Ilker ManapandClaude Opus 5.5 77894b7d57 CA delegation: name-constrained intermediates, root rotation, ACME node certificates ...

New roots carry path length 1. `rollcall ca intermediate` signs a CSR (or a
generated key) as an intermediate limited to the permitted domains and
address ranges; a root with path length 0 refuses and `rollcall ca rotate`
replaces it. deploy/tags/acme-cert.yaml gets a node certificate from an
ACME server under such an intermediate and renews it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-28 10:23:26 +01:00

..

overlays/compute

Stateless (Warewulf-style) provisioning: profiles, node pools, overlays, dnsmasq export, compute image

2026-10-27 02:00:14 +01:00

tags

CA delegation: name-constrained intermediates, root rotation, ACME node certificates

2026-10-28 10:23:26 +01:00

config.example.json

External IPAM authority: NetBox driver, ownership, reconcile

2026-10-28 09:35:21 +01:00

install-rack.sh

Region as certificate authority, BMC power drivers, IPv6

2026-10-28 07:44:13 +01:00

install.sh

Network model, IPAM, interface layouts and the region/rack split (MAAS-style)

2026-10-27 23:58:40 +01:00

os-sources.json

OS deployment: image catalog with upstream sync, deploy/release jobs, agent deploy mode, UI and CLI

2026-10-27 10:10:39 +01:00

pxelinux-default

lab: noautologin on the commissioning cmdline; note on persisting BMC addresses in netplan

2026-10-27 10:31:52 +01:00

rack.example.json

Region as certificate authority, BMC power drivers, IPv6

2026-10-28 07:44:13 +01:00

rollcall-controller-sync.service

controller sync as a POSIX script (the unit's inline shell used bash-only syntax)

2026-10-27 02:12:54 +01:00

rollcall-controller-sync.sh

controller sync as a POSIX script (the unit's inline shell used bash-only syntax)

2026-10-27 02:12:54 +01:00

rollcall-controller-sync.timer

compute image: dbus for slurmd's systemd scope; controller slurm.conf sync timer

2026-10-27 02:12:08 +01:00

rollcall-dnsmasq-reload.sh

Network model, IPAM, interface layouts and the region/rack split (MAAS-style)

2026-10-27 23:58:40 +01:00

rollcall-dnsmasq.path

Network model, IPAM, interface layouts and the region/rack split (MAAS-style)

2026-10-27 23:58:40 +01:00

rollcall-dnsmasq.service

Network model, IPAM, interface layouts and the region/rack split (MAAS-style)

2026-10-27 23:58:40 +01:00

rollcall-os-sync.service

OS deployment: image catalog with upstream sync, deploy/release jobs, agent deploy mode, UI and CLI

2026-10-27 10:10:39 +01:00

rollcall-os-sync.timer

OS deployment: image catalog with upstream sync, deploy/release jobs, agent deploy mode, UI and CLI

2026-10-27 10:10:39 +01:00

rollcall-rack.service

Network model, IPAM, interface layouts and the region/rack split (MAAS-style)

2026-10-27 23:58:40 +01:00

rollcall.service

Stateless (Warewulf-style) provisioning: profiles, node pools, overlays, dnsmasq export, compute image

2026-10-27 02:00:14 +01:00