Commit Graph
42 Commits
Author SHA1 Message Date
Christopher Boumenot 6df9b1febd do not log a message for ignored commands (#1029) 2018-02-02 23:58:17 -08:00
Christopher Boumenot 5702f36b6b ignore transient iptables error 2018-01-24 22:30:46 -08:00
Christopher Boumenot 243e8f30c9 Check for minimum iptables version (#1009)
* ship warning and errors logs to Geneva (#991)

* precisely delete rules upon removal

* limit the number of deletios
2018-01-19 17:33:14 -08:00
Christopher Boumenot e0bb6a04c0 better telemetry messages (#1011) 2018-01-19 12:32:37 -08:00
Brendan Dixon 74bd379d17 Remove safe-deploy code
Adjust delay and retry values for failed HTTP requests
Ensure current agent is not removed from disk
Add operation to extension error events
Improve tracking of child agent exceptions

Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-10-26 16:30:24 -07:00
Brendan Dixon fb16cba28b [#822] -- Update docs
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-10-20 11:01:59 -07:00
Brendan Dixon e85d5327a4 [#908] -- Set Files to 0400 in /var/lib/waagent
[#906] -- Hardcoded value for sshd's ClientAliveInterval (180)
[#899] -- Improve HeartBeat Event
[#898] -- Send dummy status if extension fails to write a #.status file

Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-10-17 09:18:46 -07:00
Hans Krijger 5aa92197e3 fix for firewall flushing 2017-09-19 14:57:43 -07:00
Hans Krijger 0fd3487c39 fix check for sudoer file content 2017-09-19 14:52:33 -07:00
Brendan Dixon 34c10d5542 [#879] -- OS.EnableFirewall=y breaks load balanced sets probing
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-09-13 15:06:30 -07:00
Brendan Dixon f92c4b1420 Made firewall establishment iptable version aware
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-24 10:34:15 -07:00
Brendan Dixon be77729cb8 Improve firewall handling and make GoalState retrieval more robust
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-22 16:11:50 -07:00
Brendan Dixon b50e28cbbd Add wait to iptables commands
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-22 11:19:39 -07:00
Brendan Dixon ace5d8e701 Emit Firewall events
Signed-off-by: Brendan Dixon <brendand@microsoft.com>
2017-08-21 11:42:09 -07:00
Brendan Dixon 4de213b76b Improve error logging
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-17 13:35:41 -07:00
Brendan Dixon e247e7b2f2 Restrict access to Azure fabric services
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-17 13:12:34 -07:00
Brendan Dixon 285aeff238 [#783] -- The agent fails to use the standard Linux environment variables for HTTP proxy
[#830] -- Ensure VM identifier is properly ordered

Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-08-15 10:21:52 -07:00
brendandixon 56c4bd6f6c [#791] -- Prevent bloating sudoers waagent when agent has problem (#816)
Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-07-27 09:50:42 -07:00
Hans Krijger ee88936d82 remove admin access requirement from AzureStack 2017-06-07 12:02:58 -07:00
Brendan Dixon f8916bc43a Emit event if reprovisioning without a deprovision (#706)
Correct enabling test agents
Blacklist agent due to any failure

Signed-off-by: Brendan Dixon <brendandixon@me.com>
2017-05-10 12:32:59 -07:00
Hans Krijger d7d41284e1 Provisioning logging improvements (#673)
* log the device list when finding dvd

* improve logging for get_dvd_device

* improve logging for mount_dvd

* more granular logging for copy_ovf_env

* provisioning logging and error cleanup

* ubuntu provisioning logging cleanup

* improve Ubuntu provisioning logging

* ubuntu provision cleanup

* debugging for cloud-init

* add validation method and logging for cloud-init

* error cleanup, fix mount

* minor cleanup

* add validate cloud-init logging

* unit test fixes
2017-04-18 14:35:11 -07:00
Hans Krijger 7d613b721d route/dhcp logging cleanup (#665) 2017-04-12 12:20:52 -07:00
Hans Krijger 0b93f681fb add basic 32 bit support to interface detection (#644)
* add basic 32 bit support to network detection

* switch check so 64bt is default
2017-04-03 14:27:01 -07:00
Hans Krijger b64ee63893 when routing table is malformed, only emit logs once (#612) 2017-03-08 16:01:47 -08:00
Hans Krijger f561aeed50 Fix cache-incarnation sync (#587)
* when hostname record is missing, assume current

* version update to 2.2.4.1

* minor cleanup; reduce duplicate http logging

* update the incarnarnation file after all caches

* remove http proxy logging unless proxy set

* force goalstate update when host plugin call fails

* update version to 2.2.5
2017-02-09 15:41:50 -08:00
Hans Krijger 58baf8979a Unhandled errors (#564)
* ensure path exists before access

* handle read only filesystems

* check for swap file before getting size

* fix customdata decoding
2017-01-20 13:15:55 -08:00
Hans Krijger ec8238fa19 add a log message when primary nic is not found (#561) 2017-01-19 13:48:46 -08:00
Hans Krijger 8a16d23143 support offline hostname changes (#545) 2017-01-11 12:35:22 -08:00
Yoon Hong 93d9105cf4 Merge pull request #437 from jinhyunr/remove_shell
Replace unnecessary shell out logics with python based ones (#232)
2016-09-19 20:54:50 -04:00
Yoon Hong 5576dea216 Replace unnecessary shell out logics with python based ones (#232) 2016-09-16 20:02:43 -04:00
Hans Krijger 4539b6eaaa remove code which disables selinux 2016-09-14 16:41:05 -07:00
Hans Krijger 220d87cff3 stop pidof from spamming the logs (#421) 2016-09-13 12:18:16 -07:00
Hans Krijger 74ffd41bb1 do not try encode None, always return a string from get_primary_interface (#287) 2016-07-01 09:00:38 -07:00
Hans Krijger 028a77f3b4 Dhcp caching (#271)
* fix bug in cache lookup logic; allow skipping the cache in failure mode

* code review feedback
2016-06-28 11:12:51 -07:00
Hans Krijger fc9684b25c Multi-nic improvements (#237)
* update loopback detection to use SIOCGIFFLAGS and IFF_LOOPBACK; add unit tests

* adds a check for the wireserver ip, and if it does exist then skip the dhcp lookup and route manipulation; adds unit tests

* ensure the first selected interface is the primary, which is that with the default route; adds unit tests

* parse the wireserver from the dhcp leases file on disk; distro-specific, this is the ubuntu implementation; adds unit tests

* unit test fixes, python 3 changes

* code review feedback
2016-06-21 11:28:07 -07:00
Hans Krijger 627533ce2d Fixes for SCVMM (#219)
- correct scvmm references
- add unit tests for scvmm detection
- ensure all matching devices are mounted and examined for scvmm configuration
- exit once vmm startup script is found and executed
- fixes #185
2016-06-13 17:10:35 -07:00
Hans Krijger 25a1a9120e port retry code over from 2.0 agent; add unit test; fixes RDBug 5286341 (#217) 2016-06-09 10:40:38 -07:00
Hans Krijger 89cb898ac3 check for existence before chmod/chown/chcon (#206)
code review feedback
2016-06-06 11:48:21 -07:00
Ahmet Alp Balkan c93b795bc8 Improved logic to find non-lo interfaces
This will treat interface names such as 'lo:1' as loopback
as well. The ultimate solution is to use sysfs+procfs in this
method to check the flags and find the ipv4 addr. However sticking
to an extended check for now.

Fixes #188.
2016-06-06 11:29:53 -07:00
Yue Zhang da9ebe0a3d Separate provision agent and guest agent
Ensured correct return
Temporarily disable autoupdate

Signed-off-by: Brendan Dixon <brendand@microsoft.com>
2016-06-01 15:27:32 -07:00
brendandixon e55d8dee0e Revert "Separate provision agent and guest agent" 2016-05-31 11:24:23 -07:00
Yue Zhang efff9d6e0e Separate provision agent and guest agent 2016-05-31 11:15:10 -07:00