xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2024-11-25 19:10:10 +00:00
Code Issues Projects Releases Wiki Activity
4,449 Commits 39 Branches 63 Tags 18 MiB
7b98b7dc00
Commit Graph

4449 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jarrod Johnson
7b98b7dc00 Fix wrong uid after duplicate identity check 2022-09-08 09:51:21 -04:00
Jarrod Johnson
cde18bcd3a Cap the number of deferred packets 
Prevent deferred packets from growing endlessly
if activity is keeping the loop running.
 2022-09-07 08:04:47 -04:00
Jarrod Johnson
60cfa1d3c5 Skip peer probe on remote 
When remote ip is detected,
communicate by returning False
instead of None.

Use this indication to let ssdp
skip a transmit and growing
pending list in such a case.
 2022-09-06 16:40:34 -04:00
Jarrod Johnson
596fcb0f4c Implement mitigations for ovewhelming SSDP 
First, for a given contiguous set of snoop activity, start ignoring a given peer during that contiguous chenk after it has been considered once.

Further, make get_hwaddr cheaper for attempts against
remote IPs.

To facilitate the above, create an efficient 'ip_is_local' to be
a relatively cheap function, with
potential to cache result in future
if it needs to be even cheaper.
 2022-09-06 16:08:31 -04:00
Jarrod Johnson
7980534bad Fix confluentdbgcli.py for python3 2022-09-02 15:11:30 -04:00
Jarrod Johnson
6c1f87aeb7 Add mechanism for copernicus to request any confluent 
This can be used for network debug in a generic way, to identify vlan adjacency without regard to nodedoploy state or uuid matching.
 2022-09-02 13:32:05 -04:00
Jarrod Johnson
1c811dbf3e Fix python path automatically in confluent_selfcheck 2022-09-02 10:11:12 -04:00
Jarrod Johnson
503746131c Add selfcheck to packaging 2022-09-02 09:53:06 -04:00
Jarrod Johnson
a0037a305c Add confluent_selfcheck to server package 2022-09-02 09:44:13 -04:00
Jarrod Johnson
d1d15f29c1 Add facility to fix confluent uuid problem 2022-09-01 13:26:25 -04:00
Jarrod Johnson
b98759698a Sync up getinstalldisk and add another m.2 model 2022-09-01 13:22:50 -04:00
Jarrod Johnson
20992b2d17 Add check for actual file download 2022-09-01 13:21:39 -04:00
Jarrod Johnson
67f0c8a81b Add IPv6 and insecure boot checking 2022-09-01 13:17:17 -04:00
Jarrod Johnson
28331adced Add TFTP and ssh key checks to checkconfluent 2022-08-31 17:30:41 -04:00
Jarrod Johnson
ed91e0f2f3 Have askpass delete itself 
This causes ssh-add to give up, instead of endlessly rerunning
the askpass script.
 2022-08-31 17:17:33 -04:00
Jarrod Johnson
99a5c454ba Begin work on a sanity checker 
Check various facets that are frequently not quite right, making
recommendations on how to correct.
 2022-08-30 16:59:40 -04:00
Jarrod Johnson
908e51221c Correct minor formatting mistake in warning 2022-08-29 12:22:14 -04:00
Jarrod Johnson
8277701af6 Rewrite site ssh even if 
the /etc copy already exists.

IT may be that /var/lib/confluent is being repaired, in which
case just copy existng over while giving warning.
 2022-08-29 12:16:35 -04:00
Jarrod Johnson
570611f22b Have osdeploy initialize skip SSH regen 
When generating new key materials, most people say 'yes' and cause problems
where they cycle valid keys without
realizing the significance.

Replace prompting with an emphasized warning instead.
 2022-08-29 11:10:45 -04:00
Jarrod Johnson
2a3e6cd6f1 Change websocket dependency name in EL7 2022-08-26 08:16:22 -04:00
Jarrod Johnson
4e44188253 Ensure early existance of ca.pem 
Prior to install, enable apiclient
to have the ca.pem where it would
expect it to be.
 2022-08-25 16:45:00 -04:00
Jarrod Johnson
352da94005 Implement rebase feature ofr osdeploy 
Permit user to opt into a rebase of a
profile, to pick up potential updates
from the confluent packaged stock
profiles for files the user has not yet
customized.
 2022-08-25 15:21:49 -04:00
Jarrod Johnson
e774add916 Set timezone on diskless boots by default 
During onboot, use confluent directed timezone
info to set the timezone if the
disk image is incorrect.
 2022-08-24 16:09:05 -04:00
Jarrod Johnson
d72bac5faf Add more to the SUSE profiles 
Add exetensibility to pre and sample directories
 2022-08-24 16:07:38 -04:00
Jarrod Johnson
93b7547c58 Enable IPMI for user if IPMI has been enabled globally elsewhere 
Scenarios have come up with trying to repair partially
configured configuration, break
the global and per-account check
into separate concerns.
 2022-08-24 10:13:53 -04:00
Jarrod Johnson
31b3d6ea06 Move manifest data into dedicated file 2022-08-24 09:29:48 -04:00
Jarrod Johnson
42b4944542 Fix build script for vtbufferd 
Update for new licensing standard.
 2022-08-23 16:08:25 -04:00
Jarrod Johnson
04526ae8cc Update license to NOTICE file 
Bundled third party license content is now described under NOTICE file.
 2022-08-23 15:52:50 -04:00
Jarrod Johnson
d97c508d86 Add hash manifest of new os profiles 
When importing an image and taking stock copy, mark the files to allow detection of stock
versus customized profile content.

This will be used by a rebase command to know when
to overwrite or when to leave a file alone.
 2022-08-23 15:25:17 -04:00
Jarrod Johnson
801e43936c Revise ESXi routed deployment 
-Have apiclient set timeout on getting credential to avoid hang
-Change dcuiweasel to start shell earlier for better debug
-Do not expire the ident token if deployment is armed continuous anyway
 2022-08-19 16:06:46 -04:00
Jarrod Johnson
a445107c7f Fix setting privilege level alone for ipmi 
The logic incorrectly had it depend on password also being present.
 2022-08-19 09:10:52 -04:00
Jarrod Johnson
dde66c53c9 Dynamically ascertain name scheme for Delta pdu 
Some delta pdus have different name schemes
than others, take the hit of
awkward parsing to autodetect.
 2022-08-17 10:20:26 -04:00
Jarrod Johnson
57fcc8a243 Start SSH agent even on older ssh 
The unusual path to automation key for syncfiles and ansbile
is most easily handled by ssh-agent, even if no passphrase
will be used
 2022-08-16 15:06:26 -04:00
Jarrod Johnson
41c3c4fb5f Handle metapackages 
If a metapackage gets pulled in
as related, do not let it mess up
the license list.
 2022-08-11 14:09:55 -04:00
Jarrod Johnson
7b3c1e5405 Capture license content from related packages 
Some files that get gathered into genesis
have their license in a related rpm, but that related rpm does not otherwise get captured.

So pull all correlated license material
in the license capture process.
 2022-08-11 13:42:36 -04:00
Jarrod Johnson
047cd6302a Add wait for IP connectivity 
After config, there may be a delay
before the configuration takes effect.

This delay can break nodeconfig.

Try to wait for the delay to pass.
 2022-08-09 08:50:19 -04:00
Jarrod Johnson
f0c8eee956 Add facility to auto-exec nodeconfig on discovery 
This permits more open ended node configuration when discovery happens.
 2022-08-08 16:13:01 -04:00
Jarrod Johnson
1125e4c712 Advance concetpual debian support 2022-08-08 14:23:01 -04:00
Jarrod Johnson
2aed973a8b Have apiclient check all hosts for connectivity 
Further allow it to output the result and feed that to esxi startup.
 2022-08-08 11:18:35 -04:00
Jarrod Johnson
078e755ec7 Actually feed preseed into config 
It must be done to the live cdebconf state *and* preseed.cfg,
since one is referenced immediately and then discarded when
preseed read in.
 2022-08-05 16:05:26 -04:00
Jarrod Johnson
e3ed54ebf3 Advance the bootstrap of debian installation concept 2022-08-05 14:05:27 -04:00
Jarrod Johnson
9cac0c1705 Amendments to confluent initialization 2022-08-04 16:51:33 -04:00
Jarrod Johnson
2fe852f122 Add draft of a debian-installer-startup script 
This is a draft for use in debian profiles to get started
 2022-08-04 16:27:58 -04:00
Jarrod Johnson
258c4970c0 Change makeksnet from yaml to json 
Older vmware did just json, which is fine, just have to use
the json file that was there just in case something like this
came up.
 2022-08-04 10:39:10 -04:00
Jarrod Johnson
610e7bf044 Constrain ip-less offers 
PXE and HTTP client define a behavior for using non-address portion of an offer if the
offer has none. However, other clients, like
udhcpc will be confounded by such offers.

Ensure that client specifically sets VCI to indicate
it understand such an offer before replying.

This as yet generally doesn't matter as UUID is not sent by OS installers, however
some OSes can't do do API calls over LLA, and
thus we want to start allowing OS requests with
UUID and only offer when it makes sense.
 2022-07-29 12:49:25 -04:00
Jarrod Johnson
6b95bc7932 Fix key name 2022-07-27 12:08:58 -04:00
Jarrod Johnson
35701cdf01 Allow ident net config to override deploycfg 
In routed deployment, deploycfg will
be missing network info, use
the ident provided network if detected.
 2022-07-27 11:41:29 -04:00
Jarrod Johnson
c1ad4357dc Fix for loop variable name 2022-07-27 08:37:09 -04:00
Jarrod Johnson
9987cb5c03 Advance state of routed esxi deployment 2022-07-27 07:51:41 -04:00
Jarrod Johnson
e8d2f550b8 Draft work on ESXi identity image deployment 
Prepare for routed deployment of ESXi
 2022-07-25 17:05:30 -04:00