Jarrod Johnson
687136131e
Place Confluent CA certs into TLS anchors
...
When processes may update the certificate authorities, the confluent
CA trust would be lost. Place it appropriately so that
update-ca-trust will keep it in the appropriate place.
2022-03-02 08:41:47 -05:00
Jarrod Johnson
c2de127947
Bring el8 completely over to prefer ipv4
2021-12-09 08:31:07 -05:00
Jarrod Johnson
fda61bd354
Attempt to extend the v6 deployment support in el8
2021-10-12 16:58:42 -04:00
Jarrod Johnson
06e32c53cc
Fix overly vague extraction of deploy_server
...
If deploy_server appears anywhere, it confuses
the scripts
2021-09-13 10:23:13 -04:00
Jarrod Johnson
b291dee68c
Add bind-utils, skip iwl*-firmware, and alphabatize packages
2021-07-08 11:38:50 -04:00
Jarrod Johnson
d17b1d060c
Prepend confluent_ to vars and switch to explicitly requesting directory
...
The 'profile' variable notably induces dracut to be excruciatingly slow,
mitigate chance by putting confluent before apikey, mgr, and profile.
Further, it has been requested to have the scripts use same name on
server for directory moving forward. Implement this request while
allowing existing OS profiles to keep working.
2021-05-03 12:48:08 -04:00
Jarrod Johnson
d6642f1bde
Fix omitted directory for firstboot
...
firstboot being in /opt requires a mkdir
2020-12-15 12:51:16 -05:00
Jarrod Johnson
c025f4d2fc
Fix firstboot.sh with selinux enabled
2020-12-14 15:06:04 -05:00
Jarrod Johnson
db0f91c160
Comment to show how to opt out of UEK
...
For users that use the distribution with UEK, but do
not want UEK at all.
2020-12-14 08:33:58 -05:00
Jarrod Johnson
cbb46dec3a
Allow firstboot to run with root access
...
Being it /etc is unusual, and restorecon treats it
as such. Manually use chcon to explicitly allow
it in /etc/
2020-12-12 14:57:02 -05:00
Jarrod Johnson
8285f2a3de
Incorporate convenience for Mellanox OFED install
2020-10-07 15:27:06 -04:00
Jarrod Johnson
d7c219f2a8
Add a new strategy for custom content
...
This allows a profile to more easily isolate customizations
from the base profile
2020-07-24 10:59:15 -04:00
Jarrod Johnson
dad68bdf63
Conditionally include clevis-dracut
...
If not using LUKS, don't bother with clevis-dracut.
In 8.1, clevis-dracut will cause problems with network
in initrd time.
2020-07-14 14:40:05 -04:00
Jarrod Johnson
e863edfe3f
Correct a number of mistakes
2020-07-01 09:52:17 -04:00
Jarrod Johnson
b407fef988
Normalize path to confluent files
...
After going through tmp and etc, settle on /etc/confluent/
as the generally relevant directory when possible.
Additionally, move apikey and ifidx logic into apiclient where
possible
2020-07-01 08:57:08 -04:00
Jarrod Johnson
762685459c
Add confluent CA to installed EL8
...
Needed to continue boot process during install
2020-06-02 17:44:19 -04:00
Jarrod Johnson
82ab56ebb4
Add boot encryption support to EL8
...
The stock profile should now encrypt if requested
2020-06-02 16:05:44 -04:00
Jarrod Johnson
0254963432
Add some commentary to help users
...
Embed comments to help users understand
how to customize a bit better.
2020-06-01 10:52:01 -04:00
Jarrod Johnson
110fb27b2a
Refactor the kickstart for EL8 a bit
...
Based on early feedback, working towards a less
intimidating script set for the sake of not
needing a 'postscripts' facility.
2020-06-01 09:08:41 -04:00
Jarrod Johnson
5dee338d50
Fix lang in EL8 install
...
While text mode does not care, if user goes down graphical
path, it pauses installer.
2020-05-18 12:52:31 -04:00
Jarrod Johnson
b67140248e
Change ipv4_server to deploy_server
...
Use a more neutral name for the deployment server target.
It is still ipv4 only for the moment, but easier to pull in
ipv6 support when not having to change paths that don't care.
2020-05-15 16:06:57 -04:00
Jarrod Johnson
4d5ec98525
Correct SELinux context for firstboot
...
This permits the script to actually run at firstboot, even
if SELinux is on.
2020-05-14 18:24:35 -04:00
Jarrod Johnson
008bf33be3
Fix el8 prescript retrieval
...
Mistakenly was using the deployer
ip as profile.
2020-05-14 17:16:26 -04:00
Jarrod Johnson
b52568dc10
Refactor RedHat/CentOS class profile
...
Again, break things up for more approachable layout.
2020-05-14 15:47:08 -04:00
Jarrod Johnson
efe936a93d
Further build process for confluent_osdeploy
2020-05-04 15:45:35 -04:00