305a3a06d2
Ensure $HOME is set during firstboot
...
systemd tends not to set environment variables. However some firstboot
scripts generally expect $HOME to be correct.
2023-04-12 11:22:27 -04:00
bb7a72db65
Fix for ipv6 deployment
...
Need to avoid double-bracketing of the server and also disable globbing
so curl does not mistake the ip address for a glob attempt.
2023-02-13 09:36:42 -05:00
03fcd3f568
Fix indentation mistake in add_local_repositories
2023-01-11 09:53:01 -05:00
cc0962f5e5
Fix add_local_repositories in v6 environment
2023-01-06 15:35:36 -05:00
e4dc57a810
Fix syntax of grep
2022-12-09 14:57:47 -05:00
0d5f48b116
Be more patient and more noisy about DHCP attempt over time
2022-12-09 13:05:10 -05:00
c0f669cbdf
Add DHCP bringup to confluent= el8diskless
...
For routed, if user specifies confluent=, use that as a clue to
initiate a dhcp transaction to
facilitate routed requests.
2022-11-30 11:09:39 -05:00
48ac07e71d
Correct placement of initialization of the confluent_websrv variable
2022-11-08 11:33:43 -05:00
635b559c87
Fix IPv6 syntax for ssh certs in EL8 diskless
2022-11-08 10:51:31 -05:00
6865e3259e
Detect broken ipv4 and try ipv6
2022-11-08 09:45:08 -05:00
3d37692360
Add IPv6 to the imageboot script for EL profiles
2022-11-08 09:16:20 -05:00
20e6e1e521
Refresh functions to cope with v6-only usage
2022-11-08 08:52:29 -05:00
645abc2db7
Add [] to escape ipv6 prior to fetch of functions
2022-11-07 13:54:17 -05:00
e6e89bcee5
Steer v6 boot appropriately to v6 server
2022-11-07 13:25:26 -05:00
a21af719c2
Get ipv6 compatible deploycfg api call
2022-11-07 11:43:51 -05:00
13f3d4c1a6
First pass at adding ipv6-only boot for diskless el8
2022-11-07 11:07:45 -05:00
fd14221ab5
Avoid truncating console logging of firstboot
...
With significant firstboot output, there was a tendency
for tail to be killed before it relayed all the content.
Change to run the firstboot in a subshell in the background,
and have tail explicitly run until that subshell naturally
exits and then tail will cleanly exit
2022-10-28 09:30:12 -04:00
145be7ce31
Correct omission in private key access message during diskless boot
2022-10-07 16:47:48 -04:00
6eb4bf28e5
Another iteration to try to have IP adaptive syncfiles
...
It is likely that a client connects from fe80::, which
is explicitly omitted from ssh principals.
This time, have the client provide all currently set IP addresses
and the server will make a determination.
There remains the possibility it misconfigures a nic and tries to use that,
inducing failure. One strategy would be to filter the addresses and
only provide from the 'current' interface. Another is to just take
the hit as the node is likely going to suffer a lot from such a
misconfiguration anyway.
2022-10-05 12:23:47 -04:00
b98759698a
Sync up getinstalldisk and add another m.2 model
2022-09-01 13:22:50 -04:00
e774add916
Set timezone on diskless boots by default
...
During onboot, use confluent directed timezone
info to set the timezone if the
disk image is incorrect.
2022-08-24 16:09:05 -04:00
fb9546cbd6
Kill redundant udevd prior to starting the root fs
...
Having multiple udevd produces ambiguity and confusing
2022-04-14 13:56:42 -04:00
79bc27bc7a
Have el8 diskless systems add local repositories
...
This sets up local yum action by default.
2022-04-13 09:50:39 -04:00
47a517aec1
Decrease retries to do https retries with bad TLS cert
2022-02-24 16:37:48 -05:00
1f7bd1a28a
Fix autoconsole output on diskless
2022-02-24 16:27:32 -05:00
1a5f5aea3a
Try an alternative approach to autoconsole errors
2022-02-24 12:18:41 -05:00
7068287ba3
Fix autocons spurious output
2022-02-24 10:25:59 -05:00
fb1f6b70bb
Improve error handling on bad TLS cert
...
Bad TLS cert is a common problem, provide better feedback.
2022-02-24 09:27:40 -05:00
9f071c1fdb
Provide more details in example syncfiles
2022-01-20 14:10:30 -05:00
624984b1c9
Do not assume SPCR until confluent confirms text console
...
TIOCCONS was called for users that did not want to use serial. This
makes the serial console delayeed when automatic, but avoids video
users from being confused.
2021-12-09 10:34:12 -05:00
02da50af8b
Tighter permissions on /var/log/confluent
2021-12-08 07:42:19 -05:00
77de3ab25b
Apply more restrictive permissions to /var/log/confluent/
...
While confluent shouldn't put anything sensitive in the log, custom
content may. To mitigate the risk, it will now lock down the
log permissions.
2021-12-07 07:21:04 -05:00
1b21b9316c
Correct variable typo in imageboot scripts
2021-12-06 09:00:44 -05:00
0e1da6ebd6
Explicitly check for TPM 2.0 before trying to use TPM 2.0
2021-12-03 11:05:11 -05:00
61eecd672c
Add confignet to default firstboot/onboot as appropriate for el8 and
...
suse15
2021-11-08 16:34:26 -05:00
224663d0c8
Fix execution of confluent functions after run_remote_python
2021-10-29 13:50:04 -04:00
729408a0cb
Fix run_remote aafter the cleanup was added
...
The removal of the temp dir needed to be linked with
whether the script was dedicated or shared tmp with a run_remote_parts.
2021-10-29 13:01:59 -04:00
8eb6ce0b69
Specify absolute path for mktemp
...
mktemp defaults to relative, to produce the correct
behavior, must be absolute template.
2021-10-25 12:03:26 -04:00
957679db3c
Update syncfile examples and el7 support
2021-10-15 16:24:22 -04:00
98a6ffd9b6
Update more profiles with the APPENDONCE support
2021-10-15 16:16:11 -04:00
f33ed9b4d9
Cleanup after script execution
...
Leave cleaner tmp directories when functions are ran.
2021-10-15 12:16:48 -04:00
52549ec563
Fix module autoloading in diskless profiles
...
The initramfs has a reduced set of modules to boot and then
in diskless mode hands over to the 'real' OS for all userspace
to use the more substantial root filesystem with all of the modules.
However one exception is kernel module autoload, which induces modprobe
to run in the initial mount namespace unconditionally.
Thus, preserve the ramfs drivers (just in case) but have the autoloading
pivot
to the normal root filesystem to get the full complement of modules.
2021-10-13 11:37:48 -04:00
b96e9f4f70
Provide better feedback on missing key and skip tpm when not present
2021-10-12 11:39:18 -04:00
57f346fa4c
Implement syncfiles parameters
...
chmod and chown as directed
by the syncfiles file if present
2021-10-08 10:27:57 -04:00
3b7e7afc24
Fix inconsistent handling of marginal id in syncfileclient
...
Also, resynchronize syncfileclient across the distributions.
2021-10-07 12:36:52 -04:00
6222883188
Syncronize syncfileclient for el8 diskless and diskful
2021-10-07 11:10:56 -04:00
d23f9db6e0
Syncronize diskfull and diskless el8 and el9 functions
2021-10-07 08:38:29 -04:00
172008f942
Attempt to cover centos stream 9 by el8
...
At first glance, there should be similarities,
apart from python differences and need for
different clortho build due to library mismatch.
2021-10-06 16:59:47 -04:00
6acd3c2b7d
Add ability to execute functions as a command
...
This gives easier access over nodeshell and similar to run functions by executing the
functions as a script with arguments.
2021-09-20 08:00:35 -04:00
06e32c53cc
Fix overly vague extraction of deploy_server
...
If deploy_server appears anywhere, it confuses
the scripts
2021-09-13 10:23:13 -04:00
Jarrod Johnson