This week there is an important fix for the kerberos component on Jammy, there’s also a couple of installer-related chanages, here are all the notable details…

Kerberos component

The update to the lcfg-kerberos package on Ubuntu Jammy in the previous release contained a bug in the post-install script. This will have resulted in the component being left in a stopped state. The latest version (2.1.61) fixes this issue but you will need to manually restart the component, this can be automated using a cron job, like this:

!cron.additions      mADD(fixlcfgkrb)
cron.add_fixlcfgkrb  AUTO 14 * * * om kerberos isstarted -q || om kerberos start -q

Apache, ACME and Sectigo

A new preview header at ed/options/apacheconf-md-sectigo.h configures the Apache Managed Domains module to request certificates signed by Sectigo via ACME and its External Account Binding (EAB) mechanism. See the comments at the top of the file for how to use it. Feedback is welcome.

Installer

The installer for Ubuntu Focal and Jammy now passes the -u option to the ntpdate command. This directs it to use an unprivileged port for outgoing packets. This is most useful when behind a firewall that blocks incoming traffic to privileged ports, and you want to synchronise with hosts beyond the firewall.

The remaining references to the USE_NEW_INSTALLER cpp macro were removed from the LCFG layer so you can now remove any definitions of it in your headers and profiles.

Debian 12 bookworm

Minimal support has been added by the School of Physics for Debian 12 bookworm, currently this is solely aimed at those who wish to run the Proxmox virtualisation platform.

Ubuntu Noble

The packages for a few LCFG components have been updated to support Ubuntu Noble but there are no functional changes to the component code. There is now a prototype version of the installer available for those who would like to help with the early stages of testing. The new platform is still not yet in a usable state but we hope to have something ready for testing by the end of the year.

PostgreSQL

There are updates for PostgreSQL versions 14.15 and 16.6 on Ubuntu. See the security announcement for full details.

Software

There is one new package option for Ubuntu – LCFG_OPTIONS_SNMP_MIBS which can be used to install the snmp-mibs-downloader package and dependencies.

Changes to headers and package lists

Members of the Informatics Computing team can browse all the changes to the headers and package lists.

Weekly Changes – 25/11/2024 / LCFG Project by blogadmin is licensed under a Creative Commons Attribution CC BY 3.0