/var/log/leapp/leapp-report.json

{
  "leapp_run_id": "852a05fc-25b2-44a6-9e07-8421e75bcd2d",
  "entries": [
    {
      "hostname": "leapp-20200312144602",
      "severity": "high",
      "title": "Packages will not be installed",
      "timeStamp": "2020-03-25T08:34:38.549865Z",
      "tags": [
        "repository"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "libselinux-python3"
          },
          {
            "scheme": "package",
            "title": "postfix-cdb"
          },
          {
            "scheme": "package",
            "title": "postfix-pcre"
          },
          {
            "scheme": "package",
            "title": "postfix-sqlite"
          }
        ]
      },
      "actor": "pes_events_scanner",
      "summary": "4 packages will not be installed or upgraded due to repositories unknown to leapp:\n- libselinux-python3\n- postfix-cdb\n- postfix-pcre\n- postfix-sqlite",
      "audience": "sysadmin",
      "id": "010f4108f201a827284664b91e222778edeb7d2e8b957fc24a99bd63f54e61bc"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "high",
      "title": "Packages will not be installed",
      "timeStamp": "2020-03-25T08:34:38.561570Z",
      "tags": [
        "repository"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "python3-pyxattr"
          },
          {
            "scheme": "package",
            "title": "rpcgen"
          }
        ]
      },
      "actor": "pes_events_scanner",
      "summary": "2 packages will not be installed due to blacklisted repositories:\n- python3-pyxattr\n- rpcgen",
      "audience": "sysadmin",
      "id": "9874edb85084e09d98f3e9f823fb829591cd25719177592ad7b14dc33e28eebe"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "low",
      "title": "Dosfstools incompatible changes in the next major version",
      "timeStamp": "2020-03-25T08:34:39.312811Z",
      "tags": [
        "filesystem",
        "tools"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "dosfstools"
          }
        ],
        "remediations": [
          {
            "type": "hint",
            "context": "Please update your scripts to be compatible with the changes."
          }
        ]
      },
      "actor": "checkdosfstools",
      "summary": "The automatic alignment of data clusters that was added in 3.0.8 and broken for FAT32 starting with 3.0.20 has been reinstated. If you need to create file systems for finicky devices that have broken FAT implementations use the option -a to disable alignment.\nThe fsck.fat now defaults to interactive repair mode which previously had to be selected with the -r option.\n",
      "audience": "sysadmin",
      "id": "d5de324677b7be2c2319fcd60942aacb7fa3a903b4f02b81c3436a3feeee7afc"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "low",
      "title": "Grep has incompatible changes in the next major version",
      "timeStamp": "2020-03-25T08:34:39.576900Z",
      "tags": [
        "tools"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "grep"
          }
        ],
        "remediations": [
          {
            "type": "hint",
            "context": "Please update your scripts to be compatible with the changes."
          }
        ]
      },
      "actor": "checkgrep",
      "summary": "If a file contains data improperly encoded for the current locale, and this is discovered before any of the file's contents are output, grep now treats the file as binary.\nThe 'grep -P' no longer reports an error and exits when given invalid UTF-8 data. Instead, it considers the data to be non-matching.\nIn locales with multibyte character encodings other than UTF-8, grep -P now reports an error and exits instead of misbehaving.\nWhen searching binary data, grep now may treat non-text bytes as line terminators. This can boost performance significantly.\nThe 'grep -z' no longer automatically treats the byte '\\200' as binary data.\nContext no longer excludes selected lines omitted because of -m. For example, 'grep \"^\" -m1 -A1' now outputs the first two input lines, not just the first line.\n",
      "audience": "sysadmin",
      "id": "81967705867a7d86b6eb94dea8e068a0dad87582e3f58a350ac65d8c67a0838d"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "high",
      "title": "GRUB core on /dev/vda will be updated during upgrade",
      "timeStamp": "2020-03-25T08:34:39.852062Z",
      "tags": [
        "boot"
      ],
      "actor": "check_grub_core",
      "summary": "On legacy (BIOS) systems, GRUB core (located in the gap between the MBR and the first partition) does not get automatically updated when GRUB is upgraded.",
      "audience": "sysadmin",
      "id": "39d5021562e140b8df36f60f2d59ecacfa0b19ead3b96be63c19a3cc6f2eff81"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "high",
      "title": "Packages not signed by Red Hat found in the system",
      "timeStamp": "2020-03-25T08:34:40.248869Z",
      "tags": [
        "sanity"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "leapp"
          },
          {
            "scheme": "package",
            "title": "leapp-deps"
          },
          {
            "scheme": "package",
            "title": "leapp-repository"
          },
          {
            "scheme": "package",
            "title": "leapp-repository-deps"
          },
          {
            "scheme": "package",
            "title": "python2-leapp"
          },
          {
            "scheme": "package",
            "title": "snactor"
          }
        ],
        "remediations": [
          {
            "type": "command",
            "context": [
              "yum",
              "-y",
              "remove",
              "leapp leapp-deps leapp-repository leapp-repository-deps python2-leapp snactor"
            ]
          }
        ]
      },
      "actor": "red_hat_signed_rpm_check",
      "summary": "The following packages have not been signed by Red Hat and may be removed in the upgrade process:\n- leapp\n- leapp-deps\n- leapp-repository\n- leapp-repository-deps\n- python2-leapp\n- snactor",
      "audience": "sysadmin",
      "id": "2bb3e7600a52358050d9d6d9cf3a0cdb6be27f273ad57633083ead2e80d1cab5"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "medium",
      "title": "Module pam_pkcs11 will be removed from PAM configuration",
      "timeStamp": "2020-03-25T08:34:41.347416Z",
      "tags": [
        "authentication",
        "security",
        "tools"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "sssd"
          }
        ],
        "remediations": [
          {
            "type": "hint",
            "context": "Configure SSSD to replace pam_pkcs11"
          }
        ]
      },
      "actor": "removed_pam_modules_check",
      "summary": "Module pam_pkcs11 was surpassed by SSSD and therefore it was removed from RHEL-8. Keeping it in PAM configuration may lock out the system thus it will be automatically removed from PAM configuration before upgrading to RHEL-8. Please switch to SSSD to recover the functionality of pam_pkcs11.",
      "audience": "sysadmin",
      "id": "15792fb92fb06abff1b67e05bb294251208627e26c5aac9cfb6496c92f588273"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "low",
      "title": "Postfix has incompatible changes in the next major version",
      "timeStamp": "2020-03-25T08:34:41.432591Z",
      "tags": [
        "services",
        "email"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "postfix"
          }
        ]
      },
      "actor": "check_postfix",
      "summary": "Postfix 3.x has so called \"compatibility safety net\" that runs Postfix programs with backwards-compatible default settings. It will log a warning whenever backwards-compatible default setting may be required for continuity of service. Based on this logging the system administrator can decide if any backwards-compatible settings need to be made permanent in main.cf or master.cf, before turning off the backwards-compatibility safety net.\nThe backward compatibility safety net is by default turned off in Red Hat Enterprise Linux 8.\nIt can be turned on by running:  \"postconf -e compatibility_level=0\nIt can be turned off by running: \"postconf -e compatibility_level=2\n\nIn the Postfix MySQL database client, the default \"option_group\" value has changed to \"client\", i.e. it now reads options from the [client] group from the MySQL configuration file. To disable it, set \"option_group\" to the empty string.\n\nThe postqueue command no longer forces all message arrival times to be reported in UTC. To get the old behavior, set TZ=UTC in main.cf:import_environment.\n\nPostfix 3.2 enables elliptic curve negotiation. This changes the default smtpd_tls_eecdh_grade setting to \"auto\", and introduces a new parameter \"tls_eecdh_auto_curves\" with the names of curves that may be negotiated.\n\nThe \"master.cf\" chroot default value has changed from \"y\" (yes) to \"n\" (no). This applies to master.cf services where chroot field is not explicitly specified.\n\nThe \"append_dot_mydomain\" default value has changed from \"yes\" to \"no\". You may need changing it to \"yes\" if senders cannot use complete domain names in e-mail addresses.\n\nThe \"relay_domains\" default value has changed from \"$mydestination\" to the empty value. This could result in unexpected \"Relay access denied\" errors or ETRN errors, because now will postfix by default relay only for the localhost.\n\nThe \"mynetworks_style\" default value has changed from \"subnet\" to \"host\". This parameter is used to implement the \"permit_mynetworks\" feature. The change could result in unexpected \"access denied\" errors, because postfix will now by default trust only the local machine, not the remote SMTP clients on the same IP subnetwork.\n\nPostfix now supports dynamically loaded database plugins. Plugins are shipped in individual RPM sub-packages. Correct database plugins have to be installed, otherwise the specific database client will not work. For example for PostgreSQL map to work, the postfix-pgsql RPM package has to be installed.\n",
      "audience": "sysadmin",
      "id": "701c1956bccfa446aacb09369cb7f385b3be9bf419c112535e0d8beb711f39b0"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "info",
      "title": "SElinux relabeling has been scheduled",
      "timeStamp": "2020-03-25T08:34:41.511918Z",
      "tags": [
        "selinux",
        "security"
      ],
      "actor": "check_se_linux",
      "summary": "SElinux relabeling has been scheduled as the status was permissive/enforcing.",
      "audience": "sysadmin",
      "id": "dcfe2d64e389cec1e4d291583c4548093dcc7559ce4272bf87d43438c049512f"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "low",
      "title": "SElinux will be set to permissive mode",
      "timeStamp": "2020-03-25T08:34:41.529617Z",
      "tags": [
        "selinux",
        "security"
      ],
      "actor": "check_se_linux",
      "summary": "SElinux will be set to permissive mode. Current mode: enforcing. This action is required by the upgrade process",
      "audience": "sysadmin",
      "id": "e9b0d735225ee1cf07962c019db58eaf6a81a82db25b9eec2dfc2c41774088b6"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "high",
      "title": "Difference in Python versions and support in RHEL 8",
      "timeStamp": "2020-03-25T08:34:41.700034Z",
      "tags": [
        "python"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "python"
          },
          {
            "scheme": "package",
            "title": "python2"
          },
          {
            "scheme": "package",
            "title": "python3"
          }
        ],
        "external": [
          {
            "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/configuring_basic_system_settings/#using-python3",
            "title": "Difference in Python versions and support in RHEL 8"
          }
        ],
        "remediations": [
          {
            "type": "hint",
            "context": "Please run \"alternatives --set python /usr/bin/python3\" after upgrade"
          }
        ]
      },
      "actor": "python_inform_user",
      "summary": "In RHEL 8, there is no 'python' command. Python 3 (backward incompatible) is the primary Python version and Python 2 is available with limited support and limited set of packages. Read more here: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/configuring_basic_system_settings/#using-python3",
      "audience": "developer",
      "id": "41b0c092a7b020fec576138ac7d2f63bc2e8e9299790580596b4d48016a3e111"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "high",
      "title": "Upgrade is unsupported",
      "timeStamp": "2020-03-25T08:34:41.847769Z",
      "tags": [
        "upgrade process",
        "sanity"
      ],
      "actor": "unsupported_upgrade_check",
      "summary": "Environment variable LEAPP_UNSUPPORTED has been detected. A successful and safe upgrade process cannot be guaranteed. From now on you are continuing at your own risk.\n",
      "audience": "sysadmin",
      "id": "9fbb80a9478522563ed347fbc1a671b524a83533b2430e20bc9666d678b6d038"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "info",
      "title": "Current PAM and nsswitch.conf configuration will be kept.",
      "timeStamp": "2020-03-25T08:34:42.178751Z",
      "tags": [
        "authentication",
        "security",
        "tools"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "authselect"
          },
          {
            "scheme": "package",
            "title": "authconfig"
          },
          {
            "scheme": "file",
            "title": "/etc/nsswitch.conf"
          }
        ]
      },
      "actor": "authselect_check",
      "summary": "There is a new tool called authselect in RHEL8 that replaced authconfig. The upgrade process was unable to find an authselect profile that would be equivalent to your current configuration. Therefore your configuration will be left intact.",
      "audience": "sysadmin",
      "id": "b911d56e6d5d99bcb3821e2cd38e4fb3d1fe628ecbcc8bb252665060062895bc"
    },
    {
      "hostname": "leapp-20200312144602",
      "severity": "medium",
      "title": "chrony using default configuration",
      "timeStamp": "2020-03-25T08:34:42.982447Z",
      "tags": [
        "services",
        "time management"
      ],
      "detail": {
        "related_resources": [
          {
            "scheme": "package",
            "title": "ntpd"
          },
          {
            "scheme": "package",
            "title": "chrony"
          },
          {
            "scheme": "file",
            "title": "/etc/chrony.conf"
          }
        ]
      },
      "actor": "check_chrony",
      "summary": "default chrony configuration in RHEL8 uses leapsectz directive, which cannot be used with leap smearing NTP servers, and uses a single pool directive instead of four server directives",
      "audience": "sysadmin",
      "id": "2ae37ea7286757ac6c1f298699ea5f421d60b56fc1f950ee5c6a7074ae652cd3"
    }
  ]
}