Merge pull request #825 from jdeathe/centos-6-develop

Release changes for 1.11.0

Author: jdeathe

.env.example

@@ -1,16 +1,16 @@
+ENABLE_SSHD_BOOTSTRAP=true
+ENABLE_SSHD_WRAPPER=true
 SSH_AUTHORIZED_KEYS=
-SSH_AUTOSTART_SSHD=true
-SSH_AUTOSTART_SSHD_BOOTSTRAP=true
 SSH_CHROOT_DIRECTORY=%h
 SSH_INHERIT_ENVIRONMENT=false
 SSH_PASSWORD_AUTHENTICATION=false
 SSH_SUDO=ALL=(ALL) ALL
-SSH_TIMEZONE=UTC
 SSH_USER=app-admin
 SSH_USER_FORCE_SFTP=false
 SSH_USER_HOME=/home/%u
 SSH_USER_ID=500:500
 SSH_USER_PASSWORD=
 SSH_USER_PASSWORD_HASHED=false
 SSH_USER_PRIVATE_KEY=
-SSH_USER_SHELL=/bin/bash
+SSH_USER_SHELL=/bin/bash
+SYSTEM_TIMEZONE=UTC

CHANGELOG.md

@@ -4,6 +4,37 @@
 
 Summary of release changes for Version 1 - CentOS-6
 
+### 1.11.0 - 2019-06-20
+
+- Deprecates `SSH_AUTOSTART_SSHD`, replaced with `ENABLE_SSHD_WRAPPER`.
+- Deprecates `SSH_AUTOSTART_SSHD_BOOTSTRAP`, replaced with `ENABLE_SSHD_BOOTSTRAP`.
+- Deprecates `SSH_AUTOSTART_SUPERVISOR_STDOUT`, replaced with `ENABLE_SUPERVISOR_STDOUT`.
+- Deprecates `SSH_TIMEZONE`, replaced with `SYSTEM_TIMEZONE`.
+- Updates source image from `centos6.10` tag to `6.10`.
+- Updates supervisord to 3.4.0.
+- Updates default value of `ENABLE_SUPERVISOR_STDOUT` to false.
+- Updates `sshd-bootstrap` and `sshd-wrapper` configuration to send error log output to stderr.
+- Updates order of values in SSH/SFTP Details log output.
+- Updates bootstrap timer to use UTC date timestamps.
+- Updates bootstrap supervisord configuration file/priority to `20-sshd-bootstrap.conf`/`20`.
+- Updates wrapper supervisord configuration file/priority to `50-sshd-wrapper.conf`/`50`.
+- Adds reference to `python-setuptools` in README; removed in error.
+- Adds `inspect`, `reload` and `top` Makefile targets.
+- Adds improved lock/state file implementation in bootstrap and wrapper scripts.
+- Adds improved `clean` Makefile target; includes exited containers and dangling images.
+- Adds improved wait on bootstrap completion in wrapper script.
+- Adds `system-timezone` and `system-timezone-wrapper` to handle system time zone setup.
+- Adds system time zone validation to healthcheck.
+- Fixes port incrementation failures when installing systemd units via `scmi`.
+- Fixes etcd port registration failures when installing systemd units via `scmi` with the `--register` option.
+- Fixes binary paths in systemd unit files for compatibility with both EL and Ubuntu hosts.
+- Fixes use of printf binary instead of builtin in systemd unit files.
+- Fixes docker host connection status check in Makefile.
+- Fixes make clean error thrown when removing exited containers.
+- Removes support for long image tags (i.e. centos-6-1.x.x).
+- Removes system time zone setup from `sshd-bootstrap`.
+- Removes redundant directory test from `sshd-bootstrap`; state file ensures it's a one-shot process.
+
 ### 1.10.1 - 2019-02-28
 
 - Deprecates use of `supervisor_stdout` - the default value of `SSH_AUTOSTART_SUPERVISOR_STDOUT` will be switched to "false" in a future release.

Dockerfile

@@ -1,6 +1,6 @@
-FROM centos:centos6.10
+FROM centos:6.10
 
-ARG RELEASE_VERSION="1.10.1"
+ARG RELEASE_VERSION="1.11.0"
 
 # ------------------------------------------------------------------------------
 # - Import the RPM GPG keys for repositories
@@ -23,13 +23,18 @@ RUN rpm --rebuilddb \
 		centos-release-scl-rh \
 		epel-release \
 		https://centos6.iuscommunity.org/ius-release.rpm \
+	&& yum -y install \
+			--setopt=tsflags=nodocs \
+			--disableplugin=fastestmirror \
+		inotify-tools-3.14-1.el6 \
 		openssh-clients-5.3p1-123.el6_9 \
 		openssh-server-5.3p1-123.el6_9 \
 		python-setuptools-0.6.10-4.el6_9 \
 		sudo-1.8.6p3-29.el6_9 \
 		yum-plugin-versionlock-1.1.30-42.el6_10 \
 		xz-4.999.9-0.5.beta.20091007git.el6 \
 	&& yum versionlock add \
+		inotify-tools \
 		openssh \
 		openssh-clients \
 		openssh-server \
@@ -45,7 +50,7 @@ RUN rpm --rebuilddb \
 		sysvinit-tools \
 	&& yum clean all \
 	&& easy_install \
-		'supervisor == 3.3.5' \
+		'supervisor == 3.4.0' \
 		'supervisor-stdout == 0.1.1' \
 	&& mkdir -p \
 		/var/log/supervisor/ \
@@ -93,33 +98,33 @@ RUN ln -sf \
 		-e "s~{{RELEASE_VERSION}}~${RELEASE_VERSION}~g" \
 		/etc/systemd/system/centos-ssh@.service \
 	&& chmod 644 \
-		/etc/{supervisord.conf,supervisord.d/sshd-{bootstrap,wrapper}.conf} \
+		/etc/{supervisord.conf,supervisord.d/{20-sshd-bootstrap,50-sshd-wrapper}.conf} \
 	&& chmod 700 \
-		/usr/{bin/healthcheck,sbin/{scmi,sshd-{bootstrap,wrapper}}}
+		/usr/{bin/healthcheck,sbin/{scmi,sshd-{bootstrap,wrapper},system-{timezone,timezone-wrapper}}}
 
 EXPOSE 22
 
 # ------------------------------------------------------------------------------
 # Set default environment variables
 # ------------------------------------------------------------------------------
 ENV \
+	ENABLE_SSHD_BOOTSTRAP="true" \
+	ENABLE_SSHD_WRAPPER="true" \
+	ENABLE_SUPERVISOR_STDOUT="false" \
 	SSH_AUTHORIZED_KEYS="" \
-	SSH_AUTOSTART_SSHD="true" \
-	SSH_AUTOSTART_SSHD_BOOTSTRAP="true" \
-	SSH_AUTOSTART_SUPERVISOR_STDOUT="true" \
 	SSH_CHROOT_DIRECTORY="%h" \
 	SSH_INHERIT_ENVIRONMENT="false" \
 	SSH_PASSWORD_AUTHENTICATION="false" \
 	SSH_SUDO="ALL=(ALL) ALL" \
-	SSH_TIMEZONE="UTC" \
 	SSH_USER="app-admin" \
 	SSH_USER_FORCE_SFTP="false" \
 	SSH_USER_HOME="/home/%u" \
 	SSH_USER_ID="500:500" \
 	SSH_USER_PASSWORD="" \
 	SSH_USER_PASSWORD_HASHED="false" \
 	SSH_USER_PRIVATE_KEY="" \
-	SSH_USER_SHELL="/bin/bash"
+	SSH_USER_SHELL="/bin/bash" \
+	SYSTEM_TIMEZONE="UTC"
 
 # ------------------------------------------------------------------------------
 # Set image metadata