xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2024-11-29 13:00:03 +00:00
Code Issues Projects Releases Wiki Activity
4,680 Commits 39 Branches 63 Tags 18 MiB
abc639e32b
Commit Graph

4680 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jarrod Johnson
abc639e32b Preferentially support HTTPS on Eaton PDU 
While Eaton does not do HTTPS by default,
it can be configured to do so.

Support when available.

Mitigate downgrade attack by
stickying the cert fingerprint.
If fingerprint is present, then refuse
to even think about port 80.
 2023-02-15 17:03:35 -05:00
Jarrod Johnson
90af99e864 Add more clear error on syncfile mistake 
If a bad node was included in
a syncfile, the error was highly misleading.

Provide a more clear indicaiton of the problem on failure.
 2023-02-14 14:53:40 -05:00
Jarrod Johnson
09ce824c85 Fix bad lookup attempts on slashed addr 
While this should in theory be
harmless, it exacerbates some
DNS setups that would look
up the normal result quickly,
but would stall on
a bad lookup.
 2023-02-14 14:53:40 -05:00
Jarrod Johnson
9c1e7a7142 Allow interfaces to supersede default 
In some scenarios, the 'default'
interface is overlapped by another connection, either
identical or as a superset in a bond.

Whittle down the default
interface if superseded
to mitigate duplicate interface setup.
 2023-02-14 14:53:40 -05:00
Jarrod Johnson
36195198a6 Add fallback for newer msgpack 
Newer msgpack refuses the encoding argument, use raw=False instead.

Further, newer msgpack refuses to accept int as key by default.
Opt into it as the risk is hash collision due to msgpack int being used directly, and
we aren't dealing with untrusted
peer (we only talk to ourselves).
 2023-02-14 14:53:40 -05:00
Jarrod Johnson
3798a33213
Merge pull request #121 from Tkucherera/nodeconsole 
nodeconsole documentation: passthrough options
 2023-02-14 08:45:43 -05:00
Tinashe
251b307bd7 nodeconsole documentation: passthrough options 2023-02-14 08:27:25 -05:00
Jarrod Johnson
bb7a72db65 Fix for ipv6 deployment 
Need to avoid double-bracketing of the server and also disable globbing
so curl does not mistake the ip address for a glob attempt.
 2023-02-13 09:36:42 -05:00
Jarrod Johnson
fcde113e08 Add a check of dns.domain to selfcheck for node 2023-02-08 14:45:16 -05:00
Jarrod Johnson
a02f617b3d Add DDR5 dimm to nodeinventory CLI output 2023-02-07 14:01:18 -05:00
Jarrod Johnson
7f1ac92fc9 Store mgr from confluent= specificate 2023-02-01 16:51:21 -05:00
Jarrod Johnson
8cf97833ab Fixes for certificate directed discovery 2023-02-01 13:09:40 -05:00
Jarrod Johnson
3e747069d9 Try to get verified bay from SMMs 
With V3 systems, we can now ask
the SMMs for the certificates
and use that for a verified
measurement, regardless of
whether the XCC is returning
the correct bay number.
 2023-02-01 12:57:27 -05:00
Jarrod Johnson
c687da4d5f Tweak architecture override on import 2023-01-31 15:57:41 -05:00
Jarrod Johnson
340ccc422c Specify check for arch override of addons.cpio 
For now, keep using x86_64 as
default, but allow overrides
for other architectures.

One day it may be cleaner to move all addons.cpio to
arch specific subdirs.
 2023-01-31 15:27:45 -05:00
Jarrod Johnson
2c3afac576 Restructure aarch64 addons 
Avoid tripping over current copy over, prepare
for smarter selection by architecture.
 2023-01-31 15:10:49 -05:00
Jarrod Johnson
8e1cc63ac0 Correct spelling of keyword argument in ipmi 2023-01-31 15:00:22 -05:00
Jarrod Johnson
dc6c7c1acc Make sure both el8 and el9 binaries are packed 2023-01-31 13:29:24 -05:00
Jarrod Johnson
5c309db47c Further ARMv8 support 
Handle aarch64 differences in
at least some distributions.
 2023-01-31 11:20:40 -05:00
Jarrod Johnson
976e9ef563 Bump version on genesis 2023-01-31 09:10:23 -05:00
Jarrod Johnson
0efd2a4d74 Fix the amended license gathering 2023-01-31 08:58:56 -05:00
Jarrod Johnson
424830471d Note how to fetch srpms associated with genesis 2023-01-31 08:54:03 -05:00
Jarrod Johnson
23f33a8420 Revamp license gathering for genesis 2023-01-31 08:52:32 -05:00
Jarrod Johnson
521a58c1d9 Have a utility to generate NOTICE from tmux 
tmux basically defers to the c files, so
generate a NOTICE file from c files.
 2023-01-31 08:37:42 -05:00
Jarrod Johnson
ce375a1162
Merge pull request #120 from Tkucherera/master 
Adding missing imports
 2023-01-30 14:48:05 -05:00
Tkucherera
caee136012
Merge branch 'xcat2:master' into master 2023-01-30 14:15:53 -05:00
Tinashe
2e283f3442 nodeconsole: missing imports time and socket 2023-01-30 14:13:44 -05:00
Jarrod Johnson
2b01d9fbfa Properly store all candidate host ip addresses 
This is needed to ensure that mis-detected primary ip
falls through to another viable ip
 2023-01-30 12:40:40 -05:00
Jarrod Johnson
627bc9ffe3 Modify pkglist for aarch64 2023-01-27 12:14:37 -05:00
Jarrod Johnson
3e71e103b1 Fix unpacking of el8 and el9 built sources 2023-01-27 10:47:27 -05:00
Jarrod Johnson
a90cd8515e Tweak osdeploy for ARM setup 2023-01-27 10:43:29 -05:00
Jarrod Johnson
284d042afe
Merge pull request #119 from Tkucherera/master 
nodeconsole windowed and tiled functionality
 2023-01-27 09:33:45 -05:00
Tinashe
2cc134adeb nodeconsole: allow for passthrough args 2023-01-27 09:30:46 -05:00
Jarrod Johnson
02e242ec4e Restore link local cert in apiclient 2023-01-27 09:13:47 -05:00
Jarrod Johnson
1777223232 Fixes for osdeploy arm ipxe init 2023-01-27 08:40:31 -05:00
Jarrod Johnson
648290ffbc Begin implementing aarch64 deploy support 2023-01-27 08:00:38 -05:00
Tinashe
c9b72225a9 nodeeventlog timeframe documentation 2023-01-26 10:37:30 -05:00
Tinashe
3433635e9b nodeeventlog: timeframe option 2023-01-26 10:16:33 -05:00
Tkucherera
7a6c4fc5b2
Merge branch 'xcat2:master' into master 2023-01-26 10:05:04 -05:00
Tinashe
f176a836ae nodeecentlog: add timeframe option 2023-01-26 10:01:02 -05:00
Jarrod Johnson
ce324e90f7 Draft spec to generate addons-aarch64 files 2023-01-25 12:54:03 -05:00
Tinashe
23ea53ab55 console geometry 100x31 2023-01-24 11:18:21 -05:00
Jarrod Johnson
d14d28caf8 Confirm TLS connectivity when scanning hosts 
In certain environments, Confluent may have an IP address that
is fake, but then there is elsewhere with that same IP for real.

To mitigate this, follow up basic connectivity with proof of having
an associated certificate.
 2023-01-24 08:22:00 -05:00
Jarrod Johnson
0008998680 Add api method to request all mac data 
This will provide easy way for
client to get FDB data, potentially
for use in conjunction with discovery data.

For now, leave LLDP out, as that isn't currently cached
at the confluent layer.
 2023-01-23 13:37:29 -05:00
Jarrod Johnson
2e059b5887 Make an API for getting full discovery data in one fetch 
This makes for faster nodediscover being possible, also
makes web management of the data easier
 2023-01-23 11:47:33 -05:00
Jarrod Johnson
792e6472e4 Fix IPv6 addresses_match 
fe80:: could be submitted during
collective startup, handle that problem appropriately.
 2023-01-23 11:24:25 -05:00
Tinashe
b965f9b758 nodeconsole windowed and tiled functionality 2023-01-20 16:41:56 -05:00
Jarrod Johnson
a522e17a63
Merge pull request #118 from Tkucherera/master 
nodeeventlog man page -l option
 2023-01-20 14:49:11 -05:00
Tinashe
9f3b934ea4 nodeeventlog man page -l option 2023-01-20 14:24:32 -05:00
Jarrod Johnson
680ca2c4a2
Merge pull request #117 from Tkucherera/master 
nodeeventlog: return last n entries
 2023-01-20 12:51:16 -05:00