kelvin/warewulf
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
3,553 Commits 1 Branch 0 Tags
73a71abfe2fe8e601c13068bd02c68405b64549c
Commit Graph

3553 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jonathon Anderson
73a71abfe2 Merge pull request #2095 from jsco2t/CWE-23_internal/pkg/clean/clean.go 
Fix for CWE-23 in internal/pkg/clean/clean.go
 2026-03-16 13:32:18 -06:00
jason scott
f39c71f5c2 Adding mitigation for CWE-23 + verification test cases 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-16 12:21:22 -06:00
Jonathon Anderson
a19bee3777 Merge pull request #2124 from jsco2t/2122-golang-ver-pol 
Updating MAINTAINING.md to document golang version policy
 2026-03-11 09:05:00 -06:00
Christian Goll
b958ac5ab0 Merge pull request #2127 from anderbubble/fix-leaky-wwclient 
Prevent `assetkey` from leaking into wwclient logs
 2026-03-11 10:43:00 +01:00
Jonathon Anderson
5f41465fac Prevent assetkey from leaking into wwclient logs 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 10:32:47 +01:00
Christian Goll
819163e706 Merge pull request #2126 from anderbubble/snyk 
omnibus snyk and dependabot update
 2026-03-11 10:22:09 +01:00
Christian Goll
82b7cf9095 Adress linter issues from TLS update 2026-03-11 10:15:06 +01:00
Jonathon Anderson
1c9757b683 Update deadcode for golang v1.25 compatibility 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:32:52 +01:00
Jonathon Anderson
cea25f5a87 Update staticcheck for golang v1.25 compatibility 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:32:52 +01:00
Jonathon Anderson
081d2ec61e Update linter for golang v1.25 compatibility 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:32:49 +01:00
Jonathon Anderson
019408d076 Update to golang v1.25 and x/sys 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:29:51 +01:00
Jonathon Anderson
2699f2628f Bump additional dependency versions 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:29:51 +01:00
Jonathon Anderson
9a3533237f Address snyk and dependabot issues 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-11 09:29:45 +01:00
Christian Goll
6afaea9d87 Merge pull request #2125 from anderbubble/tlsSec 
TLS for warewulfd and REST API, and warewulfd refactor
 2026-03-11 09:28:42 +01:00
Jonathon Anderson
939f4290f4 Move stage display formatting to wwctl 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-10 16:11:09 -06:00
Jonathon Anderson
abc5f0f0b9 Add doc comments to server code 
Points to userdocs/server/routes.rst for more information.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-10 15:35:44 -06:00
Jonathon Anderson
5147d0970e Simplify warewulfd parser 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-10 15:17:40 -06:00
Jonathon Anderson
f78f761be9 Error handling for /newroot mount during single-stage boot 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:20 -06:00
Jonathon Anderson
7b5d2de6ad Documentation and CHANGELOG updates and corrections 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:20 -06:00
Jonathon Anderson
395fa2c283 Support requiring TLS for API access 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:20 -06:00
Jonathon Anderson
779434331c Add GRUB config route, tests, and server route documentation 
- Add /grub/{hwaddr} route for serving GRUB configuration files,
  replacing the shim handler with a config-based approach
- Add short URL aliases: 'system' for overlay-system, 'runtime' for
  overlay-runtime, and 'grub' stage in parser
- Add 'grub' to status stage tracking in request handling
- Add comprehensive test coverage for EFI, GRUB, initramfs, iPXE,
  overlay, and provision handlers (efi_test.go, grub_test.go,
  initramfs_test.go, ipxe_test.go, overlay_test.go)
- Expand existing parser and provision tests
- Remove shim.go (functionality folded into grub.go)
- Add userdocs/server/routes.rst documenting all warewulfd HTTP routes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:14 -06:00
Jonathon Anderson
a886b4958b Simplify and clarify configuration 
- changed "secure port" to "tls port"
- removed the --create flag for "wwctl configure tls"; made it the default behavior
- fixed a TLS creation bug in "wwctl configure --all"
- added logging to "wwctl configure tls" and "wwctl configure --all" (for the tls case)

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:42:26 -06:00
Jonathon Anderson
6ce3d33f50 Move TLS check into HandleRuntimeOverlay 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:42:26 -06:00
Jonathon Anderson
91723a258a Refactor server to separate handlers 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:42:18 -06:00
Jonathon Anderson
ced93bcc5a Rename .Https template variable to .TLS 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
01eef7d88d Restore dracut's ability to download the runtime overlay 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
02c7d29314 Return an error from wwclient updateSystem 
Avoiding calling os.Exit() directly.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
6e85852c29 Move defer out of the for loop 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
ff1bf8030c Remove unused TLS public key 
The certificate is used in stead of a discrete public key. The generated public
key was never actually used.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
2cac6b11a6 Explicitly set permissions on import TLS keys and certificates 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
26cec668e6 Set an explicit minimum TLS version 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
3d5aa6b0e3 Better TLS configuration error handling in warewulf server 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
dc21302f32 Warn when server starts with TLS enabled but no key available 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
673d7627b5 Move TLS files from keys/ to tls/ 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
226d81647b Add warewulf.crt to wwinit overlay 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
0eaaf66883 Pass TLS variable to iPXE template 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Christian Goll
5f8b7104a1 added documentation 2026-03-09 21:35:19 -06:00
Christian Goll
b46161dad0 document known bug for ignition 2026-03-09 21:35:18 -06:00
Christian Goll
bcf53f7efd renamed to tls instead of keys 2026-03-09 21:34:40 -06:00
Christian Goll
c4b8595f20 added documentation 
foo
 2026-03-09 21:34:40 -06:00
Christian Goll
04c54f1907 only server runtime over https if enabled 
server fix
 2026-03-09 21:34:40 -06:00
Christian Goll
2f88b4c3d5 add https in wwclient and wwinit 2026-03-09 21:34:40 -06:00
Christian Goll
a1c11db8cc enable https and key handling 
- add key generation and import for warewulfd
- add https port to warewulfd
- configuration optiions for port and

keys
 2026-03-09 21:34:40 -06:00
jason scott
880a057aca Updating MAINTAINING.md to document golang version policy 
+ Bumping unreleased version

Signed-off-by: jason scott <jscott@ciq.com>
 2026-03-06 15:59:40 -07:00
Jonathon Anderson
856223dadd Merge pull request #2120 from jsco2t/WW-2078 
Fixing profile comment field from being inherited on nodes
 2026-02-25 21:06:12 -06:00
Jonathon Anderson
54b7e4275b Merge pull request #2119 from mslacken/UpdateDoku 
document known bug for ignition
 2026-02-25 14:35:26 -06:00
Jonathon Anderson
6a24c45b92 Copyediting for new documentation advisement 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-02-25 13:24:37 -07:00
Christian Goll
7551127ec0 document known bug for ignition 2026-02-25 11:52:30 +01:00
jason scott
8397947d3d Adjusting profile comment field so that it's not inherited by nodes 2026-02-23 15:00:25 -07:00
Jonathon Anderson
76469e7f96 Merge pull request #2115 from warewulf/fix-CVE-2025-69725 
fix CVE-2025-69725
 2026-02-23 12:32:11 -07:00