Release 1.4.1

We are happy to announce the release 1.4.1. 👍🤔

Features added:

• Allow installation of ruamel.yaml via pip (#194)
• Add support for openSUSE Leap 16 (OpenNebula 7.2) (#191)
• Add support for SLES 15 (OpenNebula 7.2) (#202)
• Add ability to rename net/pci/vfio devices (#208)
• Add Open vSwitch role (#168)
• Improve infra role (#173)
• Split precheck role into categories (#198)
• Add packaging dependency group (#210)
• Add requests to packaing/pyproject.toml (#212)
• Add simple logrotate/rsyslog management (#207)
• Sunstone views role (#176)

Features removed:

• Remove deprecated OneProvision support (#199)

Bugs fixed:

• Add missing oneform_auth file in sync_fed.yml (fix) (#201)
• Downgrade FRR to 10.5 (workaround) (#205)
• Gui role templates: Remove max file size constraint to prevent upload issues (#192)

Please enjoy! 🤗

Full Changelog: release-1.4.0...release-1.4.1

Release 1.4.0

We are happy to announce the release 1.4.0. 👍😇

Features added:

• Add 'form' role to manage opennebula-form service (>= 7.1.80) (#184)
• Use drop-ins to configure oneprometheus systemd units (#187)
• Add helper/ntp role to manage NTP config (#174)
• Add helper/mkfs role to manage filesystems (#167)
• Eliminate ID prediction in generic DS mode (#142)
• Install EPEL package in RHEL (#163)

dedicated config parsers

• Do not use := operator in python code (rhel8) (#143)
• Add cfgtool module with parsers + refactor One/Rc/Yaml configs (#141)

frontend hostname validation

• Improve hostname check error messages (#155)
• Add precheck to fail on invalid frontend hostname resolution (#152)

pci passthrough and sr-iov support

• Add set_driver option to manage PCI/SR-IOV drivers (#177)
• Guard against accidental PCI manipulation of primary NICs (#175)
• Rework PCI passthrough support / Add SR-IOV (#170)
• Condition fix (#158)
• Prevent unneeded pci_passthrough code execution (fix) (#156)
• new PCI Passthrough roles (#150)

kernel management

• Add helper/kernel module management (#171)
• Add helper/kernel role to manage Linux kernel's cmdline (#166)

Features removed:

• Remove parallel federation deployment mode (#147)

Bugs fixed:

• Fix GPG key checks with asymmetric repos_enabled distribution (#196)
• add repos_enabled_defaults to be able to overwrite it globally with repos_enabled (#190)
• Update Ceph related roles (#186)
• Skip software-properties-common for debian13 (fix) (#185)
• Always set force_archive t/f for the archive module (fix) (#182)
• Add missing sync_ha operation for FireEdge (#180)
• Remove one_token from ansible logs (fix) (#164)
• Use collections_path instead of collections_paths (fix) (#154)
• Make one-deploy work with ansible-core 2.19+ (#153)
• Workaround force_ha + onehost "no leader" sync problem (#144)
• Update molecule envs / remove apt-fixup playbook (#145)
• Include macaddress in netplan bridge (#137)
• Always construct evpn_rr_servers using correct evpn_if (#139)
• Correctly remove unattended-upgrades package (#138)

Please enjoy! 🤗

Release 1.3.0

We are happy to announce the release 1.3.0. ☝️😌

New Features added:

• Add Rank and DRS scheduler support (#130)
• Make pre-enabled DNF repos customizable (#128)

Bugs fixed:

• Updates ceph version compatibility constraints (#124)

Please enjoy! 🤗

Release 1.2.1

We are happy to announce the release 1.2.1. 😻

New Features added:

• Add support for Transparent Proxies (#95)
• Deploy FireEdge Sunstone as the main WebUI with SSL reverse proxy Nginx/Apache (#101)
• Add ssl-ha Molecule scenario testing + general Molecule improvements (#115)
• Add support for OneProvision (#111)
• Implement password strength verification (#110)
• Isolate Ceph playbooks with hatch/UV + decomission poetry (#112)
• Refactor unattended upgrades disabler (#117,#121)
• Add ansible-lint (#113)

Bugs fixed:

• Improve ds "generic" and "simple" modes (#92)
• Improve security in sync_ha and sync_fed (#116)
• Fix token_remote_support configuration in FireEdge Sunstone (#120)
• Correctly handle vault-encrypted values in inventory (#119)

Please enjoy! 🤗

Release 1.2.0

We are happy to announce the release 1.2.0.

New Features added:

• Disable automatic updates on deb based systems (#71)
• Enable community Ceph repos for jammy and el9 (#76)
• Add support for custom / insecure repositories (#77)
• Add support for 6.10 / Ubuntu 24.04 + Debian 12 (#81)
• Improve infra role + Add persistent mounts (#84)

Features removed:

• Drop support for PostgreSQL (#73)
• Drop support for legacy OneGate Proxy (#74)

Bugs fixed:

• Datastore role should use normpath instead of realpath (#60)
• Leader detection may try incorrect SSH user in HA mode (#56)
• Set operations may cause reordering of lists (#62)
• Admin pubkey feature may produce duplicated keys (#64)
• Correctly construct evpn_cluster_id (#75)
• Enable move_ip by default for bridge-like VNETs only (#79)
• Always force become for onehost sync (#82)
• Always apply unattend_disable after fact gather (#83)
• Workaround file permission issues in infra role (#86)
• Ensure string type for critical vars (#88)
• Redo virtqemud disabler (#89)
• Deprecate galaxy and poetry versioning (#90)

Please enjoy! 🤗

Release 1.1.0

We are happy to announce the release 1.1.0.

New Features added:

• Deploy OpenNebula Front-ends as VMs
• Support for OpenNebula Federation Zones.
• New role to deploy FRR - EVPN routers, to ease the deployment of VXLAN networks
• Install Python requirements as virtualenv on demand (#44)
• Support SQLite DB backend (#35)
• APT/DNF cache control improvements (#33)
• Divide site.yml playbook into 3 skippable stages (#53)

Bugs fixed:

• Fix an issue handling GPG keys (#12)
• Fix minor typo in documents (#8)
• Fix Debian repository URL (#47)
• Fix Apparmor permissions for datastores (#41)
• Fix issues in Molecule tests (#34 + #37)

Please enjoy! 🤗

Release 1.0.0

We are happy to announce the release 1.0.0 🥳 ✨

Features added:

• Ansible Galaxy collection structure
• Support for Debian / RedHat-like Linux distros
• Support for both CE and EE OpenNebula (6.6, 6.8)
• Support for both single and HA Front-ends
• MariaDB / PostgreSQL deployment
• OneGate Server / Proxy deployment
• OneFlow Server deployment
• Sunstone and FireEdge deployment
• Apache2 / Passenger Sunstone deployment
• Prometheus Server / Exporters deployment (EE-only)
• Grafana Server deployment (EE-only)
• Ceph cluster deployment (via the ceph-ansible project)
• Ceph datastore management
• OpenNebula KVM Node management (including fixes for Libvirt instances)
• Semi-automated Datastore configuration
• Semi-automated Datastore symlink management
• Semi-automated Networking configuration
• Semi-automated Networking IP / bridging management
• Auto-generated SSH jumphost / bastion solution
• Auto-generated SSH keys
• Molecule-based integration testing

Please enjoy! 🤗

Release 0.1.0

Initial set of optimized OpenNebula deployment playbooks dedicated for public use.

Features:

• Ansible Galaxy collection structure
• Debian / RedHat-like Linux distros
• CE / EE OpenNebula
• MariaDB / PostgreSQL
• Single / HA Front-end
• OneGate Server / Proxy
• OneFlow Server
• Sunstone and FireEdge Servers
• Prometheus Server / Exporters (EE-only)
• Grafana Server (EE-only)
• OpenNebula KVM Node management (including fixes for Libvirt instances)
• Semi-automated Datastore configuration
• Semi-automated Datastore symlink management
• Semi-automated Networking configuration
• Semi-automated Networking IP / bridging management
• Auto-generated SSH jumphost / bastion config
• Auto-generated SSH keys (password-less login)
• Predefined easy-to-use Ansible tags
• Markdown documentation for each role
• Simple Makefile for handling common tasks
• Apache-2.0 License