1661 Commits

Author SHA1 Message Date
Mathias Gibbens
f72721179f Merge pull request #620 from stgraber/doc
doc/installation/physical: Mention disabling RAID mode
2025-11-26 23:26:12 +00:00
Stéphane Graber
0f2d968185 Merge pull request #619 from gibmat/display-application-tls-fingerprint
Display an application's TLS certificate fingerprint, if it has one
2025-11-26 18:01:40 -05:00
Stéphane Graber
3a081b6ec3 Merge pull request #617 from stgraber/main
Add certificate generation to the customizer
2025-11-26 17:31:50 -05:00
Stéphane Graber
01275149c4 doc/installation/physical: Mention disabling RAID mode
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-26 16:55:13 -05:00
Mathias Gibbens
565342960e Merge pull request #552 from gibmat/add-external-seed-tests
Add tests exercising user-provided external seed data
2025-11-26 21:51:13 +00:00
Stéphane Graber
4fcfb6cdd9 Merge pull request #616 from gibmat/fix-incus-pool-creation-check
incus-osd/applications: Don't create Incus storage pool if "local" pool isn't present
2025-11-26 16:44:12 -05:00
Stéphane Graber
23898ecadb Merge pull request #615 from gibmat/docs-add-network-proxy-examples
doc/reference/system/network: Add proxy examples
2025-11-26 16:43:41 -05:00
Stéphane Graber
972735c279 image-customizer/html: Add warning about generated certificate
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-26 16:36:51 -05:00
Stéphane Graber
1201f0cdbc image-customizer/html: Add certificate generation
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-26 16:32:16 -05:00
Stéphane Graber
75af64629d image-customizer/html: Improve instructions
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-26 16:32:15 -05:00
Stéphane Graber
008bfd04a3 image-customizer/html: Re-order form (based on user feedback)
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-26 16:32:14 -05:00
Stéphane Graber
05903eef72 image-customizer: Add certificate generation API
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-26 16:32:13 -05:00
Mathias Gibbens
bb8a9feeb6 incus-osd: Display an application's TLS certificate fingerprint, if it has one
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-26 14:30:26 -07:00
Mathias Gibbens
de127cb20c incus-osd/tests: Handle occasional swapping of target drive listing
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-26 13:22:32 -07:00
Mathias Gibbens
f28ec7f8e9 incus-osd/tests: Make test passphrase longer
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-26 13:19:28 -07:00
Mathias Gibbens
a00f9eafb3 incus-osd/tests: Add tests exercising user-provided external seed data
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-26 12:57:01 -07:00
Mathias Gibbens
301decabf1 incus-osd/applications: Don't create Incus storage pool if "local" pool isn't present
The "local" pool may not be present if it was configured as RAID1 and the system
is performing first boot actions after a fresh reinstall. The pool will be
recovered, but we no longer import it until the user can provide the required
encryption key via API.

Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-26 11:36:12 -07:00
Mathias Gibbens
4ac393f0b4 doc/reference/system/network: Add proxy examples
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-26 11:12:48 -07:00
Stéphane Graber
d15bd7c8dd Merge pull request #614 from gibmat/tests-show-failed-logs
incus-osd/tests: Display journalctl entries when a test fails to find expected entry
2025-11-26 12:42:31 -05:00
Mathias Gibbens
0453457692 incus-osd/tests: Display journalctl entries when a test fails to find expected entry
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-26 09:50:45 -07:00
Mathias Gibbens
63e00eca28 Merge pull request #555 from gibmat/add-application-tests
Add incus-ceph and incus-linstor tests
2025-11-26 16:23:49 +00:00
Mathias Gibbens
2029ea35ca incus-osd/tests: Add tests for incus-ceph and incus-linstor
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-26 08:16:57 -07:00
Mathias Gibbens
2628153f42 incus-osd/tests: Add test of incus application API
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-26 08:16:53 -07:00
Stéphane Graber
de341918ff Merge pull request #609 from gibmat/seed-fixes
Copy external seed data post-install
2025-11-26 09:24:32 -05:00
Mathias Gibbens
a39d481e4c Merge pull request #611 from stgraber/main
Operations Center and Linstor startup fixes
2025-11-26 14:12:52 +00:00
Mathias Gibbens
95a0226e59 Merge pull request #610 from stgraber/doc
doc: Cover TPM support in vSphere
2025-11-26 14:10:09 +00:00
Stéphane Graber
4fad957475 incus-osd/services/linstor: Use EnableUnit
Because of sysext, the unit won't yet be known to systemd.

Start will therefore fail whereas enable --now will locate the unit and
correctly start it.

Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-25 22:01:27 -05:00
Stéphane Graber
ffe61fa4ec incus-osd/providers/operations_center: Handle server switching away from self-signed
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-25 21:51:38 -05:00
Stéphane Graber
be517ef8fc incus-osd/providers/operations-center: Use tryRequest
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-25 21:34:25 -05:00
Stéphane Graber
7b1f0a20a6 doc: Cover TPM support in vSphere
Closes #606

Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-25 20:59:58 -05:00
Mathias Gibbens
0b4ec47f37 incus-osd/seed: Copy any external seeds to target seed partition post install
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-25 14:40:04 -07:00
Stéphane Graber
f5e17979cd Merge pull request #603 from gibmat/enforce-passphrase-complexity
Enforce recovery passphrase length and complexity
2025-11-25 16:06:09 -05:00
Stéphane Graber
8becbf9535 Merge pull request #602 from gibmat/fix-migration-window-frequency-checks
Fix interaction of migration windows and configured update check frequency
2025-11-25 16:01:22 -05:00
Mathias Gibbens
52fb663692 incus-osd/seed: Make determining the seed path an internal implementation detail
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-25 13:29:03 -07:00
Mathias Gibbens
180788bce5 incus-osd: Adjust update sleep logic to choose the minimum of the configured frequency and start of next maintenance window
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-25 10:30:33 -07:00
Mathias Gibbens
a2a44d6c23 incus-osd/api: Add methods to determine how long until a migration window will be active
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-25 10:18:26 -07:00
Mathias Gibbens
fe5e63dfcf doc: Update documentation to reflect recovery passphrase requirements
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-25 08:04:12 -07:00
Mathias Gibbens
aa82810f0b incus-osd/rest: Add new recovery passphrases before removing old ones
This prevents an edge case of successfully removing all existing passphrases
but then failing to add a new one, resulting in a LUKS partition that won't
have any recovery passphrase set.

Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-25 07:14:04 -07:00
Mathias Gibbens
4762108508 base: Add the cracklib-small dictionary to base images
This is extracted from the cracklib-runtime package

Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-25 07:14:04 -07:00
Mathias Gibbens
536c0f5513 incus-osd/systemd: Enforce minimum recovery passphrase length and complexity
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-25 07:14:03 -07:00
Stéphane Graber
7dab604ade Merge pull request #604 from stgraber/main
image-customizer: Rework introduction
2025-11-24 21:13:28 -05:00
Stéphane Graber
93aa8221c0 image-customizer: Rework introduction
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-24 20:08:16 -05:00
Mathias Gibbens
5e5382f76e Merge pull request #601 from stgraber/main
base: Add FibreChannel controllers to early boot
2025-11-25 00:35:35 +00:00
Stéphane Graber
e28c210318 base: Add FibreChannel controllers to early boot
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-24 18:09:50 -05:00
Stéphane Graber
d0b10a04ca Merge pull request #600 from stgraber/main
Improve image-customizer usability
2025-11-24 17:40:33 -05:00
Stéphane Graber
84b3208a37 Merge pull request #598 from gibmat/add-incus-storage-pool-tutorial
Add tutorial for preparing Incus storage pool
2025-11-24 17:16:53 -05:00
Stéphane Graber
5996012564 Merge pull request #599 from gibmat/add-application-dependencies
Add basic application dependencies
2025-11-24 17:16:23 -05:00
Stéphane Graber
1d54c81185 image-customizer: Improve layout
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-24 17:11:58 -05:00
Stéphane Graber
0b6a58657a image-customizer: Update bootstrap
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
2025-11-24 16:53:42 -05:00
Mathias Gibbens
68b7dcc0ff doc/tutorials: Add tutorial for preparing Incus storage pool
Signed-off-by: Mathias Gibbens <mathias.gibbens@futurfusion.io>
2025-11-24 13:51:37 -07:00