initramfs uses tmpfs regardless of whether root=tmpfs in Warewulf. As
such, 90-selinux needs to be updated to detect the actual provenance of
/, rather than the configured setting.
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
dracut.ipxe boots an initramfs detected in the container image. This
required a few small changes to warewulfd and the wwinit overlay to
accommodate the dracut initramfs configuring the network interface
before wwinit:
- Include .NetDevs in the ipxe configuration template, so that dracut
can configure interfaces with the correct names.
- Configure NetworkManager to not keep the initramfs configuration, in
stead applying the configuration found by wwinit.
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
warewulf-dracut includes a dracut module to be installed in a container
image to support building an initramfs that can boot from Warewulf.
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
The initramfs stage supports serving an initramfs image from within the
container image, typically generated by dracut.
Signed-off-by: xu yang <xyang@ciq.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
This is needed for printing out the values, as at this part in the
code there is no access to the NodeConf and only there the information
if the Entry is ment as a slice or not is available.
Signed-off-by: Christian Goll <cgoll@suse.com>
{{ .Overlay }} contains the overlay name in which the template is
located, or an empty string if RenderTempalte is called outside the
warewulf overlay tree.
- Closes#1052
Signed-off-by: Christian Goll <cgoll@suse.com>
A recent security update breaks compatibility with CentOS 7 through
gpgme. This change omits building the API by default and does not build
it when packaging for EL 7.
- Closes#1171
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
For some reason, adding dhcp as a firewalld service wasn't required for dhcpd;
but it appears to be required for dnsmasq.
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
Building protocol buffers requires fetching utilities from the
Internet. Typically this is done at development time and the finished
buffers are included in dist; but if timestamps get off this can lead
mock to try to rebuild them during an offline build, causing the build
to fail.
This change moves all of the protoc targets into a section of the
Makefile that is disabled during an offline build.
- Closes#1155
Signed-off-by: Jonathon Anderson <janderson@ciq.com>