Commit Graph

1617 Commits

Author SHA1 Message Date
Jonathon Anderson
ec6884a878 Refactor gRPC-based node functions
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-23 06:54:41 -06:00
Jonathon Anderson
3c895dd941 Refactor gRPC-based image functions
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-22 01:02:03 -06:00
Jonathon Anderson
dbd54abe46 Migrate wwclient to use runtime/ route
Use the new runtime/ route path instead of provision/ with a stage
query parameter, in preparation for removing the legacy provision/
endpoint.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-19 09:08:31 +01:00
Christian Goll
8a03a7d6dd Merge pull request #2131 from anderbubble/docs-omnibus
Documentation improvements omnibus
2026-03-19 09:06:40 +01:00
Jonathon Anderson
c211529689 Update wwctl upgrade to manage TLS configuration
Also fixed an omission for API configuration in wwctl upgrade.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-18 21:36:43 -06:00
Jonathon Anderson
9e526c23fc Audit and correct documentation, cobra help text, and log messages for accuracy
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-18 16:58:39 -06:00
Jonathon Anderson
4f506e1b16 Clarify functionality of syncuser commands and overlay in documentation
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-18 13:19:01 -06:00
Jonathon Anderson
7909598a3d Distinguish between OS images and overlay images in documentation
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-18 08:10:49 -06:00
jason scott
f39c71f5c2 Adding mitigation for CWE-23 + verification test cases
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-16 12:21:22 -06:00
Jonathon Anderson
5f41465fac Prevent assetkey from leaking into wwclient logs
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-11 10:32:47 +01:00
Christian Goll
82b7cf9095 Adress linter issues from TLS update 2026-03-11 10:15:06 +01:00
Jonathon Anderson
cea25f5a87 Update staticcheck for golang v1.25 compatibility
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-11 09:32:52 +01:00
Jonathon Anderson
081d2ec61e Update linter for golang v1.25 compatibility
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-11 09:32:49 +01:00
Jonathon Anderson
2699f2628f Bump additional dependency versions
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-11 09:29:51 +01:00
Jonathon Anderson
9a3533237f Address snyk and dependabot issues
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-11 09:29:45 +01:00
Jonathon Anderson
939f4290f4 Move stage display formatting to wwctl
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-10 16:11:09 -06:00
Jonathon Anderson
abc5f0f0b9 Add doc comments to server code
Points to userdocs/server/routes.rst for more information.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-10 15:35:44 -06:00
Jonathon Anderson
5147d0970e Simplify warewulfd parser
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-10 15:17:40 -06:00
Jonathon Anderson
395fa2c283 Support requiring TLS for API access
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:48:20 -06:00
Jonathon Anderson
779434331c Add GRUB config route, tests, and server route documentation
- Add /grub/{hwaddr} route for serving GRUB configuration files,
  replacing the shim handler with a config-based approach
- Add short URL aliases: 'system' for overlay-system, 'runtime' for
  overlay-runtime, and 'grub' stage in parser
- Add 'grub' to status stage tracking in request handling
- Add comprehensive test coverage for EFI, GRUB, initramfs, iPXE,
  overlay, and provision handlers (efi_test.go, grub_test.go,
  initramfs_test.go, ipxe_test.go, overlay_test.go)
- Expand existing parser and provision tests
- Remove shim.go (functionality folded into grub.go)
- Add userdocs/server/routes.rst documenting all warewulfd HTTP routes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:48:14 -06:00
Jonathon Anderson
a886b4958b Simplify and clarify configuration
- changed "secure port" to "tls port"
- removed the --create flag for "wwctl configure tls"; made it the default behavior
- fixed a TLS creation bug in "wwctl configure --all"
- added logging to "wwctl configure tls" and "wwctl configure --all" (for the tls case)

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:42:26 -06:00
Jonathon Anderson
6ce3d33f50 Move TLS check into HandleRuntimeOverlay
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:42:26 -06:00
Jonathon Anderson
91723a258a Refactor server to separate handlers
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:42:18 -06:00
Jonathon Anderson
ced93bcc5a Rename .Https template variable to .TLS
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Jonathon Anderson
02c7d29314 Return an error from wwclient updateSystem
Avoiding calling os.Exit() directly.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Jonathon Anderson
6e85852c29 Move defer out of the for loop
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Jonathon Anderson
ff1bf8030c Remove unused TLS public key
The certificate is used in stead of a discrete public key. The generated public
key was never actually used.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Jonathon Anderson
2cac6b11a6 Explicitly set permissions on import TLS keys and certificates
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Jonathon Anderson
26cec668e6 Set an explicit minimum TLS version
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Jonathon Anderson
3d5aa6b0e3 Better TLS configuration error handling in warewulf server
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Jonathon Anderson
dc21302f32 Warn when server starts with TLS enabled but no key available
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Jonathon Anderson
673d7627b5 Move TLS files from keys/ to tls/
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Jonathon Anderson
0eaaf66883 Pass TLS variable to iPXE template
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2026-03-09 21:35:19 -06:00
Christian Goll
bcf53f7efd renamed to tls instead of keys 2026-03-09 21:34:40 -06:00
Christian Goll
04c54f1907 only server runtime over https if enabled
server fix
2026-03-09 21:34:40 -06:00
Christian Goll
2f88b4c3d5 add https in wwclient and wwinit 2026-03-09 21:34:40 -06:00
Christian Goll
a1c11db8cc enable https and key handling
- add key generation and import for warewulfd
- add https port to warewulfd
- configuration optiions for port and

keys
2026-03-09 21:34:40 -06:00
jason scott
8397947d3d Adjusting profile comment field so that it's not inherited by nodes 2026-02-23 15:00:25 -07:00
Christian Goll
1e87f43dfe Merge pull request #2110 from jeburks2/wwdoc-comments
Allow wwdoc comments to have trimmed whitespace
2026-02-04 11:46:12 +01:00
Josh Burks
634982dc86 Enhance wwdoc comment handling by allowing whitespace trimming and updating regex for parsing
Signed-off-by: Josh Burks <jeburks2@asu.edu>
2026-02-03 17:01:19 -07:00
Sujeev-Uthayakumar
0f3f0c3ccf Make naming consistent with regexp.MatchString 2026-01-30 18:06:06 -05:00
Christian Goll
a0efd7fe08 Added --partwipe flag for set 2026-01-21 10:38:47 +01:00
Cédric Clerget
9f2ab5168d Return HTTP 409 status when creating an existing overlay
Signed-off-by: Cédric Clerget <cedric.clerget@gmail.com>
2026-01-14 13:58:12 -07:00
Hyacinthe Cartiaux
aad03b7cd6 Fix a typo in ipmiwrite comment 2026-01-07 23:51:11 +01:00
Christian Goll
f590da4916 fix wwctl image import --update 2025-12-17 12:30:43 -07:00
Jonathon Anderson
f82d90123a Additional tests for wwctl overlay info
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-12-09 23:16:03 -07:00
Jonathon Anderson
9ed245f9fe Update test suite for wwctl overlay info
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-12-09 23:16:03 -07:00
Jonathon Anderson
4e67db0be6 Reflection-based template walking
Rather than deriving the identity of template variables by string parsing the
name, identify its relationship to the underlying struct using reflection.

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-12-09 23:16:00 -07:00
Jonathon Anderson
29136e17d4 Recommended changes from review
- Reorganized documentation
- Reordered columns
- Renamed column names
- Added `--` to options in output
- Updated aliases

Signed-off-by: Jonathon Anderson <janderson@ciq.com>
2025-12-09 22:52:44 -07:00
Christian Goll
0bbab7ac3c allocate writeFile and backupFile just once 2025-12-09 22:52:44 -07:00