Puppet 8.8.1

Released July 2024.

This release adds support for the following operating systems: AlmaLinux 9 (x86_64, AARCH64), Rocky Linux 9 (x86_64, AARCH64), and Ubuntu 24.04 (x86_64, ARM). In addition, Puppet is updated to ensure compatibility with Ruby 3.3.

GitHub releases

Additional details about release updates are available on GitHub. For more information, go to the following sites:

• Facter
• Puppet
• Puppet agent
• Puppet runtime

Enhancements

New operating systems

You can now install Puppet agent on the following new operating systems:

• AlmaLinux 9 (x86_64, AARCH64)
• Rocky Linux 9 (x86_64, AARCH64)
• Ubuntu 24.04 (x86_64, ARM)

Ruby update

Puppet is updated to ensure compatibility with Ruby 3.3.

Security

OpenSSL upgrade

Upgraded to OpenSSL 3.0.14 to address CVE-2024-4603 and CVE-2024-2511.

Reverted change

Change related to splay limits was reverted.

In the Puppet 8.7.0 release, a defect was corrected to ensure that any splay setting updates in the Puppet configuration file (puppet.conf) would be applied to daemonized Puppet runs. However, the fix resulted in an unexpected side issue that caused splays to be frequently recalculated, potentially delaying Puppet startup times. For this reason, the change was reverted. In the Puppet 8.8.1 release, splay setting updates in the Puppet configuration file (puppet.conf) are not applied to daemonized Puppet runs.

Resolved issues

Sensitive values returned by deferred functions are protected.

Previously, in certain circumstances, when a function of the Deferred type returned a value of the Sensitive type, the value was displayed in clear text. The issue is resolved to help ensure that sensitive values are protected.

Windows agents now run as expected.

Previously, when a value of 0 was specified for the runinterval setting, Windows agents ran every 30 minutes. Now, a setting of 0 causes the agents to run continuously as expected.

Resolved issue with catalog compilation.

Addressed an issue where catalog compilation would fail when running the puppet lookup command with the --compile option when server facts were present in the catalog.

Resolved issue to ensure that the Puppet agent service starts automatically.

In certain circumstances, when Puppet was successfully installed or upgraded on MicrosoftWindows Server 2019 or 2022, the Puppet agent service did not restart automatically as expected. This fix helps to ensure that the service starts running without user intervention. Community member rismoney submitted the issue, which was fixed by another community member, vibe.

Deprecated Security-Enhanced Linux (SELinux) methods are replaced.

Deprecated SELinux methods of the matchpathcon family such as Selinux.matchpathcon are replaced by supported SELinux methods such as Selinux.selabel_lookup. This update does not require any action by Puppet users. Community member wbclark contributed to this fix.

Contributors

The Puppet team appreciates all Puppet Community members who contributed content to the July 2024 releases and extends special thanks to the following first-time contributors: @jiwonaid and @jordanbreen28.