12 Commits

Include renames

Author	SHA1	Message	Date
Josh Patterson	098699613e	FIX: pip install wheels from a root-owned directory ... Root ran `pip install --find-links` against directories under /opt/so/conf, which is 939:939 mode 770. Hardening those directories would not have helped: renaming an entry requires write permission on the parent, not on the entry, so uid 939 could move the wheel tree aside and substitute its own between the file.recurse that populates it and the pip install that reads it. clean: True plus the onchanges requisite narrowed that to a race rather than a straight win, but the window is real and the install runs as root. Move both wheel trees to /opt/saltstack, which is created by the salt package and is root-owned, and state the ownership explicitly rather than relying on the files being new: /opt/so/conf/salt/module_packages/docker -> /opt/saltstack/module_packages/docker /opt/so/conf/libvirt/source-packages/libvirt-python -> /opt/saltstack/source-packages/libvirt-python salt.python_modules is included by salt/salt/minion/init.sls, so the docker wheels are staged on every minion in the grid, not just the manager. Upgraded installs keep a now-unused wheel tree in the old socore-writable location, so remove it -- nothing reads it after this change, but leaving a writable staging directory behind serves no purpose.	2026-09-17 12:43:37 -04:00
Josh Patterson	445afca6ee	use vrt	2025-04-03 13:44:13 -04:00
Josh Patterson	c93a5de460	additional changes for managerhype	2025-03-13 10:55:49 -04:00
m0duspwnens	ae01dc9639	manager needs more packages for salt-cloud. change location of priv key for salt-cloud config	2025-01-17 22:26:39 -05:00
m0duspwnens	24eadf2507	add libvirt state to highstate for hypervisor. update allowed_states for libvirt	2025-01-16 17:46:20 -05:00
m0duspwnens	837fbab96d	minimize packages installed on manager for hyper	2025-01-15 17:00:06 -05:00
m0duspwnens	01ac1cdcca	check features and allowed/states	2025-01-15 14:13:12 -05:00
m0duspwnens	ebbfcd169c	add pkg required for so-qcow2-modify-network	2025-01-09 16:17:50 -05:00
m0duspwnens	75e8c60fe2	add tools to set dhcp/static ip inside the qcow2 image	2024-09-20 11:03:16 -04:00
m0duspwnens	aa5de9f7bd	cloud profiles and providers. libvirt net setup	2024-08-13 10:17:45 -04:00
m0duspwnens	64a0c171f3	ssh user, build cloud profiles and providers	2024-08-12 12:47:04 -04:00
m0duspwnens	a28ac3bee6	virt	2024-08-09 11:53:07 -04:00