1. 28 Jul, 2014 1 commit
  2. 15 Jul, 2014 1 commit
    • Kirk Webb's avatar
      Add taint checks at various places to enforce node restrictions · 797f83dd
      Kirk Webb authored
      A bit overdue, but here they are.
      
      * Disallow image creation for any taint state on node/image
      * Disallow console access for "blackbox" and "useronly" states
      * Disallow node_admin for "blackbox" and "useronly" states
      
      TB Admins are exempt from these restrictions.
      797f83dd
  3. 10 Jul, 2014 1 commit
  4. 01 Jul, 2014 1 commit
  5. 12 Jun, 2014 1 commit
  6. 16 Apr, 2014 1 commit
  7. 30 Jan, 2014 1 commit
  8. 29 Jan, 2014 1 commit
  9. 22 Jan, 2014 1 commit
  10. 06 Jan, 2014 1 commit
    • Mike Hibler's avatar
      Add support for lease extention (renewal). · 9a6cdeae
      Mike Hibler authored
      Add CLI for extending a lease (called extenddataset on ops). The length
      of the extension and the number of times it can be extended are controlled
      by site variables.
      9a6cdeae
  11. 03 Jan, 2014 3 commits
  12. 03 Sep, 2013 1 commit
  13. 24 Jul, 2013 1 commit
  14. 26 Mar, 2013 1 commit
  15. 11 Feb, 2013 1 commit
  16. 08 Feb, 2013 1 commit
  17. 14 Nov, 2012 2 commits
    • Leigh Stoller's avatar
      Move rpm/tar download from boss to ops, to avoid wasted network traffic. · f37cd9dc
      Leigh Stoller authored
      To turn this option on, define SPEWFROMOPS=1 in your defs file. This
      will result in a redirect message from boss which will send the wget
      client over to ops. 
      
      A perl setuid root cgi script is run from the webserver on ops when a
      /spewrpmtar request is made. This script sends the key,nodeid,file
      over to boss via XMLRPC (as elabman). The return is simple yes or no,
      the caller is allowed (not allowed) to have that file. Since the
      ops script runs as root, it can spew the file back to the caller.
      
      Note that the elabinelab checks for the elabinelab source code are
      gone; we are now open source. Also, we spew that file from /share now,
      to be consistent.
      f37cd9dc
    • Leigh Stoller's avatar
      Change debugging test. · 8323da43
      Leigh Stoller authored
      8323da43
  18. 24 Sep, 2012 1 commit
    • Eric Eide's avatar
      Replace license symbols with {{{ }}}-enclosed license blocks. · 6df609a9
      Eric Eide authored
      This commit is intended to makes the license status of Emulab and
      ProtoGENI source files more clear.  It replaces license symbols like
      "EMULAB-COPYRIGHT" and "GENIPUBLIC-COPYRIGHT" with {{{ }}}-delimited
      blocks that contain actual license statements.
      
      This change was driven by the fact that today, most people acquire and
      track Emulab and ProtoGENI sources via git.
      
      Before the Emulab source code was kept in git, the Flux Research Group
      at the University of Utah would roll distributions by making tar
      files.  As part of that process, the Flux Group would replace the
      license symbols in the source files with actual license statements.
      
      When the Flux Group moved to git, people outside of the group started
      to see the source files with the "unexpanded" symbols.  This meant
      that people acquired source files without actual license statements in
      them.  All the relevant files had Utah *copyright* statements in them,
      but without the expanded *license* statements, the licensing status of
      the source files was unclear.
      
      This commit is intended to clear up that confusion.
      
      Most Utah-copyrighted files in the Emulab source tree are distributed
      under the terms of the Affero GNU General Public License, version 3
      (AGPLv3).
      
      Most Utah-copyrighted files related to ProtoGENI are distributed under
      the terms of the GENI Public License, which is a BSD-like open-source
      license.
      
      Some Utah-copyrighted files in the Emulab source tree are distributed
      under the terms of the GNU Lesser General Public License, version 2.1
      (LGPL).
      6df609a9
  19. 21 Jun, 2012 2 commits
    • Leigh Stoller's avatar
      Fix to previous revision. · 2f4ba4e1
      Leigh Stoller authored
      2f4ba4e1
    • Leigh Stoller's avatar
      Horrible kludge for 16 group limit. · 03a4da39
      Leigh Stoller authored
      The geniuser is now over 16 groups, so try to figure out what project
      the action is going to take place, and use just those groups. This is
      temporary cause Mike says FreeBSD8 8 pushes the limit up to 1024.
      Yippie! When we upgrade, just revert this crap.
      03a4da39
  20. 30 Apr, 2012 1 commit
  21. 06 Sep, 2011 1 commit
  22. 30 Aug, 2011 1 commit
  23. 17 Aug, 2011 1 commit
  24. 02 Jun, 2011 1 commit
  25. 23 May, 2011 1 commit
    • David Johnson's avatar
      Install same bins/libs on clients as on control nodes. · fc48cdee
      David Johnson authored
      One difference: we don't make all the symlinks to script_wrapper.py (like
      node_avail et al).
      
      Also, this is going to require m2crypto -- the right version -- on client
      images.  If the scripts don't work on many images for now because
      m2crypto is not there, fine for awhile... but we should move in this
      direction.
      fc48cdee
  26. 11 May, 2011 1 commit
  27. 18 Mar, 2011 1 commit
  28. 18 Feb, 2011 1 commit
  29. 04 Feb, 2011 1 commit
    • Mike Hibler's avatar
      Add compat fix for inner elabs and new frisbee master server. · c5900ee5
      Mike Hibler authored
      It should not be necessary to do anything to you inner elab infrastructure
      to make it work in the New World.  Eventually, those with elabinelabs should
      update/rebuild/install their Emulab software on boss/ops and update their
      MFSes so they too will use a master server.
      c5900ee5
  30. 03 Feb, 2011 1 commit
  31. 15 Dec, 2010 1 commit
  32. 29 Nov, 2010 1 commit
  33. 16 Nov, 2010 1 commit
    • Kevin Atkinson's avatar
      Add support for all node "tb-set-tarfiles". · a0d0c95e
      Kevin Atkinson authored
      "tb-set-tarfiles" is like "tb-set-node-tarfiles" except that it
      distributes the tarfile to all nodes rather than just one and that it
      uses frisbee to distribute the file.
      
      These changes involved 1) refactoring frisbee info from images table
      into a new table, frisbee_blobs, 2) a new experiment_blobs table, and
      3) a new tmcd command so the node knows how to get the files from the
      server.
      
      The changes where designed to be general purpose enough to eventually
      support:
        1) Distributing arbitrary files (not just tarfiles) to nodes
        2) Perform arbitrary actions on those files
        3) Use arbitrary methods to get the files
      
      As such the tmcd line is as follows:
        URL=* ACTION=*
      
      where URL is currently:
        frisbee.mcast://<ADDR>/<FILE>
      for example
        frisbee.mcast://234.16.184.192:18092/users/kevina/home-dir.tar.gz
      and when we get around to using a master Frisbee server it could be
        frisbee://*
      or it could be a file://, http://, etc.
      
      and ACTION is currently:
        unpack:<LOCATION>
      for example
        unpackt:/users
      with future syntax to be determined.
      a0d0c95e
  34. 28 Sep, 2010 1 commit
  35. 23 Sep, 2010 1 commit
  36. 22 Sep, 2010 1 commit