Commit Graph
76 Commits
Author SHA1 Message Date
Christopher Boumenot 6df9b1febd do not log a message for ignored commands (#1029) 2018-02-02 23:58:17 -08:00
Christopher Boumenot 5702f36b6b ignore transient iptables error 2018-01-24 22:30:46 -08:00
Christopher Boumenot 243e8f30c9 Check for minimum iptables version (#1009)
* ship warning and errors logs to Geneva (#991)

* precisely delete rules upon removal

* limit the number of deletios
2018-01-19 17:33:14 -08:00
Christopher Boumenot e0bb6a04c0 better telemetry messages (#1011) 2018-01-19 12:32:37 -08:00
Hans Krijger fc2451fbae Fix Ubuntu factory issues (#983)
* fix ubuntu class hierarchy

* fix factory class
2018-01-02 23:18:28 -08:00
Christopher Boumenot c7498ababd No more ifup/ifdown on Ubuntu >=17.10 (#969) 2018-01-02 15:03:27 -08:00
Brendan Dixon 74bd379d17 Remove safe-deploy code
Adjust delay and retry values for failed HTTP requests
Ensure current agent is not removed from disk
Add operation to extension error events
Improve tracking of child agent exceptions

Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-10-26 16:30:24 -07:00
Brendan Dixon fb16cba28b [#822] -- Update docs
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-10-20 11:01:59 -07:00
Brendan Dixon e85d5327a4 [#908] -- Set Files to 0400 in /var/lib/waagent
[#906] -- Hardcoded value for sshd's ClientAliveInterval (180)
[#899] -- Improve HeartBeat Event
[#898] -- Send dummy status if extension fails to write a #.status file

Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-10-17 09:18:46 -07:00
Hans Krijger 5aa92197e3 fix for firewall flushing 2017-09-19 14:57:43 -07:00
Hans Krijger 0fd3487c39 fix check for sudoer file content 2017-09-19 14:52:33 -07:00
Brendan Dixon 34c10d5542 [#879] -- OS.EnableFirewall=y breaks load balanced sets probing
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-09-13 15:06:30 -07:00
Brendan Dixon f92c4b1420 Made firewall establishment iptable version aware
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-24 10:34:15 -07:00
Brendan Dixon be77729cb8 Improve firewall handling and make GoalState retrieval more robust
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-22 16:11:50 -07:00
Brendan Dixon b50e28cbbd Add wait to iptables commands
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-22 11:19:39 -07:00
Brendan Dixon ace5d8e701 Emit Firewall events
Signed-off-by: Brendan Dixon <brendand@microsoft.com>
2017-08-21 11:42:09 -07:00
Brendan Dixon 4de213b76b Improve error logging
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-17 13:35:41 -07:00
Brendan Dixon e247e7b2f2 Restrict access to Azure fabric services
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-17 13:12:34 -07:00
Brendan Dixon 285aeff238 [#783] -- The agent fails to use the standard Linux environment variables for HTTP proxy
[#830] -- Ensure VM identifier is properly ordered

Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-15 10:21:52 -07:00
brendandixon 56c4bd6f6c [#791] -- Prevent bloating sudoers waagent when agent has problem (#816)
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-07-27 09:50:42 -07:00
Robert Nesius d544709779 trailing whitespace... sigh 2017-07-08 01:06:33 +00:00
Robert Nesius 5a9f0b502a Accommodate new Clear Linux distro string in os-release. 2017-07-07 00:43:55 +00:00
Hans Krijger ee88936d82 remove admin access requirement from AzureStack 2017-06-07 12:02:58 -07:00
Tamir Zegman 2d06040bc1 GAiA OS: Fix SSH public key handling (#750)
* Turn off verbose logging on GAiA

* GAiA OS: Handle SSH public keys
2017-06-07 11:39:38 -07:00
-bat 9bed39863b Fix for the issue on recent FreeBSD 11 with the resource disc (#743)
* Make sure the initial device is a valid disc, and fallback if not

    This is the same check the fallback code uses, and is necessary as on
    later FreeBSD 11 versions the disc are retruned in reverse order. Thus
    the original function returns 'pass1' instead of 'da1' which fails. This
    fixes the issue and allows the resource disc to be mounted again, though
    relying on the fallback is not the cleanest solution.

* Skip 'pass' devices when looking for the resource disk

This fixes the error introduced in FreeBSD 11 where the order of
outout from camcontrol changed from da1,pass1 to pass1,da1 and thus
waagent misidentified the disc as 'pass1'. Instead of taking the
first device, we now split the string at ',' and return the first
device which does not begin 'pass'.
2017-06-05 13:12:33 -07:00
Reyk Floeter aad62676a7 Add initial support for the OpenBSD operating system (#712)
* Add initial support for the OpenBSD operating system

There are some differences between FreeBSD, OpenBSD, and Linux.

Notes:

- OpenBSD ships LibreSSL, but WALinuxAgent needs OpenSSL for CMS, so
use the openssl port and the "eopenssl" binary instead.

- Don't run the custom DHCP client but parse /var/db/dhclient.leases.hvn0.
OpenBSD's lease file uses a modified syntax.

- OpenBSD does not have /proc.  WALinuxAgent should never assume that
the /proc filesystem is available.

- OpenBSD does not have sudo, but its replacement doas.  The OpenBSD
class implements support for modifying the doas.conf file.

- Unlike FreeBSD, OpenBSD supports and mounts UDF DVDs just fine.

- Create a swap partition instead of a swap file on the resource disk.

- Many other minor changes for OpenBSD

TODO:

- The /proc checks needs to be replaced with pgrep/ps etc. checks for
OpenBSD.  For now it just checks if /proc is available or returns
without error.
Make sure to install waagent with --register-service as setuptools
will not set the permissions of /etc/rc.d/waagent correctly (the file
has to be executable to be used by OpenBSD's rc system).

* Remove debug statement that was use to fix mount_dvd on OpenBSD.

* I accidentally replaced the FreeBSD resource disk handler.

The OpenBSD disk handler is an addition, not a replacement.

Found by jonathangray

* pylint

pylint found one bug in setting the password; other changes are just
for the style.

* strip newline from generated password hash.

Issue reported by Lili Deng.

* Keep AutoUpdate enabled, it was disabled for initial porting.

Pointed out by @hglkrijger

* Use a wildcard and delete all DHCP lease files on *BSD.

Requested by @hglkrijger
2017-05-30 15:27:22 -07:00
zegman ed8f449798 Add Check Point GAiA OS support 2017-05-17 16:28:59 +03:00
Brendan Dixon f8916bc43a Emit event if reprovisioning without a deprovision (#706)
Correct enabling test agents
Blacklist agent due to any failure

Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-05-10 12:32:59 -07:00
Brendan Dixon a4b653fdc2 Support mixed case hostnames on RedHat
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-05-01 14:52:08 -07:00
Hans Krijger d7d41284e1 Provisioning logging improvements (#673)
* log the device list when finding dvd

* improve logging for get_dvd_device

* improve logging for mount_dvd

* more granular logging for copy_ovf_env

* provisioning logging and error cleanup

* ubuntu provisioning logging cleanup

* improve Ubuntu provisioning logging

* ubuntu provision cleanup

* debugging for cloud-init

* add validation method and logging for cloud-init

* error cleanup, fix mount

* minor cleanup

* add validate cloud-init logging

* unit test fixes
2017-04-18 14:35:11 -07:00
enihcam ab90f075d1 Add Arch distro support (#670)
* Add Arch distro support

* Added archDistro in waagent2.0

* Added missing dependency for archDistro

* Revert "Added missing dependency for archDistro"

This reverts commit 259cc020c42ec575dbe11c3057002d03e90353a4.

* Revert "Added archDistro in waagent2.0"

This reverts commit dc51cdfcb392b3958e0bcb60b3144226f07d3723.

* Enable waagent AutoUpdate for archlinux.
2017-04-18 12:02:01 -07:00
Hans Krijger 7d613b721d route/dhcp logging cleanup (#665) 2017-04-12 12:20:52 -07:00
Hans Krijger 0b93f681fb add basic 32 bit support to interface detection (#644)
* add basic 32 bit support to network detection

* switch check so 64bt is default
2017-04-03 14:27:01 -07:00
hufengwei 66c5628751 Add support for EulerOS (#614) 2017-03-31 11:18:14 -07:00
Hans Krijger b64ee63893 when routing table is malformed, only emit logs once (#612) 2017-03-08 16:01:47 -08:00
Hans Krijger f561aeed50 Fix cache-incarnation sync (#587)
* when hostname record is missing, assume current

* version update to 2.2.4.1

* minor cleanup; reduce duplicate http logging

* update the incarnarnation file after all caches

* remove http proxy logging unless proxy set

* force goalstate update when host plugin call fails

* update version to 2.2.5
2017-02-09 15:41:50 -08:00
Hans Krijger a36dd736f2 fix del_root_password on FreeBSD (#578) 2017-01-27 13:56:31 -08:00
Hans Krijger d18d34cdd5 CentOS 7.0 hostnamectl fix (#573)
* cleanup and reformat file; fallback to hostname when hostnamectl fails; logging cleanup

* cleanup
2017-01-25 17:33:06 -08:00
Hans Krijger 2950edb430 CoreOS fix (#567)
* reformat

* cleanup; add distro_code_name to os factory
2017-01-20 16:43:03 -08:00
Hans Krijger 469d8ae074 Debian fixes (#566)
* add traceback

* update debian service calls
2017-01-20 16:07:45 -08:00
Hans Krijger 38c112ae5c apply patch from Debian (#565) 2017-01-20 13:17:30 -08:00
Hans Krijger 58baf8979a Unhandled errors (#564)
* ensure path exists before access

* handle read only filesystems

* check for swap file before getting size

* fix customdata decoding
2017-01-20 13:15:55 -08:00
Hans Krijger ec8238fa19 add a log message when primary nic is not found (#561) 2017-01-19 13:48:46 -08:00
Hans Krijger 8a16d23143 support offline hostname changes (#545) 2017-01-11 12:35:22 -08:00
Hans Krijger 50690a196d ensure config file is updated correctly (#542)
* ensure config file is updated correctly

* unit test fix

* correct ordering
2017-01-11 10:53:38 -08:00
Hans Krijger 6b79ddda5c support NetworkManager leases (#543) 2017-01-11 10:20:57 -08:00
Hans Krijger 5949843494 fix for hostnamectl (#534) 2017-01-06 14:21:27 -08:00
Hans Krijger 8f91a15cd5 RHEL-7 hostname (#533)
* use hostnamectl for redhat 7.x

* create directory if it is missing
2017-01-06 13:06:08 -08:00
Tim Rupp edba18b61c Adds more hooks (#510)
simplified some code. Added the delete user hook. collapsed
some keyword args
2016-12-09 11:34:58 -08:00
Tim Rupp 94a0b4948b Adds BIG-IP integration to WAAgent
This patch includes the implementation portion of BIG-IP integration
with WAAgent.
2016-11-29 13:16:05 -08:00