Salt 0.16.2 Release Notes

Version 0.16.2 is a bugfix release for 0.16.0, and contains a number of fixes.

Windows

  • Only allow Administrator's group and SYSTEM user access to C:\salt. This eliminates a race condition where a non-admin user could modify a template or managed file before it is executed by the minion (which is running as an elevated user), thus avoiding a potential escalation of privileges. (6361)

Grains

  • Fixed detection of virtual grain on OpenVZ hardware nodes
  • Gracefully handle lsb_release data when it is enclosed in quotes
  • Improved grains detection on MacOS

Pillar

  • Don't try to load git_pillar if not enabled in master config (6052)
  • Functions pillar.item and pillar.items added for parity with grains.item/grains.items. The old function pillar.data is preserved for backwards compatibility.
  • Fixed minion traceback when Pillar SLS is malformed (5910)

Peer Publishing

Minion

  • Fixed salt-key usage in minionswarm script
  • Quieted warning about SALT_MINION_CONFIG environment variable on minion startup and for CLI commands run via salt-call (5956)
  • Added minion config parameter random_reauth_delay to stagger re-auth attempts when the minion is waiting for the master to approve its public key. This helps prevent SYN flooding in larger environments.

User/Group Management

  • Implement previously-ignored unique option for user.present states in FreeBSD
  • Report in state output when a group.present state attempts to use a gid in use by another group
  • Fixed regression that prevents a user.present state to set the password hash to the system default (i.e. an unset password)
  • Fixed multiple group.present states with

same group (6439)

File Management

  • Fixed file.mkdir setting incorrect permissions (6033)
  • Fixed cleanup of source files for templates when /tmp is in file_roots (6118)
  • Fixed caching of zero-byte files when a non-empty file was previously cached at the same path
  • Added HTTP authentication support to the cp module (5641)
  • Diffs are now suppressed when binary files are changed

Package/Repository Management

  • Fixed traceback when there is only one target for pkg.latest states
  • Fixed regression in detection of virtual packages (apt)
  • Limit number of pkg database refreshes to once per state.sls/state.highstate
  • YUM: Allow 32-bit packages with arches other than i686 to be managed on 64-bit systems (6299)
  • Fixed incorrect reporting in pkgrepo.managed states (5517)
  • Fixed 32-bit binary package installs on 64-bit RHEL-based distros, and added proper support for 32-bit packages on 64-bit Debian-based distros (6303)
  • Fixed issue where requisites were inadvertently being put into YUM repo files (6471)

Service Management

  • Fixed inaccurate reporting of results in service.running states when the service fails to start (5894)
  • Fixed handling of custom initscripts in RHEL-based distros so that they are immediately available, negating the need for a second state run to manage the service that the initscript controls

Networking

SSH

  • Fixed incorrect result reporting for some ssh_known_hosts.present states
  • Fixed inaccurate reporting when ssh_auth.present states are run with test=True, when rsa/dss is used for the enc param instead of ssh-rsa/ssh-dss (5374)

pip

  • Properly handle -f lines in pip freeze output
  • Fixed regression in pip.installed states with specifying a requirements file (6003)
  • Fixed use of editable argument in pip.installed states (6025)
  • Deprecated runas parameter in execution function calls, in favor of user

MySQL

PostgreSQL

Miscellaneous

  • Don't allow npm states to be used if npm module is not available
  • Fixed alternatives.install states for which the target is a symlink (6162)
  • Fixed traceback in sysbench module (6175)
  • Fixed traceback in job cache
  • Fixed tempfile cleanup for windows
  • Fixed issue where SLS files using the pydsl renderer were not being run
  • Fixed issue where returners were being passed incorrect information (5518)
  • Fixed traceback when numeric args are passed to cmd.script states
  • Fixed bug causing cp.get_dir to return more directories than expected (6048)
  • Fixed traceback when supervisord.running states are run with test=True (6053)
  • Fixed tracebacks when Salt encounters problems running rbenv (5888)
  • Only make the monit module available if monit binary is present (5871)
  • Fixed incorrect behavior of img.mount_image
  • Fixed traceback in tomcat.deploy_war in Windows
  • Don't re-write /etc/fstab if mount fails
  • Fixed tracebacks when Salt encounters problems running gem (5886)
  • Fixed incorrect behavior of selinux.boolean states (5912)
  • RabbitMQ: Quote passwords to avoid symbols being interpolated by the shell (6338)
  • Fixed tracebacks in extfs.mkfs and extfs.tune (6462)
  • Fixed a regression with the module.run state where the m_name and m_fun arguments were being ignored (6464)