KUSANAGI 9 update has been released.
Fixed the initial MariaDB security configuration performed by the kusanagi init and kusanagi dbinit mariadb commands. Previously only socket authentication was configured, but from this version the root password is set, anonymous users are removed, remote root login is disallowed and the test database is removed by default.
Note that even when the root password was not set, the MariaDB root user can only connect through socket authentication. No one other than the OS root user can connect as the MariaDB root user without a password.
To set the root password on an environment where the kusanagi init or kusanagi dbinit mariadb command was run before this version, run the kusanagi dbinit mariadb command with --dbrootpass and the new password.
To keep the previous behavior, where only socket authentication is allowed, specify the --legacy option in the kusanagi init and kusanagi dbinit mariadb commands.
Strengthened the validation of command arguments. Invalid values that were accepted before may now result in an error.
Changed the --format json output. The top level key of the JSON is now the command name for the kusanagi list, show and status commands.
Added the --format-help option, which lists the commands that support --format.
Fixed some commands updating files even when --dryrun is specified.
Fixed the kusanagi dbinit psql command not resetting the PostgreSQL password when --dbrootpass is specified.
Fixed the kusanagi dbinit psql command failing when the dnf metadata cache is not available, and enabling psql14 regardless of the specified version.
Fixed the kusanagi ssl --email and kusanagi provision --email commands failing to install the Let's Encrypt certificate after obtaining it when the FQDN starts with www. and the apex domain resolves to the same address.
You can apply the module update with the following command:
# dnf upgrade
The specification for Nginx has been changed since KUSANAGI 9.5.0 release.
For details, please refer to Changes in KUSANAGI 9.5.0 .
Python version has been changed to Python 3.12 since KUSANAGI 9.7.0 release.
For details, please refer to Support for Python 3.12 in KUSANAGI .
