Josh Patterson
1f1d3ded41
FIX: root-own the Salt default tree so a SOC file-write cannot reach root code
...
/opt/so/saltstack/default holds the source for every root-executed script --
/usr/sbin, the reactors, _runners/_modules/_beacons, the master engines and
salt-relay.sh -- plus every state the root master renders. SOC mounts
/opt/so/saltstack rw as uid 939, so root-owning /usr/sbin alone was not
enough: the next highstate would copy attacker-controlled bytes out of the
tree into the root-owned destination and run them.
SOC never writes under default/, it only reads it. Every SOC write targets
local/, which stays socore-owned, as does /opt/so/state. No mode is enforced
on default/ -- SOC reads that tree, and 750/640 would break its config load.
Also stops copy_new_files(), so-saltstack-update and setup from chowning the
tree back to socore, and replaces preserve: True in soup_scripts.sls, which
carried uid/gid in from the /tmp staging tree and would have undone the
ownership before the first post-soup highstate.
2026-09-16 10:34:21 -04:00
Josh Patterson
fb5ad4193d
indicate base image download start
2025-11-20 17:13:36 -05:00
Josh Patterson
1f5f283c06
update hypervisor annotaion. preinit instead of initialized
2025-11-20 16:53:55 -05:00
Josh Patterson
97c1a46013
update annotation for general failure
2025-11-20 15:08:04 -05:00
Josh Patterson
841ce6b6ec
update hypervisor annotation for image download or ssh key creation failure
2025-11-20 13:55:22 -05:00
Josh Patterson
348809bdbb
implement host os overhead based on role
2025-10-15 10:30:14 -04:00
Josh Patterson
f9c5aa3fef
remove PROCESS_STEPS from hypervisor annotation
2025-10-14 09:36:05 -04:00
Josh Patterson
254e782da6
add volume creation and configuration process steps
2025-10-10 22:15:20 -04:00
Josh Patterson
fe3caf66a1
update failure description
2025-10-10 17:21:09 -04:00
Josh Patterson
09d699432a
ui notification of nsm volume creation failure and cleanup of vm inventory in soc grid config for hypervisor
2025-10-10 17:07:02 -04:00
Josh Patterson
a3e7649a3c
minor hypervisor annotation
2025-10-08 13:52:34 -04:00
Josh Patterson
af42c31740
update yaml for annotation
2025-10-08 13:24:54 -04:00
Josh Patterson
4ab4264f77
merge
2025-10-07 12:26:58 -04:00
Josh Patterson
60cccb21b4
create volume
2025-10-07 12:20:42 -04:00
Josh Patterson
930c8147e7
simplify cpu and memory regex
2025-08-01 08:52:21 -04:00
Josh Patterson
e61e2f04b3
handle hw not having sfp,disk or copper. show none for total if that is the case
2025-07-16 15:24:43 -04:00
Josh Patterson
bd4f2093db
add vm delete warning for ui element
2025-06-11 09:39:15 -04:00
Josh Patterson
be5e41227f
rename step
2025-05-23 11:41:45 -04:00
Josh Patterson
28aedcf50b
remove vm map example
2025-05-19 09:58:43 -04:00
Josh Patterson
3a31d80a85
fix regex and label for hypervisor annotation
2025-04-30 13:10:49 -04:00
Josh Patterson
5a8e542f96
create macro for resource regex and fix regex logic for mem and cpu
2025-04-30 13:08:54 -04:00
Josh Patterson
445afca6ee
use vrt
2025-04-03 13:44:13 -04:00
Josh Patterson
f30938ed59
hypervisor annotation show if base domain is initialized or not
2025-03-06 15:26:08 -05:00
Josh Patterson
2c5861a0c2
ensure local hypervisor dir when new hypervisor key accepted. apply soc.dyanno.hypervisor when hypervisor key accepted
2025-03-05 08:51:10 -05:00
Josh Patterson
c8a1c8377a
vm power operations
2025-02-27 16:04:44 -05:00
Josh Patterson
4e954c24f7
handle cpu, copper and sfp as options
2025-02-26 17:58:09 -05:00
Josh Patterson
52839e2a7d
implement regex for cpu and mem
2025-02-26 15:22:36 -05:00
Josh Patterson
1a9d5f151f
change description formatting. include full vm name in HYPERVISORS
2025-02-26 14:28:31 -05:00
Josh Patterson
d6f527881a
allow for destroyed vms to be displayed in ui. VNM cleanup destroyed status files after 48h
2025-02-26 09:06:45 -05:00
Josh Patterson
5811b184be
enhance annotations. account for line separation instead of comma for hardware
2025-02-25 11:13:35 -05:00
Josh Patterson
e0a3b51ca2
md in description
2025-02-25 08:54:04 -05:00
Josh Patterson
c896785480
fix vm deletion
2025-02-24 14:20:09 -05:00
Josh Patterson
6ac14f832e
only allow first process step to overwrite last
2025-02-24 12:22:52 -05:00
Josh Patterson
3246176c0a
comments
2025-02-21 14:34:08 -05:00
Josh Patterson
b68f561e6f
progress and hw tracking for soc hypervisor dynamic annotations
2025-02-21 09:50:01 -05:00
Josh Patterson
8ffd4fc664
new examples
2025-02-16 02:31:52 -05:00
Josh Patterson
f46548ed88
remove free hw from description
2025-02-16 02:25:18 -05:00
Josh Patterson
0d335e3056
free and totals in labels
2025-02-16 02:23:11 -05:00
Josh Patterson
6ff701bd5c
soc ui improvements for hypervisor layout. show free hardware for a hypervisor in the description
2025-02-16 01:33:50 -05:00
Josh Patterson
eb4cd75218
virtual_node_manager lookup hardware from defaults. allocate hw in vm file
2025-02-15 11:29:47 -05:00
Josh Patterson
ad27c8674b
no longer need add_* nodes
2025-02-15 10:50:09 -05:00
Josh Patterson
5123a86062
start of dynamic annotations for hypervisor
2025-02-12 13:21:39 -05:00
Josh Patterson