47a517aec1
Decrease retries to do https retries with bad TLS cert
2022-02-24 16:37:48 -05:00
1f7bd1a28a
Fix autoconsole output on diskless
2022-02-24 16:27:32 -05:00
50da83b4f5
Fix api token message not being pushed
2022-02-24 15:56:29 -05:00
15f4cc085d
Aggressively flush out error output
2022-02-24 15:46:38 -05:00
1a5f5aea3a
Try an alternative approach to autoconsole errors
2022-02-24 12:18:41 -05:00
7068287ba3
Fix autocons spurious output
2022-02-24 10:25:59 -05:00
fb1f6b70bb
Improve error handling on bad TLS cert
...
Bad TLS cert is a common problem, provide better feedback.
2022-02-24 09:27:40 -05:00
24ef12e029
Disable autoconf of ipv6 in el
...
If autoconf is allowed when link is brought up, it scan
confuse redhat network configuration when it already finds
an ipv6 address.
2022-02-23 16:58:29 -05:00
fdc9d94408
Also register to run before coreos-ignition-setup-user
...
For coreos, make sure we preempt either name.
2022-02-22 14:30:48 -05:00
b463a53146
Cleanup per coverity
...
Fix a number of concerns that coverity reports
2022-02-17 17:05:00 -05:00
f10a27fd7a
Switch to mkstemp
...
Use mkstemp to more confidently reserve a filename as expected.
2022-02-15 17:13:04 -05:00
00bedf6946
Shuffle confluenntuuid to earlier in copernicus
...
Currently, ssdp handler behavior needs confluentuuid first, if
it is to have any effect.
2022-02-08 12:06:52 -05:00
358b719cec
Implement deployment binding for new installs
...
When doing osdeploy initialize,
save the uuid and have deployment
targets specifically pair back with site via
uuid.
2022-02-08 10:41:27 -05:00
638a1b3587
Fix confignet for python2
2022-02-03 11:50:34 -05:00
5f4a565feb
Use python2-compatible apiclient load for el7 diskless
2022-02-03 10:10:23 -05:00
e94d0a5236
Fix for EL7 compatibility
...
Some python 3 exclusive assumptions were made.
Unfortunately, EL7 is python2
centric.
2022-02-03 10:09:28 -05:00
0bca6e0852
Apply more fixes for EL7 diskless
2022-02-02 15:22:58 -05:00
c6816099f7
Add el7 diskless draft to packaging
2022-02-02 13:23:34 -05:00
eaa0921420
Draft EL7 diskless support
2022-02-02 13:09:26 -05:00
554e25d6cb
Assume libcrypt.so.1 if not 2 in more generic way
2022-02-02 11:17:08 -05:00
f346cae683
Use more widely known paths for libcrypt
2022-02-02 10:53:46 -05:00
1431f9ce13
Change to python 2/3 agnostic syntax
2022-02-02 08:37:22 -05:00
9f071c1fdb
Provide more details in example syncfiles
2022-01-20 14:10:30 -05:00
456b43eeb7
Correctly align rtattr and nlmsg
...
When advancing through messages,
must pad to nearest multiple of
4. This resolves erroneously landing on incorrect offsets.
2022-01-19 13:21:59 -05:00
dbaae417e9
Have configbmc stall on TSM
...
TSM will stall out for an extended
period of time after a network change.
Accomodate by forcing a pause
on detection of TSM.
2022-01-10 12:01:15 -05:00
181f704331
Correct configbmc misidentification of lan chan
...
The lan channel get mac address was incorrect, change
to correctly request.
2022-01-10 09:29:40 -05:00
c475e4801f
Fix incorrect quotes in autocons.c
2022-01-07 09:28:24 -05:00
abec8c498c
Break netlink address fetch on invalid rta_len
...
It is considered valid for kernel to return a null rta_len
in the midst of data and expect the caller to terminate.
2021-12-20 12:28:35 -05:00
ad33572290
Add debug information to coreos init
2021-12-09 11:55:12 -05:00
624984b1c9
Do not assume SPCR until confluent confirms text console
...
TIOCCONS was called for users that did not want to use serial. This
makes the serial console delayeed when automatic, but avoids video
users from being confused.
2021-12-09 10:34:12 -05:00
c2de127947
Bring el8 completely over to prefer ipv4
2021-12-09 08:31:07 -05:00
cf686f8018
Prefer IPv4 deployment over IPv6 when both are available
...
Some older vintages of RHEL and clones do not support IPv4,
best to prefer ipv4 to avoid messing up on places that have ipv6
configured.
2021-12-08 17:04:04 -05:00
02da50af8b
Tighter permissions on /var/log/confluent
2021-12-08 07:42:19 -05:00
77de3ab25b
Apply more restrictive permissions to /var/log/confluent/
...
While confluent shouldn't put anything sensitive in the log, custom
content may. To mitigate the risk, it will now lock down the
log permissions.
2021-12-07 07:21:04 -05:00
1b21b9316c
Correct variable typo in imageboot scripts
2021-12-06 09:00:44 -05:00
4260db20b7
Make confluent contennt from initramfs avalibale to normal root system
2021-12-03 16:06:47 -05:00
496be816ff
Add exit 0 to avoid failed systemd unit
2021-12-03 12:50:03 -05:00
4e0a76d955
Fix typo in confluent name in coreos script
2021-12-03 12:47:05 -05:00
f2b2d8519c
Add onboot link to coreos relabel activity
2021-12-03 12:45:42 -05:00
d829db4407
Add onboot hook to coreos
2021-12-03 12:37:03 -05:00
0e1da6ebd6
Explicitly check for TPM 2.0 before trying to use TPM 2.0
2021-12-03 11:05:11 -05:00
d2435d315b
Schedule fetch of private data before ignition cares
2021-12-03 10:39:47 -05:00
4388399f78
Fetch config.ign file during rootfs setup in CoreOS
2021-12-03 09:34:46 -05:00
a146a54172
Move ignition to profile private data, extracted
2021-12-03 08:48:27 -05:00
4482b675b4
Wait for network to get ssh certificates
2021-12-03 08:32:25 -05:00
714a883d9c
Purge the conflucting default nmconnection if we have better
2021-12-02 17:00:10 -05:00
77865ba71c
Disable fakecmdline for now
2021-12-02 16:40:41 -05:00
3adb82370f
Specify correct filename for fakecmdline
2021-12-02 16:27:55 -05:00
7a95c3e64c
Set selinux context of fakecmdline
2021-12-02 16:17:04 -05:00
8ecbcb0f00
Fix coreos tendency to disable ipv6
2021-12-01 16:26:13 -05:00
Jarrod Johnson