Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

amazon-ssm-agent-3.3.40.0-1.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

Name: amazon-ssm-agent Distribution: openSUSE Tumbleweed
Version: 3.3.40.0 Vendor: openSUSE
Release: 1.1 Build date: Fri Feb 16 21:44:16 2024
Group: System/Management Build host: h02-ch2a
Size: 106969345 Source RPM: amazon-ssm-agent-3.3.40.0-1.1.src.rpm
Packager: https://bugs.opensuse.org
Url: https://github.com/aws/amazon-ssm-agent
Summary: Amazon Remote System Config Management
This package provides the Amazon SSM Agent for managing EC2 Instances using
Amazon EC2 Systems Manager (SSM).

The SSM Agent runs on EC2 or on-premise instances and enables you to quickly
and easily execute remote commands or scripts against one or more instances.
When you execute a command, the agent on the instance processes the document
and configures the instance as specified.

This collection of capabilities helps you automate management tasks such as
collecting system inventory, applying operating system (OS) patches, automating
the creation of Amazon Machine Images (AMIs), and configuring operating systems
(OSs) and applications at scale. Systems Manager works with managed instances:
Amazon EC2 instances, or servers and virtual machines (VMs) in your on-premises
environment that are configured for Systems Manager.

Provides

Requires

License

Apache-2.0

Changelog

* Tue Feb 13 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 3.3.40.0
    * Fix issue to execute aws:updateSSMAgent plugin through aws:rundocument plugin
    * Update Messaging module to switch off ec2messages
      when ssmmessages connected successfully
    * Update SSM Agent Minor version from 3.2 to 3.3
  - from version 3.2.2222.0
    * Upgrade minimum go version in go.mod file to go 1.19
    * Upgrade go-git package to v5.11.0
    * Fix for bad default manifest url when updating EC2Config
  - from version 3.2.2143.0
    * Fixed plugin path traversal logic
    * Updated aws:application plugin default param
    * Fixed default param in psmodule
    * Upgraded GoLang to version 1.21.5
  - from version 3.2.2086.0
    * Added Agent config to configure session logs destination
    * Added data channel acknowledgement functionalities
    * Added redirect handler and timeout for HTTP client
    * Added steps to verify aws-cli installation for domainJoin plugin
    * Added support for Ubuntu 23.04, Debian 11.7 & 12, and SUSE 15.5
    * Adjusted random number generator logic used to get filename in downloadContent plugin
    * Fixed Agent to gather application inventory from both rpm and
      dpkg package managers if present in Unix instances
    * Bump golang.org/x/crypto/ssh from 0.14.0 to 0.17.0
  - from version 3.2.2016.0
    * Added telemetry for agent core in-proc executor usage
    * Added retries for Agent installation with snap on Greengrass
    * Added code to update Agent config to use only Onprem Identity in Greengrass
    * Added support for macOS 14 (Sonoma)
    * Added Onprem registration support using ssm-setup-cli
    * Fixed docker installation issues in aws:configureDocker plugin
    * Fix for document worker and session worker not logging when
      custom seelog configuration missing parameters
    * Updated allowed regex pattern in S3 URI
    * Update Agent IoT Greengrass component minor version
    * Updated SUSE version in Seamless Domain Join script
    * Updated Greengrass component workflow to get installed Agent version and update
      Agent only when the installed Agent version doesn't match with Greengrass
      component Agent version
    * Upgraded GoLang version that builds agent binaries with to 1.20.11
  - Update Go version requirement to 1.21
* Mon Dec 11 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 3.2.1798.0
    * Bump golang.org/x/net from 0.15.0 to 0.17.0
    * Upgraded GoLang to version 1.20.10
    * Fixing race condition in session datachannel unit test
  - from version 3.2.1705.0
    * Updated MGS Interactor to send 'Failed' status on agentJob parsing error
    * Added error handling for Linux DomainJoin when service account credentials empty
    * Fix for panic scenario in when running aws:configureDocker plugin
    * Upgraded GoLang to version 1.20.8
    * Upgraded golang.org/x/net to v0.15.0
    * Added support for macOS 13 (Ventura)
  - from version 3.2.1630.0
    * Fix credential retrieval retry logic in credential refresher
    * Reducing retrieval log level to debug in the credential
      refresher after more than 3 retrieval retries
    * Fix for EC2 credential retrieval errors not being
      propagated to the credential refresher
    * Fixing agent version input format validation
    * Fix downloadPlatformOverride for AlmaLinux
    * Fixed issue where removing seelog.xml file doesn't
      revert minimum log level back to INFO
    * Ignore non-audit files in audit folder
  - from version 3.2.1542.0
    * Add aws:updateSSMAgent plugin support for Flatcar Linux
    * Add fix to resolve manifest url during agent update when using stable keyword
    * Fix multiple issues causing tight loops during IPC connection scenarios
    * Sign deb and rpm installer packages for Linux instances using new key
    * Use file based IPC by default for amazon-ssm-agent
      and ssm-agent-worker communication in Darwin
* Thu Aug 17 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 3.2.1478.0
    * Added fix to propagate exit code properly when command fails to start
    * Added control channel acknowledgement functionalities
    * Added flag to specify go version used for gosec and
      govulncheck in static analysis script
    * Added support for RHEL 8.7, 8.8, 9.1, 9.2
    * Added support for Rocky Linux 8.7, 9.0, 9.1, 9.2
    * Added support for Oracle Linux 8.7, 9.1, 9.2
    * Update go version to 1.20.7
  - from version 3.2.1377.0
    * Stopped saving instance profile credentials to disk
    * Added static agent security scans to makefile
    * Updated Greengrass component minor version
  - from version 3.2.1297.0
    * Added retries to snap uninstall call in setupcli
    * Fix for windows shutdown executable not found when compiled with golang1.19+
    * Fix to return correct Agent Job ID for ack after AgentJobParseError
    * Pass golang contexts for network calls in agent core to terminate cleanly
    * Remove credential file dependency in agent workers implemented in 3.2.x.x versions
    * Report MGS Connection Channel status to Health table
    * Update Dockerfile to use Golang image from ECR repository
  - from version 3.2.1241.0
    * Get bucket region using signed HeadBucket request
    * Updated golang.org/x/net version to 0.10.0 and
      golang.org/x/crypto version to 0.9.0
    * Update go version to 1.19.10
  - from version 3.2.1041.0
    * Add retry to handle stream data acknowledge messages
    * Support latest as a version in configurePackage plugin
    * Updated AWS GO SDK to v1.44.261 and disabled IMDSv1 fallback logic
    * Use IP address to connect to destination server in port session
  - from version 3.2.985.0
    * Add Domain Join support for RHEL 8.7 and AL2022
    * Add Support to send aws:updateSSMAgent replies through MGS
    * Retrieve and set interface name dynamically in
      aws:domainJoin plugin for Ubuntu
* Mon May 22 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 3.2.923.0
    * Update Dockerfile Go version to 1.19
    * Add reporting of MGS connection status
    * Add support for updating to agent version marked stable
    * Add status code to MGS ack and send on message process failure
    * Update golangci-lint configuration
    * Add e2e tag to session shell tests
* Sun Apr 16 2023 Dirk Müller <dmueller@suse.com>
  - update to 3.2.815.0:
    * Add EC2 credential fallback for AssumeRoleUnauthorizedAccess
      error
    * Add CloudWatch log upload support for document and session
      worker
    * Add set-hostname support in domainjoin plugin for windows
    * Add wait time in Agent updater to avoid installation issues
      caused during reboots initiated by domainjoin plugin
    * Add support for AlmaLinux
    * Fix KeepHostName parameter without DNS IP address parameter
      in domainJoin plugin
    * Fix issue where carriage returns cause json conversion to
      fail in aws:softwareInventory plugin
    * Remove IMDS calls in Onprem during health check
    * Remove S3 global endpoint fallback logic
    * Update cli descriptions for registration parameters
    * Update go version to 1.19.6
  - update to 3.2.582.0:
    * Modified EC2 credential fallback logic
  - update to 3.2.574.0:
    * Fixed go-vet issues by passing mocks by value
    * Updated domainjoin and cloudwatch executables for windows
  - update to 3.2.532.0:
    * Removed explicit setting of EC2 aws credential profile
    * Added public key to registration info
    * Sends non-interactive command errors that occur before
      command execution to data channel
    * Added instance id verification to registration process
* Fri Jan 13 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 3.2.419.0
    + Added minimum retry sleep for Registrar RegisterManagedInstance calls
    + Explicitly skip AZ info check for on-prem and ECS targets
    + Fix for SSM-Agent that is unable to start on Apple Mac M1's (mac2.metal instances)
    + Ensuring powershell path is set to system directory on Windows
    + Load DLLs with using system/absolute paths on Windows
    + Added workaround for Samba limit when loading Active Directory ids
    + Dynamically get network interface name for SeamlessDomainJoin
    + Added install-yum-rpm to makefile to install agent on host from source code
    + Added logging for specifying credential source
    + Refactored tests to remove mocks from production binaries
    + Updated Windows DomainJoin plugin SharpZipLib and Newtonsoft.json dependencies
  - from version 3.2.345.0
    + Updated yaml.v3 dependency
* Wed Nov 23 2022 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 3.2.286.0
    + Separated EC2 identity vault manifest from OnPrem identity vault manifest
    + Fix for credential retrieval blocking os termination signals
    + Fix for agent updater using shared credentials on EC2
    + Added guards against panic for agent identity health checks
    + Added logging around agent module start/stop
  - from version 3.2.183.0
    + Added logging when assuming identity
    + Increased retries to ECS metadata endpoint
    + Added linux debug build to makefile
    + Implemented aws sdk logging interface
    + Updated agent minor version to 3.2
    + Added functionality to retrieve agent credentials from Systems Manager on EC2
  - from version 3.1.1927.0
    + Update shell for Session Manager on MacOS
* Tue Nov 01 2022 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 3.1.1856.0
    + Lower message length threshold for cloudwatch log streaming
    + Ran gofmt and goimports with golang version 1.19
    + Report AvailabilityZone and AvailabilityZoneId in health pings
    + Update AWS Go SDK to v1.44.78
    + from version 3.1.1767.0
    + Fix samba configuration for sub-domains
    + from version 3.1.1732.0
    + Add code in document/session worker to fallback to default
      identity selector when runtime config not present
    + Fix to handle command-line-arguments in document/session
      worker when launched by old agent workers
  - from version 3.1.1634.0
    + Fallback to file based IPC if named pipe creation times out
    + Increase tls handshake timeout in http download client
    + Log mds client timeout errors as WARN
  - from version 3.1.1575.0
    + Added separate metric for snapd running apps failure during update
    + Fixed idle session timeout with smux keep alive configuration based on CLI version
    + Updated AgentTaskComplete message retry
    + Updated go version to 1.18.3
  - from version 3.1.1511.0
    + Collect kernel version in InstanceDetailedInformation
    + Support separate output stream for non-interactive session
    + Cleanup default log group name for runcommands
    + Updated rpm spec file to include build id
  - from version 3.1.1476.0
    + Fix port session premature close when local server is not connected before timeout
  - from version 3.1.1446.0
    + Add created date to AgentJobAck message
    + Disable smux keep alive to use idle session timeout feature
    + Fix unit-tests running on windows
  - from version 3.1.1374.0
    + Added timeout for s3 HEAD requests
    + Added vpc address deny to port forwarding
    + Fixed for reboot scenario in configure package plugin
    + Fixed goroutine leak in seelog library
    + Fixed nullpointer segmentation fault in configure package plugin
    + Improved error handling in manifest download in updater
    + Improved worker initialization to improve startup failure logging
* Thu Apr 21 2022 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Fix mangled ExlusiveArch field
* Wed Apr 20 2022 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 3.1.1260.0
    + Added missing check for invalid S3 path parameter
    + Added support for domain join using a non-local username
    + Fixed broken links in README.md
    + Fixed ECS Exec issue where agent was using environment variables for credentials
    + Updated Ec2Detector test to query smbios directly for system information
  - from version 3.1.1208.0
    + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
    + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
  - from version 3.1.1188.0
    + Added new ec2detector module to determine if agent is on EC2
    + Added support for port forwarding to remote host
    + Added quotes around inventory parameter ValueName on Windows
    + Fix for domain join DNS IP assignments in shared directories
    + Replaced namedpipe updater test with ec2detector test
  - from version 3.1.1141.0
    + Add application inventory by file for Bottlerocket
    + Fix infinite retry logic to send failed replies in MGSInteractor
    + Remove usage of io/fs package
  - from version 3.1.1080.0
    + (windows only) Remove symlink scan during update
  - from version 3.1.1045.0
    + Fixed sourceHash validation for aws:application document plugin
    + Added document parameter validation for values passed to target document of aws:runDocument plugin
    + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
    + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
  - from version 3.1.1004.0
    + Added platform detection for Bottlerocket OS
    + Consolidated regional endpoint generation to common endpoint module
  - from version 3.1.941.0
    + Added support for Rocky linux
    + Fixed sharefile/shareprofile not being propagated to updateutil
    + Fixed incorrect darwin platform detection post BigSur
    + Fixed log flush issue in updater
    + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
    + Updated go version to 1.17.6
  - from version 3.1.821.0
    + Implement new core module named MessageService to start processing commands from both MGS and MDS
    * Merge functionalities from RunCommandService core module and Session core module.
    * Receive run command documents through MGS if connected and fallback to MDS otherwise.
      This functionality requires appropriate permissions for both endpoints and will be rolled
      out gradually to end users.
    * Provide filesystem based idempotency check to avoid duplicate run command document execution.
    * Increase default run command pool buffer size from 1 to 5 to load additional documents
      before-hand for processing.
    + Fix nil pointer deference panic produced in named pipe test case during agent update
    + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
  - from version 3.1.804.0
    + Add support for upstart when running get-diagnostic command using ssm-cli
    + Fix systemctl service name to support older versions of systemctl
    + Include changes to facilitate testing
    + Update DNS server selection logic for seamless domain join on linux and darwin
    + Update go version to go1.17.5
    + Update golang sys package dependency
  - from version 3.1.715.0
    + Derive default directories from appconfig on Darwin
    + Set x-bit on newly-created directories
  - from version 3.1.634.0
    + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
  - from version 3.1.630.0
    + Added greengrass component recipe for the new SystemsManagerAgent component
    + Added support for registering agent on a greengrass device
    + Added support for downloading more than 1000 objects in downloadContent
    + Fixed retry logic for onprem and s3 upload
    + Fixed unit tests when running on Mac
    + Update AWS SDK to v1.41.4
    + Update logic to retrieve platform details for Rocky Linux
  - from version 3.1.501.0
    + Add diagnostics command to ssm-cli
    + Fix caching for onprem credentials
    + Additional configuration options for Seamless Domain Join
    + Gracefully exit session if group of runas user is modified
    + Skip retries for cert validation errors in S3 HEAD requests
    + Fix DNS failures on CentOS 8.2
    + Update several dependencies
  - from version 3.1.459.0
    + Fixed a bug with powershell command for Inventory
  - from version 3.1.426.0
    + Fixed cpu spike issue manifesting on snap
    + Fixed issue with version comparison in EC2Config update plugin
    + Fixed panic when command output was being truncated
    + Updated build to use go1.16.8
    + Removed Profile from inventory powershell commands on Windows
  - from version 3.1.338.0
    + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
    + Fix to include applications without UninstallString in Inventory for Windows
    + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
    + Fixed a bug where RunCommand could delay executions for up to 15 minutes
  - from version 3.1.282.0
    + Add serial port logging of AwsNitroEnclaves package version on windows during startup
    + Allow usage of existing loggroup/logstream when the user does not have create permission
    + Change service interrogate request log to debug
    + Cleanup old surveyor channel files on startup
    + Fix filehandle leak in windows leading to agent going offline
    + Fix to schedule correct next run time during orchestration directories cleanup
    + Fix to sequentially update correct runcount value in the document bookkeeping file
    + Fix a bug with version parsing EC2Config updater
    + Updated rpm packaging for fips compliance
  - from version 3.1.192.0
    + Added darwin arm64 to makefile
    + Added logic to limit orchestration directory cleanup
    + Added packaging for public SSM Agent container image
    + Fixed cloudwatch endpoint for telemetry metrics requests
    + Fixed handling of Windows filepaths and mutex locks
    + Fixed agent worker handling of OS signals and termination channel requests
    + Updated datachannel retry strategy to not retry for a specific error scenario
    + Updated default gomaxproc value for Windows
    + Update build to use go1.16.6
  - from version 3.1.127.0
    + Added a workaround for windows random halts
    + Fixed race condition during reboot document execution
  - from version 3.1.90.0
    + Updated to version 3.1
    + Updated build to build statically linked binaries for linux 64bit
    * Minimum supported linux kernel version for linux 64bit is 3.2+
    + Fixed permissions for docker config file
    + Fixed issue with ubuntu prerm and postinst scripts
    + Fixed issue where processor stop was being called twice
  - from version 3.0.1390.0
    + Added config option to delete orchestration folder
    + Added snapcraft packaging config
    + Added workaround for aws:runDocument status bug
    + Added improved handling of file closure
    + Added support for go mod and updated build to use go 1.16.4
    + Fixed bug parsing vpce s3 urls
    + Refactored use of agent identity in agent cli
    + Updated check if agent is running as windows service
    + Updated handling of session cancellation to still send output to client side
    + Updated interactive session exit code logic to match non-interactive mode
    + Updated vendor dependencies
  - Update directory path for GOPATH
* Fri Jun 25 2021 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 3.0.1295.0
    + Added configurable custom identity and identity consumption order
    + Added cross-account domain join
    + Added cleanup for older versions of updater artifacts
    + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
    + Added a workaround for log file contention on Windows
    + Added synchronization to RunCommand service stop
    + Changed hibernation log level
    + MacOS executables are now signed
    + Removed delay in non-interactive session type
* Wed May 19 2021 Robert Schweikert <rjschwei@suse.com>
  - Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
    + For detailed changes see RELEASENOTES.md
    + Drop fix-version.patch replaced by sed expression in spec file
    + Drop remove-unused-import.patch no longer included from upstream
    + Drop fix-config.patch all SUSE distros use systemd
    + Remove amazon-ssm-agent.service included in upstream source, use it
    + Move all binaries into sbin and fix the hard coded config path via sed

Files

/etc/amazon
/etc/amazon/ssm
/etc/amazon/ssm/amazon-ssm-agent.json.template
/etc/amazon/ssm/seelog.xml.template
/usr/lib/systemd/system/amazon-ssm-agent.service
/usr/sbin/amazon-ssm-agent
/usr/sbin/ssm-agent-worker
/usr/sbin/ssm-cli
/usr/sbin/ssm-document-worker
/usr/sbin/ssm-session-logger
/usr/sbin/ssm-session-worker
/usr/share/doc/packages/amazon-ssm-agent
/usr/share/doc/packages/amazon-ssm-agent/CONTRIBUTING.md
/usr/share/doc/packages/amazon-ssm-agent/NOTICE.md
/usr/share/doc/packages/amazon-ssm-agent/README.md
/usr/share/doc/packages/amazon-ssm-agent/RELEASENOTES.md
/usr/share/licenses/amazon-ssm-agent
/usr/share/licenses/amazon-ssm-agent/LICENSE
/var/lib/amazon
/var/lib/amazon/ssm
/var/log/amazon
/var/log/amazon/ssm


Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Mar 30 23:52:28 2024