|
| 1 | +# v0.0.113 (Sun Nov 24 2024) |
| 2 | + |
| 3 | +#### 🐛 Bug Fix |
| 4 | + |
| 5 | +- wip update servers playbook to fedora [#8](https://github.com/KarmaComputing/server-bootstrap/pull/8) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 6 | +- #16 cron rotate wireguard vpn user config every 2 hrs [#17](https://github.com/KarmaComputing/server-bootstrap/pull/17) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 7 | +- #16 remove uneeded inputs.PSONO_SECRET_ID from workflow rotate-wireguard-vpn-user-configs.yml [#17](https://github.com/KarmaComputing/server-bootstrap/pull/17) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 8 | +- #16 update WIREGUARD_VPN_PSONO_SECRET_IDS group_vars/all [#17](https://github.com/KarmaComputing/server-bootstrap/pull/17) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 9 | +- wip Fix #16 continually bootstrap vpn users [#17](https://github.com/KarmaComputing/server-bootstrap/pull/17) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 10 | +- #14 update manual readme steps [#15](https://github.com/KarmaComputing/server-bootstrap/pull/15) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 11 | +- #14 ensure ansible-galaxy collection install --requirements-file ./src/vpn/requirements.yml [#15](https://github.com/KarmaComputing/server-bootstrap/pull/15) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 12 | +- Ref #14 use checkout v4 [#15](https://github.com/KarmaComputing/server-bootstrap/pull/15) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 13 | +- wip Fix #14 automatically rebuild vpn servers [#15](https://github.com/KarmaComputing/server-bootstrap/pull/15) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 14 | +- wip #14 deploy-vpn-server.yml improve [#15](https://github.com/KarmaComputing/server-bootstrap/pull/15) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 15 | +- #14 added localhost.yml group_vars [#15](https://github.com/KarmaComputing/server-bootstrap/pull/15) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 16 | +- wip #14 create/rebuild vpn server [#15](https://github.com/KarmaComputing/server-bootstrap/pull/15) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 17 | +- wip #14 naming vpn_clients -> vpn_servers [#15](https://github.com/KarmaComputing/server-bootstrap/pull/15) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 18 | +- rename/mv folder vpn-client -> src/vpn [#15](https://github.com/KarmaComputing/server-bootstrap/pull/15) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 19 | + |
| 20 | +#### ⚠️ Pushed to `main` |
| 21 | + |
| 22 | +- Update release.yml bump ipxe iso artifact action to v4 ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 23 | +- #20 build & publish zfs netbook image every 2 hrs build-alpine-netboot-image-zfs.yml ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 24 | +- #13 apk install zfs in servers play ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 25 | +- wip #13 pin to alpine v3.20 rather than edge ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 26 | +- build-alpine-netboot-image-zfs.yml can pass branch name ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 27 | +- #20 bump webfactory/ssh-agent@v0.9.0 ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 28 | +- #20 bump actions to v4 for build-alpine-netboot-image-zfs.yml ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 29 | +- #20 correct path scp netboot image to boot server ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 30 | +- #20 stick to naming alpine-zfsnetboot.tar.gz ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 31 | +- #20 exact path in workflow to publish alpine-zfsnetboot-patched-init.tar.gz ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 32 | +- Ref #20 use settings.py properly ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 33 | +- #20 update comments patch-alpine-netboot-image-with-zfs.sh ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 34 | +- #20 tidy up init netboot patching tar between runs ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 35 | +- WIP Fix #18 As operator I can continually boostrap physical server ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 36 | +- #13 DEFAULT_HTTP_REQ_TIMEOUT to 20 ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 37 | +- #13 wip add bootstap-server.sh helper script ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 38 | +- Ref #13 template minimal /etc/network/interfaces during bootstrap (interfaces are already configured with global ips at this point) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 39 | +- downgrade zfs flags ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 40 | +- ensure ZPOOL_VDEV_NAME_PATH set within chroot environment ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 41 | +- Ref #13 more reliable udev disk identify & ensure packages present ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 42 | +- wip fedora ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 43 | +- correct shebang to ash shell for wipe-all-disks ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 44 | +- #13 ensure zfs package installed during play ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 45 | +- #13 more reliable udev disk identify & ensure packages present ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 46 | +- added .gitignore ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 47 | +- add get-first-disk-id.sh create-tank-zpool.sh ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 48 | +- Ref #13 ensure python present on target (alpine) during bootstrap ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 49 | +- update requirements.txt ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 50 | +- update servers play description ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 51 | +- added create-tank-zpool.sh ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 52 | +- added install-fedora-root-on-zfs.sh ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 53 | +- wip update servers playbook to fedora ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 54 | +- added wipe-all-disks.sh ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 55 | +- wip #20 ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 56 | +- Update README.md add Build netboot image bade to readme ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 57 | +- refactor app.py & introduce justKeepRedeploying, HOST_HEALTHCHECK_POLL_IP, PollPingHostOSOnline ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 58 | +- Update deploy-vpn-server.yml redeploy every 2->3 hours ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 59 | +- Update deploy-vpn-server.yml concurrency 1 prevent concurrent runs #14 #16 ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 60 | +- #16 after rebuilding VPN, always rotate & publish user wireguard vpn entries #14 ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 61 | +- Update README.md add deploy VPN server status badge ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 62 | +- #14 deploy VPN server every 2 hrs deploy-vpn-server.yml ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 63 | +- #14 correct ansible-playbook --extra_vars -> --extra-vars ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 64 | +- #14 ansibleise Add-vpn-user ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 65 | +- #14 add-vpn-user force collections-path ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 66 | +- #14 generate-user-vpn-config pip3 install -r src/vpn/requirements.txt ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 67 | +- #14 only tmate if Update deploy-vpn-server.yml fails ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 68 | +- #14 Update deploy-vpn-server.yml job name build -> deploy-vpn-server ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 69 | +- #14 move tmate to last Update deploy-vpn-server.yml ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 70 | +- Ref #14 update server_bootstrap_private_ssh_key ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 71 | +- #14 bump runner to ubuntu-24.04 Update deploy-vpn-server.yml ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 72 | +- #14 Update deploy-vpn-server.yml debug ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 73 | +- #14 ensure mode 600 for ansible_ssh_private_key_file ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 74 | +- Ref #14 ensure ~/ssh dir exists on local/runner host ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 75 | +- Ref #14 added missing templates/ssh/ssh_private_key_server_bootstrap.j2 ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 76 | +- #14 don't gather facts on vpn_servers before keys places & put ansible_ssh_private_key_file in all group_vars ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 77 | +- #14 correct delegate from 127.0.01 -> localhost ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 78 | +- #14 place ssh_private_key_server_bootstrap and server_bootstrap_public_ssh_key in localhost groupvars ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 79 | +- #14 template early Template ssh_private_key_server_bootstrap ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 80 | +- #14 delegate correctly Template ssh_private_key_server_bootstrap to the runner ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 81 | +- Ref #14 disable host_key_checking during boostrap ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 82 | +- #14 Template ssh_private_key_server_bootstrap ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 83 | +- #14 give _vault_hetzner_cloud_token vault secret via cli ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 84 | +- Revert "Ref #14 fix workflow deploy-vpn-server.yml dynamic inventory inventory-vpn-servers-hcloud.yml not needed at that stage (its references via playbook imported later)" ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 85 | +- Ref #14 fix workflow deploy-vpn-server.yml dynamic inventory inventory-vpn-servers-hcloud.yml not needed at that stage (its references via playbook imported later) ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 86 | +- #14 debug tmate always ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 87 | +- Ref #14 force install of hcloud ansible collection ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 88 | +- #14 remove uneeded vpn_servers from inventory.ini since dynamic inventory ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 89 | +- #14 add missing pip install -r ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 90 | +- #14 reinstate use of trap to rm ansible TMPFILE@Q ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 91 | +- remove clunky use of add-mask feature ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 92 | +- #14 debug ansible vault ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 93 | +- Ref #14 masking inputs ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 94 | +- Ref #14 masking inputs.ansible_vault_password ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 95 | +- Ref #14 remove dead code PSONO_SECRET_ID ([@chrisjsimpson](https://github.com/chrisjsimpson)) |
| 96 | + |
| 97 | +#### Authors: 1 |
| 98 | + |
| 99 | +- [@chrisjsimpson](https://github.com/chrisjsimpson) |
| 100 | + |
| 101 | +--- |
| 102 | + |
1 | 103 | # v0.0.112 (Sun Apr 07 2024)
|
2 | 104 |
|
3 | 105 | #### ⚠️ Pushed to `main`
|
|
0 commit comments