kelvin/warewulf
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
3,543 Commits 1 Branch 0 Tags
081d2ec61ec2e112b983dc751a5a913089f2409b
Commit Graph

3543 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jonathon Anderson
081d2ec61e Update linter for golang v1.25 compatibility 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:32:49 +01:00
Jonathon Anderson
019408d076 Update to golang v1.25 and x/sys 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:29:51 +01:00
Jonathon Anderson
2699f2628f Bump additional dependency versions 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:29:51 +01:00
Jonathon Anderson
9a3533237f Address snyk and dependabot issues 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:29:45 +01:00
Christian Goll
6afaea9d87 Merge pull request #2125 from anderbubble/tlsSec 
TLS for warewulfd and REST API, and warewulfd refactor
 2026-03-11 09:28:42 +01:00
Jonathon Anderson
939f4290f4 Move stage display formatting to wwctl 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-10 16:11:09 -06:00
Jonathon Anderson
abc5f0f0b9 Add doc comments to server code 
Points to userdocs/server/routes.rst for more information.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-10 15:35:44 -06:00
Jonathon Anderson
5147d0970e Simplify warewulfd parser 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-10 15:17:40 -06:00
Jonathon Anderson
f78f761be9 Error handling for /newroot mount during single-stage boot 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:20 -06:00
Jonathon Anderson
7b5d2de6ad Documentation and CHANGELOG updates and corrections 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:20 -06:00
Jonathon Anderson
395fa2c283 Support requiring TLS for API access 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:20 -06:00
Jonathon Anderson
779434331c Add GRUB config route, tests, and server route documentation 
- Add /grub/{hwaddr} route for serving GRUB configuration files,
  replacing the shim handler with a config-based approach
- Add short URL aliases: 'system' for overlay-system, 'runtime' for
  overlay-runtime, and 'grub' stage in parser
- Add 'grub' to status stage tracking in request handling
- Add comprehensive test coverage for EFI, GRUB, initramfs, iPXE,
  overlay, and provision handlers (efi_test.go, grub_test.go,
  initramfs_test.go, ipxe_test.go, overlay_test.go)
- Expand existing parser and provision tests
- Remove shim.go (functionality folded into grub.go)
- Add userdocs/server/routes.rst documenting all warewulfd HTTP routes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:14 -06:00
Jonathon Anderson
a886b4958b Simplify and clarify configuration 
- changed "secure port" to "tls port"
- removed the --create flag for "wwctl configure tls"; made it the default behavior
- fixed a TLS creation bug in "wwctl configure --all"
- added logging to "wwctl configure tls" and "wwctl configure --all" (for the tls case)

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:42:26 -06:00
Jonathon Anderson
6ce3d33f50 Move TLS check into HandleRuntimeOverlay 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:42:26 -06:00
Jonathon Anderson
91723a258a Refactor server to separate handlers 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:42:18 -06:00
Jonathon Anderson
ced93bcc5a Rename .Https template variable to .TLS 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
01eef7d88d Restore dracut's ability to download the runtime overlay 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
02c7d29314 Return an error from wwclient updateSystem 
Avoiding calling os.Exit() directly.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
6e85852c29 Move defer out of the for loop 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
ff1bf8030c Remove unused TLS public key 
The certificate is used in stead of a discrete public key. The generated public
key was never actually used.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
2cac6b11a6 Explicitly set permissions on import TLS keys and certificates 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
26cec668e6 Set an explicit minimum TLS version 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
3d5aa6b0e3 Better TLS configuration error handling in warewulf server 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
dc21302f32 Warn when server starts with TLS enabled but no key available 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
673d7627b5 Move TLS files from keys/ to tls/ 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
226d81647b Add warewulf.crt to wwinit overlay 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
0eaaf66883 Pass TLS variable to iPXE template 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Christian Goll
5f8b7104a1 added documentation 2026-03-09 21:35:19 -06:00
Christian Goll
b46161dad0 document known bug for ignition 2026-03-09 21:35:18 -06:00
Christian Goll
bcf53f7efd renamed to tls instead of keys 2026-03-09 21:34:40 -06:00
Christian Goll
c4b8595f20 added documentation 
foo
 2026-03-09 21:34:40 -06:00
Christian Goll
04c54f1907 only server runtime over https if enabled 
server fix
 2026-03-09 21:34:40 -06:00
Christian Goll
2f88b4c3d5 add https in wwclient and wwinit 2026-03-09 21:34:40 -06:00
Christian Goll
a1c11db8cc enable https and key handling 
- add key generation and import for warewulfd
- add https port to warewulfd
- configuration optiions for port and

keys
 2026-03-09 21:34:40 -06:00
Jonathon Anderson
856223dadd Merge pull request #2120 from jsco2t/WW-2078 
Fixing profile comment field from being inherited on nodes
 2026-02-25 21:06:12 -06:00
Jonathon Anderson
54b7e4275b Merge pull request #2119 from mslacken/UpdateDoku 
document known bug for ignition
 2026-02-25 14:35:26 -06:00
Jonathon Anderson
6a24c45b92 Copyediting for new documentation advisement 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-02-25 13:24:37 -07:00
Christian Goll
7551127ec0 document known bug for ignition 2026-02-25 11:52:30 +01:00
jason scott
8397947d3d Adjusting profile comment field so that it's not inherited by nodes 2026-02-23 15:00:25 -07:00
Jonathon Anderson
76469e7f96 Merge pull request #2115 from warewulf/fix-CVE-2025-69725 
fix CVE-2025-69725
 2026-02-23 12:32:11 -07:00
Christian Goll
dd1c607333 fix CVE-2025-69725 2026-02-23 11:42:20 -07:00
Christian Goll
86bfa69961 Merge pull request #2112 from buzh/specify-type-infiniband 
Clarify that type: infiniband must be set for NetworkManager IPoIB config
 2026-02-12 16:50:15 +01:00
Andreas Skau
6c967efa10 Clarify that type: infiniband must be set for NetworkManager IPoIB config 
Signed-off-by: Andreas Skau <buzh@uio.no>
 2026-02-12 16:26:17 +01:00
Christian Goll
3bf41812b9 Merge pull request #2108 from jeburks2/mig-overlay 
Nvidia MIG Configuration via new MIG Overlay
 2026-02-05 11:10:34 +01:00
root
3c58c556ae Add entry for new mig overlay in changelog 
Signed-off-by: root <root@warewulf>
 2026-02-04 10:08:35 -07:00
Sujeev-Uthayakumar
6efbe3e0af update contributors and changelog 2026-02-04 10:08:35 -07:00
Josh Burks
89b25e2750 Add mig overlay directory to package specification 2026-02-04 10:08:35 -07:00
Josh Burks
d5cbf7972c add wwdoc string and tests for mig overlay 2026-02-04 10:08:35 -07:00
Josh Burks
c49f28cfdd run make fmt 2026-02-04 10:08:35 -07:00
root
b7adf23703 Add entry for new mig overlay in changelog 
Signed-off-by: root <root@warewulf>
 2026-02-04 10:08:35 -07:00