xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2026-09-04 12:07:58 +00:00
Code Issues Projects Releases Wiki Activity
6,410 Commits 41 Branches 83 Tags
0bbc75d53e0555e2073ae2ad7c60b69082fd2548
Commit Graph

6410 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jarrod Johnson 0bbc75d53e Copy sshd-session helper if present 2026-07-09 14:24:34 -04:00
Jarrod Johnson 263953fc1e Remove nuisance autoncons output when empty 
If no serial console detected, don't bother mentioning it.
 2026-07-09 14:22:12 -04:00
Jarrod Johnson beab5cd791 Fix for modern python ioctl 
Need to actually feed full buffer into modern python ioctl calls.
 2026-07-09 14:13:45 -04:00
Jarrod Johnson 5f34fac2bc confluent_nodename variable might not survive to imageboot 
Pull it from the confluent.info file.
 2026-07-09 14:13:12 -04:00
Jarrod Johnson 149ecad90e Improvements for MegaRAC discovery 
Some Megarac fail with Host header looking like link local.

Systems with nVidia architecture have multiple bmcs, select the actual bmc.
 2026-07-09 14:12:23 -04:00
Jarrod Johnson 0a14e019d0 Skip suse16 diskless for now 2026-07-09 10:47:55 -04:00
Jarrod Johnson b724de4230 Merge pull request #223 from Obihoernchen/showsecret 
Add server-side confluentdbutil showattrib subcommand
 2026-07-08 17:53:12 -04:00
Markus Hilger 6f11dffae8 Add server-side confluentdbutil showattrib subcommand 
Adds `confluentdbutil showattrib <noderange> <attribute>...` to print the
node attribute.

In contrast to nodeattrib it can shows secrets and crypted values with -u flag.
It's server-side only: reads the config store and master key directly, never over
the API.
It's read-only and works without confluentd running.
 2026-07-08 19:55:18 +02:00
Jarrod Johnson 40f1a85932 Merge pull request #227 from Obihoernchen/autorelease 
Auto add releases for new tags
 2026-07-08 12:32:33 -04:00
Jarrod Johnson 0d90317d1f Merge remote-tracking branch 'xcat/master' 2026-07-08 11:57:15 -04:00
Jarrod Johnson e41a844aa3 Further tighten routing for "special" cases 
Mitigate risk of misdirection through more explicit routing rules.
 2026-07-08 11:56:48 -04:00
Jarrod Johnson c9adc7690a http api fixes 
Instead of returning a sessionless authdata if webauthn loaded and validation requested, raise a not found indicating missing webauthn module.

Fix str being passod to rsp_write for the 403 return.

Ensure the console and shell session logic triggers only for subordinates of nodes or noderange.

Fix  str being passed to rsp.write for the successful console session
 2026-07-08 11:27:26 -04:00
Markus Hilger 1dcaa40970 Auto add releases for new tags 2026-07-08 16:11:47 +02:00
Jarrod Johnson 9e71ea6b6e Merge pull request #225 from Obihoernchen/license 
License naming fixes for EPEL
 2026-07-08 09:46:41 -04:00
Jarrod Johnson ec0ab527b2 Fix exception name 2026-07-07 16:56:32 -04:00
Jarrod Johnson 25a6fb82d4 Correct exception name in passkey denial 2026-07-07 16:47:50 -04:00
Jarrod Johnson 8e75585f7d Fixes for shell session operation in select paths 
The classic console interface is restored.
 2026-07-07 16:39:35 -04:00
Jarrod Johnson 9a4653412c Fix webauthn related issues 
The block on user modification shorted out webauthn hooks.

Further, be more picky about the prefix before the username in webauthn registered credentials and validation.
 2026-07-07 16:37:45 -04:00
Markus Hilger bb7de607c2 Add missing BSD-3-Clause license of tmt.c 
confluent_vtbufferd/tmt.c has a BSD-3-Clause license as described in
confluent_vtbufferd/NOTICE, too.
 2026-07-07 21:21:56 +02:00
Markus Hilger dba2af71c7 Match Apache-2.0 license name with SPDX expressions 
For EPEL the official SPDX license expressions have to be used.
Check:

- https://docs.fedoraproject.org/en-US/packaging-guidelines/LicensingGuidelines/
- https://spdx.org/licenses/
- https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
 2026-07-07 21:08:43 +02:00
Jarrod Johnson 1feec98edf Ensure install interface comes up in firstboot 2026-07-02 17:51:56 -04:00
Jarrod Johnson c3b75f0ca1 Remove stale logging output from enlogic 2026-07-02 16:23:32 -04:00
Jarrod Johnson 72dcd9ef2f Merge pull request #222 from Obihoernchen/spelling 
Fix typos and small bugs found during a documentation/UI text review
 2026-07-02 16:22:45 -04:00
Markus Hilger f4c43394d8 Fix missing format() leaving {0} literal in error message 2026-07-02 22:07:48 +02:00
Markus Hilger 46ada49401 Remove stray debug write to /etc/whatnowhosts 2026-07-02 22:07:48 +02:00
Markus Hilger 89c710f8c3 Fix key typo dropping verified flag in enclosure discovery 2026-07-02 22:07:48 +02:00
Markus Hilger e280651343 Fix discostatus typo hiding records from the unidentified filter 2026-07-02 22:07:38 +02:00
Markus Hilger 7727cd86fc Fix typos in help text, errors, and log messages 2026-07-02 22:07:27 +02:00
Markus Hilger cfc26f1e60 Fix typos in man pages 2026-07-02 21:52:29 +02:00
Jarrod Johnson 77f2094ff5 Merge pull request #219 from Obihoernchen/nodeattrib_doc 
Extend nodeattrib net.* documentation
 2026-07-02 15:06:24 -04:00
Jarrod Johnson 98190031df Merge pull request #221 from Obihoernchen/defaultdoc 
Add more attribute documentation
 2026-07-02 15:05:44 -04:00
Jarrod Johnson f6d7a47140 Successfully indicate install_url and TLS setup 
While curl and agama download are happy with the CA bundle, zypper was not.  Have pre.sh properly set up the CA certs.

Additionally, indicate the install subdirectory of the repository to agama via it's cmdline conf.
 2026-07-02 14:57:26 -04:00
Markus Hilger 0f20c709c0 Add more attribute documentation 
- deployment.lock: add missing 'unlocked' (messages.py's
  InputDeploymentLock/DeploymentLock already accept and persist it).
- hardwaremanagement.method: correct stale "ipmi is used if not
  specified" claim. Was changed to null in
  c14165e2bd.
- snmp.privacyprotocol: document that unset is treated as 'des'
  (snmputil.py explicitly groups None with 'des').
 2026-07-02 19:50:56 +02:00
Jarrod Johnson a8cd9a24d5 Auto-restart vtbufferd on exit 
If vtbuffer is interrupted, then restart it.
 2026-07-02 12:13:24 -04:00
Jarrod Johnson 752d04939b Merge pull request #220 from Obihoernchen/pubkeys_addpolicy 
Fix pubkeys.addpolicy documentation to match implementation
 2026-07-02 10:31:04 -04:00
Jarrod Johnson d24359a86c Add comments clarifying non-voting state with respect to security expectations 2026-07-02 10:27:21 -04:00
Jarrod Johnson a41e20b1ab Place install_url into agama configuration 2026-07-02 10:19:26 -04:00
Markus Hilger 4c0b2e44f4 Fix pubkeys.addpolicy documentation to match implementation 
validvalues listed 'automatic'/'manual', but that was outdated.
Commit 454e1b8267 and cc70dcfa2b
implemented unset/'tofu' (trust-on-first-use, the default), 'manual', 'ca-only',
and an implicit 'ca' (any value that isn't otherwise handled falls
through to the standard CA-verification path, keying an already
pinned match without a full CA reverify).
The validvalues fix in ecaa75d967 rejected
these new values. Add new valid values with proper documentation.
 2026-07-02 15:55:50 +02:00
Jarrod Johnson ada4cb196d Lock down non-system users to not have open ended access 2026-07-01 21:11:27 -04:00
Jarrod Johnson 0106758ceb Prevent overwrite of existing files when saving licenses 2026-07-01 21:06:32 -04:00
Jarrod Johnson 1934b88b0d Use basename to ensure no path traversal in license filenames 2026-07-01 20:54:36 -04:00
Jarrod Johnson ae290c4419 Ensure the filename cannot have path traversal in XCC2 and older 2026-07-01 20:42:22 -04:00
Jarrod Johnson 57a4c840cb Fix web shell sessions 2026-07-01 14:47:42 -04:00
Jarrod Johnson 6bcf1b73ba Fix stale references to wsgi style env 2026-07-01 13:49:05 -04:00
Markus Hilger 125b5b3ba2 Extend nodeattrib net.* documentation 2026-07-01 18:21:40 +02:00
Jarrod Johnson 3a6887b4b4 Provide nicer message when requested VM does not exist 2026-07-01 09:55:15 -04:00
Jarrod Johnson d761c7e6da Slow down reconnect attempts to powered down Proxmox VMs and better handle closed websockets. 2026-07-01 09:30:28 -04:00
Jarrod Johnson 45b392932d Handle unreachable proxmox host more friendly 2026-07-01 09:14:07 -04:00
Jarrod Johnson 33c67db3c4 Further mitigate potential XML misbehavior 
Since it turns out we already incurred lxml dependency, use lxml etree instead of xml and mitigate risky xml features beyond blocking the word '!entity'
 2026-07-01 08:28:25 -04:00
Jarrod Johnson fbec09c073 Fix behavior with IPMI bad user/password 2026-06-30 15:17:45 -04:00