Jarrod Johnson
2219297afc
Fix simple password support
...
Simple password was broken during the MFA addition, restore
the most common authentication mechanism.
2021-07-29 13:16:33 -04:00
Jarrod Johnson
08f226a3bf
Recognize Ubuntu 20.04.2
2021-07-28 14:31:04 -04:00
Jarrod Johnson
a25a10cb86
Add firstboot/post directories to ubuntu
2021-07-28 08:52:05 -04:00
Jarrod Johnson
af9676ee6f
Improve appearance of imgutil capture
...
Provide more feedback with less worrisome normal output.
2021-07-27 08:36:48 -04:00
Jarrod Johnson
4c96735b6d
Add ssh to post phase of cloning
2021-07-26 13:51:36 -04:00
Jarrod Johnson
ac86961e24
Perform syncfiles on clone deployment post
2021-07-26 13:29:33 -04:00
Jarrod Johnson
6adc736450
Relocate syncfiles path to correct location
2021-07-26 13:22:31 -04:00
Jarrod Johnson
8ab6fef632
Fix kernel selection on pack
...
Make a specialized sort
for kernel versions to more reliably identify the latest version.
2021-07-26 13:03:26 -04:00
Jarrod Johnson
065d0585ea
Make search for grub.cfg more specific
...
grub.cfg outside of /boot can easily exist, be more specific about where it can be.
2021-07-26 12:17:15 -04:00
Jarrod Johnson
ca8f6fa52c
Bash completion for imgutil capture
2021-07-26 11:59:04 -04:00
Jarrod Johnson
a720ccdbc8
Set ownership/permissions of private section
...
Fix confluent being unable to read, and make the permissions more consistent.
2021-07-26 11:12:59 -04:00
Jarrod Johnson
0ad59436ec
Mitigate scratch consumption
...
As an old file is copied in for future disposale, delete
it as we go by fallocate
to punch holes in it.
2021-07-26 09:19:33 -04:00
Jarrod Johnson
663f8fc085
Add nodename to set_confluent_vars
...
It is expected that nodename would also be set.
2021-07-23 19:08:06 -04:00
Jarrod Johnson
a7b9e72589
Fixes and update umage2disk to new multipart format
2021-07-23 19:06:14 -04:00
Jarrod Johnson
9eb6f38bf1
Various fixes to imageboot.sh
2021-07-23 18:43:57 -04:00
Jarrod Johnson
4928f50332
Create private directiories and correct key format
2021-07-23 17:43:47 -04:00
Jarrod Johnson
7f468c3a91
Correct offset to be in sectors, not bytes
2021-07-23 17:32:42 -04:00
Jarrod Johnson
81b4da6a95
Add encrypted stateless pack
2021-07-23 17:11:33 -04:00
Jarrod Johnson
4bde1b963f
Transfer encryption key on capture
2021-07-23 16:54:57 -04:00
Jarrod Johnson
1e44deecf6
Add support to retrieve private key and crypt mount diskless/cloning
2021-07-23 16:49:02 -04:00
Jarrod Johnson
1e653851fe
Add syncfiles to el8 diskless
2021-07-23 16:23:15 -04:00
Jarrod Johnson
54667570bd
Create encrypted image and private profile data
...
Prepare for securing os profile witht custom images
2021-07-23 16:13:24 -04:00
Jarrod Johnson
364085801a
Fix apikey variable
2021-07-21 17:44:43 -04:00
Jarrod Johnson
8171d461ea
Another selinux fixup
...
systemctl enable firstboot
produces invalid selinux context, fix aafter enabling.
2021-07-21 17:34:53 -04:00
Jarrod Johnson
3690dda177
Actually enable firstboot execution
2021-07-21 16:48:38 -04:00
Jarrod Johnson
365b81e7e1
Prune all .gitignore files, not just blessed profiles
2021-07-21 13:57:06 -04:00
Jarrod Johnson
b3fee922f9
Try to speed up selinux labelling
...
There's only a couple of places
where the imaging should need fixup, be more selective in relabel.
2021-07-21 13:26:31 -04:00
Jarrod Johnson
29d0dd6678
Add missing profile content for cloning
2021-07-21 12:47:43 -04:00
Jarrod Johnson
7d31e22447
Add post/firstboot to os cloning
2021-07-21 12:28:03 -04:00
Jarrod Johnson
4ddfa192ba
Remove sticky bit from profile directory
2021-07-21 12:16:22 -04:00
Jarrod Johnson
fa45ea8ad3
Finalize a captured image
2021-07-21 11:56:15 -04:00
Jarrod Johnson
f4281e115b
Fix permissions on generated profile.
2021-07-21 11:53:51 -04:00
Jarrod Johnson
5dfbeef79c
Advance state of cloning
...
Have imgutil complete the capture process, splitting work
between target and repository.
Provide hook through kcmdline to induce installtodisk.
Have installimage reboot system cleanly when done.
Have new /etc/confluent in cloned system.
Hook for post scripts to execute.
2021-07-21 11:15:42 -04:00
Jarrod Johnson
cd8a1dfe5e
Draft work to flesh out profile and pull back
...
Fingerprint the target and prepare for more effort.
Will have another imgutil primitive for post-capture prep to get the
initramfs, kernel, rootimg, and bootloader content ready for copy.
2021-07-20 17:02:08 -04:00
Jarrod Johnson
2257a67420
Begin wiring imgutil for remote capture
...
Will be having to run on remote
system and local system
and combining the results
as well as cleaning up after ourselves on target.
2021-07-20 15:56:47 -04:00
Jarrod Johnson
55302b74d9
Have prototype cloning implemented
...
Go ahead and relabel all selinux content, ssh keys, grub, and efiboot entry.
2021-07-20 14:07:55 -04:00
Jarrod Johnson
22008f9dc9
Image cloning changes
...
Refactor and try to mask ssh
keys for root user.
Try to preserve selinux context for masked files.
Add progress indicator for writing to disk.
2021-07-19 17:30:26 -04:00
Jarrod Johnson
db735a654d
Aggregate vt buffer feeds
...
If we start developing a backlog
of content to feed to the buffer manager,
aggregate updates to batch submit them more efficiently.
2021-07-19 11:16:12 -04:00
Jarrod Johnson
a8b54ff434
Fix initial collective join
...
Initial collective join combined
with the orderly collective startup
hit a chicken and egg problem.
Disable initting on first enrollment
to let enrollment drive
that specific initialization to
restore behavior.
2021-07-19 10:25:35 -04:00
Jarrod Johnson
fada9336ee
Fix swapsize float in image install
...
If it undergoes float arithmetic, it must be made int again.
2021-07-16 17:23:21 -04:00
Jarrod Johnson
bda51d2106
Start fixup, first up is the fstab
...
Provide an fstab consistent
with redhat strategy, but with
the new uuids from imaging.
2021-07-16 17:02:53 -04:00
Jarrod Johnson
88d49c9f40
Start image2disk
...
This marks having written out
the partitions verbatim.
2021-07-16 16:29:56 -04:00
Jarrod Johnson
c92b2f4255
Stage for python application to actually execute the install
2021-07-16 12:03:11 -04:00
Jarrod Johnson
ece525c2e2
Begin work on install and filter small devices from install candidacy
2021-07-16 11:11:13 -04:00
Jarrod Johnson
386dc2348c
Mount multiple partitions in diskless mode
2021-07-16 10:39:11 -04:00
Jarrod Johnson
da44738e00
Generalize more of an OS on capture
...
/etc/fstab, hostname, and networnk-scripts are masked
for the image.
2021-07-15 17:30:50 -04:00
Jarrod Johnson
e43e5ac167
Add confluent_imgutil to addons
2021-07-15 14:42:26 -04:00
Jarrod Johnson
9458d33cc5
Add multipart image support to diskless
2021-07-15 14:39:17 -04:00
Jarrod Johnson
831b129899
Correct syntax error in confluent client
2021-07-15 12:39:38 -04:00
Jarrod Johnson
1570d3dbe3
Add c utility for reading confluent multipart images
2021-07-15 12:39:19 -04:00
