Rocket Mainframe DevOps

Hi all,I am a bit confused what to download for the free variant.First I seeminiconda-zos-1.2.1-2020-12-23.run which has a corresponding appdev_manifest_1.2.1.txt. In the appdev file mentions python=3.7.0=36Then I seeminiconda-zos-2.0-2022-01-17.run with no corresponding appdev_manifest_2.0.txtQuestions: Is the 2.0 file the one which is based on IBM Python? Shouldn't the 2.0 have a corresponding appdev manifest file? Thanks.-- Manfred------------------------------Manfred LotzKyndryl Deutschland GmbHKelsterbach DE------------------------------

Hello, Installed gzip, curl under zoss-app environment. I am not able to get any information while I search for command man gzip or man curl.  MANPATH=$MANPATH:/minicond/envs/zoss-app/share/man/cat1:/minicond/share/man/cat1 ------------------------------Raju ------------------------------

With ZMF 8.3 currently expected to GA in Spring 2023, what's next for ZMF 8.2? You can find Product Manager Jimmy O'Rourke's latest update here.#SupportTips/KnowledgeDocs#SupportTip#ChangeManZMF

As we continue to support ChangeMan ZMF 8.2 Release, we felt it was important to create a page about the patch update (PU) releases and announcements for new patches as they relate to ChangeMan ZMF 8.2. As a refresher, since the release of Patch Update 5 (PU5) we have removed customizable components from PUs. Only executable components have been part of any PU for the 8.2 release (starting with PU5). This has greatly improved adoptability and provides an easier upgrade path for our customers. We also changed the PU release cadence and moved from a 6 month PU cadence to a more flexible 9-12 month timeframe. This has given customers more time to test as well as stay on a PU longer than before, without having to plan for an upgrade every 6 months. With the new PU cadence, customers have 9-12 months between patch updates to plan for upgrades. Also, as a reminder, we will only issue Hot Fixes and execute OEM compatibility testing against the current / latest PU.  For reference: PU5 (8

As documented in the Known Issue sections of our ZMF Readme files (the 8.2 Patch 6 version can currently be found here), there are two potential causes of user 44 (U0044) abends in ChangeMan ZMF. 1) The most common situation is when users attempt to connect to the ZMF ISPF User Interface (UI) and receive the following response: User abend 44 dec occurred processing command 'CMNINIT '. ***                                                       This occurs when a user is already logged onto another ZMF instance via the ISPF UI and that other instance is running a different version of the product. Disconnecting from one of the ZMF instances should clear the problem and allow the other ZMF instance to be accessed. 2) Alternat

Status: Waiting for VotesWaiting for VotesThe prompt of many TSO messages hinders at work. A reduction would be useful.When triggering operations in ChgMan (eg Promote Jobs, Stagejobs), a relatively large number of TSO messages (depending on the individual Todo steps of the process) are generated as confirmation / notification about the individual steps.   In our opinion, a message for the submit and a final message per triggered process would be more useful here.   If many of these processes are triggered and you want to continue working, then these numerous messages that you have to constantly click away, can be very disturbing.   You can completely suppress these messages for your own user, but this is not ideal, because then you would be 'blind'.   A 'healthy mix' with fewer messages would be good.

Status: DeliveredCMN$$JBL.SKL.txtCurrently, the CMN$$JBL (generate JOBLIB DD skeleton) and CMN$$SEX (generate SYSEXEC DD skeleton) along with CMN$$DSN require modifications to ensure that the correct ChangeMan ZMF load library and REXX exec library concatenations are built, depending on the ChangeMan ZMF subsystem ID. This proposal sets forth to reduce---and likely even eliminate---the need to customize CMN$$JBL and CMN$$SEX, and just have the customizations be done in CMN$$DSN.  My understanding is that CMN$$DSN was created to move all data set specifications---and various scenarios for data set specifications---out of other skeletons to keep the other skeletons simpler.  If there is the need for more complicated logic, then this complicated logic would be in a skeleton such as CMN$$DSN that is meant to be customized anyway.  This way, other skeletons such as CMN$$JBL, CMN$$SEX, CMN$$COE (which uses &SIGYCMP), CMN$$SYL (which uses &SCEESPC, &SCEELK

Prior to ChangeMan ZMF 8.2 Patch 4, components that were locked within a package could only be unlocked by the user who possessed the lock or by administrators. In ZMF 8.2 Patch 4 we added the option to add a new security entity to the application admin parms that allows additional users the ability to unlock components. Further information on this option can be found in the 8.2 Patch 4 Readme file and the ZMF Administrator's Guide, the 8.2 Patch 6 version of which can currently be found here.#SupportTip#SupportTips/KnowledgeDocs#ChangeManZMF

Hello,There is a new vulnerabilty CVE-2022-37454 for "Extended Keccak Code Package Project Extended Keccak Code Package vulnerabilities"Does this affect any Rocket z/OS Tools?Many Thanks!

Questions still occasionally arise regarding the need to run the SERSET job and the purpose of the SERXPTIK module. To summarise: - SERXPTIK is a small, executable module that is loaded into CSA on every LPAR hosting ZMF users or batch jobs. - This module is executed each time a user connects to a ZMF Server started task using the TCP/IP connection method – either explicitly or when technically required (e.g. when connecting across LPARs using Load Balancing Option (LBO) functionality). - It is used in the generation of a Security Server PassTicket for the connecting user or batch job. - This PassTicket is validated by the ZMF Server started task at connection time. - SERXPTIK is automatically loaded into CSA whenever a ZMF Server task is started on an LPAR. - For LPARs not hosting a ZMF Server task, you must run the SERSET job to load SERXPTIK into CSA before any users or batch jobs attempt to connect to any ZMF Server started task from that LPAR. - IPLing the LPAR will result in SERX

Hello,We're having an issue trying to read a z/OS dataset. It works for a USS file. Running Python 3.95 in the base environment.What are we missing?thanks# FileNotFoundError: [Errno 129] EDC5129I No such file or directory.with open("//'xxxxxx.x.xxxxx'", 'r') as f:     print(f.read()) # this workswith open('/u/xxxxxx/python/aws.py', 'r') as f:    print(f.read())

Hi.OpenSSL recently reported critical/high vulnerability CVE-2022-3602 which is a buffer overrun in v3.x that is fixed in v3.0.7.Can you confirm that this vulnerability is not present in the OpenSSL supplied with Rocket z/OS Open-Source tools or any other z/OS tool supplied by Rocket?The "openssl version" command shows OpenSSL at v1.0.2 in Rocket Open-Source tools for z/OS so it would appear that this version is not affected.Thanks.

After updating Miniconda  with miniconda-zos-2.0-2022-01-17.run and appdev_manifest_1.2.1.txt,  Python 3.9.5 was installed in the base environment.A few questions:1)  All of the packages I installed in the "base" environment prior to the update had to be re-installed. Is this to be expected?2)  I created a new environment and installed several packages from my file channel. How do I install Python 3.9.5 into this environment?3)  Using Python 3.9.5, how do I install the boto3 python package? Can I run pip3 install boto3? I saw this message after cancelling the download.WARNING: You are using pip version 21.3.1; however, version 22.3 is available.You should consider upgrading via the '/hewitt/rocket/miniconda/bin/python3.9 -m pip install --upgrade pip' command.Thanks,Gary

A frequent cause of customer problems that we see in the Support team is related to batch JOBs executing on unexpected LPARs. Even when JOBs are actually submitted on the correct, expected LPAR, a variety of factors may dictate that the JOB is routed away to another LPAR for execution. If your problem could be related to a JOB running on an incorrect LPAR, it is always worth taking a moment to confirm that it did actually execute on the anticipated LPAR before progressing investigation. For example, in a JES2 environment, the following kind of message may provoke an assumption that the job actually executed on the LPAR named LPA1:                    J E S 2  J O B  L O G  --  S Y S T E M  L P A 1  --  N O D E  M A C H I N 1 However, the subsequent $HASP373 message shows that the job actually executed on LPA2: 05.29.19 J0703655  $HASP373 USER01J  ST

The scenario is this. Multiple users working on a repo user a has branch A and user b has branch B user a needs to merge branch B into branch A merge fails as branch B is only on the server (remote) rather than local Using Git version 2.26.2-82 The workaround is to : user a does a checkout branch B - this gets it local user a does a checkout branch A - return to the users branch user a can successfully do a git merge I've tried git fetch --all and it does not fetch branch B to the local repo.Thoughts?  Is this a bug in the git version I'm using? Known bug? Other thoughts/suggestions.------------------------------LionelDyck

Searching for a full list of the administration security profile names (e.g. CMNGBADM to allow users access to Global Admin)? Or the functional entity profile names (e.g. CMNCREAT to access the package create function)? These are all documented in the Security Considerations section of Chapter 3 in the ChangeMan ZMF Installation Guide. The 8.2 Patch 6 version of this manual is currently available here.#ChangeManZMF#SupportTips/KnowledgeDocs#documentation#Security

Hi,We use in our Jenkins pipelines Git commands triggered by a Groovy script of the form:echo sh(script:'git status', returnStdout: true)When this command is triggered directly from the JenkinsFile file, the response is indeed retrieved in clear plain text:On the other hand, when this command is triggered from a Jenkins SharedLib, then the response is unintelligible, probably because of an EBCDIC / ASCCI-UTF-8 conversion problem:We do not understand where the problem comes from and therefore how to solve it...The issue is specific to Git for z/OS, as the other commands (vim in the example) show correct responses.We also tested saving the git response to a file on the Jenkins workspace:git status >output.txtThe output.txt file is correctly readable, and created on z/OS-USS with an ISO8859-1 ccsid.User profile environment variables:export _BPXK_AUTOCVT=ON export _CEE_RUNOPTS="FILETAG(AUTOCVT,AUTOTAG) POSIX(ON)" export _TAG_REDIR_ERR=txt export _TAG_REDIR_IN=txt export _TAG_REDIR_OUT=t

I’ve been around the barn several times. Searching takes me to a download page with “featured downloads”, but no Gunzip.

‘Staging Versions’ information displayed for a component in ZMF4ECL does not match the data displayed by the ‘VC’ (Version Control) option for the same component in ChangeMan ZMF. In ZMF4ECL staging versions are missing, duplicates displayed, or the date/time is incorrect on the version. Full article: https://portal.microfocus.com/s/article/KM000011389#SupportTips/KnowledgeDocs#ChangeManZMF

When you try to run the XML service NOTYFILE SERVICE UPLOAD it fails with 'CMN8701I - UPLOAD service request pending'.   There are no request tags displayed via XMLSERV or documented in the ‘ZMF XML Service Users Guide’ to indicate what data is to be uploaded.  Note:  the NOTYFILE SERVICE DOWNLOAD works fine Full article: https://portal.microfocus.com/s/article/KM000011324#ChangeManZMF#SupportTips/KnowledgeDocs

Hi Team, I am installing Miniconda and while running the command for installing products, I get an unexpected error....(Rocket) bash-4.3$ conda install - -file /shrd/miniconda/appdev_manifest_1.2.txt# >>>>>>>>>>>>>>>>>>>>>> ERROR REPORT <<<<<<<<<<<<<<<<<<<<<<Traceback (most recent call last):File "/shrd/miniconda/v2/lib/python3.9/site-packages/conda/exceptions.py", line 819, in __call__return func(*args, **kwargs)File "/shrd/miniconda/v2/lib/python3.9/site-packages/conda/cli/main.py", line 78, in _mainexit_code = do_call(args, p)File "/shrd/miniconda/v2/lib/python3.9/site-packages/conda/cli/conda_argparse.py", line 77, in do_callexit_code = getattr(module, func_name)(args, parser)File "/shrd/miniconda/v2/lib/python3.9/site-packages/conda/cli/main_install.py", line 11, in executeinstall(args, parser, 'install')File "/shrd/miniconda/v2/lib/python3.9/sit

Back in August 2022 we recommended that all customers who were running, or in the process of upgrading to, ZMF 8.2 Patch 6 request and install hotfix Sernet8.2.6.001. Applying that fix successfully resolved the problems covered by KM000005318 and KM000004797. A further problem in the same product executable module, SERBSAM, has subsequently been identified. This new problem is covered by KM000010608 and is resolved in hotfix Sernet8.2.6.007. This latest hotfix supersedes the earlier hotfix and contains the solution for all three documented issues. We recommend that customers currently running or upgrading to 8.2 Patch 6 open a Support case asking for Sernet8.2.6.007 if they have not already received it and apply it to their systems. Note: The three problems listed here only affect the ZMF 8.2 Patch 6 release and both hotfix files are applicable/compatible with that release only.#SupportTips/KnowledgeDocs#HotFix#ChangeManZMF

A large number of customers installing or upgrading to ZMF 8.2 Patch 6 have encountered one or both of the symptoms covered by KB articles KM000005318 and KM000004797, which are caused by the same underlying issue (OCTCR46A185001). Customers in the process of upgrading to 8.2 Patch 6 should open a Support case to request a copy of hotfix Sernet8.2.6.001 if they have not already received and applied it. Note: OCTCR46A185001 only affects the ZMF 8.2 Patch 6 release and the hotfix is applicable/compatible with that release only.#Upgrade#SupportTips/KnowledgeDocs#ChangeManZMF

git version 2.26.2-84 Hi, We issue Git commands from a Jenkins pipeline.These commands are executed on a slave node on z/OS-USS through the Jenkins agent which is a Java component.Git commands are correctly executed by Git for z/OS.On the other hand, Git commands that produce a response trigger a problem: the response provided by the Git command is unusable if it is not preceded by a non-Git command that also produces a response.echo sh(script: 'git status', returnStdout: true)+ git status [Pipeline] echo çá à€ÀÁÈ/ÄÇÁÀ€/È€'ÃÃÄŽäÇ/>ÅÁË€>?È€ËÈ/ÅÁÀ€Ã?Ê€Ä?__ÑÈšŽ€€ˆÍËÁ€‚ÅÑÈ€/ÀÀ€ÃÑ%Áž‚€È?€ÍøÀ/ÈÁ€ÏÇ/È€ÏÑ%%€ÂÁ€Ä?__ÑÈÈÁÀ‰Ž€€ˆÍËÁ€‚ÅÑÈ€ÊÁËÈ?ÊÁ€ÃÑ%Áž‚€È?€ÀÑËÄ/ÊÀ€ÄÇ/>ÅÁË€Ñ>€Ï?Ê,Ñ>Å€ÀÑÊÁÄÈ?Ê`‰Ž_?ÀÑÃÑÁÀš€€€ÊÁ/À_Á_ÀŽŽí>ÈÊ/Ä,ÁÀ€ÃÑ%ÁËšŽ€€ˆÍËÁ€‚ÅÑÈ€/ÀÀ€ÃÑ%Áž‚€È?€Ñ>Ä%ÍÀÁ€Ñ>€ÏÇ/È€ÏÑ%%€ÂÁ€Ä?__ÑÈÈÁÀ‰ŽÅÑÈàáâíå%?ÅŽÈÁËÈ%?ÅŽŽ>?€ÄÇ/>ÅÁË€/ÀÀÁÀ€È?€Ä?__ÑÈ€ˆÍËÁ€‚ÅÑÈ€/ÀÀ‚€/>À?Ê€‚ÅÑÈ€Ä?__ÑÈ€/‚‰Ž echo sh(script: 'pwd; git status', returnStdout: true)+ pwd + git sta

Here at Micro Focus we are continuously looking at the tools that we provide to our customers in order to support their use of our products. With this in mind we are currently reviewing the documentation that we provide to our ChangeMan ZMF customers. For many years, the primary form of documentation has been the set of 20-something PDF files that are available for download from the website. More recently we have also provided several blogs and videos, posted on our Community site and/or YouTube channel, to assist with the introduction and adoption of new features in the product. We are now trying to assess how we move forward from here and are looking for input from our customer base to help us in making these decisions. For example: - Do you find the videos helpful and should we continue to produce these?- Should we convert the PDF files that we currently produce to a more modern format (e.g. a format specifically designed to support online documentation access directly from a browse