Commit graph

469 commits

Author SHA1 Message Date
Anders Ingemann
8a8d07991e Merge pull request #291 from nbraud/admin_user
admin_user plugin: Fix non-EC2 behaviour
2016-03-01 00:01:12 +01:00
Nicolas Braud-Santoni
72a9975ed9 admin_user: Add warnings 2016-02-29 20:15:24 +01:00
Zach Marano
c34d7d11c8 Only include bare essential packages in the GCE provider task. Move
extras to the manifest files.
2016-02-29 10:38:34 -08:00
Zach Marano
74a8aae6ac Cleanup package list and add in packages that were being added outside
of bootstrap-vz. Remove i386 kernels that GCE does not support as well
as squeeze, and add in a stretch kernel.
2016-02-26 16:24:20 -08:00
Anders Ingemann
e961438904 chown/chgrp entire .ssh dir to admin_user
Fixes #295
2016-02-25 08:27:27 +01:00
Nicolas Braud-Santoni
79b3803d64 admin_user plugin: Fix non-EC2 behaviour 2016-02-24 03:20:52 +01:00
Anders Ingemann
151dcf5a85 Merge pull request #290 from nbraud/debconf
Add a debconf plugin
2016-02-23 18:06:43 +01:00
Nicolas Braud-Santoni
b4b7fa6bc2 plugins/debconf: Documentation 2016-02-23 17:30:17 +01:00
Nicolas Braud-Santoni
ad79b63c19 Add 'debconf' plugin
Closes #282
2016-02-23 17:30:17 +01:00
Tiago Ilieve
9e6028799a oracle: use 'Bytes' instead of custom calculation 2016-02-22 21:39:31 -03:00
Tiago Ilieve
5f9152bec3 oracle: connect to the API when instantiating 2016-02-22 21:17:36 -03:00
Nicolas Braud-Santoni
7c5e5d111d manifest-schema: Relax requirements for plugins
This lets plugins define arbitrary datatypes for their configuration,
  not only objects.

Also, `additionalProperties` was not specified, so entries with
  arbitrary names could be added.  This isn't the case anymore.
2016-02-22 15:16:45 +01:00
Tiago Ilieve
e1d296d5dc oracle: clarify 'credentials' usage a little bit 2016-02-22 10:10:51 -03:00
Tiago Ilieve
a5a6dedfb3 oracle: remove unused assets initialization 2016-02-22 10:07:32 -03:00
Tiago Ilieve
0fa99e71c6 oracle: add documentation about image upload/check 2016-02-19 21:19:45 -02:00
Tiago Ilieve
bd431abd3a oracle: fix API client messages' log level 2016-02-19 21:16:16 -02:00
Tiago Ilieve
54870ab396 oracle: add image tarball upload/check tasks 2016-02-19 21:16:16 -02:00
Tiago Ilieve
c07f56b796 oracle: update schema and validation 2016-02-19 21:16:16 -02:00
Tiago Ilieve
12dbc6a07e oracle: add tasks to upload and verify images 2016-02-19 21:16:15 -02:00
Tiago Ilieve
94559e1d8e oracle: add 'OracleStorageAPIClient'
This client will be used to upload images to Oracle Compute Cloud,
through the Oracle Storage Cloud API.
2016-02-19 21:16:15 -02:00
Tiago Ilieve
fffe69b855 oracle: add 'Compute' to 'Oracle Cloud' 2016-02-19 21:16:15 -02:00
Anders Ingemann
3d2088ad2a Fixes #285 admin_user, the sshdir check didn't check in the chroot 2016-02-18 18:23:48 +01:00
Anders Ingemann
73acb1f0d3 Fix breakage of admin_user module
Fixes #284
classnames were changed without testing
2016-02-16 20:43:53 +01:00
Anders Ingemann
b681ae8c0e Merge pull request #281 from srivasta/master
[set localtime]: Set /etc/localtime by either copying or symlinking
2016-02-12 08:25:59 +01:00
Manoj Srivastava
4fc3b69d81
[set localtime]: Update locale group tasks
Convert the locale group tasks frmom a simple list to a function. This
now matches the other non-simple task groups.

Signed-off-by: Manoj Srivastava <srivasta@golden-gryphon.com>
2016-02-11 16:00:26 -08:00
Manoj Srivastava
b20ce793a4
[set localtime]: Set /etc/localtime by either copying or symlinking
Starting in version 2016a-1 (circa Jan 2016) the package tzdata
changed /etc/timezone into a symlink. This change is in unstable,
testing, and will be in the next release (stretch). This commit checks
the release, and creates a task to either copy the contents of the
zoneinfo file (jessie and older) or create a symbolic link (newer than
jessie).

Signed-off-by: Manoj Srivastava <srivasta@golden-gryphon.com>
2016-02-10 13:47:12 -08:00
Anders Ingemann
ddfd8a2fd3 admin_user: Allow pubkey & password to be used together
Also change README a little, add some comments and get the code
a little more in line with the style of bootstrap-vz
2016-02-10 22:12:02 +01:00
Anders Ingemann
a6e4b40268 Merge pull request #252 from srivasta/master
[admin_user]: Added support for password and static pubkey auth
2016-02-10 21:24:11 +01:00
Manoj Srivastava
4a29e5eec5
Bit by os.path.join not liking leading /
join ignores all path components to the left of any component that
starts with a /. Tested and found working.

Signed-off-by: Manoj Srivastava <srivasta@golden-gryphon.com>
2016-02-08 02:50:55 -08:00
Tiago Ilieve
6f6e65d28b oracle: update README
- Convert from markdown to rst
- Remove step-by-step build tutorial, which was moved to the Debian Wiki
2016-02-06 19:47:13 -02:00
Tiago Ilieve
992100d00a oracle: remove custom gzipped kernel
Since Xen HVM is supported on Oracle Cloud, the default kernels
compressed with XZ can be booted with no problem.
2016-02-06 19:13:55 -02:00
Tiago Ilieve
925986e4c6 oracle: remove unused import 2016-02-06 19:13:55 -02:00
Tiago Ilieve
c7a7b523cf oracle: fix SSH tasks
Add common group "ssh_group" (which disables password authentication,
etc.) and disable root login.
2016-02-06 19:13:55 -02:00
Tiago Ilieve
2219e23ae4 oracle: remove unused imports from 'tasks.network' 2016-02-06 19:13:55 -02:00
Tiago Ilieve
c22247be81 oracle: remove cloud-init customization
It is working now out-of-the-box with "Ec2" metadata source.
2016-02-06 19:13:55 -02:00
Tiago Ilieve
7786b9362d Add Oracle provider (Work-In-Progress) 2016-02-06 19:13:55 -02:00
Manoj Srivastava
32ef6fc571
[admin_user]: More cleanups. Remove uneeded tests.
Signed-off-by: Manoj Srivastava <srivasta@golden-gryphon.com>
2016-02-06 02:15:52 -08:00
Manoj Srivastava
efeddc43a8
[admin_user]: Update per comments
As requested, this commit converts to tab indentation.

Signed-off-by: Manoj Srivastava <srivasta@golden-gryphon.com>
2016-02-06 01:18:00 -08:00
Manoj Srivastava
a56f20657b
[admin_user]: Added support for password and static pubkey auth
This commit adds authentication optionally with passwords or static
ssh pubkeys for the admin user.

There are now three ways to grant access to the admin user:
-  Set a password for the user, or
-  Provide a ssh public key to allow remote ssh login, or
-  Use the EC2 public key (EC2 machines only)

If a password is provided, this plugin sets the admin password. This
also re-enables password login (off by default in Jessie).

If the optional argument pubkey is present (it should be a full path
to a ssh public key), it will ensure that the ssh public key is used
to set up password less remote login for the admin user.

Only one of these options (password, or pubkey) may be specified.

If neither the password not a ssh public key location are specified,
and if the EC2 init scripts are installed, the script for fetching the
SSH authorized keys will be adjust to match the username specified.

Fixes: https://github.com/andsens/bootstrap-vz/issues/248

Signed-off-by: Manoj Srivastava <srivasta@google.com>
2016-02-06 00:39:20 -08:00
Manoj Srivastava
67284eaae5
[admin_user]: Added support for password and static pubkey auth
This commit adds authentication optionally with passwords or static
ssh pubkeys for the admin user.

There are now three ways to grant access to the admin user:
-  Set a password for the user, or
-  Provide a ssh public key to allow remote ssh login, or
-  Use the EC2 public key (EC2 machines only)

If a password is provided, this plugin sets the admin password. This
also re-enables password login (off by default in Jessie).

If the optional argument pubkey is present (it should be a full path
to a ssh public key), it will ensure that the ssh public key is used
to set up password less remote login for the admin user.

Only one of these options (password, or pubkey) may be specified.

If neither the password not a ssh public key location are specified,
and if the EC2 init scripts are installed, the script for fetching the
SSH authorized keys will be adjust to match the username specified.

Fixes: https://github.com/andsens/bootstrap-vz/issues/248

Signed-off-by: Manoj Srivastava <srivasta@google.com>
2016-02-06 00:39:20 -08:00
Jesse Szwedko
433cbf2ae4 Only sed in growpart workaround when release is >= jessie
This script is only needed/created on jessie or later distros.

Signed-off-by: Andrew Garrett <andrew.garrett@getbraintree.com>
2016-01-13 18:50:41 +00:00
Jesse Szwedko
7f9ee9d22c Write Jessie growpart workaround script to something other than growpart
In case growpart is installed. Sed this workaround path into the init.d
script.

Signed-off-by: Andrew Garrett <andrew.garrett@getbraintree.com>
2016-01-12 19:12:57 +00:00
Jesse Szwedko
bbcb62c4f3 Making growpart workaround description more verbose
Signed-off-by: Andrew Garrett <andrew.garrett@getbraintree.com>
2016-01-12 19:09:09 +00:00
Jesse Szwedko
2ece5a66e1 sed in root_device_path into expand-root
To make it more flexible

Signed-off-by: Andrew Garrett <andrew.garrett@getbraintree.com>
2016-01-12 18:46:26 +00:00
Jesse Szwedko
4e94880b2a Only add growpart workaround on >= Jessie
Works on previous distributions

Signed-off-by: Andrew Garrett <andrew.garrett@getbraintree.com>
2016-01-12 18:46:26 +00:00
Jesse Szwedko
4429c226a8 Use hash instead of which in expand-root
Also remove the variable since we established that it is already in the
$PATH

Signed-off-by: Andrew Garrett <andrew.garrett@getbraintree.com>
2016-01-12 18:46:26 +00:00
Jesse Szwedko
78b796be5b Exit 1 in expand-root if there was an error
Signed-off-by: Andrew Garrett <andrew.garrett@getbraintree.com>
2016-01-12 18:46:26 +00:00
Jonh Wendell
c477c32e4a EC2: Added growpart script
This is an attempt to fix issue #237

The script "growpart" was added as an asset, because
Debian's Jessie version (inside cloud-utils) package is
outdated and buggy.

Then "expand-root" init script was modified to call growpart
before calling resize2fs. In fact, calling resize2fs without
resizing the partition first is useless.

The task was named 'AddWorkaroundGrowpart' because it must
go away in the future in favor of using recent stuff in cloud-utils.

Currently even the official images suffer this issue, that makes
the system use only 8 GiB, even if the user chooses a bigger
storage size inside AWS.
2016-01-12 18:46:20 +00:00
gkranis
56e98bd102 Remove stale requirement
omission from c880a6849a ?
2016-01-12 09:13:03 +02:00
Clark Laughlin
46594b1ef0 enable support for creating kvm images for jessie on arm64 2016-01-08 13:06:57 -06:00