Jarrod Johnson
ed2a8b6f9d
Provide an example to name constrain a CA
...
It's imperfect, and abetter procedure should be written up
for the more security conscious.
2024-09-23 10:45:31 -04:00
Jarrod Johnson
71a83ac39c
Try for more DNS lookups
...
Try to hit likely DNS names, or at least provide a means
of manipulating /etc/hosts to induce
a good domain for the default certificate SAN fields.
Note putting the FQDN first in /etc/hosts will get the FQDN in the
certificate.
2024-09-20 18:34:02 -04:00
Jarrod Johnson
a8df3692b6
Persist passkeys as text
...
confluentdbutil and collective would choke
on the binary. Have the binary bits be
safely converted to/from base64.
2024-09-20 17:26:02 -04:00
Jarrod Johnson
65ae52782e
Merge pull request #164 from tkucherera-lenovo/webauth_update
...
remove hardcorded values
2024-09-19 16:29:33 -04:00
tkucherera
936153490a
remove hardcorded values
2024-09-19 16:21:39 -04:00
Jarrod Johnson
f19234419d
Implement non-root ssh for SUSE diskless
2024-09-19 13:15:10 -04:00
Jarrod Johnson
787e8b95c0
Merge pull request #163 from tkucherera-lenovo/webauth_update
...
fix minor bugs and code clean up
2024-09-18 16:30:58 -04:00
tkucherera
9bce0de93d
fix minor bugs and code clean up
2024-09-18 16:22:09 -04:00
Jarrod Johnson
dbfb800c1b
Fix regression in pyghmi dependency version
2024-09-12 13:26:15 -04:00
Jarrod Johnson
942bbd1c69
Merge pull request #154 from tkucherera-lenovo/webauthn
...
Webauthn
2024-09-12 13:25:15 -04:00
Jarrod Johnson
bd37b1746d
Merge pull request #136 from tkucherera-lenovo/firwareUpdateServer
...
Firware update server
2024-09-12 13:24:29 -04:00
Tinashe Kucherera
5609d4fe4b
Merge branch 'master' into firwareUpdateServer
2024-09-12 11:44:22 -04:00
Tinashe Kucherera
c2abe7c4cd
Merge branch 'master' into webauthn
2024-09-12 11:40:20 -04:00
Jarrod Johnson
78dc6e31d7
Merge pull request #133 from tkucherera-lenovo/staging
...
Staging
2024-09-12 11:38:49 -04:00
Tinashe Kucherera
bbc032056e
Merge branch 'master' into firwareUpdateServer
2024-09-12 10:37:34 -04:00
Tinashe Kucherera
304d0b5dce
Merge branch 'master' into staging
2024-09-12 10:29:52 -04:00
tkucherera
d553ab864b
resolve merge conflicts
2024-09-12 10:27:05 -04:00
tkucherera
db381d377b
account for timeout
2024-09-12 10:10:53 -04:00
Jarrod Johnson
7da3944b2b
Allow blink for ipmi
...
OEM IPMI may now do blink
2024-09-11 09:13:30 -04:00
Jarrod Johnson
8704afcee5
Add glue to confluent api from vinzmanager
2024-09-10 11:28:00 -04:00
Jarrod Johnson
0fb19ce263
Wire up http sessions to vinzmanager
2024-09-06 13:41:50 -04:00
Jarrod Johnson
c048439849
Reuse existing vinz unix session for a node
2024-09-05 11:44:29 -04:00
Jarrod Johnson
f8715f4cb1
Implement logout on disconnect notification for vinz
2024-09-05 11:42:52 -04:00
Jarrod Johnson
d17d5341f1
Imprement basic vinz management
2024-09-04 19:16:41 -04:00
Jarrod Johnson
2c76d94a6d
Vary version for debian build process
2024-09-04 12:13:40 -04:00
Jarrod Johnson
7c8f85eb06
Handle python mangling of filename consistently for rpm build
2024-09-04 10:53:05 -04:00
Jarrod Johnson
ee067fa3c0
Cleanup stray debian content in apt
2024-09-04 10:27:00 -04:00
Jarrod Johnson
4a2e943f84
Update osdeploy rpms to new version scheme for snapshots
2024-09-04 10:19:11 -04:00
Jarrod Johnson
97e29a5655
Change versioning to consistently produce prerelease consistent with rpm and deb
2024-09-04 10:11:47 -04:00
Jarrod Johnson
cb67c83287
iAttempt to be consistent with ~ prerelease versioning
...
We may not know where we are going, but at least bump the minor number.
Ultimately we may not be building toward that number, or that number will be used in a different branch, but it
can at least handle more cases
2024-09-04 08:11:42 -04:00
Markus Hilger
e11c3516e9
Create README.md ( #162 )
2024-09-03 12:25:15 -04:00
Jarrod Johnson
1f6987bafc
Fix nodedeploy -c with profile
...
Remove vestigial statement near end, and put an up front
clarification to a user trying to use both '-c' and a
profile on the same command line.
2024-08-31 07:28:51 -04:00
Jarrod Johnson
f4f5b4d1b6
Suppress bad gateway warning if the client ip is unknown
...
In a scenario where we are doing the 'next-server' next to a real dhcp server,
but through relay, the missing gateway would be expected.
Rely on the final message about 'no address' as the clue to users
that something went wrong on the node side.
2024-08-29 08:57:39 -04:00
Jarrod Johnson
fd301c609f
Add additional log data to relaydhcp
2024-08-29 08:51:22 -04:00
Jarrod Johnson
53b9a13a51
Fix different invocations of check_fish
...
Particularly nodediscover register can fail.
Those invocations are XCC specific, so the targtype should not matter
in those cases.
2024-08-28 19:19:39 -04:00
Jarrod Johnson
cd91ed0b94
Fix escape warning on newer python
2024-08-27 15:55:54 -04:00
Jarrod Johnson
4dc54b92d5
Correct nodeconsole syntaxwarning
2024-08-27 11:35:39 -04:00
Jarrod Johnson
08a3a0ee76
Correct wrong pyghmi version in dependencies
2024-08-27 10:43:47 -04:00
Jarrod Johnson
b601cd97c7
Bump pyghmi to a higher explicit version
2024-08-27 10:36:30 -04:00
Jarrod Johnson
1d80e2703c
Add extended nodeconfig to confluent redfish
2024-08-27 09:59:16 -04:00
Jarrod Johnson
7304c8e3b7
Fix LLA request for deploycfg
...
If a client uses IPv6 LLA, the '%' location may slip in.
In such a case, disable client ip matching, since fe80::
is useless for that anyway.
2024-08-26 16:51:35 -04:00
Jarrod Johnson
d84a76dbc6
Fix -a and -e nodeconfig
2024-08-26 10:01:24 -04:00
Jarrod Johnson
4f1b6b1fac
Add extra_advanced to core resource tree.
2024-08-26 09:42:44 -04:00
Jarrod Johnson
77c5b70ad9
Wire up '-a -e' for nodeconfig
2024-08-26 09:34:58 -04:00
Jarrod Johnson
c7d87b755a
Add logic to get remote deployers locked into current nic
2024-08-23 18:02:15 -04:00
Jarrod Johnson
f0c5ac557f
Fix and extend Relay DHCP Support
...
Relay DHCP support needed better logging and behavior.
It had also broken non-relay clients.
2024-08-23 13:54:27 -04:00
Jarrod Johnson
5d4f0662d1
Fix add_local_repositories for routed IPv4
...
Routed IPv4 deployment is not guaranteed to have
an IPv6 server. In this case the safer bet is
to try to just accept the IPv4 anyway.
2024-08-23 07:06:37 -04:00
Jarrod Johnson
edc3a3e9f3
Have confignet fallback to unicast per deploycfg
...
In routed deployments, the scan mechanism
will not be available. Fall back to routed
access to the deploy server as indicated
by deploycfg from install time.
2024-08-22 16:39:52 -04:00
Jarrod Johnson
3d53b76317
Fix relay replies being broadcast instead of unicast
2024-08-22 14:54:48 -04:00
Jarrod Johnson
683a160c20
Amend mistake in parameter name
2024-08-22 10:25:15 -04:00
