Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

google-guest-oslogin-20260731.00-1.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

Name: google-guest-oslogin Distribution: openSUSE Tumbleweed
Version: 20260731.00 Vendor: openSUSE
Release: 1.1 Build date: Tue Aug 4 10:10:28 2026
Group: System/Daemons Build host: reproducible
Size: 4281186 Source RPM: google-guest-oslogin-20260731.00-1.1.src.rpm
Packager: https://bugs.opensuse.org
Url: https://github.com/GoogleCloudPlatform/guest-oslogin
Summary: Google Cloud Guest OS Login
Google Cloud Guest OS Login

Provides

Requires

License

Apache-2.0

Changelog

* Tue Aug 04 2026 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20260731.00
    * Restore Makefiles, .gitignore, and repository metadata
    * No public description
  - from version 20260626.00
    * Check and properly pad the buffer used for usernames in the
      NSS module, properly support buffer size negotiation. (#184)
  - from version 20260605.00
    * Add two new types to the SELinux policy: sshd_session_t, and
      systemd_userdbd_t, both added in newer EL versions. (#186)
* Mon May 04 2026 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20260430.00
    * URLEncode request parameters sent to the metadata server. (#182)
* Tue Apr 28 2026 Robert Schweikert <rjschwei@suse.com>
  - Add /var/google-sudoers.d to tmpfile config
    + The /var/google-users.d directory is pre-created in the Makefile but
      the google-sudoers.d is not. But the code wil not behave as expected
      if the directory is not there. Because of the pre-creation missing in
      Makefile this was missed initially.
* Tue Apr 07 2026 Robert Schweikert <rjschwei@suse.com>
  - Update to version 20260227.00 (bsc#1257010)
    + Fix broken cache_refresh behavior when groups are disabled. (#181)
    * Implement a binary cache for OS Login passwd entries.
      This change introduces a new binary cache format for storing OS Login
      passwd information. It includes:
    - `OsLoginPasswdCacheWriter`: A C++ class to build and write the cache
      file. It buffers user entries, sorts them, and writes them to a
      temporary file before atomically renaming it.
    - `oslogin_passwd_cache_reader`: A C implementation for reading from
      the cache file using mmap. It provides functions compatible with
      NSS modules for looking up entries by UID, name, and iterating
      through all entries.
    - `eytzinger_layout.h`: A template function to convert a sorted vector
      into an Eytzinger layout, used for the name index to improve cache
      locality during lookups.
    - `oslogin_index_structs.h`: Defines the structures used for the UID
      and Name indices.
    - New unit tests (`eytzinger_layout_test.cc`,
      `oslogin_passwd_cache_reader_test.cc`, `round_trip_test.cc`) to
      validate the cache functionality, including concurrent read access.
    - The `Makefile` is updated to build and run the new tests. The `main`
      function is removed from `oslogin_utils_test.cc` as `gtest_main.cc`
      is now linked.
    * Fix incorrect cache_refresh return value.
    + Add google-guest-oslogin.conf and ggosl-no-var-content.patch (jsc#PED-14688)
* Wed Nov 19 2025 Zdenek Kubala <zkubala@suse.com>
  - Update SELinux module dir as macro to allow root path move from
    /var/lib/selinux to /etc/selinux (bsc#1221342)
* Fri Nov 07 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20251022.00
    * Log the response body when an auth failure occurs;
      it usually has helpful info in it. (#167)
* Tue Sep 02 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20250821.00
    * Check policy uses adminLogin for cloud run (#165)
  - from version 20250807.00
    * Extract the principal from certs when cloud_run enabled (#164)
* Fri Jul 11 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20250710.00
    * Add the cloudrun support (#162)
* Wed Jun 25 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20250624.00
    * Pass c-strings to logging functions (#140)
  - from version 20241216.00
    * Send the correct type to SysLogErr; the clang sanitizer
      dislikes the type mismatch. (#158)
    * Add Eric to the owners file. (#157)
    * Revert "new client component and tests" (#155)
  - from version 20241214.00
    * Remove pat from owners (#156)
  - from version 20241206.00
    * Fix json include (#154)
    * build: remove oslogin_sshca from binaries list (#153)
    * Fix bad struct initialization pattern `= { 0 }` (#150)
    * Apply "include what you use," fixing missing include
      statements broadly. (#152)
    * Fix base64.h's missing includes and BSD types (#151)
    * Fix a bug where very large GIDs would cause integer
      overflow errors (#149)
  - from version 20241127.00
    * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
  - from version 20241126.01
    * Follow the Google style guide by using the "local include style"
      to include files from this project. (#147)
  - from version 20241126.00
    * Delete oslogin_sshca binary, add it to the ignore list (#146)
  - from version 20241120.00
    * OS Login agent searches for full fingerprint extension instead
      of equals (#144)
  - from version 20241116.00
    * Log an error when user has no challenges configured (#135)
* Thu Feb 27 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Rework SELinux support (bsc#1232553)
    * Add pkgconfig(systemd) to BuildRequires for SELinux builds
    * Add policycoreutils to BuildRequires
    * Build and install SELinux module on older distributions as well
      to allow users to use the module with their own SELinux policies
    * Make checkpolicy build dependency unconditional
    * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
    * Own %{_datadir}/selinux{,/packages} on older distributions
    * Split SELinux support into separate -selinux package
    * Use SELinux RPM macros to install and uninstall SELinux module
    * Use RPM conditional builds to enable SELinux on newer distributions
* Wed Feb 12 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Build and install SELinux module (bsc#1232553)
* Tue Oct 22 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20241021.00 (bsc#1231775, bsc#1231776)
    * Update OWNERS (#142)
* Tue Oct 01 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20240925.00
    * Inherit environment build flags (#141)
* Tue Jul 02 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20240701.00
    * Don't retry bad request responses (#137)
* Thu May 16 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20240415.00
    * Log clearly when the initial parsing of a JSON object fails (#132)
* Wed Apr 03 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Fix file permissions for google_authorized_principals binary (bsc#1222171)
* Fri Mar 22 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
    * pam: Bring back pam's account management implementation (#133)
    * Change error messages when checking login policy (#129)
    * Remove quintonamore from OWNERS (#128)
* Mon Feb 26 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Add explicit versioned dependency on google-guest-agent (bsc#1219642)
* Thu Jan 04 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20231116.00
    * build: Fix DESTDIR concatenation (#124)
  - from version 20231113.00
    * build: Fix clang build (#122)
  - from version 20231103.00
    * Update owners (#121)
* Thu Nov 02 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20231101.00 (bsc#1216548, bsc#1216750)
    * Fix HTTP calls retry logic (#117)
* Thu Oct 19 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20231004
    * packaging: Make the dependency explicit (#120)
* Sun Oct 01 2023 Dirk Müller <dmueller@suse.com>
  - update to 20230926.00:
    * fix suse build
    * selinux: fix selinux build (#114)
    * test: align CXX Flags
    * sshca: Make the implementation more C++ like
    * sshca: Add a SysLog wrapper
    * oslogin_utils: introduce AuthorizeUser() API
    * sshca: move it out of pam dir
    * pam: start disabling the use of oslogin_sshca
    * sshca: consider sshca API to assume a cert only
    * authorized principals: introduce the new command
    * authorize keys: update to use new APIs
    * pam modules: remove pam_*_admin and update pam_*_login
    * cache_refresh: should be catching by reference.
* Thu Aug 31 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20230823.00
    * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
  - from version 20230822.00
    * sshca: Add tests with fingerprint and multiple extensions (#111)
  - from version 20230821.01
    * sshca: Support method token and handle multi line (#109)
  - from version 20230821.00
    * Update owners (#110)
* Tue Aug 15 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20230808.00
    * byoid: extract and apply the ca fingerprint to policy call (#106)
* Tue May 09 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20230502.00
    * Improve the URL in 2fa prompt (#104)
  - from version 20230406.02
    * Check open files (#101)
  - from version 20230406.01
    * Initialize variables (#100)
    * Fix formatting (#102)
  - from version 20230406.00
    * PAM cleanup: remove duplicates (#97)
  - from version 20230405.00
    * NSS cleanup (#98)
  - from version 20230403.01
    * Cleanup Makefiles (#95)
  - from version 20230403.00
    * Add anandadalton to the owners list (#96)
* Tue Feb 28 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
  - Update to version 20230217.00
    * Update OWNERS (#91)
  - from version 20230202.00
    * Update owners file (#89)

Files

/usr/bin/google_authorized_keys
/usr/bin/google_authorized_keys_sk
/usr/bin/google_authorized_principals
/usr/bin/google_oslogin_nss_cache
/usr/lib/systemd/system-preset/90-google-compute-engine-oslogin.preset
/usr/lib/systemd/system/google-oslogin-cache.service
/usr/lib/systemd/system/google-oslogin-cache.timer
/usr/lib/tmpfiles.d/google-guest-oslogin.conf
/usr/lib64/libnss_cache_oslogin-20260731.00.so
/usr/lib64/libnss_cache_oslogin.so.2
/usr/lib64/libnss_oslogin-20260731.00.so
/usr/lib64/libnss_oslogin.so.2
/usr/lib64/security/pam_oslogin_admin.so
/usr/lib64/security/pam_oslogin_login.so
/usr/sbin/rcgoogle-oslogin-cache
/usr/share/doc/packages/google-guest-oslogin
/usr/share/doc/packages/google-guest-oslogin/README.md
/usr/share/licenses/google-guest-oslogin
/usr/share/licenses/google-guest-oslogin/LICENSE
/usr/share/man/man8/libnss_cache_oslogin.so.2.8.gz
/usr/share/man/man8/libnss_oslogin.so.2.8.gz
/usr/share/man/man8/nss-cache-oslogin.8.gz
/usr/share/man/man8/nss-oslogin.8.gz


Generated by rpm2html 1.8.1

Fabrice Bellet, Sun Aug 9 15:46:50 2026