SaltStack 3006.x LTS: Python Version Upgrade and Module Reinstallation Requirements
Article ID: 446999
Updated On:
Products
Issue/Introduction
Customers running SaltStack 3006.x onedir packages need to upgrade the bundled Python version (typically 3.10) to Python 3.11 or higher. This is often driven by:
- Migration to newer operating systems like RHEL 10.
- Security compliance mandates to remediate CVEs associated with Python 3.10.
- Internal regulatory requirements to move off "End of Life" or older Python environments.
Environment
VMware SaltStack Config / Salt Project 3006.x
Cause
The 3006.x LTS branch was originally released with a bundled Python 3.10 environment. Supporting higher Python versions required an update to the underlying "relenv" (Release Environment) toolset used to build the onedir packages. This support was not natively available in the early 3006.x patch releases.
Resolution
Upgrade to SaltStack 3006.27 or later. This release officially updates the bundled Python version to Python 3.11+ within the 3006.x LTS branch. See the release notes for Salt 3006.27
For comprehensive instructions on performing the upgrade, please refer to the official Salt Project Upgrade Guide.
IMPORTANT: Post-Upgrade Requirements Because the upgrade replaces the entire bundled Python virtual environment, the following actions are mandatory:
Reinstall Python Modules: Any third-party Python libraries or modules previously installed via
salt-pipinto the Salt onedir environment will be removed during the upgrade. These must be manually reinstalled after the upgrade is complete.Reinstall Master Plugin: If the Salt Master is integrated with SaltStack Config, the Master Plugin must be reinstalled to ensure it is registered correctly within the new Python 3.11+ environment. For detailed procedures, see Install and configure the Master Plugin.
Verify Version: Confirm the upgrade was successful by checking the binary path:
bash
/opt/saltstack/salt/bin/python3 --version
Additional Information
Feedback
