Jarrod Johnson
8aabdcc454
Fix name of rpm gpg keys
2020-08-06 19:32:47 -04:00
Jarrod Johnson
9c079a4203
Generate ifidx file
...
Use apiclient to generate ifidx for nmcli c u
2020-08-06 18:56:23 -04:00
Jarrod Johnson
f55dc8104b
Bring up the nic correctly during pre
...
nmcli can bring up the link with proper lla like confluent.info
indicates.
2020-08-06 18:15:27 -04:00
Jarrod Johnson
3812fc93ff
Have EL8 family add repositories manually
2020-08-06 16:37:18 -04:00
Jarrod Johnson
b4d7812926
Add some likely customizations examples
...
RedHat family is likely to be customized with firewall and selinux,
use those as examples to get things going for users.
2020-07-29 12:19:44 -04:00
Jarrod Johnson
b09631fcbf
Correct mistake in chcon path
2020-07-24 16:07:15 -04:00
Jarrod Johnson
235c07063c
Adjust SELinux context on remote exec
...
To facilitate firstboot, context must be changed
before execing remote content.
2020-07-24 15:32:13 -04:00
Jarrod Johnson
d2f1ea6cec
Tweak the customizations.
2020-07-24 11:10:01 -04:00
Jarrod Johnson
d7c219f2a8
Add a new strategy for custom content
...
This allows a profile to more easily isolate customizations
from the base profile
2020-07-24 10:59:15 -04:00
Jarrod Johnson
eabb212e58
Fix setupssh.sh without ssh_config.d
...
It was modifying the installer ssh_config
rather than the target ssh_config
2020-07-24 08:12:53 -04:00
Jarrod Johnson
ded4762baf
Go to internalizing driver disk load
...
Trying to let the dd happen naturally was evidently a mistake,
load the drivers manually.
2020-07-16 15:09:24 -04:00
Jarrod Johnson
9661d4d6fb
Clear cmdline between runs
2020-07-15 17:13:07 -04:00
Jarrod Johnson
8fc475a678
Fix mistakes in the initqueue hooks
...
Syntax errors were present.
2020-07-15 15:55:29 -04:00
Jarrod Johnson
d49f018981
Correct functions in profiles
...
Use functions correectly.
2020-07-15 15:22:27 -04:00
Jarrod Johnson
6dadac498f
Try another strategy for confluent initqueue
...
We want to have each iteration try not much.
But we also want to have a 'good' (primary network) match
supersede a less successful guess.
But we also want to keep guessing.
So the first 'vague' guess gets to run full hook.
If a future good guess happens, rerun the hook to update the data.
2020-07-15 15:20:17 -04:00
Jarrod Johnson
3b121cdb4b
Have initqueue hook give up faster
...
Since the hook itself will get retried, we can be more aggressive
in giving up in each individual attempt.
2020-07-15 08:45:41 -04:00
Jarrod Johnson
fba82f9379
Change el8 addons to retry confluent handler
...
If DD is in play, drivers may appear later, and
we have to wait for them in a future invocation.
2020-07-14 16:43:37 -04:00
Jarrod Johnson
dad68bdf63
Conditionally include clevis-dracut
...
If not using LUKS, don't bother with clevis-dracut.
In 8.1, clevis-dracut will cause problems with network
in initrd time.
2020-07-14 14:40:05 -04:00
Jarrod Johnson
910490cc74
Add arguments to the run_remote functions
...
This will help provide flexibility in invoking remote scripts
without hardcoding arguments into the scripts
2020-07-13 17:08:38 -04:00
Jarrod Johnson
439859e4fc
Implement suse ntp and correct redhat ntp
2020-07-09 15:05:20 -04:00
Jarrod Johnson
50661b7dee
Fix multiple ntp servers in EL8 profile
2020-07-09 13:30:13 -04:00
Jarrod Johnson
f8affe99db
Add ntp to EL8 profile prescript
2020-07-09 12:11:32 -04:00
Jarrod Johnson
c9e1ecb616
Fix use of touch when touch is not present
2020-07-02 16:34:50 -04:00
Jarrod Johnson
f157ab1ef3
Use the 'staged' profile in some linux
...
The staged was added to control netboot mostly,
and is mostly optional but change some default
profiles to use it.
2020-07-01 14:20:40 -04:00
Jarrod Johnson
22085e38f5
Change bound to 'tpm2'.
...
This is a bit more logical and flexible for the future.
2020-07-01 13:33:59 -04:00
Jarrod Johnson
3fdcecb8c6
Suppress spurious error output
...
Have the process start cleaner in EL8 deployments
2020-07-01 10:43:24 -04:00
Jarrod Johnson
e863edfe3f
Correct a number of mistakes
2020-07-01 09:52:17 -04:00
Jarrod Johnson
b407fef988
Normalize path to confluent files
...
After going through tmp and etc, settle on /etc/confluent/
as the generally relevant directory when possible.
Additionally, move apikey and ifidx logic into apiclient where
possible
2020-07-01 08:57:08 -04:00
Jarrod Johnson
4cf34056e4
Correct mistakes in previous commit
2020-06-30 19:34:13 -04:00
Jarrod Johnson
32ba37a858
Extract default nic to the index in el8
2020-06-30 19:30:09 -04:00
Jarrod Johnson
0c3888441d
Add the check for primary nic to suse
2020-06-30 18:48:10 -04:00
Jarrod Johnson
27a2a58ea1
Try more aggressively to get to 'default' network.
...
If a 'default' network is going to eventually link up,
wait for it.
2020-06-30 18:39:29 -04:00
Jarrod Johnson
8f9e4ea205
Build confluent CA cert for EL8
2020-06-30 17:02:21 -04:00
Jarrod Johnson
94f2b618bd
Also copy api key to usable location.
2020-06-30 16:59:52 -04:00
Jarrod Johnson
8d3374b1e7
Move confluent.info to correct location
2020-06-30 16:55:01 -04:00
Jarrod Johnson
2f4dd240dd
Change EL8 initramfs to use apiclient
...
This is a richer client that provides
the extended information required
for more accurate network autodetect.
2020-06-30 15:02:10 -04:00
Jarrod Johnson
df503464d7
Tighten permissions on /etc/confluent on deployed target
2020-06-26 15:50:15 -04:00
Jarrod Johnson
5bc9cb57d1
Amend RH initqueue
...
We may be called before drivers have manifested interfaces.
On each iteration make sure all nics are up before proceeding.
2020-06-18 16:45:24 -04:00
Jarrod Johnson
e1270b2926
Do not seal to PCR 7
...
At least without secureboot, PCR 7 is not defined.
This would potentially be worth a conditional to
check on secureboot.
2020-06-17 16:23:13 -04:00
Jarrod Johnson
0016c31fef
Fix encrypted boot on 8.1
...
8.1 requires -f or it will fail.
2020-06-04 13:41:00 -04:00
Jarrod Johnson
762685459c
Add confluent CA to installed EL8
...
Needed to continue boot process during install
2020-06-02 17:44:19 -04:00
Jarrod Johnson
82ab56ebb4
Add boot encryption support to EL8
...
The stock profile should now encrypt if requested
2020-06-02 16:05:44 -04:00
Jarrod Johnson
d8266ea6c9
Update firstboot to have some comments
...
Make it clearer how it would be edited.
2020-06-01 12:25:30 -04:00
Jarrod Johnson
700afc6606
Fix function definition
...
Sourcing the functions was causing a hang.
2020-06-01 11:12:28 -04:00
Jarrod Johnson
e7cb3f9a0c
Add the refactored files
...
The refactoring put the files in new places,
add those to tracking.
2020-06-01 10:52:38 -04:00
Jarrod Johnson
0254963432
Add some commentary to help users
...
Embed comments to help users understand
how to customize a bit better.
2020-06-01 10:52:01 -04:00
Jarrod Johnson
110fb27b2a
Refactor the kickstart for EL8 a bit
...
Based on early feedback, working towards a less
intimidating script set for the sake of not
needing a 'postscripts' facility.
2020-06-01 09:08:41 -04:00
Jarrod Johnson
c1576e9787
Handle blank lines without error
...
Do not trigger syntax error on a blank expression.
2020-05-29 12:23:57 -04:00
Jarrod Johnson
2a9d4e8079
Avoid breaking net config with '' DNS server
...
The node is probably misconfigured, but tolerate it
and carry on so that networking will at least
come up.
2020-05-29 08:58:33 -04:00
Jarrod Johnson
05983201ee
Fix mistaken use of $proto variable
...
Always use https to fetch the script
2020-05-22 15:59:19 -04:00