getting issue details... STATUS | |||
| 5 | Bootstrap simp-lite scenario | SIMP-6734 - Getting issue details... STATUS | |||
| 6 | Verify simp-lite operations:
| SIMP-6736 - Getting issue details... STATUS | |||
| 7 | Bootstrap poss scenario | SIMP-6737 - Getting issue details... STATUS | |||
| 8 | Bootstrap run-once scenario | SIMP-6738 - Getting issue details... STATUS | |||
| 9 | Verify ability to switch FIPS from on to off | SIMP-6739 - Getting issue details... STATUS | Switching from off to on is known to have problems because of ciphers. | ||
| 10 | Verify ability to turn on and off auditing and selinux | SIMP-6740 - Getting issue details... STATUS | |||
| 11 | General Review of documentation:
| SIMP-6741 - Getting issue details... STATUS | |||
| 12 | simp-utils: executables that are not tested otherwise work as advertised
| SIMP-6742 - Getting issue details... STATUS | The following have acceptance tests that simply need to be executed:
| ||
| 13 | Modules with significant updates (number of lines changed, don't know impact.) | SIMP-6744 - Getting issue details... STATUS | The modules should be tested in their own but if we have time, take a look at the changes and how they work. (Doubt we will have time) auditd, compliance markup (covered else where.) pam, iptables pki |
Open Issues Assigned to Release