Jarrod Johnson
e0c3232180
Fix syntax error in el7 prescript
2022-06-17 09:30:26 -04:00
Jarrod Johnson
bd95f00680
Fix EL7 typeo in postscript
2022-06-17 09:08:12 -04:00
Jarrod Johnson
bfecaa389d
Adjust to correct ntp for 9 and up
2022-06-17 09:06:33 -04:00
Jarrod Johnson
7aca7a19f9
Install apiclient in a normal location for EL7
2022-06-15 16:42:50 -04:00
Jarrod Johnson
c400671ad7
Add old profile compatible apiclient location
2022-06-15 16:39:55 -04:00
Jarrod Johnson
2bb519c158
Fix EL7 deployment compatibility
2022-06-15 16:10:57 -04:00
Jarrod Johnson
17e223e21c
Suppress stray fakecmdline output
2022-06-09 09:15:56 -04:00
Jarrod Johnson
e9ac43f49e
Add autocons to bootloader config
...
In newer suse, the fake cmdline trick is fouled, so carry into
autoyast file
2022-06-09 07:55:42 -04:00
Jarrod Johnson
2f904d10e9
Fix identity yaml parsing
...
Switch to sed rather than trying to use head. There may or
may not be a second match, so need sed logic to understand
whether it's a match or not to keep or throw out.
2022-06-08 09:23:56 -04:00
Jarrod Johnson
0b20e0b634
Fix confuent scan for python 3.9
...
Python 3.9 removes the scope from the string
address, put it back if missing since it's required
to actually be usable.
2022-06-07 10:55:56 -04:00
Jarrod Johnson
b32c343a0c
Switch to importlib for newer python
...
imp is deprecated, despite being much simpler,
so use importlib in python3.6+ distributions.
2022-06-07 10:35:08 -04:00
Jarrod Johnson
942121d73a
Remove unavaiable clear from el9 diskless
2022-06-07 09:48:52 -04:00
Jarrod Johnson
84037420d1
Add el9 tree for diskless
2022-06-06 13:18:37 -04:00
Jarrod Johnson
e7bea0df45
Advance work on EL9 diskless support
2022-06-06 13:10:22 -04:00
Jarrod Johnson
0baa2eecab
Break out on deployment failure
2022-06-06 11:05:22 -04:00
Jarrod Johnson
48d46bcfae
Add resolv setup to genesis
2022-05-24 08:27:36 -04:00
Jarrod Johnson
8deadec7a6
Provide hook to override rungesis
...
Some applications may want much of the genesis
distribution, but want to have a bootstrap process
independent of confluent. Provide hooks either
through the identity image or the boot image itself.
2022-05-17 10:44:07 -04:00
Jarrod Johnson
548111f4d1
Fix executable status of the confluent casper hook
2022-05-04 12:11:24 -04:00
Jarrod Johnson
62b27b1fcc
Back off diskless profile for ubuntu 22.04, not yet done
2022-05-04 11:42:14 -04:00
Jarrod Johnson
bf37c05d71
Add ubuntu 22.04 to packaging
2022-05-04 11:31:03 -04:00
Jarrod Johnson
b2feb62d8a
Add ubuntu22.04 profile
...
Ubuntu 22.04 makes some changes, notably removing the
custom-installation hooks.
Change to injecting our modifications more directly to where the
custom-installation hooks used to be.
2022-05-04 09:25:49 -04:00
Jarrod Johnson
7da8a2ec4c
Properly stage the license file for osdeploy
2022-04-26 08:16:12 -04:00
Jarrod Johnson
e842c2ddc8
Add licensing to osdeploy package
2022-04-26 08:09:50 -04:00
Jarrod Johnson
fb9546cbd6
Kill redundant udevd prior to starting the root fs
...
Having multiple udevd produces ambiguity and confusing
2022-04-14 13:56:42 -04:00
Jarrod Johnson
272398884c
Appl consistent name to apiclient for EL8
2022-04-13 11:27:30 -04:00
Jarrod Johnson
79bc27bc7a
Have el8 diskless systems add local repositories
...
This sets up local yum action by default.
2022-04-13 09:50:39 -04:00
Jarrod Johnson
8c54b6eaf8
Fix path to apiclient in add_local_repositories
2022-04-13 09:48:33 -04:00
Jarrod Johnson
fc64d2d93f
Add a SLES variant to profiles for SUSE
2022-04-07 14:18:10 -04:00
Jarrod Johnson
ab7f0e0528
Fix error checking in imginfo
...
imginfo was checking fread when it should
have been checking number of records.
2022-04-01 09:32:43 -04:00
Jarrod Johnson
b830a317f6
Change suse from team to bonding
...
Suse more naturally supports team, and the industry push to team
has evaporated
2022-03-24 09:10:42 -04:00
Jarrod Johnson
4e4fe03b62
Properly honor explicit interface_names
...
A mistake resulted in plural interface_names being treated as singular.
2022-03-24 07:44:13 -04:00
Jarrod Johnson
08264f277b
Fix location of apiclient in suse
2022-03-23 15:46:37 -04:00
Jarrod Johnson
ac1ba5cbc5
Correct mistakes in the first pass of routed deployment
2022-03-18 16:04:29 -04:00
Jarrod Johnson
acd8cb9055
First pass at media based routed deployment
2022-03-18 15:39:22 -04:00
Jarrod Johnson
8a3688c1d6
Fix mistake in pre.sh for relocation of apiclient
2022-03-18 12:09:43 -04:00
Jarrod Johnson
2299ccc32f
Handle VROC devices in autoyast
...
At time of running pre, array is not assembled by default,
inject a scan to check for them.
VROC must not be specified by 'md' name, or yast thinks it
needs to own making it, and complains that the setup doesn't
specify members.
2022-03-17 12:19:42 -04:00
Jarrod Johnson
b6034f2e71
Update to fix new profiles and accomodate old profiles
...
/etc/confluent/apiclient is expected by older profiles
2022-03-16 09:40:55 -04:00
Jarrod Johnson
fe40d7c15e
Fix mispelling of confluent
2022-03-16 09:01:22 -04:00
Jarrod Johnson
ad40c46509
Remove now-redundant genpasshmac.c file
2022-03-10 09:32:44 -05:00
Jarrod Johnson
301ed7a798
Fix mistake in b64e invocation
2022-03-10 09:15:26 -05:00
Jarrod Johnson
b42e2e4932
Change to b64 output for hmac
...
base64 utility is not always available, so natively
use base64 format for hmac output.
2022-03-10 09:00:54 -05:00
Jarrod Johnson
61d037ae31
Combine genpasshmac with clortho
...
This permits saving on addons size by using the same
binary for both networked api grant and hmac api
grant.
2022-03-09 13:36:47 -05:00
Jarrod Johnson
625434fcaf
Fix mistake in deploycfg parsing
...
More strictly match the field name.
2022-03-08 16:29:49 -05:00
Jarrod Johnson
a8c2f859e4
Add a genpasshmac utility
...
For far edge deployment, create utility
that can hmac a password for use in a REST
api call to skip need for tcp port 13001 access.
2022-03-08 16:27:37 -05:00
Jarrod Johnson
31dad09b0c
Update makefile to build in sh256 to clortho
2022-03-08 14:46:33 -05:00
Jarrod Johnson
0abe978bd9
Implement hmac of apikey
...
For routed deployment, we have to preshare some information.
Additionally, the API arm mechanism gets too open ended.
Add support for using a shared secret over another
channel to do HMAC of a key to authenticate peer,
which has an alternate api arming mechanism
that is hardened.
2022-03-08 14:46:00 -05:00
Jarrod Johnson
5fb766e62b
Move apiclient consistently to /opt/confluent/bin
...
It's more reasonable to have
it in a bin directory
2022-03-03 11:11:29 -05:00
Jarrod Johnson
76fdf59122
Change genesis functions location
...
Put it in a place consistent with more normal use.
2022-03-03 08:34:57 -05:00
Jarrod Johnson
003196bc9e
Allow -o with data file
...
This makes things like ssh key signing easier.
2022-03-03 08:25:04 -05:00
Jarrod Johnson
687136131e
Place Confluent CA certs into TLS anchors
...
When processes may update the certificate authorities, the confluent
CA trust would be lost. Place it appropriately so that
update-ca-trust will keep it in the appropriate place.
2022-03-02 08:41:47 -05:00
