Jonathon Anderson
7909598a3d
Distinguish between OS images and overlay images in documentation
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-18 08:10:49 -06:00
jason scott
f39c71f5c2
Adding mitigation for CWE-23 + verification test cases
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-16 12:21:22 -06:00
Jonathon Anderson
5f41465fac
Prevent assetkey from leaking into wwclient logs
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 10:32:47 +01:00
Christian Goll
82b7cf9095
Adress linter issues from TLS update
2026-03-11 10:15:06 +01:00
Jonathon Anderson
081d2ec61e
Update linter for golang v1.25 compatibility
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:32:49 +01:00
Jonathon Anderson
9a3533237f
Address snyk and dependabot issues
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-11 09:29:45 +01:00
Jonathon Anderson
939f4290f4
Move stage display formatting to wwctl
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-10 16:11:09 -06:00
Jonathon Anderson
abc5f0f0b9
Add doc comments to server code
...
Points to userdocs/server/routes.rst for more information.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-10 15:35:44 -06:00
Jonathon Anderson
5147d0970e
Simplify warewulfd parser
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-10 15:17:40 -06:00
Jonathon Anderson
395fa2c283
Support requiring TLS for API access
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:20 -06:00
Jonathon Anderson
779434331c
Add GRUB config route, tests, and server route documentation
...
- Add /grub/{hwaddr} route for serving GRUB configuration files,
replacing the shim handler with a config-based approach
- Add short URL aliases: 'system' for overlay-system, 'runtime' for
overlay-runtime, and 'grub' stage in parser
- Add 'grub' to status stage tracking in request handling
- Add comprehensive test coverage for EFI, GRUB, initramfs, iPXE,
overlay, and provision handlers (efi_test.go, grub_test.go,
initramfs_test.go, ipxe_test.go, overlay_test.go)
- Expand existing parser and provision tests
- Remove shim.go (functionality folded into grub.go)
- Add userdocs/server/routes.rst documenting all warewulfd HTTP routes
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:48:14 -06:00
Jonathon Anderson
a886b4958b
Simplify and clarify configuration
...
- changed "secure port" to "tls port"
- removed the --create flag for "wwctl configure tls"; made it the default behavior
- fixed a TLS creation bug in "wwctl configure --all"
- added logging to "wwctl configure tls" and "wwctl configure --all" (for the tls case)
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:42:26 -06:00
Jonathon Anderson
6ce3d33f50
Move TLS check into HandleRuntimeOverlay
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:42:26 -06:00
Jonathon Anderson
91723a258a
Refactor server to separate handlers
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:42:18 -06:00
Jonathon Anderson
ced93bcc5a
Rename .Https template variable to .TLS
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
ff1bf8030c
Remove unused TLS public key
...
The certificate is used in stead of a discrete public key. The generated public
key was never actually used.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
3d5aa6b0e3
Better TLS configuration error handling in warewulf server
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
dc21302f32
Warn when server starts with TLS enabled but no key available
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
673d7627b5
Move TLS files from keys/ to tls/
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Jonathon Anderson
0eaaf66883
Pass TLS variable to iPXE template
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2026-03-09 21:35:19 -06:00
Christian Goll
bcf53f7efd
renamed to tls instead of keys
2026-03-09 21:34:40 -06:00
Christian Goll
04c54f1907
only server runtime over https if enabled
...
server fix
2026-03-09 21:34:40 -06:00
Christian Goll
a1c11db8cc
enable https and key handling
...
- add key generation and import for warewulfd
- add https port to warewulfd
- configuration optiions for port and
keys
2026-03-09 21:34:40 -06:00
jason scott
8397947d3d
Adjusting profile comment field so that it's not inherited by nodes
2026-02-23 15:00:25 -07:00
Christian Goll
1e87f43dfe
Merge pull request #2110 from jeburks2/wwdoc-comments
...
Allow wwdoc comments to have trimmed whitespace
2026-02-04 11:46:12 +01:00
Josh Burks
634982dc86
Enhance wwdoc comment handling by allowing whitespace trimming and updating regex for parsing
...
Signed-off-by: Josh Burks <jeburks2@asu.edu >
2026-02-03 17:01:19 -07:00
Sujeev-Uthayakumar
0f3f0c3ccf
Make naming consistent with regexp.MatchString
2026-01-30 18:06:06 -05:00
Christian Goll
a0efd7fe08
Added --partwipe flag for set
2026-01-21 10:38:47 +01:00
Cédric Clerget
9f2ab5168d
Return HTTP 409 status when creating an existing overlay
...
Signed-off-by: Cédric Clerget <cedric.clerget@gmail.com >
2026-01-14 13:58:12 -07:00
Hyacinthe Cartiaux
aad03b7cd6
Fix a typo in ipmiwrite comment
2026-01-07 23:51:11 +01:00
Christian Goll
f590da4916
fix wwctl image import --update
2025-12-17 12:30:43 -07:00
Jonathon Anderson
4e67db0be6
Reflection-based template walking
...
Rather than deriving the identity of template variables by string parsing the
name, identify its relationship to the underlying struct using reflection.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2025-12-09 23:16:00 -07:00
Christian Goll
0bbab7ac3c
allocate writeFile and backupFile just once
2025-12-09 22:52:44 -07:00
Christian Goll
983a359c00
refactor to overlay info
2025-12-09 22:52:44 -07:00
Christian Goll
d1d398d2ff
add more generic documentation via wwdoc(n)
...
doc
2025-12-09 22:52:44 -07:00
Christian Goll
68758e3e45
use comments of variables for help
2025-12-09 22:52:44 -07:00
Christian Goll
5d284b1c61
show used Tags for overlays
2025-12-09 22:52:44 -07:00
Timothy Middelkoop
5bad8e45fd
IPv6: Add Network6 to tstruct
...
Signed-off-by: Timothy Middelkoop <tmiddelkoop@internet2.edu >
2025-11-30 02:38:33 +00:00
Timothy Middelkoop
3aded908ce
Add overlay variable NetworkCIDR6
...
Signed-off-by: Timothy Middelkoop <tmiddelkoop@internet2.edu >
2025-11-27 19:34:28 +00:00
Timothy Middelkoop
4f58845a9e
Add IPv6 support for Dnsmasq and NetworkManager
...
Signed-off-by: Timothy Middelkoop <tmiddelkoop@internet2.edu >
2025-11-27 01:56:18 +00:00
Timothy Middelkoop
463994976e
Add IpCIDR6 and IPv6 DHCP range
...
Signed-off-by: Timothy Middelkoop <tmiddelkoop@internet2.edu >
2025-11-17 17:53:09 +00:00
Timothy Middelkoop
f9f8fe3673
Remove unused/unneeded Ipv6net config
...
Signed-off-by: Timothy Middelkoop <tmiddelkoop@internet2.edu >
2025-11-16 15:07:34 +00:00
Christian Goll
81a970bbd5
Merge pull request #2051 from cclerget/delete-image-errors
...
Fix ImageDelete API not returning error when checking if image is used by nodes/profiles
2025-11-05 12:30:57 +01:00
Jonathon Anderson
40f0cebe64
Configure destination of grub.cfg at overlay render time
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2025-10-29 21:27:47 -06:00
Jonathon Anderson
be97ef15a0
Manage selinux context of tftp directory
...
- Fixes : #1997
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2025-10-29 20:11:41 -06:00
Cédric Clerget
718c79c7ca
Fix ImageDelete API not returning error when checking if image is used by nodes/profiles
...
Signed-off-by: Cédric Clerget <cedric.clerget@gmail.com >
2025-10-27 16:41:15 -05:00
Jonathon Anderson
91a69e8756
Rename debian.interfaces to ifupdown
...
When I first split the debian interfaces support from wwinit, I was unable to
figure out what it was called. I used the inelegant name "debian.interfaces" to
identify it; but I have since learned that it is called "ifupdown." I have
since learned that there is even a variant implementation, ifupdown-ng, that is
used by Alpine Linux.
This PR renames the overlay to ifupdown, but retains a copy of it at
debian.interfaces for backwards compatibility.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2025-09-15 09:50:59 -06:00
Jonathon Anderson
92375f4ebb
Explicit field names
...
Fields now use the value of a `name` tag on a struct to determine the display
name for a given field. This improves output for boolean-pointer fields, which
otherwise have a P suffix and helper methods to retain backwards-compatibility.
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2025-09-05 14:08:24 -06:00
Jonathon Anderson
59f187bf5e
Convert disk booleans from wwbool to *bool
...
Signed-off-by: Jonathon Anderson <janderson@ciq.com >
2025-09-05 14:16:03 +02:00
Christian Goll
cc946e0b99
removed wwBool.Parse and use Set
2025-09-05 14:16:03 +02:00