OTC Public Images Release Notes July 2020

<h2>Linux</h2> <p>New Ubuntu image released</p> <ul> <li>Standard_Ubuntu_20.04_latest <ul> <li>support for BMS is planned</li> <li>default login user: ubuntu</li> <li>supported OTC flavors: https://imagefactory.otc.t-systems.com/flavor-list</li> </ul></li> </ul> <h2>GPG key extension of Cloud:OTC repositories on 10th of August 2020</h2> <p>The <strong>CLOUD:OTC</strong> GPG key will be expire in the near future. Some Linux based distributions (except RHEL and SUSE) are affected which are currently using the following GPG key:</p> <pre><code>05a6c49c-5b1ecbbd gpg(Cloud:OTC OBS Project <Cloud:OTC@build.opensuse.org>) pub 2048R/05A6C49C 2018-06-11 Cloud:OTC OBS Project <Cloud:OTC@build.opensuse.org> Key fingerprint = 3EA8 5041 32B7 F1E9 54A9 C0AD A4F6 B298 05A6 C49C</code></pre> <p>The above mentioned GPG key will be extended on the <strong>10th of August 2020</strong>! Afterwards it could happen that just a <strong>notification information</strong> or in certain cases an <strong>error message</strong> is returning by running an update of packages which have been signed with this GPG key.</p> <p>Please <strong>follow only instructions</strong> given down below in case of any <strong>error message</strong> returning to you!</p> <p>In this case Image Factory Team has introduced a package called: <strong>cloud-oty-keyring</strong><br /> It contains <strong>CLOUD:OTC</strong> GPG key and enroll it to our customers automatically.</p> <h3>SUSE - SLES | openSUSE</h3> <p>The GPG key extension and eventually mirroring might take some time for some of the repos and during that time zypper will complain about expiring GPG key. Below is a workaround for SUSE case.</p> <pre><code>zypper --no-gpg-checks <rest of the arguments></code></pre> <h3>CentOS | EulerOS | OEL</h3> <p>It's necessary to configure two new repositories to being able to install <strong>cloud-otc-keyring</strong> package. </p> <h4>Configure repository URLs for CentOS-6 and OEL-6</h4> <p>To configure the repository on your system create the file <strong>/etc/yum.repos.d/otc-tools.repo</strong> with the following contents:</p> <pre><code>[otc-tools] name=OTC-CLOUD-Tools-CentOS-6 baseurl=http://smt01-suse.otc-service.com/repo/RPMMD/otc_tools_centos6/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CLOUD-OTC</code></pre> <p>To configure the repository on your system create the file <strong>/etc/yum.repos.d/otc-drivers.repo</strong> with the following contents:</p> <pre><code>[otc-drivers] name=OTC-CLOUD-Drivers-CentOS-6 baseurl=http://smt01-suse.otc-service.com/repo/RPMMD/otc_drivers_centos6/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CLOUD-OTC</code></pre> <h4>Configure repository URLs for CentOS-7, OEL-7 and EulerOS-2.5</h4> <p>To configure the repository on your system create the file <strong>/etc/yum.repos.d/otc-tools.repo</strong> with the following contents:</p> <pre><code>[otc-tools] name=OTC-CLOUD-Tools-CentOS-7 baseurl=http://smt01-suse.otc-service.com/repo/RPMMD/otc_tools_centos7/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CLOUD-OTC</code></pre> <p>To configure the repository on your system create the file <strong>/etc/yum.repos.d/otc-drivers.repo</strong> with the following contents:</p> <pre><code>[otc-drivers] name=OTC-CLOUD-Drivers-CentOS-7 baseurl=http://smt01-suse.otc-service.com/repo/RPMMD/otc_drivers_centos7/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CLOUD-OTC</code></pre> <h4>Configure repository URLs for CentOS-8 and OEL-8</h4> <p>To configure the repository on your system create the file <strong>/etc/yum.repos.d/otc-tools.repo</strong> with the following contents:</p> <pre><code>[otc-tools] name=OTC-CLOUD-Tools-CentOS-8 baseurl=http://smt01-suse.otc-service.com/repo/RPMMD/otc_tools_centos8/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CLOUD-OTC</code></pre> <h4>Configure repository URLs for Fedora</h4> <p>To configure the repository on your system create the file <strong>/etc/yum.repos.d/OTC-Fedora.repo</strong> with the following contents:</p> <pre><code>[OTC-build] name=OTC-build baseurl=http://smt01-suse.otc-service.com/repo/RPMMD/otc_fedora30/ gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CLOUD-OTC enabled=1 skip_if_unavailable=True</code></pre> <h4>Install and import new GPG key</h4> <p>If required for e.g. Fedora 30, <strong>yum</strong> command can also be replaced by <strong>dnf</strong> command!</p> <pre><code>$ yum clean all $ yum repolist all $ yum -y --nogpgcheck install cloud-otc-keyring</code></pre> <p>Any further updates or installations out of those two repositories will now work without any issues.</p> <h3>Debian | Ubuntu</h3> <h4>Cleanup home garloff</h4> <p>Older ECS installations may still have the home garloff repository configured.<br /> Since this repository is obsolete and replaced by Cloud OTC Tools, it is strongly recommended to remove any remains of this repository from <em>/etc/apt/sources.list</em> and <em>/etc/apt/sources.list.d/</em>.</p> <h4>Configure repository URL</h4> <p>Please have a look at <a href="http://download.opensuse.org/repositories/Cloud:/OTC:/Tools/">http://download.opensuse.org/repositories/Cloud:/OTC:/Tools/</a> or our local mirror <a href="http://debmirror.otc-service.com/repositories/Cloud:/OTC:/Tools/">http://debmirror.otc-service.com/repositories/Cloud:/OTC:/Tools/</a> to find the correct URL for your distribution and version.<br /> Hint: You can also use a command line browser like w3m to do this.</p> <p>For example the repository URL for Debian 10 is <a href="http://debmirror.otc-service.com/repositories/Cloud:/OTC:/Tools/Debian_10/">http://debmirror.otc-service.com/repositories/Cloud:/OTC:/Tools/Debian_10/</a>.</p> <p>To configure the repository on your system create the file <em>/etc/apt/sources.list.d/cloud-otc.list</em> with the following contents (this example demonstrates Debian 10):</p> <pre><code># otc-tools deb [arch=amd64] http://debmirror.otc-service.com/repositories/Cloud:/OTC:/Tools/Debian_10/ /</code></pre> <h4>Install the apt key</h4> <p>If you would run apt update now, you would get a error message like: "The repository 'http://debmirror.otc-service.com/repositories/Cloud:/OTC:/Tools/Debian_10 Release' is not signed."<br /> To fix this the apt key for the Cloud OTC Tools repository needs to be installed.</p> <p>For this the apt cache needs to be updated ignoring the missing key:</p> <pre><code>$ apt -o Acquire::AllowInsecureRepositories=true update</code></pre> <p>Remove locally added key:</p> <pre><code>$ apt-key --keyring /etc/apt/trusted.gpg del 3EA8504132B7F1E954A9C0ADA4F6B29805A6C49C</code></pre> <p>Then the cloud-otc-keyring package can be installed:</p> <pre><code>$ apt -o Acquire::AllowInsecureRepositories=true update $ apt install --allow-unauthenticated cloud-otc-keyring</code></pre> <p>Now you run apt update, again. It should not show any errors anymore. The repository is now ready and can be used to install and upgrade packages. </p> <p>If the the above steps fail, please run the following commands and rerun the steps above:</p> <pre><code>$ apt clean $ rm /var/lib/apt/lists/*OTC*</code></pre> <h2>Windows</h2> <h3>updated Microsoft Windws Server Images with current Microsoft Windows Server Patches of July 2020 (15th)</h3> <ul> <li> <p>Windows Server 2012 R2</p> <ul> <li>2020-07 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4565541)</li> <li>2020-07 Servicing Stack Update for Windows Server 2012 R2 for x64-based Systems (KB4566425)</li> <li>2020-07 Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Server 2012 R2 for x64 (KB4566468)</li> <li>2020-07 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB4565540)</li> <li>2020-07 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4565479) </li> </ul> </li> <li> <p>Windows Server 2016</p> <ul> <li>2020-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4565511)</li> <li>2020-07 Servicing Stack Update for Windows Server 2016 for x64-based Systems (KB4565912)</li> </ul> </li> <li> <p>Windows Server 2019</p> <ul> <li>2020-07 Servicing Stack Update for Windows Server 2019 for x64-based Systems (KB4558997)</li> <li>2020-07 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB4566516)</li> <li>2020-07 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4558998)</li> </ul> </li> <li> <p>Driver and tools of all Windows Server types</p> <ul> <li>Cloudbase-Init: 0.9.12.dev86</li> <li>XEN GPL driver: 5.0.136.10</li> <li>KVM UVP Vmtools: 2.5.0.156</li> <li>Intel(R) Network Connections Software Version 25.0, January 2, 2020</li> <li>NVIDIA vGPU driver: 370.41 (fixes CVE 2019 5698)</li> <li>NVIDIA pGPU driver: 443.18 (solves CVE 2020 5962, CVE 2020 5963, CVE 2020 5964, CVE 2020 5965, CVE 2020 5966)</li> <li>NVIDIA V100 / T4 driver: 426.72 (fixes CVE 2020 5973)</li> </ul> </li> </ul>