diff --git a/ChangeLog b/ChangeLog
index 14958f8c3..6e6d0542d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,1679 +1,1702 @@
+* Wed Oct 30 2024 resource-agents contributors
+- release candidate 4.16.0 rc1
+- ocf-shellfuncs: only create/update and reload systemd drop-in if needed
+- spec: drop BuildReq python3-pyroute2 for RHEL/CentOS
+- Filesystem: dont sleep during stop-action when there are no processes to kill
+- Filesystem: on stop, try umount directly, before scanning for users
+- Filesystem: only use $umount_force after sending kill_signals
+- Filesystem: stop/get_pids: improve logic to find processes
+- Filesystem: add azure aznfs filesystem support
+- IPaddr2: add proto-parameter to be able to match a specific route
+- IPaddr2: improve fail logic and check ip_status after adding IP
+- IPaddr2: use dev keyword when bringing up device
+- IPsrcaddr: specify dev for default route, as e.g. fe80:: routes can be present on multiple interfaces
+- apache/http-mon.sh: change curl opts to match wget
+- azure-events*: use node name from cluster instead of hostname to avoid failing if they're not the same
+- docker-compose: use "docker compose" when not using older docker-compose command
+- findif.sh: ignore unreachable, blackhole, and prohibit routes
+- nfsserver: also stop rpc-statd for nfsv4_only to avoid stop failing in some cases
+- podman: force-remove containers in stopping state if necessary (#1973)
+- powervs-subnet: add optional argument route_table (#1966)
+- powervs-subnet: modify gathering of Apikey, calculation of timeout
+- powervs-subnet: enable access via private endpoint for IBM IAM
+
 * Fri Jul 26 2024 resource-agents contributors
 - stable release 4.15.1
 - IPaddr2: dont fail with "IPv4 does not support lvs_ipv6_addrlabel"
   error, as the parameter is not used in IPv4 scenarioes
 
 * Wed Jul 24 2024 resource-agents contributors
 - stable release 4.15.0
 - build: dont build powervs-subnet if dependencies are missing
 - spec: use /usr/sbin paths for Fedora 41+
 
 * Wed Jul 17 2024 resource-agents contributors
 - release candidate 4.15.0 rc1
 - outscale: new resource agent (#1938)
 - powervs-subnet: new resource agent (#1948)
 - configure: fix enable_ansi check
 - ocf-shellfuncs: add curl_retry()
 - ocf-shellfuncs: dont use deprecated validate-with="none" in CIB
 - ocf-shellfuncs: fix version regex in ocf_local_nodename()
 - ocf-shellfuncs: ocf_run(): add debug level error logging
 - findif.sh: add metric for IPv6 support and fail when matching more than 1 route
 - AWS agents: use curl_retry() for metadata requests
 - Filesystem: fail when incorrect device mounted on mountpoint, and dont unmount the mountpoint in this case, or if mountpoint set to "/"
 - Filesystem: fail when leading or trailing whitespace is present in device or directory parameters
 - Filesystem: return success during stop-action when leading or trailing whitespace is present in device or directory parameters
 - Filesystem: silence "Expected /dev/... to exist" message for probe-action
 - Filesystem: use fuser -Mm (was -m) to avoid killing unrelated processes
 - Filesystem: use fuser -c on FreeBSD, as -m and -M are used for other functionality
 - IPaddr2: change default for lvs_ipv6_addrlabel to true to avoid last added IP becoming src IP
 - IPaddr2: use metric for IPv6
 - IPsrcaddr: add IPv6 support
 - apache/http-mon.sh: dont use -L for wget2 as it's not implemented yet
 - apache/http-mon.sh: prefer curl due to new wget2 issues, including not being able to resolve hostnames from /etc/hosts
 - azure-events-az: update to API versions, add retry functionality for metadata requests, update tests
 - azure-lb: fix issue where disabled IPv6 made it fail when using socat after adding IPv6 (#1939)
 - conntrackd/galera/rabbitmq-cluster: avoid deprecated tool options
 - galera/mariadb/mysql/redis: remove Unpromoted monitor-action, as it's covered by the regular monitor-action
 - pgsql: pgsql_status: silence expected "ERROR: command failed: runuser ..." messages
 - send_arp.libnet: use calloc() to avoid truncating pidfilename if it is more than 64 chars long
 - storage-mon: add logging to daemon mode.
 
 * Wed Apr 24 2024 resource-agents contributors
 - stable release 4.14.0
 - doc: writing-python-agents: add description of is_probe() and distro()
 
 * Wed Apr 17 2024 resource-agents contributors
 - release candidate 4.14.0 rc1
 - all agents: remove -S state/status that are either ignored, or give an error message in newer versions of Pacemaker
 - configure: fix "C preprocessor "gcc -E" fails sanity check" error caused by autoconf 2.72
 - configure: prepare to not build with -ansi by default in the future
 - docs: writing-python-agents: update required Python version to 3.6+
 - spec: use /usr/sbin paths for Fedora 40+
 - LVM-activate: avoid false positive for VG activation (fail when system_id_source and volume_list are set)
 - aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter and AWS Policy based authentication type
 - azure-lb: support IPv6 with Azure load balancer when using socat
 - db2: fix OCF_SUCESS typo in db2_notify
 - docker: return OCF_NOT_RUNNING when Docker isn't running
 - findif.sh: fix corner cases
 - findif.sh: fix loopback handling
 - findif: check that netmaskbits != EOS in addition to != NULL in all cases
 - galera: allow joiner to report non-Primary during initial IST
 - nfsserver: fix "server scope" functionality for both potentially other dropins AND multiple ExecStart
 - ocivip: fix PRIMARY_IFACE variable when it returns two lines
 - openstack-info: ensure no newlines in openstack_ports
 - portblock: accept numeric protocol from iptables (to fix regression in iptables 1.8.9 that has shipped in some distros)
 - portblock: remove write to tcp_tw_recycle
 - storage_mon: fix file handler out of scope leak and uninitialized values
 - storage_mon: use memset() to fix "uninitialized value" covscan error, as qb_ipcc_recv() will always set a message
 
 * Wed Oct 11 2023 resource-agents contributors
 - stable release 4.13.0
 - findif.sh: dont use table parameter as it returns no netmask (tested with
   main/local/custom tables)
 
 * Wed Oct  4 2023 resource-agents contributors
 - release candidate 4.13.0 rc1
 - iSCSILogicalUnit/iSCSITarget: add support for scst
 - Delay: increase stop, status and monitor timeouts to 40s to avoid failing with default values
 - Delay: remove statement about defaulting to "startdelay" value if not specified
 - Filesystem: create systemd drop-in for network filesystems
 - Filesystem: fail if AWS efs-utils not installed when fstype=efs
 - Filesystem: improve stop-action and allow setting term/kill signals and signal_delay for large filesystems
 - Filesystem: list_mounts: fix mount command output parsing
 - IPaddr2/IPsrcaddr: add/modify table parameter to be able to find interface while using policy based routing
 - IPv6addr: expect ping/pong delay
 - LVM-activate: add degraded_activation and majority_pvs parameters to allow failover with missing PVs
 - ZFS: improve volume imported check for newer ZFS releases (#1853)
 - azure-events*: fix for no "Transition Summary" for Pacemaker 2.1+
 - db2: avoid eval with unsanitized values (#1838)
 - ethmonitor: dont log "Interface does not exist" for monitor-action
 - exportfs: make the "fsid=" parameter optional
 - exportfs: move testdir() to start-action to avoid failing during resource creation (validate-all) and make it create the directory if it doesnt exist
 - mysql-common: point to log file when start-action fails (#1887)
 - mysql: fix promotion_score bouncing between ~3600 and 1 on demoted nodes
 - mysql: promotable fixes to avoid nodes getting bounced around by setting -v 1/-v 2, and added OCF_CHECK_LEVEL=10 for promotable resources to be able to distinguish between promoted and not
 - nfsserver: fix "server scope" functionality to live with additional drop-in files
 - nfsserver: prepare the layout for the default /var/lib/nfs if nfs_shared_infodir isnt defined
 - ocf-shellfuncs: Explicitly specify $OCF_RESOURCE_INSTANCE in the -p parameter for compatibility
 - pgsql: dont run promotable and file checks that could be on shared storage during validate-all action
 - postfix: update permission check from su to runuser/su (#1880)
 - spec: Migrate to SPDX license
 - spec: remove JFLAGS logic and use %{_smp_mflags} like we do in other projects
 - storage-mon: add daemon/client mode.
 
 * Wed Jan 25 2023 resource-agents contributors
 - stable release 4.12.0
 
 * Wed Jan 18 2023 resource-agents contributors
 - release candidate 4.12.0 rc1
 - azure-events-az: new resource agent (#1774)
 - iface-macvlan: new resource agent (#1815)
 - configure/spec: remove google-api-client BuildReq as the gcp-agents build fine without it
 - configure: fix bashisms
 - dev-guide: update default branch name
 - ocf-shellfuncs: add ocf_promotion_score() to use crm_attribute -p/crm_master depending on Pacemaker version
 - spec: remove redhat-lsb-core dependency (lsb_release)
 - spec: use cluster-glue-devel for opensuse > 15
 - all agents: update to promotable terms
 - CTDB: change public_addresses validate-all warning to info
 - CTDB: move process to root cgroup if realtime scheduling is enabled
 - Filesystem: improve logic for UUID/label and add note that /dev/disk/by-{uuid,label}/ are preferred on Linux
 - Filesystem: remove validate-all mountpoint warning as it is auto-created during start-action if it doesnt exist
 - IPsrcaddr: detect metric for main table only, and allow specifying metric if necessary
 - IPsrcaddr: fix PROTO regex
 - IPsrcaddr: fix monitor/status for default route not being equal to src IP before start, and change route src correctly in stop-action
 - IPsrcaddr: use scope host when using non-main tables
 - LVM-activate: use correct return codes to ensure correct action when failing
 - SAPInstance: be more resilient against broken kill.sap files (#1825)
 - VirtualDomain: replace error log messages with calls to ocf_exit_reason
 - WAS6: add missing ] to fix trap condition
 - aws-vpc-move-ip: allow to set the interface label
 - dnsupdate: add CNAME support (#1773)
 - docker-compose: fix number of containers/running containers logic
 - docker/podman/zabbixserver: replace error log messages with calls to ocf_exit_reason
 - ethmonitor/ovsmonitor/mariadb: check for bc binary
 - ethmonitor/ovsmonitor/pgsql: remove ignored attrd_updater "-q" parameter
 - exportfs: only grep in rmtab if it exists
 - galera/mariadb/mpathpersist/mysql/pgsql/sg_persist/Stateful: use ocf_promotion_score() to avoid issues with deprecated crm_master
 - galera/mpathpersist/sg_persist/IPsrcaddr: only check notify and promotable when OCF_CHECK_LEVEL=10
 - iSCSILogicalUnit: fix issue where resource was in stopped state when using allowed_initiators parameter (#1766)
 - lvmlockd: add "use_lvmlockd = 1" if it's commented out or missing
 - lvmlockd: fail when use_lvmlockd has not been set
 - mariadb: remove obsolete DEBUG_LOG functionality #1191
 - mysql-common: return error in stop-action if kill fails to stop the process, so the node can get fenced
 - mysql-proxy: update metadata to suggest secure location instead of /tmp/mysql-proxy.sock
 - nfsserver: add nfsv4_only parameter to make it run without rpc-statd/rpcbind services
 - ocf-tester: remove deprecated lrmd/lrmadmin code that hasnt worked since pre-pacemaker days
 - ocf-tester: use promotable terms
 - openstack-agents: set domain parameter's default to Default and fix missing parameter name in ocf_exit_reason
 - openstack-agents: warn when openstackcli is slow
 - openstack-cinder-volume: dont do volume_local_check during start/stop-action
 - openstack-floating-ip/openstack-virtual-ip: dont fail in validate() during probe-calls
 - openstack-floating-ip: fix awk only catching last id for node_port_ids
 - oracle: improve the error message if monpassword was not set. (#1767)
 - podman: add podman parameter error judgment (#1764)
 - portblock: implement blocking of outgoing ports
 - rabbitmq-server-ha: dont mkdir -p when getting meta-data or help
 - storage_mon: use the O_DIRECT flag in open() to eliminate cache effects
 - storage_mon: do random lseek even with O_DIRECT, etc
 - storage_mon: fix bug in checking of number of specified scores.
 - storage_mon: fix build-related issues
 - storage_mon: improve error messages when ioctl() fails
 - storage_mon: make -h exit just after printing help message (#1791)
 - storage_mon: fix bug in handling of child process exit
 - vdo-vol: dont fail probe action when the underlying device doesnt exist
 
 * Wed Apr  6 2022 resource-agents contributors
 - stable release 4.11.0
 - Filesystem: fix logic for UUID/label devices with space between parameter and UUID/label
 - db2/openstack-info: fix bashisms
 
 * Wed Mar 30 2022 resource-agents contributors
 - release candidate 4.11.0 rc1
 - corosync-qnetd: new resource agent
 - ocivip: new resource agent
 - rabbitmq-server-ha: agent migration from RabbitMQ the project (#1698)
 - Filesystem: add support for Amazon EFS mount helper
 - Filesystem: fix OpenBSD check in fstype_supported()
 - Filesystem: unmount bind mounts before unmount file system
 - IPaddr2: allow to disable Duplicate Address Detection for IPv6
 - IPaddr2: allow to send IPv6 Neighbor Advertisements in background
 - IPsrcaddr: add warning about possible issues when used with DHCP
 - IPsrcaddr: fixes to use findif.sh to detect secondary interfaces
 - LVM-activate: change lvm_status return value from OCF_NOT_RUNNING to OCF_ERR_GENERIC to avoid fencing (#1753)
 - LVM-activate: replace error log messages with calls to ocf_exit_reason (#1730)
 - LinuxSCSI: replace error log messages with calls to ocf_exit_reason
 - Route: return OCF_NOT_RUNNING for probe action when interface or route doesnt exist
 - asterisk: fix sipsak check during start-action (#1715)
 - build: workaround gcc 12 warning
 - configure: only run ci/build.sh when shellcheck is present
 - db2: only warn when notify isnt set, and use ocf_local_nodename() to get node name
 - db2: use -l forever instead of -t nodes -l reboot, as they conflict with eachother
 - gcp-ilb: only check if log_cmd binary is available if log_enable is true
 - ipsec: add missing $ to make variable expand in check (#1755)
 - mysql-common: fix local SSL connection by using --ssl-mode=REQUIRED which is available on 5.7+ (--ssl is not available in 8.0)
 - nginx: replace error log messages with calls to ocf_exit_reason
 - nvmet-subsystem: fix allowed_initiators to avoid only running once (found by shellcheck)
 - ocf-distro: improve RHEL based distro detection (added AlmaLinux, Oracle Linux, and Rocky Linux)
 - ocf-shellfuncs: parametrise the log destination by OCF_RESKEY_trace_dir
 - ocf-shellfuncs: quote pid in ocf_pidfile_status
 - openstack-*: add insecure parameter
 - openstack-*: add support for multiple setup options (incl. clouds.yaml/openrc)
 - openstack-info: align op timeout with other openstack agents
 - podman: remove anonymous volumes during stop-action
 - rabbitmq-server-ha: Fix SERVER_START_ARGS sname/name use for FQDN
 - rabbitmq-server-ha: Revert "OCF RA: Do not start rabbitmq if notification of start is not about us" (#1713)
 - spec: fix Requires to allow install on opensuse
 - spec: fix mount.cifs if() for RHEL/CentOS 9+
 
 * Wed Nov  3 2021 resource-agents contributors
 - stable release 4.10.0
 
 * Wed Oct 27 2021 resource-agents contributors
 - release candidate 4.10.0 rc1
 - VirtualDomain: added the ability to unset utilization variables (#1703)
 - all agents: specify agent and OCF versions corrently in metadata
 - configure: use new SYSTEMD_ parameters
 - gcp-pd-move/gcp-vpc-move-route: dont fail failed resources instantly (caused by OCF_ERR_CONFIGURED)
 - iSCSILogicalUnit: do not use lio_iblock with lio-t
 - metadata.rng: update to support resource agent version according to the OCF standard
 - nfsnotify: fix default value for "notify_args"
 - nfsnotify: fix rpcuser error when resource start on debian (#1696)
 - nfsserver: fix NFSv4 lock failover: set NFS Server Scope (#1688)
 - ocf.py: add agent and OCF version parameters (both defaults to 1.0)
 - portblock: use ss when available, netstat is "obsolete"
 - ra-dev-guide: update agent/OCF version info (#1699)
 - storage-mon: update metadata to suggest usage in combination with HealthSMART agent
 - symlink: fix symlink vs target realpath comparison (#1691)
 - tickle_tcp: fix build issue on opensuse 15.3
 - tools: add nfsconvert for RHEL-based distros
 
 * Thu Aug 19 2021 resource-agents contributors
 - stable release 4.9.0
 - Filesystem: force_unmount: remove "Default value" to avoid confusion on RHEL9+ where default value is safe
 
 * Thu Aug 12 2021 resource-agents contributors
 - release candidate 4.9.0 rc1
 - CTDB: replace timeout override with ctdb_timeout parameter (#1661)
 - Filesystem: do not call partprobe for bind mounts
 - LVM-activate: disable VG autoactivation in system_id access_mode
 - LVM-activate: fix drop-in check to avoid re-creating drop-in file when it already exists
 - SAPInstance: Fix for issue #1680 - SAPInstance fails to detect systemd integration (#1681)
 - SAPInstance: add systemd compatability (#1662)
 - VirtualDomain: add code to set the host_memory value for Utilization (#1649)
 - VirtualDomain: add start_resources parameter that ensures needed virtual
   storage pools and networks are up and refreshed when enabled
 - VirtualDomain: drop prefix xenmigr from migrate uri
 - azure-events: update api_version
 - build: fix out-of-tree build for man pages
 - configure: add /usr/local/share to fallback path to be scanned for docbook path
 - configure: test for json and remove hardcoded #! in openstack-info
 - db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check
 - dummy: add missing action to dummy_usage function
 - findif: popen requires pclose and not fclose (#1664)
 - gcp-ilb: add to Makefiles
 - gcp-ilb: new resource agent to respond to health checks (#1541)
 - gcp-vpc-move-route: add serviceaccount JSON file support
 - gcp-vpc-move-vip.in: add retry to avoid failing on first failed request
 - gcp-vpc-move-vip: add serviceaccount JSON file support
 - iSCSILogicalUnit: lio-t: support setting product_id
 - lvmlockd: remove cmirrord support as it's incompatible with lvmlockd
 - mdraid: add option description for OCF_CHECK_LEVEL
 - mysql: add support for local SSL connection (#1682)
 - nvmet-subsystem/nvmet-namespace/nvmet-port: new resource agents for NVMe-oF-Target
 - ocf-shellfuncs: Remove a bashism in
 - openstack-cinder-volume: CLI output parsing fixes, fetch of node ID consistency, monitor action simplification, and return error when validate fails
 - openstack-floating-ip: return error when validate fails and small log message fixes.
 - openstack-info: run validate in start action. (#1639)
 - openstack-info: updates due to API output format changes and attempt to future-proof parsing of the output.
 - openstack-virtual-ip: new resource agent for virtual IP support in OpenStack.
 - podman: workaround race during container creation
 - smb-share: new resource agent to manage Samba shares on the fly. (#1628)
 - spec: remove chkconfig dependency for Fedora < 34
 - storage-mon: new resource agent (#1675)
 
 * Wed Mar 24 2021 resource-agents contributors
 - stable release 4.8.0
 - awsvip: dont partially match similar IPs during monitor-action
 - aws agents: dont spam log files when getting token
 - galera/rabbitmq-cluster/redis: run crm_mon without performing validation
   to solve pcmk version mismatch issues between host and container(s)
 - podman: return OCF_NOT_RUNNING when monitor cmd fails (not running)
 
 * Wed Mar 17 2021 resource-agents contributors
 - release candidate 4.8.0 rc1
 - Filesystem: change force_unmount default to safe for RHEL9+
 - Route: return OCF_NOT_RUNNING status if iface doesn't exist.
 - VirtualDomain: fix pid_status() on EL8 (and other distros with newer versions of qemu) (#1614)
 - anything: only write PID to pidfile (when sh prints message(s))
 - azure-lb: redirect stdout and stderr to /dev/null to avoid nc dying with EPIPE error
 - configure: dont use OCF_ROOT_DIR from glue.h
 - docker-compose: use -f $YML in all calls to avoid issues when not using default YML file
 - gcp-vpc-move-route, gcp-vpc-move-vip: add project ID parameter
 - gcp-vpc-move-route: fix stop-action when route stopped, and fix check_conflicting_routes()
 - gcp-vpc-move-route: make "vpc_network" optional
 - gcp-vpc-move-vip: correctly return error when no instances are returned
 - ldirectord: added real servers threshold settings
 - mysql-common: check datadir permissions
 - nfsclient: fix stop-action when export not present
 - nfsserver: error-check unbind_tree
 - pgsql: make wal receiver check compatible with PostgreSQL >= 11
 - spec: add BuildRequires for google lib
 
 * Wed Dec  9 2020 resource-agents contributors
 - stable release 4.7.0
 - ocf-shellfuncs: make ocf_is_bash4() detect Bash v4 or greater (which it was supposed to according to the comments)
 - ocft: fix OCF_RESKEY_CRM_meta_timeout
 - crypt: avoid failing for LVM exclusive volumes by not running full sanity check during probes
 - LVM-activate: use systemd drop-in to stop before blk-availability.service
 - ocf-distro: improve robustness and specificity (#1558)
 - crypt: allow encrypted_dev to be symlink to support using devices in /dev/disk/... or by UUID
 - iface-vlan: vlan_{interface,id} do not have to be unique.
 
 * Wed Dec  2 2020 resource-agents contributors
 - release candidate 4.7.0 rc1
 - Build: fix systemd paths when using non standard prefix
 - Configure: default to build heartbeat agents only
 - Configure: use pkg-config to detect systemd-paths to make CI able to define them the same way for all CL-projects
 - CI: add pkg-config file
 - AWS agents: add support for IMDSv2
 - Filesystem: Default fast_stop to no for RHEL 9+ and for other distros
 - Filesystem: POSIX-compliant syntax for portability
 - Filesystem: make mmap search not match partial matches
 - Filesystem: support whitespace in device or directory name
 - LVM-activate: use systemd drop-in to stop before blk-availability.service
 - SAPInstance: introduce MINIMAL_PROBE resource parameter (#1564)
 - asterisk: chown directory if not writable by user (#1583)
 - aws-vpc-move-ip: add "region" parameter
 - aws-vpc-move-ip: added optional eni lookup (defaults to instance id)
 - aws-vpc-move-ip: don't warn for expected scenarios
 - aws-vpc-move-ip: use "region" parameter for all commands
 - azure-events: import URLError and encode postData when necessary
 - azure-events: only decode() when exec() output not of type str
 - azure-events: report error if jsondata not received
 - azure-lb: don't redirect nc listener output to pidfile
 - crypt: allow encrypted_dev to be symlink to support using devices in /dev/disk/... or by UUID
 - crypt: avoid failing for LVM exclusive volumes by not running full sanity check during probes
 - crypt: fix missing && to set exit_reason
 - crypt: make key_file and crypt_type parameters not unique
 - docker-compose: use "docker ps" to improve status accuracy (#1523)
 - ethmonitor: make regex also match vlan interfaces
 - galera/redis: support RHEL 8.1 pacemaker
 - galera/redis: use --output-as for crm_mon w/newer Pacemaker, and prepare for Promoted role
 - galera: fix automatic recovery when a cluster was not gracefully stopped
 - galera: fix check_user configuration with clustercheck
 - galera: recover after network split in a 2-node cluster
 - galera: recover from joining a non existing cluster
 - galera: set bootstrap attribute before promote
 - gcp-pd-move: fixes to not match partial disk_name and make regional PD's work
 - gcp-vpc-move-vip: add support for multiple alias IP ranges on one node
 - gcp-vpc-move-vip: fix sort for list of dicts in Python3
 - gcp-vpc-move-vip: improve metadata and log messages
 - iSCSILogicalUnit: lio-t: add pscsi LIO-T backing store
 - iSCSITarget: add support for LIO-T incoming CHAP auth for TPG
 - iface-vlan: vlan_{interface,id} does not have to be unique
 - kamailio: use correct pkill parameters
 - man: use OCF_CHECK_LEVEL for depth parameters in pcs examples
 - man: use promotable keyword in manpage examples
 - mdraid: fix bashism
 - nfsnotify/nfsserver: fix SELinux issue due to newer ls versions giving additional output
 - nfsserver: stop nfsdcld if present during stop-action
 - ocf-distro: improve robustness and specificity (#1558)
 - ocf.py: fix problem when OCF_RESKEY_CRM_meta_interval is not set
 - ocf.py: fix usage for py2 when self param is involved
 - ocf_version_cmp(): enable comparing versions containing git hashes and more
 - pgsql: support RHEL 8.1 pacemaker
 - podman: recover from killed conmon side process
 - podman: recover from podman's storage being out of sync
 - send_arp (libnet): use sigaction() instead of deprecated siginterrupt()
 - send_ua/IPv6addr: use sigaction() instead of deprecated siginterrupt()
 - spec: fix lsb_release dependency
 - spec: ldirectord: added perl-IO-Socket-INET6 dependency on Fedora
 - spec: make Samba/CIFS dependency weak for Fedora 32 and RHEL/CentOS 8 and remove the dependency for later Fedora/RHEL/CentOS versions
 - spec: dont use Recommends for RHEL/CentOS 7 or older (where it's not supported)
 - sybaseASE: add logfile parameter
 - sybaseASE: run verify_all() for start operation only
 
 * Thu Jun 18 2020 resource-agents contributors
 - stable release 4.6.1
 - dummypy: add agent to Makefiles/configure and change from f-strings to make it
   compatible with Python < 3.6
 
 * Thu Jun 18 2020 resource-agents contributors
 - stable release 4.6.0
 - ocf_is_ms(): also check OCF_RESKEY_CRM_meta_promotable to make it work w/Pacemaker 2.x
 - pgsql: use XML output for better backward and forward compatibility, and "Promoted"
   keyword to be ready for Pacemaker 2.1
 - ldirectord: add support for ldaps
 - Filesystem: set "fast_stop" default to "no" for GFS2 filesystems as they are
   likely to use more than 6 seconds to stop
 - exportfs: fix ocft script failure
 - build: fix failing to run "ln -s" if link already exists
 - Multiple RA: fix bashisms
 
 * Thu Jun 11 2020 resource-agents contributors
 - release candidate 4.6.0 rc1
 - crypt: new RA
 - mdraid: new RA
 - docker-compose: new RA
 - dummypy: new Dummy RA
 - Filesystem: add lustre as networked filesystem
 - Multiple RA: use secure tmp file location
 - Squid: added squid_opts parameter to metadata
 - ZFS: importforce should not be a unique parameter.
 - aliyun-vpc-move-ip: log output when failing and add debug logging
 - aws-vpc-move-ip/aws-vpc-route53: add awscli parameter for consistency with
 other AWS agents
 - aws-vpc-move-ip: delete remaining route entries
 - aws-vpc-route53: cleanup and improvements
 - aws-vpc-route53: add support for public and secondary private IPs
 - azure-events: handle exceptions in urlopen()
 - clvm: fix _default variables for daemon_options and activate_vgs
 - db2: HADR add STANDBY/REMOTE_CATCHUP_PENDING/DISCONNECTED to correctly promote standby node when master node disappears (e.g. via fencing)
 - exportfs: add symlink support
 - galera: fix value used for connecting with empty password.
 - gcp-pd-move: fixes and improvements
 - gcp-vpc-move-route/gcp-vpc-move-vip: disable google api cache discovery
 - nfsserver: fix NFSv4-only support
 - nfsserver: prevent error messages when /etc/sysconfig/nfs does not exist
 - ocf-shellfuncs: fix ocf_is_clone() (clone_max can be 0 with cloned resources)
 - ocf.py: eliminated logging.basicConfig(), which made all log data appear in
 stderr as well
 - oracle: increase security of monitor user in oracle
 - pgsql: support to crm_mon output for Pacemaker-2.0.3.
 - podman: make sure to remove containers with lingering exec sessions
 - rabbitmq-cluster: increase the rabbitmqctl wait timeout during start()
 - redis: run validate-action during start
 - tomcat: only create directory during start action
 
 * Fri Mar  6 2020 resource-agents contributors
 - stable release 4.5.0
 - iSCSILogicalUnit: fix default value for OCF_RESKEY_liot_bstype
 - aws-vpc-move-ip: add parameter for role to use to query/update route table
 
 * Fri Feb 28 2020 resource-agents contributors
 - release candidate 4.5.0 rc1
 - Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
 - Filesystem: refresh UUID in the start phase
 - IPaddr2: add noprefixroute parameter
 - IPaddr2: add info to metadata that ipt_CLUSTERIP "iptables" extension is not "nft" backend compatible, and iptables-legacy support for distros that still support it
 - IPsrcaddr: replace local rule if using local table, and set src back to primary for device on stop
 - IPsrcaddr: fix failure during probe when using destination/table parameters
 - LVM-activate: add OCF_CHECK_LEVEL 10 check that can be enabled to verify vg or lv validity with an additional "read 1 byte" test in special cases like iSCSI SAN
 - MailTo: fix variable expansion
 - SAPInstance: clear the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation
 - aliyun-vpc-move-ip: add support for both 'go' and 'python' versions of Aliyun CLI, and auto-detect which to use by default
 - apache: use get_release_id() to detect OS/distro, and fix LOAD_STATUS_MODULE issue
 - azure-lb set socat to default on SUSE distributions.
 - exportfs: allow multiple exports of same directory
 - iSCSILogicalUnit: add liot_bstype to handle block/fileio for targetcli, and change behavior of lio-t with portals which do not use 0.0.0.0
 - ldirectord: support sched-flags
 - lvmlockd: fix for LVM2 v2.03+ removing lvmetad
 - mysql-common: return correct rc during start-action
 - oralsnr: allow using the same tns_admin directory for different listeners
 - pgsql: Support for PostgreSQL 12
 - podman: improve the code for checking if an image exists
 - rabbitmq-cluster: ensure we delete nodename if stop action fails
 - redis: validate_all: fix file status tests
 - spec: add missing requirement (lsb-release)
 
 * Wed Oct 23 2019 resource-agents contributors
 - stable release 4.4.0
 - NodeUtilization: fix Xen detection and improve logging
 
 * Wed Oct 16 2019 resource-agents contributors
 - release candidate 4.4.0 rc1
 - All RA: Use _default variables for all parameters
 - Build: improvements and fixes to make "make rpm" work on all archs in CI
 - CTDB: add support for v4.9+
 - Delay: protect grep regex argument from shell globbing
 - Filesystem: don't call readlink on path if it doesnt exist
 - Filesystem: fix to avoid killing all root user processeswhen bind mounting a directory on /
 - Filesystem: improve "/" check for bind mounts
 - IPaddr2: fix to work properly with unsanitized IPv6 addresses
 - IPsrcaddr: add destination and table parameters
 - LVM-activate: add partial-activation support
 - LVM-activate: fix monitor might hang due to lvm_validate, which was added by accident
 - LVM-activate: move pvscan --cache to validate
 - Route: dont fence node when parameters arent set
 - apache: check if SUSE binaries are executable
 - apache: fix to also detect mod_status.so when it is a symlink
 - apache: improve PidFile pattern to support multiple instances
 - apache: load status module on SUSE distros
 - aws-vpc-route53: improved API error handling and fix to avoid race-condition during probe
 - aws-vpc-route53: replace ec2metada with curl to fetch the IP address directly from EC2 metadata
 - azure-lb: add support for using socat instead of nc
 - docker: improve the check for the docker daemon being up
 - exportfs: doc clarification for clientspec format
 - gcp-pd-move: add stackdriver_logging parameter
 - iSCSILogicalUnit: only create acls if it doesnt exist
 - mysql/mariadb/galera: use runuser/su to avoid using SELinux DAC_OVERRIDE
 - mysql: add support for SSL replication
 - nfsserver: performance improvements for systemd enabled systems
 - ora-common: fix to fail when sid parameter is invalid
 - podman: generate drop-in dependencies for podman containers
 - podman: only use exec to manage container's lifecycle
 - rabbitmq-cluster: also restore users/perms/policies when starting in single node mode
 - redis: fix master_is_active() erroneously reporting there is master when there is not (fixes issue #1399)
 - redis: use optimal password passing method and warning filtering workaround
 
 * Fri Jun 21 2019 resource-agents contributors
 - stable release 4.3.0
 - Filesystem: remove removed notify-action from metadata
 
 * Fri Jun 14 2019 resource-agents contributors
 - release candidate 4.3.0 rc1
 - Build: improve to be able to build and install on RHEL 6
 - CTDB: add ctdb_max_open_files parameter
 - CTDB: fix version string with vendor trailer comparison
 - Filesystem: Fix missing mount point due to corrupted mount list
 - Filesystem: fix umount not executed in the event of a disk failure
 - IPaddr2: add network namespace support
 - IPsrcaddr: make proto optional to fix regression when used without NetworkManager
 - LVM-activate: align dmsetup report command to standard
 - LVM-activate: dont count "No devices" as device in dm_count
 - LVM-activate: dont fail initial probe
 - LVM-activate: make vgname not uniqe
 - LVM-activate: only check locking_type when LVM < v2.03
 - LVM-activate: return OCF_NOT_RUNNING on initial probe
 - LVM: return $OCF_ERR_GENERIC when start fails
 - Maint: introduce optional spellchecking for {short,long}desc (make spellcheck)
 - Route: make family parameter optional
 - SAPDatabase: metadata: add HANA usage example and improved the Monitor Services defaults documentation
 - Squid: fix PID file issue w/newer Squid versions
 - aws-vpc-move-ip: add support for multiple network interfaces
 - aws-vpc-move-ip: add support for multiple routing tables
 - aws-vpc-move-ip: get NETWORK_INTERFACE_ID from metadata instead of using awscli
 - aws-vpc-move-ip: improve MAC address detection
 - aws-vpc-move-ip: use --query to avoid possible race condition w/old grep implementation
 - azure-events: fix implicit bytes conversion that breaks Python 3
 - clvm: support exclusive mode
 - configure: add Python library detection
 - dhcpd: keep SELinux context when copying to chroot
 - docker: fail gracefully when command not found
 - docker: use --type=container to avoid matches from other types
 - dovecot: new RA
 - ethmonitor: check if interface exists by link
 - galera: Allow empty password for "check_passwd" parameter
 - galera: Log message when changing content of grastate.dat file
 - galera: ignore safe_to_bootstrap in grastate.dat in some cases
 - gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
 - lxc: add support for lxc-stop
 - named: add host_options parameter
 - ocf-distro: add regex for RedHat version
 - ocf.py: add support for role argument to actions
 - ocf: do not log at debug log level when HA_debug is unset (e.g. w/Pacemaker remote)
 - openstack*: add support for re-attaching volumes, v3 API
 - pgsql: enhance checks in pgsql_real_start to prevent incorrect status
 - pgsql: set initial score for primary and hot standby in probe
 - podman: avoid double call to podman inspect
 - ra-dev-guide: correct notify action documentation
 - rabbitmq-cluster: always use quiet flag for eval calls
 - rabbitmq-cluster: debug log detailed output when mnesia query fails
 - rabbitmq-cluster: ensure node attributes are removed
 - rabbitmq-cluster: fix regression in rmq_stop
 - redis: Filter warning from stderr when calling 'redis-cli -a'
 - tomcat: use systemd on RHEL when catalina.sh is unavailable
 - vdo-vol: new RA
 - vsftpd: fix missing $ on invalid exit code detected by CI
 
 * Wed Oct 24 2018 resource-agents contributors
 - stable release 4.2.0
 - apache: fix return value for silent_status
 - rabbitmq-cluster: fail monitor when node is in minority partition
 - ocf.py: only add s-suffix to timeout and interval
 - ZFS: check status without locks when possible
 - pgsql: fix to avoid failing on masters re-promote
 - azure-events: new RA
 
 * Wed Oct 17 2018 resource-agents contributors
 - release candidate 4.2.0 rc1
 - CI: fixes for bash path, strncpy in GCC 8 and missing docbook-style-xsl
 - CTDB: fix "ctdb_recovery_lock" validation
 - CTDB: fix version string comparison for versions containing text (e.g. beta or rc)
 - CTDB: fix incorrect DB corruption reports (ensure health check is run)
 - Filesystem: support symlink as mountpoint directory
 - IPaddr2: return OCF_ERR_GENERIC when failing due to IPv4 address collision
 - LVM-activate: fix for dashes in volume group and logical volume names
 - LVM-activate: read parameters for stop-action
 - LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
 - LVM: added missing dash for activation parameters
 - README: added links and IRC info
 - SAPDatabase: add info to meta-data
 - SAPInstance: add monitored services for ENSA2 (bsc#1092384)
 - SAPInstance: implement reload action to avoid resource restarts after a non-unique parameter has been changed
 - SAPInstance: improve SAP instance profile detection
 - SAPInstance: improve stop-action logging
 - Squid: use ss if netstat is not available
 - VirtualDomain: add stateless support
 - VirtualDomain: correctly create logfile and set permissions
 - Xen: add utilization support for cpu and hv_memory
 - aliyun-vpc-move-ip: new RA
 - apache: retry PID check.
 - aws-vpc-move-ip: check routing table during monitor probe action
 - aws-vpc-move-ip: fix backward-compatibility
 - aws-vpc-move-ip: use ip utility to check address
 - awseip: fix allocation_id not found error
 - awseip: update required IAM role permissions
 - awsvip: get network-id from metadata
 - awsvip: improve secondary-private-ip query
 - configure: add Python path detection
 - exportfs: fix square bracket stripping in clientspec
 - findif: improve IPv6 NIC detection
 - findif: only match lines containing netmasks
 - galera: do not call ocf_attribute_target() for meta-data action
 - garbd: support netstat and ss
 - gcp-pd-move: new RA
 - gcp-vpc-move-ip: new RA
 - gcp-vpc-move-route: new RA (improved Python version of gcp-vpc-move-ip)
 - gcp-vpc-move-vip: new RA
 - iSCSITarget: support CHAP authentication for lio-t
 - ipsec: add tunnel fallback option
 - ldirectord: add manpage to systemd unit file
 - lvmlockd: add cmirrord support
 - mysql: remove obsolete DEBUG_LOG functionality (bsc#1021689)
 - nfsserver: mount based on rpcpipefs_dir parameter
 - nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount
 - ocf-binaries: use SSH-path detected by configure
 - ocf.py: new Python library and dev guide
 - openstack-cinder-volume/openstack-floating-ip/openstack-info: new RA's
 - oracle: improve dbopen error
 - pgsql: create replication slots after promoting master
 - pgsql: dont change ownership of /dev/null
 - pgsql: support PostgreSQL 11 or later
 - podman: new RA
 - portblock: support ss and netstat (partial)
 - ra-dev-guide: update instructions for GitHub
 - rabbitmq-cluster: get cluster status from mnesia during monitor
 - rabbitmq-cluster: retry start when cluster join fails
 - redis: do not use absolute path in pidof calls
 - send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
 - sfex: fix errors with latest gcc
 - sg_persist: correctly pickup old keys
 - spec: improved path-based Requires
 - sybaseASE: new resource agent
 - syslog-ng: add Premium Edition 6 and 7 support
 - systemd-tmpfiles: configure path with --with-rsctmpdir
 
 * Mon Mar  5 2018 resource-agents contributors
 - stable release 4.1.1
 - VirtualDomain: properly migrate VMs on node shutdown (bsc#1074014)
 - mpathpersist: fixed issue with reservation key parsing in status()
 - pgsql: create stats temp directory if it doesnt exist
 - pgsql: improved validation for replication mode
 
 * Mon Feb 26 2018 resource-agents contributors
 - release candidate 4.1.1 rc1
 - awseip/awsvip: improvements (incl multi NIC support)
 - Filesystem: add support for cvfs
 - redis: add support for tunneling replication traffic
 - Raid1: ignore transient devices after stopping a device
 - tomcat: fix invalid stop option
 - oracle: log warning when using using sysdba instead of "monuser"
 - crm_*: use new parameter names
 - syslog-ng: fix to make commercial version supported as well
 - lvmlockd: change lvm.conf to use lvmlockd
 - mariadb: new RA for MariaDB master/slave replication setup with GTID
 - mpathpersist: new RA
 - lxd-info/machine-info: new RAs
 - IPsrcaddr: only check for ifconfig on BSD/Solaris
 - CTDB: cope with deprecated "idmap backend" smb.conf option
 - CTDB: add new possible location for CTDB_SYSCONFIG
 - oracle: fix alter user syntax for set_mon_user_profile
 - db2: improve monitor and simplify STANDBY/.../DISCONNECTED
 - ocf-shellfuncs: fix fallback name for ocf_attribute_target()
 - CTDB: fix initial probe
 - jira: new RA
 - azure-lb: new RA
 - IPsrcaddr: match exact route to avoid failing
 
 * Tue Nov 28 2017 resource-agents contributors
 - stable release 4.1.0
 - ipsec: new RA
 - apache: improved stop action
 - db2: fix HADR promote when master failed
 - ethmonitor: add intel omnipath support
 
 * Tue Nov 14 2017 resource-agents contributors
 - release candidate 4.1.0 rc1
 - nfsserver: allow stop to timeout
 - LVM-activate: add new RA for LVM activation
 - docker: add docker-native healthcheck query
 - aws-vpc-route53: Fix tempfile race (bsc#1059312)
 - aws-vpc-move-ip: cleanup and improvements
 - pgsql: add support for PostgreSQL 10
 - rabbitmq-cluster/redis/galera use ocf_attribute_target
 - ocf-shellfuncs: add ocf_attribute_target()
 - rabbitmq-cluster: Use RMQ_CTL var everywhere instead of rabbitmqctl
 - CI: add libxml2-utils to package list
 - systemd-tmpfiles: create the resource-agents directory
 - rkt: new RA
 - lvmlockd: new RA
 - galera: fix instance name in master_exists()
 - Route: remove debug output
 - Route: add family attribute to set address family
 - galera: honor "safe_to_bootstrap" flag in grastate.dat
 - VirtualDomain: add shutdown_mode attribute
 - aws-vpc-route53: new RA (fate#322781)
 - awseip/awsvip: fixes and improvements
 - ZFS: new RA
 - minio: new RA
 - CTDB: don't fail on empty persistent directory (bsc#1052577)
 - sapdb.sh: add hdbnameserver to monitor services
 - VirtualDomain: new attributes migrateuri, remoteuri, migration_user
 - Raid1: handle case when mddev is a symlink
 - portblock: suppress dd output
 - kamailio: fixes and enhancements for v5.0
 - ocf-shellfuncs: improve locking (ocf_take_lock())
 - anything: create PID directory if it doesnt exist
 - anything: allow multiple instances of binfiles to be run (pidfile will be unique)
 - mysql: properly detect read-only state
 - iSCSILogicalUnit: add emulate_tpu, emulate_3pc and emulate_caw parameters
 - fs.sh: fix builds when srcdir and builddir are seperated
 - LVM: warn when cache mode is not writethrough
 - nginx: fix return code when configfile check fails
 - SAPInstance: Add IS_ERS parameter (bsc#1036486)
 - systemd: add resource-agents-deps target
 - ocf-shellfuncs: simplify ocf_run returned rc
 - docker: add mount_points parameter to create directories used by container if they doesnt exist
 - IPaddr2: add option for specifying IPv6's preferred_lft
 - galera: fix master target during promotion with cluster_host_map
 - rabbitmq-cluster: backup and restore policies
 - DB2: fix HADR support for DB2 V98+
 - pgsql: fix regex to detect async mode
 - rabbitmq-cluster: fix to work on Pacemaker remote nodes
 - oraasm: new RA for Oracle ASM Disk Groups
 - pgsql: fix undefined variable
 - ovsmonitor: new RA
 - NodeUtilization: new RA
 - CTDB: fix for --logfile being replaced with --logging
 - pgsql: allow dynamic membership
 - redis: wait for pid file to appear after start
 - redis: add check and default for redis-check-rdb
 - named: add support for rndc options
 - docker: deal with image name correctly
 - iSCSILogicalUnit: replace openssl with md5sum
 - ra-dev-guide: fix description of OCF_ERR_ARGS
 - clvm: remove reload action from metadata
 - galera: fix the first bootstrap when cluster has no data
 - galera: fix permission of temporary log file for mariadb 10.1.21+
 - kamailio: add kamctl, kamgroup and extra_options parameters
 - ocf_log: use same log format as pacemaker
 - pgsql: replace "crm_failcount" with "crm_resource"
 - ocf-shellfuncs: ocf_run: avoid shell glob expansion of log messages
 - iSCSILogicalUnit: add lio-t IPv6-support
 - iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
 - mysql: set correct master score after maintenance mode
 - varnish: add support for v4.0
 
 * Thu Feb  2 2017 resource-agents contributors
 - stable release 4.0.1
 - galera: remove "long SST monitoring" support due to corner-case issues
 - exportfs: improve regexp handling of clientspec (only strip brackets from edges to support IPv6)
 
 * Tue Jan 31 2017 resource-agents contributors
 - stable release 4.0.0
 - LVM: fix partial activation detection
 - Filesystem: add ZFS support
 - specfile: add metadata.rng
 - redis: use "CLIENT KILL type normal" to notify clients of master being demoted
 - IPaddr2: add IPv4 collision detection
 - galera: add "cluster_host_map" parameter to map Pacemaker hostnames to Galera hostnames
 - multiple RA: fix grammar, spelling and typos
 - pgsql: add support for PostgreSQL 9.6
 - rabbitmq-cluster: reset Mnesia and fetch data when joining cluster
 
 * Tue Jan 10 2017 resource-agents contributors
 - release candidate 4.0.0 rc1
 - CI: add metadata verification
 - ocf_mkstatedir: fix path check
 - IPaddr2: return success on stop with invalid IP
 - Filesystem: check if there are any mounts mounted under the mountpoint
 - specfile: make requirements general and update comments
 - portblock: use -w (wait) to avoid "insufficient privileges" error
 - rabbitmq-cluster: fix dump/restore users for RabbitMQ ver. 3.6.x and newer
 - Updated mailing list/wiki references
 - pgsql: fix tr replacement for replication slot names
 - IPaddr2: log refresh arp packets at debug level instead of info
 - IPaddr2: add option to enable sending refresh arp packets in monitor
 - findif.sh: fix to ifcheck() to not suppress stdout of "ip"
 - galera: prevent promote right after demote
 - galera: make last commit parsing compatible with MariaDB 10.1.18+
 - specfile: add requires netstat
 - multiple RA: fixed issues discovered by ShellCheck
 - apache: reduce log spam for success
 - rgmanager: fix RNG schema for cluster config
 - LVM: add error messages for partial_activation
 - slapd: improved stop processing
 - docker: clarify limitations of monitor_cmd in parameter description
 - redis: restore rundir security context
 - docker: reduce monitor log spam
 - nfsserver: dont stop rpcbind, as other services might use it
 - Filesystem: improved exit reason if mount fails
 - Delay: set default startdelay lower than start timeout to avoid timeout with default values
 - docker: use docker exec for monitor_cmd if supported
 - sapdb.sh add support for HANA Multi-Tenant Databases
 - lvm.sh: fix status clustered to check specified logical volume
 - sg_persist: do not spill info output to stderr
 - sg_persist: allow to run resource agent in debug mode
 - sg_persist: fix matching of hex node ids
 - tomcat: add systemd support and option to disable it
 - oracle: add quotes for monuser and monpassword and inform user to start monuser with C## if it's a container database
 - rabbitmq-cluster: allow automatic cluster recovery before forcing it
 - nfsserver: systemd tests to make sure all services are running and monitored
 - rabbitmq-cluster: add POSIX error codes to detect node failure
 - rabbitmq-cluster: forget node before 2nd joining attempt
 - exportfs: add IPv6 support
 - galera: source settings from /etc/default/clustercheck
 - pgsql: fix to adjust stop_escalate time when it is longer than the timeout
 - heartbeat/Makefile.am: add missing agents
 - exportfs: fix monitor reporting wrong state after the node has been fenced
 - Rename ra-dev-guide.txt to ra-dev-guide.asc
 - awseip: add support to associate secondary private IP with elastic IP
 - garbd: new RA
 - ldirectord: fix for IPv4/IPv6 mixed environments
 - ocf-tester: fix to allow non-shell based agents.
 - nfsserver: add support to detect which init script to use
 - ldirectord: run initial check of all services on start to make sure all services always have the correct state
 - sapdb.sh: pass start/stop timeouts to saphostctrl
 - SAPDatabase: Add START_TIMEOUT and STOP_TIMEOUT parameters
 - rabbitmq-cluster: backup and restore RabbitMQ users during resource restart
 - iSCSILogicalUnit: add support for rbd store.
 - awseip: new RA to manage AWS EC2 elastic IP
 - awsvip: new RA to manage AWS EC2 secondary private IP
 - oracle: inform user that monprofile must start with C## for container databases
 - tickle_tcp: fix "Failed to open raw socket (Invalid argument)" issue
 - symlink: handle missing directories in target
 - mysql: handle non-standard mysql server port
 - VirtualDomain: fix unnecessary error when probing nonexistent domain
 - sapdb.sh fix to evaluate parameter DBOSUSER in start and stop
 - oracle: fix to be able to recover from ORA-01081
 - oralsnr: fix status check fail when username is more than 8 characters long
 - galera: don't bootstrap from a node with no grastate.dat when possible
 - galera: fix monitoring of joining node for long running SST
 - pgagent: new RA
 - ocf_shellfuncs: set OCF_RESOURCE_INSTANCE default to "RESOURCE_ID" for meta-data
 - ldirectord: add new "servicename" and "comment" options for alert e-mails
 - clusterfs.sh / fs.sh: fix .clumanager/statd ownership
 - rabbitmq-cluster: forget stopped rmq nodes with notify=true
 - apache: ensure readable $TESTCONFFILE and improved error handling for testurl/testregex
 - SAPDatabase: support Oracle 12c
 - apache: add Debian support
 - iSCSITarget: iSER enabled portal support
 - SAPInstance: update SAP WebAS version support statement
 - ldirectord: don't send "inaccessible real server" e-mails per child in fork=yes mode
 
 * Wed Feb  3 2016 resource-agents contributors
 - stable release 3.9.7
 - ldirectord: fix unset failcount error
 - iscsi: add portal check to open_iscsi_get_session_id()
 - galera: use mysql's --tc-heuristic-recover if crash recovery is needed
 - nfsserver: fix monitor for systemd
 
 * Wed Jan 20 2016 resource-agents contributors
 - release candidate 3.9.7 rc1
 - nfsserver.sh: add hostname attribute for NFS export (required for NFSv4+Kerberos support)
 - oradg.sh: new RA for Oracle Data Guard
 - ocf_shellfuncs: suppress bash specific trace_ra log on dash
 - sg_persist: remove uncalled for ocf_run calls
 - multiple RA: replace error log messages with calls to ocf_exit_reason
 - nfsserver: only do redhat specific stuff on redhat
 - exportfs: don't increment fsid for single directory
 - Filesystem: add tmpfs support
 - netfs.sh: move defaults to metadata
 - nfsserver: /var/lock/subsys is non-standard, check for it first
 - nagios: new RA
 - docker: check for errors in the container name
 - mysql: fix grep failure on MySQL 5.6 or higher when checking read_only variable
 - VirtualDomain: new attributes migration_speed and migration_downtime
 - fs: remove not-working tmpfs support
 - vm.sh: add migrate_options parameter
 - nfsserver: Use rpc-statd.service for NFS locking in EXEC_MODE=3 (bsc#955114)
 - nfsserver: Add EXEC_MODE for systemd without nfs-lock.service (bsc#955114)
 - IPaddr2: Add IPv6 DAD collision detection
 - Filesystem: add overlay as supported filesystem
 - ldirectord: dns_check and fallbackcommand enhancements
 - IPaddr2: fix potential syntax error on if-then-else
 - SAPDatabase: add Oracle 12 to list of supported databases (bsc#953991)
 - mysql-common.sh: fix issue where "removing old PID file" wasnt logged
 - mysql-common.sh: when mysql has been stopped, mysql stop returns success
 - mysql.sh: wait up to startup_wait seconds before failing if mysqld startup is slow
 - orainstance.sh: fix 90s wait/killing of databases containing the name of the database being killed, and added cleanup code to kill remaining listener process
 - ip.sh: Use DAD to check for IPv6 address collision
 - iSCSITarget: fix to only create one IQN and add portals to it
 - galera: document the bootstrap flow
 - galera: start joining nodes during 'monitor' to allow long-running SST
 - galera: add support for MYSQL_HOST and MYSQL_PORT from /etc/sysconfig/clustercheck
 - redis: fix password parser
 - pgsql fix exec_sql errors like "unknown variable select pg_ " in dash
 - pgsql: fix get_my_location() sql regression
 - docker: fix image variable name
 - pgsql: Fix return code override in pgsql_real_start()
 - slapd: add "maxfiles" parameter to set max number of open files (for ulimit -n)
 - redis: use required client password when set
 - send_arp: fix for infiniband, re-merge from upstream iputils arping
 - CTDB: Preserve smb.conf permissions (bsc#935253)
 - lxc: fix emergency stop functionality on 1.0
 - tomcat: use runuser instead of su for SELinux enforcing mode
 - pgsql: use runuser intead of su command for SELinux enforcing mode
 - docker: image name check fixes
 - iSCSITarget: properly create portals for lio-t implementation
 - iSCSILogicalUnit: when deleting a LUN or initiator fails with lio-t, proceed with warning
 - iSCSILogicalUnit: return OCF_NOT_RUNNING on monitor if backing path does not exist
 - iSCSILogicalUnit: add check for leftover target/core entries for lio-t
 - pgsql: delete old replication slot when creating a new slot.
 - Filesystem: support RozoFS
 - orainstance.sh: interpret listener stop results correctly
 - dhcpd: use correct default chroot for RHEL based systems
 - LVM: allow vgck failures if partial_activation is true
 - redis: avoid 0 byte dump.rdb start failures
 - docker: fix container_exist test
 - redis: fixed start operation if replication sync takes > 20 seconds
 - ethmonitor: add link_status_only option for skipping RX counter and arping tests
 - clvm: fix issue with only first option of daemon_options being used
 - IPsrcaddr: return correct error code during stop when misconfigured
 - clvm: activate_vgs option for enable/disable of automatic vg activation
 - galera: properly redetect bootstrap after demote
 - galera: clear last know sequence number any time promote is even attempted
 - asterisk: fix return code
 - galera: retrieve last sequence number without using read-only mode
 - redis: add wait_last_known_master option
 - redis: only connect to active master instances
 - redis: do not attempt to demote if redis is dead
 - redis: reliable shutdown.
 - pgsql: add support for replication slots
 - redis: set executable bit to be able to greate docs (make rpm)
 - rabbitmq-cluster: fix rmq_join_list() to only return online nodes
 - rabbitmq-cluster: new RA
 - Filesystem: support overlayfs
 - sg_persist: use default binary setting in meta-data
 - dnsupdate: use nsupdate_opts parameter
 - nfsserver: merge options into existing /etc/sysconfig/nfs
 - portblock: portno param can be a string like 137,138
 - portblock: replace ancient heartbeat config with crm configure
 - portblock: clarify TCP RST vs ICMP port unreachable
 - VirtualDomain: enforce C locale in force_stop
 - redis: retry on unknown error when starting
 - redis: remove stop timeout and add placeholder master during election period
 - CTDB: Change default socket location to CTDB's expected default.
 - multiple RA: make sure that the pidfile directory exist
 - multiple RA: create state-directory writable by the application
 - orainstance.sh: Handle ORA-* error messages
 - redis: new RA
 
 * Thu Jan 29 2015 resource-agents contributors
 - stable release 3.9.6
 - VirtualDomain: add migrate_options parameter
 - VirtualDomain: enforce C locale in status
 - ocf-shellfuncs: add printenv to RA trace
 - nginx: allow different URLs for level 10 and 20 monitor
 
 * Tue Jan 20 2015 resource-agents contributors
 - release candidate 3.9.6 rc1
 - VirtualDomain: add sync_config_on_stop to sync the config to
   other nodes
 - mysql.sh: Allow MySQL to run as user other than mysql
 - fs-lib.sh: Fix missed detection of write failure
 - iscsi: run iscsi discovery only when necessary
 - VirtualDomain: save the config before virsh undefine
   (bnc#891915)
 - sg_persist: new RA
 - ldirectord: Add Install section for systemd unit file.
 - kamilio: new RA
 - findif.sh: Use the most specific matching route
 - LVM: volgrpname is unique (meta-data update)
 - ldirectord: Get correct user for sending email (bnc#910497)
 - iSCSILogicalUnit: do not set write_back when creating
   backstore/block
 - portblock: Feature: reset_tcp_on_unblock_stop
 - nfsserver: prevent error messages on platforms without rpcuser
 - Xen: fix regression with xm and quoting (lf#2671)
 - lxc: re-add LXCpre1.0 logic
 - lxc: fix for missing lxc-ps command
 - Route: some unique attributes are not unique (meta-data)
 - IPaddr2 findif: accept dotted quad netmask
 - VirtualDomain: For Xen, prefer xl to xen-list (boo#901453)
 - Xen: Use xl list $domain return code in status check
   (boo#901453)
 - pgsql: PostgreSQL 9.3 compatibility for unix_socket_directories
 - lvm_by_vg.sh: Only strip tag on stop if we are owner
 - ocf-shellfuncs: set HA_LOGD depending on HA_use_logd
 - mysql: avoid use of check_binary in common validation function.
 - mysql: report error when validation fails during monitor yet
   pid is still active
 - docker: new RA
 - mysql: do not report success on 'stop' if validation fails
 - anything: fix output redirection
 - mysql: fix unexpected operation error that caused by MySQL
   client timeout.
 - Middle: anything: Prevent stop failure, even if the job takes
   time to stop.
 - doc: Add pcs to man page example section
 - multiple RA: exit reason support
 - Build: add --compat-habindir option for HA_BIN backward
   compatibility
 - iSCSITarget: monitor operation must pass before start is
   considered complete
 - iSCSILogicalUnit: monitor operation must pass before start is
   considered complete
 - iSCSILogicalUnit:  Fixes the check for pre-existing LUN ACLs
 - iSCSITarget: fixes syntax error caused by targetcli update
 - Filesystem: when loading kernel modules wait for filesystem to
   initialize
 - ethmonitor: add infiniband status monitoring support
 - Xinetd: refine exit codes when xinetd is stopped
 - Xen: Properly quote domain name in call to create
 - Xen: Use xenstore-ls to get status if available
 - Xen: Replace use of xm with xl (bnc#882548)
 - oracle: fix setting monitor user profile for other languages
   (nls)
 - apache: Revised fix for init script reference on SUSE
   (bnc#884674)
 - VirtualDomain: Try xenstore-ls if no emulator is set
   (bnc#885292)
 - galera: new RA
 - VirtualDomain: Add support for qemu-dm as emulator (bnc#885292)
 - CTDB: add ctdb_rundir parameter and create on startup
 - VirtualDomain: new parameter save_config_on_stop to enable
   saving running VM's configuration
 - fs-lib.sh: Force kill processes with access to shared libraries
   on mount point
 - iSCSILogicalUnit: add targetcli support
 - Filesystem: Add force_unmount option
 - nfsserver: regenerate statd state file before starting nfs
 - nfsnotify: new RA
 - nfsserver: introducing nfs_no_notify option for suppressing
   reboot notifications
 - nfsserver: Keep statd directories synced with ha backup
 - oracle: reset MONUSR password if expired
 - oracle: try as sysdba if monitor as MONUSR fails
 - oracle: Make monitoring user configurable (bnc#850589)
 - oralistener.sh: Do not fail during stop if listener has already
   stopped
 - nfsserver: Add options for explicitly setting nfs daemon ports
 - vsftpd: new RA
 - fs-lib.sh: Fix usage of findmnt to work for filesystems
   containing bind mounts
 - exportfs: allow multiple exports
 - ldirectord: Update .spec file with systemd support (bnc#863250)
 - ldirectord: Add systemd unit file (bnc#863250)
 - nfsserver: Do not require shared info directory when cloned
 - nfsserver: Allow dynamically setting rpc.nfsd options.
 - iscsi: iscsi status fails with open-iscsi with support for
   flash (bnc#878039)
 - Med: rgmanager/fs: typo preventing passing some mount opts
 - nfsserver.sh: add an optional option for the rpc.statd
   listening port
 - Feature: addition of bind-mount resource agent for rgmanager
 - exportfs: Do not fail during monitor and stop operations if dir
   has trailing slash
 - nfsserver: Do not fail monitor if lock services are enabled
 - nfsserver: let systemd service files handle lock notifications
 - vm.sh: 'no_kill' option for preventing auto destruction of vm
   after timeout period
 - vm.sh: Monitor kvm resources without requiring libvirtd to be
   up
 - nfsserver: preserve statd directory permissions during
   sm-notify or else lock recovery fails
 - kamailio: new RA
 - nfsserver.sh: On stop, kill sm-notify so /var/lib/nfs/statd can
   be unmounted
 - db2: Report OCF_ERR_GENERIC instead of OCF_NOT_RUNNING when
   instance is not completely up
 - named.sh: Fix issues running named daemon as a non-root user
 - db2.sh: rgmanager wrapper for the heartbeat db2 agent
 - CTDB: do not fail monitor operation when ctdb socket does not
   exist
 - exportfs: set unlock_on_stop_default=1 (bnc#864263)
 - dnsupdate: new RA
 - clvm: new RA
 - mysql: handle $secs_behind = NULL
 - dhcpd: Added a restart-function
 - high: conntrackd: allow probe to return OCF_RUNNING_MASTER
 - VirtualDomain: check process table for qemu-system-* too, not
   just qemu-kvm
 - VirtualDomain: avoid running "virsh uri" if hypervisor is set
 - apache.sh: Add ability to set custom httpd binary
 - db2: Allow db2 agent to work without crm_master binary
 - VirtualDomain: Attempt to determine vm status even when libvirt
   is unavailable
 - VirtualDomain: Fixes parsing domain name from xml file.
 - fs-lib.sh: Fixes failure to unmount local fs when process runs
   with cwd inside fs mount
 - ldirectord: Fix sockaddr_in6 redefined error
 - Pure-FTPd: Create pid directory if needed
 - VirtualDomain: support more virsh domstate output formats
 - varnish: Added support for ulimit -l and ulimit -n
 - lxc: support up-to-date lxc-ps versions
 - tomcat: Override default tomcat config with resource options
 - nfsserver: nfsserver not starting due to missing etab file
 - tomcat: Avoid unnecessary force kill of tomcat on stop
 - tomcat: Avoid race condition in reading pid file on stop
 - slapd: find the correct default slapd config in fedora
 - tomcat: Detect start script location
 - pgsql: Support for non-standard port and library locations
 - fix netfs unmount/self_fence integration
 - Med: oracledb.sh: Remove quotes around listener name
 - IPaddr2/findif.sh: Do a sanity check only on start and
   validate-all
 - ldirectord: Disable HTTPS SSL certificate hostname checking
 - tomcat: Monitor rotatelogs process and restart when it is
   stopped
 - jboss: Monitor rotatelogs process and restart when it is
   stopped
 - mysql: Fix for the issue of detecting an unconfigured slave
   with empty master_host since setting empty master_host is not
   allowed with 5.5
 - IPaddr2/findif.sh: Robust parameter checking for 'nic'
 - VirtualDomain: Ensure it is possible to manage a libvirt domain
   defined outside of VirtualDomain
 - VirtualDomain: Fix ability to use default libvirt hypervisor
   without explicitly setting agent attribute
 - tomcat-6.sh: Fixes setting TOMCAT_USER correctly
 - tomcat-s.sh: Do not fail on stop if config validation fails.
 - fs-lib.sh: Removes usage of fuser -kvm from fs-lib.sh based
   agents.
 - ldirectord: Use an alarm for LDAP check to ensure it times out
 - exportfs: stop with no directory should succeed
 - Xen: retry domain lookup in repeating monitor and stop
 - Fixes lvm metadata corruption caused when activating by lv
   using tags.
 - ldirector: fix using service name instead of port number
   (bnc#836759)
 - Filesystem: remove SLES10 compatibility code
 - Raid1: disallow md raid arrays as clone resources to avoid data
   corruption
 - apache: put back config file existence test
 - VirtualDomain: Do not attempt graceful shutdown if force_stop
   is enabled
 - Med: oracledb.sh: Fix process name grep in exit_idle
 - VirtualDomain: use virsh create instead of define to start it
   non-persistent
 - eDir88: multiple IP support
 - apache: better handling of not installed apache
 - jboss: add jboss_base_dir parameter to support multi-instances
   on JBoss 6
 - jboss: stop the JBoss daemon by sending a signal on JBoss 6
 - jboss: add run_command parameter to change the start up script
 - jboss: add jboss_version parameter to support JBoss 6
 - tomcat: use root as the default for tomcat_user instead of
   RUNASIS mode
 - tomcat: multiple tomcat instances based on CATALINE_BASE
 - pound: add parameter maxfiles to set ulimit
 - apache: remove unnecessary and imperfect checks from
   validate_all (bnc#827927)
 - pgsql: set only one node into sync mode when using 3 nodes or
   higher
 - Med: oracledb.sh: Set RESTART_RETRIES back to 0
 - Raid1: stop arrays even with block device file missing
   (bnc#821861)
 - oracle/oralsnr: use /bin/sh in sudo calls (bnc#825517)
 - apache: Properly check meta_timeout variable during graceful
   stop
 - Raid1: set MDADM_NO_UDEV appropriately if udev is not used
 - Raid1: wait for udevd to settle (bnc#821861)
 - iSCSILogicalUnit: add tgt specific parameters bstype, bsoflags,
   device_type
 - apache: Attempt graceful stop before -TERM signal
 - LVM: Warn user if initrd is older than lvm.conf when using
   exclusive activation with tags
 - LVM: Exclusive activation without clvmd using filtering with
   tags.
 - named: Attempt to autogen /etc/rndc.key using rndc-confgen tool
 - mysql: really use log setting (bnc#823095)
 - mysql: test properly for failed process start (bnc#823095)
 - Med: Don't preserve SELinux context when copying files to
   /var/lib/nfs/sm
 - Med: Cleanup oracledb.sh rgmanager agent and add support for
   Oracle 11g
 - Med: Cleanup oralistener.sh and add support for Oracle 11g
 - Med: Cleanup orainstance.sh and add support for Oracle 11g
 - fs-lib.sh: Faster filesystem start/stop through use of
   'findmnt' command for 'is_mounted' function
 - named.sh: Addition of update-source option.
 - LVM: Retry exclusive activation after deactivating vg
   cluster-wide
 - LVM: Retry deactivating vg allowing udev to settle
 - ip.sh: Fixes usage of ipv6 addresses with uppercase lettering
 - LVM: Verify setup on start plus verify exclusive activation is
   possible.
 - Route: add IPv6 support
 - build: Place resource state information in /var/run/... by
   default
 - DRBD: remove deprecated drbd agent.
 - fs-lib.sh: Always honor self_fence option when
   force_unmount="on"
 - postgres-8: Shutdown postgres with SIGINT before forcing
   SIGQUIT
 - tools: send_arp.libnet: reuse ARP packets (debian#701914)
 - ethmonitor: correctly detect when the network is unplugged.
 - Raid1: do not test for device existence in the stop operation
   (bnc#821861)
 - mysql: Attempt to auto-detect mysql binary default location.
 - VirtualDomain: Support saving and restoring virtual machine
   snapshot state files
 - nfsserver: Cleanup shared nfs dir mount
 - nfsserver: Enable file locking daemon when systemd is being
   used
 - nfsserver: Maintain SELinux permissions on failover for nfs v3
   lock state
 - nfsserver: Improve support for v3 file lock recovery
 - nfsserver: Add systemd unit-file support when init scripts are
   not present
 - VirtualDomain: Properly detect defined lxc domains
 
 * Thu Feb  7 2013 Linux-HA contributors
 - stable release 3.9.5
 - IPaddr2: support nic:iflabel format in nic parameter
 - VirtualDomain: allow for custom migrateport
 * Wed Jan 30 2013 Linux-HA contributors
 - release candidate 3.9.5 rc1
 - ocf-shellfuncs: RA tracing
 - IPaddr2: make sure that some ARP send program runs
 - pgsql: add check_wal_receiver parameter
 - pgsql: support starting as Hot Standby
 - nfsserver: improve rpc.statd support
 - nfsserver: add option -n for rpc.statd (bnc#794479)
 - nfsserver: make the retry time for sm-notify configurable
 - nfsserver: make sm-notify running in the foreground configurable
 - exportfs: handle '<world>' exportfs embelishment for '*' (bnc#791690)
 - jboss: set JAVA_OPTS correctly
 - pound: use correct default for control-binary
 - pound: No error when stopping pound and no pound is running
 - Squid: support systems using IPv6
 - Xinetd: do not fail in stop if the daemon is not running
 - Xinetd: improve finding Xinetd process (thanks to Vadym Chepkov)
 - SendArp: add background parameter
 - SendArp: fix monitor
 - ocft: print the actual case names when testing
 - ocft: make only the updated test-case file
 - ocft: add "incremental" mode (ocft test -i)
 - include a copy of LGPL license file
 
 * Tue Nov 22 2012 Linux-HA contributors
 - stable release 3.9.4
 - IPaddr2: fix waiting the completion of IPv6 address allocation
 - zabbixserver: RA for zabbix servers management
 * Tue Nov 13 2012 Linux-HA contributors
 - release candidate 3.9.4 rc1
 - ocf-rarun: add the RA driver
 - IPaddr2: use better test for infiniband (bnc#783353)
 - IPaddr2: replace the findif binary by findif.sh
 - IPaddr2: add IPv6 support
 - IPaddr2: really send arps in background if requested
 - IPaddr2: use send_arp instead of ipoibarping if not available
 - Filesystem: include ceph in the list of non-blockdev filesystems
 - Raid1: stop processes using raiddev
 - Raid1: manage multiple arrays
 - Raid1: discover block size for dd (bnc#781137)
 - exportfs: cleanup exportfs cache on stop (bnc#770210)
 - iscsi: don't fail on stop of the iscsi server fails
 - iscsi: use iscsiadm -m session -r in stop
 - iscsi: do discovery in start only
 - iscsi: check session status in monitor
 - iscsi: add try_recovery parameter
 - oracle: ignore password expiry warning in monitor (bnc#770250)
 - oracle: connect as a regular user in monitor
 - pgsql: add option recovery_end_command
 - Xen: repair node_ip_attribute use
 - SAPDatabase: improvement of cleanup of saphostctrl process
 - SAPInstance: monitor-master not advertised (bnc#782482)
 - SAPInstance: don't wait for timeout if the stop attempt failed
 - SAPInstance: failes on sapcontrol message Unauthorized (bnc#782486)
 - mysql-proxy: copy in-depth monitoring action from the mysql resource agent
 - mysql-proxy: add test_table, test_user and test_passwd parameters
 - mysql-proxy: implement "parameters" parameter
 - mysql-proxy: add the 'plugins' parameter
 - mysql-proxy: version specific checks 
 - mysql-proxy: admin plugin auto loading
 - mysql-proxy: perform SELECT for OCF_CHECK_LEVEL 20 only
 - mysql-proxy: create pid/socket directories if needed
 - conntrackd: resync from other hosts in start
 - slapd: Gracefully handle config check during probe
 - tomcat: Correction of the time-out level of the stop processing.
 - tomcat: Correction of the process alive monitoring.
 - ldirectord: Added READDQUIESCENT parameter 
 - sfex: fix sfex_init for 64-bit big endian platforms
 - SendArp: exit with the right code when not properly configured
 - Squid: fix getting PIDs of squid processes (lf#2653)
 - portblock: use end-of-word instead of space at the end of the line
 - named: use pgrep instead of searching in ps(1) output
 - named: fix monitor if named_rootdir is set to /
 - VIPArip: fix exit codes
 - VIPArip: make start idempotent
 - tools: add test-findif.sh
 - tools: add send_ua binary for IPv6 support in IPaddr2
 - ocft: new test for Raid1
 
 * Fri May 25 2012 Linux-HA contributors
 - stable release 3.9.3
 - dhcpd: new RA to manage ISC DHCP servers
 - Filesystem: add nfs4 to the list of well known types
 - IPaddr2: fix regression introduce in d93b5fd, nic=lo always
   "stopped"
 - iSCSILogicalUnit: correctly match for target IQN and backing
   device name (iet and tgt)
 - jboss: implememnt rotating of console log
 - mysql: improve handling of reset slave
 - oracle, oralsnr: get rid of eval
 - slapd: pass bind_dn correctly to ldapsearch
 * Wed May 16 2012 Linux-HA contributors
 - release candidate 3.9.3 rc1
 - asterisk: new resource agent
 - named: new RA to manage bind servers
 - pound: new RA for Pound HTTP/HTTPS reverse-proxy and
   load-balancer
 - rsyslog: new RA to manage rsyslog servers
 - slapd: new RA to manage OpenLDAP servers
 - varnish: new resource agent
 - apache: add support for IPv6 in monitor
 - apache: create /var/run/apache2 if it doesn't exist
 - apache: fix sysconfig includes & enable status for default SUSE
   conf
 - conntrackd: test for socket existence in monitor instead of
   process grep
 - conntrackd: rename parameter "conntrackd" to "binary"
 - CTDB: Add smb_fileid_algorithm parameter (bnc#696978)
 - CTDB: Improve monitor op (check output of ctdb status,
   bnc#712192)
 - CTDB: Set ctdb_start_as_disabled=no by default (bnc#712410,
   required by samba 3.6)
 - exportfs: allow expanding the fsid parameter to produce correct
   exportfs options
 - exportfs: don't grow /var/lib/nfs/rmtab indefinitely
 - exportfs: fix monitor action for special characters and common
   suffixes
 - Filesystem: add support for glusterfs (lf#2620)
 - Filesystem: add tmpfs to the list of supported filesystems
 - Filesystem: allow to force cloning for local mounts
 - Filesystem: don't use direct dd option in monitor depth 20 for
   non-blockdevice fs
 - Filesystem: fix determining if the device is a block device
 - Filesystem: improve read/write checks for CHECK_LEVEL 10, 20
 - Filesystem: repair the fast_stop parameter use (its value was
   always false)
 - Filesystem: support ceph
 - Filesystem: remove a status file only when OCF_CHECK_LEVEL is
   set to 20
 - IPaddr: add back the local_start/stop_script code
 - IPaddr: remove colon at the end of the interface name
 - IPv6addr: always use the provided nic and cidr_netmask when
   specified
 - IPv6addr: handle a link-local address properly in send_ua
 - iscsi: do not rely on iscsid.startup being set correctly
   (bnc#751783)
 - iscsi: proceed if iscsid is not running if iscsid.startup is
   present in iscsid.conf
 - iSCSILogicalUnit: fix default for scsi_sn
 - iSCSITarget: treat an empty "implementation" parameter
   specially
 - jboss: add the java_opts parameter for java options
 - ldirectord: precedence error with perl v5.8.8 in IPv6 code
 - LVM: drop vgck(8) from monitor
 - LVM: force dmevent monitoring for clones
 - LVM: use ls instead of vgdisplay in status
 - lxc: fix LXC_status to work with lxc-0.7.5 or later
 - mysql: improve replication support
 - mysql: check mysql status more thoroughly before stopping
 - mysql: fix validation return codes
 - mysql: support 5.5 slave status message format
 - nfsserver: Support of multiple IP addresses (bnc#684143)
 - nfsserver: don't run sm-notify in foreground (bnc#759616)
 - ocf-shellfuncs: fix loglevel variable scope in ha_log
 - ocft: new tests for named, IPv6addr, oracle, Xinetd
 - ocft: several improvements
 - oracle: improve managing IPC objects
 - oracle: improve matching instance specific files and processes
 - pgsql: support for replication
 - postfix: multiple fixes
 - Raid1: support for multiple MD arrays, as specified in raidconf
 - SAPDatabase: add support for Sybase ASE and SAP HANA database
 - SAPDatabase: correcting the unique values of RAs parameters
 - SAPDatabase: replace method for checking responsiveness of
   saphostexec
 - SAPDatabase: version 2.00 make use of saphostagent
 - SAPInstance : correcting the unique values of RAs parameters
 - slapd: always set the exit code correctly in monitor
 - tomcat: remove pidfile before start, it may prevent some tomcat
   releases from starting
 - VirtualDomain: add a functionality that modifies utilization of
   resource automatically
 - VirtualDomain: if the configuration file is missing on stop
   exit with success
 - VirtualDomain: honor virsh "in shutdown" state
 - Xen: add support for HVM ACPI graceful shutdown
 - Xen: wait in migrate_from for the migration to finish instead
   of bailing out immediately
 - Tools: findif: Use most specific matching route (bnc#740738)
 - Tools: send_arp.libnet: fix for big endian platforms
   (bnc#721334)
 - doc: add the RA developer's guide
 
 * Wed Jun 29 2011 Dejan Muhamedagic <dejan@suse.de> and others
 - stable release 3.9.2
 - ethermon: new resource agent
 - iscsi: fix regression in 3.9.1 for open-iscsi version 2.0-872 (lf#2562)
 - pgsql: fix regression in 3.9.1 in directories on probes
 - VirtualDomain: if there's no config exit on stop with success
 - doc: add sfex_init(8) man page
 * Wed Jun 15 2011 Dejan Muhamedagic <dejan@suse.de> and others
 - stable release 3.9.1
 - ocf-tester: tolerate OCF_ERR_INSTALLED on probes and missing binaries
 - pgsql: improve configuration check and probe handling
 * Wed Jun 01 2011 Dejan Muhamedagic <dejan@suse.de> and others
 - release candidate 3.9.1 rc1
 - first release since establishing joined repository with RHCS agents
 - build: new spec file and autoconf to support both agents' sets
 - build: use ./configure --with-ras-set=linux-ha to configure for
   heartbeat RA set
 - build: create compatibility symlinks in autofoo not in spec
 - build: GNUmakefile removed
 - lxc: new RA to manage lxc linux containers
 - symlink: new RA to manage symbolic links
 - db2: new implementation with master/slave mode
 - oracle: improve oracle process list test (bnc#673027)
 - exportfs: backup and restore rmtab to ensure smooth client
   failover on node failures
 - CTDB: Allow stop to succeed when using pkill on ctdbd (bnc#695829)
 - mysql: --skip-slave-start option is default now
 - mysql: set connect timeout to 10 seconds rather than 1 second
 - mysql: keep replication state (prevents data loss on master reset)
 - mysql: don't rely on state information from pacemaker, but
   check if the instance is in the read-only mode
 - mysql: if test parameters are all set, assume OCF_CHECK_LEVEL=10
 - mysql: support for master/slave for more than two nodes
 - mysql: don't wait for replication to finish, when not replicating
 - mysql: store replication state in separate attributes for each master
 - VirtualDomain: correctly create migration URI when target is an FQDN
 - VirtualDomain: properly wait until domain_name is non-empty
 - ldirectord: add a support of "netmask" directive for IPv6
 - ldirectord: fix fwmark behavior for IPv6
 - ldirectord: ignore children in Net::DNS
 - iscsi: add support for open-iscsi version 2.0-872 (lf#2562)
 - postfix: issue error if 'postfix abort' failed
 - postfix: improve exit codes on installation problems
 - postfix: use monitor to test if postfix works after the start action
 - ocft: fix make command for compatibility with mawk/Debian (lf#2600)
 - ocft: test case for pgsql
 - ocft: test case for postfix
 - ocft: test case for iscsi
 - doc: improve man pages output
 - doc: add examples for master/slave resource agents
 
 * Wed Feb 16 2011 Dejan Muhamedagic <dejan@suse.de> and others
 - stable release 1.0.4
 - ocft: testcases for db2, LVM, and Filesystem
 * Fri Feb 11 2011 Dejan Muhamedagic <dejan@suse.de> and others
 - release candidate 1.0.4
 - add GPLv3 license file (bnc#655700)
 - ocf-shellfuncs: allow ocf_run to return the actual exit code
 - ocf-shellfuncs: handle properly syslog facility set to none (bnc#621818)
 - ocf-shellfuncs: correctly identify root by id only (bnc#602312)
 - RA: add OCF_ROOT/lib/heartbeat directory (development)
 - RA: set the HA_RSCTMP directory to /var/run/resource-agents (lf#2378)
 - build: install jboss
 - conntrackd: new RA
 - exportfs: new RA
 - nginx: new RA
 - fio: new RA for IO load simulation
 - Filesystem: allow cloning of some filesystems as read-only (lf#2440)
 - Filesystem: add fast_stop parameter (lf#2402)
 - Filesystem: Clarify metadata and improve non-clone warning
 - Filesystem: new run_fsck parameter
 - LVM: add partial_activation parameter (lf#2490)
 - IPaddr2: fix reference to Infiniband arping binary (bnc#668447)
 - IPaddr2: optionally flush kernel routing table on interface stop
 - IPaddr2: exit with the right code when not properly configured
 - IPaddr2: exit early and with the right code if the ip parameter is not set
 - IPaddr2: unique_clone_address should work without CIP (lf#2442)
 - IPaddr: return the correct code if interface delete failed
 - IPv6addr: allow link-local addresses in case the interface name is provided
 - IPv6addr: interface index in /proc/net/if_inet6 may be longer than 2
   chars (lf#2462)
 - IPsrcaddr: exit with the right code when not properly configured
 - IPsrcaddr: add the cidr_netmask parameter
 - Tools: findif: differentiate between error conditions
 - nfsserver: fix the default string for the notification parameter
 - nfsserver: don't use -v in the notify cmd with rpc.statd
 - iSCSITarget: fix race for target IDs when using IET (lf#2432)
 - iSCSITarget: follow changed IET access policy
 - Raid1: Support attempting to re-add mirrors on deep monitor action
   (bnc#619121)
 - Raid1: Fix graceful stop code path
 - Raid1: Handle stop for failed arrays properly (bnc#618775)
 - sfex: output log messages also to stderr in sfex_init
 - sfex: add the sfex_stat command
 - sfex: wait in the start and stop actions until sfex_daemon starts/exits
 - Xen: implement stop of a migrating domain (bnc#656227)
 - Xen: check the allow_mem_management boolean properly (bnc#637525)
 - Xen: Always run destroy in stop sequence.
 - Xen: use xen-list command for status check if available (bnc#628735)
 - Xen: use xen-destroy for stop, if available.
 - Xen: Allow node configurable attribute to specify which IP to 
   use for live migration (bnc#628735)
 - VirtualDomain: fix spurious stop failures
 - VirtualDomain: don't timeout in stop before escalating to "forced stop"
 - ManageVE: add migration capability
 - MailTo: don't check if user exists for email address (might be an
   alias or remote)
 - CTDB: Remove hard-coded timeout on start op
 - CTDB: Don't manage Samba and Winbind by default
 - CTDB: Deprecate (and make optional) smb_private_dir param (bnc#623788)
 - tomcat: Ensure name of tomcat resource is only used on start operation
   and expose JAVA_OPTS variable for use
 - tomcat: Fix to ensure default OCF_RESKEY_xx values are observed
 - tomcat: Add CATALINA_BASE parameter, defaults to CATALINA_HOME,
   permits multiple tomcat instances
 - tomcat: Use Tomcat stop TIMEOUT -force to improve stop
 - Dummy: migrate_from/to: correct OCF_RESKEY_CRM_meta_migrate_xxx
   variable names
 - Dummy: make method reload work
 - anything: add the workdir parameter
 - mysql: clone and master-slave functionality
 - mysql: add replication monitoring
 - mysql: check for write permissions after creating pid and socket directory
 - mysql: make client binary path configurable
 - pgsql: cd to pgdata before running commands (fixes permission error)
 - pgsql: add optional username, password, and sqlcode parameters for monitor
 - pgsql: add new "config" parameter
 - pgsql: properly implement pghost parameter
 - pgsql: socketdir parameter to manage non-default UNIX socket directories
 - oracle: reduce output from sqlplus to the last line for queries (bnc#567815)
 - db2: Replace call to db2_local_ps with db2nps
 - db2: guard against a hanging db2stop by spawning this into the
   background. Use db2_kill after grace period.
 - db2: add multi partition support
 - db2: improve behaviour on probes
 - db2: support for v9.x instances (bnc#608952)
 - SAPDatabase,SAPInstance: improve LD_LIBRARY_PATH processing (bnc#640026)
 - SAPInstance: prevent premature expansion of [:upper:] [:lower:] when
   producing sidadm uid
 - SAPInstance: Moved testing of SAP profile directory and START profile
   to a later stage (only when needed), for more robustness
 - SAPInstance: fix return codes in probes
 - SAPInstance: New parameter: SHUTDOWN_METHOD
 - SAPInstance: ensure enqueue failover in monitor_clone on process
   failure
 - SAPInstance: don't rely on op target rc when monitoring clones (lf#2371)
 - SAPDatabase: prevent premature expansion of [:upper:] and [:lower:]
   when producing sidadm/orasid/db2sid uids
 - SAPdatabase: Changed Oracle recovery method from "recover automatic
   database" to "end backup"
 - SAPDatabase: Adapt process search pattern for DB/2 9.5
 - SAPDatabase: start listener only if database processes are found
 - SAPDatabase: avoid continuous output to syslog in monitor with SAP
   7.20 and J2EE_ONLY=1
 - ldirectord: http: connect to server instead of protocol (Debian#594958)
 - ldirectord: add implicit support for submission RFC4409
 - ldirectord: example configuration for a submission virtual service
 - ldirectord: Shutdown write-side of client connection after writing has
   finished
 - ldirectord: port number mismatch of imaps and pops
 - ldirectord: Oracle compatibility
 - ldirectord: don't exit on timeout in HTTP/HTTPS check
 - ldirectord: allow underscore in service name
 - ldirectord: use $1 instead of \1 in pattern replace (bnc#605086)
 - Tools: ocf-tester: Extend to cover initial probe (monitor_0) test.
 - Tools: ocf-tester: set and export some common meta variables (lf#2524)
 - Tools: ocf-tester: meta-data also should never be affected by missing
   binaries.
 - Tools: ocf-tester: show output from the agent in case of error
 
 * Tue Apr 13 2010 Dejan Muhamedagic <dejan@suse.de> and others
 - stable release 1.0.3
 - meta-data: improve timeouts in most resource agents (reduce the number of warnings by the shell)
 - RA: log messages to stderr if attached to a terminal
 - ocf-shellfuncs: tests to check for clone/ms resources
 - ocf-shellfuncs: don't output to stderr if using syslog (prevents double logging from the RA and lrmd)
 - make sure that OCF_RESKEY_CRM_meta_interval is always defined (lf#2284)
 - ocft: new RA test suite
 - VirtualDomain: bail out early if config file can't be read
   during probe (nbc#593988)
 - VirtualDomain: spin on define until we definitely have a domain name
 - VirtualDomain: fix incorrect use of __OCF_ACTION (the stop operation may timeout otherwise)
 - Filesystem: prefer /proc/mounts to /etc/mtab for non-bind mounts (lf#2388)
 - IPaddr2: don't bring the interface down on stop (otherwise IPv6 addresses may be removed)
 - oracle/oralsnr: improve exit codes if the environment isn't valid
 - oracle/oralsnr: improve logging
 - Route: don't assume that OCF_RESKEY_CRM_meta_clone_node_max is set to a number (lf#2375)
 - Route: add route table parameter (lf#2335)
 - sfex: don't use pid file (lf#2363,bnc#585416)
 - SFEX daemon: fix logging
 - ldirectord: fix the configfile default (bnc#589457)
 - drbd: fix metadata (bnc#588684)
 - IPsrcaddr: modify the interface route (lf#2367)
 - ldirectord: Allow multiple email addresses (lf#2168)
 - vmware: fix set_environment() invocation (lf#2342)
 - vmware: updated to version 0.2
 - apache: return the right exit code from monitor (bnc#578628)
 - iSCSILogicalUnit: fix monitor for STGT
 
 * Mon Feb 01 2010 Dejan Muhamedagic <dejan@suse.de> and others
 - stable release 1.0.2
 - EvmsSCC, Evmsd, LinuxSCSI, drbd, pingd: marked as deprecated (lf#2244)
 - CTDB: new resource agent for clustered samba
 - postfix: new resource agent
 - proftpd: new resource agent
 - AoEtarget: new resource agent to export ATA-over-Ethernet (AoE) targets
 - Squid: new resource agent
 - VirtualDomain: new resource agent (manage virtual domains using libvirt/virsh)
 - anything: new resource agent for arbitrary daemons
 - mysql-proxy: new resource agent
 - iSCSITarget/iSCSILogicalUnit: two new resource agents
 - portblock: fast reconnect/tickle ACK (new feature)
 - IPv6addr: new nic and cidr_netmask parameters
 - mysql-proxy: log_level and keepalive parameters
 - Filesystem: implement deep monitor operation
 - apache: monitor operation of depth 10 for web applications (lf#2234)
 - SAPDatabase + SAPInstance: New versions from SAP
 - CTDB: auto-generate cluster-specific part of smb.conf (lf#2308)
 - ClusterMon: don't fail in stop if the process is missing (bnc#569957)
 - Filesystem: allow configuring smbfs mounts as clones
 - IPaddr2: CLUSTERIP/iptables rule not always inserted on failed monitor (lf#2281)
 - IPaddr2: behave if the interface is down (lf#2147)
 - IPaddr2: check binaries when it makes sense
 - IPaddr2: fix invalid default value for OCF_RESKEY_clusterip_hash (bnc#553753)
 - IPaddr2: include netmask in search for the right interface
 - IPaddr2: remove all colons from the mac address before passing it to send_arp (lf#2165)
 - IPsrcaddr: replace 0/0 with proper ip prefix
 - IPv6addr: recognize network masks properly
 - IPv6addr: supply checksum for ICMPv6 packets
 - IPv6addr: ifdef out the ip offset hack for libnet v1.1.4 (lf#2034)
 - IPv6addr: supply checksum for ICMPv6 packets
 - LVM: Make monitor operation quiet in logs (bnc#546353)
 - MailTo: Provide a default for MAILCMD (bnc#534803, bnc#556366)
 - MailTo: allow multiple word subject line
 - Raid1: improve monitor function (bnc#546551)
 - Route: improve validate (lf#2232)
 - Squid: make the regexp match more precisely output of netstat
 - VIParip: Pathname needed to be configurable (lf#1331)
 - VirtualDomain: avoid needlessly invoking "virsh define"
 - VirtualDomain: destroy domain shortly before timeout expiry
 - VirtualDomain: fix forceful stop (lf#2283)
 - VirtualDomain: loop on status if libvirtd is unreachable
 - Xen: Remove instance_attribute "allow_migrate" (bnc#539968)
 - apache: make sure that proxies are not used for monitor
 - iSCSILogicalUnit: add support for SCSI ID, SCSI SN, Vendor ID, and Product ID
 - iSCSILogicalUnit: add support for per-LU parameters
 - iSCSILogicalUnit: set default for SCSI SN, truncate SCSI ID default to 24 bytes
 - iSCSILogicalUnit: use a 16-byte default SCSI ID
 - iSCSITarget, iSCSILogicalUnit: add support for tgt
 - iSCSITarget: reintroduce "tid" parameter
 - iSCSITarget, iSCSILogicalUnit: identify targets by IQN, not by tid
 - iSCSITarget, iSCSILogicalUnit: support LIO
 - iSCSITarget: add support for CHAP authentication
 - iSCSITarget: add support for restricting target access
 - iSCSITarget: be more persistent deleting targets on stop
 - include ldirectord (formerly known as heartbeat-ldirectord)
 - iscsi: replace wrong variable reference (bnc#499291)
 - jboss: Added JBoss support
 - ldirectord: fix setting defaults for configfile and ldirectord (lf#2328)
 - ldirectord: fix various bugs in OCF RA (lf#1949)
 - mysql: escalate stop to KILL if regular shutdown doesn't work
 - mysql: handle monitor and stop properly on invalid environment
 - nfsserver: use default values (lf#2321)
 - nfsserver: validate should not check if nfs_shared_infodir exists (lf#2219)
 - nfsserver: use check_binary properly in validate (lf#2211)
 - nfsserver: exit properly in nfsserver_validate (lf#2173)
 - oracle/oralsnr: export variables properly
 - oracle: drop spurious output from sqlplus
 - pgsql: remove the previous backup_label if it exists
 - portblock: add per-IP filtering capability
 - portblock: fix invalid exit codes on monitor
 - postfix: fix double stop
 - scsi2reservation: fix wrong logic in check for scsi_reserve
 - vmware: make meta-data work and several cleanups (lf#2212)
 - shellfuncs: make the mktemp wrappers work
 - ocf-shellfuncs: add mercurial repository version information
 - ocf-shellfuncs: add ocf_is_probe function
 - doc: add resource agents' man pages including examples
 
 * Thu Oct 23 2008 Lars Marowsky-Bree <lmb@suse.de> and MANY others
 - beta release 2.99.2
 - LVM: stop correctly in case vol group does not exist
 
 * Tue Sep 23 2008 Lars Marowsky-Bree <lmb@suse.de> and MANY others
 - beta release 2.99.1
 
 * Tue Aug 19 2008 Andrew Beekhof <abeekhof@suse.de> and MANY others
 - beta release 2.99.0