Jarrod Johnson
59e739a143
Further tweaks to postscript library functions
2020-08-21 17:42:02 -04:00
Jarrod Johnson
2e2a34b470
Reduce curl verbosity
...
Hard to follow with so much extra output
2020-08-21 17:07:02 -04:00
Jarrod Johnson
b8aa54fb8e
Make output consistent for shell/python remote exec
2020-08-21 17:03:12 -04:00
Jarrod Johnson
67920980c8
Fix syntax error in functions library for pre/post/firstboot scripts
2020-08-21 16:39:37 -04:00
Jarrod Johnson
e9dabdf51b
Add clearer delineation between scripts in output
2020-08-21 10:35:28 -04:00
Jarrod Johnson
18f4c76730
Fix end code for run_remote
...
Output was missing due to shift. Save cmdline before
shifting and use it on way out.
2020-08-21 10:33:56 -04:00
Jarrod Johnson
13636097f5
Add more verbosity to remote functions
2020-08-20 16:20:02 -04:00
Jarrod Johnson
d956893104
Have EL8 ifup wait for tentative to go away
2020-08-17 15:06:38 -04:00
Jarrod Johnson
5bdd59bc67
Add configbmc to el8 and genesis script examples
2020-08-17 14:23:21 -04:00
Jarrod Johnson
1d6a5fc329
Have add_local_repositories by python2/3 agnostic
...
RHEL7 is still python2
2020-08-07 09:55:37 -04:00
Jarrod Johnson
d12272eccc
Support current directory in repo path
2020-08-07 08:26:42 -04:00
Jarrod Johnson
8aabdcc454
Fix name of rpm gpg keys
2020-08-06 19:32:47 -04:00
Jarrod Johnson
9c079a4203
Generate ifidx file
...
Use apiclient to generate ifidx for nmcli c u
2020-08-06 18:56:23 -04:00
Jarrod Johnson
f55dc8104b
Bring up the nic correctly during pre
...
nmcli can bring up the link with proper lla like confluent.info
indicates.
2020-08-06 18:15:27 -04:00
Jarrod Johnson
3812fc93ff
Have EL8 family add repositories manually
2020-08-06 16:37:18 -04:00
Jarrod Johnson
b4d7812926
Add some likely customizations examples
...
RedHat family is likely to be customized with firewall and selinux,
use those as examples to get things going for users.
2020-07-29 12:19:44 -04:00
Jarrod Johnson
b09631fcbf
Correct mistake in chcon path
2020-07-24 16:07:15 -04:00
Jarrod Johnson
235c07063c
Adjust SELinux context on remote exec
...
To facilitate firstboot, context must be changed
before execing remote content.
2020-07-24 15:32:13 -04:00
Jarrod Johnson
d2f1ea6cec
Tweak the customizations.
2020-07-24 11:10:01 -04:00
Jarrod Johnson
d7c219f2a8
Add a new strategy for custom content
...
This allows a profile to more easily isolate customizations
from the base profile
2020-07-24 10:59:15 -04:00
Jarrod Johnson
eabb212e58
Fix setupssh.sh without ssh_config.d
...
It was modifying the installer ssh_config
rather than the target ssh_config
2020-07-24 08:12:53 -04:00
Jarrod Johnson
d49f018981
Correct functions in profiles
...
Use functions correectly.
2020-07-15 15:22:27 -04:00
Jarrod Johnson
dad68bdf63
Conditionally include clevis-dracut
...
If not using LUKS, don't bother with clevis-dracut.
In 8.1, clevis-dracut will cause problems with network
in initrd time.
2020-07-14 14:40:05 -04:00
Jarrod Johnson
910490cc74
Add arguments to the run_remote functions
...
This will help provide flexibility in invoking remote scripts
without hardcoding arguments into the scripts
2020-07-13 17:08:38 -04:00
Jarrod Johnson
439859e4fc
Implement suse ntp and correct redhat ntp
2020-07-09 15:05:20 -04:00
Jarrod Johnson
50661b7dee
Fix multiple ntp servers in EL8 profile
2020-07-09 13:30:13 -04:00
Jarrod Johnson
f8affe99db
Add ntp to EL8 profile prescript
2020-07-09 12:11:32 -04:00
Jarrod Johnson
f157ab1ef3
Use the 'staged' profile in some linux
...
The staged was added to control netboot mostly,
and is mostly optional but change some default
profiles to use it.
2020-07-01 14:20:40 -04:00
Jarrod Johnson
22085e38f5
Change bound to 'tpm2'.
...
This is a bit more logical and flexible for the future.
2020-07-01 13:33:59 -04:00
Jarrod Johnson
e863edfe3f
Correct a number of mistakes
2020-07-01 09:52:17 -04:00
Jarrod Johnson
b407fef988
Normalize path to confluent files
...
After going through tmp and etc, settle on /etc/confluent/
as the generally relevant directory when possible.
Additionally, move apikey and ifidx logic into apiclient where
possible
2020-07-01 08:57:08 -04:00
Jarrod Johnson
df503464d7
Tighten permissions on /etc/confluent on deployed target
2020-06-26 15:50:15 -04:00
Jarrod Johnson
e1270b2926
Do not seal to PCR 7
...
At least without secureboot, PCR 7 is not defined.
This would potentially be worth a conditional to
check on secureboot.
2020-06-17 16:23:13 -04:00
Jarrod Johnson
0016c31fef
Fix encrypted boot on 8.1
...
8.1 requires -f or it will fail.
2020-06-04 13:41:00 -04:00
Jarrod Johnson
762685459c
Add confluent CA to installed EL8
...
Needed to continue boot process during install
2020-06-02 17:44:19 -04:00
Jarrod Johnson
82ab56ebb4
Add boot encryption support to EL8
...
The stock profile should now encrypt if requested
2020-06-02 16:05:44 -04:00
Jarrod Johnson
d8266ea6c9
Update firstboot to have some comments
...
Make it clearer how it would be edited.
2020-06-01 12:25:30 -04:00
Jarrod Johnson
700afc6606
Fix function definition
...
Sourcing the functions was causing a hang.
2020-06-01 11:12:28 -04:00
Jarrod Johnson
e7cb3f9a0c
Add the refactored files
...
The refactoring put the files in new places,
add those to tracking.
2020-06-01 10:52:38 -04:00
Jarrod Johnson
0254963432
Add some commentary to help users
...
Embed comments to help users understand
how to customize a bit better.
2020-06-01 10:52:01 -04:00
Jarrod Johnson
110fb27b2a
Refactor the kickstart for EL8 a bit
...
Based on early feedback, working towards a less
intimidating script set for the sake of not
needing a 'postscripts' facility.
2020-06-01 09:08:41 -04:00
Jarrod Johnson
05983201ee
Fix mistaken use of $proto variable
...
Always use https to fetch the script
2020-05-22 15:59:19 -04:00
Jarrod Johnson
b4374817f5
Move getinstalldisk into profiles
2020-05-22 15:27:25 -04:00
Jarrod Johnson
14ba48da1f
Add keymap to EL install
2020-05-18 14:55:35 -04:00
Jarrod Johnson
5dee338d50
Fix lang in EL8 install
...
While text mode does not care, if user goes down graphical
path, it pauses installer.
2020-05-18 12:52:31 -04:00
Jarrod Johnson
188467ccf0
Correct order of EL post script
...
Actually try to fetch the file before copying it.
2020-05-16 12:12:30 -04:00
Jarrod Johnson
dcda6a1080
Fix EL host based authentication
2020-05-16 11:43:38 -04:00
Jarrod Johnson
b67140248e
Change ipv4_server to deploy_server
...
Use a more neutral name for the deployment server target.
It is still ipv4 only for the moment, but easier to pull in
ipv6 support when not having to change paths that don't care.
2020-05-15 16:06:57 -04:00
Jarrod Johnson
a5adcbd496
Add firstboot to EL
...
Also add 'mgt_server' rather than 'ipv4_server'. Will move to this.
The server should be able to dictate the right address without the
deploymennt image having to keep track.
2020-05-15 16:03:25 -04:00
Jarrod Johnson
4d5ec98525
Correct SELinux context for firstboot
...
This permits the script to actually run at firstboot, even
if SELinux is on.
2020-05-14 18:24:35 -04:00