kelvin/warewulf
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
3,534 Commits 1 Branch 0 Tags
7b5d2de6ad769576c07e5ab1703dead319dff8a1
Commit Graph

3534 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jonathon Anderson
7b5d2de6ad Documentation and CHANGELOG updates and corrections 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:20 -06:00
Jonathon Anderson
395fa2c283 Support requiring TLS for API access 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:20 -06:00
Jonathon Anderson
779434331c Add GRUB config route, tests, and server route documentation 
- Add /grub/{hwaddr} route for serving GRUB configuration files,
  replacing the shim handler with a config-based approach
- Add short URL aliases: 'system' for overlay-system, 'runtime' for
  overlay-runtime, and 'grub' stage in parser
- Add 'grub' to status stage tracking in request handling
- Add comprehensive test coverage for EFI, GRUB, initramfs, iPXE,
  overlay, and provision handlers (efi_test.go, grub_test.go,
  initramfs_test.go, ipxe_test.go, overlay_test.go)
- Expand existing parser and provision tests
- Remove shim.go (functionality folded into grub.go)
- Add userdocs/server/routes.rst documenting all warewulfd HTTP routes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:48:14 -06:00
Jonathon Anderson
a886b4958b Simplify and clarify configuration 
- changed "secure port" to "tls port"
- removed the --create flag for "wwctl configure tls"; made it the default behavior
- fixed a TLS creation bug in "wwctl configure --all"
- added logging to "wwctl configure tls" and "wwctl configure --all" (for the tls case)

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:42:26 -06:00
Jonathon Anderson
6ce3d33f50 Move TLS check into HandleRuntimeOverlay 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:42:26 -06:00
Jonathon Anderson
91723a258a Refactor server to separate handlers 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:42:18 -06:00
Jonathon Anderson
ced93bcc5a Rename .Https template variable to .TLS 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
01eef7d88d Restore dracut's ability to download the runtime overlay 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
02c7d29314 Return an error from wwclient updateSystem 
Avoiding calling os.Exit() directly.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
6e85852c29 Move defer out of the for loop 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
ff1bf8030c Remove unused TLS public key 
The certificate is used in stead of a discrete public key. The generated public
key was never actually used.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
2cac6b11a6 Explicitly set permissions on import TLS keys and certificates 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
26cec668e6 Set an explicit minimum TLS version 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
3d5aa6b0e3 Better TLS configuration error handling in warewulf server 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
dc21302f32 Warn when server starts with TLS enabled but no key available 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
673d7627b5 Move TLS files from keys/ to tls/ 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
226d81647b Add warewulf.crt to wwinit overlay 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Jonathon Anderson
0eaaf66883 Pass TLS variable to iPXE template 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-03-09 21:35:19 -06:00
Christian Goll
5f8b7104a1 added documentation 2026-03-09 21:35:19 -06:00
Christian Goll
b46161dad0 document known bug for ignition 2026-03-09 21:35:18 -06:00
Christian Goll
bcf53f7efd renamed to tls instead of keys 2026-03-09 21:34:40 -06:00
Christian Goll
c4b8595f20 added documentation 
foo
 2026-03-09 21:34:40 -06:00
Christian Goll
04c54f1907 only server runtime over https if enabled 
server fix
 2026-03-09 21:34:40 -06:00
Christian Goll
2f88b4c3d5 add https in wwclient and wwinit 2026-03-09 21:34:40 -06:00
Christian Goll
a1c11db8cc enable https and key handling 
- add key generation and import for warewulfd
- add https port to warewulfd
- configuration optiions for port and

keys
 2026-03-09 21:34:40 -06:00
Jonathon Anderson
856223dadd Merge pull request #2120 from jsco2t/WW-2078 
Fixing profile comment field from being inherited on nodes
 2026-02-25 21:06:12 -06:00
Jonathon Anderson
54b7e4275b Merge pull request #2119 from mslacken/UpdateDoku 
document known bug for ignition
 2026-02-25 14:35:26 -06:00
Jonathon Anderson
6a24c45b92 Copyediting for new documentation advisement 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
 2026-02-25 13:24:37 -07:00
Christian Goll
7551127ec0 document known bug for ignition 2026-02-25 11:52:30 +01:00
jason scott
8397947d3d Adjusting profile comment field so that it's not inherited by nodes 2026-02-23 15:00:25 -07:00
Jonathon Anderson
76469e7f96 Merge pull request #2115 from warewulf/fix-CVE-2025-69725 
fix CVE-2025-69725
 2026-02-23 12:32:11 -07:00
Christian Goll
dd1c607333 fix CVE-2025-69725 2026-02-23 11:42:20 -07:00
Christian Goll
86bfa69961 Merge pull request #2112 from buzh/specify-type-infiniband 
Clarify that type: infiniband must be set for NetworkManager IPoIB config
 2026-02-12 16:50:15 +01:00
Andreas Skau
6c967efa10 Clarify that type: infiniband must be set for NetworkManager IPoIB config 
Signed-off-by: Andreas Skau <buzh@uio.no>
 2026-02-12 16:26:17 +01:00
Christian Goll
3bf41812b9 Merge pull request #2108 from jeburks2/mig-overlay 
Nvidia MIG Configuration via new MIG Overlay
 2026-02-05 11:10:34 +01:00
root
3c58c556ae Add entry for new mig overlay in changelog 
Signed-off-by: root <root@warewulf>
 2026-02-04 10:08:35 -07:00
Sujeev-Uthayakumar
6efbe3e0af update contributors and changelog 2026-02-04 10:08:35 -07:00
Josh Burks
89b25e2750 Add mig overlay directory to package specification 2026-02-04 10:08:35 -07:00
Josh Burks
d5cbf7972c add wwdoc string and tests for mig overlay 2026-02-04 10:08:35 -07:00
Josh Burks
c49f28cfdd run make fmt 2026-02-04 10:08:35 -07:00
root
b7adf23703 Add entry for new mig overlay in changelog 
Signed-off-by: root <root@warewulf>
 2026-02-04 10:08:35 -07:00
root
2612864a1c Add documentation for MIG overlay configuration and usage 
Signed-off-by: root <root@warewulf>
 2026-02-04 10:08:35 -07:00
root
2a806b1c51 Add tests for mig overlay 
Signed-off-by: root <root@warewulf>
 2026-02-04 10:08:35 -07:00
root
c78f40ec3d Move NVIDIA MIG configuration to pure systemd with templating, and colon seperating GPU indexs instead of spaces 
Signed-off-by: root <root@warewulf>
 2026-02-04 10:08:35 -07:00
Josh Burks
cc20a65848 Add MIG overlay support with configuration and service files 2026-02-04 10:08:35 -07:00
Christian Goll
1e87f43dfe Merge pull request #2110 from jeburks2/wwdoc-comments 
Allow wwdoc comments to have trimmed whitespace
 2026-02-04 11:46:12 +01:00
Josh Burks
634982dc86 Enhance wwdoc comment handling by allowing whitespace trimming and updating regex for parsing 
Signed-off-by: Josh Burks <jeburks2@asu.edu>
 2026-02-03 17:01:19 -07:00
Christian Goll
85ff20158b Merge pull request #2107 from Sujeev-Uthayakumar/feature/match-string-ordering 
Make naming consistent with regexp.MatchString
 2026-02-02 15:08:50 +01:00
Sujeev-Uthayakumar
d8ecd27191 update contributors and changelog 2026-02-02 08:59:39 -05:00
Sujeev-Uthayakumar
0f3f0c3ccf Make naming consistent with regexp.MatchString 2026-01-30 18:06:06 -05:00