ef68259745
Provide more full fixup of openssl invocation in wget
...
For IPv4 and IPv6, strip the ':443' for arguments where it doesn't make sense.
For IPv6, strip out [, ], and '%' from those arguments.
2025-03-19 12:41:50 -04:00
e25b3acd98
Fix onboot.d in genesis profiles
2025-03-19 09:41:21 -04:00
1e463367fe
Switch Ubunut initramfs to ssl
...
The busybox wget invocation of openssl is broken.
Override by stubbing it out to let openssl pick the verify
hostname instead of wget specified one, which is incorrect.
2025-03-18 15:52:37 -04:00
58608016c4
Add wait for disk bringup to allow media based co-opt of genesis
2025-03-12 13:23:00 -04:00
9123d2f2e0
Add ability to post bodys to HTTP requests
2025-03-11 15:35:35 -04:00
9cecaab055
Fix confluent server identification using -s instead of file
2025-03-11 15:04:36 -04:00
d2011261ab
Enable creation of bond and dependent tags in one iteration
...
Have a second pass to check interfaces that may
be created by the first pass.
2025-03-11 09:58:51 -04:00
1f97a5e67d
Add a Makefile for building
2025-03-07 18:01:55 -05:00
13a6493100
Add a general utility for confluent in golang
2025-03-07 17:16:13 -05:00
28c929aec6
Have a draft apiclient in golang
2025-03-05 17:14:55 -05:00
80ea0b3e91
Merge pull request #181 from tkucherera-lenovo/console-redirect
...
modify redirection code for rhel
2025-03-05 11:31:01 -05:00
1bfad11ee5
remove-mkconfig
2025-03-05 11:19:34 -05:00
7b4063a42f
modify redirection code for rhel
2025-03-05 11:12:31 -05:00
f458c15677
Correct launching of GUI in genesis
2025-03-04 16:11:28 -05:00
02ec40092e
Have genesis optionally GUI capable
...
Have Genesis work with newer distribution base, also support seatd/sway when
genesis contains it.
2025-03-04 15:12:59 -05:00
f06d9a81e7
Have sshd only generate ed25519 during initramfs phase of diskless.
...
sshd-keygen service will come later with other keys, if desired.
2025-03-04 10:04:30 -05:00
44a30686cb
Add Fedora 41 scripted install support
2025-02-28 08:53:26 -05:00
75a0f44a36
add a loop to find the accessible deployer when the method is not static
2025-02-28 13:53:28 +08:00
a595abe9e6
also allow users to just specify lom and we use the first port
2025-02-25 12:13:18 -05:00
11d63a4b5c
allow users to choose which lom port to use for bmc shared mode
2025-02-25 11:00:16 -05:00
5fda02b9e0
Repeat NIC check loop on Ubuntu 18.04 deployments
2025-02-20 12:54:55 -05:00
76d4556501
Add a go version of genpasshmac
2025-02-07 10:19:54 -05:00
b9f4051396
Export variables set in confluent functions
2025-02-03 16:40:57 -05:00
79d5a637a7
Correct syntax error in confignet
2025-01-24 11:12:25 -05:00
67aaee3b4e
Adapt to the bond modes
...
When the team modes were defined in attributes, it was based on the
teamd names. Since the ecosystem abandoned teamd, we went back to
bond.
However, we neglected to map all the names to the closest bond type equivalent.
Change confignet to do the mapping.
2025-01-24 07:58:31 -05:00
0cae0fe06e
Add installtodisk support for el9 diskless images
2024-12-13 19:04:15 -05:00
cd2509c485
Ignore unparseable net config files
...
If some pre-processing has rendered config files
unparseable, ignore the file as we can't intelligently rewrite
those.
2024-12-13 16:16:12 -05:00
2c9b526de4
Repeat the interface loop for Ubuntu identity deploy
...
It may happen that the first pass at nics misses
a viable network interface due to slow link up
or slow spanning tree forwarding.
Repeat the loop through the interfaces to have follow
up chances at success.
2024-12-05 14:26:26 -05:00
9c589e8352
Regenerate initrd after install
...
The drivers on target may differ from source, regenerate initramfs to allow for booting
2024-11-15 09:19:51 -05:00
9b6204db4f
Switch to the type of the member interface
...
The 'team-slave/bond-slove' type is unneccesary, and
messes up with infiniband.
NetworkManager gets the idea if the 'ethernet' is a bond member without being told explicitly.
2024-10-28 13:21:54 -04:00
008c1308b4
Handle nvm subsystem without driver.
...
A variant of the M.2 RAID enablement kit does not manifest with nvme
driver. Address this by allowing 'nvm' subsystype. to allow blank driver.
Also, to be on the safe side, have self.driver always be a string,
so it can be 'falsey' but still work as a string.
2024-10-26 08:16:56 -04:00
a46bcfa2b5
Add CentOS Stream 10 and Alma Kitten 10
...
Similar to 9, but now hooks must be in /var instead of /usr
2024-10-25 09:52:10 -04:00
3a0218c421
Simplify profile label outside of bootloader
2024-10-07 13:51:55 -04:00
f19234419d
Implement non-root ssh for SUSE diskless
2024-09-19 13:15:10 -04:00
4a2e943f84
Update osdeploy rpms to new version scheme for snapshots
2024-09-04 10:19:11 -04:00
5d4f0662d1
Fix add_local_repositories for routed IPv4
...
Routed IPv4 deployment is not guaranteed to have
an IPv6 server. In this case the safer bet is
to try to just accept the IPv4 anyway.
2024-08-23 07:06:37 -04:00
edc3a3e9f3
Have confignet fallback to unicast per deploycfg
...
In routed deployments, the scan mechanism
will not be available. Fall back to routed
access to the deploy server as indicated
by deploycfg from install time.
2024-08-22 16:39:52 -04:00
dd2119c6d9
Ignore very old ssh key file
2024-08-19 16:26:48 -04:00
0961174425
Remove redundant code
2024-08-09 19:55:42 +02:00
005adec437
Add error handling for interface_names
2024-08-09 19:45:19 +02:00
6943c2dc0f
Make sure VLAN/PKEY connections are created last
...
Needed for VLANs on bond connections etc.
2024-08-09 19:38:45 +02:00
6833cd9c53
Add VLAN/PKEY support to confignet
...
Introduce new node attribute net.vlan_id to support VLAN/PKEY
configuration using confignet.
2024-08-09 17:59:34 +02:00
8fd39c36bb
Fix some mistakes in confignet
2024-08-09 07:55:42 -04:00
89bd7c6053
Force load IB/OPA modules in case of IB boot
...
Ubuntu diskless was not working with boot over IB
2024-08-01 09:40:39 -04:00
71ca9ef76c
Fix path to ntp servers in user-data mod for ubuntu
2024-07-29 15:57:34 -04:00
1c4f1ae817
Try to add ntp and timezones to Ubuntu scripted install
2024-07-29 15:21:10 -04:00
e6dc383d25
Fix mistake in EL8/EL9 LUKS
2024-07-29 11:22:07 -04:00
329f2b4485
Amend cryptboot implementation for Ubuntu 22/24, EL8/EL9
...
Provide mechanism for administrator to place a custom
key for potential interactive recovery into
/var/lib/confluent/private/os/<profile>/pending/luks.key
If not provided, generate a unique one for each install.
Either way, persist the key in /etc/confluent/luks.key, to
facilitate later resealing if the user wants (clevis nor systemd
prior to 256 supports unlock via TPM2, so keyfile is required
for now).
Migrating to otherwise escrowed passphrases and/or sealing to
specific TPMs will be left to operators and/or third parties.
2024-07-29 10:17:14 -04:00
bee9f18197
Tolerate / in the apikey for LUKS setup
...
The apikey is highly likely to have a /, and so we need to use something
not in the base64 alphabet as a delimiter.
2024-07-26 17:59:42 -04:00
1af898dcb8
Fix encryptboot on EL8/EL9
2024-07-26 17:43:51 -04:00
Jarrod Johnson
Tinashe
Hengli Kuang
Markus Hilger