Commit Graph

2392 Commits

Author SHA1 Message Date
Jonathon Anderson
2c5e079d33 Refactor overlayDir to container.RunDir()
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-06-07 14:18:19 -06:00
Christian Goll
0eba837950 use warewulf.conf from parent on child
The directories for the overlays needed for the bind
mount are now created under conf.Paths.WWChrootdir/$CONTAINERNAME
with the pattern $CONTAINERNAME-run-xxxxxx. This pattern can be
used as lock, so that there can't be congruent shell/exec calls
to the same container.

Signed-off-by: Christian Goll <cgoll@suse.com>
2024-06-06 16:46:10 -04:00
Christian Goll
dc6db3d565 using the right overlay directory and remove it
Signed-off-by: Christian Goll <cgoll@suse.com>
2024-06-06 16:46:10 -04:00
Jonathon Anderson
88f0b1b50e Merge pull request #1191 from anderbubble/dracut-initramfs-boot
Dracut initramfs boot
2024-06-06 14:41:49 -06:00
Jonathon Anderson
05b951d78d Support dracut booting with GRUB
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-06-06 16:34:53 -04:00
Jonathon Anderson
9500487ad3 Improve the detection of SELinux capable rootfs
initramfs uses tmpfs regardless of whether root=tmpfs in Warewulf. As
such, 90-selinux needs to be updated to detect the actual provenance of
/, rather than the configured setting.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-06-06 03:20:12 -04:00
xu yang
48d6b63030 Add tests for new iPXE template variables
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-06-06 03:20:12 -04:00
Jonathon Anderson
cb5146b098 User documentation for dracut initramfs booting
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-06-06 03:20:12 -04:00
Jonathon Anderson
53dae60e20 New, optional dracut.ipxe configuration
dracut.ipxe boots an initramfs detected in the container image. This
required a few small changes to warewulfd and the wwinit overlay to
accommodate the dracut initramfs configuring the network interface
before wwinit:

- Include .NetDevs in the ipxe configuration template, so that dracut
  can configure interfaces with the correct names.

- Configure NetworkManager to not keep the initramfs configuration, in
  stead applying the configuration found by wwinit.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-06-06 03:20:09 -04:00
Jonathon Anderson
18cebb8652 New warewulf-dracut subpackage
warewulf-dracut includes a dracut module to be installed in a container
image to support building an initramfs that can boot from Warewulf.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-06-06 03:15:08 -04:00
xu yang
a322061fe9 Add initramfs stage to warewulfd
The initramfs stage supports serving an initramfs image from within the
container image, typically generated by dracut.

Signed-off-by: xu yang <xyang@ciq.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-06-06 03:14:21 -04:00
Jonathon Anderson
892db0f089 Merge pull request #1231 from mslacken/Fix1230
Call SSH(keys) on configure --all
2024-06-03 20:21:27 -06:00
Christian Goll
68ca92244d wwctl configure --all calls SSH(keys)
Signed-off-by: Christian Goll <cgoll@suse.com>
2024-06-03 19:36:01 -06:00
Jonathon Anderson
69587b2a2a Merge pull request #1212 from anderbubble/syncuser-refactor
Refactor syncuser to reduce walks of the container fs
2024-06-03 19:22:42 -06:00
Jonathon Anderson
6b8ca378d8 Refactor syncuser to reduce walking the container fs
- Closes #1209

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-06-03 19:18:25 -06:00
Jonathon Anderson
36a508319c Merge pull request #1150 from JasonYangShadow/issue/1130
add CIDR format to warewulf.conf parse
2024-05-31 23:44:12 -06:00
Xu Yang
b3d8f9ccc5 add CIDR format to warewulf.conf parse
Signed-off-by: Xu Yang <xyang@ciq.com>
2024-05-31 23:36:35 -06:00
Jonathon Anderson
a9b226b3dd Update #1215 for backport to v4.5.3
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-31 23:23:13 -06:00
Jonathon Anderson
c4eee345d0 Merge pull request #1219 from griznog/ghcr.io-hpcng-warewulf
Point to warewulf github in installation docs
2024-05-31 23:19:45 -06:00
griznog
c7ad95136a Point URL to warewulf github instead of hpcng 2024-05-31 23:16:52 -06:00
Jonathon Anderson
5d19372f83 Merge pull request #1223 from warewulf/dependabot/go_modules/golang.org/x/net-0.23.0
Bump golang.org/x/net from 0.22.0 to 0.23.0
2024-05-31 23:12:48 -06:00
dependabot[bot]
3b60522540 Bump golang.org/x/net from 0.22.0 to 0.23.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-31 23:05:52 -06:00
Jonathon Anderson
1e74bb9a59 Merge pull request #1228 from griznog/we-use-sphinx-now
Replace ref to docusaurus with Sphinx
2024-05-31 23:02:11 -06:00
griznog
c99d385f47 Replace ref to docusaurus with Sphinx 2024-05-31 22:58:13 -06:00
Jonathon Anderson
71a39557b0 Update PR #1227 for v4.5.3
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-31 22:49:46 -06:00
Christian Goll
9e96977c25 Merge pull request #1227 from griznog/docs-parallel-overlay-builds
Parallel overlay building examples.
2024-05-24 10:21:29 +02:00
griznog
5757162b76 Parallel overlay building examples. 2024-05-23 16:35:27 -07:00
Jonathon Anderson
08b45ed055 Update to release v4.5.2
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-13 21:21:02 -06:00
Jonathon Anderson
a11f9dbc91 Merge pull request #1222 from anderbubble/FixCVE-2024-3727
Update a dependency to address CVE-2024-3727
2024-05-13 21:11:17 -06:00
Christian Goll
9f1062263b Update a dependency to address CVE-2024-3727
see https://github.com/containers/image/releases/tag/v5.30.1

Signed-off-by: Christian Goll <cgoll@suse.com>
2024-05-13 20:59:06 -06:00
Christian Goll
d0c413a9b9 Merge pull request #1215 from Prepultrue/main
Prevent insecurely provisioning arbitrary overlays in secure mode
2024-05-08 09:57:19 +02:00
David McFarlane
41535cb8f9 Also prevent provisioning arbitrary overlays in secure mode
Signed-off-by: David McFarlane <54093156+Prepultrue@users.noreply.github.com>
2024-05-08 11:37:20 +10:00
Christian Goll
5bfaa9f025 Merge pull request #1214 from anderbubble/proxy_http
Document HTTP proxy environment variables
2024-05-07 07:58:00 +02:00
Jonathon Anderson
87c7d0dda3 Document HTTP proxy environment variables
For use in wwctl container import.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-06 23:51:53 -06:00
Jonathon Anderson
8b5c26d5a5 Update top-level changelog to identify v4.6.0
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-06 16:29:16 -06:00
Jonathon Anderson
08e4aa6078 Update 1213 changelog entry for v4.5.2
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-06 16:26:41 -06:00
Christian Goll
0990c3ecdb Merge pull request #1187 from mslacken/SetSSHKeys
allow the user to specify ssh key types
2024-05-06 11:12:06 +02:00
Christian Goll
5fc512747f Merge pull request #1205 from ResearchIT/dnsmasq-ipxe-fix
Reorder dnsmasq config template to put iPXE last
2024-05-06 10:13:59 +02:00
Christian Goll
c5be8b860a Merge pull request #1213 from griznog/doc-fix-1085
doc fix 1085
2024-05-06 08:09:23 +02:00
John Hanks
52ba17480c Updating CHANGELOG 2024-05-05 17:13:11 -05:00
John Hanks
1ddb4a877d Replace --addprofile with --profile 2024-05-05 17:12:48 -05:00
snehring
8971b707f3 Add change to CHANGELOG.md 2024-05-01 16:30:07 -05:00
snehring
6e6344830d Reorder dnsmasq config template to put iPXE last.
Signed-off-by: snehring <snehring@iastate.edu>
2024-05-01 16:22:06 -05:00
Jonathon Anderson
a164498aa5 Documentation for SSH key type configuration
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-01 14:27:39 -06:00
Jonathon Anderson
7046c6dc8c Use the first configured ssh key type for authn
Previously, the authentication key was always generated using rsa. Now
it uses the first configured ssh key type.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-01 14:27:39 -06:00
Christian Goll
21150d2975 make created ssh keys configureable
Signed-off-by: Christian Goll <cgoll@suse.com>
2024-05-01 14:27:39 -06:00
Christian Goll
ad6699c110 allow the user to specify ssh key types
Signed-off-by: Christian Goll <cgoll@suse.com>
2024-05-01 14:27:36 -06:00
Jonathon Anderson
25c0eca21a Merge pull request #1211 from anderbubble/v4.5.1-docs-update
Update docs for v4.5.1 release
2024-05-01 13:52:13 -06:00
Jonathon Anderson
edce316192 Update docs for v4.5.1 release
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2024-05-01 13:47:35 -06:00
Jonathon Anderson
06a50a0a8c Merge pull request #1200 from JasonYangShadow/issue/1195
fix the nightly release build failure
2024-05-01 00:20:47 -06:00