Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move disklabel and UEFI support to compose.py #422

Merged
merged 3 commits into from Oct 1, 2018

Conversation

bcl
Copy link
Contributor

@bcl bcl commented Aug 8, 2018

Currently we are making MBR disk images for qcow2 and partitioned disk,
so the UEFI packages aren't required at this point.

Move the clearpart command into compose.py so that in the futute it can
use clearpart --disklabel to create a GPT image, and add the required
packages to the package set.

@coveralls
Copy link

coveralls commented Aug 8, 2018

Pull Request Test Coverage Report for Build 651

  • 13 of 14 (92.86%) changed or added relevant lines in 1 file are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage increased (+0.2%) to 43.41%

Changes Missing Coverage Covered Lines Changed/Added Lines %
src/pylorax/api/compose.py 13 14 92.86%
Totals Coverage Status
Change from base Build 603: 0.2%
Covered Lines: 2352
Relevant Lines: 4992

💛 - Coveralls

@bcl
Copy link
Contributor Author

bcl commented Aug 9, 2018

Pushed the 1st commit, 2nd needs to be coordinated with UI changes.

If we leave the root account w/o a password people will use it that way,
leading to insecure images. Also if we use a default password. So lock
the root account in the templates.

Users will need to do one of these things:
 1. Use [[customizations.user]] in their blueprint to configure root or
    another user.
 2. Use [[customizations.sshkey]] to set a key for root
 2. Install a package that configures a user at install time
 3. Install a package that sets up a user at boot time (eg. cloud-init)

This also drops the auth line from the kickstart templates, allowing it
to use the default password algoritm instead of md5.

Resolves: rhbz#1626120
Ends up you cannot use the kickstart user command on root, since it
already exists, so we have to translate that into a rootpw command.

So [[customizations.user]] with name = "root" only support key, which
will set the ssh key, and password which will use rootpw to set the
password. plain text or encrypted are supported.

Related: rhbz#1626120
@bcl
Copy link
Contributor Author

bcl commented Sep 28, 2018

Updated to fix a problem using rootpw --locked.

@bcl bcl merged commit 956b29e into weldr:rhel7-extras Oct 1, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants