Skip to content

Latest commit

 

History

History
388 lines (263 loc) · 15.1 KB

CHANGES.rst

File metadata and controls

388 lines (263 loc) · 15.1 KB

Changelog

debops.owncloud

This project adheres to Semantic Versioning and human-readable changelog.

The current role maintainer_ is ypid_.

Refer to the :ref:`owncloud__ref_upgrade_nodes` when you intend to upgrade to a new release.

Added

Changed

Removed

Fixed

  • Ansible 2.2 support for usage in integration testing. Version 2.2 mentions a few deprecation warnings. We are aware of this but there is not much we can do yet as Ansible 2.1 support should be retained for this release. [ypid_]
  • Fix :envvar:`owncloud__webserver` and owncloud.webserver Ansible fact generation. groups is not a list of the groups of the current host but a dictionary of all groups. Use group_names. [ypid_]
  • Don’t attempt to run certain :command:`occ` subcommands when ownCloud is in maintenance mode as some subcommands are not available in maintenance mode. This kind of restricts the use of the maintenance mode for this role when you want to use those :command:`occ` subcommands. As a result, this role does not enable or disable maintenance mode and the role maintainers recommend to leave maintainers mode disabled. [ypid_]
  • Fix playbook to handle the role::nginx Ansible tag correctly. [ypid_]
  • Fix custom directory creating. Previously, the Ansible role did not ensure that custom directories the administrator might had configured using :envvar:`owncloud__data_path` and :envvar:`owncloud__nginx_client_body_temp_path` actually existed and failed when reloading the respective services. [ypid_]

Security

  • Update to the new ownCloud build service OpenPGP key with fingerprint DDA2 C105 C4B7 3A66 49AD 2BBD 47AE 7F72 479B C94B.

    Note that new releases are signed with that key. If the new key is not present, no updates will be installed because they can not be verified. Thus updates fixing potential security issues will not be installed!

    Please run the updated role with the new key against your host(s) to fix this. [ypid_]

  • Switch back to importing the OpenPGP key from a key file shipped with this role to mitigate a vulnerability in the `Ansible apt_key module`_.

    Refer to apt_key module does not verify key fingerprints for details. [ypid_]

  • Ensure that old or unused OpenPGP public keys which where previously used to sign the APT repository are absent. This is done to mitigate the possibility of one of the keys getting compromised. [ypid_]

  • Require at least Ansible 2.1.4 to run the role. Refer to `Ansible Security`_ for details. Note that the requirement is currently not enforced by Ansible so you could run the role with older Ansible versions but you really should not! [ypid_]

Added

Changed

Deprecated

  • Deprecated ownCloud 8.0 support which is End of Life as of 8.0.15 (2016-09-20). [ypid_]

Removed

  • Changed role namespace from owncloud_ to owncloud__. :regexp:`owncloud_[^_]` variables are dropped and don’t have any effect anymore. [ypid_]

  • Remove most of the Ansible role dependencies.

    Please run the DebOps playbook to make sure that webserver and database are ready. [ypid_]

  • Remove the owncloud-server package from list of installed packages, it has been dropped as of ownCloud 9.0. [drybjed_]

  • Dropped support for Debian 7, Ubuntu 12.04 and 14.10 due to additional work which would be required. See https://doc.owncloud.org/server/9.0/admin_manual/installation/linux_installation.html for details. If you need support for one of them and can get it to work we will be happy about your contribution! [ypid_]

  • Drop ownCloud 7.0 support which is End of Life as of 7.0.15 (2016-05-12). [ypid_]

Fixed

  • Fixed :command:`occ` command wrapper to work with ownCloud 8.0. [ypid_]
  • Don’t rely on :file:`/usr/local/bin` being in the PATH environment variable for this role to work. [ypid_]
  • Updated Nginx configuration to the example given in the official ownCloud documentation. Fixes security warnings which occurred with the latest version of debops.nginx_ about duplicated security headers. [ypid_]
  • Fix error when strings handed over to :command:`occ maintenance:install` start with a hyphen. This only affected the initial setup and the role would have failed previously. If the role worked for you, then you where not affected by this bug (occurrence of this bug was random based on the generated passwords). [ypid_]

Added

  • Add Changelog. [ypid_]
  • Allow to use :command:`occ` via Ansible’s inventory. Can be used to enable apps and create users. [ypid_]
  • Setup shortcut for the :command:`occ` command when not logged in as owncloud_user user and sudo allows it. Disabled by default. Can be enabled via owncloud_enable_occ_shortcut. [ypid_]
  • New PostgreSQL role support. Now PostgreSQL and MariaDB/MySQL support is unified. [scibi_]

Changed

  • Use debops.mariadb_ to allow to use MariaDB or MySQL on a remote server. [ypid_]
  • Updated to ownCloud 8.1. [ypid_]
  • Improved LDAP support. Now role will create service account (default: cn=owncloud,dc=ansible,dc=fqdn) in LDAP server. You still have to provide proper permission for this account. [scibi_]
  • Switch ownCloud APT repository to upstream repository, support different Linux distributions and releases out of the box. [drybjed_]
  • Use http:// protocol instead of https:// for APT repository URL, because encrypted connection has issues. [drybjed_]

Fixed

  • New variable: owncloud_timeout needed to handle very large files uploads. [scibi_]
  • Disabled updater App as it does not work with this role anyway. [ypid_]

debops.owncloud v0.1.0 - 2015-08-11

Added