Brian Picciano
838c548706
Fix random bugs related to using garage cli tools
2022-11-08 14:54:31 +01:00
Brian Picciano
c4b7abbcc4
Add documentation related to firewalls
2022-11-05 17:16:25 +01:00
Brian Picciano
97d4aacc15
Make output of hosts list more useful
2022-11-05 16:55:17 +01:00
Brian Picciano
0d7d69679f
Rename to make-bootstrap to create-bootstrap
2022-11-05 16:41:14 +01:00
Brian Picciano
4bc0750797
Adjust .gitignore after change to yml
2022-11-05 16:32:26 +01:00
Brian Picciano
d916d1a630
Fix dnsmasq config
2022-11-05 16:25:24 +01:00
Brian Picciano
a153911948
Forgot to write bootstrap to data dir during reload
2022-11-05 16:21:49 +01:00
Brian Picciano
0b094f057e
Fix how host object is initialized during daemon startup
2022-11-05 15:50:04 +01:00
Brian Picciano
ffd276bd3e
Refactor how nebula certs are signed and propagated
...
I had previously made the mistake of thinking that the Curve25519 key
which is generated for each host to use in nebula communication could
also be used for signing. This is not the case, Ed25519 is used for
signing and is different thant Curve25519.
Rather than figuring out how to convert the Curve25519 key into an
Ed25519 key, which there is no apparent support for in the standard
library, I opted to instead ship a separate key just for signing with
each host. Doing this required a bit of refactoring in order to keep all
the different keys straight and ensure all data which needs a signature
still has it.
2022-11-05 15:23:29 +01:00
Brian Picciano
e9ac1336ba
Small fixes to documentation and various small bugs
2022-11-05 13:57:21 +01:00
Brian Picciano
c0ebca193d
Add Name field to admin.CreationParams
2022-11-05 13:15:42 +01:00
Brian Picciano
bd5a5552bc
Add Glossary, remove "participant" as a term
2022-11-05 12:03:51 +01:00
Brian Picciano
46685113e0
"cryptic-net network" -> "cryptic network" throughout docs
2022-11-05 11:50:11 +01:00
Brian Picciano
5c8c24e73e
Add documentation for admin create-network
2022-11-03 15:38:31 +01:00
Brian Picciano
b935457439
Various fixes to bugs in admin create-network
2022-11-03 14:54:46 +01:00
Brian Picciano
6ba8b948c2
Update firewall information in "Contributing Storage" doc
2022-11-03 14:30:54 +01:00
Brian Picciano
be25907444
Remove reference to cryptic.io in daemon.yml
2022-11-03 14:25:50 +01:00
Brian Picciano
3ac86e07cf
Use yaml instead of tgz for bootstrap file
2022-11-02 14:34:40 +01:00
Brian Picciano
7d95825f97
Use yaml to encode admin file, not tgz
2022-11-02 14:02:21 +01:00
Brian Picciano
745fe31324
Updates to existing documentation
2022-10-30 02:22:03 +02:00
Brian Picciano
287313e00a
Update daemon-process-tree
2022-10-30 00:38:26 +02:00
Brian Picciano
7dceb659ef
Store full nebula cert for each host in garage, rather than just the IP
...
This allows each host to verify the cert against the CA cert. We also
now have each host sign the yaml file that it posts to garage, to ensure
that a host can't arbitrarily overwrite another host's file.
2022-10-29 21:11:40 +02:00
Brian Picciano
711d568036
Use a real private key for garage instances
2022-10-29 00:09:18 +02:00
Brian Picciano
b26f4bdd6a
Move proc locking into entrypoint
...
This completely cleans up all logic that used to be in crypticnet.
2022-10-27 00:45:40 +02:00
Brian Picciano
28159608c8
Factor out crypticnet.Env completely
2022-10-27 00:37:03 +02:00
Brian Picciano
b23a4cafa6
Remove Bootstrap from Env
2022-10-27 00:25:58 +02:00
Brian Picciano
08f47bd514
Move daemon.yml types and functionality out of entrypoint and Env
2022-10-26 23:21:31 +02:00
Brian Picciano
03618ba72c
Reimplement dnsmasq-entrypoint in go
...
This allowed for deleting all script utilities and environment variable
logic.
2022-10-26 22:18:16 +02:00
Brian Picciano
2200d85992
Make populating garage ports optional
2022-10-26 21:47:39 +02:00
Brian Picciano
6ef21ff186
Don't set bootstrap host entry during admin create-network
2022-10-26 21:30:30 +02:00
Brian Picciano
be2250fddd
Small fixes to get admin create-network working
2022-10-25 21:15:09 +02:00
Brian Picciano
9288d8cf48
Fix and improve version string
2022-10-20 22:30:30 +02:00
Brian Picciano
5e399209b2
Rename go-workspace to just entrypoint, clean out unused wait-for tools
2022-10-20 22:06:22 +02:00
Brian Picciano
47e45e0071
Factor out nebula-entrypoint
...
As part of this all "wait" constraints have been migrated to pure-go
implementations, taking advantage of pmux's `StartAfterFunc` argument.
nebula-entrypoint was the final main process besides the entrypoint
itself, allowing us to get rid of cryptic-net-main.
2022-10-20 21:59:46 +02:00
Brian Picciano
8ba88b4dfc
Use migrated and upgraded pmux
2022-10-20 20:57:26 +02:00
Brian Picciano
8d92b9fe2b
Factor out update-global-bucket
2022-10-19 16:53:38 +02:00
Brian Picciano
0d53d0c6d6
move garage/default.nix to nix/garage.nix
2022-10-19 16:25:11 +02:00
Brian Picciano
936ca8d48f
Factor out garage-apply-layout-diff
...
The new code runs the equivalent functionality within the daemon go
code. It was required to make Env be immutable in order to prevent race
conditions (this really should have been done from the beginning
anyway).
2022-10-19 16:20:26 +02:00
Brian Picciano
41e0b56617
Implement admin create-network command
...
This required a lot of re-implementation of how garage gets interacted
with, including updating cluster layout using the admin API and
initialization of the global bucket key.
2022-10-19 15:41:18 +02:00
Brian Picciano
7a25e1b6e6
Initial implementation of garage.AdminClient
2022-10-16 22:17:24 +02:00
Brian Picciano
eba9b23e61
Introduce admin.CreationParams
2022-10-16 22:07:03 +02:00
Brian Picciano
f720d7accd
Enable the garage admin interface
2022-10-16 21:22:58 +02:00
Brian Picciano
51e21c3e46
Get rid of garage web port
...
It's not clear how we would be using it at this point, and garage 0.8.0
allows us to leave it off, so might as well do so.
2022-10-16 21:12:33 +02:00
Brian Picciano
5e08061cd6
Factor out garage-entrypoint
...
The daemon entrypoint now starts the garage child processes directly,
without the extra step of indirection
2022-10-16 20:48:33 +02:00
Brian Picciano
18422a1084
Re-arrange sub-commands in entrypoint somewhat
2022-10-16 20:44:24 +02:00
Brian Picciano
3b19552173
Remove hash.bin functionality from TGZWriter
2022-10-16 17:06:50 +02:00
Brian Picciano
77cb74f316
Fix bash scripts not having been updated with new bootstrap layout
2022-10-16 16:57:22 +02:00
Brian Picciano
bf0f29f8b6
Fix small error in daemon child process diagram
2022-10-16 16:52:07 +02:00
Brian Picciano
bdd0259280
Basic implementation of the admin package
2022-10-16 16:39:05 +02:00
Brian Picciano
cf52cbff52
Update daemon process tree diagram
2022-10-16 15:54:51 +02:00
