Jonathon Anderson
1c9757b683
Update deadcode for golang v1.25 compatibility
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:32:52 +01:00
Jonathon Anderson
cea25f5a87
Update staticcheck for golang v1.25 compatibility
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:32:52 +01:00
Jonathon Anderson
081d2ec61e
Update linter for golang v1.25 compatibility
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:32:49 +01:00
Jonathon Anderson
019408d076
Update to golang v1.25 and x/sys
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:29:51 +01:00
Jonathon Anderson
2699f2628f
Bump additional dependency versions
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:29:51 +01:00
Jonathon Anderson
9a3533237f
Address snyk and dependabot issues
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:29:45 +01:00
Christian Goll
6afaea9d87
Merge pull request #2125 from anderbubble/tlsSec
...
TLS for warewulfd and REST API, and warewulfd refactor
2026-03-11 09:28:42 +01:00
Jonathon Anderson
939f4290f4
Move stage display formatting to wwctl
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-10 16:11:09 -06:00
Jonathon Anderson
abc5f0f0b9
Add doc comments to server code
...
Points to userdocs/server/routes.rst for more information.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-10 15:35:44 -06:00
Jonathon Anderson
5147d0970e
Simplify warewulfd parser
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-10 15:17:40 -06:00
Jonathon Anderson
f78f761be9
Error handling for /newroot mount during single-stage boot
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:20 -06:00
Jonathon Anderson
7b5d2de6ad
Documentation and CHANGELOG updates and corrections
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:20 -06:00
Jonathon Anderson
395fa2c283
Support requiring TLS for API access
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:20 -06:00
Jonathon Anderson
779434331c
Add GRUB config route, tests, and server route documentation
...
- Add /grub/{hwaddr} route for serving GRUB configuration files,
replacing the shim handler with a config-based approach
- Add short URL aliases: 'system' for overlay-system, 'runtime' for
overlay-runtime, and 'grub' stage in parser
- Add 'grub' to status stage tracking in request handling
- Add comprehensive test coverage for EFI, GRUB, initramfs, iPXE,
overlay, and provision handlers (efi_test.go, grub_test.go,
initramfs_test.go, ipxe_test.go, overlay_test.go)
- Expand existing parser and provision tests
- Remove shim.go (functionality folded into grub.go)
- Add userdocs/server/routes.rst documenting all warewulfd HTTP routes
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:14 -06:00
Jonathon Anderson
a886b4958b
Simplify and clarify configuration
...
- changed "secure port" to "tls port"
- removed the --create flag for "wwctl configure tls"; made it the default behavior
- fixed a TLS creation bug in "wwctl configure --all"
- added logging to "wwctl configure tls" and "wwctl configure --all" (for the tls case)
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:42:26 -06:00
Jonathon Anderson
6ce3d33f50
Move TLS check into HandleRuntimeOverlay
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:42:26 -06:00
Jonathon Anderson
91723a258a
Refactor server to separate handlers
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:42:18 -06:00
Jonathon Anderson
ced93bcc5a
Rename .Https template variable to .TLS
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
01eef7d88d
Restore dracut's ability to download the runtime overlay
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
02c7d29314
Return an error from wwclient updateSystem
...
Avoiding calling os.Exit() directly.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
6e85852c29
Move defer out of the for loop
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
ff1bf8030c
Remove unused TLS public key
...
The certificate is used in stead of a discrete public key. The generated public
key was never actually used.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
2cac6b11a6
Explicitly set permissions on import TLS keys and certificates
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
26cec668e6
Set an explicit minimum TLS version
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
3d5aa6b0e3
Better TLS configuration error handling in warewulf server
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
dc21302f32
Warn when server starts with TLS enabled but no key available
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
673d7627b5
Move TLS files from keys/ to tls/
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
226d81647b
Add warewulf.crt to wwinit overlay
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
0eaaf66883
Pass TLS variable to iPXE template
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Christian Goll
5f8b7104a1
added documentation
2026-03-09 21:35:19 -06:00
Christian Goll
b46161dad0
document known bug for ignition
2026-03-09 21:35:18 -06:00
Christian Goll
bcf53f7efd
renamed to tls instead of keys
2026-03-09 21:34:40 -06:00
Christian Goll
c4b8595f20
added documentation
...
foo
2026-03-09 21:34:40 -06:00
Christian Goll
04c54f1907
only server runtime over https if enabled
...
server fix
2026-03-09 21:34:40 -06:00
Christian Goll
2f88b4c3d5
add https in wwclient and wwinit
2026-03-09 21:34:40 -06:00
Christian Goll
a1c11db8cc
enable https and key handling
...
- add key generation and import for warewulfd
- add https port to warewulfd
- configuration optiions for port and
keys
2026-03-09 21:34:40 -06:00
Jonathon Anderson
856223dadd
Merge pull request #2120 from jsco2t/WW-2078
...
Fixing profile comment field from being inherited on nodes
2026-02-25 21:06:12 -06:00
Jonathon Anderson
54b7e4275b
Merge pull request #2119 from mslacken/UpdateDoku
...
document known bug for ignition
2026-02-25 14:35:26 -06:00
Jonathon Anderson
6a24c45b92
Copyediting for new documentation advisement
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-02-25 13:24:37 -07:00
Christian Goll
7551127ec0
document known bug for ignition
2026-02-25 11:52:30 +01:00
jason scott
8397947d3d
Adjusting profile comment field so that it's not inherited by nodes
2026-02-23 15:00:25 -07:00
Jonathon Anderson
76469e7f96
Merge pull request #2115 from warewulf/fix-CVE-2025-69725
...
fix CVE-2025-69725
2026-02-23 12:32:11 -07:00
Christian Goll
dd1c607333
fix CVE-2025-69725
2026-02-23 11:42:20 -07:00
Christian Goll
86bfa69961
Merge pull request #2112 from buzh/specify-type-infiniband
...
Clarify that type: infiniband must be set for NetworkManager IPoIB config
2026-02-12 16:50:15 +01:00
Andreas Skau
6c967efa10
Clarify that type: infiniband must be set for NetworkManager IPoIB config
...
Signed-off-by: Andreas Skau <buzh@uio.no >
2026-02-12 16:26:17 +01:00
Christian Goll
3bf41812b9
Merge pull request #2108 from jeburks2/mig-overlay
...
Nvidia MIG Configuration via new MIG Overlay
2026-02-05 11:10:34 +01:00
root
3c58c556ae
Add entry for new mig overlay in changelog
...
Signed-off-by: root <root@warewulf>
2026-02-04 10:08:35 -07:00
Sujeev-Uthayakumar
6efbe3e0af
update contributors and changelog
2026-02-04 10:08:35 -07:00
Josh Burks
89b25e2750
Add mig overlay directory to package specification
2026-02-04 10:08:35 -07:00
Josh Burks
d5cbf7972c
add wwdoc string and tests for mig overlay
2026-02-04 10:08:35 -07:00