KNEL/KNELServerBuild
2
0
Fork 0
Code Pull Requests Actions Packages Releases 1 Activity
226 Commits 1 Branch 1 Tag
0c736c729584bb624686f737bf42a94b369dae40
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
mrcharlesandClaude 0c736c7295 Enforce HTTPS for all downloads to eliminate security vulnerabilities 
- Convert 16 HTTP URLs to HTTPS across 3 critical scripts
- Dell OMSA script: Ubuntu archive and Dell repository URLs now use HTTPS
- Proxmox legacy script: Download URLs converted to secure connections
- SSL stack script: Apache source URLs updated to official archive
- Update documentation to reflect resolved security issues
- Mark HTTPS enforcement as completed in todo lists

This addresses the second critical security concern from the security review,
eliminating man-in-the-middle attack vectors during package downloads.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-07-14 09:22:32 -05:00
mrcharles 273e7fe674 Claude code review of my work. 2025-07-12 00:17:52 -05:00
mrcharles 6609d7d9e3 sigh. 2025-07-11 11:52:28 -05:00
mrcharles 0588b2dd60 ifdev for dev boxes, they have less hardened ssh config because vscode remote etc 2025-07-11 11:48:53 -05:00
mrcharles f399308b2d allow root to login to cockpit 2025-07-10 10:47:21 -05:00
mrcharles 45b53efe11 working on v1.1, secrets management/bootstrap 2025-07-10 10:28:00 -05:00
mrcharles b0d1ae0a3e . 2025-07-10 10:13:23 -05:00
mrcharles a2ff47e5d2 . 2025-07-10 10:11:50 -05:00
mrcharles b5d09e64f0 we want a bit of observability here.. 2025-07-10 10:09:58 -05:00
mrcharles edc3ca26ad . 2025-07-10 10:06:52 -05:00
mrcharles a272764d66 . 2025-07-10 10:05:51 -05:00
mrcharles 97b67ea1fc . 2025-07-10 10:04:23 -05:00
mrcharles a86b2ea09b and agian... sigh 2025-07-10 10:03:12 -05:00
mrcharles 54cfcf669f fixed agian 2025-07-10 10:01:30 -05:00
mrcharles 28c18a2bda . 2025-07-10 10:00:25 -05:00
mrcharles 168456ee7f fixed 2025-07-10 09:59:35 -05:00
mrcharles d6364eac7a typo 2025-07-10 09:58:28 -05:00
mrcharles d2100d1146 dont' need vm management in vms.. 2025-07-10 09:56:18 -05:00
mrcharles 5c20f167b2 adding cockpit 2025-07-10 09:48:01 -05:00
mrcharles 3b705a23ba don't install rsyslog on librenms server 
fixed some formatting
 2025-07-09 11:24:20 -05:00
mrcharles 319cd61ad4 all the instrumentation/diagnostics... 2025-07-07 12:05:26 -05:00
mrcharles 1e458f0fae being able to use growpart is quite nice 2025-07-05 20:49:40 -05:00
mrcharles 0bf88e3d8c More ubuntu fixes 2025-07-05 17:48:41 -05:00
mrcharles bf4efcdf5a oops 2025-07-02 22:23:16 -05:00
mrcharles f9f556111b lldpd enablement for librenms mapping goodness 2025-07-02 22:12:01 -05:00
mrcharles 7e5302b5e6 This allows for chattr +i of snmpd.conf on hosts we don't want to put the standard snmpd.conf on 2025-07-02 21:20:47 -05:00
mrcharles 885487fce5 so close... 2025-07-02 21:12:37 -05:00
mrcharles ba8efdfa0b more ntp fixes 2025-07-02 21:08:39 -05:00
mrcharles 1d14c9c9a2 netboot is the frontend to take the hit, it forwards to pfvsvrpi. 2025-07-02 20:19:19 -05:00
mrcharles d3e4fb5014 . 2025-07-02 20:18:28 -05:00
mrcharles 001faf76a3 . 2025-07-02 20:08:07 -05:00
mrcharles 52e8ecf779 we don't want to update the ntp config on our stratum1 ntp server 2025-07-02 20:07:36 -05:00
mrcharles 24946292e7 more ntp tweaks 2025-07-02 20:00:10 -05:00
mrcharles cb10cdf1cc ntp fix now 2025-07-02 19:44:15 -05:00
mrcharles f2dc2ce29e automation. no prompts! 2025-07-02 18:52:43 -05:00
mrcharles d1ef7118d5 debian fails... let's see if this fixes it. 2025-07-02 18:47:21 -05:00
mrcharles 160d1b26cc fixed in ubuntu. will test on debian next. 2025-07-02 18:44:46 -05:00
mrcharles ce5bb0be6f . 2025-07-02 18:43:18 -05:00
mrcharles ce1bf7d220 i think this is right... 2025-07-02 18:41:58 -05:00
mrcharles 0175a00458 got to handle the other condition... 2025-07-02 18:25:31 -05:00
mrcharles 0f52d19229 remove debugging 2025-07-02 18:21:56 -05:00
mrcharles 0937036155 had inverse logic. fixed. still shouldn't have caused script to error though... hmm... 2025-07-02 18:15:03 -05:00
mrcharles 02a874f713 . 2025-07-02 18:10:47 -05:00
mrcharles 259a4f07b7 got further . hmm... 2025-07-02 18:09:06 -05:00
mrcharles f06d8b1fe5 ok. i think this is the last of the regressions. 2025-07-02 18:06:26 -05:00
mrcharles d76613c0dc . 2025-07-02 18:00:01 -05:00
mrcharles 5deaecd79f . 2025-07-02 17:57:44 -05:00
mrcharles c58c3f116e . 2025-07-02 17:55:56 -05:00
mrcharles e4e1c66111 . 2025-07-02 17:52:14 -05:00
mrcharles d60c03b116 some more resillience 2025-07-02 17:45:56 -05:00
mrcharles 6cdc7bbba7 this code is going to be quite resillient when done.. 2025-07-02 17:43:17 -05:00
mrcharles ba384498c0 . 2025-07-02 17:41:28 -05:00
mrcharles 8669b64adc i think this should fix ntp/smtp based on my testing. now to e2e test. 2025-07-02 17:40:01 -05:00
mrcharles 13e2678be4 fix NTP graph. by fixing NTP install/config. 2025-07-02 17:16:54 -05:00
mrcharles 1e3c7a97af . 2025-07-02 17:11:06 -05:00
mrcharles b7c329ddb8 . 2025-07-02 17:09:51 -05:00
mrcharles 3207f1a870 . 2025-07-02 17:03:46 -05:00
mrcharles 0041e95d59 . 2025-07-02 17:02:29 -05:00
mrcharles c476f84943 . 2025-07-02 16:59:50 -05:00
mrcharles 8c38bcc57c . 2025-07-02 16:54:05 -05:00
mrcharles 7431c1eb4e . 2025-07-02 16:52:35 -05:00
mrcharles 38b779f054 OAM final push. graph all the things! 2025-07-02 16:50:45 -05:00
mrcharles 197d8e2d27 ubuntu bug workaround 2025-07-02 12:23:31 -05:00
mrcharles 0ee847f556 . 2025-07-02 08:17:56 -05:00
mrcharles 7457db098f . 2025-07-02 08:15:55 -05:00
mrcharles 109acf07be . 2025-07-02 08:14:06 -05:00
mrcharles 7ad5a2a8e7 . 2025-07-02 08:12:57 -05:00
mrcharles 86cded93c5 . 2025-07-02 08:11:26 -05:00
mrcharles ce45ec1684 . 2025-07-02 08:08:16 -05:00
mrcharles 15074a99f4 . 2025-07-02 08:07:45 -05:00
mrcharles 982389fb63 . 2025-07-02 07:56:53 -05:00
mrcharles 7b3549c617 . 2025-07-02 07:55:58 -05:00
mrcharles a9318aee60 . 2025-07-02 07:55:05 -05:00
mrcharles ede6aa0562 no more curl 2025-07-02 07:54:13 -05:00
mrcharles 445cbbefde time... 2025-07-02 07:52:08 -05:00
mrcharles 89ac84c4e1 final bits of security hardening as i pivot back to finishing monitoring/alerting OAM bits. next week will be all the security. 2025-07-02 07:46:55 -05:00
mrcharles 5eb2f6b3d5 path issues again. 2025-07-02 07:43:59 -05:00
mrcharles adc57c1e37 debian netinst is super minimal. lets pull pre-requistes. 2025-07-01 21:05:00 -05:00
mrcharles 29dca6241e extreme path defense 2025-07-01 20:44:22 -05:00
mrcharles a38eac2e77 more path fixes 2025-07-01 20:09:49 -05:00
mrcharles 0016e1aaeb path issues 2025-07-01 20:06:47 -05:00
mrcharles 80dd021217 found a bug 2025-07-01 20:00:53 -05:00
mrcharles 4e3368156c so close now 2025-06-30 14:45:10 -05:00
mrcharles 46020fecf5 weird one... 2025-06-30 14:41:58 -05:00
mrcharles e3683db3cf . 2025-06-30 14:38:32 -05:00
mrcharles c77d932dd2 moving along nicely... 2025-06-30 14:37:37 -05:00
mrcharles ffdef9500c . 2025-06-30 14:35:48 -05:00
mrcharles 363c845ead almost... 2025-06-30 14:33:24 -05:00
mrcharles df7f369f8c I think this is it... 2025-06-30 14:30:49 -05:00
mrcharles 63536f2684 . 2025-06-30 14:29:22 -05:00
mrcharles 063cfc2262 . 2025-06-30 14:28:58 -05:00
mrcharles 1887920f52 . 2025-06-30 14:27:56 -05:00
mrcharles c1791eaa43 paths.... 2025-06-30 14:25:13 -05:00
mrcharles 94eed1ab9d lets see what breaks... 2025-06-30 14:22:43 -05:00
mrcharles 55178257ef OAM. librenms agent stuff. 2025-06-30 13:53:41 -05:00
mrcharles 486a150e5e oops 2025-06-30 13:41:03 -05:00
mrcharles 8c68a975e0 forgot to pretty print that... 2025-06-30 13:40:22 -05:00
mrcharles 066708f101 . 2025-06-30 13:39:09 -05:00
mrcharles 9be83022e6 . 2025-06-30 13:38:52 -05:00
mrcharles 66976c2ed0 / 2025-06-30 13:38:00 -05:00