Jonathon Anderson
0133a3eb46
Update dracut scripts, iPXE template, and GRUB config templates
...
- Update dracut scripts, iPXE template, and GRUB config templates to
use new route paths and TLS-aware logic
- Minor troubleshooting doc cleanup
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-19 09:08:25 +01:00
Christian Goll
b40c379550
Merge pull request #2137 from anderbubble/dependabot-multi
...
Update multiple dependency versions from dependabot
2026-03-19 09:07:22 +01:00
Christian Goll
8a03a7d6dd
Merge pull request #2131 from anderbubble/docs-omnibus
...
Documentation improvements omnibus
2026-03-19 09:06:40 +01:00
Jason Scott
d9ab0542b7
Merge pull request #2138 from anderbubble/wwctl-upgrade-tls
...
Update wwctl upgrade to manage TLS configuration
2026-03-18 21:16:41 -07:00
Jonathon Anderson
c211529689
Update wwctl upgrade to manage TLS configuration
...
Also fixed an omission for API configuration in wwctl upgrade.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 21:36:43 -06:00
Jonathon Anderson
cb2ee09ed2
Update multiple dependency versions from dependabot
...
- Bump google.golang.org/grpc from 1.79.2 to 1.79.3
- Bump golang.org/x/crypto from 0.48.0 to 0.49.0
- Bump golang.org/x/term from 0.40.0 to 0.41.0
Closes #2133 , #2134 , #2135
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 17:46:37 -06:00
Jonathon Anderson
08b643184c
Update and clean CHANGELOG.md
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 17:10:16 -06:00
Jonathon Anderson
9e526c23fc
Audit and correct documentation, cobra help text, and log messages for accuracy
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 16:58:39 -06:00
Jonathon Anderson
7d56252d65
Document the status of various top-level Warewulf features
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 14:41:08 -06:00
Jonathon Anderson
db7e859112
Documented wwctl clean
...
Closes #2034
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 14:22:49 -06:00
Jonathon Anderson
c13c94ff85
Documented how to detech shadowed overlays in troubleshooting
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 13:51:22 -06:00
Jonathon Anderson
4f506e1b16
Clarify functionality of syncuser commands and overlay in documentation
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 13:19:01 -06:00
Jonathon Anderson
7909598a3d
Distinguish between OS images and overlay images in documentation
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 08:10:49 -06:00
Jonathon Anderson
1fd8b65ebf
Document reclaiming RAM by moving the image to swap
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-17 17:43:01 -06:00
Jonathon Anderson
efcd042131
Expand troubleshooting documentation for container runtimes
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-17 15:32:38 -06:00
Jonathon Anderson
bb135955ad
Initial one-page quick reference guide
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-17 15:23:28 -06:00
Jonathon Anderson
3f12d5635c
Document configuring the arp cache for large clusters
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-17 15:23:28 -06:00
Jonathon Anderson
fe8f4b5b11
Fix grammatical and spelling errors in userdocs/
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-17 15:23:28 -06:00
Jonathon Anderson
cd60acf271
Fix syntax errors in userdocs/
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-17 15:23:28 -06:00
Jonathon Anderson
73a71abfe2
Merge pull request #2095 from jsco2t/CWE-23_internal/pkg/clean/clean.go
...
Fix for CWE-23 in internal/pkg/clean/clean.go
2026-03-16 13:32:18 -06:00
jason scott
f39c71f5c2
Adding mitigation for CWE-23 + verification test cases
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-16 12:21:22 -06:00
Jonathon Anderson
a19bee3777
Merge pull request #2124 from jsco2t/2122-golang-ver-pol
...
Updating MAINTAINING.md to document golang version policy
2026-03-11 09:05:00 -06:00
Christian Goll
b958ac5ab0
Merge pull request #2127 from anderbubble/fix-leaky-wwclient
...
Prevent `assetkey` from leaking into wwclient logs
2026-03-11 10:43:00 +01:00
Jonathon Anderson
5f41465fac
Prevent assetkey from leaking into wwclient logs
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 10:32:47 +01:00
Christian Goll
819163e706
Merge pull request #2126 from anderbubble/snyk
...
omnibus snyk and dependabot update
2026-03-11 10:22:09 +01:00
Christian Goll
82b7cf9095
Adress linter issues from TLS update
2026-03-11 10:15:06 +01:00
Jonathon Anderson
1c9757b683
Update deadcode for golang v1.25 compatibility
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:32:52 +01:00
Jonathon Anderson
cea25f5a87
Update staticcheck for golang v1.25 compatibility
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:32:52 +01:00
Jonathon Anderson
081d2ec61e
Update linter for golang v1.25 compatibility
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:32:49 +01:00
Jonathon Anderson
019408d076
Update to golang v1.25 and x/sys
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:29:51 +01:00
Jonathon Anderson
2699f2628f
Bump additional dependency versions
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:29:51 +01:00
Jonathon Anderson
9a3533237f
Address snyk and dependabot issues
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:29:45 +01:00
Christian Goll
6afaea9d87
Merge pull request #2125 from anderbubble/tlsSec
...
TLS for warewulfd and REST API, and warewulfd refactor
2026-03-11 09:28:42 +01:00
Jonathon Anderson
939f4290f4
Move stage display formatting to wwctl
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-10 16:11:09 -06:00
Jonathon Anderson
abc5f0f0b9
Add doc comments to server code
...
Points to userdocs/server/routes.rst for more information.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-10 15:35:44 -06:00
Jonathon Anderson
5147d0970e
Simplify warewulfd parser
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-10 15:17:40 -06:00
Jonathon Anderson
f78f761be9
Error handling for /newroot mount during single-stage boot
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:20 -06:00
Jonathon Anderson
7b5d2de6ad
Documentation and CHANGELOG updates and corrections
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:20 -06:00
Jonathon Anderson
395fa2c283
Support requiring TLS for API access
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:20 -06:00
Jonathon Anderson
779434331c
Add GRUB config route, tests, and server route documentation
...
- Add /grub/{hwaddr} route for serving GRUB configuration files,
replacing the shim handler with a config-based approach
- Add short URL aliases: 'system' for overlay-system, 'runtime' for
overlay-runtime, and 'grub' stage in parser
- Add 'grub' to status stage tracking in request handling
- Add comprehensive test coverage for EFI, GRUB, initramfs, iPXE,
overlay, and provision handlers (efi_test.go, grub_test.go,
initramfs_test.go, ipxe_test.go, overlay_test.go)
- Expand existing parser and provision tests
- Remove shim.go (functionality folded into grub.go)
- Add userdocs/server/routes.rst documenting all warewulfd HTTP routes
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:14 -06:00
Jonathon Anderson
a886b4958b
Simplify and clarify configuration
...
- changed "secure port" to "tls port"
- removed the --create flag for "wwctl configure tls"; made it the default behavior
- fixed a TLS creation bug in "wwctl configure --all"
- added logging to "wwctl configure tls" and "wwctl configure --all" (for the tls case)
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:42:26 -06:00
Jonathon Anderson
6ce3d33f50
Move TLS check into HandleRuntimeOverlay
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:42:26 -06:00
Jonathon Anderson
91723a258a
Refactor server to separate handlers
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:42:18 -06:00
Jonathon Anderson
ced93bcc5a
Rename .Https template variable to .TLS
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
01eef7d88d
Restore dracut's ability to download the runtime overlay
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
02c7d29314
Return an error from wwclient updateSystem
...
Avoiding calling os.Exit() directly.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
6e85852c29
Move defer out of the for loop
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
ff1bf8030c
Remove unused TLS public key
...
The certificate is used in stead of a discrete public key. The generated public
key was never actually used.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
2cac6b11a6
Explicitly set permissions on import TLS keys and certificates
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
26cec668e6
Set an explicit minimum TLS version
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00