130e3adbc6
Add uuid fill-in for pxe when policy allows
...
If permissive or open, and xcc is known, but uuid missing,
fill it in.
If open or pxe, and can know node through XCC fingerprint,
then accetp that as a clue.
Also, do not search ethernet switches when xcc cert helps identity.
2021-08-12 14:17:57 -04:00
0f543c80e9
Add a more specific error if we have a guess about nodename
...
If a manual add procedure has not
specified a mac or uuid, but
the discovery framework has a guess about it,
have that guess appear
in events with suggestion on
how to proceed.
2021-08-12 13:07:57 -04:00
e9bc7ebe8d
Finish conversion of imgutil to argparse
2021-08-12 09:15:15 -04:00
8a8e9718f9
Begin migration of imgutil to argparse
...
We no longer support python 2.6, we can use argparse for better subcommand handling.
2021-08-11 17:01:32 -04:00
865021beff
Unack to rootfs
...
This keeps things neutral and leaves the door open for multipart
support
2021-08-11 16:14:46 -04:00
034eca3bb0
Refine PXE/HTTP log
...
Add logs for ignored boot requests, suppress discovery warning for known uuids,
and generally throttle logging these to once per mac address per minute.
2021-08-11 08:14:32 -04:00
6b28877828
Add iputils to have ping in suse
2021-08-11 07:31:58 -04:00
71342272bf
Add imgutil unpack
...
Provide capability to unpack previously packed diskless images.
2021-08-10 09:04:30 -04:00
1e418e1bcf
Stub to drive unpack feature
2021-08-09 16:47:27 -04:00
225618ef75
Add stall in firstboot for deployer to be available
2021-08-09 15:19:36 -04:00
2a0491ef0c
Add ability to specify custom increment in []
...
Often, it's desired to target odd or even, provide custom increment/step syntax,
but only in the [] context.
Perhaps one day can add n1-n12:2 support, but for now, this is easier to handle.
2021-08-09 11:19:07 -04:00
db9df97fa0
Check and error if user request non-existant profile
...
This provides nice and immediate feedback for a common mistake.
2021-08-09 09:49:10 -04:00
f9846cb564
Fix inability to delete a completed servicedata event
2021-08-05 08:31:13 -04:00
91caf76cae
Fix ownership problems with build and capture
...
Some parent directories were never given to confluent user
2021-08-04 12:12:57 -04:00
9bfdd20919
Add sanity check to confluent start
...
Refuse to start if /etc/confluent is in bad shape that
may create issues later.
2021-08-04 10:54:21 -04:00
c3e342a8c0
Fix ordering of python path discovery
2021-08-03 16:48:30 -04:00
54fde4af21
Fix pessimistic error on apikey
...
Actually make sure that the apikey retrieval failed before erroring.
2021-08-03 16:44:03 -04:00
fc22c87ce9
Fix typo in informational message
2021-08-02 16:03:37 -04:00
48d84a5422
Fix get_json
...
Some handlers may work in bytes or str,
normalize to str on the way out.
2021-08-02 14:35:59 -04:00
b604ec4773
Fix detection of missing sync source
...
Rather than just assume we want a directory when glob
finds no matches, just take the empty result.
2021-08-02 11:33:08 -04:00
2219297afc
Fix simple password support
...
Simple password was broken during the MFA addition, restore
the most common authentication mechanism.
2021-07-29 13:16:33 -04:00
08f226a3bf
Recognize Ubuntu 20.04.2
2021-07-28 14:31:04 -04:00
a25a10cb86
Add firstboot/post directories to ubuntu
2021-07-28 08:52:05 -04:00
af9676ee6f
Improve appearance of imgutil capture
...
Provide more feedback with less worrisome normal output.
2021-07-27 08:36:48 -04:00
4c96735b6d
Add ssh to post phase of cloning
2021-07-26 13:51:36 -04:00
ac86961e24
Perform syncfiles on clone deployment post
2021-07-26 13:29:33 -04:00
6adc736450
Relocate syncfiles path to correct location
2021-07-26 13:22:31 -04:00
8ab6fef632
Fix kernel selection on pack
...
Make a specialized sort
for kernel versions to more reliably identify the latest version.
2021-07-26 13:03:26 -04:00
065d0585ea
Make search for grub.cfg more specific
...
grub.cfg outside of /boot can easily exist, be more specific about where it can be.
2021-07-26 12:17:15 -04:00
ca8f6fa52c
Bash completion for imgutil capture
2021-07-26 11:59:04 -04:00
a720ccdbc8
Set ownership/permissions of private section
...
Fix confluent being unable to read, and make the permissions more consistent.
2021-07-26 11:12:59 -04:00
0ad59436ec
Mitigate scratch consumption
...
As an old file is copied in for future disposale, delete
it as we go by fallocate
to punch holes in it.
2021-07-26 09:19:33 -04:00
663f8fc085
Add nodename to set_confluent_vars
...
It is expected that nodename would also be set.
2021-07-23 19:08:06 -04:00
a7b9e72589
Fixes and update umage2disk to new multipart format
2021-07-23 19:06:14 -04:00
9eb6f38bf1
Various fixes to imageboot.sh
2021-07-23 18:43:57 -04:00
4928f50332
Create private directiories and correct key format
2021-07-23 17:43:47 -04:00
7f468c3a91
Correct offset to be in sectors, not bytes
2021-07-23 17:32:42 -04:00
81b4da6a95
Add encrypted stateless pack
2021-07-23 17:11:33 -04:00
4bde1b963f
Transfer encryption key on capture
2021-07-23 16:54:57 -04:00
1e44deecf6
Add support to retrieve private key and crypt mount diskless/cloning
2021-07-23 16:49:02 -04:00
1e653851fe
Add syncfiles to el8 diskless
2021-07-23 16:23:15 -04:00
54667570bd
Create encrypted image and private profile data
...
Prepare for securing os profile witht custom images
2021-07-23 16:13:24 -04:00
364085801a
Fix apikey variable
2021-07-21 17:44:43 -04:00
8171d461ea
Another selinux fixup
...
systemctl enable firstboot
produces invalid selinux context, fix aafter enabling.
2021-07-21 17:34:53 -04:00
3690dda177
Actually enable firstboot execution
2021-07-21 16:48:38 -04:00
365b81e7e1
Prune all .gitignore files, not just blessed profiles
2021-07-21 13:57:06 -04:00
b3fee922f9
Try to speed up selinux labelling
...
There's only a couple of places
where the imaging should need fixup, be more selective in relabel.
2021-07-21 13:26:31 -04:00
29d0dd6678
Add missing profile content for cloning
2021-07-21 12:47:43 -04:00
7d31e22447
Add post/firstboot to os cloning
2021-07-21 12:28:03 -04:00
4ddfa192ba
Remove sticky bit from profile directory
2021-07-21 12:16:22 -04:00
Jarrod Johnson