Skip to content

[client] Backport RPM metadata required for Red Hat software certification to release-0.79 - #7573

Merged
braginini merged 1 commit into
release-0.79from
work/gallant-franklin-hyvqpz
Sep 17, 2026
Merged

braginini merged 1 commit into
release-0.79from
work/gallant-franklin-hyvqpz

Conversation

@mlsmaycon

@mlsmaycon mlsmaycon commented Sep 17, 2026

Copy link
Copy Markdown
Collaborator

Describe your changes

Backport of #7562 to release-0.79. It is a clean cherry-pick of the squash commit 85a3913 with no conflicts.

The RPM ships only /usr/bin/netbird, with no Requires, no changelog and no config or doc files, which fails three subtests of the RHEL 9 software certification RPM test. This declares the runtime dependencies, generates the changelog from git tags with chglog at release time, and ships LICENSE, README.md and an example /etc/sysconfig/netbird as %license, %doc and %config(noreplace).

Issue ticket number and link

Original PR: #7562

Stack

Checklist

  • Is it a bug fix
  • Is a typo/documentation fix
  • Is a feature enhancement
  • It is a refactor
  • Created tests that fail without the change (if possible)
  • I ran and tested this change locally — I did not rely on CI to find out whether it works
  • This PR has a single purpose (not a fix + refactor + feature in one)
  • This change is a trivial fix, OR it links an issue the NetBird team agreed on beforehand. Changes to the public API, gRPC protocols, functionality behavior, CLI / service flags, or new features always need that agreement first. See CONTRIBUTING.md.

By submitting this pull request, you confirm that you have read and agree to the terms of the Contributor License Agreement.

Documentation

Select exactly one:

  • I added/updated documentation for this change
  • Documentation is not needed for this change (explain why)

Packaging metadata only, same as the original PR; no user-facing behavior change.

Docs PR URL (required if "docs added" is checked)

Paste the PR link from https://github.com/netbirdio/docs here:

https://github.com/netbirdio/docs/pull/__

@coderabbitai

coderabbitai Bot commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 4a0aaf79-3ace-410d-9eef-e37bfd2638af

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 issues found across 7 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="release_files/netbird.sysconfig">

<violation number="1" location="release_files/netbird.sysconfig:8">
P1: When an RPM user enables these `NB_*` settings, the client service ignores them because this file is installed at `/etc/sysconfig/netbird` but `netbird@.service` reads `/etc/default/netbird`. Make the service load the RPM config path, or install this file at the path the service actually reads.</violation>
</file>

<file name="release_files/rpm-changelog.sh">

<violation number="1" location="release_files/rpm-changelog.sh:13">
P1: On a fresh checkout, the release workflow does not create chglog's required `.chglog.yml` before running `chglog init`, so changelog generation can fail and block all RPM releases. Create the default chglog configuration before initializing the changelog.</violation>
</file>

Reply with feedback, questions, or to request a fix.

Re-trigger cubic

# Red Hat Enterprise Linux 9 ships the in-kernel WireGuard module as a
# Technology Preview and taints the kernel when it loads. For a fully
# supported RHEL 9 configuration run the client with userspace WireGuard:
#NB_WG_KERNEL_DISABLED=true

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: When an RPM user enables these NB_* settings, the client service ignores them because this file is installed at /etc/sysconfig/netbird but netbird@.service reads /etc/default/netbird. Make the service load the RPM config path, or install this file at the path the service actually reads.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At release_files/netbird.sysconfig, line 8:

<comment>When an RPM user enables these `NB_*` settings, the client service ignores them because this file is installed at `/etc/sysconfig/netbird` but `netbird@.service` reads `/etc/default/netbird`. Make the service load the RPM config path, or install this file at the path the service actually reads.</comment>

<file context>
@@ -0,0 +1,14 @@
+# Red Hat Enterprise Linux 9 ships the in-kernel WireGuard module as a
+# Technology Preview and taints the kernel when it loads. For a fully
+# supported RHEL 9 configuration run the client with userspace WireGuard:
+#NB_WG_KERNEL_DISABLED=true
+#
+# Self-hosted management server:
</file context>


set -eu

go tool chglog init

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: On a fresh checkout, the release workflow does not create chglog's required .chglog.yml before running chglog init, so changelog generation can fail and block all RPM releases. Create the default chglog configuration before initializing the changelog.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At release_files/rpm-changelog.sh, line 13:

<comment>On a fresh checkout, the release workflow does not create chglog's required `.chglog.yml` before running `chglog init`, so changelog generation can fail and block all RPM releases. Create the default chglog configuration before initializing the changelog.</comment>

<file context>
@@ -0,0 +1,110 @@
+
+set -eu
+
+go tool chglog init
+
+python3 - changelog.yml <<'PYEOF'
</file context>
Suggested change
go tool chglog init
go tool chglog config
go tool chglog init

@github-actions

github-actions Bot commented Sep 17, 2026

Copy link
Copy Markdown

Release artifacts

Built for PR head 2e551da in workflow run #19090.

Artifact Link
All release artifacts Download
Linux packages Download
Windows packages Download
macOS packages Download
UI artifacts Download
UI GTK3 artifacts Download
UI macOS artifacts Download

GHCR images (amd64)

This comment is updated by the Release workflow. Artifact links expire according to the workflow retention policy.

@mlsmaycon
mlsmaycon force-pushed the work/gallant-franklin-hyvqpz branch from dce2e5b to 7b9d8ed Compare September 17, 2026 08:24
…cation (#7562)

Declare the runtime dependencies, generate the changelog from git tags with
chglog at release time, and ship LICENSE, README.md and an example
/etc/sysconfig/netbird as %license, %doc and %config(noreplace). The unit
generated by "netbird service install" already reads that path via
EnvironmentFile, so post_install.sh is unchanged.
@mlsmaycon
mlsmaycon force-pushed the work/gallant-franklin-hyvqpz branch from 7b9d8ed to 2e551da Compare September 17, 2026 08:31
@sonarqubecloud

Copy link
Copy Markdown

@braginini
braginini merged commit 7cbf823 into release-0.79 Sep 17, 2026
47 checks passed
@braginini
braginini deleted the work/gallant-franklin-hyvqpz branch September 17, 2026 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants