Release of 1.23.4

• Fixed:
  • Ensure that the openscap-scanner package is installed during SSG runs
• Added:
  • A function to fetch the available SSG profiles on a target system
• Changed:
  • Added OEL nodeset
    -----BEGIN PGP SIGNATURE-----

iQIzBAABCQAdFiEEsj6OJvlSM48hFRLXBoN0d00lrRkFAmDt7osACgkQBoN0d00l
rRmlNg/6ArSnqwsECzy9ipvaT6SE/mcGYslgogyzXCNqtV4TEFOVijYmCswNgYH4
xvHqRJg9rTPIYeAavAmN1DkNzgiyJSvxj1r0cA4VOmaiwjThWMe42F8zir67MMZ5
zwohkgRtMDucJIsGN1NBu2QqSEsY13HlnGuHQz+hiX+IGkbQs+0HVWraT9TDTdmx
XTDOK/7wf12PyAXmQRK9S+9wAdgvvszl8A4Hurg1/RhUvzJWcXSZ4tPjAKm0zVK2
RWG8XIMtgqoEp2c8jEsr51DWIkgP9rAjhvFqcI3elT0TIIAVIcVw+IhSvrTrx/Oi
0oyLzlVZXo5wAu9m8g4eG5eT7ZmQH0xKdZnyKWFdCtLklRz05c0FksxP2xzeuSlF
e9BOJauQXH6Z7uuYzWP/+cpj53KDxYShsHqcRwPmaD3NRfGRo5oyPbtb+fRC3WHW
stePXTWIWIVIH/y9lDYQ89UkiAgeO2BF7tTj+RVUPMWzmNIuu2lr0dw4jQrs/RSK
gsrzTxuQky9w/O9RQovXKSt1lLnqWjoigtJUfmaw0oAzbprqz8hhu+9OMJXXhNx1
h6+SC1XR5S6K7mKgvRsR6a6HKtW8B8+kjSq4f92aQ+8d4F9z+YnBX2Mh3+ive7iL
7KgsaTXL8WJ+1/Pl04d1mGZ7XrHnMeb18KDY7tVQGKGle3sulCM=
=23nE
-----END PGP SIGNATURE-----

Release of 1.23.3

-----BEGIN PGP SIGNATURE-----
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=sVmL
-----END PGP SIGNATURE-----

Release 1.23.2

• Fixed:
  • Fail an acceptance test when an explicitly-specified nodeset for an
    acceptance test suite does not exist and the suite is configured
    to fail fast (default behavior).
  • The usual way of registering RHEL systems had to be changed to activate
    immediately when called to function properly.
    -----BEGIN PGP SIGNATURE-----

iQIzBAABCQAdFiEEsj6OJvlSM48hFRLXBoN0d00lrRkFAmC3kYUACgkQBoN0d00l
rRnYkA/+LiF3ro+ygJUifVbL/qEE6/0V8Cojo9r+jz72nR6ZhuvsnUXnQPg81Qgx
6apiYTY0Szw00oyNcQiW8Z/pV/cyGpYLXn/DoOeCxPRG0bRwaVNjrT5UQrRYhcti
cdghvXwuTr2/NZBNkCWW/UuLBU5H0FPpqVe+pE3bOsjUh2WDfrET20wy5GkNoJ/s
nNFlu1FC41oqOUxXxqAut2gtFwuYeiGfqka3OaItP/LAhpughNqY/cdKoRZUjKHz
2gw7P6pWIMVzjOvmhVCzJ9Rht/Zrnv90cAEA2SoRDgQrLLWamOjO2yG7t3iTOq/C
n4TDT0lkMIp7QSkFYIsbkVEQ8gkKC4IZQ0DtJEF+O2e3OmpRVaQejIjOUEFMYJXW
XVF2xNLwMZHTLR9YyddqUkq7xVP4yz6OaRnGntbuWQ32KSN8NupgqdiTmcnn48UO
qRZ6Q5OnTkXHeUa+whCi0OCLjBPtd5pADbR/uZJjNK7bWyRob6QpAhydSXOwxnFH
pCvDc3T5s1PSjom7o8SFSrzVy1nyWl3hSPJsTdjgsGjGPd3lN/SFQjm5T3cPi9f7
QtiU3d2jcyCAXA7Ep4JL4VOuidaGYDTk5cqeu9lj1U5nLTs/y5LnY9IiStN4cS/R
mb9yqzYL9MC5x95ZeNO9e+GQz2VwwaE61sKUWWVb+Ep7/X6DigU=
=O3Q7
-----END PGP SIGNATURE-----

Release of 1.23.1

• Fixed:
  • The SSG default branch is now the latest numeric tag instead of the one
    closest to the head of the default branch. The tag closest to the default
    branch has drifted over time.
  • Removed direct call to docker when copying out inspec results
  • Typos in copy_in when running against docker
• Added:
  • Simp::BeakerHelpers::Inspec.enable_repo_on(suts) to allow users to easily
    enable the Chef repos for inspec
  • Beaker tests for inspec and SSG basic functionality
  • GitHub Actions for acceptance testing where possible
    -----BEGIN PGP SIGNATURE-----
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=M/4j
-----END PGP SIGNATURE-----

Release of 1.23.0

• Added:
  • For podman support:
    • Bumped the required beaker-docker to between 0.8.3 and 2.0.0
    • Added a dependency on docker-api between 2.1.0 and 3.0.0
  • Make SSG failures have verbose output to make remediation easier
• Fixed:
  • Ensure that containers use the correct method for copying files
    -----BEGIN PGP SIGNATURE-----
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=wbnD
-----END PGP SIGNATURE-----

Release of 1.21.3

• Fixed:
  • Allow all methods that can safely take SUT arrays to do so
  • Ensure that pfact_on returns a Hash if appropriate
  • Fix container support in copy_to
• Added:
  • Explicitly support podman local and remote in copy_to

Release of 1.21.2

• Fixed:
  • Version mismatch: 1.21.1 was tagged with an incorrect version
    in version.rb.

Release of 1.21.1

• Added:

  • update_package_from_centos_stream method
  • install_latest_package_on method

• Fixed:

  • Removed some of the extraneous calls to facter

Release of 1.20.1

• Fixed:
  • Ensure that yum calls commands appropriately depending on whether or not
    packages are already installed.
  • Also change all HostKeyAlgorithms settings for SSH connection

Release of 1.20.0

• Added:
  • A enable_epel_on function that follows the instructions on the EPEL
    website to properly enable EPEL on hosts. May be disabled using
    BEAKER_enable_epel=no.
  • An Ubuntu nodeset to make sure our default settings don't destroy other
    Linux systems.
  • Added has_crypto_policies method for determining if crypto policies are
    present on the SUT
  • Added munge_ssh_crypto_policies to allow vagrant to SSH back into systems
    with restrictive crypto policies (usually FIPS)
• Fixed:
  • Modify all crypto-policy backend files to support ssh-rsa keys