Commit Graph

124 Commits

Author SHA1 Message Date
Jonathon Anderson
019408d076 Update to golang v1.25 and x/sys
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-11 09:29:51 +01:00
Jonathon Anderson
2699f2628f Bump additional dependency versions
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-11 09:29:51 +01:00
Jonathon Anderson
9a3533237f Address snyk and dependabot issues
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-11 09:29:45 +01:00
Christian Goll
dd1c607333 fix CVE-2025-69725 2026-02-23 11:42:20 -07:00
jason scott
d46dcc2043 Bumping version opencontainers/selinux 2026-01-08 16:12:14 -07:00
Jonathon Anderson
4e67db0be6 Reflection-based template walking
Rather than deriving the identity of template variables by string parsing the
name, identify its relationship to the underlying struct using reflection.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-12-09 23:16:00 -07:00
Jonathon Anderson
be97ef15a0 Manage selinux context of tftp directory
- Fixes: #1997

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-10-29 20:11:41 -06:00
Christian Goll
8360a6ffff Fix CVE-2025-58058 2025-10-20 14:09:59 -06:00
Jonathon Anderson
b98eae4b01 Refactor ignition support during dracut
- Control root device using the node/profile root field
- Add support for `/warewulf/wwinit.d` to run scripts during first stage
- Move first-stage ignition support to `/warewulf/wwinit.d/`
- Add `wwctl <node|profile> set --parttype`
- Add overlay template functions `SystemdEscape` and `SystemdEscapePath`
- Support configuring ignition with resources

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-06-30 23:19:31 -06:00
Jonathon Anderson
f61dfdde87 Use jsonassert in test
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-06-16 17:09:34 -06:00
Jonathon Anderson
b5d72fb393 Address unhandled deadcode issues
- Fix `make deadcode` to properly fail GitHub checks
- Resolve "dead" code by refactoring other code to use it

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-05-10 11:26:11 -06:00
Jonathon Anderson
4005afac4c Add a new OpenAPI v3 REST API to warewulfd at /api
Co-authored-by: jason yang <jasonyangshadow@gmail.com>

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-04-03 07:12:03 -06:00
dependabot[bot]
ea67b4f8e2 Bump github.com/creasty/defaults from 1.7.0 to 1.8.0
Bumps [github.com/creasty/defaults](https://github.com/creasty/defaults) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/creasty/defaults/releases)
- [Commits](https://github.com/creasty/defaults/compare/v1.7.0...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/creasty/defaults
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-18 12:38:14 -06:00
dependabot[bot]
87232272d4 Bump github.com/spf13/cobra from 1.8.1 to 1.9.1
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.8.1 to 1.9.1.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.8.1...v1.9.1)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-18 12:32:41 -06:00
dependabot[bot]
b00c16d46f Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.23.0 to 2.26.1
Bumps [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) from 2.23.0 to 2.26.1.
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.23.0...v2.26.1)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-01 11:25:58 -07:00
Jonathon Anderson
8860cf6bb9 Merge remote-tracking branch 'origin/dependabot/go_modules/github.com/golang/glog-1.2.4' into multi-dependabot 2025-02-24 08:52:44 -07:00
dependabot[bot]
a1aed86c10 Bump github.com/golang/glog from 1.2.3 to 1.2.4
Bumps [github.com/golang/glog](https://github.com/golang/glog) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/golang/glog/releases)
- [Commits](https://github.com/golang/glog/compare/v1.2.3...v1.2.4)

---
updated-dependencies:
- dependency-name: github.com/golang/glog
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-25 00:27:30 +00:00
Jonathon Anderson
cbd2757273 Merge remote-tracking branch 'origin/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5' into multi-dependabot 2025-02-24 08:52:28 -07:00
dependabot[bot]
73686aaa27 Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.2 to 4.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-25 00:27:53 +00:00
Jonathon Anderson
904dd7600e Merge remote-tracking branch 'origin/dependabot/go_modules/golang.org/x/net-0.33.0' into multi-dependabot 2025-02-24 08:51:00 -07:00
dependabot[bot]
e89fbec739 Bump golang.org/x/net from 0.30.0 to 0.33.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.30.0 to 0.33.0.
- [Commits](https://github.com/golang/net/compare/v0.30.0...v0.33.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-25 00:31:08 +00:00
Jonathon Anderson
a52bc2bff3 Merge remote-tracking branch 'origin/dependabot/go_modules/golang.org/x/crypto-0.31.0' into multi-dependabot 2025-02-24 08:28:06 -07:00
dependabot[bot]
fc6904dfdb Bump golang.org/x/crypto from 0.28.0 to 0.31.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.28.0 to 0.31.0.
- [Commits](https://github.com/golang/crypto/compare/v0.28.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-25 00:27:32 +00:00
Jonathon Anderson
3ac059d79b Merge remote-tracking branches 'origin/dependabot/go_modules/main/google.golang.org/protobuf-1.36.5', 'origin/dependabot/go_modules/main/github.com/containers/storage-1.57.1' and 'origin/dependabot/go_modules/main/google.golang.org/grpc-1.70.0' into multi-dependabot
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-02-24 08:06:51 -07:00
dependabot[bot]
9768cd0f4a Bump google.golang.org/grpc from 1.67.1 to 1.70.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.67.1 to 1.70.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.67.1...v1.70.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 23:43:22 +00:00
dependabot[bot]
65828d5051 Bump github.com/containers/storage from 1.55.2 to 1.57.1
Bumps [github.com/containers/storage](https://github.com/containers/storage) from 1.55.2 to 1.57.1.
- [Release notes](https://github.com/containers/storage/releases)
- [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md)
- [Commits](https://github.com/containers/storage/compare/v1.55.2...v1.57.1)

---
updated-dependencies:
- dependency-name: github.com/containers/storage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 23:43:18 +00:00
dependabot[bot]
c99dfa8bf5 Bump google.golang.org/protobuf from 1.35.1 to 1.36.5
Bumps google.golang.org/protobuf from 1.35.1 to 1.36.5.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 23:43:11 +00:00
Christian Goll
bc56e20168 Merge pull request #1583 from warewulf/dependabot/go_modules/main/github.com/coreos/ignition/v2-2.20.0
Bump github.com/coreos/ignition/v2 from 2.19.0 to 2.20.0
2025-02-07 09:10:17 +01:00
Jonathon Anderson
bc52f3b7d7 Recommended changes from review of #1568
- Make Resources an `interface{}` to support arbitrary yaml
- Remove `wwctl resource` as incompatible with arbitrary yaml
- Revert changes to host overlay templates
- Remove NFS mount options from warewulf.conf
- Replace NFS support / resource prefix with "fstab" resource
- Move resources to profiles
- Migrate warewulf.conf mounts to nodes.conf with `wwctl upgrade`
- Add documentation

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-01-17 10:33:37 -07:00
Jonathon Anderson
53e5805fbe Remove os.Umask from overlay.BuildOverlayIndir
Adds tests to ensure that the overlay image contains the correct permissions.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-12-25 08:48:14 -07:00
dependabot[bot]
d35a353f28 Bump github.com/coreos/ignition/v2 from 2.19.0 to 2.20.0
Bumps [github.com/coreos/ignition/v2](https://github.com/coreos/ignition) from 2.19.0 to 2.20.0.
- [Release notes](https://github.com/coreos/ignition/releases)
- [Changelog](https://github.com/coreos/ignition/blob/main/docs/release-notes.md)
- [Commits](https://github.com/coreos/ignition/compare/v2.19.0...v2.20.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/ignition/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-10 10:06:59 +00:00
Jonathon Anderson
c18bcfe3bd Support importing containers from directories containing a socket
- Fixes #892

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-12-09 11:19:48 -07:00
Jonathon Anderson
8f02e932a4 Update github.com/opencontainers/runc to 1.1.14
Addresses https://github.com/warewulf/warewulf/security/dependabot/64

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-12-03 22:17:38 -07:00
dependabot[bot]
396a3c6030 Bump github.com/golang/glog from 1.2.0 to 1.2.3
Bumps [github.com/golang/glog](https://github.com/golang/glog) from 1.2.0 to 1.2.3.
- [Release notes](https://github.com/golang/glog/releases)
- [Commits](https://github.com/golang/glog/compare/v1.2.0...v1.2.3)

---
updated-dependencies:
- dependency-name: github.com/golang/glog
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-03 17:16:09 -07:00
dependabot[bot]
c6f5f58d02 Bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0
Bumps [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) from 3.2.3 to 3.3.0.
- [Release notes](https://github.com/Masterminds/sprig/releases)
- [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0)

---
updated-dependencies:
- dependency-name: github.com/Masterminds/sprig/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-03 17:01:41 -07:00
Beni
86b9d11475 Dockerfile: bump go version, added unzip
Signed-off-by: Benedikt Braunger <braunger@zib.de>
2024-11-22 16:50:19 +01:00
dependabot[bot]
696d4437f7 Bump github.com/fatih/color from 1.17.0 to 1.18.0
Bumps [github.com/fatih/color](https://github.com/fatih/color) from 1.17.0 to 1.18.0.
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](https://github.com/fatih/color/compare/v1.17.0...v1.18.0)

---
updated-dependencies:
- dependency-name: github.com/fatih/color
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-11-14 17:11:04 -07:00
dependabot[bot]
5827c959bb Bump github.com/containers/image/v5 from 5.30.1 to 5.32.2
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-11-14 17:02:13 -07:00
dependabot[bot]
dee7257ace Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.1 to 2.23.0
Bumps [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) from 2.19.1 to 2.23.0.
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.19.1...v2.23.0)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-11-13 02:08:02 +00:00
Jonathon Anderson
a8554b0af5 Replace olekukonko/tablewriter with cheynewallace/tabby
- Closes #1497
- Closes #1498

This library is simpler and doesn't produce extraneous whitespace around
the output.

A local helper function restores "--" for empty output.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-11-07 22:44:50 -07:00
dependabot[bot]
84ffd0dd88 Bump golang.org/x/term from 0.20.0 to 0.25.0
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.20.0 to 0.25.0.
- [Commits](https://github.com/golang/term/compare/v0.20.0...v0.25.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-11-01 17:48:37 -06:00
dependabot[bot]
8654b3b922 Bump google.golang.org/protobuf from 1.34.1 to 1.35.1
Bumps google.golang.org/protobuf from 1.34.1 to 1.35.1.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-11-01 17:38:11 -06:00
dependabot[bot]
bc42ce2bbc Bump github.com/spf13/cobra from 1.8.0 to 1.8.1
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.8.0...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-11-01 17:31:45 -06:00
xu yang
82aaf9b9ec tidy and update related dependencies
Signed-off-by: xu yang <xyang@ciq.com>
2024-10-31 10:34:59 -06:00
dependabot[bot]
fececacefb Bump github.com/containers/storage from 1.53.0 to 1.55.0
Bumps [github.com/containers/storage](https://github.com/containers/storage) from 1.53.0 to 1.55.0.
- [Release notes](https://github.com/containers/storage/releases)
- [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md)
- [Commits](https://github.com/containers/storage/compare/v1.53.0...v1.55.0)

---
updated-dependencies:
- dependency-name: github.com/containers/storage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-31 10:34:59 -06:00
dependabot[bot]
f6a923ac96 Bump github.com/sassoftware/go-rpmutils from 0.2.0 to 0.4.0
Bumps [github.com/sassoftware/go-rpmutils](https://github.com/sassoftware/go-rpmutils) from 0.2.0 to 0.4.0.

- [Release notes](https://github.com/sassoftware/go-rpmutils/releases)
- [Commits](https://github.com/sassoftware/go-rpmutils/compare/v0.2.0...v0.4.0)

Also updates minimum golang version to 1.21, as required.

---
updated-dependencies:
- dependency-name: github.com/sassoftware/go-rpmutils
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-10-30 20:44:58 -06:00
Christian Goll
cb9e6e8be0 Removed rest of direct yaml.v2 deps
Signed-off-by: Christian Goll <cgoll@suse.com>
2024-10-25 14:33:57 -06:00
Christian Goll
28a7b9fe84 removed NodeInfo and using NodeConf instead
This is a significant change in the undelying data model!

nodeDb, err := node.New()

will result in a structure which contains the on disk
values. Only

nodeDb.FindAllNodes() or nodeDb.GetNode(id) will give
the nodes with its merged in profiles.

Signed-off-by: Christian Goll <cgoll@suse.com>
2024-10-17 13:35:42 -04:00
xu yang
31c980f731 fix autodetected kernel sorting
Signed-off-by: xu yang <xyang@ciq.com>
2024-09-19 15:13:52 -06:00
dependabot[bot]
797f3bcc2e Bump github.com/coreos/ignition/v2 from 2.15.0 to 2.19.0
Bumps [github.com/coreos/ignition/v2](https://github.com/coreos/ignition) from 2.15.0 to 2.19.0.
- [Release notes](https://github.com/coreos/ignition/releases)
- [Changelog](https://github.com/coreos/ignition/blob/main/docs/release-notes.md)
- [Commits](https://github.com/coreos/ignition/compare/v2.15.0...v2.19.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/ignition/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-10 23:35:58 -06:00