python-azure-agent-2.2.45-bp152.2.1

- Add paa_use_hostnamectl.patch (bsc#1167601, bsc#1167602)
  + Set the hostname using hostnamectl to ensure setting is
    properly applied

- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.

- Update to version 2.2.45 (jsc#ECO-80)
  + Remove paa_cve_2019-0804.patch, included upstream
  + Add support for Gen2 VM resource disks
  + Use alternate systemd detection
  + Fix /proc/net/route requirement that causes errors on FreeBSD
  + Add cloud-init auto-detect to prevent multiple provisioning mechanisms
    from relying on configuration for coordination
  + Disable cgroups when daemon is setup incorrectly
  + Remove upgrade extension loop for the same goal state
  + Add container id for extension telemetry events
  + Be more exact when detecting IMDS service health
  + Changing add_event to start sending missing fields
- From 2.2.44
  + Remove outdated extension ZIP packages
  + Improved error handling when starting extensions using systemd
  + Reduce provisioning time of some custom images
  + Improve the handling of extension download errors
  + New API for extension authors to handle errors during extension update
  + Fix handling of errors in calls to openssl
  + Improve logic to determine current distro
  + Reduce verbosity of several logging statements
- From 2.2.42
  + Poll for artifact blob, addresses goal state procesing issue
- From 2.2.41
  + Rewriting the mechanism to start the extension using systemd-run for
    systems using systemd for managing
  + Refactoring of resource monitoring framework using cgroup for both
    systemd and non-systemd approaches [#1530, #1534]
  + Telemetry pipeline for resource monitoring data
- From 2.2.40
  + Fixed tracking of memory/cpu usage
  + Do not prevent extensions from running if setting up cgroups fails
  + Enable systemd-aware deprovisioning on all versions >= 18.04
  + Add systemd support for Debian Jessie, Stretch, and Buster
  + Support for Linux Openwrt
- From 2.2.38
  + Fix CVE-2019-0804
  + Add fixes for handling swap file and other nit fixes
- From 2.2.37
  + Improves re-try logic to handle errors while downloading extensions

- Add paa_cve_2019-0804.patch (bsc#1127838)
  - An issue with swapfile handling in the agent creates a data leak situation
    that exposes system memory data.

- Update to 2.2.36 (bsc#1119542)
  - Remove, included upstream
    + paa_fix_driver_install_detect.patch
    + paa_rdma_install_proper_driver.patch
    + 0001-Obtain-platform-information-in-Python-version-depend.patch
    + 0001-Detect-openSUSE-and-SLES.patch
    + 0001-Handle-the-disapperance-of-net-tools.patch
    + 0001-Properly-detect-SLES-15-for-rdma-support.patch
  - Forward port agent-no-auto-update.patch
  - [#1451] Do not utf-8 encode telemetry messages
- From 2.2.35
  + [#1434] Use files instead of pipes to capture stdout/stderr
  + [#1431] Prevent multiple downloads of zips
  + [#1418] Add main module to Python's egg
  + [#1416] Fix UTF-8 encoding for telemetry payload
  + [#1408] Honor the 'no_proxy' flag
  + [#1391, #1401, #1441] Azure Stack improvements
  + [#1384] Write status file in WALinuxAgent lib folder
  + [#1375] Add support for Redhat
  + [#1373] Handle different kernel builds on SUSE Linux Enterprise
  + [#1365, #1385, #1389] Fixes for RDMA
- From 2.2.34
  + [#1397] Send events when extensions fail to complete operation
  + [#1394/#1366] Fix the threshold telemetry issue
  + [#1298] Implementing extension sequencing in azure Linux agent
  + [#1340] Allow Clear Linux detection in python2 and python3
  + [#1345] FreeBSD swap issues fix (#1144)
  + [#1349] Use append_file in Redhat6xOSUtil.openssl_to_openssh()
  + [#1355] Ensure 'value' for authorized ssh keys end in "\n"
  + [#1361] Remove main module
- From 2.2.32
  + [#1325] Enable cgroups by default on all distros
  + [#1327, #1347] Allow enforcing of cgroups limits
  + [#1337] Allow configuration for cgroups
  + [#1333] Add support for NSBSD
  + [#1319] Stream extension downloads to disk
    (do not buffer the download in memory)
  + [#1303] Fix to support custom DNS servers
  + [#1306] Log extension stdout and stderr
  + [#1302] Better of cloud-init configuration during deprovisioning
  + [#1295] Fix to report the correct extension error code
  + [#1289] Allow disabling the agent or extensions
  + [#1290] Use the "ip route" command instead of the "route" comand
    during network configuration
  + [#1281] Delete JIT accounts
  + [#1234] Fix for reading KVP values from host
  + [#1287] Add UDEV rule in azure disk encryption
- From 2.2.31
  Upstream version jump
  + [#1196] Health store integration
  + [#1199] CGroups support
  + [#1194] Use host for status reporting
  + [#1188] Fix for sentinel and signal handlers
  + [#1182] Telemetry updates
  + [#1171] Add support for JIT
  + [#1164] Fix for name resolution in Ubuntu 18.04
  + [#1154] Set connection close header
  + [#1143] Remove extension packages after extraction
- From 2.2.26
  + Update Debian specific configuration and setup.
- From 2.2.25
  + Upstream version jump
  + Revert extension manifest caching to prevent downgrade issues.
- From 2.2.20
  + This is a hotfix release for #945, details and mitigation are available
    in the wiki.
- From 2.2.29
  + [#929] wire.py#update_goal_state does not handle out-of-date
    GoalState errors
  + [#908] Set Files to 0400 in /var/lib/waagent
  + [#906] Hardcoded value for sshd's ClientAliveInterval (180)
  + [#899] Improve HeartBeat Event
  + [#898] Send dummy status if extension fails to write a #.status file
  + [#897] 'Target handler state' wall of errors
  + [#896] End of Line Comments are Not Supported nor Handled
  + [#891] Create a Telemetry Event to Track Custom Data Execution
  + [#884] Cleanup Old Goal State and Extension Cache
  + [#876] The agent should use a scaling back-off when retrying HTTP requests
  + [#869] The agent should report OS information in the correct JSON format.
  + [#822] Update docs

- Remove paa_up_only_to_push_hostname.patch
  + Turns out the issue was a kernel bug and while ifdown ifup sequence to
    bounce the hostname to the DHCP server is overkill we do not
    want to carry a "cosmetic" patch

- Add paa_up_only_to_push_hostname.patch (bsc#1094420)

- Add 0001-Handle-the-disapperance-of-net-tools.patch (bsc#1092831)
  + Switch to using "ip route" command
- Add paa_sudo_sle15_nopwd.patch
  + Work around issue where SLE 15 will not accept the user password when
    using sudo, cause unknown, needed to time constraints w.r.t. release
- Add 0001-Properly-detect-SLES-15-for-rdma-support.patch
  + Properly detect SLES 15 for RDMA support

- Add 0001-Detect-openSUSE-and-SLES.patch (bsc#1087764)
  + Properly detect SLES 15 and openSUSE Leap 15 in Python 3

- Update paa_force_py3_sle15.patch (bsc#1061584)
  + Another reference to python, which points to python2

- Add paa_force_py3_sle15.patch
  + Force use of Python 3 for SLE 15 and later

- Modify 0001-Obtain-platform-information-in-Python-version-depend.patch to
  reflect agreed upon solution with upstream

- Add 0001-Obtain-platform-information-in-Python-version-depend.patch
  to fix build on distribution with Python 3.6 and later (boo#997614)

- Fix RDMA driver package version install issue (bsc#1074865)
  + Added paa_rdma_install_proper_driver.patch

- Update to version 2.2.18
  + [#868] Fix for sudoer update
  + [#886] Agent should not update outside of goal state
  + [#889] Firewall removal should not retry
  - Fixes issues introduces with 2.2.17

- BuildRequire distribution-release instead of
  openSUSE/sles-release.

- Fix typo in dependency

- Update to version 2.2.17 (bsc#1058974, bsc#1058975)
  + Remove paa_noref_local_install.patch, included upstream
  + Setup build for Python 3 for distros > SLE 12
  + [#879] -- OS.EnableFirewall=y breaks load balanced sets probing
- From 2.2.16
  + [#865] -- The agent should retry ETIMEDOUT (110) IOErrors
- From 2.2.15
  + [#783] -- The agent fails to use the standard Linux environment variables
    for HTTP proxy
  + [#784] -- Adjust http retry and logging
  + [#786] -- Add Provisioning.SshHostKeyPairType=auto to support ssh-keygen -A
  + [#791] -- Prevent bloating sudoers waagent when agent has problem
  + [#792] -- Clearlinux distro_name does not match
  + [#796] -- Accommodate new Clear Linux distro string in os-release
  + [#798] -- Support Ubuntu RDMA driver update
  + [#800] -- HostGAPlugin still use proxy while auto-updating
  + [#801] -- Agent fails to clean-up PID files
  + [#807] -- The agent should not emit duplicate events
  + [#808] -- The agent should more gracefully handle out-of-space disk
    errors (IOError 28)
  + [#811] -- Comments inline in /etc/waagent.conf cause config to not be read
  + [#812] -- Agent fails and isn't recoverable if an extension's log
    directory is not present anymore
  + [#823] -- Show config options in use
  + [#830] -- Ensure VM identifier is properly ordered
  + [#845] -- ')' is missed in show-configuration
  + [#850] -- Cannot get to state 'Running' with Provisioning.Enabled=n

- Add paa_fix_driver_install_detect.patch (bsc#1057888)
  + Avoid the driver from re-installing if the same version is already
    installed, this avoids an enless reboot loop

- Add paa_noref_local_install.patch (bsc#1050229)
  + Do not refresh the repos when we install the local RDMA kmp,
    repo access has already failed, no need to try again

- Fix dependencies for SLE 16 (bsc#1254129)
  + procps instead of sysvinit-tools

- Update to version 2.14.0.1 (bsc#1253001)
  + Drop - included upstream
    ~ agent-btrfs-use-f.patch included upstream
    ~ remove-mock.patch
  + FIPS 140-3 support
  + Block extensions disallowed by policy
  + Report ext policy errors in heartbeat
  + Implement signature validation helper functions
  + Prevent ssh public key override
  + Use proper filesystem creation flag for btrfs
  + Enable resource monitoring in cgroup v2 machines
  + Update agent cgroup cleanup
  + Add cgroupv2 distros to supported list
  + Clean old agent cgroup setup
  + Redact sas tokens in telemetry events and agent log
  + Add conf option to use hardcoded wireserver ip instead of dhcp request
    to discover wireserver ip
  + Support for python 3.12
  + Update telemetry message for agent updates and send new telemetry for
    ext resource governance
  + Disable rsm downgrade
  + Add community support for Chainguard OS
  + Swap out legacycrypt for crypt-r for Python 3.13+
  + Pin setuptools version
  + Set the agent config file path for FreeBSD
  + Handle errors importing crypt module
- From 2.13.1.1
  + Setup: Fix install_requires list syntax
  + Pickup latest goal state on tenant certificate rotation + Avoid
    infinite loop when the tenant certificate is missing
  + Fix unsupported syntax in py2.6
  + Cgroup rewrite: uses systemctl for expressing desired configuration
    instead drop-in files
  + Remove usages of tempfile.mktemp
  + Use random time for attempting new Agent update
  + Enable logcollector in v2 machines
  + Clean history files
  + Missing firewall rules reason
  + Add support for nftables (+ refactoring of firewall code)
  + Create walinuxagent nftable atomically

- Set AutoUpdate.UpdateToLatestVersion=n in /etc/waagent.conf
  (bsc#1244933)

- Fix %suse_version conditional in spec file so package is built
  using python2 in SLE 12 (bsc#1240385)

- Add a new version of paa_force_py3_sle15.patch to compensate for
  missing Python RPM macros in older distros

- Update to version 2.12.04 (bsc#1235140)
  + Remove agent-no-auto-update.patch handeled by config file specialization
    sub-packages
  + Remove paa_force_py3_sle15.patch handled by RPM macro
  + Remove agent-micro-is-sles.patch included upstream
  + Forward port paa_12_sp5_rdma_no_ext_driver.patch
  + Forward port remove-mock.patch
  + Add paa_direct_exec_in_service.patch
    ~ The waagent script is executable and we set the proper interpreter
    using the macro for multibuild python. Do prefix the execution in the
    service file wit the interpreter
  + Fix install_requires list syntax
  + Update spec file
    ~ Remove conditions for distros no longer maintained
    ~ Simplify build and install conditionals using macros
  + Enable GA versioning #3082 #3184 #3189
  + Cgroups api refactor for v2 #3096 #3135 #3188 #3196
  + Fix JIT for FIPS 140-3 #3190
  + reset network service unit file if python version changes #3058
  + Recognize SLE-Micro as a SLE based distribution #3048
  + Add distutils/version.py to azurelinuxagent #3063
  + Use legacycrypt instead of crypt on Python >= 3.13 #3070
  + Fix osutil/default route_add to pass string array. #3072
  + Fix argument to GoalState.init #3073
  + Add lock around access to fast_track.json #3076
  + Add DistroVersion class to compare distro versions #3078
  + LogCollector should skip and log warning for files that don't exist #3098
  + check for unexpected process in agent cgroups before cgroups enabled #3103
  + [Redo with correct source/target]: Remove check for "ibXX" interface
    format and rework mac-address regex to expand support #3150
  + Fix Ubuntu version codename for 24.04 #3159
  + Update test certificate data #3166
  + move setupslice after cgroupsv2 check, remove unit file for
    log collector and remove fiirewall daemon-reload #3223
  + Address pylint warning deprecated-method #3059
  + Run pylint on Python 3.11 #3067
  + Run unit tests with pytest on Python >= 3.10
  + Log logcollector cgroups if process is found in unexpected slice #3107
  + remove secret and use cert for aad app in e2e pipeline #3116
  + suppress pylint warn contextmanager-generator-missing-cleanup #3138
  + Switching to SNI based authentication for aad app #3137
  + updated PR template #3144
  + Avoiding mocked exception from being lost on test when using
    python 3.12: complete mocked info #3149
  + Add more useful logging statement for agent unit properties #3154
  + Remove wireserver fallback for imds calls #3152
  + Remove unused import #3155
  + Add support for Azure Linux 3 #3183
  + Fix pytest warnings #3084
  + Allow use of node 16 #3160
  + Send controller/cgroup path telemetry #3231
  From 2.13.0.2
  + #3221 Add support for nftables (+ refactoring of firewall code)
  + #3239 Create walinuxagent nftable atomically
  + Features in progress (Verify extension signature/Policy Enforcement)
  + #3200 Parse encodedSignature property from EGS
  + #3187 Add Regorus policy engine framework
  + #3222 Remove Regorus and platform check for policy enforcement
  + #3242 Telemetry (update logcollector telemetry with common properties)
  + #3208 Handle non-boolean when parsing extension manifests
  + #3211 Fix unicode type check when parsing extension manifests
  + #3133 Telemetry: high-priority events
  + #3240 Telemetry: report apparent dead code
  + #3210 Cleanup: remove AMA extension services cgroups tracking code
  + #3197 Accommodate the new behavior in OpenSSL 3.2.2 when given an
    empty input
  From 2.11.1.12
  + Remove multi config extension status only on extension delete #3172
  From 2.111.1.4
  + General Improvements
  + Improvements in telemetry for firewall settings #3110, #3124
  From 2.10.0.8
  + GA versioning #2810 #2850 #2860 #2881 #2974 #3004 #3015 #3033
  + Disabled GA versioning #2909 #2917 #3044
  + Add regular expression to match logs from very old agents #2839
  + Remove empty "distro" module #2854
  + Enable Python 2.7 for unit tests #2856
  + Add check for noexec on Permission denied errors #2859
  + Reorganize file structure of unit tests #2894
  + Report useful message when extension processing is disabled #2895
  + Add log and telemetry event for extension disabled #2897
  + Cleanup common directory #2902
  + Fix agent memory usage check #2903
  + enable rhel/centos agent-cgroups #2922
  + Add support for EC certificates #2936
  + Add Cpu Arch in local logs and telemetry events #2938
  + Clarify support status of installing from source. #2941
  + Gathering Guest ProxyAgent Log Files #2975
  + Remove debug info from waagent.status.json #2971
  + Handle errors when adding logs to the archive #2982
  + Update supported Ubuntu versions #2980
  + Fix pylint warning #2988
  + Add information about HTTP proxies #2985
  + update the proxy agenet log folder for logcollector #3028
  + Add config parameter to wait for cloud-init
    (Extensions.WaitForCloudInit) #3031 [Added in 2.10.0.8]
  + Adding AutoUpdate.UpdateToLatestVersion new flag support #3020 #3027
    [Added in 2.10.0.8]
  + Check certificates only if certificates are included in goal state #2803
  + Redact access tokens from extension's output #2811
  + Fix name of single IB device when provisioning RDMA #2814
  + Port NSBSD system to the latest version of waagent #2828
  + fix daemon version #2874
  + fix version checking in setup.py #2920
  + fix(ubuntu): Point to correct dhcp lease files #2979
  + Download certs on FT GS after check_certificates only when missing
    from disk #2907
  + Add support for EC certificates (#2936) #2943 [Added in 2.10.0.5]
  + Fix for "local variable _COLLECT_NOEXEC_ERRORS referenced before
    assignment" (#2935) #2944 [Added in 2.10.0.5]
  + Cache daemon version #2942 #2946 [Added in 2.10.0.5]
  + undo get daemon version change #2951 [Added in 2.10.0.5]
  + fix self-update frequency to spread over 24 hrs for regular type
    and 4 hrs for hotfix #2948 [Added in 2.10.0.5]
  + ignore dependencies from extensions that do not have settings #2957
    [Added in 2.10.0.6]
  + Do not reset the mode of a extension's log directory #3014
    [Added in 2.10.0.8]
  + skip cgroup monitoring if log collector doesn't start by the agent.
    [#2939] [Added in 2.10.0.8]
  + NM should not be restarted during hostname publish if NM_CONTROLLED=y
    [#3008] [Added in 2.10.0.8]
  + Daemon should remove stale published_hostname file and log
    useful warning #3016 [Added in 2.10.0.8]
  + Revert changes to publish_hostname in RedhatOSModernUtil #3032
    [Added in 2.10.0.8]
  + Recover primary nic if down after publishing hostname in
    RedhatOSUtil #3024 [Added in 2.10.0.8]

- fix a few typos in the spec file and use proper macros where
  applicable
- remove python3 requires

- Restart the agent (bsc#1227600)
  + The agent service gets restarted in post but may fail due to a missing
    config file. config files were split into their own package previously.
    When we detect that we have to restore a config file we also need
    to restart the agent again.

- Add agent-btrfs-use-f.patch (bsc#1227711)
  + Use the proper option to force btrfs to overwrite a file system on the
    resource disk if one already exists.

- Set Provisioning.Agent parameter to 'cloud-init' in SLE Micro >= 5.5
  (bsc#1227106).
- Do not package waagent2.0 in Python 3 builds.
- Drop obsolete otherproviders keyword from Conflicts statements

- Do not require wicked in non-SUSE build environments.

- Apply python3 interpreter patch in non SLE build environments
  (bcs#1227067)
- Simplify %suse_version conditionals