Skip to content

Please bump from 3006.5 > 3006.7 for compatibility with 3006.7 up to the current 3007.0

Description:

The recent release of Salt 3007 has caused minions to fail validation of their existing salt-master's pubkey in a message signing change. These minions run various RedHat-based releases and otherwise while this stack's salt-master runs Archlinux which only provided 3006.5.

Building this package myself with a bump from 3006.5 > 3006.7 and installing that was sufficient for getting them to open connections with their salt-master once more. Is it possible to bump this official version up to this latest 3006.7 minor version?

Otherwise, is it possible to get salt updated to 3007.0 here in its entirety?

Additional info:

Steps to reproduce:

  1. Install salt-master on Archlinux (3006.5) and salt-minion on say, CentOS 7. Both 3006.5
  2. Configure the minion to point to the master's address and run salt-call test.ping to test successful Salt connectivity.
  3. Upgrade the minion to the latest available version: 3007.0
  4. Watch the salt-call test.ping no longer function due to an inability to cryptographically verify the master server - despite the pubkey remaining unchanged (Underlying changes to Salt in updates)

The salt official repos only provide as far back to 3006.7 and downgrading the minion to that is also insufficient. But upgrading the master to that by building this package manually did the trick for both 3006.7 minions and 3007.0 minions.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information