saving uncommitted changes in /etc prior to dnf run

Package changes:

.etckeeper

@@ -2650,6 +2650,7 @@ maybe chmod 0644 'logrotate.d/rkhunter'
 maybe chmod 0644 'logrotate.d/rspamd'
 maybe chmod 0644 'logrotate.d/sa-update'
 maybe chmod 0644 'logrotate.d/squid'
+maybe chmod 0640 'logrotate.d/ssh-logins'
 maybe chmod 0644 'logrotate.d/sssd'
 maybe chmod 0644 'logrotate.d/subscription-manager'
 maybe chmod 0644 'logrotate.d/syslog'
@@ -2833,10 +2834,14 @@ maybe chmod 0644 'mke2fs.conf'
 maybe chmod 0755 'mock'
 maybe chgrp 'mock' 'mock/alma+epel-8-aarch64.cfg'
 maybe chmod 0644 'mock/alma+epel-8-aarch64.cfg'
+maybe chgrp 'mock' 'mock/alma+epel-8-ppc64le.cfg'
+maybe chmod 0644 'mock/alma+epel-8-ppc64le.cfg'
 maybe chgrp 'mock' 'mock/alma+epel-8-x86_64.cfg'
 maybe chmod 0644 'mock/alma+epel-8-x86_64.cfg'
 maybe chgrp 'mock' 'mock/almalinux-8-aarch64.cfg'
 maybe chmod 0644 'mock/almalinux-8-aarch64.cfg'
+maybe chgrp 'mock' 'mock/almalinux-8-ppc64le.cfg'
+maybe chmod 0644 'mock/almalinux-8-ppc64le.cfg'
 maybe chgrp 'mock' 'mock/almalinux-8-x86_64.cfg'
 maybe chmod 0644 'mock/almalinux-8-x86_64.cfg'
 maybe chgrp 'mock' 'mock/amazonlinux-2-aarch64.cfg'
@@ -3165,8 +3170,6 @@ maybe chgrp 'mock' 'mock/fedora-eln-x86_64.cfg'
 maybe chmod 0644 'mock/fedora-eln-x86_64.cfg'
 maybe chgrp 'mock' 'mock/fedora-rawhide-aarch64.cfg'
 maybe chmod 0644 'mock/fedora-rawhide-aarch64.cfg'
-maybe chgrp 'mock' 'mock/fedora-rawhide-armhfp.cfg'
-maybe chmod 0644 'mock/fedora-rawhide-armhfp.cfg'
 maybe chgrp 'mock' 'mock/fedora-rawhide-i386.cfg'
 maybe chmod 0644 'mock/fedora-rawhide-i386.cfg'
 maybe chgrp 'mock' 'mock/fedora-rawhide-ppc64le.cfg'

.gitignore

@@ -17,6 +17,7 @@ mtab.fuselock
 *.LOCK
 network/run
 adjtime
+udev/hwdb.bin
 lvm/cache
 lvm/archive
 X11/xdm/authdir/authfiles/*

etckeeper/pre-commit.d/30store-metadata

@@ -16,13 +16,13 @@ filter_ignore() {
 		listfile="$( mktemp -t etckeeper-$VCS.XXXXXXXXXX )"
 		case "$VCS" in
 			darcs)
-				grep -v '^[[:space:]]*\(#\|$\)' "$ignorefile" > "$listfile" || true
+				LC_CTYPE=C grep -v '^[[:space:]]*\(#\|$\)' "$ignorefile" > "$listfile" || true
-				grep -Evf "$listfile"
+				LC_CTYPE=C grep -Evf "$listfile"
 				;;
 			git)
 				(git ls-files -oi --exclude-standard; git ls-files -oi --exclude-standard --directory) | sort | uniq > "$listfile" || true
 				if [ -s "$listfile" ]; then
-					sed 's/^\.\///' | grep -xFvf "$listfile"
+					sed 's/^\.\///' | LC_CTYPE=C grep -xFvf "$listfile"
 				else
 					cat -
 				fi
@@ -124,7 +124,7 @@ maybe_chmod_chown() {
 		egid=$(id -g)
 		q="'"
 		while read x; do
-			stat=$(stat -c "%f:%u:%g:%a:%U:%G" $x)
+			stat=$(stat -c "%f:%u:%g:%a:%U:%G" "$x")
 			IFS=":" read mode uid gid perm uname gname <<EOF
 $stat
 EOF

etckeeper/update-ignore.d/01update-ignore

@@ -131,6 +131,7 @@ writefile () {
 	ignore "*.LOCK"
 	ignore network/run
 	ignore adjtime
+	ignore udev/hwdb.bin
 	ignore lvm/cache
 	ignore lvm/archive
 	ignore "X11/xdm/authdir/authfiles/*"

logrotate.d/ssh-logins

@@ -0,0 +1,10 @@
+/var/log/ssh-logins.log {
+        weekly
+        missingok
+        rotate 4
+		dateext
+        compress
+        delaycompress
+        notifempty
+}
+

mock/alma+epel-8-ppc64le.cfg

@@ -0,0 +1,6 @@
+include('templates/almalinux-8.tpl')
+include('templates/epel-8.tpl')
+
+config_opts['root'] = 'alma+epel-8-ppc64le'
+config_opts['target_arch'] = 'ppc64le'
+config_opts['legal_host_arches'] = ('ppc64le',)

mock/almalinux-8-ppc64le.cfg

@@ -0,0 +1,5 @@
+include('templates/almalinux-8.tpl')
+
+config_opts['root'] = 'almalinux-8-ppc64le'
+config_opts['target_arch'] = 'ppc64le'
+config_opts['legal_host_arches'] = ('ppc64le',)

mock/fedora-37-armhfp.cfg

@@ -1 +0,0 @@
-fedora-rawhide-armhfp.cfg

mock/fedora-rawhide-armhfp.cfg

@@ -1,4 +0,0 @@
-config_opts['target_arch'] = 'armv7hl'
-config_opts['legal_host_arches'] = ('armv7l', 'armv8l', 'aarch64')
-
-include('templates/fedora-rawhide.tpl')

mock/templates/centos-stream-9.tpl

@@ -98,7 +98,7 @@ enabled=0
 name=CentOS Stream $releasever - Extras packages
 #baseurl=http://mirror.stream.centos.org/SIGs/$releasever-stream/extras/$basearch/extras-common/
 metalink=https://mirrors.centos.org/metalink?repo=centos-extras-sig-extras-common-$releasever-stream&arch=$basearch
-gpgkey=file:///usr/share/distribution-gpg-keys/centos/RPM-GPG-KEY-CentOS-SIG-Extras
+gpgkey=file:///usr/share/distribution-gpg-keys/centos/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
 gpgcheck=1
 enabled=1
 skip_if_unavailable=False

named.conf

@@ -84,8 +84,8 @@ options {
 		slip 2;
 		window 30;
         ipv4-prefix-length 32;
-        responses-per-second 25;
+        responses-per-second 50;
-        errors-per-second 5;
+        errors-per-second 10;
         nxdomains-per-second 25;
 		exempt-clients { 127.0.0.1; 192.168.1.0/24; 10.208.1.0/24; 86.104.210.218/32; };
     };

resolv.conf

@@ -1 +1 @@
-nameserver 192.168.1.2
+nameserver 192.168.1.1

rhsm/rhsm.conf

@@ -34,7 +34,7 @@ proxy_user =
 # password for basic http proxy auth, if needed
 proxy_password =
 
-# host/domain suffix blacklist for proxy, if needed
+# host/domain suffix blocklist for proxy, if needed
 no_proxy =
 
 [rhsm]

selinux/targeted/.policy.sha512

@@ -1 +1 @@
-06e4c548ce738335fc48192f279ecf41bf778d6eced7291c554b5536033ea0912d55c0b99e06375624da3bb919efb3f23912239e9253c8073b67be806e65552b
+81046d058f63ea58462fbdbb387ccb02f51dcdb86e1b6b71b6823b9b720779770d2e62a5da1025170eb675570c484f65b25b9f1c761dc80231d47fb04344fb21

ssh/sshrc

@@ -2,11 +2,16 @@
 
 export PATH="/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/bin:$PATH"
 
+DATE="$(date)"
 HOSTNAME="$(hostname)"
+USERIP="$(echo "$SSH_CONNECTION" | cut -d " " -f 1)"
+RDNS="$(dig -x "$USERIP" +short)"
 
 if [[ "$USER" == "laser" ]]
 then
 	curl -s -X POST -H "content-type: application/json" -d '{"routing_key":"1969ec3d30b74608d0135d6321275bb7","event_action":"trigger","payload":{"summary":"User '"$USER"' has logged in via SSH!!","source":"/etc/ssh/sshrc","severity":"critical","component":"exploratory-stats","group":"prod-d  atapipe","class":"deploy"}}' https://events.pagerduty.com/v2/enqueue
+	#echo "User $USER logged in via SSH using ip address: $USERIP (dns: $RDNS) at $DATE" >> /var/log/ssh-logins.log
 else
+	#echo "User $USER logged in via SSH using ip address: $USERIP (dns: $RDNS) at $DATE" >> /var/log/ssh-logins.log
 	exit 0
 fi