Commit Graph

  • d2a84b1790 Merge pull request #182 from gibmat/update-gomod Stéphane Graber 2025-06-30 12:44:12 -04:00
  • fd7c3ae993 Fix latest golangci-lint warnings Mathias Gibbens 2025-06-30 07:40:11 -06:00
  • 52a349c771 Update go.mod Mathias Gibbens 2025-06-30 06:40:06 -06:00
  • 92ea1203aa Merge pull request #177 from gibmat/github-sb-key-migration Stéphane Graber 2025-06-27 11:22:52 -04:00
  • 90fbc3a4dc incus-osd/secureboot: Return a nicer error when an EFI update fails Mathias Gibbens 2025-06-27 07:00:12 -06:00
  • 039d3e4789 incus-osd/providers: Add URL for GitHub provider to fetch Secure Boot keys update Mathias Gibbens 2025-06-26 13:23:34 -06:00
  • 111ee05165 Merge pull request #178 from gibmat/fix-encryption-add-delete-password Stéphane Graber 2025-06-26 22:09:05 -04:00
  • 948971fc95 incus-osd/systemd: Use GetLUKSVolumePartitions() to properly identify underlying LUKS partitions Mathias Gibbens 2025-06-26 14:16:56 -06:00
  • 445f963db1 incus-osd/util: Extract GetLUKSVolumePartitions() to a common library Mathias Gibbens 2025-06-26 14:16:26 -06:00
  • 6a63797a97 Merge pull request #175 from gibmat/add-swap-recovery-key Stéphane Graber 2025-06-26 16:14:19 -04:00
  • bf503b3f96 Merge pull request #174 from stgraber/main Stéphane Graber 2025-06-26 16:11:51 -04:00
  • ad6ca0aecc golang-ci: Bump max function length Mathias Gibbens 2025-06-26 12:35:38 -06:00
  • ddf6c8422e incus-osd/systemd: Check for and add swap recovery key if needed Mathias Gibbens 2025-06-26 12:31:10 -06:00
  • 0e55e34537 incus-osd/tui: Don't show error on missing interface Stéphane Graber 2025-06-26 12:14:13 -06:00
  • 6366f3ce15 Merge pull request #172 from stgraber/main Stéphane Graber 2025-06-24 01:14:13 -04:00
  • b31b36abfe incus-osd/provider/operations_center: Set core.https_address if missing Stéphane Graber 2025-06-24 00:24:43 -04:00
  • 121f927568 Merge pull request #171 from stgraber/main Stéphane Graber 2025-06-22 21:21:49 -04:00
  • 074a39f6b5 incus-osd: Don't issue warnings on empty update list Stéphane Graber 2025-06-22 20:24:49 -04:00
  • 83bb8aebb9 Merge pull request #150 from gibmat/secureboot-cert-rotation Stéphane Graber 2025-06-21 23:50:20 -04:00
  • cbe1af2414 Update GitHub testing workflow Mathias Gibbens 2025-06-16 13:11:09 -06:00
  • bc89c4e522 doc: Document Secure Boot use and technical details Mathias Gibbens 2025-06-13 16:47:28 -06:00
  • 8c87b25b2c base: Add test-update-sb-keys target to Makefile Mathias Gibbens 2025-06-19 08:23:48 -06:00
  • 7697be7ddb incus-osd: Fixup comment Mathias Gibbens 2025-06-19 08:23:22 -06:00
  • 521cd8875c incus-osd: Check for and apply Secure Boot key updates Mathias Gibbens 2025-06-19 08:22:44 -06:00
  • 0dea030c07 incus-osd/state: Add SecureBoot struct to track its state Mathias Gibbens 2025-06-19 11:03:54 -06:00
  • 313b998a9c incus-osd/state: Add a RebootRequired flag Mathias Gibbens 2025-06-19 08:19:51 -06:00
  • 7cee29afae incus-osd/secureboot: Add getArchEFIFiles() method Mathias Gibbens 2025-06-21 14:18:09 -06:00
  • 5e1cad0b10 incus-osd/secureboot: Determine proper underlying partitions for LUKS devices Mathias Gibbens 2025-06-18 11:31:22 -06:00
  • 99a0f369e3 incus-osd/secureboot: Don't apply dbx update if it would brick a current UKI Mathias Gibbens 2025-06-18 08:11:37 -06:00
  • 0cd571c54f incus-osd/secureboot: Add GetCertificatesFromVar() method Mathias Gibbens 2025-06-17 10:42:04 -06:00
  • db9a08e443 incus-osd/providers: Fixup comments Mathias Gibbens 2025-06-19 07:46:15 -06:00
  • e612540d3d incus-osd/providers: Add Secure Boot key update check support Mathias Gibbens 2025-06-21 13:36:45 -06:00
  • 98b41e6714 incus-osd/providers: Don't call nil provider func Mathias Gibbens 2025-06-21 13:35:28 -06:00
  • 5b1d361779 incus-osd/secureboot: Ensure new UKI key is in db and isn't in dbx Mathias Gibbens 2025-06-13 14:20:18 -06:00
  • 184bd987af incus-osd/systemd: Check for and apply Secure Boot key changes during sysupdate Mathias Gibbens 2025-06-13 10:41:46 -06:00
  • b5e00c4d47 incus-osd/secureboot: Add HandleSecureBootKeyChange() method Mathias Gibbens 2025-06-13 10:12:44 -06:00
  • d12435da7c incus-osd/secureboot: Add UKIHasDifferentSecureBootCertificate() method Mathias Gibbens 2025-06-13 09:35:33 -06:00
  • ef3e2a53ce incus-osd/secureboot: Add AppendEFIVarUpdate() method Mathias Gibbens 2025-06-19 08:10:10 -06:00
  • 9f8d764406 base: Add efitools Mathias Gibbens 2025-06-19 08:09:42 -06:00
  • 5470bc3a79 incus-osd/systemd: Set the same recovery/user-supplied passwords on swap as root Mathias Gibbens 2025-06-13 07:58:08 -06:00
  • e2fb58a8e1 incus-osd/secureboot: Implement PCR7 oracle logic to handle KEK/db/dbx updates and signing key rotations Mathias Gibbens 2025-06-10 18:03:49 -06:00
  • b9933f07df base: Add check to inject custom Secure Boot keys Mathias Gibbens 2025-06-19 09:55:14 -06:00
  • 95c9aa8e07 base: Add generate-test-certs target to Makefile Mathias Gibbens 2025-06-19 09:54:50 -06:00
  • b9132b5ebf incus-osd: Recognize Secure Boot keys generated by test scripts Mathias Gibbens 2025-06-19 09:28:32 -06:00
  • 247182a3a5 scripts: Add helper script to inject custom Secure Boot key defaults Mathias Gibbens 2025-06-19 09:25:58 -06:00
  • 81b167151e scripts/test: Add scripts to generate test Secure Boot keys Mathias Gibbens 2025-06-19 09:14:43 -06:00
  • 04479287ca Merge pull request #170 from gibmat/add-licenses-check Stéphane Graber 2025-06-19 18:17:50 -04:00
  • 743770b912 Move mkosi check to build target Mathias Gibbens 2025-06-19 15:01:42 -06:00
  • 40d79df47f Add licenses check Mathias Gibbens 2025-06-19 14:41:37 -06:00
  • f84977b371 Merge pull request #167 from stgraber/main Stéphane Graber 2025-06-17 15:36:53 -04:00
  • 1c4ee8ddbd incus-osd/rest/system/network: Handle missing configs Stéphane Graber 2025-06-17 14:28:55 -04:00
  • 113efbe49c incus-osd/rest/root: Fix /1.0 endpoint Stéphane Graber 2025-06-17 14:23:24 -04:00
  • ec6caecef9 Merge pull request #166 from stgraber/main Stéphane Graber 2025-06-17 12:56:01 -04:00
  • 9900c1b8c1 incus-osd/systemd/network: Wait for DNS Stéphane Graber 2025-06-17 11:49:25 -04:00
  • 7154735196 base: Tweak list of disabled services Stéphane Graber 2025-06-17 11:19:39 -04:00
  • ad5866583e systemd: Disable PCR locking units Stéphane Graber 2025-06-17 11:13:01 -04:00
  • c03512f2d8 base: Make sure our presets apply first Stéphane Graber 2025-06-17 11:04:28 -04:00
  • 2727d619b5 Merge pull request #165 from stgraber/main Stéphane Graber 2025-06-17 10:54:22 -04:00
  • 4f08c39ee0 incus-osd/api/network: Omit empty MTU Stéphane Graber 2025-06-17 02:03:09 -04:00
  • 214f275078 initrd-message: Don't report failures Stéphane Graber 2025-06-17 01:28:06 -04:00
  • c174bd36ef Merge pull request #163 from stgraber/main Stéphane Graber 2025-06-17 00:47:34 -04:00
  • 2a12150366 base: Move kernel cleanup to script Stéphane Graber 2025-06-16 23:51:32 -04:00
  • 51d12ba630 incus-osd/systemd/network: Generate /etc/hosts Stéphane Graber 2025-06-16 23:21:14 -04:00
  • b3428509b5 base: Disable zfs-import-cache Stéphane Graber 2025-06-16 23:13:27 -04:00
  • 93c558de7d Merge pull request #162 from stgraber/main Stéphane Graber 2025-06-16 20:21:29 -04:00
  • 304b222c30 incus-osd/systemd/networkd: Refresh network state Stéphane Graber 2025-06-16 18:24:05 -04:00
  • 21f9c910a3 incus-osd/systemd: Make registration refresh non-fatal Stéphane Graber 2025-06-16 17:52:13 -04:00
  • f8a42a5e4d Merge pull request #161 from stgraber/main Stéphane Graber 2025-06-16 16:43:32 -04:00
  • ffd54c8ae1 incus-osd/providers/operations-center: Tweak error message Stéphane Graber 2025-06-16 14:24:50 -04:00
  • 6af5f35450 incus-osd/providers: Implement RefreshRegister for Operations Manager Stéphane Graber 2025-06-16 14:00:01 -04:00
  • 03441c7817 incus-osd/systemd: Trigger RefreshRegister on network update Stéphane Graber 2025-06-16 13:47:59 -04:00
  • 06c0f72295 incus-osd: Tweak persistence of provider config Stéphane Graber 2025-06-16 13:38:12 -04:00
  • 80de09f781 golangci: Disable goconst Stéphane Graber 2025-06-16 14:03:47 -04:00
  • 10252e88a2 Merge pull request #158 from stgraber/main Stéphane Graber 2025-06-14 22:04:00 -04:00
  • ee8d3c8c5b incus-osd: The provider can't be nil Stéphane Graber 2025-06-14 16:41:21 -04:00
  • 0adf10d67a incus-osd/providers: Add RefreshRegister function Stéphane Graber 2025-06-14 16:24:39 -04:00
  • c8041b034a Merge pull request #157 from stgraber/main Stéphane Graber 2025-06-14 16:13:59 -04:00
  • 46b96ec014 incus-osd/providers/operations-center: Use ManagementAddress Stéphane Graber 2025-06-14 16:13:39 -04:00
  • ba4bb866ba incus-osd/state: Add ManagementAddress Stéphane Graber 2025-06-14 16:13:13 -04:00
  • 3c2705c4bd incus-osd: Make use of shared hostname logic Stéphane Graber 2025-06-14 15:21:54 -04:00
  • 0fc99b19b6 incus-osd/rest: Expose hostname Stéphane Graber 2025-06-14 15:11:08 -04:00
  • f8b1dd10a9 incus-osd/systemd: Use state struct Stéphane Graber 2025-06-14 15:21:31 -04:00
  • 9812b7b668 incus-osd: Pass state to providers Stéphane Graber 2025-06-14 15:10:57 -04:00
  • 76bf1ff7a1 incus-osd/state: Add Hostname function Stéphane Graber 2025-06-14 15:03:32 -04:00
  • 91f6a7e6b0 Merge pull request #156 from stgraber/main Stéphane Graber 2025-06-14 14:57:07 -04:00
  • b47275b8a2 base: Add usbip package Stéphane Graber 2025-06-13 13:04:51 -04:00
  • 9d6de6e30a incus-osd: Add USBIP support Stéphane Graber 2025-06-13 13:04:01 -04:00
  • db80dab847 Merge pull request #153 from breml/incus-osd-license Stéphane Graber 2025-06-11 09:37:12 -04:00
  • fb12fd277e incus-osd: Add license to Go module Lucas Bremgartner 2025-06-11 13:16:27 +02:00
  • 5c0f237c5d Merge pull request #149 from stgraber/main Stéphane Graber 2025-06-06 00:51:59 -04:00
  • 68d249c127 golangci: Bump complexity Stéphane Graber 2025-06-05 23:45:56 -04:00
  • 261c6e3845 incus-osd: Add registration call Stéphane Graber 2025-06-05 23:48:44 -04:00
  • 3c8729ed5e incus-osd/provider: Add registration logic Stéphane Graber 2025-06-05 23:30:05 -04:00
  • c4d0e177e8 incus-osd/providers/operations_center: Add support for TLS client Stéphane Graber 2025-06-05 13:07:57 -04:00
  • 930e70eb51 Merge pull request #144 from gibmat/flasher-tool Stéphane Graber 2025-06-05 23:28:41 -04:00
  • b81cd4a8b5 Update/expand documentation Mathias Gibbens 2025-06-05 10:58:45 -06:00
  • f3a76872a8 Update spawn-image script to use flasher tool Mathias Gibbens 2025-06-04 12:27:40 -06:00
  • 0c42ab47db Add an initial flasher tool to help customize bootable images Mathias Gibbens 2025-06-04 12:16:40 -06:00
  • 938eb95a5c incus-osd/api: Omit more fields when empty Mathias Gibbens 2025-06-04 12:11:16 -06:00
  • d3f768a38b incus-osd/systemd: Allow disabling strict MAC address validation Mathias Gibbens 2025-06-04 12:05:53 -06:00