Jarrod Johnson
24bc1210d0
Numerous fixes to the OS deploy
...
Most notably, change to safe_dump for yaml.
For the various initrd items, changes
to actually trigger the relevant bits
of the RH installer.
2020-04-14 16:34:50 -04:00
Jarrod Johnson
276e01434d
Remove example output from script
2020-04-10 16:49:14 -04:00
Jarrod Johnson
58fd760698
Implement begins of self api
...
This paves the way to get deployment started
in earnest.
2020-04-10 16:46:41 -04:00
Jarrod Johnson
2bd2946e9f
Add time sync option to copernicus
...
Since we are dealing in TLS certificates,
the easiest thing is to have copernicus sync
time. It is not as robust as ntp,
but it'll do as a stopgap
until the real time utilities
kick in.
2020-04-10 11:23:12 -04:00
Jarrod Johnson
5fb4f2b36c
Add CAs from site to install
...
Preserve the CA situation into the installer
2020-04-09 16:18:39 -04:00
Jarrod Johnson
3ddeb4bcd0
A basic hook to force network bringup
...
initqueue must be satisfied by a udev rule. We don't
know which network until iniqueue phase, but the hook
needs to install earlier. This change induces
udev rule generation.
2020-04-09 16:14:30 -04:00
Jarrod Johnson
1722ad941b
Add a starting sample of initqueue dracut hook
...
For rhel8, this initqueu hook is useful
2020-04-09 16:13:33 -04:00
Jarrod Johnson
e0223706b0
Add a sample CentOS/RH handler snippet
...
Begin work to prepare profiles for booting.
2020-03-16 18:03:07 -04:00
Jarrod Johnson
945b8f2b4a
Rename to reflect more function than CA
2020-03-09 08:52:29 -04:00
Jarrod Johnson
82921fb53d
Add function to sign SSH key
...
This will enable the known_hosts
to work.
shosts.equiv and sshd and ssh client
config will be handled elsewhere.
shosts.equiv will just be everything.
2020-03-06 16:55:06 -05:00
Jarrod Johnson
59a0b00208
Flesh out the SSH code more
...
Notably add user key management
and start poking things in
/var/lib/confluent
2020-03-06 16:17:53 -05:00
Jarrod Johnson
34f2f6e359
Add a sample for doing SSH CA
...
This will explore the concept for the
backend of the get certificate api.
2020-03-06 13:43:54 -05:00
Jarrod Johnson
4529924cce
Fix credserver python3 and LLA support
...
Both client and server had an issue with LLA, along with the
usual python3-isms.
2020-03-02 16:06:07 -05:00
Jarrod Johnson
f798239f90
Switch to using the standard confluent port for credserver
...
Also add a check and only accept API arming
requests from local ips
2020-02-27 16:36:16 -05:00
Jarrod Johnson
0fd4c3b2f7
Merge branch 'master' into nodesearch
2019-10-16 13:24:11 -04:00
Jarrod Johnson
44d6bde3ff
Make /usr/bin/env python point to python2
...
Same as before, more RHEL8 compatibility changes
2019-09-23 11:04:52 -04:00
Jarrod Johnson
56fa13279e
Explicitly indicate use of python2
...
RHEL8 will no longer tolerate implicit use of python.
For now relent to being python2, though ideally one day
it could be either.
Unfortunately, this means once code is ready for python3, we have to
probably implement build time changes for python3 enabled distros
to have different shebangs than python2 distros.
2019-09-23 10:59:00 -04:00
Jarrod Johnson
aaf5aebff7
Fix for tokens with null bytes
...
Since the server may employ the full range of byte values
in the echo token, use that length and the buffer to avoid
nulls truncating the token.
2019-08-12 15:24:51 -04:00
Jarrod Johnson
c1abeaff04
Convert concept to IP based
...
This leaves the door open for routing if supported.
The server shall restrict IP_TTL to denote
acceptable distance from the manager to accept.
2019-08-09 16:43:48 -04:00
Jarrod Johnson
37d4543d24
Merge branch 'master' into nodesearch
2019-08-08 16:18:21 -04:00
Jarrod Johnson
d95464df6f
Add a non-ip network string xmit concept
2019-08-08 16:14:05 -04:00
Jarrod Johnson
b7b7fd82eb
ECHO a packet back to manager
...
In a later phase, we will want assurances
that the neighbor table was populated.
Since here we have the sockaddr handy,
it makes a lot of sense to take the
opportunity to blind fire a packet back.
No reply is expected, just enough to
trigger arp/neighbor solicitation.
2019-07-16 07:51:24 -04:00
Jarrod Johnson
c8d0009dac
Avoid copernicus printout of more duplicate data
...
Separate v4 and v6 results for better chance of success in
dropping duplicate packets.
2019-07-15 11:09:20 -04:00
Jarrod Johnson
79f5dce6dc
Implement node search for confluent
...
This is a viable client to find and get ones node identity.
Node credentials are a separate concern, to be handled later.
2019-07-15 11:09:20 -04:00
Jarrod Johnson
373bf3dca7
Remove stray whitespace
...
Fix formatting mistakes
2019-07-09 10:18:34 -04:00
Jarrod Johnson
d2efb16c71
Remove unneeded line
2019-06-27 15:21:35 -04:00
Jarrod Johnson
739e302506
Add an example for just disabling password complexity
2019-06-27 15:20:24 -04:00
Jarrod Johnson
87e7a90c37
Move stats into the client
...
stats is good enough to be promoted from prototype to a confluent
client component.
2019-04-25 14:46:18 -04:00
Jarrod Johnson
bafc25005f
Flesh out stats with arguments
2019-04-25 14:45:47 -04:00
Jarrod Johnson
33c1137ccf
Remove use of tmp file in stats
2019-04-25 13:59:15 -04:00
Jarrod Johnson
e81579f414
Add a prototype stats command for CLI commands
2019-04-25 13:53:34 -04:00
Jarrod Johnson
34c6d6a4d7
Choose an easier name for the reader
2019-04-11 16:26:59 -04:00
Jarrod Johnson
b402ddd656
Add more keystrokes and easier use
...
No longer require cbl file be specified manually.
2019-04-11 16:26:14 -04:00
Jarrod Johnson
40dbe63336
Script to disable password expiry after expired on SMM
2019-04-05 16:53:32 -04:00
Jarrod Johnson
5c4944a1e4
Provide a sample script for fixing expired credentials
2019-04-05 08:37:31 -04:00
Jarrod Johnson
ae49cf290e
Fix key hold-down behavior in cbl reader
...
The retry print could get stuck in loop and the input
could queue up too many keypresses.
2019-04-03 11:44:05 -04:00
Jarrod Johnson
5ead803c8a
Fix up the injected clear delimiting
...
The delimiting was not being navigated correctly.
2019-04-03 10:38:35 -04:00
Jarrod Johnson
996b1ba45b
Rework prototype cbl reader
...
It is still not right, but it is a bit easier to work with
to figure out what's wrong with it.
2019-04-01 16:56:14 -04:00
Jarrod Johnson
6397709e47
Try to force split across clear screens
2019-03-29 17:07:01 -04:00
Jarrod Johnson
e0c0f0f1f3
Greatly flesh out the cbl reader
2019-03-29 16:01:40 -04:00
Jarrod Johnson
b927572872
Sample file for processing CBL files
2019-03-29 11:17:05 -04:00
Jarrod Johnson
b0d2d44b75
Update to follow DCD
...
The DCD signal can be used to detect remote connect attempt
2019-03-14 13:05:59 -04:00
Jarrod Johnson
f1e83d938b
Add carrier detect to autocons sample
...
For genesis, not necessarily relevant, but may be
very relevant for OS behaviors in other contexts.
2019-03-14 09:33:58 -04:00
Jarrod Johnson
163b29a07c
Update autocons.py
...
This is the version that landed in xCAT genesis
2019-03-13 15:05:42 -04:00
Jarrod Johnson
c5fa0bfd79
Draft attempt at autocons utility
...
Make every effort to do early boot console enablement.
2019-03-12 19:31:16 -04:00
Jarrod Johnson
c649ae5fec
Have it appropriate do IPv4 and IPv6
2019-03-08 13:25:53 -05:00
Jarrod Johnson
e8119d330d
Add IPv4 search to copernicus search
2019-03-07 10:24:26 -05:00
Jarrod Johnson
5ae6717709
Rename findconfluent
2019-03-07 08:57:52 -05:00
Jarrod Johnson
0cd94447f7
Update to search multiple interfaces
2019-03-06 16:48:37 -05:00
Jarrod Johnson
ce4f8c1837
Sample C code for locating confluent server
2019-03-06 16:22:55 -05:00