Josh Patterson
1e86be11b2
FIX: install /usr/sbin management scripts as root
...
Salt installed the so-* scripts into /usr/sbin owned by unprivileged service
UIDs (939/socore, plus 930-960 per service) at mode 755, while root executes
those same files from cron, systemd and state cmd.run. Any file-write
primitive as one of those UIDs was therefore root.
Two mechanisms behind this are not visible in the diff:
file.recurse also manages the destination directory, so /usr/sbin itself was
chowned to whichever service UID ran last. A directory's owner may always
chmod it, so that UID could replace even the scripts already declared
user: root -- so-config-backup, so-suricata-eve-clean, so-nsm-mount-nvme.
usr_sbin_perms now pins the directory to root:root 555, the mode the
filesystem RPM ships.
Omitting user:/group: is a no-op on files that already exist, because
check_perms only chowns when a user is named. Explicit user: root is what
lets upgraded grids self-heal on the next highstate, and what makes a
revert chown back rather than silently do nothing.
2026-09-16 10:34:20 -04:00
Josh Patterson
23da0d4ba0
use timestamp in filename to prevent duplicates
2025-11-21 14:49:03 -05:00
Josh Patterson
09d699432a
ui notification of nsm volume creation failure and cleanup of vm inventory in soc grid config for hypervisor
2025-10-10 17:07:02 -04:00
Josh Patterson
e551c6e037
owner and perms of volumes
2025-10-09 10:19:25 -04:00
Josh Patterson
c7edaac42a
nsm volume as vdb, os vda by ordering pci slots
2025-10-07 17:20:11 -04:00
Josh Patterson
a1a8f75409
create and mount volume. being mounted as vda
2025-10-07 16:36:23 -04:00
Josh Patterson
4ab4264f77
merge
2025-10-07 12:26:58 -04:00
Josh Patterson
60cccb21b4
create volume
2025-10-07 12:20:42 -04:00
Josh Patterson
05321cf1ed
add --force-cleanup to nvme raid script
2025-10-02 15:03:11 -04:00
Josh Patterson
86eca53d4b
support for byodmodel
2025-10-01 14:57:25 -04:00
Josh Patterson
9d96a11753
update usage
2025-08-01 08:55:38 -04:00
Josh Patterson
e9e3252bb5
nvme script move nsm if mounted
2025-08-01 08:53:45 -04:00
Josh Patterson
15cbc626c4
resolve for already configured RAID
2025-07-30 16:37:19 -04:00
Josh Patterson
1aa876f4eb
add missing hardware key
2025-07-16 14:20:55 -04:00
Josh Patterson
cd5de5cd05
add sos hw models
2025-07-16 12:14:54 -04:00
Josh Patterson
58ffe576d7
add pci mappings for sos hw
2025-07-16 12:09:39 -04:00
Josh Patterson
1e2453eddf
debug loglevel
2025-06-09 14:47:53 -04:00
Josh Patterson
395c4e37ba
fix issue with predicable names after kernel update
2025-06-04 16:57:59 -04:00
Josh Patterson
08d99a3890
remove unneeded files
2025-05-30 12:50:59 -04:00
Josh Patterson
bf9f92b04e
remove soc_hypervisor.yaml
2025-04-04 13:47:54 -04:00
Josh Patterson
445afca6ee
use vrt
2025-04-03 13:44:13 -04:00
Josh Patterson
2c5861a0c2
ensure local hypervisor dir when new hypervisor key accepted. apply soc.dyanno.hypervisor when hypervisor key accepted
2025-03-05 08:51:10 -05:00
Josh Patterson
1a9d5f151f
change description formatting. include full vm name in HYPERVISORS
2025-02-26 14:28:31 -05:00
Josh Patterson
d6f527881a
allow for destroyed vms to be displayed in ui. VNM cleanup destroyed status files after 48h
2025-02-26 09:06:45 -05:00
Josh Patterson
e0a3b51ca2
md in description
2025-02-25 08:54:04 -05:00
Josh Patterson
3246176c0a
comments
2025-02-21 14:34:08 -05:00
Josh Patterson
b68f561e6f
progress and hw tracking for soc hypervisor dynamic annotations
2025-02-21 09:50:01 -05:00
Josh Patterson
6ff701bd5c
soc ui improvements for hypervisor layout. show free hardware for a hypervisor in the description
2025-02-16 01:33:50 -05:00
Josh Patterson
eb4cd75218
virtual_node_manager lookup hardware from defaults. allocate hw in vm file
2025-02-15 11:29:47 -05:00
Josh Patterson
ad27c8674b
no longer need add_* nodes
2025-02-15 10:50:09 -05:00
Josh Patterson
5123a86062
start of dynamic annotations for hypervisor
2025-02-12 13:21:39 -05:00
m0duspwnens
7159678385
create predicatble interfaces
2025-02-06 15:30:46 -05:00
m0duspwnens
b3969a6ce0
fix hardware passthrough for pci devices
2025-01-24 17:19:41 -05:00
m0duspwnens
9db3cd901c
update documentation of core functionality
2025-01-18 10:45:10 -05:00
m0duspwnens
8ed3f0b1cc
change base image path for so-salt-cloud
2025-01-18 07:30:36 -05:00
m0duspwnens
58be7ae5db
rename from coreol9 or coreol9Small to sool9
2025-01-16 11:16:20 -05:00
m0duspwnens
01ac1cdcca
check features and allowed/states
2025-01-15 14:13:12 -05:00
m0duspwnens
ecc5d64584
move logge def to global
2025-01-09 16:14:57 -05:00
m0duspwnens
6888682f92
add comments for raid scripts
2025-01-09 16:14:01 -05:00
m0duspwnens
f2bd735f51
another script to create raid
2024-12-19 10:13:05 -05:00
m0duspwnens
e779d180f9
work around libvirt issue. add raid scripts
2024-12-13 16:03:17 -05:00
m0duspwnens
efbf62f56a
adding beacon
2024-11-04 08:30:40 -05:00
m0duspwnens
3394588602
sync hypervisor state remote to local
2024-10-29 10:56:18 -04:00
m0duspwnens
0476585370
dynamic annotations
2024-10-22 09:03:02 -04:00
m0duspwnens
dcc1738978
dynamic annotations
2024-10-11 10:46:07 -04:00
m0duspwnens
9f76371449
add libs
2024-10-01 08:33:37 -04:00
m0duspwnens
50bd8448cc
add arg to start vm after modification
2024-09-23 10:13:22 -04:00
m0duspwnens
0b326370bd
script for modifying hardware of a vm
2024-09-20 14:51:36 -04:00
m0duspwnens
d0963baad4
update logging
2024-09-20 14:50:08 -04:00
m0duspwnens
75e8c60fe2
add tools to set dhcp/static ip inside the qcow2 image
2024-09-20 11:03:16 -04:00
Josh Patterson