Jarrod Johnson
67f0c8a81b
Add IPv6 and insecure boot checking
2022-09-01 13:17:17 -04:00
Jarrod Johnson
28331adced
Add TFTP and ssh key checks to checkconfluent
2022-08-31 17:30:41 -04:00
Jarrod Johnson
ed91e0f2f3
Have askpass delete itself
...
This causes ssh-add to give up, instead of endlessly rerunning
the askpass script.
2022-08-31 17:17:33 -04:00
Jarrod Johnson
99a5c454ba
Begin work on a sanity checker
...
Check various facets that are frequently not quite right, making
recommendations on how to correct.
2022-08-30 16:59:40 -04:00
Jarrod Johnson
908e51221c
Correct minor formatting mistake in warning
2022-08-29 12:22:14 -04:00
Jarrod Johnson
8277701af6
Rewrite site ssh even if
...
the /etc copy already exists.
IT may be that /var/lib/confluent is being repaired, in which
case just copy existng over while giving warning.
2022-08-29 12:16:35 -04:00
Jarrod Johnson
570611f22b
Have osdeploy initialize skip SSH regen
...
When generating new key materials, most people say 'yes' and cause problems
where they cycle valid keys without
realizing the significance.
Replace prompting with an emphasized warning instead.
2022-08-29 11:10:45 -04:00
Jarrod Johnson
2a3e6cd6f1
Change websocket dependency name in EL7
2022-08-26 08:16:22 -04:00
Jarrod Johnson
4e44188253
Ensure early existance of ca.pem
...
Prior to install, enable apiclient
to have the ca.pem where it would
expect it to be.
2022-08-25 16:45:00 -04:00
Jarrod Johnson
352da94005
Implement rebase feature ofr osdeploy
...
Permit user to opt into a rebase of a
profile, to pick up potential updates
from the confluent packaged stock
profiles for files the user has not yet
customized.
2022-08-25 15:21:49 -04:00
Jarrod Johnson
e774add916
Set timezone on diskless boots by default
...
During onboot, use confluent directed timezone
info to set the timezone if the
disk image is incorrect.
2022-08-24 16:09:05 -04:00
Jarrod Johnson
d72bac5faf
Add more to the SUSE profiles
...
Add exetensibility to pre and sample directories
2022-08-24 16:07:38 -04:00
Jarrod Johnson
93b7547c58
Enable IPMI for user if IPMI has been enabled globally elsewhere
...
Scenarios have come up with trying to repair partially
configured configuration, break
the global and per-account check
into separate concerns.
2022-08-24 10:13:53 -04:00
Jarrod Johnson
31b3d6ea06
Move manifest data into dedicated file
2022-08-24 09:29:48 -04:00
Jarrod Johnson
42b4944542
Fix build script for vtbufferd
...
Update for new licensing standard.
2022-08-23 16:08:25 -04:00
Jarrod Johnson
04526ae8cc
Update license to NOTICE file
...
Bundled third party license content is now described under NOTICE file.
2022-08-23 15:52:50 -04:00
Jarrod Johnson
d97c508d86
Add hash manifest of new os profiles
...
When importing an image and taking stock copy, mark the files to allow detection of stock
versus customized profile content.
This will be used by a rebase command to know when
to overwrite or when to leave a file alone.
2022-08-23 15:25:17 -04:00
Jarrod Johnson
801e43936c
Revise ESXi routed deployment
...
-Have apiclient set timeout on getting credential to avoid hang
-Change dcuiweasel to start shell earlier for better debug
-Do not expire the ident token if deployment is armed continuous anyway
2022-08-19 16:06:46 -04:00
Jarrod Johnson
a445107c7f
Fix setting privilege level alone for ipmi
...
The logic incorrectly had it depend on password also being present.
2022-08-19 09:10:52 -04:00
Jarrod Johnson
dde66c53c9
Dynamically ascertain name scheme for Delta pdu
...
Some delta pdus have different name schemes
than others, take the hit of
awkward parsing to autodetect.
2022-08-17 10:20:26 -04:00
Jarrod Johnson
57fcc8a243
Start SSH agent even on older ssh
...
The unusual path to automation key for syncfiles and ansbile
is most easily handled by ssh-agent, even if no passphrase
will be used
2022-08-16 15:06:26 -04:00
Jarrod Johnson
41c3c4fb5f
Handle metapackages
...
If a metapackage gets pulled in
as related, do not let it mess up
the license list.
2022-08-11 14:09:55 -04:00
Jarrod Johnson
7b3c1e5405
Capture license content from related packages
...
Some files that get gathered into genesis
have their license in a related rpm, but that related rpm does not otherwise get captured.
So pull all correlated license material
in the license capture process.
2022-08-11 13:42:36 -04:00
Jarrod Johnson
047cd6302a
Add wait for IP connectivity
...
After config, there may be a delay
before the configuration takes effect.
This delay can break nodeconfig.
Try to wait for the delay to pass.
2022-08-09 08:50:19 -04:00
Jarrod Johnson
f0c8eee956
Add facility to auto-exec nodeconfig on discovery
...
This permits more open ended node configuration when discovery happens.
2022-08-08 16:13:01 -04:00
Jarrod Johnson
1125e4c712
Advance concetpual debian support
2022-08-08 14:23:01 -04:00
Jarrod Johnson
2aed973a8b
Have apiclient check all hosts for connectivity
...
Further allow it to output the result and feed that to esxi startup.
2022-08-08 11:18:35 -04:00
Jarrod Johnson
078e755ec7
Actually feed preseed into config
...
It must be done to the live cdebconf state *and* preseed.cfg,
since one is referenced immediately and then discarded when
preseed read in.
2022-08-05 16:05:26 -04:00
Jarrod Johnson
e3ed54ebf3
Advance the bootstrap of debian installation concept
2022-08-05 14:05:27 -04:00
Jarrod Johnson
9cac0c1705
Amendments to confluent initialization
2022-08-04 16:51:33 -04:00
Jarrod Johnson
2fe852f122
Add draft of a debian-installer-startup script
...
This is a draft for use in debian profiles to get started
2022-08-04 16:27:58 -04:00
Jarrod Johnson
258c4970c0
Change makeksnet from yaml to json
...
Older vmware did just json, which is fine, just have to use
the json file that was there just in case something like this
came up.
2022-08-04 10:39:10 -04:00
Jarrod Johnson
610e7bf044
Constrain ip-less offers
...
PXE and HTTP client define a behavior for using non-address portion of an offer if the
offer has none. However, other clients, like
udhcpc will be confounded by such offers.
Ensure that client specifically sets VCI to indicate
it understand such an offer before replying.
This as yet generally doesn't matter as UUID is not sent by OS installers, however
some OSes can't do do API calls over LLA, and
thus we want to start allowing OS requests with
UUID and only offer when it makes sense.
2022-07-29 12:49:25 -04:00
Jarrod Johnson
6b95bc7932
Fix key name
2022-07-27 12:08:58 -04:00
Jarrod Johnson
35701cdf01
Allow ident net config to override deploycfg
...
In routed deployment, deploycfg will
be missing network info, use
the ident provided network if detected.
2022-07-27 11:41:29 -04:00
Jarrod Johnson
c1ad4357dc
Fix for loop variable name
2022-07-27 08:37:09 -04:00
Jarrod Johnson
9987cb5c03
Advance state of routed esxi deployment
2022-07-27 07:51:41 -04:00
Jarrod Johnson
e8d2f550b8
Draft work on ESXi identity image deployment
...
Prepare for routed deployment of ESXi
2022-07-25 17:05:30 -04:00
Jarrod Johnson
9fe156601b
Add netmask to net config data
...
Some clients may want to consume netmask
without going to the trouble of converting,
so provide the extra data a different way.
2022-07-25 15:54:07 -04:00
Jarrod Johnson
830c9e171f
Add IP detection on local segment from remote registration
...
If an ip address is missing, but linklocal is set, try to search the
local nics for a viable connection to use.
2022-07-22 17:17:35 -04:00
Jarrod Johnson
0ac2bce883
Have XCC use a null string for ipaddr
...
This avoids the remote discovery failure for now.
2022-07-22 13:31:11 -04:00
Jarrod Johnson
6f619bc896
Change ipaddr to a property for allowing logic
2022-07-22 13:23:47 -04:00
Jarrod Johnson
bdd5dddce0
Fix typo in log message
2022-07-21 11:20:31 -04:00
Jarrod Johnson
d61dcee4fa
Fix handling of explicit prefix
...
Switch to just ip in time and return prefix
length as int.
2022-07-21 11:06:01 -04:00
Jarrod Johnson
d385ad1a0a
Support explicit prefix in xcc discovery
2022-07-21 10:13:00 -04:00
Jarrod Johnson
ef2c7b5bbc
Fix errant reference
2022-07-21 09:57:29 -04:00
Jarrod Johnson
2256b341b9
Tolerate '/' in hardwaremanagement.manager
...
This paves the way to allowing CIDR syntax to
indicate prefix length for remote XCCs
2022-07-21 09:54:00 -04:00
Jarrod Johnson
79421a724f
Fix base64 decode of fingerprint
...
base64 was being done against wrong variable
2022-07-21 08:33:12 -04:00
Jarrod Johnson
7751a71851
Merge branch 'remote_discovery'
2022-07-20 16:22:01 -04:00
Jarrod Johnson
2d8bcb4c0f
Incorporate auto discovery for remote discovery
...
Avail ourselves of secure vouching to handle new and
replaced.
2022-07-20 16:21:25 -04:00