SUSE-RU-2025:4131-1

This update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor fixes the following issues:

Changes for suse-migration-sle16-activation:

• Simplify interface naming by disabling predictable names at boot
• shellcheck heavily complained
• check migration target before testing for architecture version
• Create systemd.link files for virtual VMware/Hyper-V NICs
• Add changes for newest wicked2nm
• Activation packages can no longer be noarch
• Architecture check before allowing migration to be activated
• Add missing pre snapshot setup to run_migration
• Add wicked2nm network migration
• Setup ExclusiveArch for activation packages
• Make activation package require by provides tag
• Fix product related requirement settings

Changes for SLES16-Migration:

• Added .ssh directory for migration user
• Add etc/motd overlay file Print message how to show migration progress information
• Fix build on more architectures
• Initial changelog

Changes for SLES16-SAP_Migration:

• Support wicked2nm migration
• Migration live image for SLES4SAP 15 to 16

Changes for suse-migration-services:

• Set systemd offline for Zypper in chroot mode
• Fix apparmor install procedure
• Fixed azuremetadata device lookup
• Use of f-strings not allowed in the DMS
• Simplify interface naming by disabling predictable names at boot
• Fixed testchecklsm_migration unit test
• Fix setuphostnetwork_test by mocking os.makedirs
• wicked2nm: log network state on nm-online failure
• Fixed LSM pre checks to be more robust
• shellcheck heavily complained
• Do not evaluate wicked2nm output in precheck
• Fix unit test for lsm check
• prechecks/lsm.py: remove apparmoranalyze_profiles()
• LSM migration check for AppArmor -> SELinux
• Improve pre-check message
• Fix MinSLEVersion value depending on target
• reduce package set on migration image
• Fixed behavior of wicked2m pre check
• implementation of sshd root login pre-check
• Fixed selinux to apparmor migration
• Fixed reading of migration config for target class
• Add recursion guard to MigrationConfig::mergeconfig_dicts
• shrink migration image
• container/sle16/config.sh
• sle16/config.sh - use dropin for s390 migration-config
• doc: fix indentation
• check for migration target by matching ISO file name
• config: introduce dropin dir migration-config.d/
• Apply SLE16 live image setup to container setup
• bind mount only required subdirectories under /run into chroot
• Add missing package requirement
• check migration target before testing for architecture version
• setuphostnetwork: simplify code - use os.makedirs()
• Create systemd.link files for virtual VMware/Hyper-V NIC
• Preserve systemd.link files from /etc/systemd/network/
• Add changes for the newest wicked2nm
• Ensure wicked2nm is a dependency of pre-checks for SLE 16 migration
• Activation packages can no longer be noarch
• Fix update of image .changes files
• Architecture check before allowing migration to be activated
• Improve error logs when wicked2nm fails
• Include image changelog to version bump
• Ensure wicked2nm migration is always running, despite warnings
• Fix: add --no-recommends on patterns-base-selinux installation
• Update suse-migration-services for container use
• Update SLE16 migration container
• Update SAP live migration image
• Add missing pre snapshot setup to run_migration
• Follow up fix for the wicked to nm migration
• Add wicked2nm network migration
• Add glob support to preserve_files
• Setup ExclusiveArch for activation packages
• Build sles4sap migration for cloud on x86_64 only
• Do not build sles4sap migration on s390x
• Use systemctl kexec
• Fix: return the correct kernel path based on machine type
• Fixed glob pattern match for package name
• Remove menitoning of SLES 12-SP4
• Make activation package require by provides tag
• Added SLES16-SAP_Migration live image
• Do not use list[str] type hint
• Fix error evaluation from offline_migrations API
• Fix logging from non unit files
• Fix product related requirement settings
• Repos for migration image must be in kiwi
• Added .ssh to migration user for SAP 15 live image
• Added SLES15-SAP_Migration Makefile target
• Add proper release package for SLE16 migration
• Fix typo in service name
• Drop obsolete check for resolv.conf
• Fix migration user home dir setup for SLE16
• Update README_QA.rst
• test: split unit test for setupnameresolver
• Install patterns-base-selinux for Apparmor migration
• Ensure the rebuild counter is not stripped from the rpm
• Exit silently if no migration iso is found
• Ensure rpmlintrc file is part of suse-migration-services SRPM
• Ignore fixup! entries when generating changelog
• Increase python test matrix
• Remove redundanct requires on itself
• Fix ordering of pre-checks and actual migration
• Add SLES15-Migration target to Makefile
• Fix suse-migration-console-log service
• Fix typo in REA- Activate only connections if present in the current system
• Improve error output, exit codes and add flag to disable user hints
• Add support for autoip-fallback
• Issue only a info when dhcp.update is non default
• Add ipv4_static broadcast
• Apply dhcp settings to mirror wicked client id
• Fix test.sh, fail if migration succeed but expect fail
• Fix sysctl handling
• Avoid cloning in parsing of route
• Fix continue migration to show all warnings beforehand
• Improve warning messages - show interface, element names
• Remove unwrap in route parsing
• bump slab from 0.4.10 to 0.4.11 to address CVE-2025-55159 (bsc#1248010)
• Fix netconfig handling with proper priority setting
• Add ovs support
• Use agama-network instead of agama-(lib|server)
• Only activate connections marked with autostart
• Give hint in error message how to ignore warnings
• Update README.md with updated installation and usage infos
• Add support for Leap 15
• Remove BuildRequires that are no longer necessary due to the agama-network switch.
• The agama-network switch also removes the vulnerable and unmaintained 'users' crate from the dependencies. (bsc#1244188)DME_QA
• Fix: split name resolver setup into its own service
• Fix: set path according to current arch in grub.d/99_migration
• Add support to enable single rpm transaction for upgrade
• enable suse-migration-ha.service in the migration image
• Migration for high availability extension
• RPM wrapper fixes
• Cleanup secfile to follow python singlespec policy
• Support product specifier in ISO name
• Ensure sle16 images can build on all supported platforms
• Use name pattern compatible to suse-migration-rpm
• Fix SLE15 migration images
• SAP product should migrate to 15 SP4
• Add SLES15-SAP-Migration
• Bump target to SLE15 SP7
• Update bumpversion config Include sle16 container build to version bump
• Handle selinux boot option when using kexec
• Ensure migration to SLES16 uses selinux, not apparmor
• improve os-release parsing
• Ensure SLES16 is also detected in SCC precheck
• Add high availablity extension check
• Fix package names for python packages on SLE16
• Relax on the shim-install call
• Fixup package name for SLE16 and SLE16 container
• Fix changelog references for activation packages
• Add product migration check

Changes for suse-migration-rpm:

• Fix MinSLEVersion value depending on target
• Add product requirement according to image name.
• Exit silently if no migration iso is found.
• Add build and perl(Date::Parse) to ensure we can append changelog entries to generated package.

Changes for wicked2nm:

• Activate only connections if present in the current system
• Improve error output, exit codes and add flag to disable user hints
• Add support for autoip-fallback
• Issue only a info when dhcp.update is non default
• Add ipv4_static broadcast
• Apply dhcp settings to mirror wicked client id
• Fix test.sh, fail if migration succeed but expect fail
• Fix sysctl handling
• Avoid cloning in parsing of route
• Fix continue migration to show all warnings beforehand
• Improve warning messages - show interface, element names
• Remove unwrap in route parsing
• bump slab from 0.4.10 to 0.4.11 to address CVE-2025-55159 (bsc#1248010)
• Fix netconfig handling with proper priority setting
• Add ovs support
• Use agama-network instead of agama-(lib|server)
• Only activate connections marked with autostart
• Give hint in error message how to ignore warnings
• Update README.md with updated installation and usage infos
• Add support for Leap 15
• Remove BuildRequires that are no longer necessary due to the agama-network switch.
• The agama-network switch also removes the vulnerable and unmaintained 'users' crate from the dependencies. (bsc#1244188)

Chages for image-janitor: - Fix packaging (add doc, license) - Release 0.2.0 with configuration files packaged - Initial packag