-
v0.4.0
Stable
gitea-actions
released this
2026-11-01 16:18:23 +01:00 | 2 commits to main since this releaseAdded
- Rooms in 3D (three.js shipped in the binary, loaded on first use): racks at their places and
height, servers drawn from their model's front (drive bays, ears, vents; no photos or logos) with
the state on the ear, multi-node sleds side by side, backs with power supplies and the network
cards' ports. Drag to turn, double click to go to a rack; selection is shared with the floor plan. - Cabling from LLDP:
GET /api/v1/cabling(each machine's ports and the switch port they lead to),
switches placed from NetBox or by hand (POST/DELETE /api/v1/switches), cables drawn in the 3D
room like busbars (one bus per rack and switch up the back, thicker with more cables, a stub per
port, a comb into the switch, trays over the tops), coloured per switch, and listed per rack in
the side panel; switches also show in the rack elevation.
Where LLDP sees nothing, cables recorded in NetBox (through patch panels) or entered by hand
(POST/DELETE /api/v1/cables); the BMC's port to the out-of-band switch that way, OOB
switches marked; NetBox cables that disagree with LLDP are shown. - NetBox's web UI through Rollcall at its
BASE_PATHon a listener of its own (ipam.ui_listen,
default:8444: another origin than Rollcall's UI), admins only, and links to NetBox from the
web UI (sidebar, sites, rooms, racks, switches, machine devices);ipam.ui_urlfor direct links.
Withipam.ui_login_secret_filethe admin certificate signs in to NetBox too (NetBox's remote
user header, guarded by a shared secret the web server in front of NetBox checks). - Sites page: sites on an OpenStreetMap map (Leaflet shipped in the binary), a site's rooms, and a
room's floor plan with racks on 600 mm tiles coloured by their machines; a rack opens its front.
Racks are placed by dragging and rotated in an edit mode; unplaced ones are laid out
automatically. With NetBox, sites (with coordinates), locations and racks are read from it;
otherwise, or without coordinates there, sites are placed on the map./api/v1/sites,
/api/v1/rooms,POST /api/v1/racks/positions. The web UI's CSP allows OSM tile images. - Server heights without typing them in: SMBIOS chassis height from commissioning, else a model
table checked against vendor documentation (Dell, HPE, Lenovo, xFusion, Fujitsu, Inspur/KAYTUS,
GIGABYTE; not Supermicro, whose model numbers do not carry it), elserack_unitsper model in
config.json. Multi-node sleds share their chassis. The rack elevation spans servers over their
height, groups sleds, marks unknown heights and warns about overlaps; NetBox device types get the
height (0 for sleds, placed without a position). The machine API hassize. - Network page for large sites: a problems strip (offline rack controllers and the VLANs left
without DHCP/PXE, provisioning VLANs without it, subnets over 80%, IPAM errors), filters by fabric,
purpose and rack controller, a search that shows a machine's path (interface, address, VLAN,
rack controller, region), and a VLAN x rack-controller matrix, the default once a site is large.
The topology groups machines more coarsely when boxes would not fit and scrolls instead of
shrinking; the overview shows one row per fabric on a large site. Filters can be put on the URL
(?fabric=…&view=matrix&q=…) to share a view. - Root rotation without re-joining (
rollcall ca rotate prepare | switch | retire, status without
an argument). The trust bundle (all current roots,/ca-bundle.pem) reaches rack controllers
signed by the active root and is installed by their root unit only when that signature verifies;
racks renew client and server certificates from the new root by themselves;switchand
retirewait for every rack. Deployed machines get one file per root and a daily
rollcall-ca-refreshtimer that fetches the bundle from their rack over HTTPS.
Upgrading: rerundeploy/install-rack.shon rack hosts (the update unit installs bundles now).
Changed
rollcall ca rotate -yes(replace the root, racks join again) is gone; the three steps replace it.- The web UI's files are served with
Cache-Control: no-cacheand an ETag per build: browsers
revalidate and pick up a new build right after a deploy. - Upgrading: database tables and columns are added at start. For NetBox cables the NetBox user
needsviewondcim.cableanddcim.interface; for the UI through Rollcall, NetBox's
BASE_PATHandCSRF_TRUSTED_ORIGINS(README, NetBox's UI through Rollcall).
Fixed
- The release workflow could not publish the commissioning image (permission denied on
SHA256SUMS); an existing checksum file is now verified instead of rewritten. - Stored PXE boot entries kept the old
rollcall.caafter a root rotation; the rack re-pins them. - A rack typed in from a machine's location and the same rack from NetBox in another case showed
twice; the layout sync folds it into NetBox's spelling (place, comment and machines follow). - NetBox paging under a
BASE_PATHdoubled the path on the next page.
Commits: v0.3.0...v0.4.0
- Release 0.4.0
- Review fixes before v0.4.0: NetBox on its own origin, pinned root refresh
- 3D rooms: rail posts, solid servers of unknown height, a word when no cabling is known
- 3D rooms: switches show from the front; UI files revalidate
- Web UI: a toggle button that is on looks on outside a segmented group
- 3D rooms: cables as busbars, switches in the rack elevation
- 3D rooms: cabinets apart from servers, cables you can see
- NetBox through Rollcall: the admin certificate signs in to NetBox
- Cabling: BMC ports to the out-of-band switches, NetBox cables, cables by hand
- NetBox proxy: one route per method, beside the UI's "GET /"
- NetBox's web UI through Rollcall, and links to it from the web UI
- 3D rooms: server backs, switches and the cables between them (LLDP)
- 3D rooms: server fronts drawn from the model
- Racks: one rack whatever the case of its name
- Rooms in 3D: racks at their places and height, servers on their units
- Sites: rooms and racks match whatever their case
- Sites on a map, rooms, floor plans with racks you can place
- Server heights from firmware and model; rack elevation at real size
- Network page for large sites: problems, filters, matrix, machine path
- Rotation: refresh says when it is too late, admin certificates noted
- Rack state re-pins rollcall.ca in stored boot entries
- Root rotation without re-joining: prepare, switch, retire
- Release image upload: the image directory belongs to the deploy user
Downloads
- Rooms in 3D (three.js shipped in the binary, loaded on first use): racks at their places and
-
v0.3.0
Stable
gitea-actions
released this
2026-10-31 09:20:36 +01:00 | 25 commits to main since this releaseThird release: working with a site's existing network services (DNS provider, fixed leases on
Kea and OpenWrt, NetBox device sync, Infoblox), Redfish across vendors with firmware updates,
UEFI Secure Boot, agents over HTTPS, and a security review of the whole code base. Upgrading:
rerundeploy/install.shon the region anddeploy/install-rack.shon rack hosts.Added
- Proxy DHCP: a VLAN in
proxymode (rollcall vlan add ... -proxy-dhcp, web UI,bootstrap.sh --proxy-dhcp) leaves addresses to the site's DHCP server and only answers PXE; machines keep DHCP
unless a static range is set aside; doctor and discover know the mode. - DNS provider:
dnsinconfig.jsonwrites machines' A/AAAA records into the site's DNS, through
the PowerDNS API (ownership by RRset comment) or RFC 2136 dynamic update with TSIG (ownership by a
_rollcall.<name>TXT marker and update prerequisites, so foreign records are never overwritten;
drift is detected by querying).rollcall dns,rollcall dns sync [-dry], a doctor check. - NetBox device sync (
ipam.device_sync): machines become dcim devices with serial, device type,
role, status, interfaces with MAC objects, assigned addresses and primary IP. Site, location and
rack are matched by name from the machine's location and never created; ownership by tag and
rollcall_machineas for addresses, foreign devices of the same name are conflicts. - Infoblox WAPI driver for the IPAM authority (
ipam.provider: infoblox): one host record per
address (DNS-published indns_view, or IPAM-only), ownership by therollcall_machineextensible
attribute (kept withextattrs+), leases, fixed addresses and ranges count as taken, delegated
networks by therollcallattribute. Not tested against a real grid yet. - The release workflow builds the tag's commissioning image on the PXE server and publishes it as
commissioning-*assets. - Lab NetBox (
lab/netbox/install.sh): a container on the lab segment for the NetBox drivers. - Fixed leases on the site's DHCP server for proxy-mode VLANs (
dhcp_reservations), for Kea with
host_cmds(Kea 3.0+) and OpenWrt (rpcd). Rollcall's own leases are reconciled; foreign ones are
reported.rollcall reservations. - Firmware updates over Redfish. A package repository on the region (
rollcall firmware import
from a file or URL, served to BMCs through rack controllers) and each machine's firmware inventory.- Update jobs: hand-over, task watch through BMC restarts, optional power cycle, version check
against the inventory. They resume after a region restart. - Vendor plans from documentation or vendor tools: Dell, HPE (
.fwpkgunpacked), Lenovo,
Supermicro, GIGABYTE/AMI/ASRock Rack, OpenBMC, xFusion, KAYTUS, Fujitsu iRMC. Cisco CIMC is
refused (SCP only). fw_method,fw_paramsandfirmware_baseon the BMC record.- CLI
rollcall firmware, a Firmware tab and repository in the web UI.
- Update jobs: hand-over, task watch through BMC restarts, optional power cycle, version check
- Redfish vendor profiles: one standard driver plus per-vendor behaviour from public documentation,
for Dell iDRAC, HPE iLO, Lenovo XCC, Supermicro, xFusion/Huawei iBMC, KAYTUS/Inspur, Fujitsu iRMC,
Cisco CIMC, GIGABYTE, ASRock Rack, OpenBMC and AMI MegaRAC.- Boot mode kept, omitted or tried per vendor.
- If-Match with 412/428 handling; future-state (
/SD) and@Redfish.Settingstargets. - Busy retries and task following.
- Chassis reset fallback and an emulated power cycle.
- Session login (
auth=session). - Probe results (reset types, boot targets, boot mode, profile) are kept on the BMC and shown in
the UI, and the UI's driver list comes from the server.
Security
A review of the whole code base; the fixes below. Upgrading: rerun
deploy/install.shon the
region anddeploy/install-rack.shon rack hosts (new dnsmasq layout, signed rack updates).- Root SSH keys in published images.
agent/build-image.shtook
the build user'sauthorized_keysunless told otherwise, so the images published with v0.2.0 and
v0.2.1 let three lab keys (the maintainer's laptop, the CI deploy key, the lab hypervisor) log in as
root to machines while they commission. Keys are now opt-in (AUTHKEYS=, the lab deploy sets it),
and the release workflow builds the image of the tag itself and refuses one withauthorized_keys. - Region file read (critical). A rack controller could read any file on the region (CA key,
config) through/api/v1/rack/binary?arch=../...archis now a known architecture. - Path traversal. In
/api/v1/render/...(admin) as well. - Machine-reported MACs. A MAC could be a path, letting a PXE-booting host make the rack write
outside the TFTP directory. Only real hardware addresses are accepted. Rack controllers write only
01-xx-..file names. - Delegated intermediates. An ACME intermediate could mint admin or rack certificates (name
constraints do not cover the CN), and IP addresses when only a domain was permitted.- Admin and rack identities must now be signed by the root itself.
- Intermediates carry a ServerAuth-only EKU, and the unconstrained name type is closed.
- Rack certificates. These were ServerAuth certificates for any address the rack reported, so
one rack could pose as the region.- They are now client-only with no names.
- Racks accept only the region's own certificate.
rack joinchecks the returned CA against the fingerprint in the code.- An unbound join code cannot take over an existing rack's name.
- Job results are accepted only from the rack that took the job.
- Rack self-update. The root unit ran a binary the unprivileged rack user staged.
- The region now signs each binary with its CA key.
- The root unit verifies the signature against the CA from
rack join, in a root-owned directory,
without following links.
- dnsmasq as root. dnsmasq (root) read configuration the rollcall user writes, and the reload
script copied files through links in rollcall's directory.- It now reads a checked copy in
/var/lib/rollcall-dnsmasq. - The copy may hold only the options Rollcall generates: nothing that runs a program or includes
a file.
- It now reads a checked copy in
- Machine record takeover. Any host on the provisioning network could overwrite a deployed
machine's record (and BMC) by reporting its UUID.- Known machines are re-commissioned only when
ready,recommissionor failed. - A MAC another machine owns keeps its boot file.
- The rack controller of a ready machine is not changed by whoever reports it.
- Known machines are re-commissioned only when
- Injection into dnsmasq, cloud-init, PXE menus, udev rules and DNS updates. Subnet domain and
gateway, host names, NIC names, reservation names and machine-reported identity strings are now
validated or reduced to one line. Machine IDs are letters and digits only. - Web UI.
- Escaping is fixed for machine-reported inventory fields (stored XSS).
- A Content-Security-Policy,
frame-ancestors 'none', nosniff and no-referrer are set. - Cross-origin state-changing requests are refused (
http.CrossOriginProtection), so a page
elsewhere cannot use a browser's admin certificate. ?token=is no longer logged.
- Deploy agent.
- The image URL no longer goes into a shell command; the checksum is taken over the bytes written.
- Seed files cannot leave the target root.
- The BMC password is not kept in the fallback inventory file.
- Redfish. Requests stay on the BMC and under
/redfish/: paths the BMC returns cannot send the
credentials elsewhere, andscheme://addresses are reduced to scheme and host. - Machine tokens. Job and node tokens are readable from the TFTP pxelinux files. They are now
accepted only from the machine's own address (its static lease); through a rack, the rack's
X-Forwarded-Forentry counts. A machine without a fixed address binds a job to its first user.
agent_source_check: falseturns this off. - Agents over HTTPS. Rack controllers get a server certificate for their own host and serve
the agents' endpoints and images on 443. Agents accept the CA by the fingerprint on the PXE
command line and do not fall back to HTTP. Old agents keep working over HTTP. The commissioning
image has to be rebuilt to get the new agents.- The stateless overlay client works the same way (rebuild stateless images).
- UEFI and Secure Boot. UEFI machines PXE-boot through Debian's signed shim and GRUB, so machines
with Secure Boot on can boot at all; before, the firmware refused the unsignedsyslinux.efi.- GRUB menus are made from the pxelinux ones.
- The local disk is booted by chainloading the installed OS's signed loader.
- Secure Boot verifies the kernel; the initrd and squashfs are not covered.
- BMC certificates. HTTPS BMCs (Redfish, Proxmox) are pinned on first use. The certificate
is read in a handshake that carries no credentials, and a changed certificate gets none
(tls_fingerprint; cleared on an address change or a BMC firmware update by Rollcall). - BMC hints.
bmc-hintno longer returns the password. The region attaches the configured
credentials itself and checks the BMC from the rack controller. - Rack certificate renewal. Renewal could not overwrite the root-owned files from
rack join.
Renewed certificates now go atomically to/var/lib/rollcall/rack-cert, the previous serial is
accepted for 7 days after a renewal, androllcall rack renewrenews on demand. - Defaults and limits.
admin_httpdefaults toloopback.- Request bodies are capped (commissioning 4 MB, all 16 MB), with read and idle timeouts.
bootstrap.shandpublish-image.shkeep the database password and API tokens off command
lines.
Fixed
- IPAM: a reconcile running during an allocation could delete the record just reserved in NetBox.
- IPAM and DNS sync: one failing record no longer stops the rest of the pass, deletes included.
Reservations are stored in one spelling. - The job watchdog could fail a job that had just started.
- Release without
-diskwiped the smallest disk, not the one the OS was deployed to. Automatic
disk choice skips SAN LUNs (iSCSI, FC, SRP). - RFC 2136 lookups follow the request context. The marker is not removed when the database cannot
say whether other records need it. - Smaller fixes:
seqin templates is capped.- Layout selector
ib:-1no longer panics. - Redfish detection no longer runs on a machine that cannot be read.
- dnsmasq busy loop in proxy mode (a dnsmasq bug with tagged proxy ranges, found with gdb): proxy
ranges are untagged, PXE services limited by interface;dhcp-boot/dhcp-matchonly for served
subnets, nodhcp-hostlines for proxied ones.
Commits: v0.2.1...v0.3.0
- Release 0.3.0
- Release builds the tag's commissioning image, without SSH keys
- Infoblox WAPI driver for the IPAM authority
- INSTALL: point at NetBox device sync and the lab NetBox
- Location changes kick the IPAM reconcile
- rollcall ipam sync: print the device report
- Device sync: v6 primary IP, DMI placeholders, CLI report
- NetBox device sync; lab NetBox container
- docs: fixed leases on the site's DHCP server
- Kea: reservations in memory when there is no hosts database
- DHCP reservations on the site's DHCP server: Kea and OpenWrt
- GRUB keeps the firmware's text console; phone-home back to HTTP
- GRUB local boot chainloads the disk's signed loader; image sums
- UEFI PXE through signed shim and GRUB (Secure Boot)
- CHANGELOG: stateless overlays and phone-home over HTTPS [image]
- gofmt rackctl.go
- HTTPS for stateless overlays and phone-home
- docs: agents over HTTPS
- CD: ship all of deploy/ and agent/
- Agents over HTTPS: rack server certificates, fingerprinted CA
- docs: BMC certificate pinning
- Power: say why a BMC command failed (CLI, UI); certificate changes are events
- BMC certificates pinned on first use (Redfish, Proxmox)
- CHANGELOG: token binding, BMC hints, rack renewal
- Machine tokens only from the machine's own address
- BMC hints: the password stays on the region
- Rack certificate renewal: rack-owned state, atomic, grace period
- Firmware: docs; lab emulator keeps state (StateDirectory)
- Firmware updates over Redfish, per vendor
- rack update: work directory on /var/lib (/run is noexec)
- Redfish vendor profiles from public documentation
- Security review: fix traversal, identity, injection and takeover paths
- License under GPLv3
- DNS provider: PowerDNS API and RFC 2136 with TSIG
- Upstream report for the dnsmasq proxy-DHCP busy loop (report, reproducer, patch)
- Proxy DHCP for networks whose DHCP server stays in charge
- INSTALL: example release v0.2.1
Downloads
- Proxy DHCP: a VLAN in
-
v0.2.1
Stable
gitea-actions
released this
2026-10-28 20:11:16 +01:00 | 62 commits to main since this releaseNote (2026-10-30): the commissioning image (
commissioning-*) was removed from this release: it let three lab SSH keys log in as root on commissioning machines. Build one withbootstrap.sh --build-image, or use the image of v0.3.0 or later.Fixed
bootstrap.sh --image-urlwith a release URL took the release'sSHA256SUMS(the binaries') instead
ofcommissioning-SHA256SUMS; it now prefers the image's and says when a private repository
needsIMAGE_TOKEN.
Commits: v0.2.0...v0.2.1
- Release 0.2.1: bootstrap downloads the release's commissioning image
Downloads
-
v0.2.0
Stable
gitea-actions
released this
2026-10-28 20:02:57 +01:00 | 63 commits to main since this releaseNote (2026-10-30): the commissioning image (
commissioning-*) was removed from this release: it let three lab SSH keys log in as root on commissioning machines. Build one withbootstrap.sh --build-image, or use the image of v0.3.0 or later.Second release: install from scratch, network model and region/rack split, external IPAM
(NetBox), a certificate authority with delegation, many power drivers, IPv6, and a web UI and
console for fleets.Added
- Machine tags (MAAS-style): manual tags per machine, auto tags from match rules over the
inventory ({{ gt .Node.GPUs 0 }}), re-evaluated at commissioning and when a tag changes. - Tags carry a cloud-init fragment merged into deployment user-data (
deploy/tags/gpu-nvidia.yaml
installs the NVIDIA driver on GPU nodes) and extra overlays for stateless nodes. rollcall tag,rollcall tags,rollcall list -tag,deploy tag:NAME/power tag:NAME
fan-out; tags column, editor and definitions panel in the web UI;?tag=filter on the API.- Web UI redesigned for fleets: sidebar navigation (Overview, Machines, Jobs, Tags, Profiles,
OS images), state/tag filter chips, search, sorting and paging, multi-select with bulk
power/deploy/assign/tag/re-commission/release, machine detail with tabs, dialog-driven
actions, fleet-wide/api/v1/eventsand/api/v1/jobs,?token=sign-in for bookmarks. - Physical location per machine (building, room, rack, unit, asset tag):
rollcall location,
CSV import matched by id/serial/MAC/node name with dry run, rack definitions with height,
list -rack/-room/-building, location column and chips in the UI, Racks page with
elevation views, bulk "Set location…",.Node.Racketc. in templates and tag rules. - Terminal console: a bare
rollcallin a terminal opens a full-screen UI in the llmgw style
(Bubble Tea): overview, machines with filter/selection/bulk actions, machine detail, racks
with elevation, jobs, events, tags, profiles, OS images; connect screen that saves
~/.config/rollcall/client.json, which the CLI also reads;rollcall tui -dumprenders one
screen. First Go tests (console rendering and keys). - Network model after MAAS: fabrics, VLANs, subnets, IP ranges (dynamic/reserved/static) and
IPAM; addresses already in use are adopted.rollcall fabric|vlan|subnet|range|ip. - Interface layouts (physical, bond, VLAN; NICs by selector) per machine or per tag; deployment
writes cloud-initnetwork-configand udev name rules into the image; release frees addresses.
rollcall layout,rollcall net show|set. - Region/rack split:
rollcall rack(dnsmasq state, per-MAC PXE files, BMC commands, image cache,
node API proxy) long-polls the region; the region runs an embedded rack controller.
deploy/install-rack.sh,rollcall controllers,rollcall dhcp. - dnsmasq configuration generated from the model, restarted only when it changes and rolled back
if dnsmasq does not come back. - Web UI: Network page (rack controllers, subnets with ranges and usage, layouts), network tab per
machine, layout action; console: Network page, network section, layout action. - Certificate authority on the region (llmgw-style): HTTPS listener with an auto-renewed region
certificate,admin_httppolicy,/ca.pem; rack controllers enroll with one-time join codes
(rollcall controller join-code,rollcall rack join) and use mutual TLS, renewing their
certificate themselves; removal revokes; deployed machines and overlays trust the CA;
rollcall ca show|issue; the console trusts a CA on first connect after showing its fingerprint. - Power drivers: ipmi, redfish, idrac, ilo, supermicro, xcc, openbmc, proxmox, manual, run on the
rack controller; Redfish auto-detection after commissioning;rollcall bmc, BMC editing in the
web UI and console. Lab Redfish emulator with iDRAC/iLO/generic profiles. - IPv6: subnets, IPAM, dual-stack default layout, per-family default routes, dnsmasq RA/DHCPv6,
AAAA host records, IPv6 listen addresses and URLs, IPv6 in the commissioning inventory. - External IPAM authority (NetBox driver): allocation registers each address in NetBox first and
skips addresses others hold there; ownership by tag +rollcall_machinecustom field; releases
and a periodic reconcile create, fix and delete only Rollcall-owned records;dns_nameper address
for DNS sync; delegated prefixes (rollcall ipam prefixes|import);rollcall ipam [sync -dry],
/api/v1/ipam. - Web UI: network topology drawing (region, external IPAM, rack controllers, one bus per VLAN with
its subnets, machines wired to every VLAN they have an address on; large groups collapse) on the
Network page and, compact, on the Overview. Overview redesigned: fleet state bar, per-rack counts,
attention list incl. IPAM sync, capacity and free pool, OS, hardware, BMC drivers, locations, tags,
recent deployments. - CA delegation: new roots allow one level of intermediates;
rollcall ca intermediate NAME -permit DOMAIN,CIDR [-csr FILE]signs a name-constrained intermediate (for an ACME server such as Caddy's
acme_server);rollcall ca rotate -yesreplaces a root that cannot delegate; tag fragment
deploy/tags/acme-cert.yamlfetches and renews a node certificate with certbot. - Rack controllers update themselves to the region's version: checksum- and version-checked
download over mutual TLS, installed by a root path unit with automatic rollback;
rack_binariesfor other architectures,auto_updateto opt out; versions in
rollcall controllersand the web UI. - Addresses on secondary subnets with a gateway get their own routing table and a source rule in
network-config, so replies from a storage or tenant VLAN leave through that VLAN's gateway. - With
admin_httpother thanallow, browsers that open the web UI over HTTP are redirected to
HTTPS (nodes keep HTTP for images and the agent). - Admin client certificates:
rollcall admin-cert request NAME(key stays on the client, CSR only),
list,revoke; the region accepts them as admin over HTTPS; CLI/console use them from
client.json, the web UI works without a token when the browser presents one (.p12written). deploy/bootstrap.sh: a region on a fresh Debian 13 host. Day 0 needs nothing about the network:
packages, PostgreSQL, TFTP tree, config, services and a verified commissioning image, the region
reachable on its management address with no DHCP or subnets. Run again with--ifaceonce the
provisioning network is known: server address updated, subnet with ranges, DHCP, optional NAT.rollcall net discover: per interface link, speed, addresses and implied subnets, switch/port/VLAN
from LLDP, DHCP servers that answer, neighbours, and what to do with it.commission_appendfollowsserver_urlwhen left empty.rollcall doctor: checks configuration, database, listeners, certificates, TFTP files, image
checksums, dnsmasq, DNS as machines see it, clock, foreign DHCP servers on the provisioning
network (DHCPDISCOVER probe), rack controllers, OS images and IPAM, with what to do.rollcall version; CD-built binary carriesgit describe.- Release notes from
CHANGELOG.md.
Fixed
- RHEL-family deployments (Rocky, Alma, CentOS) did not trust the Rollcall CA: cloud-init's
ca_certsranupdate-ca-certificatesthere and failed. The CA now goes into the image's trust
anchors and abootcmdrebuilds the store with the distribution's tool. - A deploy whose power command was lost (rack or region restarting) stayed pending forever and the
event looked like a success: power errors are now part of the event (pxe boot failed), and a
job the machine has not started withinjob_start_timeout(default 30m, room for servers that
take 4-5 minutes to POST) fails with a hint. - CentOS Stream 9 image URL (the 502 was a missing file name).
- Rack controllers' dnsmasq had no upstream DNS on Debian (it looks for a resolvconf file that is
usually missing) and refused every name outside the cluster domain; the generated configuration
now forwards to systemd-resolved's stub (keeping split DNS) or the host's resolv.conf servers. - Virtual BMC addresses are configured in netplan on the lab PXE server (they were lost on a
network reconfigure, which made every BMC call fail). - Commissioning console no longer shows a failing autologin (
noautologin).
Commits: v0.1.0...v0.2.0
- Release 0.2.0
- cloud-init final_message: no $hostname (not expanded there; warned on every deploy)
- Deployments trust the CA on RHEL-family systems too
- Lost power commands are visible; jobs not started in job_start_timeout fail
- os-sources: correct CentOS Stream 9 image name (the 502 was a missing file)
- Install guide, release bundles, publishable commissioning image
- Day-0 install without a network plan; rollcall net discover
- From-scratch install: deploy/bootstrap.sh and rollcall doctor
- admin-cert request: refresh the stored CA for the same region (it may have been rotated)
- Admin client certificates as an alternative to the admin token
- Web UI over plain HTTP redirects to HTTPS when admin_http forbids HTTP
- network-config: policy routing for addresses on secondary subnets with a gateway
- Rack controllers update themselves to the region's version
- dnsmasq: forward outside names (systemd-resolved stub or resolv.conf)
- CA delegation: name-constrained intermediates, root rotation, ACME node certificates
- Web UI: network topology drawing; richer Overview
- ipam: a subnet domain names records only inside the authority's zone
- External IPAM authority: NetBox driver, ownership, reconcile
- Region as certificate authority, BMC power drivers, IPv6
- Network model, IPAM, interface layouts and the region/rack split (MAAS-style)
- Terminal console: bare
rollcallin a terminal opens a full-screen UI (llmgw style) - ui: machines table scrolls horizontally on narrow screens; shorter model/serial cells
- ui: fix undefined location filter variable on the Machines page
- Physical location: building / room / rack / unit / asset tag
- Web UI redesigned for datacenter fleets
- Machine tags (MAAS-style), changelog-driven release notes
- deploy workflow: version stamp from git describe
Downloads
- Machine tags (MAAS-style): manual tags per machine, auto tags from match rules over the
-
v0.1.0
Stable
gitea-actions
released this
2026-10-27 10:42:13 +01:00 | 90 commits to main since this releaseFirst tagged release.
Added
- Commissioning: Debian 13 live image with firmware, IB and NVMe tooling; hardware inventory
(DMI, DIMMs, CPUs, disks, NVMe, NICs, InfiniBand, GPUs, PCI, LLDP, TPM); in-band BMC account
creation with out-of-band hints for VMs; secrets sealed with AES-256-GCM; ipmitool server-side. - Single static Go binary: HTTP API, embedded web UI, CLI, PostgreSQL schema.
- Stateless (Warewulf-style) nodes: profiles, node names and IP pools, rendered overlays, dnsmasq
export, Slurm compute image and controller sync. - OS deployment: image catalog with nightly upstream sync and vendor checksum verification
(Debian 13, Ubuntu 24.04, Rocky 9, AlmaLinux 9, CentOS Stream 9), streamedzstd | ddwrites
with sha256 and live progress, cloud-init NoCloud seed, SELinux relabel, UEFI boot entry,
phone-home, release/wipe jobs. - Gitea Actions: CI, deploy to the PXE server, website publish, release on tags.
- Lab: Proxmox SDN subnet,
pve-vbmcIPMI emulator for VMs.
Downloads
- Commissioning: Debian 13 live image with firmware, IB and NVMe tooling; hardware inventory