10 Commits

Include renames

Author	SHA1	Message	Date
Josh Patterson	1f1d3ded41	FIX: root-own the Salt default tree so a SOC file-write cannot reach root code ... /opt/so/saltstack/default holds the source for every root-executed script -- /usr/sbin, the reactors, _runners/_modules/_beacons, the master engines and salt-relay.sh -- plus every state the root master renders. SOC mounts /opt/so/saltstack rw as uid 939, so root-owning /usr/sbin alone was not enough: the next highstate would copy attacker-controlled bytes out of the tree into the root-owned destination and run them. SOC never writes under default/, it only reads it. Every SOC write targets local/, which stays socore-owned, as does /opt/so/state. No mode is enforced on default/ -- SOC reads that tree, and 750/640 would break its config load. Also stops copy_new_files(), so-saltstack-update and setup from chowning the tree back to socore, and replaces preserve: True in soup_scripts.sls, which carried uid/gid in from the /tmp staging tree and would have undone the ownership before the first post-soup highstate.	2026-09-16 10:34:21 -04:00
Josh Patterson	445afca6ee	use vrt	2025-04-03 13:44:13 -04:00
Josh Patterson	f30938ed59	hypervisor annotation show if base domain is initialized or not	2025-03-06 15:26:08 -05:00
Josh Patterson	2c5861a0c2	ensure local hypervisor dir when new hypervisor key accepted. apply soc.dyanno.hypervisor when hypervisor key accepted	2025-03-05 08:51:10 -05:00
Josh Patterson	3246176c0a	comments	2025-02-21 14:34:08 -05:00
Josh Patterson	b68f561e6f	progress and hw tracking for soc hypervisor dynamic annotations	2025-02-21 09:50:01 -05:00
Josh Patterson	6ff701bd5c	soc ui improvements for hypervisor layout. show free hardware for a hypervisor in the description	2025-02-16 01:33:50 -05:00
Josh Patterson	eb4cd75218	virtual_node_manager lookup hardware from defaults. allocate hw in vm file	2025-02-15 11:29:47 -05:00
Josh Patterson	ad27c8674b	no longer need add_* nodes	2025-02-15 10:50:09 -05:00
Josh Patterson	5123a86062	start of dynamic annotations for hypervisor	2025-02-12 13:21:39 -05:00