We are excited to announce the release of: ironic 18.3.0: OpenStack Bare Metal Provisioning This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 18.3.0 ^^^^^^ Upgrade Notes ************* * Adds "sha256", "sha384" and "sha512" as supported SNMPv3 authentication protocols to iRMC driver. Bug Fixes ********* * Fixes an issue where if selinux is enabled and enforcing, and the published image is a hardlink, the source selinux context is preserved, causing access denied when retrieving the image using hardlink URL. * Fixes SNMPv3 message authentication and encryption functionality of iRMC driver. The SNMPv3 authentication between iRMC driver and iRMC was only by the security name with no passwords and encryption. To increase security, the following parameters are now added to the node's "driver_info", and can be used for authentication: * "irmc_snmp_user" * "irmc_snmp_auth_password" * "irmc_snmp_priv_password" * "irmc_snmp_auth_proto" (Optional, defaults to "sha") * "irmc_snmp_priv_proto" (Optional, defaults to "aes") "irmc_snmp_user" replaces "irmc_snmp_security". "irmc_snmp_security" will be ignored if "irmc_snmp_user" is set. "irmc_snmp_auth_proto" and "irmc_snmp_priv_proto" can also be set through the following options in the "[irmc]" section of "/etc/ironic/ironic.conf": * "snmp_auth_proto" * "snmp_priv_proto" * Fixes a race condition in PXE initialization where logic to retry what we suspect as potentially failed PXE boot operations was not consulting if an "agent token" had been established, which is the very first step in agent initialization. Other Notes *********** * Updates the minimum version of "python-scciclient" library to "0.11.3". Changes in ironic 18.2.2..18.3.0 -------------------------------- 68efd7970 Move and fix reno config for releasenotes job 6210cae14 Fix selinux context of published image hardlink 8e6a337f2 Prevent pxe retry when agent token exists 793b98132 Fixes for tox 4.0 6aaf4e69e Add support auth protocols for iRMC ef0e33edf Add SNMPv3 authentication functionality Diffstat (except docs and test files) ------------------------------------- ironic/common/utils.py | 12 ++ ironic/conf/irmc.py | 28 ++- ironic/drivers/modules/image_utils.py | 10 + ironic/drivers/modules/irmc/common.py | 235 ++++++++++++++++---- ironic/drivers/modules/irmc/inspect.py | 24 ++- ironic/drivers/modules/irmc/power.py | 22 +- ironic/drivers/modules/pxe_base.py | 6 + releasenotes/config.yaml | 5 + ...ix-context-image-hardlink-16f452974abc7327.yaml | 7 + ...c-add-snmp-auth-protocols-3ff7597cea7ef9dd.yaml | 5 + .../irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml | 28 +++ ...e-retry-when-token-exists-a4f38f7da56c1397.yaml | 7 + reno.yaml | 4 - tox.ini | 9 +- 20 files changed, 667 insertions(+), 77 deletions(-)