ovh/the-bastion
1
1
Fork 0
mirror of https://github.com/ovh/the-bastion.git synced 2025-02-26 00:24:12 +08:00
Code Issues Projects Releases Packages Wiki Activity

release v3.16.99-rc2

Browse source
This commit is contained in:
Stéphane Lesimple 2024-09-17 09:37:44 +00:00 committed by Stéphane Lesimple
parent accd50eea7
commit a0ec3ff9ee
4 changed files with 20 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
contrib/git/pre-commit
View file

@ -105,7 +105,7 @@ for f in $(git diff --cached --name-only --diff-filter=ACM $against); do
done done
# check versions and docs # check versions and docs
ver=$(grep -F 'our $VERSION =' lib/perl/OVH/Bastion.pm | cut -d"'" -f2 | cut -d- -f1) ver=$(grep -E '^our \$VERSION = .[0-9]+\.[0-9]+\.[0-9]+(-rc[0-9]+)?.;$' lib/perl/OVH/Bastion.pm | cut -d"'" -f2)
if ! grep -Eq "^## v$ver - 202./[01][0-9]/.." doc/CHANGELOG.md; then if ! grep -Eq "^## v$ver - 202./[01][0-9]/.." doc/CHANGELOG.md; then
echo echo
echo "ERROR: detected version '$ver', but no matching entry in doc/CHANGELOG.md" echo "ERROR: detected version '$ver', but no matching entry in doc/CHANGELOG.md"

9
doc/CHANGELOG.md
View file

@ -1,3 +1,12 @@
## v3.16.99-rc2 - 2024/09/17
feat: add rsync support through the ``--protocol rsync`` option in all plugins
feat: add ``--egress-session-multiplexing`` option to ``accountModify``
feat: add ``groupSetServers`` to entirely change a group ACL in one shot
enh: add lock for group ACL change to avoid race conditions on busy bastions
enh: ``selfPlaySession``: remove sqliteLog.ttyrecfile dependency
chore: FreeBSD: ignore OS version mismatch with packages
chore: ``selfMFASetupPassword``: clearer message
## v3.16.99-rc1 - 2024/07/04 ## v3.16.99-rc1 - 2024/07/04
feat: support wildcards in --user for ACL management plugins (fix #461) feat: support wildcards in --user for ACL management plugins (fix #461)
feat: accountFreeze: terminate running sessions if any feat: accountFreeze: terminate running sessions if any

15
doc/sphinx/installation/upgrading.rst
View file

@ -27,13 +27,12 @@ See the ``--help`` for a more fine-grained upgrade path if needed.
Version-specific upgrade instructions Version-specific upgrade instructions
===================================== =====================================
v3.16.99-rc1 - 2024/07/04 v3.16.99-rc2 - 2024/09/17
************************* *************************
This release drops support for Ubuntu 16.04 and CentOS 7. If you're still using these EOL OS releases (which is This release drops support for Ubuntu 16.04 and CentOS 7. If you're still using these EOL OS releases (which is
obviously discouraged), proper functioning of The Bastion is no longer tested or guaranteed. obviously discouraged), proper functioning of The Bastion is no longer tested or guaranteed.
It also adds official support for Ubuntu 24.04 LTS and OpenSUSE Leap 15.6, these were already working but
This release adds official support for Ubuntu 24.04 LTS and OpenSUSE Leap 15.6, these were already working but
are now part of the integration tests. are now part of the integration tests.
This release adds support of wildcards (also called "shell-style globbing characters"), namely ``?`` and ``*``, This release adds support of wildcards (also called "shell-style globbing characters"), namely ``?`` and ``*``,
@ -41,9 +40,13 @@ when using the ``--user`` option for plugins such as ``groupAddServer``, ``group
``groupDelGuestAccess``, ``accountAddPersonalAccess``, ``accountDelPersonalAccess``, ``selfAddPersonalAccess``, ``groupDelGuestAccess``, ``accountAddPersonalAccess``, ``accountDelPersonalAccess``, ``selfAddPersonalAccess``,
``selfDelPersonalAccess``. ``selfDelPersonalAccess``.
This release adds support of the ``sntrup761x25519-sha512@openssh.com`` KEX algorithm by default on shipped versions We also deprecate all the ``--sftp``, ``--scpdown``, ``--scpup`` options that are now replaced by a more generic
of ``sshd_config`` and ``ssh_config``. If you're upgrading, these files won't be touched, so if you want to add ``--protocol`` option, which supports ``sftp``, ``scpdown ``, ``scpup`` and now also ``rsync`` as parameters.
support, you'll need to modify them manually by prepending ``sntrup761x25519-sha512@openssh.com`` to the The use of rsync is similar to sftp and scp, and is detailed here: :doc:`/plugins/open/rsync`.
Last but not least, the ``sntrup761x25519-sha512@openssh.com`` KEX algorithm is now enabled by default on shipped
versions of ``sshd_config`` and ``ssh_config``. If you're upgrading, these files won't be touched, so if you want to
add support, you'll need to modify them manually by prepending ``sntrup761x25519-sha512@openssh.com`` to the
``KexAlgorithms`` line. Verify that the OpenSSH version shipped by your OS does support it (run ``ssh -Q kex``). ``KexAlgorithms`` line. Verify that the OpenSSH version shipped by your OS does support it (run ``ssh -Q kex``).
v3.16.01 - 2024/04/17 v3.16.01 - 2024/04/17

2
lib/perl/OVH/Bastion.pm
View file

@ -5,7 +5,7 @@ use common::sense;
use Fcntl; use Fcntl;
use POSIX qw(strftime); use POSIX qw(strftime);
our $VERSION = '3.16.99-rc1'; our $VERSION = '3.16.99-rc2';
BEGIN { BEGIN {
# only used by the handler below # only used by the handler below