01cc86fa55
Add a '-r' argument to refresh site contents
...
If an environment manually manages all materials,
provide -r to let
them request packing of those materials
without trying to generate any of the content.
2026-05-06 08:46:31 -04:00
d6e3c7e837
Backport cert fix
2026-05-05 16:26:49 -04:00
dcb6aeca65
Add ca-only policy
...
This policy forces CA validation every time.
This also checks things like date validity.
2026-05-05 14:41:02 -04:00
7bc76b62e6
Backport CA policy changes
2026-05-05 11:31:26 -04:00
db313628c5
Include aarch64 names for key libraries in ubuntu diskless
2026-05-01 14:25:18 -04:00
f260323d2f
Fix missing ubuntu diskless content
2026-05-01 12:14:13 -04:00
d60bc7f524
Bring chrony fixes to other scripts
2026-04-30 11:24:20 -04:00
ff0d4cdadf
Fix diskless profiles for chrony.conf modification
2026-04-30 11:24:15 -04:00
db6475c4da
Fix el8/el9 hook paths corrupted by symlinked el10 in aarch64 spec
...
In confluent_osdeploy-aarch64.spec.tmpl, el10 was created as a symlink
to el8, so the subsequent `mv el10/initramfs/usr el10/initramfs/var`
inadvertently renamed el8's usr directory, leaving el8 and el9 (also
symlinked to el8) with hooks at var/lib/dracut/hooks/ instead of
usr/lib/dracut/hooks/. Rocky 9 dracut never found the hooks and dropped
to the emergency shell on all aarch64 nodes.
Use `cp -a el8 el10` as the x86_64 spec already does, so the rename
only affects the el10 copy.
Co-authored-by: Claude <noreply@anthropic.com >
Signed-off-by: Timothy Middelkoop <tmiddelkoop@internet2.edu >
2026-04-30 08:09:06 -04:00
6d27e8a009
Allow monitor to read attributes by 'all' resource.
2026-04-29 07:51:08 -04:00
f363796439
Write to stdout as binary
...
This allows better redirection.
In python3, must write to sys.stdout.buffer. AttributeError for the unlikely event of a python2 based node being deployed.
2026-04-29 07:45:49 -04:00
dec118a985
Fix mistake in spec file
2026-04-24 09:29:31 -04:00
38eb0d7b10
Add Ubuntu 26.04
2026-04-24 08:35:44 -04:00
ae338daa43
Handle confluent= boot arg and IPv4 NIC autodetect
...
Add support for a confluent=<host> kernel argument in init-premount: configure networking, flush interfaces, autodetect the primary NIC (saved to /tmp/autodetectnic), verify TLS connectivity to the provided server, call the whoami endpoint over TLS to obtain the node name, and write results to /custom-installation/confluent/confluent.info (with fallback to copernicus on failure).
Also update casper-bottom logic to handle IPv4 manager addresses: for IPv6 the manager is still bracketed and scoped interface resolved as before; for IPv4 the script now uses the previously detected NIC (/tmp/autodetectnic) or falls back to an `ip route get <mgr>` lookup to determine DEVICE. This ensures routed IPv4 deployments work correctly.
2026-04-23 17:50:41 -04:00
6ad3f0d70c
Fix mistakes in the node apoption samples
2026-04-20 09:46:45 -04:00
c0b9bb3ab1
Fix group rename in collective
2026-04-17 11:57:35 -04:00
b32755b0d3
Fix remote client operation with Python 3.12+
2026-04-17 09:01:12 -04:00
c54ac530e1
Handle some environments where timedatectl does not exist
2026-04-14 13:50:12 -04:00
8990622470
Improve certificate mismatch handling
2026-04-08 15:37:50 -04:00
93a35d7e77
Improve srlinux error handling
2026-04-08 15:30:43 -04:00
c49b2fd8ab
Update quorum on deletion
...
If deletion of a node brings quorum, notify followers
of the good news
2026-04-07 14:57:09 -04:00
3ce2a5bc26
More tightly constrain node profile requests
...
Normalize paths using abspath and validate the result is within the expected path.
2026-04-06 15:12:44 -04:00
69d984b9dc
Fix syntax mistake in deferred handling in nodeapply
2026-04-03 10:34:20 -04:00
a123165712
Improve error when unknown user specified in syncfiles
2026-04-02 15:29:31 -04:00
b91b10552c
EL10 doesn't do setgid keysign
...
chmod 600 instead
2026-03-25 12:59:40 -04:00
779b07d2c2
Only try to use ssh_keys if it exists
...
EL10 changed from using ssh_keys and setgid to just
do setuid root instead.
2026-03-25 12:56:16 -04:00
df73c14475
Support unconfigured good without space
...
Some platforms try to combine the words
2026-03-19 18:05:38 -04:00
f78b301143
Update usage text
2026-03-19 09:54:08 -04:00
9b00fe5521
Don't try to open a file that doesn't exist
2026-03-17 13:03:18 -04:00
13a6444541
Fix incorrectly matching older versions as 'el10'
2026-03-17 12:58:04 -04:00
52db46be93
Fix python detection from ansible with space in shebang
2026-03-13 11:41:16 -04:00
550dfbf6a0
Fix reference of inputdata in remoteconfig
2026-03-13 09:26:11 -04:00
e0951b11a6
Fix filename typo
2026-03-13 08:58:58 -04:00
1a87701fee
Fix ansible running
...
Have results available as they happen
change away from stdout, to avoid being stepped on by ansible modules that print to that
2026-03-09 16:48:42 -04:00
e185f2224f
Implement ability for user to kick off confluent ansible runs
...
Add nodeapply -A and associated API.
This permits orchestrating plays without touching the nodes directly by the user.
2026-03-06 16:24:26 -05:00
69beaad3c9
Induce more versions of openssh to do the proper thing
2026-02-23 15:07:19 -05:00
74dda48513
Provide helper script for setting up nokia switches
2026-02-23 10:15:55 -05:00
08b2e1d008
Wire up FDB and LLDP for srlinux
2026-02-18 16:53:12 -05:00
582842aec8
Add mac and lldp retrieval for SRLinux
2026-02-18 16:16:22 -05:00
63307c331e
Have nodesensors and nodehealth be more adaptive to partial server data.
2026-02-17 16:19:41 -05:00
318608cde3
Add draft SRLinux support
...
Wire up the non-networking facets of Nokia SR Linux support.
Provide stubs for LLDP and FDB
2026-02-17 16:13:43 -05:00
ef7d2414ad
Update nodeconfig usage material
2026-02-11 11:35:09 -05:00
722a0b874a
Add notation about certificate and nodemedia
2026-02-11 10:54:30 -05:00
1deb76989e
Recognize 1a/2b style enclosure bay in discovery
2026-02-10 17:10:18 -05:00
480d399f44
Add missing switch member of info with NX switches
2026-02-09 13:17:45 -05:00
07369667f7
Become incompatible with pysnmp 7.1.16
...
The EPEL version of pysnmp is broken, block it from dependecies
2026-02-06 15:13:46 -05:00
e1d4b72f32
Be less picky about megarac url
...
megarac implementations consistently indicate an .xml file, but wildly vary on what it may be.
Broaden recognition.
2026-02-05 07:57:25 -05:00
86783a2f12
Fix uninitialized privacy_protocol variable
2026-02-03 07:58:07 -05:00
99063eb049
Recognize variation in DeviceDescrption.json to see SMM3
2026-02-02 10:17:32 -05:00
0975bd9e62
Revert "Update some code for async"
...
This reverts commit 3058dd4141
2026-01-28 15:04:49 -05:00
Jarrod Johnson
Timothy Middelkoop
xu_ren_xian