| AArch64 | |
| ppc64le | |
| s390x | |
| x86-64 |
- update to version 2.8.4 * fix plugins crash when run from icinga2-2.8.3 * Fix InfluxDB backslash escaping * Fix Elasticsearch crash on invalid performance data * Sysconfig file settings are taken into account * Support multiple parameters for check_nscp_api * Documentation enhancements and fixes - remove obsolete patch icinga2-2.8.2-boost.patch
- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch
- fix _fillupdir usage
- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673, CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536) * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual - install limits.conf to systemd directory instead of etc
- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)
- incorporate spec changes from upstream
- fix build error for 15.0, Tumbleweed and Factory
- update to upstream version 2.8.1 * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8 * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp
- add logrotate as BuildRequires for the setup to recognize the version and enable the su usage accordingly
- fix libboost devel dependencies for Tumbleweed
- add user and group provides
- remove icinga2.service.limits.conf from package source and use the one from the tarball instead
- update to upstream version 2.8.0 * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! * DB IDO 2.8.0 schema upgrade * Cluster/Clients: Forward certificate signing requests over multiple levels * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing * New flapping detection algorithm * Add ElasticsearchWriter feature with HTTP proxy support * Add CORS support for the REST API * Deprecate `flapping_threshold` config option * Remove client configuration mode "bottom up" * Remove classicui meta configuration package * Remove deprecated `enable_legacy_mode` in Graphite feature * Spec file was moved to https://github.com/icinga/icinga-packaging * ITL CheckCommand definition updates * Documentation updates
- Documentation should not hard-require the program, as it is technically "usable" without it. - Rectify RPM groups, fix odd grammar in descriptions. - Remove redundant %clean section.
- add icinga2.service.limits.conf on Tumbleweed too
- update to upstream version 2.7.2 * Fixed invalid attribute names in the systemd unit file * Improve documentation and systemd config on TaskMax * Fixed incorrect unique constraint for IDO DB * Moved spec file to the icinga-packaging Git repository * Documentation updates
- update to upstream version 2.7.1 * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 * Livestatus bygroup table stats fixes for NagVis * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time * check_nscp_api allows white spaces in arguments
- adapt spec to latest upstream changes
- fix SLES and Factory building issues
- take upstream icinga2.spec as base again (fixes bnc#1055032) - fix wrong position of classicui sed statement - fix faulty systemd cleanup statement on suse systems
- Add icinga2-boost.patch to make compilable on Boost v1.81 and fix build error on Tumbleweed.
- Update to 2.13.6 * Bugfixes - Improve the throughput of the Icinga DB feature. #9550 - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558 - Fix a possible crash on config loading related to ignore_on_error. #9560 - Check API user permission on objects returned by joins. #9561 - Windows: update bundled Boost and OpenSSL versions. #9562 #9567
- Update to 2.13.5 * Bugfixes - Ensure not to write an incomplete (i.e. corrupt) state file. #9467 - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458 - Icinga DB: Add missing Redis SELinux policy. #9473 - Windows: Don't spam the event log with non-error startup messages. #9457 - Windows: Update bundled version of OpenSSL. #9460 - Docs: Update RHEL 8 installation instructions. #9482 - Docs: Add RHEL 9 installation instructions. #9482
- Update to 2.13.4
* Bugfixes
- Fix a race-condition involving object attribute updates that could result in a crash. #9395
- After a host recovered, only send problem notifications for services after they have been
rechecked afterwards to avoid false - notifications. #9348
- Speed up config validation by avoiding redundant serialization of objects. #9400
- Add a separator attribute to allow using arguments like --key=value as required by some
check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
- Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
* Icinga DB
- Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
- Update documentation related to Icinga DB. #9423
- Fix a bug where history events could miss the environment ID. #9396
- Properly serialize attributes of command arguments when explicitly set to null. #9398
- Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
- Make the error message more helpful if the API isn't set up #9418
- add icinga2-vim_syntax.patch:
When upgrading vim to version 8 the syntax file does not work anymore:
line xxx:
E10: \ should be followed by /, ? or &
Reason: The line continuation does not work, as vim is reading
syntax files now in vi-compatible mode. The patch sets the
nocompatible mode manually for that syntax file.
- Update to 2.13.3
* API
- The /v1/config/stages endpoint now immediately rejects parallel config updates
instead of accepting and then later failing to verify and activate them. #9328
* Certificates
- The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
- Compare cluster certificate tickets in constant time. #9333
* Notifications
- Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
- Fix missing or redundant notifications after certain combinations of state changes happened
while notifications were suppressed, for example during a downtime. #9285
* Checks and Commands
- Fix a deadlock when processing check results for checkables with dependencies. #9228
- Fix a message routing loop that can happen for event commands that are executed within a zone
using command_endpoint that resulted in excessive execution of the command. #9260
* Downtimes
- Fix scheduling of downtimes for all services on child hosts. #9159
- Creating fixed downtimes starting immediately now send a corresponding notification. #9158
- Fix some issues involving daylight saving time changes that could result in an hour missing
from scheduled downtimes. This fix applies to time periods as well. #9238
* Configuration
- Fix the evaluation order of default templates when used in combination with apply rules.
Now default templates are imported first as stated in the documentation
and as it already happens for objects defined without using apply. #9290
* IDO
- Fix an issue where contacts were not written correctly to the notification history
if multiple IDO instances are active on the same node. #9242
- Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
- Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
* Performance Data Writers
- Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
- Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
- All writers no longer send metrics multiple times after HA failovers. #9322
* Build
- Fix the order of linker flags to fix builds on some ARM platforms. #9164
- Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
- Fix an issue when building within an unrelated Git repository, version information
from that repository could incorrectly be used for Icinga 2. #9155
- Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
* Internals
- Fix some race conditions due to missing synchronization.
These race conditions should not have caused any practical problems
besides incorrect numbers in debug log message. #9306
- Move the startup.log and status files created when validating incoming cluster config updates
to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
* Icinga DB
- The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
The documentation for this attribute was already incorrect before
and was updated to reflect the current functionality. #9239 #9240
- Fix the is_sticky attribute for comments. #9303
- Fix missing updates of is_reachable and severity in the state tables. #9241
- Removing an acknowledgement no longer incorrectly writes comment history. #9302
- Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
- Fix that history events are no longer written when state information should be updated. #9252
- Fix an issue where incomplete comment history events were generated. #9301
- Note: when removing comments using the API, the dedicated remove-comment action
should be used instead of the objects API, otherwise no history event will be generated.
- Fix handling of non-integer values for the order attribute of command arguments. #9181
- Note: You should only specify integer values for order, other values are converted to
integer before use so using fractional numbers there has no effect.
- Add a dependency on icingadb-redis.service to the systemd service file
so that Redis is stopped after Icinga 2. #9304
- Buffer history events in memory when the Redis connection is lost. #9271
- Add the previous soft state to the state tables. #9214
- Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
* Icinga DB
- Prefix command_id with command type #9085
- Decouple environment from Icinga 2 Environment constant #9082
- Make icinga:history:stream:*#event_id deterministic #9076
- Add downtime.duration & service_state.host_id to Redis #9084
- Sync checkables along with their states first #9081
- Flush both buffered states and state checksums on initial dump #9079
- Introduce icinga:history:stream:downtime#scheduled_by #9080
- Actually write parent to parent_id of zones #9078
- Set value in milliseconds for program_start in stats/heartbeat #9077
- Clean up vanished objects from icinga:checksum:*:state #9074
- Remove usernotification history stream #9073
- Write IDs of notified users into notification history stream #9071
- Make CheckResult#scheduling_source available to Icinga DB #9072
- Stream runtime state updates only to icinga:runtime:state #9068
- Publish Redis schema version via XADD icinga:schema #9069
- Don't include checkable types in history IDs #9070
- Remove unused Redis key 'icinga:zone:parent' #9075
- Update to 2.13.1
* Security
- CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
Depending on your setup, manual intervention beyond installing the new versions may be required,
so please read the more detailed information in the release blog post carefully.
* Bugfixes
- IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
- ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961
- Update to 2.13.0
* Enhancements
+ Core
- PerfdataValue: Add units of measurement #7871
- Flapping: Allow to ignore states in flapping detection #8600
+ Cluster
Display log message if two nodes run on incompatible versions #8088
+ API
- /v1/actions/remove-downtime: Also remove child downtimes #8913
- Add API endpoint: /v1/actions/execute-command #8040
- /v1/actions/add-comment: Add param expiry #8035
- API-Event StateChange & CheckResult: Add acknowledgement and downtime_depth #7736
- Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
- Implement scheduling_endpoint attribute to checkable #6326
+ Windows
- Add support for Windows Event Log and write early log messages to it #8710
+ IDO
- MySQL: support larger host and service names #8425
+ ITL
- Add -S parameter for esxi_hardware ITL #8814
- Add CheckCommands for Thola #8683
- Add option ignore-sct for ssl_cert to ITL #8625
- Improve check_dns command when used with monitoring-plugins 2.3 #8589
- Add parameter -f to snmp-process #8569
- Add systemd CheckCommand #8568
- Add new options for ipmi-sensor #8498
- check_snmp_int: support -a #8003
- check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
- check_nrpe: Add parameters needed for PKI usage #7907
+ Metrics
- Support InfluxDB 2.0 #8719
- Add support for InfluxDB basic auth #8314
+ Docs
- Add info about ongoing support for IDO #8446
- Improve instructions on how to setup a Windows dev env #8400
- Improve instructions for installing wixtoolset on Windows #8397
- Add section about usage of satellites #8458
- Document command for verifying the parent node's certificate #8221
- Clarify TimePeriod/ScheduledDowntime time zone handling #8001
+ Misc
- Support TLS 1.3 #8718
- Livestatus: append app name to program_version #7931
- sd_notify() systemd about what we're doing right now #7874
* Bugfixes
+ Core
- Fix state not being UNKNOWN after process timeout #8937
- Set a default severity for loggers #8846
- Fix integer overflow when converting large unsigned integers to string #8742
- StartUnixWorker(): don't exit() on fork() failure #8427
- Fix perf data parser not recognizing scientific notation #8492
- Close FDs based on /proc/self/fd #8442
- Fix check source getting overwritten on passive check result #8158
- Clean up temp files #8157
- Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
- On check timeout first send SIGTERM #7918
+ Cluster
- Drop passive check results for unreachable hosts/services #8267
- Fix state timestamps set by the same check result differing across nodes #8101
+ API
- Do not override status codes that are not 200 #8532
- Update the SSL context after accepting incoming connections #8515
- Allow to create API User with password #8321
- Send Content-Type as API response header too #8108
- Display a correct status when removing a downtime #8104
- Display log message if a permission error occurs #8087
- Replace broken package name validation regex #8825 #8946
+ Windows
- Fix Windows command escape for " #7092
+ Notifications/Downtimes
- Fix no re-notification for non OK state changes with time delay #8562
- TimePeriod/ScheduledDowntime: Improve DST handling #8921
- Don't send notifications while suppressed by checkable #8513
- Fix a crash while removing a downtime from a disappeared checkable #8229
+ IDO
- Update program status on stop #8730
- Also mark objects inactive in memory on object deactivation #8626
- IdoCheckTask: Don't override checkable critical with warn state #8613
- PostgreSQL: Do not set standard_conforming_strings to off #8123
+ ITL
- check_http: Fix assignment of check_adress blocking check by hostname #8109
- check_mysql: Don't set -H if -s is given #8020
+ Metrics
- OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245
- Update to 2.12.5
Version 2.12.5 fixes two security vulnerabilities that may lead
to privilege escalation for authenticated API users.
Other improvements include several bugfixes related to downtimes,
downtime notifications, and more reliable connection handling.
* Security
- Don't expose the PKI ticket salt via the API. This may lead
to privilege escalation for authenticated API users by them
being able to request certificates for other identities
(CVE-2021-32739)
- Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
ElasticsearchWriter passwords via the API
(CVE-2021-32743)
- Windows: Update bundled OpenSSL to version 1.1.1k #8888
Depending on your setup, manual intervention beyond installing
the new versions may be required, so please read the more
detailed information in the release blog post carefully.
* Bugfixes
- Don't send downtime end notification if downtime hasn't
started #8878
- Don't let a failed downtime creation block the others #8871
- Support downtimes and comments for checkables with long names
[#8870]
- Trigger fixed downtimes immediately if the current time
matches (instead of waiting for the timer) #8891
- Add configurable timeout for full connection handshake #8872
* Enhancements
- Replace existing downtimes on ScheduledDowntime change #8880
- Improve crashlog #8869
- Update to 2.12.4
* Bugfixes
- Fix a crash when notification objects are deleted using the
API #8782
- Fix crashes that might occur during downtime scheduling if
host or downtime objects are deleted using the API #8785
- Fix an issue where notifications may incorrectly be skipped
after a downtime ends #8775
- Don't send reminder notification if the notification is still
suppressed by a time period #8808
- Fix an issue where attempting to create a duplicate object
using the API might result in the original object being
deleted #8787
- IDO: prioritize program status updates #8809
- Improve exceptions handling, including a fix for an uncaught
exception on Windows #8777
- Retry file rename operations on Windows to avoid intermittent
locking issues #8771
* Enhancements
- Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
and icinga2-boost-8185-8191.patch because now in upstream.
- Update to 2.12.3
* Security
- Fix that revoked certificates due for renewal will
automatically be renewed ignoring the CRL
(Advisory / CVE-2020-29663)
* Bugfixes
- Improve config sync locking - resolves high load issues on
Windows #8511
- Fix runtime config updates being ignored for objects without
zone #8549
- Use proper buffer size for OpenSSL error messages #8542
* Enhancements
- On checkable recovery: re-check children that have a problem
[#8506]
- Update to 2.12.2
* Bugfixes
- Fix a connection leak with misconfigured agents #8483
- Properly sync changes of config objects in global zones done
via the API #8474 #8470
- Prevent other clients from being disconnected when replaying
the cluster log takes very long #8496
- Avoid duplicate connections between endpoints #8465
- Ignore incoming config object updates for unknown zones #8461
- Check timestamps before removing files in config sync #8495
* Enhancements
- Include HTTP status codes in log #8467
- Update _constraints to current requirements to avoid OOM seen in aarch64 Tumbleweed
- Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004)
- Update to 2.12.1
* Bugfixes
+ Core
- Fix crashes during config update #8348 #8345
- Fix crash while removing a downtime #8228
- Ensure the daemon doesn't get killed by logrotate #8170
- Fix hangup during shutdown #8211
- Fix a deadlock in Icinga DB #8168
- Clean up zombie processes during reload #8376
- Reduce check latency #8276
+ IDO
- Prevent unnecessary IDO updates #8327 #8320
- Commit IDO MySQL transactions earlier #8349
- Make sure to insert IDO program status #8330
- Improve IDO queue stats logging #8271 #8328 #8379
+ Misc
- Ensure API connections are closed properly #8293
- Prevent unnecessary notifications #8299
- Don't skip null values of command arguments #8174
- Fix Windows .exe version #8234
- Reset Icinga check warning after successful config update #8189
- Update to 2.12.0
* Breaking changes
- Deprecate Windows plugins in favor of our
- PowerShell plugins #8071
- Deprecate Livestatus #8051
- Refuse acknowledging an already acknowledged checkable #7695
- Config lexer: complain on EOF in heredocs, i.e. {{{abc<EOF> #7541
* Enhancements
+ Core
- Implement new database backend: Icinga DB #7571
- Re-send notifications previously suppressed by their time periods #7816
+ API
- Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
- Improve error message for POST queries #7681
- /v1/actions/remove-comment: let users specify themselves #7646
- /v1/actions/remove-downtime: let users specify themselves #7645
- /v1/config/stages: Add 'activate' parameter #7535
+ CLI
- Add pki verify command for better TLS certificate troubleshooting #7843
- Add OpenSSL version to 'Build' section in --version #7833
- Improve experience with 'Node Setup for Agents/Satellite' #7835
+ DSL
- Add get_template() and get_templates() #7632
- MacroProcessor::ResolveArguments(): skip null argument values #7567
- Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
- Introduce ternary operator (x ? y : z) #7442
- LegacyTimePeriod: support specifying seconds #7439
- Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417
+ ITL
- Add notemp parameter to oracle health #7748
- Add extended checks options to snmp-interface command template #7602
- Add file age check for Windows command definition #7540
+ Docs
- Development: Update debugging instructions #7867
- Add new API clients #7859
- Clarify CRITICAL vs. UNKNOWN #7665
- Explicitly explain how to disable freshness checks #7664
- Update installation for RHEL/CentOS 8 and SLES 15 #7640
- Add Powershell example to validate the certificate #7603
+ Misc
- Don't send event::Heartbeat to unauthenticated peers #7747
- OpenTsdbWriter: Add custom tag support #7357
* Bugfixes
+ Core
- Fix JSON-RPC crashes #7532 #7737
- Fix zone definitions in zones #7546
- Fix deadlock during start on OpenBSD #7739
- Consider PENDING not a problem #7685
- Fix zombie processes after reload #7606
- Don't wait for checks to finish during reload #7894
+ Cluster
- Fix segfault during heartbeat timeout with clients not yet signed #7970
- Make the config update process mutually exclusive (Prevents file system race conditions) #7936
- Fix check_timeout not being forwarded to agent command endpoints #7861
- Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
- Fix open connections when agent waits for CA approval #7686
- Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
- Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
- Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
- Fix TLS context not being updated on signed certificate messages on agents #7654
+ API
- Close connections w/o successful TLS handshakes after 10s #7809
- Handle permission exceptions soon enough, returning 404 #7528
+ SELinux
- Fix safe-reload #7858
- Allow direct SMTP notifications #7749
+ Windows
- Terminate check processes with UNKNOWN state on timeout #7788
- Ensure that log replay files are properly renamed #7767
+ Metrics
- Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
- Always send 0 as value for thresholds #7696
+ Scripts
- Fix notification scripts to stay compatible with Dash #7706
- Fix bash line continuation in mail-host-notification.sh #7701
- Fix notification scripts string comparison #7647
- Service and host mail-notifications: Add line-breaks to very long output #6822
- Set correct UTF-8 email subject header (RFC1342) #6369
+ Misc
- DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
- CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
- Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
- CheckCommand ssl: Fix wrong parameter -N #7741
- Code quality fixes
- Small documentation fixes
- Fix boost build error for Tumbleweed.
- Add patch icinga2-boost-8185-8184.patch
- Add patch icinga2-boost-8185-8190.patch
- add patch icinga2-boost-8185-8191.patch
- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)
- Update to 2.11.5
Version 2.11.5 fixes file system race conditions
in the config update process occurring in large HA environments
and improves the cluster connection liveness mechanisms.
* Bugfixes
+ Make the config update process mutually exclusive (Prevents file system race conditions) #8093
+ Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
+ Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
+ Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097
- Update to 2.11.4
Version 2.11.4 fixes a crash during a heartbeat timeout with
clients not yet signed. It also resolves an issue with endpoints
not reconnecting after a reload/deploy, which caused a lot of
UNKNOWN states.
* Bugfixes
+ Cluster
- Fix segfault during heartbeat timeout with clients not yet signed #7997
- Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
+ Setup
- Fix exception on trusted cert not readable during node setup #8044
- prepare-dirs: Only set permissions during directory creation #8046
+ DSL
- Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054
- Update to 2.11.3
* Bugfixes
- Cluster
Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849
- Set minimum require boost version to 1.66
- Fix boo#1159869 Permission error when use the icinga cli wizard.
- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors.
- Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565
- Update to 2.11.1
This release fixes a hidden long lasting bug unveiled with 2.11
and distributed setups. If you are affected by agents/satellites
not accepting configuration anymore, or not reloading, please upgrade.
* Bugfixes
- Cluster Config Sync
- Never accept authoritative config markers from other instances #7552
- This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10.
- Configuration
- Error message for command_endpoint should hint that zone is not set #7514
- Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521
* Documentation
- Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526
- Explain repository requirements for 2.11:
https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166
- command_endpoint objects require a zone:
https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone
- Zones declared in zones.d are not loaded anymore:
https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones
- Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.
- Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247
- update to 2.10.5
* Core
- Fix crashes with logrotate signals #6737 (thanks Elias Ohm)
* API
- Fix crashes and problems with permission filters from recent
Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11)
- Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877
* Cluster
- Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel)
* IDO DB
- Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157
* Documentation
- Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body
- Better layout for the features chapter, specifically metrics and events
- Split object types into monitoring, runtime, features
- Add technical concepts for cluster messages
- update to 2.10.4 * Bugfixes: - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) - Fixes for delayed and one-time notifications (#5561 #6757) - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) - check_perfmon supports non-localized performance counter names (#5546 #6418) Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19
- update to 2.10.3 * Bugfixes: - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) - Server time in the future breaks check result processing (#6797 ref/NC/595861) - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) - Crashes with localtime_r errors (#6887) * Documentation updates: - Ephemeral port range blocking on Windows agents (ref/NC/597307) - Technical concepts for the check scheduler (#6775) - DB IDO cleanup (#6791) - Unified development docs (#6819) Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26
- update to 2.10.2 * Bug - #6770 (PR): Fix deadlock in GraphiteWriter - #6769 (Cluster): Hanging TLS connections - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream() - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA) - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled - #6736 (Crash): Stability issues with Icinga 2.10.x - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions - #6712 (API): Downtime name not returned when error occurs - #6711 (API, Cluster): Slow API (TLS-Handshake) - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x) - #6635 (API): API TLS session connection closed after 2 requests - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers * Documentation - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs * Support - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment - #6771 (Tests, PR): Implement unit tests for Dictionary initializers - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)
- update to 2.10.1
* Bug
- #6696 (PR): Remove default environment, regression from e678fa1aa5
- #6694: v2.10.0 sets a default environment "production" in SNI
- #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2
reload handler
- #6689: State file not updated on reload
- #6685 (API, PR): Fix regression with API permission filters and
namespaces in v2.10
- #6682 (API): API process-check-result fails in 2.10.0
- #6679 (Windows, PR): Initialize Configuration::InitRunDir for
Windows and writing the PID file
- #6624 (Check Execution): Master Reload Causes Passive Check State Change
- #6592: Reloads seem to reset the check atempt count. Also notifications
go missing shortly after a reload.
* Documentation
- #6701 (Documentation, PR): Add GitHub release tag to README
- #6700 (Documentation, PR): Enhance the addon chapter in the docs
- #6699 (Documentation, PR): Update to https://icinga.com/
- #6692 (Documentation, PR): Update release docs for Chocolatey
- #6690 (Documentation, PR): Extend 09-object-types.md with argument array
- #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in
a zone
- #6673 (Documentation, PR): Update RELEASE docs
- #6672 (Documentation, PR): Extend upgrade docs
- #6671 (Documentation): Zone requirements changed in 2.10 -
Undocumented Change
* Support
- #6681 (code-quality, PR): Fix spelling errors.
- #6677 (Packages, Windows): icinga does not start after Update to 2.10
- update to 2.10.0 * Notes - Support for namespaces, details in this blogpost - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie - More child options for scheduled downtimes - Performance improvements and fixes for the TLS connections inside cluster/REST API - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) - New configuration path constants, e.g. ConfigDir - Fixed problem with dependencies rescheduling parent checks too fast - Fixed problem with logging in systemd and syslog - Improved vim syntax highlighting - Technical concepts docs update with config compiler and TLS network IO * Enhancement - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients - #6651 (Plugins, PR): Add 'used' feature to check_swap - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object - #6532 (Configuration, PR): Add child_options to ScheduledDowntime - #6531 (API, PR): Expose Zone#all_parents via API - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send - #6521 (Configuration, PR): Implement references - #6512 (Cluster, PR): Refactor environment for API connections - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling - #6509 (Configuration, PR): Implement support for namespaces - #6508 (Configuration, PR): Implement the Dictionary#clear script function - #6506 (PR): Improve path handling in cmake and daemon - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects - #6455 (Log, PR): Log something when the Filelogger has been started - #6379 (Configuration, PR): Throw config error when using global zones as parent - #6356 (Log, PR): Fix logging under systemd - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification - #4282 (API, Log): Icinga should log HTTP bodies for API requests * Bug - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint - #6575: LTO builds fail on Linux - #6566 (Cluster): Master disconnects during signing process - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries - #6519 (CLI, PR): Reset terminal on erroneous console exit - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" - #6514 (API): API using "Connection: close" header results in infinite threads - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable - #6503 (Log, PR): Reduce the log level for missing env macros to debug - #6485 (Log): Icinga logs discarding messages still as warning and not as notice - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout - #5815 (Plugins, Windows): swap-windows check delivers wrong result - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled - #5052 (Cluster, Windows): Replay log not working with Windows client - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks * ITL - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used - #6640 (ITL): Update ITL and Docs for memory-windows - show used - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand - #6561 (ITL, PR): [Feature] Ceph health CheckCommand - #6504 (ITL, PR): squashfs ignored - #6491 (ITL, PR): Feature/itl vmware health - #6481 (ITL): command-plugins.conf check_disk exclude squashfs * Documentation - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command - #6665 (Documentation, PR): Make the two modes of check_http more obvious. - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10 - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list - #6606 (Documentation, PR): Enhance contributing docs - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs - #6573 (Documentation, PR): Fix operator precedence table - #6528 (Documentation, PR): Document default of User#enable_notifications - #6502 (Documentation, PR): Update 17-language-reference.md - #6501 (Documentation, PR): Update 03-monitoring-basics.md - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert * Support - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10 - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server - #6642 (PR): Allow to override MaxConcurrentChecks constant - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO - #6618 (PR): Silence compiler warning for nice() - #6591 (PR): Fix static initializer priority for namespaces in LTO builds - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md - #6574 (PR): Move new downtime constants into the Icinga namespace - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients - #6567 (PR): ApiListener: Dump the state file port detail as number - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package - #6544 (code-quality, PR): Remove #include for deprecated header file - #6539 (PR): Build fix for CentOS 7 and non-unity builds - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string - #6510 (Tests, Windows, PR): Update windows build scripts - #6494 (Tests, PR): Test PackObject - #6489 (code-quality, PR): Implement object packer for consistent hashing - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority - #6456 (code-quality, PR): Keep notes for immediately log flushing - #6440 (code-quality, PR): Fix typo - #6410 (code-quality, PR): Remove unused code - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons
- update to 2.9.2
* Enhancement
- #6602 (API, Cluster, PR): Improve TLS handshake exception logging
- #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order
- #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported
dictionary usage
* Bug
- #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8
- #6581 (Configuration, PR): Shuffle items before config validation
- #6569 (DB IDO): Custom Vars not updated after upgrade
- #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28
- #6505 (Cluster, PR): Fix clusterzonecheck if not connected
- #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match
- #6496 (Configuration): error with match and type matchany
* Documentation
- #6590 (DB IDO, Documentation, PR): Update workaround for custom vars
- #6572 (Documentation, PR): Add note about workaround for broken custom vars
* Support
- #6540 (Configuration): Evaluate a fixed config compiler commit order
- #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9
- #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast
- Add icinga2-graphite.patch to have all tags as descriped in
upstream icingaweb2-module-graphite docs.
- remove rpmlint warnings: - missing-dependency-to-logrotate - obsolete-not-provided icinga2-libs - permissions-missing-requires
- Incorporating upstream changes
* Handle licensing different between SUSE and RedHat
* Remove obsolete libs package
* Move service and config from common to main package
* Ensure consistent handling of fillupdir
Also see https://github.com/Icinga/rpm-icinga2/pull/5
- update to 2.9.1 * Bug - #6457 (PR): Ensure that timer thread is initialized after Daemonize() - #6449: icinga r2.9.0-1 init.d script overrides PATH variable - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 - #6444 (PR): SELinux: allow systemd notify - #6443: selinux and 2.9 * Support - #6470 (code-quality, PR): Fix spelling errors. - #6467 (Tests, PR): Start and stop the timer thread lazily - #6461 (Tests): Broken tests with fix from #6457 - #6451 (Packages, PR): Fix initscripts - #6450 (Packages): init script helpers - source: not found
- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file" error. (boo#1102980)
- update to 2.9.0
* Notes
- Elasticsearch 6 Support
- icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed
in-memory, avoids plugin call
- ApplicationVersion constant in the configuration
- Setup wizards: global zone, disable conf.d inclusion, unified parameter handling
- TTL support for check results, pretty formatting for REST API queries
- TLS support for IDO PostgreSQL
- Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling,
scheduled downtimes and memory handling with many API requests
* Enhancement
- #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api
- #6321 (Log, PR): Update log message for skipped certificate renewal
- #6305 (PR): Introduce the 'Environment' variable
- #6299 (Check Execution, Log, PR): Change log level for failed event command execution
- #6285 (CLI, Log, PR): Add support for config validation log timestamps
- #6270 (Configuration, PR): Add activation priority for config object types
- #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature
- #6219 (Elasticsearch, PR): Add support for Elasticsearch 6
- #6211 (DB IDO): IDO pgsql with TLS support
- #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup
- #6208 (CLI): Add connection-less support for node setup CLI command
- #6206 (Configuration, PR): Add ApplicationVersion built-in constant
- #6205 (API, PR): API: Unify verbose error messages
- #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields
- #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones
- #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information
- #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check
- #6131 (Log, PR): Log which ticket was invalid on the master
- #6109 (Plugins, PR): Add 'used' feature to check_memory
- #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification
- #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check
- #6039 (Configuration, PR): Improve location info for some error messages
- #6033 (Compat): Deprecate StatusDataWriter
- #6032 (Compat): Deprecate CompatLogger
- #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check
- #5996 (PR): Add systemd watchdog and adjust reload behaviour
- #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries
- #5979 (CLI, PR): Add quit, exit and help
- #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API
- #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies
- #5905 (Elasticsearch): Add support for Elasticsearch 6
- #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation
- #5877 (API): Add pretty format to REST API parameters (for debugging)
- #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup'
- #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup
- #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message
- #5729 (CLI, Cluster, PR): Correct node wizard output formatting
- #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc
- #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata)
- #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards
- #5509 (Cluster, wishlist): Add metrics about communication between endpoints
- #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output
- #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard
- #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output
- #4966 (CLI, Cluster): Unify setting of master zones name
- #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion
- #3455 (API, Log): startup.log in stage dir has no timestamps
- #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup
- #2287 (help wanted, wishlist): Please support systemd startup notification
* Bug
- #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex
- #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop
- #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting
- #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin
- #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too
- #6403 (API, PR): Conform to RFC for CRLF in HTTP requests
- #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features
- #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator
- #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable
- #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator
- #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality
- #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body
- #6378 (Windows): Analyze Windows reload behaviour
- #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure
- #6368 (CLI, PR): Fix program option parsing
- #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version
- #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests
- #6354 (Elasticsearch): ElasticsearchWriter not writing to ES
- #6336 (Log, PR): Fix unnecessary blank in log message
- #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic
- #6319 (Windows): Windows service restart fails and config validate runs forever
- #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone
- #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique
- #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping
- #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars
- #6282 (Configuration): Issue when using excludes in TimePeriod Objects
- #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto
- #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used
- #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts
- #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding
- #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime
- #6218 (PR): attempt to fix issue #5277
- #6217 (Check Execution, PR): Fix check behavior on restart
- #6204 (API, PR): API: Check if objects exists and return proper error message
- #6195 (API, Crash, PR): Fix crash in remote api console
- #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics
- #6184 (API): debug console with API connection sometimes hangs since 2.8.2
- #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf
- #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action
- #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime
- #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable
- #6019: icinga2 console -r crashes when run without a HOME environment variable
- #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc.
- #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint
- #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars.
- #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names.
- #5952 (Notifications): Custom notifications are filtered by object state
- #5940 (PR): Remove deprecated Chocolatey functions
- #5928 (PR): Fix build problem with MSVC
- #5908 (Windows): Icinga2 fails to build on Windows
- #5901 (PR): Do not replace colons in plugin output
- #5885 (PR): Workaround for GCC bug 61321
- #5884: Icinga2 fails to build
- #5872 (PR): Replace incorrect fclose() call with pclose()
- #5863 (PR): Fix glob error handling
- #5861 (PR): Fix incorrect memory access
- #5860 (PR): Fix memory leaks in the unit tests
- #5853 (Plugins, Windows, PR): Fix missing space in check_service output
- #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter
- #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r'
- #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x
- #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf
- #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated
and add metrics about communication between endpoints
- #5718 (API, PR): API: Fix http status codes
- #5550 (API): Verify error codes and returned log messages in API actions
- #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration
- #5095 (API): Wrong HTTP status code when API request fails
- #5083 (Check Execution): Initial checks are not executed immediately
- #4786 (API): API: Command process-check-result fails if it contains performance data
- #4785 (Compat): Semicolons in plugin output are converted to colon
- #4732 (API, Configuration): Duplicate groups allowed when creating host
- #4436 (Check Execution): New objects not scheduled to check immediately
- #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart
- #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone
* ITL
- #6389 (ITL, PR): New ITL command nscp-local-tasksched
- #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338
- #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used
- #6308 (ITL, PR): Update lsi-raid ITL command
- #6263 (ITL, PR): ITL: Add default thresholds to windows check commands
- #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems
- #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf
- #6043 (ITL): ITL "plugins" has an implicit dependency on "itl"
- #6034 (ITL, PR): ITL by_ssh add -E parameter
- #5958 (ITL, PR): Add minimum version check to the built-in icinga command
- #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support
- #5951 (ITL, PR): itl: Add command parameters for snmp-memory
- #5921 (ITL, PR): Add icingacli-director check to ITL
- #5920 (ITL): Add Check for Director Jobs to ITL
- #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand
- #5906 (ITL, PR): Add check_openmanage command to ITL.
- #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command.
- #5817 (ITL): mongodb_address vs mongodb_host
- #5812 (ITL): Better way to check required parameters in notification scripts
- #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand
- #5792 (ITL, PR): ITL: Add check_rpc
- #5787 (Check Execution, ITL): random check should provide performance data metrics
- #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks
- #5717 (ITL, PR): add order tags to disk check
- #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags
- #5260 (ITL): CheckCommand mongodb does not expose authdb option
* Documentation
- #6436 (Documentation, PR): Update tested Elasticsearch version
- #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs
- #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md
- #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs
- #6413 (Documentation, PR): Fix table in Livestatus Filters
- #6391 (Documentation, PR): Docs: Fix icinga.com link
- #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images
- #6375 (Documentation, PR): some minor fixes in the flapping documentation
- #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS
- #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs
- #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs
- #6350 (Documentation, PR): clarify the permision system of the api in the docs
- #6344 (Documentation, PR): README: Fix broken community link
- #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs
- #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs
- #6289 (Documentation, PR): Update release documentation with git tag signing key configuration
- #6286 (Documentation): Update Windows wizard screenshots in the docs
- #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it
- #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes
- #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects
- #6265 (Documentation): Notifications user/user_groups required
- #6264 (Documentation, PR): Enhance "Getting Started" chapter
- #6262 (Documentation, PR): Enhance the environment variables chapter
- #6254 (Documentation, PR): Enhance release documentation
- #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections
- #6243 (Documentation, PR): Update PostgreSQL documentation
- #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation
- #6224 (Documentation, PR): Update volatile docs
- #6216 (Documentation): Volatile service explanation
- #6180 (Documentation, PR): Doc: fixed wrong information about defaulting
- #6128 (Documentation, PR): Adding documentation for configurable global zones during setup
- #6067 (Documentation, Windows, PR): Improve Windows builds and testing
- #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword
- #6018 (Documentation): Move init configuration from getting-started
- #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection
- #5948 (Documentation, PR): doc: Improve INSTALL documentation
- #4958 (Check Execution, Documentation): How to set the HOME environment variable
* Support
- #6439 (PR): Revert "Fix obsolete parameter in Systemd script"
- #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often
- #6421 (Check Execution): High CPU load due to seemingly ignored check_interval
- #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins
- #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data
- #6384 (PR): Remove leftover for sysconfig file parsing
- #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit
- #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API
- #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty()
- #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC
- #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart
- #6357 (API, PR): Increase header size to 8KB for HTTP requests
- #6347 (Packages, PR): SELinux: Allow notification plugins to read local users
- #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results
- #6337: Checks via command_endpoint are not executed (snapshot packages only)
- #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment
- #6320 (PR): Ensure that icinga_min_version parameter is optional
- #6309 (PR): Fix compiler warning in checkercomponent.ti
- #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation
- #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features
- #6295 (Compat, PR): Deprecate compatlog feature
- #6238 (Notifications, PR): Implement better way to check parameters in notification scripts
- #6233 (Check Execution): Verify next check execution on daemon reload
- #6229 (Packages, PR): Don't use shell variables in sysconfig
- #6214 (Packages): Reload-internal with unresolved shell variable
- #6201 (Windows, PR): Handle exceptions from X509Certificate2
- #6199 (API, PR): Return 500 when no api action is successful
- #6198 (Compat, PR): Deprecate Statusdatawriter
- #6187 (code-quality, PR): Remove Icinga Studio Screenshots
- #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config
- #6174 (API, PR): Fix crash without CORS setting
- #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80
- #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018
- #6163 (PR): Fix reload handling by updating the PID file before process overtake
- #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list
- #6126 (PR): Require systemd headers
- #6113 (Tests, PR): appveyor: Disable artifacts until we use them
- #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable
- #6105 (Tests): Snapshot builds fail on livestatus tests
- #6098 (API, code-quality, PR): Clean up CORS implementation
- #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes
- #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit
- #6082 (Installation, Packages): PID file removed after reload
- #6063 (Compat, PR): Deprecate CheckResultReader
- #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script
- #6061 (code-quality, PR): Remove jenkins test scripts
- #6060 (code-quality, PR): Remove Icinga development docker scripts
- #6059 (code-quality, PR): Remove Icinga Studio
- #6058 (code-quality, PR): Clean up the Icinga plugins a bit
- #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature
- #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask
- #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target
- #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split
- #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries
- #6038 (PR): Fix missing include for boost::split
- #6037 (PR): Fix build error on Windows
- #6029 (code-quality, PR): Remove duplicate semicolons
- #6028 (Packages): python notification not running when icinga ran as a service
- #6026 (Check Execution, Windows, PR): Fix flapping support for Windows
- #6025 (Windows): Implement Flapping on Windows
- #6023: Icinga should check whether the libsystemd library is available
- #6017 (PR): Remove build breaking include
- #6015 (code-quality, PR): Fix whitespaces in CMakeLists files
- #6009 (PR): Build fix for ancient versions of GCC
- #6008 (PR): Fix compatibility with CMake < 3.1
- #6007 (PR): Fix missing include
- #6005 (PR): Fix incorrect dependencies for mkunity targets
- #5999 (PR): Build fix
- #5998 (code-quality, PR): Build all remaining libraries as object libraries
- #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto
- #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template
- #5993 (code-quality, PR): Use CMake object libraries for our libs
- #5992 (code-quality, PR): Remove unused includes
- #5984 (DB IDO, PR): Fix missing static libraries for DB IDO
- #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries
- #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO
- #5974 (PR): Fix non-unity builds with the icinga check
- #5971 (code-quality, PR): Remove libdemo and libhello
- #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack
- #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable
- #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock
- #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary
- #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder
- #5961 (PR): Fix macro warning from the icinga check
- #5960: Macro warning from the icinga check
- #5957 (code-quality, PR): Change a bunch more copyright headers for 2018
- #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser
- #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features
- #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass
- #5944 (code-quality, PR): Add the final keyword to classes
- #5939 (PR): Build fix for Debian wheezy
- #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation
to minimize the number of weak symbols
- #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files
- #5935 (code-quality, PR): Implement support for precompiled headers
- #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL
- #5933 (code-quality, PR): Change copyright headers for 2018
- #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp
- #5931 (code-quality, PR): Improve detection for linker flags
- #5930 (code-quality, PR): Replace boost::function with std::function
- #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass
- #5927 (code-quality, PR): Build libraries as static libraries
- #5909 (code-quality, PR): WIP: Improve build times
- #5903 (code-quality, PR): Cleanup CompatUtility class and features
- #5897 (code-quality, PR): Remove unnecessary inline statements
- #5894 (code-quality, PR): Remove string_iless
- #5891 (code-quality, PR): Update .gitignore
- #5889 (code-quality, PR): execvpe: Fixup indention for readability
- #5887 (PR): Windows build fix
- #5886 (code-quality): Remove unnecessary 'inline' keyword
- #5882 (code-quality, PR): Avoid unnecessary allocations
- #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class
- #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects
- #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID()
- #5862 (code-quality, PR): Replace a few more NULLs with nullptr
- #5858 (Tests, code-quality, PR): Travis: Add support for Coverity
- #5857 (code-quality, PR): Fix compiler warnings
- #5855 (PR): Fix build problems with Visual Studio 2017
- #5848 (code-quality, PR): Fix COPYING format
- #5846 (code-quality, PR): Fix compiler warnings
- #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6)
- #5827 (code-quality, PR): Replace StatsFunction with Function
- #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists
- #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features
- #5821 (Packages, Windows): check_disk build error
- #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class
- #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features
- #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1
- #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository
- #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead
- #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID
- #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7
- #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory
- allow build hostname to be overwritten by the variable _buildhost