2
0
mirror of https://github.com/xcat2/xcat-core.git synced 2026-09-05 20:47:55 +00:00
Commit Graph

230 Commits

Author SHA1 Message Date
Vinícius Ferrão 6e4cffddc3 feat(dhcp): default new Ubuntu sites to HMAC-SHA256
Signed-off-by: Vinícius Ferrão <2031761+viniciusferrao@users.noreply.github.com>
2026-07-16 17:19:19 -03:00
Vinícius Ferrão 424b2e3e9b feat(dhcp): default new EL sites to HMAC-SHA256
Signed-off-by: Vinícius Ferrão <2031761+viniciusferrao@users.noreply.github.com>
2026-07-16 17:18:13 -03:00
Daniel Hilst 638f0d75c4 Fix xCAT 2.18 EL10 x86_64 package build issues
Signed-off-by: Daniel Hilst <392820+dhilst@users.noreply.github.com>
2026-06-20 18:48:14 -03:00
Vinícius Ferrão 2915e9be0e Add xCAT TLS policy selection 2026-05-05 23:20:18 -03:00
Vinícius Ferrão 4165b26a04 fix: remove Docker container lifecycle management (dead code since 2016)
Docker container lifecycle management (mgt=docker, mkdocker, rmdocker,
lsdocker) was added in 2015-2016 as an experiment targeting Docker API
v1.22 on Ubuntu only. Documentation and man pages were deliberately
removed in 2019 (PRs #6222 and #6324) with the original developer's
approval, noting that "the interface of Docker has become very simple
right now, so there is no value for xCAT to offer such functions."

The plugin was still being shipped but has had no functional code changes
since April 2016, was never listed as a valid mgt value in Schema.pm,
and no user ever filed an issue about it.

Removed:
- xCAT-server/lib/xcat/plugins/docker.pm (1,142 lines)
- xCAT/postscripts/setupdockerhost
- xCAT-server/share/xcat/scripts/setup-dockerhost-cert.sh
- xCAT-test/autotest/testcase/dockercommand/ (test cases)
- Docker attribute definitions in Schema.pm
- Client symlinks (mkdocker, rmdocker, lsdocker)
- Usage entries and dockerhost cert handling in credentials.pm
- Docker attribute documentation in man7 pages

The "Running xCAT in Docker" documentation (dockerized_xcat/) is
retained as it documents containerizing xCAT itself, not the removed
mgt=docker feature.

Closes #7518
2026-05-03 12:11:33 -03:00
Vinícius Ferrão 1babd7b0e4 fix: improve Ubuntu LTS provisioning support 2026-04-29 18:19:12 -03:00
Vinícius Ferrão 6f3d9bb9d1 Add Kea DHCP backend 2026-04-23 02:01:33 -03:00
Daniel Hilst Selli fccdc3ec64 fix: Fix genesis-base package build
Signed-off-by: Daniel Hilst Selli <392820+dhilst@users.noreply.github.com>
2026-03-30 20:46:42 -03:00
Daniel Hilst Selli 0e0ead786f fix: Fix genesis & sequential node discovery in x86_64
Signed-off-by: Daniel Hilst Selli <392820+dhilst@users.noreply.github.com>
2026-02-25 14:08:40 -03:00
Daniel Hilst Selli 83f6b74302 fix!: Skip settunnables if running inside a container
This commit adds an early return to xcatconfig settunnables function.
This function set parameters at

    /proc/sys/net/ipv4/neigh/default/gc_thresh1
    /proc/sys/net/ipv4/neigh/default/gc_thresh2
    /proc/sys/net/ipv4/neigh/default/gc_thresh3

And set sysctl attributes by writing to /etc/sysctl.d/ and
/etc/sysctl.conf

These are tunning network parameters for running on production
and should not affect the overall function for testing purposes.

Signed-off-by: Daniel Hilst Selli <392820+dhilst@users.noreply.github.com>
2025-12-05 13:33:57 -03:00
Daniel Hilst Selli b5e35483a2 fix: Fix certificate and hostkey generation for EL10
Signed-off-by: Daniel Hilst Selli <392820+dhilst@users.noreply.github.com>
2025-11-27 17:51:34 -03:00
Kilian Cavalotti 62522bc29f Support /etc/sysctl.d/ for Debian-based systems (#7509)
On Debian-based systems, /etc/sysctl.conf doesn't exist and
/etc/sysctl.d/ directory is used instead. Modified xcatconfig
to prefer /etc/sysctl.d/99-xcat.conf when the directory exists,
falling back to /etc/sysctl.conf for backward compatibility.
2025-11-14 01:50:10 +01:00
besawn 67ac4dd202 Added missing curly bracket to xcatconfig. 2022-05-06 15:11:16 -04:00
Kurt H Maier 8256685f86 xcatconfig: add ed25519 host key support 2022-03-25 10:24:44 -07:00
Mark Gurevich 50f5c9040d Add cleanupdiskfullxcatpost attribute to site table 2021-08-12 16:11:17 -04:00
Gᴏɴɢ Jie 8662b4925b Revert "[RH8] Revise xcatconfig, show warning message if `TLSv1' is used" 2019-03-15 00:01:27 +08:00
GONG Jie 05385f643c Show warning message if `TLSv1' is used 2019-03-14 14:03:31 +08:00
GONG Jie 240841483d Revise the warning messages 2019-03-13 18:09:57 +08:00
GONG Jie cc5068b683 Show warning message when site.xcatsslversion has an value during upgrade 2019-03-13 17:24:52 +08:00
Gᴏɴɢ Jie 59bc53f573 Set the default value of site.xcatsslversion to SSLv23:!SSLv2:!SSLv3:!TLSv1 (#6061)
* Set $extrasslargs{SSL_version} as "SSLv23:!SSLv2:!SSLv3:!TLSv1" by default

* Remove xcatsslversion related part in script xcatconfig
2019-03-11 17:40:53 +08:00
Gᴏɴɢ Jie fc49f012e6 For the newly installed xCAT-core, set site.xcatsslversion to TLSv1_2 as the default setting (#5798) 2018-11-23 11:29:13 +08:00
GONG Jie e0d60aee83 Remove trailing spaces in file xCAT-server/sbin/xcatconfig 2017-12-31 23:59:59 +00:00
robin2008 5e53fa6824 using execute binary of systemd to determine if systemd is enabled on this distro 2018-07-26 13:23:45 +08:00
Bin Xu 57bc7c1f57 Add a default systemd unit file based on the auto-generated one from SysV (#5394)
* Add a default systemd unit file based on the auto-generated one from SysV

* modify the xcatd testcase when using systemd
2018-07-23 17:31:50 +08:00
xuweibj 8209b449c6 delete change policy table by xcat 2018-07-06 04:46:25 -04:00
xuweibj 45a602bdf6 update hwinv table by updatenode -P geinv 2018-07-05 03:29:51 -04:00
chenglch e8df039d42 Make getadapter work during discovery process
This patch redesign the original getadapter plugins. Currently,
getadapter do not work as a common command but only a chain command
works during discovery.
2017-07-20 16:03:52 +08:00
chenglch 5331626d9a Upgrade conserver to 8.2.1 version (#3252)
This patch change the `sslauthority` to `sslcacertificatefile` to
support the latest version of conserver. It also add scripts to
update the `conserver.cf` and $HOME/.consolerc to make sure
migration works correctly.

implement: #3239
2017-06-16 16:51:05 +08:00
immarvin cd96ea74c8 fix issue Wrong permissions for ssh host private keys on CentOS 7 #2617 2017-03-22 17:46:04 +08:00
Mark Gurevich c2454c0133 Add --system when creating user and group 2017-03-06 10:59:36 -05:00
immarvin fd3b598e42 fix issue [CentOS6.8 and RHEL6.8] User will see ERROR message during running updatenode and in xcat.log on compute node. #2104 2016-11-24 00:21:03 -05:00
yangsong 801a9cf69b Revert "update dhcpd conf file when upgrade xcat" 2016-11-07 22:38:37 +08:00
penguhyang ea5ffdc0bc update dhcpd conf file when upgrade xcat (#2067) 2016-11-04 12:47:21 +08:00
ertaozh 6c43f8f716 run mknb for both ppc64 and x86_64 2016-08-17 04:00:06 -04:00
chenglch fa16e12d48 Fix the overwrite error when dealing with the conflict (#1588) 2016-07-26 10:51:34 +08:00
Mark Gurevich fb911143fe perltidy all perl files, part 2 2016-07-21 13:27:40 -04:00
chenglch 8187e3efa1 Add rest api helper interface to access non-xcat resource
Currently xcat rest service is running with apache user who do
not have the privilege to manage some local resource like credential
files needed by xcat web ui to get the conserver access.

This patch add scripts in xcatconfig to generate credential files
for conserver user. This patch also add a work around framework for
xcat restapi to provide the interface to get or set the system resource
so that restapi with apache privilege can retrieve the credential files.
2016-07-19 23:09:21 -04:00
immarvin 368500d531 fix issue Updating xCAT on OS that uses systemctl has a warning message #1509 ; run systemctl daemon-reload on xcat upgrade 2016-07-11 01:29:11 -04:00
chenglch ef724b0e6f Improve the error message for getadapter command
1. Add allow policy for getadapter
2. enhance the error message for different mgt when running getadapter

partial-issue: #1174
2016-06-14 01:56:19 -04:00
WangXiaoPeng 8bdfc11977 fix the typo effor which introduced from 850051bd75 in xcatconfig file 2016-04-28 21:41:48 -04:00
Xiaopeng Wang 0685db16cb Merge pull request #915 from pdlun92/rsa
Removed keygen of SSH1 RSA Key
2016-04-28 18:20:03 +08:00
chenglch f85446fe1a Stop audit command log by default
Audit every command in auditlog table may affect performance, disable
it by default.

close-issue #864
2016-04-26 06:00:57 -04:00
Patrick Lundgren 850051bd75 removed keygen of rsa1 key and removed references / replaced with rsa key when appropriate 2016-04-12 09:50:16 -04:00
immarvin 43b5904499 fix defect 94 [DEV]<xcatconfig -d> failed to determine the correct site.forwarder 2016-01-14 00:20:12 -05:00
wangxiaopeng ec4ce73d5b Issue 569: check the value of site.xcatsslversion before setting default value 2016-01-06 06:03:23 -05:00
penguhyang 8926a2a217 correct mknb will run twice during install xcat 2015-10-23 06:33:54 -04:00
Casandra Qiu 3f40bfa211 fixed issue #119 xCAT installation trashes customer's original ntp.conf 2015-09-24 10:12:31 -04:00
zhaoertao 81438d91d2 enhance of setting up certificate for docker host 2015-07-03 04:25:08 -04:00
daniceexi b2eb57d072 Add default value for attribute site.xcatsslversion=TLSv1 to avoid using sslv3 which might cause POODLE Attach 2015-02-12 09:44:01 -05:00
ligc 607e2bd385 fix for bug 4399: on Ubuntu, disable isc-dhcp-server in upstart to avoid two dhcp server daemons, let xcat totally mangae dhcp server 2014-11-28 10:13:34 +08:00