Foreman 1.9.0 RC1 发布，数据中心生命周期管理

7月18日杭州 OSC 源创会正在报名，送机械键盘和开源无码内裤

Foreman 1.9.0 RC1 发布，此版本主要优化了 Web UI；增强了日志记录功能；使用 Libvirt (KVM) 提供镜像；新邮件通知等等。

下载： https://github.com/theforeman/foreman/archive/1.9.0-RC1.zip 。

更新内容

API

• Add vm_compute_attributes API call to retrieve compute attributes for a host ( #10720 )

• Add template_combinations API calls beneath host groups and environments ( #9031 )

• Add FOREMAN_APIPIE_LANGS languages override for development environments ( #10815 )

• Change unversioned API access from version 1 to version 2 ( #10167 )

• Change build_pxe_default API call method to POST from GET ( #6976 )

• Accept lowercase BMC provider names in host interfaces API ( #10382 )

• Fix validation and requirement for override_values to have a match and value ( #9812 )

• Fix build_pxe_default API call to return JSON response ( #10715 )

• Fix fact_values API call with a non-admin user ( #9793 )

• Fix compute resource brand names in compute resource documentation ( #9632 )

Authentication and Authorization

• Add debug logging to authorized resource lookups under permissions logger ( #10736 )

• Collect Foreman access log from Apache in foreman-debug ( #10945 )

• Fix authorization check for viewing compute resource VMs ( #10683 )

• Fix org/location edit forms to only show authorized resources ( #7337 )

• Fix permission for "All users" checkbox to be displayed on org/location edit ( #7335 )

• Fix permission names to be globally unique ( #10492 )

CLI

• Add foreman-debug configuration file ( #10701 )

• Change foreman-debug to be non-interactive ( #10284 )

• Fix foreman-debug options -u and -a to be exclusive ( #10699 )

Compute resources and Hosts creation

• Add support for image provisioning on Libvirt with userdata and cloud-init disk ( #10072 )

• Add Cisco NX-OS POAP provisioning support ( #10526 )

• Change Windows installation media handling to use wimboot ( #9299 )

• Update fog to 1.32.0 ( #10470 )

• Change websockify proxy port to be randomized within 5910-5930 ( #10703 )

• Check presence of and restore DHCP records on host build ( #1536 )

• Validate presence of BMC smart proxy when adding managed BMC interface ( #10727 )

• Change root password and partition table to optional on hosts not in build mode ( #9993 )

• Fix creation of hosts with volumes on Google Compute Engine ( #4551 )

• Fix vSphere resource pool retrieval when cluster name and path differ ( #10151 )

• Fix configuration of alias interfaces during provisioning ( #10666 )

• Fix matching of virtual interfaces on compute resources, only match physicals ( #10664 )

Installer and packaging

• Improve error message generated by smart proxy registration failure ( #10466 )

• Update to scoped_search 3.x ( #8502 )

Installer modules have been updated, see their respective changelogs for more detailed notes:

Proxy and Services

• Add debug logging to all IPMI calls ( #9709 )

• Add API call to test BMC connection to IPMI ( #9710 )

• Extend BMC API to show available providers etc. ( #9711 )

• Add new startup script for the service under Windows ( #9713 )

• Add mechanism to support config file migrations ( #10003 )

• Add TFTP and DHCP options support for provisioning Cisco POAP ( #10527 )

• Add dhcp_omapi_port setting to change ISC dhcpd OMAPI port ( #10264 )

• Add smart proxy project README ( #9121 )

• Move smart_proxy_chef request classes to the plugin itself ( #10895 )

• Fix missing Windows gem dependencies in bundler ( #10320 )

• Fix BMC API to respond with 501 when provider API is not implemented ( #9840 )

• Fix parsing of request body in BMC API to pass additional options ( #10116 )

• Fix error handler to print stacktrace at debug level ( #10639 )

• Fix logging of template proxy operations ( #10769 )

• Fix spelling of "nonexistent" in messages ( #10801 )

• Fix DNS lookup hang during trusted host tests ( #9919 )

Puppet and Puppet integration

• Add outofsync_interval setting to control expected out of sync duration of reports ( #10337 )

• Change Puppet environment field on hosts to be optional ( #9301 )

• Prevent validation of default values when a class parameter uses the Puppet default ( #9187 )

• Fix association of OS and architecture during facts import ( #10633 )

• Fix duplicate interfaces created during import with bond interfaces ( #10607 )

• Fix assignment of bond interfaces with blank identifiers on import ( #10888 )

Security

• Disallow users with edit_users permission to change admin user passwords ( CVE-2015-3235 , #10829 )

• Add audits email summary for a regular report of audit events ( #1213 )

• Add host build completion email notification ( #1510 )

• Encrypt LDAP auth source passwords when stored at rest in database ( #10263 )

• Change default root password hash from MD5 to SHA256 ( #10289 )

• Fix SELinux module building on EL7.1 with apache_content_template macro ( #9791 )

• Refactor require_ssl code to use Rails force_ssl feature ( #10471 )

Web Interface

• Add new select box styling to enable searching on every dropdown menu ( #10641 )

• Change dashboard to store widgets in the DB and support minimizing ( #8106 )

• Add full screen edit button to parameter override text boxes ( #3856 )

• Add button to show full fact values for easy copying ( #9194 )

• Add axis labels and reposition legends on charts ( #9454 )

• Add caps lock warning to password fields ( #8898 )

• Rearrange overrides section in smart class parameters and host parameters pages ( #8214 , #8217 )

• Rearrange hosts and provisioning menus to follow usual configuration order ( #9334 )

• Reorganize setting categories to be more logical ( #8566 )

• Fix host delete confirmation box to include hostname and VM deletion warning ( #9879 )

• Fix error during second run of orchestration from Discovery ( #9424 )

• Fix display of long org/location names in current context ( #8861 )

• Fix display of messages on smart proxy errors on Certificates pages ( #9674 )

• Fix highlight of error message when Puppet classes are not available in environment ( #10738 )

• Fix ambiguity in token_duration setting help text ( #10194 )

• Rename "mail" to "email" across the user interface for consistency ( #8525 )

• Fix sending of template parameters in form submissions ( #10849 )

• Fix activation of second autocomplete field on pages ( #10817 )

• Fix failed login notification from remaining on login screen ( #10729 )

• Fix quickstart URL in README ( #10518 )

• Fix parameter name "spaces" error message to be consistent ( #9439 )

• Fix typo in build PXE default confirmation box ( #9806 )

• Fix 404 error when selecting Puppet environment on host group form ( #9444 )

• Refactor template full screen mode for reusability ( #10638 )

Various fixes and features

• Add custom logger capabilities and extended logging configuration ( #10487 )

• Add debug-level logging of LDAP calls and queries ( #10406 )

• Add consistent deprecation warnings for internal and external APIs ( #10635 )

• Change trends to aggregate and reduce data points ( #10439 )

• Change logging of backtraces to regular log levels and remove truncation ( #10713 )

• Change Fog library loading to only load providers in active use ( #8516 )

• Allow locations and organizations with the same names ( #10660 )

• Update documentation for reports expiry rake task ( #10513 )

• Allow configuration of logging level from settings.yaml ( #6524 )

• Fix audit records being created on counter updates ( #10656 )

• Fix audit records being created on Puppet class host changes ( #10288 )

• Fix slow report fetch SQL query under PostgreSQL on dashboard ( #10879 )

• Fix unnecessary SQL queries when orgs/locations are disabled ( #6332 )

• Fix N+1 SQL query on host and host group forms ( #9969 )

• Fix uniq calls to run in database ( #10583 )

• Fix sort.uniq call ordering to improve performance ( #10584 )

• Fix accessible host groups to remove unnecessary sorting ( #3016 )

• Fix in-memory attribute fetches with more specific database calls ( #9593 )

• Fix wrapping of host parameter table headers in Japanese ( #7532 )

• Fix unlocalized period in org/locations help page ( #7454 )

• Fix formatting of Puppet error email notifications ( #9998 )

• Fix foreman_url setting to be mandatory ( #9613 )

• Fix validation of unattended_url field to check protocols ( #5649 )

• Fix user groups to disallow empty names ( #3711 )

• Fix grammatical mistakes in foreman-rake man page ( #10921 )

• Fix seeding of org/locations when one already exists ( #10695 )

• Fix Ruby deprecation warning in LDAP auth source ( #4769 )

• Fix warnings from duplicate keys in hashes ( #10437 )

• Fix intermittent database deadlock during integration tests ( #10507 )

• Fix running of auth source tests ( #9957 )

• Fix password crypt tests when running on OS X ( #9551 )

Various internal refactorings

• Add test to check trends reduce task idempotency ( #10439 )

• Add helper method to check if a smart proxy has a feature ( #10287 )

• Add helper factory for host group provisioning ( #10780 )

• Change partition tables to be a type of provisioning template ( #7096 )

• Refactorings for Rails 4 compatibility ( #10409 )

• Refactor link_to confirm option for Rails 4 compatibility ( #7574 )

• Refactor boolean conversion logic into common class ( #10402 )

• Refactor host managed logic in NIC models ( #10442 )

• Refactor host OS access for consistency ( #9397 )

• Remove deprecated smart proxy scopes ( #10899 )

• Remove unused columns from hosts table ( #10861 )

• Remove setting cache clear debug logging ( #10887 )

详细改进请看 Redmine 。

Foreman是一个集成的数据中心生命周期管理工具,提供了服务开通,配置管理以及报告 功能,和Puppet Dahboard一样,Foreman也是一个Ruby on Rails程序.Foreman和 Dashboard不同的地方是在于,Foreman更多的关注服务开通和管理数据中心的能力,例如和引导工具,PXE启动服务器,DHCP服务器及服务 器开通工具进行集成.

Foreman 机器统一管理平台

• Foreman可以与Puppet集成使用,通常是作为puppet的前端接入.

• Foreman takes care of provisioning until the point puppet is running, allowing Puppet to do what it does best.(太难翻了 -_-!!)

• Foreman能够通过Facter组件显示系统目录信息,并且可以从Puppet主机报表中提供实时信息

• Foreman能够准备你管理新机器的所有工作.它的设计目标是能够自动化的完成所有手工管理的工作,通过Foreman可以重新配置机器.

• Foreman能够管理大规模(当然也包括小规模)的,企业级的的网络,可能有很多域,子网和很多puppet master节点.Foreman也可以实现配置版本的回溯.