0106758ceb
Prevent overwrite of existing files when saving licenses
2026-07-01 21:06:32 -04:00
1934b88b0d
Use basename to ensure no path traversal in license filenames
2026-07-01 20:54:36 -04:00
ae290c4419
Ensure the filename cannot have path traversal in XCC2 and older
2026-07-01 20:42:22 -04:00
57a4c840cb
Fix web shell sessions
2026-07-01 14:47:42 -04:00
6bcf1b73ba
Fix stale references to wsgi style env
2026-07-01 13:49:05 -04:00
3a6887b4b4
Provide nicer message when requested VM does not exist
2026-07-01 09:55:15 -04:00
d761c7e6da
Slow down reconnect attempts to powered down Proxmox VMs and better handle closed websockets.
2026-07-01 09:30:28 -04:00
45b392932d
Handle unreachable proxmox host more friendly
2026-07-01 09:14:07 -04:00
33c67db3c4
Further mitigate potential XML misbehavior
...
Since it turns out we already incurred lxml dependency, use lxml etree instead of xml and mitigate risky xml features beyond blocking the word '!entity'
2026-07-01 08:28:25 -04:00
fbec09c073
Fix behavior with IPMI bad user/password
2026-06-30 15:17:45 -04:00
5abd080ba2
Restore some sanity to redfish error handling
2026-06-30 13:56:34 -04:00
0383115446
Merge pull request #217 from Obihoernchen/hwplugins
...
Add missing validvalues to attributes.py
2026-06-30 08:13:21 -04:00
6505810833
Improve handling of IPs with colon notation with seperate IPv4 and IPv6 paths, as well as whitespace stripping
2026-06-30 13:05:22 +02:00
fbb79de786
Include EUREKA in necessary files for loading and handling redfish and autodiscovery
2026-06-30 11:30:24 +02:00
6ab7d573da
Add EUREKA discovery handler
2026-06-30 11:29:19 +02:00
5435acd23e
Add redfish OEM implementation for EUREKA Chassis
2026-06-30 11:28:45 +02:00
cacfce214f
Add fallback for generic redfish and add specific MEGWARE code path for EUREKA
2026-06-30 11:25:11 +02:00
b4882692ea
Add port discovery via colon notation
2026-06-30 11:22:30 +02:00
aed0bf0bea
Add valid_values to hardwaremanagement.method
2026-06-30 04:26:48 +02:00
ecaa75d967
Fix validvalues typo
...
valid_values is never checked and is a typo. Use validvalues instead.
Note: This can break existing scripts if invalid values are used.
2026-06-30 04:21:16 +02:00
3ce0988f5a
Fix -s on certutil
2026-06-29 11:30:49 -04:00
2c669358b3
Restore ability for certutil to run as standalone script
...
Also make days an argument
2026-06-26 12:12:25 -04:00
9462de42ac
Fix setboot when network not in bootorder
2026-06-25 15:56:11 -04:00
c1eea55610
When possible, check confluent user access to file
...
If a confluent user is a system user, do not allow them to
upload paths that their user would not have access to otherwise.
For non-system users, continue with the path based banned behavior.
2026-06-25 12:14:54 -04:00
d59652e0fd
Prevent staging of files from indicating path traversal
2026-06-25 10:09:28 -04:00
46fbc11a93
Other than skipauth type users (unix domain socket root/confluent), no longer allow confluent user addition/manipulation.
2026-06-25 09:55:09 -04:00
78ffd509c9
Have messages force normalizing the incoming filenames
...
This avoids downstream code that may expect specific locations from being confused.
2026-06-25 09:48:11 -04:00
1449eee4f4
Fix to more reliably default to 47
2026-06-23 09:55:29 -04:00
cf7f2f434d
Add function for nodes to request a TLS certificate from confluent
...
Also, make certificate lifetime default configurable as attribute, with 47 as explicit default.
2026-06-23 09:39:16 -04:00
1068be423a
Remove some python2 considerations
2026-06-23 08:30:21 -04:00
d3f3242eea
Draft attempt at a tlscert self api
2026-06-22 16:40:45 -04:00
701a9a7268
Adjustments for Suse 16.1 beta
2026-06-22 09:59:40 -04:00
4aef4ac6d3
Bring XCC3 raid config workaround forward
2026-06-16 10:49:31 -04:00
b5c71e46ee
SMM3 debug log workaround
2026-06-11 07:50:29 -04:00
48f75cc506
Begin SUE 16 support work
2026-06-10 13:25:17 -04:00
525186ac7f
Add empty sensors to VM health
2026-06-09 16:52:59 -04:00
5bfd44528d
Provide unknown health for vcenter and proxmox
2026-06-09 16:35:13 -04:00
44385388b6
Provide more verbose feedback
2026-06-09 16:17:40 -04:00
c14165e2bd
Switch to null by default
...
Require active choice of ipmi
2026-06-09 16:08:13 -04:00
2f6a87eccd
Fix compatibility with newer ssh-agent
...
Newer ssh-agent defaults to homedir agent location.
Unfortunately, /var/lib/confluent may be a poor fit, so go back to how openssh used to handle it.
2026-06-08 10:31:29 -04:00
c8c00c8f5f
Update to ast.Constant
...
Python removed ast.Num in 3.14
2026-06-08 09:19:04 -04:00
3a09861ef6
Set name/email for debian builds
2026-06-05 14:27:05 -04:00
0b10c240bd
Fx issues with IPMI session management
...
Do not continue waiting when session is broken.
Do not call _timedout without releasing the lock first.
Properly await on relog with bad rakp4
If an accounting issue pushes logontries too far without touching zero, then still recognize retries were exhausted.
Timeout on missing RAKP2 if retries were already exhausted.
2026-06-05 09:44:10 -04:00
60ff78ecd6
Fix portions of selfservice api
...
Must be bytes before returning.
2026-06-04 14:37:09 -04:00
ac9fd075b9
Remove use of deprecated get_event_loop
2026-06-04 13:36:11 -04:00
86abdc4257
Bring changes forward from pyghmi
...
HTTP boot enablement and fixes for the firmware parameters.
2026-06-04 08:27:03 -04:00
ea693e1246
Add support for http boot
...
Some redfish require us to be very specific.
2026-06-04 08:04:39 -04:00
b6629c39db
Fix to actually use the new update_firmware interposer
2026-06-01 19:49:58 -04:00
2a84c68ad3
Add support for passing a parameterfile in updates
2026-06-01 19:49:19 -04:00
6185917ab8
Port megarac changes over
2026-06-01 19:44:38 -04:00
Jarrod Johnson
Jarrod Johnson
gosforthcross
Markus Hilger