hadong has uploaded a new change for review. Change subject: init: Add support for disable_aes_ni cmdline args ......................................................................
init: Add support for disable_aes_ni cmdline args This patch adds support for configuring disable_aes_ni in cmdline args: disable_aes_ni=[y|n] This informations are sued to set disable_aes_ni=[y|n] during an auto-installation. Change-Id: I665c0ebfbc5cd16cffa307cd9ac4d99ec38761ca Signed-off-by: hadong <[email protected]> --- M scripts/ovirt-auto-install.py M scripts/ovirt-init-functions.sh.in 2 files changed, 18 insertions(+), 4 deletions(-) git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/59/18459/1 diff --git a/scripts/ovirt-auto-install.py b/scripts/ovirt-auto-install.py index ed26580..7b0e61a 100755 --- a/scripts/ovirt-auto-install.py +++ b/scripts/ovirt-auto-install.py @@ -95,6 +95,16 @@ ssh.strong_rng(OVIRT_VARS["OVIRT_USE_STRONG_RNG"]) +class ConfigureAESNI(Transaction.Element): + title = "Configuring SSH AES NI" + + def commit(self): + if "OVIRT_DISABLE_AES_NI" in OVIRT_VARS and \ + not OVIRT_VARS["OVIRT_DISABLE_AES_NI"] is "": + ssh = security.Ssh() + ssh.disable_aesni(OVIRT_VARS["OVIRT_DISABLE_AES_NI"]) + + class ConfigureLogging(Transaction.Element): title = "Configuring Logging" @@ -172,6 +182,10 @@ if "OVIRT_USE_STRONG_RNG" in OVIRT_VARS: tx.append(ConfigureStrongRNG()) + #set ssh AES NI + if "OVIRT_DISABLE_AES_NI" in OVIRT_VARS: + tx.append(ConfigureAESNI()) + tx.append(ConfigureLogging()) tx.append(ConfigureCollectd()) diff --git a/scripts/ovirt-init-functions.sh.in b/scripts/ovirt-init-functions.sh.in index 1d1ab8e..aaa132c 100644 --- a/scripts/ovirt-init-functions.sh.in +++ b/scripts/ovirt-init-functions.sh.in @@ -234,7 +234,7 @@ # hostname=fqdn # tuned=profile # keyboard=layout - # aesni=[y|n] + # disable_aes_ni=[y|n] # use_strong_rng=<bytes> # nfsv4_domain=domain # TBD logrotate maxsize @@ -397,7 +397,7 @@ # the tuned profile to run by default tuned_profile= - # aesni=[y|n] + # disable_aes_ni=[y|n] # disable AES-NI disable_aes_ni= @@ -732,10 +732,10 @@ tuned*) tuned_profile=${i#tuned=} ;; - aesni=1 | aesni=y | aesni=yes) + disable_aes_ni=1 | disable_aes_ni=y | disable_aes_ni=yes) disable_aes_ni="True" ;; - aesni=0 | aesni=n | aesni=no) + disable_aes_ni=0 | disable_aes_ni=n | disable_aes_ni=no) disable_aes_ni="False" ;; nfsv4_domain*) -- To view, visit http://gerrit.ovirt.org/18459 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: newchange Gerrit-Change-Id: I665c0ebfbc5cd16cffa307cd9ac4d99ec38761ca Gerrit-PatchSet: 1 Gerrit-Project: ovirt-node Gerrit-Branch: master Gerrit-Owner: hadong <[email protected]> _______________________________________________ node-patches mailing list [email protected] http://lists.ovirt.org/mailman/listinfo/node-patches
