GitLab

Also require SSL when returning a key hash.

A node having no TPM info is not an error (right now anyway) so don't
complain about it, since it confuses Mike.

Also, do a little Old Fart Normal Form code formatting enforcement.

Plug one hole in the dike.  Don't blindly atoi() a DB return value.
One down, a zillion to go.  Fixed a couple of nits while in there.

Added TBCOREDIR define for the place where tmcd can go to die.
It is the directory where tmcd should run and is intended to insure that
it can always drop core.

into node_type_attributes for the two node types that were
using nobootinfo.

cooked mode nodes, but do the virtual node interfaces.

the serial number changes so that keys are installed.
The right solution here is that the nonlocal users
table needs a timestamp, but with so few users bound
to the slivers, its hardly a worry.

new nonlocal pubkeys table.

(including an update to make schemacheck happy), and client-side script
modifications.

Tested by me on a few different machines. Ok by Mike.

node_hostkeys.  tpmblob uses 'tpmblob' and tpmpubkey uses 'tpmx509'.

the tb-set-node-os command with a second optional argument; if that is
present, the first arg is the child OS and the second is the parent OS.
We add some new features in ptopgen (OS-parentOSname-childOSname) based
off a new table that maps which child OSes can run on which parents, and
the right desires get added to match.  We setup the reloads in os_setup
along with the parents.  Also needed a new opmode, RELOAD-PCVM, to handle
all this.

For now, users only have to specify that their images can run on pcvms, a
special hack for which type the images can run on.  This makes sense in
general since there is no point conditionalizing childOS loading on
hardware type at the moment, but rather on parentOS.  Hopefully this stuff
wiill mostly work on shared nodes too, although we'll have to be more
aggressive on the client side garbage collecting old frisbee'd images for
long-lived shared hosts.

I only made these changes in libvtop, so assign_wrapper folks are left in
the dark.

Currently, the client side supports frisbee.  Only in openvz for now, and
this probably breaks libvnode_xen.pm.  Also in here are some openvz
improvements, like ability to sniff out which network is the public
control net, and which is the fake virtual control net.

Replace with an experiment wide geniflags that will control what
the local tmcd sends back to nodes that are acting as protogeni
node for a remote testbed. This simplifies the client side for now.

This might be how I do preconfig.

at once with Frisbee (excludes the actual MFS changes).

Os_load now takes take a list of comma serrated image names for the
"-i" and "-m" options.  The default OS is the OS for the last image
specified in the list.  I also changed the "-p" option of osload to
search both the project specified and emulab-ops for the image rather
than just the project specified in order to simplify specifying
multiple images (and because I personally found that behavior annoying
when using osload).

I modified the current_reloads table to be able to specify more than one
image for a node by adding an "idx" column which controls the order of
the reloads.  I also added a "prepare" column to the table (explained
below)

I modified tmcd to basically loop over the entries in the table and
create a multiline LOADINFO responsive, and modified rc.frisbee to
handle the multiline response and load each image in turn.

I modified os_load to take a new option "-P" which will tell rc.frisbee
to zap the superblocks even if a whole disk image is not specified.
To do this I set the prepare entry for the first image in the
current_reloads table to true.  Tmcd than passes this into to
rc.frisbee in the LOADINFO line.  When rc.frisbee sees this it will
make sure to zap the superblock before loading that image.

To support having multiple images as the default, "default_imageid"
can now be a comma separated list.  I implemented a hack to be able to
set multiple imageids via editnodetype.php3.  Basically the form
splits default_imageid into default_imageid_0, default_imageid_1, etc
and than adds an empty default_imageid_# slot to allow adding an
imageid.  Multiple images can be added by adding one image, than
submitting the form, and than adding another into the empty slot.  Not
the best, but I don't thing this will be a very common operation.
When the form is submitted it will than combine all default_imageid_#
into a comma separated list ignoring any that are deleted or set to
"No ImageID" (ie 0).

Everything will work fine with old MFSs as long as only one image is
loaded.  If multiple images are loaded with an old MFS, an email will
be sent to testbed-ops.  This works by having tmcd detect old MFS's by
using the version number and setting the state to RELOADOLDMFS.  Stated
will pick up on the and send the email to testbed-ops via a trigger.

out how to make it work.
Also remove some obsolete code.

(with quotes)

are tired of typing.

easier to read. There's still more to do on this front.

nodes between slices or experiments. Just prototyping some ideas.

Also some minor changes for dealing with jailed nodes in geni
slivers.

attacks. Re-enable the privkey checks.
Minor reformatting to match existing style.