<div class="container">
<h1>Recommended update for suse-migration-rpm, suse-migration-services</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2025:4415-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2025-12-16T14:43:32Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>critical</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1246513">bsc#1246513</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1248137">bsc#1248137</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250003">bsc#1250003</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250076">bsc#1250076</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250078">bsc#1250078</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1253963">bsc#1253963</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-13640">jsc#PED-13640</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">openSUSE Leap 15.6</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that contains one feature and has six fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for suse-migration-rpm, suse-migration-services fixes the following issues:</p>
<p>Changes for suse-migration-services:
- Fix mount_system unit
- Run ssh precheck only for SLE16 target
- Only generate wicked xml if service is the active network
- Fix unit link check and no use of path.join
- Fixed migration live image package requires
- Update setup_host_network service
- Fix backup processing
- Fix log handler setup
- Drop and backup /etc/sysconfig/network
- Skip migration if wicked is not the default network config service
- Add package_installed method
- Backup drop_path data
- Check if package exists prior drop
- Fixed use of suse version macros
- Drop README_QA.rst
- Update conditional requires per review
- Consolidate project documentation
- Fixed spec file regarding wicked2nm
- Fix update_version helper
- Fix mount_system
- Fix order of reboot service
- Improve dracut logging
- Drop wicked component after nm migration
- Move script package to the main migration provider
- Add DropComponents class
- Fixed spec file
- Create systemd.link files for biosdevname (bsc#1253963)
- Create lib file for common network-prereq tasks
- update PAM configurations to use pam_unix.so (jsc#PED-13640)
- Omit cio_ignore kernel commandline on zkvm (bsc#1250003)
- Refactor mount_system service
- Fix order of reboot service
- Add support for wicked2nm in container workflow
- Fix unit test for solver test case
- Fixes for btrfs_snapshot_pre_migration
- Set systemd offline for Zypper in chroot mode
- Fix apparmor install procedure
- Fixed azuremetadata device lookup
- Use of f-strings not allowed in the DMS (bsc#1248137)
- Simplify interface naming by disabling predictable names at boot
- Fixed test_check_lsm_migration unit test
- Fix setup_host_network_test by mocking os.makedirs
- wicked2nm: log network state on nm-online failure
- Fixed LSM pre checks to be more robust
- shellcheck heavily complained
- Do not evaluate wicked2nm output in precheck
- Fix unit test for lsm check
- prechecks/lsm.py: remove _apparmor_analyze_profiles()
- LSM migration check for AppArmor -> SELinux
- Improve pre-check message
- Fix MinSLEVersion value depending on target
- Reduce package set on migration image
- Fixed behavior of wicked2m pre check
- Implementation of sshd root login pre-check
- Fixed selinux to apparmor migration
- Fixed reading of migration config for target class
- Add recursion guard to MigrationConfig::_merge_config_dicts
- Shrink migration image
- container/sle16/config.sh
- sle16/config.sh - use dropin for s390 migration-config
- doc: fix indentation
- Check for migration target by matching ISO file name
- config: introduce dropin dir migration-config.d/
- Apply SLE16 live image setup to container setup
- Bind mount only required subdirectories under /run into chroot
- Fix: Migration is done, but we get messages about core dumps (bsc#1250078)
- Add missing package requirement
- check migration target before testing for architecture version
- setup_host_network: simplify code - use os.makedirs()
- Create systemd.link files for virtual VMware/Hyper-V NICs (bsc#1250076)
- Preserve systemd.link files from /etc/systemd/network/
- Add changes for newest wicked2nm
- Ensure wicked2nm is a dependency of pre-checks for SLE 16 migration
- Apply sysctl to migration system
- Implement x86_64 CPU architecture check as a pre-check
- Activation packages can no longer be noarch
- Fix update of image .changes files
- Architecture check before allowing migration to be activated
- Improve error logs when wicked2nm fails
- Include image changelog to version bump
- Ensure wicked2nm migration is always running, despite warnings
- Fix: add "--no-recommends on patterns-base-selinux installation"
- Update suse-migration-services for container use
- Update README
- Update SLE16 migration container
- Update SAP live migration image
- Add missing pre snapshot setup to run_migration
- Follow up fix for the wicked to nm migration
- Add wicked2nm network migration
- Add glob support to preserve_files
- Setup ExclusiveArch for activation packages
- Build sles4sap migration for cloud on x86_64 only
- Do not build sles4sap migration on s390x
- Use systemctl kexec
- Fix: return the correct kernel path based on machine type
- Fixed glob pattern match for package name
- Remove mentioning of SLES 12-SP4
- Make activation package require by provides tag
- Do not use list[str] type hint
- Fix error evaluation from offline_migrations API
- Fix logging from non unit files
- Fix product related requirement settings
- Repos for migration image must be in kiwi
- Added .ssh to migration user for SAP 15 live image
- Added SLES15-SAP_Migration Makefile target
- Fix typo in service name
- Drop obsolete check for resolv.conf
- Fix migration user home dir setup for SLE16
- Update README_QA.rst
- test: split unit test for setup_name_resolver
- Install patterns-base-selinux for Apparmor migration
- Ensure the rebuild counter is not stripped from the rpm
- Exit silently if no migration iso is found
- Ensure rpmlintrc file is part of suse-migration-services SRPM
- Ignore fixup! entries when generating changelog
- Increase python test matrix
- Remove redundant requires on itself
- Fix ordering of pre-checks and actual migration
- Add SLES15-Migration target to Makefile
- Fix suse-migration-console-log service
- Fix typo in README_QA
- Fix: split name resolver setup into its own service
- Fix: Migration from 15SP7 to SLE 16: suse-migration-setup-host-network.service fails reporting "Could not find /system-root/etc/resolv.conf" (bsc#1246513)
- Fix: set path according to current arch in grub.d/99_migration
- Add support to enable single rpm transaction for upgrade
- Enable suse-migration-ha.service in the migration image
- Migration for high availability extension
- RPM wrapper fixes
- Cleanup specfile to follow python singlespec policy
- Support product specifier in ISO name
- Ensure sle16 images can build on all supported platforms
- Use name pattern compatible to suse-migration-rpm
- Fix SLE15 migration images
- SAP product should migrate to 15 SP4
- Add SLES15-SAP-Migration
- Update bumpversion config
- Handle selinux boot option when using kexec
- Ensure migration to SLES16 uses selinux, not apparmor
- Improve os-release parsing
- Ensure SLES16 is also detected in SCC precheck
- Add high availability extension check
- Fix package names for python packages on SLE16 - Relax on the shim-install call
- Fixup package name for SLE16 and SLE16 container
- Fix changelog references for activation packages
- Fix and cleanup update_bootloader service
- Add product migration check</p>
<p>Changes for suse-migration-rpm:
- Fix MinSLEVersion value depending on target
- Add product requirement according to image name.
- Exit silently if no migration iso is found.
- Add build and perl(Date::Parse) to ensure we can append changelog entries to generated package.</p>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
openSUSE Leap 15.6
<br/>
<code>zypper in -t patch openSUSE-SLE-15.6-2025-4415=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
openSUSE Leap 15.6 (noarch)
<ul>
<li>python3-migration-2.1.29-150000.1.83.1</li>
<li>suse-migration-services-2.1.29-150000.1.83.1</li>
<li>suse-migration-pre-checks-2.1.29-150000.1.83.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
<ul>
<li>suse-migration-rpm-1.0.1-150000.1.20.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1246513">https://bugzilla.suse.com/show_bug.cgi?id=1246513</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1248137">https://bugzilla.suse.com/show_bug.cgi?id=1248137</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250003">https://bugzilla.suse.com/show_bug.cgi?id=1250003</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250076">https://bugzilla.suse.com/show_bug.cgi?id=1250076</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250078">https://bugzilla.suse.com/show_bug.cgi?id=1250078</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1253963">https://bugzilla.suse.com/show_bug.cgi?id=1253963</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-13640">https://jira.suse.com/browse/PED-13640</a>
</li>
</ul>
</div>