[Git][debian-edu/debian-edu-config][master] release as 2.13.1

Mike Gabriel pushed to branch master at Debian Edu / debian-edu-config


Commits:
3ae89a7c by Mike Gabriel at 2026-08-25T21:18:28+02:00
release as 2.13.1

Signed-off-by: Mike Gabriel <[email protected]>

- - - - -


1 changed file:

- debian/changelog


Changes:

=====================================
debian/changelog
=====================================
@@ -1,10 +1,87 @@
-debian-edu-config (2.13.1) UNRELEASED; urgency=medium
+debian-edu-config (2.13.1) unstable; urgency=medium
 
   [ Daniel Teichmann ]
   * testsuite/ldap-server: Check /var/lib/ldap exists and is owned by
-    openldap:openldap. Regression check for Debian#1144741.
+    openldap:openldap. Regression check for Debian bug #1144741.
+  * debian/debian-edu-config.lintian-overrides: Fix stale reference. (Fixes
+    commit: 63575146)
+  * Drop unused wicd preconnect hook.
+    wicd is no longer in Debian. The hook was the only remaining wicd
+    integration and is not referenced anywhere else in the package.
+  * testsuite/hostname: escape regex dot and exit non-zero on failure.
+    The unescaped dot in the 'tjener.intern' grep matched any character.
+    Escape it so the FQDN check is exact. Both error paths now exit 1 so a
+    broken hostname fails the test instead of silently passing.
+  * share/debian-edu-config/d-i/pre-pkgsel: resolve leftover merge conflict.
+  * debian/control: Depend on iproute2
+  * testsuite/network: Stop using net-tools, use ip from iproute2 instead
+  * ldap-tools/ldap-debian-edu-install: Get MAC addresses via ip link instead
+    of ifconfig
+  * share/debian-edu-config/testsuite-lib.sh: Use ss instead of netstat
+  * testsuite/ldap-server: Use ss instead of netstat
+  * debian/control: Drop Depends: net-tools
+  * share/debian-edu-config/d-i/pre-pkgsel: Tighten hostname= parsing and
+    sanitization from /proc/cmdline.
+    Handle hostname= as first cmdline token, ignore empty values and
+    strip characters invalid in hostnames.
+  * share/debian-edu-config/d-i/pre-pkgsel: strip hyphens only when present.
+    Use 's/^-+//' / 's/-+$//' instead of '-*' so the substitution only
+    fires when there actually is a leading/trailing hyphen to remove.
+  * tools/create-debian-edu-certs: Switch root CA and server key generation
+    to ECDSA prime256v1.
+    RSA with 2048 bits is the bare minimum with OpenSSL 3. Replace
+    'openssl genrsa' with 'openssl genpkey -algorithm EC' using the
+    prime256v1 (secp256r1 / NIST P-256) curve.
+  * tools/create-server-cert: Switch key generation to ECDSA prime256v1 and
+    drop keyEncipherment key usage
+    keyEncipherment is only meaningful for RSA keys. For ECDSA server
+    certificates only the digitalSignature key usage is applicable
+    (RFC 5480).
+  * v3.cnf: Drop keyEncipherment from server cert key usage
+    keyEncipherment is not applicable to ECDSA keys (RFC 5480), only
+    digitalSignature is required for TLS server certificates.
 
- -- Daniel Teichmann <[email protected]>  Tue, 18 Aug 2026 18:45:33 +0200
+  [ Mike Gabriel ]
+  * debian/control: Add to D: (debian-edu-config): procps. (Closes: #1136493).
+  * ldap-tools/ldap-debian-edu-install: Make sure interactions with debconf
+    are UTF-8 based.
+    This resolves GECOS field transliteration after having retrieved
+    debian-edu-config/first-user-fullname from the debconf db.
+    (Closes: #939717).
+  * share/debian-edu-config/d-i/pre-pkgsel: white-space cleanup
+  * share/debian-edu-config/d-i/pre-pkgsel: Use 'tjener' in /etc/hostname
+    and derive FQDN from /etc/hosts. (Closes: #893394).
+  * testsuite/hostname: Test that /etc/hostname on installation profile
+    Main-Server is set correctly
+  * cf3/cf.cfengine3: Stop cfengine3 service on all Debian Edu machines.
+    Esp. cf-execd (calling cf-agent command) clobbers the log on all Debian
+    Edu clients (Debian Edu 12 and onwards) and thus on syslog.intern (aka
+    tjener).
+    In Debian Edu, we use cfengine3 for managing configuration adjustments
+    via manual invocation of the cf-agent command, but we don't support
+    (yet?) to use cfengine3 for constant system management.
+    Partially addresses #1051834.
+  * sbin/debian-edu-ltsp-install: Use KERNEL_PARAMETERS variable, if we
+    define it
+  * sbin/debian-edu-ltsp-install: Fix variable interpretation in sed commands
+    ... by using double quotes, not single quotes.
+  * sbin/update-hostname-from-ip: white-space cleanup
+  * sbin/update-hostname-from-ip: Stop using net-tools, use ip command from
+    iproute2 instead
+  * share/debian-edu-config/d-i/pre-pkgsel: Support hostname override via
+    /proc/cmdline. (Closes: #1008597).
+
+  [ Wolfgang Schweer ]
+  * share/debian-edu-config/d-i/pre-pkgsel: Cleanup pre-pkgsel from cruft.
+    (Closes: #1055648).
+
+  [ Serhii Horichenko ]
+  * ltsp: Add 'quiet splash' to hide boot details on clients.
+    (Closes: #1065564).
+  * etc/nagios3/debian-edu/commands.cfg: Add key -l for check_apt to list
+    packages available for upgrade.
+
+ -- Mike Gabriel <[email protected]>  Tue, 25 Aug 2026 21:18:07 +0200
 
 debian-edu-config (2.13.0) unstable; urgency=medium
 



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/3ae89a7ccbf0db5e7c5a29a3475c6f40c80d5d46

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/3ae89a7ccbf0db5e7c5a29a3475c6f40c80d5d46
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help

_______________________________________________
debian-edu-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-edu-commits