b4d7812926
Add some likely customizations examples
...
RedHat family is likely to be customized with firewall and selinux,
use those as examples to get things going for users.
2020-07-29 12:19:44 -04:00
b09631fcbf
Correct mistake in chcon path
2020-07-24 16:07:15 -04:00
235c07063c
Adjust SELinux context on remote exec
...
To facilitate firstboot, context must be changed
before execing remote content.
2020-07-24 15:32:13 -04:00
d2f1ea6cec
Tweak the customizations.
2020-07-24 11:10:01 -04:00
d7c219f2a8
Add a new strategy for custom content
...
This allows a profile to more easily isolate customizations
from the base profile
2020-07-24 10:59:15 -04:00
eabb212e58
Fix setupssh.sh without ssh_config.d
...
It was modifying the installer ssh_config
rather than the target ssh_config
2020-07-24 08:12:53 -04:00
ded4762baf
Go to internalizing driver disk load
...
Trying to let the dd happen naturally was evidently a mistake,
load the drivers manually.
2020-07-16 15:09:24 -04:00
9661d4d6fb
Clear cmdline between runs
2020-07-15 17:13:07 -04:00
8fc475a678
Fix mistakes in the initqueue hooks
...
Syntax errors were present.
2020-07-15 15:55:29 -04:00
d49f018981
Correct functions in profiles
...
Use functions correectly.
2020-07-15 15:22:27 -04:00
6dadac498f
Try another strategy for confluent initqueue
...
We want to have each iteration try not much.
But we also want to have a 'good' (primary network) match
supersede a less successful guess.
But we also want to keep guessing.
So the first 'vague' guess gets to run full hook.
If a future good guess happens, rerun the hook to update the data.
2020-07-15 15:20:17 -04:00
3b121cdb4b
Have initqueue hook give up faster
...
Since the hook itself will get retried, we can be more aggressive
in giving up in each individual attempt.
2020-07-15 08:45:41 -04:00
fba82f9379
Change el8 addons to retry confluent handler
...
If DD is in play, drivers may appear later, and
we have to wait for them in a future invocation.
2020-07-14 16:43:37 -04:00
dad68bdf63
Conditionally include clevis-dracut
...
If not using LUKS, don't bother with clevis-dracut.
In 8.1, clevis-dracut will cause problems with network
in initrd time.
2020-07-14 14:40:05 -04:00
910490cc74
Add arguments to the run_remote functions
...
This will help provide flexibility in invoking remote scripts
without hardcoding arguments into the scripts
2020-07-13 17:08:38 -04:00
439859e4fc
Implement suse ntp and correct redhat ntp
2020-07-09 15:05:20 -04:00
50661b7dee
Fix multiple ntp servers in EL8 profile
2020-07-09 13:30:13 -04:00
f8affe99db
Add ntp to EL8 profile prescript
2020-07-09 12:11:32 -04:00
c9e1ecb616
Fix use of touch when touch is not present
2020-07-02 16:34:50 -04:00
f157ab1ef3
Use the 'staged' profile in some linux
...
The staged was added to control netboot mostly,
and is mostly optional but change some default
profiles to use it.
2020-07-01 14:20:40 -04:00
22085e38f5
Change bound to 'tpm2'.
...
This is a bit more logical and flexible for the future.
2020-07-01 13:33:59 -04:00
3fdcecb8c6
Suppress spurious error output
...
Have the process start cleaner in EL8 deployments
2020-07-01 10:43:24 -04:00
e863edfe3f
Correct a number of mistakes
2020-07-01 09:52:17 -04:00
b407fef988
Normalize path to confluent files
...
After going through tmp and etc, settle on /etc/confluent/
as the generally relevant directory when possible.
Additionally, move apikey and ifidx logic into apiclient where
possible
2020-07-01 08:57:08 -04:00
4cf34056e4
Correct mistakes in previous commit
2020-06-30 19:34:13 -04:00
32ba37a858
Extract default nic to the index in el8
2020-06-30 19:30:09 -04:00
0c3888441d
Add the check for primary nic to suse
2020-06-30 18:48:10 -04:00
27a2a58ea1
Try more aggressively to get to 'default' network.
...
If a 'default' network is going to eventually link up,
wait for it.
2020-06-30 18:39:29 -04:00
8f9e4ea205
Build confluent CA cert for EL8
2020-06-30 17:02:21 -04:00
94f2b618bd
Also copy api key to usable location.
2020-06-30 16:59:52 -04:00
8d3374b1e7
Move confluent.info to correct location
2020-06-30 16:55:01 -04:00
2f4dd240dd
Change EL8 initramfs to use apiclient
...
This is a richer client that provides
the extended information required
for more accurate network autodetect.
2020-06-30 15:02:10 -04:00
df503464d7
Tighten permissions on /etc/confluent on deployed target
2020-06-26 15:50:15 -04:00
5bc9cb57d1
Amend RH initqueue
...
We may be called before drivers have manifested interfaces.
On each iteration make sure all nics are up before proceeding.
2020-06-18 16:45:24 -04:00
e1270b2926
Do not seal to PCR 7
...
At least without secureboot, PCR 7 is not defined.
This would potentially be worth a conditional to
check on secureboot.
2020-06-17 16:23:13 -04:00
0016c31fef
Fix encrypted boot on 8.1
...
8.1 requires -f or it will fail.
2020-06-04 13:41:00 -04:00
762685459c
Add confluent CA to installed EL8
...
Needed to continue boot process during install
2020-06-02 17:44:19 -04:00
82ab56ebb4
Add boot encryption support to EL8
...
The stock profile should now encrypt if requested
2020-06-02 16:05:44 -04:00
d8266ea6c9
Update firstboot to have some comments
...
Make it clearer how it would be edited.
2020-06-01 12:25:30 -04:00
700afc6606
Fix function definition
...
Sourcing the functions was causing a hang.
2020-06-01 11:12:28 -04:00
e7cb3f9a0c
Add the refactored files
...
The refactoring put the files in new places,
add those to tracking.
2020-06-01 10:52:38 -04:00
0254963432
Add some commentary to help users
...
Embed comments to help users understand
how to customize a bit better.
2020-06-01 10:52:01 -04:00
110fb27b2a
Refactor the kickstart for EL8 a bit
...
Based on early feedback, working towards a less
intimidating script set for the sake of not
needing a 'postscripts' facility.
2020-06-01 09:08:41 -04:00
c1576e9787
Handle blank lines without error
...
Do not trigger syntax error on a blank expression.
2020-05-29 12:23:57 -04:00
2a9d4e8079
Avoid breaking net config with '' DNS server
...
The node is probably misconfigured, but tolerate it
and carry on so that networking will at least
come up.
2020-05-29 08:58:33 -04:00
05983201ee
Fix mistaken use of $proto variable
...
Always use https to fetch the script
2020-05-22 15:59:19 -04:00
b4374817f5
Move getinstalldisk into profiles
2020-05-22 15:27:25 -04:00
60453973cb
Actually use the domain name in rhel deploy
2020-05-20 12:48:05 -04:00
c0bd9f8bfb
Insert domain into EL deploy
...
This hopefully sets search path up well.
2020-05-20 12:08:05 -04:00
14ba48da1f
Add keymap to EL install
2020-05-18 14:55:35 -04:00
Jarrod Johnson