Wolfgang Bumiller and Dietmar Maurer
8fb24a2c0a
daily-update: check acme certificates
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-05-04 09:43:50 +02:00
Wolfgang Bumiller and Dietmar Maurer
4b5d9b6e64
ui: add certificate & acme view
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-05-04 09:42:50 +02:00
Wolfgang Bumiller and Dietmar Maurer
72bd8293e3
add acme commands to proxmox-backup-manager
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-05-04 09:39:16 +02:00
Wolfgang Bumiller and Dietmar Maurer
09989d9963
add node/{node}/config api path
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-05-04 09:32:42 +02:00
Wolfgang Bumiller and Dietmar Maurer
4088d5bc62
add node/{node}/certificates api call
...
API like in PVE:
GET .../info => current cert information
POST .../custom => upload custom certificate
DELETE .../custom => delete custom certificate
POST .../acme/certificate => order acme certificate
PUT .../acme/certificate => renew expiring acme cert
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-05-04 09:31:30 +02:00
Wolfgang Bumiller and Dietmar Maurer
d4b84c1dec
add config/acme api path
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-05-04 09:30:49 +02:00
Dietmar Maurer
426847e1ce
node config cleanups
2021-05-04 09:29:31 +02:00
Wolfgang Bumiller and Dietmar Maurer
79b902d512
add node config
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-05-04 09:29:31 +02:00
Dietmar Maurer
73c607497e
cleanup acme client
2021-05-04 09:28:53 +02:00
Wolfgang Bumiller and Dietmar Maurer
f2f526b61d
add acme client
...
This is the highlevel part using proxmox-acme-rs to create
requests and our hyper code to issue them to the acme
server.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-05-04 07:56:52 +02:00
Wolfgang Bumiller and Dietmar Maurer
cb67ecaddb
add acme config
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-05-04 07:43:43 +02:00
Dominik Csapak and Thomas Lamprecht
5bf9b0b0bb
docs: user-management: add note about untrusted certificates for webauthn
...
Since currently it works fine with untrusted certs, but that may change
anytime.
Signed-off-by: Dominik Csapak <d.csapak@proxmox.com >
2021-05-03 12:01:23 +02:00
Thomas Lamprecht
7a61f89e5a
tape backup job: fix typo in error message
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-05-03 12:01:23 +02:00
Dominik Csapak and Dietmar Maurer
671c6a96e7
bin: use extract_output_format where necessary
...
else we sometimes forget to remove it from the 'params' variable
and use that further, running into 'invalid parameter' errors
found by giving 'output-format' paramter to proxmox-tape status
Signed-off-by: Dominik Csapak <d.csapak@proxmox.com >
2021-05-03 08:58:35 +02:00
Hannes Laimer and Wolfgang Bumiller
f0d23e5370
add ctime and size function to IndexFile trait
...
Signed-off-by: Hannes Laimer <h.laimer@proxmox.com >
2021-04-30 11:40:45 +02:00
Dominik Csapak and Dietmar Maurer
d1bee4344d
ui: tape: handle tapes in changers without barcode
...
by checking for definedness of the label (tapes without barcode
have the empty string as label-text) and falling back to the
source slot for the load action
Note: Changed the load-slot API from PUT to POST
Signed-off-by: Dominik Csapak <d.csapak@proxmox.com >
Signed-off-by: Dietmar Maurer <dietmar@proxmox.com >
2021-04-30 10:23:53 +02:00
Wolfgang Bumiller and Dietmar Maurer
d724116c0c
add dns alias schema
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-30 08:10:57 +02:00
Thomas Lamprecht
888d89e2dd
temporarily disable broken test
...
this test was added before the used NodeConfig schema was committed,
cannot work...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-04-29 16:18:20 +02:00
Thomas Lamprecht
a6471bc346
bump version to 1.1.5-3
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-04-29 15:26:24 +02:00
Thomas Lamprecht
6b1da1c166
file restore: log which filesystems we support
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-04-29 15:24:45 +02:00
Stefan Reiter and Thomas Lamprecht
18210d8958
file-restore: use 'norecovery' for xfs filesystem
...
This allows mounting XFS partitons with 'dirty' states, like from a
running VM. Otherwise XFS tries to write recovery information, which
fails on a read-only mount.
Tested-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
Tested-by: Dominik Csapak <d.csapak@proxmox.com >
Signed-off-by: Stefan Reiter <s.reiter@proxmox.com >
2021-04-29 15:09:09 +02:00
Wolfgang Bumiller and Dietmar Maurer
bc5c1a9aa6
add 'config file format' to tools::config
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-29 12:11:54 +02:00
Wolfgang Bumiller and Dietmar Maurer
3df77ef5da
config::acl: make /system/certificates a valid path
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-29 12:08:00 +02:00
Wolfgang Bumiller and Dietmar Maurer
e8d9d9adfa
bump d/control
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-29 12:05:22 +02:00
Wolfgang Bumiller and Dietmar Maurer
01d152720f
Cargo.toml: depend on proxmox-acme-rs
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-29 12:04:28 +02:00
Wolfgang Bumiller and Dietmar Maurer
5e58381ea9
catalog shell: replace LoopState with ControlFlow
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-29 11:17:21 +02:00
Wolfgang Bumiller and Dietmar Maurer
0b6d9442bd
tools: add ControlFlow type
...
modeled after std::ops::ControlFlow
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-29 11:15:20 +02:00
Wolfgang Bumiller and Dietmar Maurer
134ed9e14f
CertInfo: add is_expired_after_epoch
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-29 11:07:04 +02:00
Wolfgang Bumiller and Dietmar Maurer
0796b642de
CertInfo: add not_{after, before}_unix
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-29 10:59:02 +02:00
Wolfgang Bumiller and Dietmar Maurer
f912ba6a3e
config: factor out certificate writing
...
for reuse in the certificate api
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-28 12:58:41 +02:00
Wolfgang Bumiller and Dietmar Maurer
a576e6685b
tools::fs::scan_subdir: use nix::Error instead of anyhow
...
allows using SysError trait on it
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-28 12:32:57 +02:00
Wolfgang Bumiller and Dietmar Maurer
b1c793cfa5
systemd: add reload_unit
...
via try-reload-or-restart
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com >
2021-04-28 12:15:26 +02:00
Dietmar Maurer
c0147e49c4
tools/http: make user agent configurable
2021-04-28 12:15:26 +02:00
Dietmar Maurer
d52b120905
tools/http: set USER_AGENT inside request
2021-04-28 12:15:26 +02:00
Thomas Lamprecht
84c8a580b5
bump version to 1.1.5-2
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-04-28 11:35:12 +02:00
Dietmar Maurer
467bd01cdf
api: add schema for http proxy configuration - HTTP_PROXY_SCHEMA
2021-04-28 11:23:06 +02:00
Dietmar Maurer
7a7fcb4715
http: add helper to parse proxy configuration
2021-04-28 11:23:06 +02:00
Dietmar Maurer
cf8e44bc30
HttpsConnector: add proxy authorization support
2021-04-28 11:23:06 +02:00
Thomas Lamprecht
279e7eb497
buildsys: add pbs-client repo in upload target
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-04-28 09:41:45 +02:00
Stefan Reiter and Thomas Lamprecht
606828cc65
file-restore: strip .img.fidx suffix from drive serials
...
Drive serials have a character limit of 20, longer names like
"drive-virtio0.img.fidx" or "drive-efidisk0.img.fidx" would get cut off.
Fix this by removing the suffix, it is not necessary to uniquely
identify an image.
Signed-off-by: Stefan Reiter <s.reiter@proxmox.com >
2021-04-27 16:41:29 +02:00
Dietmar Maurer
aac424674c
bump version to 1.1.5-1
2021-04-27 12:21:08 +02:00
Dominik Csapak and Dietmar Maurer
8fd1e10830
tools/sgutils2: add size workaround for mode_sense
...
Some drives will always return the number of bytes given in the
allocation_length field, but correctly report the data len in the mode
sense header. Simply ignore the excess data.
Signed-off-by: Dominik Csapak <d.csapak@proxmox.com >
2021-04-27 11:37:03 +02:00
Dietmar Maurer
12509a6d9e
tape: improve inline docs
2021-04-27 11:37:03 +02:00
Dietmar Maurer
5e169f387c
tape: add read_medium_configuration_page() to detect WORM media
...
And use it inside format_media().
2021-04-27 11:37:03 +02:00
Stefan Reiter and Thomas Lamprecht
8369ade880
file-restore: fix package name for kernel/initramfs image
...
Signed-off-by: Stefan Reiter <s.reiter@proxmox.com >
2021-04-27 11:17:38 +02:00
Dietmar Maurer
73cef112eb
tape: remove MediumType struct, which is only valid on IBM drives
...
HP drives do not return this information.
Note: This breaks format on WORM media, because we have not way
to detect WOREM media (how?).
2021-04-27 09:58:27 +02:00
Thomas Lamprecht
4a0132382a
bump version to 1.1.4-1
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com >
2021-04-27 08:41:05 +02:00
Dominik Csapak and Dietmar Maurer
6ee69fccd3
tools/sgutils2: improve error messages
...
include the expected and unexpected sizes in the error message,
so that it's easier to debug in case of an error
Signed-off-by: Dominik Csapak <d.csapak@proxmox.com >
2021-04-27 08:24:50 +02:00
Stefan Reiter and Thomas Lamprecht
a862835be2
file-restore: use less memory for VM and reboot on panic
...
With the vsock-pkt-buffer fix in proxmox-backup-restore-image, we can
use way less memory for the VM without risking any crashes. 128 MiB
seems to be the lowest it will go and still be fully reliable.
While at it, add the "panic=1" argument to the kernel command line, so
in case the kernel *does* run out of memory, it will at least restart
automatically.
Signed-off-by: Stefan Reiter <s.reiter@proxmox.com >
2021-04-26 15:46:37 +02:00
Stefan Reiter and Thomas Lamprecht
ddbd63ed5f
file-restore: exit with code 1 in case streaming fails
...
This way the task gets marked as "failed" in PVE.
Signed-off-by: Stefan Reiter <s.reiter@proxmox.com >
2021-04-26 15:46:37 +02:00