Jarrod Johnson
6eb4bf28e5
Another iteration to try to have IP adaptive syncfiles
...
It is likely that a client connects from fe80::, which
is explicitly omitted from ssh principals.
This time, have the client provide all currently set IP addresses
and the server will make a determination.
There remains the possibility it misconfigures a nic and tries to use that,
inducing failure. One strategy would be to filter the addresses and
only provide from the 'current' interface. Another is to just take
the hit as the node is likely going to suffer a lot from such a
misconfiguration anyway.
2022-10-05 12:23:47 -04:00
Jarrod Johnson
13ba95bb99
Give up on waiting for disks
...
Some profiles may have all disk support suppressed through blacklist until %pre comes
along to fix it. This avoids /dev/disk ever existing.
Wait up until 10 seconds before giving up. This gives disk subsystem a fair chance to
speed up and avoid a wait, with a fallback worst case of 10 seconds
2022-10-04 10:39:02 -04:00
Jarrod Johnson
440fcf2663
Further tweak el8 ident image support
2022-09-14 12:18:11 -04:00
Jarrod Johnson
0286b2e776
Further fixes to identity image in el8
2022-09-14 11:57:02 -04:00
Jarrod Johnson
aa2a8e2d5a
Adjust ported coreos ident image support to el8 install environment
2022-09-14 11:18:01 -04:00
Jarrod Johnson
65e97073e2
Add identity image support to EL8 scripted install profiles
2022-09-14 11:00:04 -04:00
Jarrod Johnson
b98759698a
Sync up getinstalldisk and add another m.2 model
2022-09-01 13:22:50 -04:00
Jarrod Johnson
789def17d1
Do not tail old content from firstboot
...
Tail only new content being fleshly logged
2022-07-18 09:35:40 -04:00
Jarrod Johnson
bfecaa389d
Adjust to correct ntp for 9 and up
2022-06-17 09:06:33 -04:00
Jarrod Johnson
b32c343a0c
Switch to importlib for newer python
...
imp is deprecated, despite being much simpler,
so use importlib in python3.6+ distributions.
2022-06-07 10:35:08 -04:00
Jarrod Johnson
272398884c
Appl consistent name to apiclient for EL8
2022-04-13 11:27:30 -04:00
Jarrod Johnson
8c54b6eaf8
Fix path to apiclient in add_local_repositories
2022-04-13 09:48:33 -04:00
Jarrod Johnson
8a3688c1d6
Fix mistake in pre.sh for relocation of apiclient
2022-03-18 12:09:43 -04:00
Jarrod Johnson
b6034f2e71
Update to fix new profiles and accomodate old profiles
...
/etc/confluent/apiclient is expected by older profiles
2022-03-16 09:40:55 -04:00
Jarrod Johnson
fe40d7c15e
Fix mispelling of confluent
2022-03-16 09:01:22 -04:00
Jarrod Johnson
5fb766e62b
Move apiclient consistently to /opt/confluent/bin
...
It's more reasonable to have
it in a bin directory
2022-03-03 11:11:29 -05:00
Jarrod Johnson
687136131e
Place Confluent CA certs into TLS anchors
...
When processes may update the certificate authorities, the confluent
CA trust would be lost. Place it appropriately so that
update-ca-trust will keep it in the appropriate place.
2022-03-02 08:41:47 -05:00
Jarrod Johnson
6f194f26c0
Fix contents and permissions
...
NetworkManager demands specific
permissions
2022-02-25 16:18:54 -05:00
Jarrod Johnson
71c60be659
Fix el8 dns configuration
...
The modification to add dns search must only be suggested
if the respective ip version section is enabled.
2022-02-25 15:22:45 -05:00
Jarrod Johnson
58a9aa03ef
Add DNS domain to el8 network manager
2022-02-25 09:48:56 -05:00
Jarrod Johnson
47a517aec1
Decrease retries to do https retries with bad TLS cert
2022-02-24 16:37:48 -05:00
Jarrod Johnson
1a5f5aea3a
Try an alternative approach to autoconsole errors
2022-02-24 12:18:41 -05:00
Jarrod Johnson
7068287ba3
Fix autocons spurious output
2022-02-24 10:25:59 -05:00
Jarrod Johnson
fb1f6b70bb
Improve error handling on bad TLS cert
...
Bad TLS cert is a common problem, provide better feedback.
2022-02-24 09:27:40 -05:00
Jarrod Johnson
24ef12e029
Disable autoconf of ipv6 in el
...
If autoconf is allowed when link is brought up, it scan
confuse redhat network configuration when it already finds
an ipv6 address.
2022-02-23 16:58:29 -05:00
Jarrod Johnson
9f071c1fdb
Provide more details in example syncfiles
2022-01-20 14:10:30 -05:00
Jarrod Johnson
181f704331
Correct configbmc misidentification of lan chan
...
The lan channel get mac address was incorrect, change
to correctly request.
2022-01-10 09:29:40 -05:00
Jarrod Johnson
c2de127947
Bring el8 completely over to prefer ipv4
2021-12-09 08:31:07 -05:00
Jarrod Johnson
cf686f8018
Prefer IPv4 deployment over IPv6 when both are available
...
Some older vintages of RHEL and clones do not support IPv4,
best to prefer ipv4 to avoid messing up on places that have ipv6
configured.
2021-12-08 17:04:04 -05:00
Jarrod Johnson
02da50af8b
Tighter permissions on /var/log/confluent
2021-12-08 07:42:19 -05:00
Jarrod Johnson
77de3ab25b
Apply more restrictive permissions to /var/log/confluent/
...
While confluent shouldn't put anything sensitive in the log, custom
content may. To mitigate the risk, it will now lock down the
log permissions.
2021-12-07 07:21:04 -05:00
Jarrod Johnson
61eecd672c
Add confignet to default firstboot/onboot as appropriate for el8 and
...
suse15
2021-11-08 16:34:26 -05:00
Jarrod Johnson
224663d0c8
Fix execution of confluent functions after run_remote_python
2021-10-29 13:50:04 -04:00
Jarrod Johnson
729408a0cb
Fix run_remote aafter the cleanup was added
...
The removal of the temp dir needed to be linked with
whether the script was dedicated or shared tmp with a run_remote_parts.
2021-10-29 13:01:59 -04:00
Jarrod Johnson
8eb6ce0b69
Specify absolute path for mktemp
...
mktemp defaults to relative, to produce the correct
behavior, must be absolute template.
2021-10-25 12:03:26 -04:00
Jarrod Johnson
81675faec1
Avoid clearing disk if autopartition is not to be used
2021-10-25 10:05:15 -04:00
Jarrod Johnson
957679db3c
Update syncfile examples and el7 support
2021-10-15 16:24:22 -04:00
Jarrod Johnson
2e7b315f29
Add 'APPENDONCE:' section to syncfiles
...
This will APPEND if the target file doesn't
already have the entire source contents in
a contiguous location already. This makes
it more safe to rerun without negative consequence.
2021-10-15 15:48:49 -04:00
Jarrod Johnson
f33ed9b4d9
Cleanup after script execution
...
Leave cleaner tmp directories when functions are ran.
2021-10-15 12:16:48 -04:00
Jarrod Johnson
08f61e9391
Fix syntax mistake in the previous commit
2021-10-15 10:06:54 -04:00
Jarrod Johnson
653c0bd695
Bring up both IPv4 and IPv6 in EL8
...
If both are configured, then enable both as early as possible.
2021-10-15 09:30:08 -04:00
Jarrod Johnson
351d6a85ee
Fix firstboot with ipv6 deployment in el8
2021-10-12 17:23:18 -04:00
Jarrod Johnson
fda61bd354
Attempt to extend the v6 deployment support in el8
2021-10-12 16:58:42 -04:00
Jarrod Johnson
d06e130af5
Fix ipv6 address specification in el8 scripted install
2021-10-12 16:42:07 -04:00
Jarrod Johnson
5ca3b68b8a
Attempt to support ipv6 deployment in el8
2021-10-12 16:06:37 -04:00
Jarrod Johnson
58cf220203
Mask spurious output on disk cleanup
2021-10-11 13:30:31 -04:00
Jarrod Johnson
a0dfd3f42d
Move scripted install to pre-trigger
...
In Stream 9, initqueue is too late to pre-empt the auto dhcp,
move up to pre-trigger and manually trigger to get network
ready for pre-emption.
2021-10-11 13:28:55 -04:00
Jarrod Johnson
57f346fa4c
Implement syncfiles parameters
...
chmod and chown as directed
by the syncfiles file if present
2021-10-08 10:27:57 -04:00
Jarrod Johnson
3b7e7afc24
Fix inconsistent handling of marginal id in syncfileclient
...
Also, resynchronize syncfileclient across the distributions.
2021-10-07 12:36:52 -04:00
Jarrod Johnson
d23f9db6e0
Syncronize diskfull and diskless el8 and el9 functions
2021-10-07 08:38:29 -04:00
