Skip to content
This repository has been archived by the owner on Jul 24, 2024. It is now read-only.

Add _dev profile for now #11

Open
wants to merge 14 commits into
base: orabos
Choose a base branch
from
Open

Add _dev profile for now #11

wants to merge 14 commits into from

Conversation

fwiesel
Copy link
Member

@fwiesel fwiesel commented Apr 5, 2024

Makes inspecting and editing things on the host easier

Vincinator and others added 14 commits March 14, 2024 10:08
Add a feature to make the Garden Linux image as compliant as possible to the [Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide](https://www.stigviewer.com/stig/canonical_ubuntu_20.04_lts/2023-09-08/)

Note that some items in that STIG simply don't apply to Garden Linux, for example it does not contain a GUI or AppArmor.

STIG-specific configuration is encapsulated in the 'stig' feature. To opt in into it, build your image with that feature enabled. Note that this might break other features.

The 'stigDev' feature provides a known user/password and ssh key for the purpose of testing. This feature is only intended for development/testing purposes, not for production.
So far the SapMachine version we include needs to be updated manually.

This PR adds a script to help with that, but the update is still a manual process.

The script finds the latest minor/patch version of a given major version along with the checksums of the tarballs.

Running `update-sapmachine.py` will print out the variables to be used in `exec.config`.
A potential improvement is to edit the `exec.config` script automatically via `update-sapmachine.py`.

We still want the checksum and the exact SapMachine version to be stored in the git repo, so we don't want to hide this by automatically running `update-sapmachine.py` during the build for reproducibility reasons.

Co-authored-by: Vincent Riesop <[email protected]>
…x#2046)

Bumps [boto3](https://github.com/boto/boto3) from 1.34.55 to 1.34.65.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.34.55...1.34.65)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Remove docker from gardener feature

* Remove docker-in-gardener-specific test
- Include mlx5 drivers in initramdisk and load it, otherwise we have
  problems with the setup of the bond (NIC isn't known yet)

- Set the DNS on the bond, as cloud-init sets here things up statically,
  and therefore no DHCP info about the DNS
Makes inspecting and editing things on the host easier
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants