Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package google-guest-agent for openSUSE:Factory checked in at 2026-01-20 21:05:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/google-guest-agent (Old) and /work/SRC/openSUSE:Factory/.google-guest-agent.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "google-guest-agent" Tue Jan 20 21:05:19 2026 rev:58 rq:1328272 version:20260108.00 Changes: -------- --- /work/SRC/openSUSE:Factory/google-guest-agent/google-guest-agent.changes 2026-01-06 17:45:13.311200818 +0100 +++ /work/SRC/openSUSE:Factory/.google-guest-agent.new.1928/google-guest-agent.changes 2026-01-20 21:05:43.874966911 +0100 @@ -1,0 +2,6 @@ +Tue Jan 13 09:03:20 UTC 2026 - John Paul Adrian Glaubitz <[email protected]> + +- Update to version 20260108.00 + * Source the contents of /var/google-users.d config files. (#586) + +------------------------------------------------------------------- Old: ---- guest-agent-20251223.00.tar.gz New: ---- guest-agent-20260108.00.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ google-guest-agent.spec ++++++ --- /var/tmp/diff_new_pack.O4yw1g/_old 2026-01-20 21:05:44.679000143 +0100 +++ /var/tmp/diff_new_pack.O4yw1g/_new 2026-01-20 21:05:44.683000309 +0100 @@ -24,7 +24,7 @@ %global import_path %{provider_prefix} Name: google-guest-agent -Version: 20251223.00 +Version: 20260108.00 Release: 0 Summary: Google Cloud Guest Agent License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.O4yw1g/_old 2026-01-20 21:05:44.723001962 +0100 +++ /var/tmp/diff_new_pack.O4yw1g/_new 2026-01-20 21:05:44.727002127 +0100 @@ -3,8 +3,8 @@ <param name="url">https://github.com/GoogleCloudPlatform/guest-agent/</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="versionformat">20251223.00</param> - <param name="revision">20251223.00</param> + <param name="versionformat">20260108.00</param> + <param name="revision">20260108.00</param> <param name="changesgenerate">enable</param> </service> <service name="recompress" mode="disabled"> @@ -15,7 +15,7 @@ <param name="basename">guest-agent</param> </service> <service name="go_modules" mode="disabled"> - <param name="archive">guest-agent-20251223.00.tar.gz</param> + <param name="archive">guest-agent-20260108.00.tar.gz</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.O4yw1g/_old 2026-01-20 21:05:44.747002955 +0100 +++ /var/tmp/diff_new_pack.O4yw1g/_new 2026-01-20 21:05:44.759003450 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/GoogleCloudPlatform/guest-agent/</param> - <param name="changesrevision">8ecd8b2fe86916d2ed4e0b297499bf3bfea4d86f</param></service></servicedata> + <param name="changesrevision">ec2658bcfb52cde8a27e7fcd31325c42ca57fdd8</param></service></servicedata> (No newline at EOF) ++++++ guest-agent-20251223.00.tar.gz -> guest-agent-20260108.00.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/guest-agent-20251223.00/google_guest_agent/oslogin.go new/guest-agent-20260108.00/google_guest_agent/oslogin.go --- old/guest-agent-20251223.00/google_guest_agent/oslogin.go 2025-12-10 00:38:04.000000000 +0100 +++ new/guest-agent-20260108.00/google_guest_agent/oslogin.go 2026-01-08 21:52:14.000000000 +0100 @@ -308,6 +308,8 @@ } } authorizedKeysUser := "AuthorizedKeysCommandUser root" + sourcePerUserConfigs := "Include /var/google-users.d/*" + matchAllAgain := "Match all" // Certificate based authentication. authorizedPrincipalsCommand := "AuthorizedPrincipalsCommand /usr/bin/google_authorized_principals %u %k" @@ -339,7 +341,7 @@ if twofactor { osLoginBlock = append(osLoginBlock, twoFactorAuthMethods, challengeResponseEnable) } - osLoginBlock = append(osLoginBlock, googleBlockEnd) + osLoginBlock = append(osLoginBlock, sourcePerUserConfigs, matchAllAgain, googleBlockEnd) filtered = append(osLoginBlock, filtered...) if twofactor { filtered = append(filtered, googleBlockStart, matchblock1, matchblock2, googleBlockEnd) @@ -476,8 +478,22 @@ for _, dir := range []string{"/var/google-sudoers.d", "/var/google-users.d"} { err := os.Mkdir(dir, 0750) - if err != nil && !os.IsExist(err) { - return err + if err != nil { + if os.IsExist(err) { + // Double-check permissions. + s, err := os.Stat(dir) + if err != nil { + return err + } + // Set permissions to rwxr-x---. + if s.Mode() != 0750 { + if err := os.Chmod(dir, 0750); err != nil { + return err + } + } + } else { + return err + } } if restoreconerr == nil { run.Quiet(ctx, restorecon, dir) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/guest-agent-20251223.00/google_guest_agent/oslogin_test.go new/guest-agent-20260108.00/google_guest_agent/oslogin_test.go --- old/guest-agent-20251223.00/google_guest_agent/oslogin_test.go 2025-12-10 00:38:04.000000000 +0100 +++ new/guest-agent-20260108.00/google_guest_agent/oslogin_test.go 2026-01-08 21:52:14.000000000 +0100 @@ -207,6 +207,8 @@ authorizedPrincipalsUser := "AuthorizedPrincipalsCommandUser root" trustedUserCAKeys := "TrustedUserCAKeys " + sshtrustedca.DefaultPipePath twoFactorAuthMethods := "AuthenticationMethods publickey,keyboard-interactive" + includePerUserConfigs := "Include /var/google-users.d/*" + matchAllAgain := "Match all" matchblock1 := `Match User sa_*` matchblock2 := ` AuthenticationMethods publickey` @@ -231,6 +233,8 @@ authorizedKeysUser, twoFactorAuthMethods, challengeResponseEnable, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", googleBlockStart, @@ -258,6 +262,8 @@ authorizedKeysUser, twoFactorAuthMethods, challengeResponseEnable, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", googleBlockStart, @@ -288,6 +294,8 @@ authorizedKeysUser, twoFactorAuthMethods, challengeResponseEnable, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", "line3", @@ -316,6 +324,8 @@ authorizedKeysUser, twoFactorAuthMethods, challengeResponseEnable, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", "line3", @@ -343,6 +353,8 @@ authorizedPrincipalsUser, authorizedKeysCommand, authorizedKeysUser, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", "line2", @@ -363,6 +375,8 @@ googleBlockStart, authorizedKeysCommand, authorizedKeysUser, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", "line2", @@ -427,6 +441,8 @@ authorizedPrincipalsUser, authorizedKeysCommandSk, authorizedKeysUser, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", "line2", @@ -450,6 +466,8 @@ googleBlockStart, authorizedKeysCommandSk, authorizedKeysUser, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", "line2", @@ -474,6 +492,8 @@ trustedUserCAKeys, authorizedPrincipalsCommand, authorizedPrincipalsUser, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", "line2", @@ -498,6 +518,8 @@ trustedUserCAKeys, authorizedPrincipalsCommand, authorizedPrincipalsUser, + includePerUserConfigs, + matchAllAgain, googleBlockEnd, "line1", "line2", ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/google-guest-agent/vendor.tar.gz /work/SRC/openSUSE:Factory/.google-guest-agent.new.1928/vendor.tar.gz differ: char 15, line 1
