ilker/rollcall
1
0 Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases 5 Wiki Activity
66 Commits 1 Branch 5 Tags
482a9d598738d441bbc7c2212e1bbd3cbe03a2c9
Commit Graph
3 Commits
Author SHA1 Message Date
Ilker ManapandClaude Opus 5.5 a0df7295ea UEFI PXE through signed shim and GRUB (Secure Boot)
CI / agent (push) Successful in 3s
Details
CI / site (push) Successful in 2s
Details
CI / go (push) Successful in 40s
Details 
UEFI machines were given syslinux.efi, which is unsigned: with Secure
Boot on (the default on much server hardware) the firmware refuses it
("Access Denied", seen on an OVMF lab VM), so such a machine could not
PXE-boot at all. They now get Debian's signed shim (bootx64.efi), which
loads the signed network GRUB (grubx64.efi); GRUB reads
grub/grub.cfg-<mac>, else grub/grub.cfg-default, and loads kernels
only as shim verifies them. Rack controllers write the GRUB menus from
the pxelinux menus they already get (same entries: kernel and initrd,
local disk via exit, power off via halt), so both always agree; BIOS
machines keep pxelinux. install.sh, install-rack.sh and bootstrap.sh
install shim-signed and grub-efi-amd64-signed and lay out the files.

Secure Boot covers the kernel; the initrd and the squashfs it fetches
are not covered by it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 10:25:54 +01:00
Ilker ManapandClaude Fable 5.1 7fe7c26e22 Stateless (Warewulf-style) provisioning: profiles, node pools, overlays, dnsmasq export, compute image
CI / site (push) Successful in 3s
Details
CI / go (push) Failing after 36s
Details
CI / agent (push) Successful in 3s
Details 
Profiles bind a RAM-booted root image to overlay templates; assigning a
machine allocates a node name and management IP, writes the per-MAC PXE
entry with a per-node token and exports static leases for dnsmasq. Nodes
pull rendered overlays (hosts, slurm.conf from inventory, gres.conf, SSH
host key, munge key) through rollcall-overlay.service; the runtime refresh
timer is the heartbeat. Adds the compute-debian13 image definition and a
generic live-build root image script, CLI and web UI for profiles/assign.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-27 02:00:14 +01:00
ilkerandClaude Fable 5.1 d9ae89b295 Rollcall: bare-metal commissioning server, agent, image build, lab and CI
CI / site (push) Successful in 2s
Details
CI / agent (push) Successful in 3s
Details
CI / go (push) Successful in 1m15s
Details 
Go server (API, embedded web UI, CLI) backed by PostgreSQL with AES-GCM
sealed BMC secrets; Debian live commissioning agent and live-build recipe;
Proxmox lab with pve-vbmc virtual BMCs; Gitea workflows for CI, releases
and deployment; project website.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
 2026-10-27 01:29:53 +01:00