Hi Diego,
On 10/5/23 14:59, Diego Zuccato wrote:
Does someone use FAI to install the base system that will be managed by
Salt?
I'm trying to integrate 'em but there's still something that doesn't
"click"...
My current idea is to use Salt to orchestrate the install, but maybe
it's better
Diese Nachricht wurde eingewickelt um DMARC-kompatibel zu sein. Die
eigentliche Nachricht steht dadurch in einem Anhang.
This message was wrapped to be DMARC compliant. The actual message
text is therefore in an attachment.--- Begin Message ---
Hi again,
Apparently, it is intended behavior that
Diese Nachricht wurde eingewickelt um DMARC-kompatibel zu sein. Die
eigentliche Nachricht steht dadurch in einem Anhang.
This message was wrapped to be DMARC compliant. The actual message
text is therefore in an attachment.--- Begin Message ---
Hi all,
I am currently installing FAI to manage
Hello all.
Does someone use FAI to install the base system that will be managed by
Salt?
I'm trying to integrate 'em but there's still something that doesn't
"click"...
My current idea is to use Salt to orchestrate the install, but maybe
it's better left to FAI? How can I "pass around"
On the ypclient:
In /etc/default/nis set NISCLIENT=true
In /etc/yp.conf set the yp (master and slave) server IP addresses
On the yp master+slave servers:
In /etc/yp.conf set the yp (master and slave) server IP addresses
In /etc/ypserv.securenets list all IP addresses of all yp clients so the
Il 05/10/2023 15:17, Carsten Aulbert ha scritto:
we usually try with the hardware level configuration being the "border",
i.e. everything related to partitioning, initial OS install, at least
initial networking set-up is done with FAI (well, and salt is installed
configured as well).
Ok,
Diese Nachricht wurde eingewickelt um DMARC-kompatibel zu sein. Die
eigentliche Nachricht steht dadurch in einem Anhang.
This message was wrapped to be DMARC compliant. The actual message
text is therefore in an attachment.--- Begin Message ---
Hi Diego
Its been a while since I worked with Salt,
> On Thu, 05 Oct 2023 16:04:58 +0200, Julien Vion via linux-fai
> said:
> Somehow, "systemctl enable" in the script does not work.
Currently FAI does not start systemd during the installation.
That's why a systemctl call in a script cannot work.
But systemctl enable only creates a
Diese Nachricht wurde eingewickelt um DMARC-kompatibel zu sein. Die
eigentliche Nachricht steht dadurch in einem Anhang.
This message was wrapped to be DMARC compliant. The actual message
text is therefore in an attachment.--- Begin Message ---
Hi,
Le jeudi 05 octobre 2023 à 16:50 +0200, Thomas
You can essentially establish a ’trust’ to auto-accept keys. Then you
wouldn’t really have to worry about moving the minion keys around. Once
your bootstrap/installation is done, have it run a state to remove the key
or auto-purge it somehow.
Honestly I would just leave the base install and
Moin,
On Thu, Oct 05, 2023 at 05:22:57PM +0200, Julien Vion via linux-fai wrote:
> I tried that with in script/NIS/90-misc:
>
> /lib/systemd/systemd-sysv-install enable ypbind
> ln -s /lib/systemd/system/ypbind.service /etc/systemd/system/multi-
> user.target.wants/ypbind.service
>
>
> I have
Il 05/10/2023 16:58, Sinh Lam ha scritto:
You can essentially establish a ’trust’ to auto-accept keys. Then you
wouldn’t really have to worry about moving the minion keys around. Once
your bootstrap/installation is done, have it run a state to remove the
key or auto-purge it somehow.
Uh?
Il 05/10/2023 15:54, Laura Smith via linux-fai ha scritto:
Its been a while since I worked with Salt, but IIRC it sounds like what is not
"clicking" is that you need to fix the TOFU problem.
Actually there are 2 distinct problems:
- pass the pubkey from the minion to FAI during the install
13 matches
Mail list logo
