26 Commits (13612ef37671650509a954d77efd188c63a7c024)

Author	SHA1	Message	Date
zouxianyu	c1cb5d63b9	add missing kernel config check ... Signed-off-by: zouxianyu <2979121738@qq.com>	6 months ago
Rishikesh Nair	82cfacb2f3	Update contrib/util/check-config.sh ... Co-authored-by: Brad Davidson <brad@oatmail.org> Signed-off-by: Rishikesh Nair <42700059+rishinair11@users.noreply.github.com>	9 months ago
Rishikesh Nair	ce0765c9f8	Rename `RAW_OUTPUT` -> `NO_COLOR` ... Also, if NO_COLOR is empty, output will be colored, otherwise not colored. Signed-off-by: Rishikesh Nair <alienware505@gmail.com>	9 months ago
Rishi	ff7cfa2235	Disable color outputs using RAW_OUTPUT env var ... Setting this environment variable will not wrap the text in color ANSI code, so that we can print a raw output. Signed-off-by: Rishikesh Nair <alienware505@gmail.com>	9 months ago
Derek Nola	3eb4e12c3b	Don't use zgrep in `check-config` if apparmor porfile is enforced (#7939) ... * Don't use zgrep if apparmor is enforced for it * Bump e2e se timeouts for reencryption time Signed-off-by: Derek Nola <derek.nola@suse.com>	1 year ago
Derek Nola	d13ee64403	Enhance `k3s check-config` (#7091) ... * Move CONFIG_CGROUP_PIDS to Required Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Derek Nola	9980504196	Fix to Rotate CA e2e test (#7101) ... * Include note on service keys Signed-off-by: Derek Nola <derek.nola@suse.com> * Fix rotate cert ca test Signed-off-by: Derek Nola <derek.nola@suse.com> * Remove periods Signed-off-by: Derek Nola <derek.nola@suse.com> * Add new test to nightly script Signed-off-by: Derek Nola <derek.nola@suse.com> --------- Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Richard Steinmetz	a912902aa7	Add missing kernel config checks (#6946) ... Add additional kernel config checks for NETFILTER_XT_MATCH_COMMENT and NETFILTER_XT_MATCH_MULTIPORT as they are both required to run k3s. Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>	2 years ago
Brad Davidson	68fcb48a35	Update/rename certs.sh; add default cert rotation script ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	2156015521	Improve default umask for certs.sh ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	1ec242d816	Add example certificate generation script ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Derek Nola	fd79a1cfea	Bump testing to opensuse Leap 15.4 (#6337) ... * Bump to Leap 15.4 for testing Signed-off-by: Derek Nola <derek.nola@suse.com>	2 years ago
Rowan Thorpe	dccee4e87b	Fix regression from commit 137e80cd86 ... Problem: A false-negative in check-config.sh for cgroups v2 systems was fixed but the commit introduced a regression based on a small assumption that content of /sys/fs/cgroup/cgroup.controllers would have the same format as the content of /proc/self/cgroup. It doesn't. Solution: This just tweaks the regex to count occurrences of either cgroup subsystem-names on each line (as occurs in the sysfs pseudo-file), or those names with colons either side (as occurs in the procfs pseudo-file). Signed-off-by: Rowan Thorpe <rowan@rowanthorpe.com>	3 years ago
Rowan Thorpe	137e80cd86	Handle cgroup v1/2/hybrid in check-config.sh more explicitly/accurately ... Problem: In check-config.sh assumptions are made about cgroups v1/v2/hybrid, causes false-negative on pure V2 system. Solution: In check-config.sh implement the same validation as found in ./pkg/agent/run.go -> validate(), validateCgroupsV1(), validateCgroupsV2() [ which use containerd/cgroups:utils.go -> Mode() ] Signed-off-by: Rowan Thorpe <rowan@rowanthorpe.com>	3 years ago
Derek Nola	2afa3dbe1c	Changed iptables version check for fail if version is between 1.8.0 and 1.8.3 and using nf_tables mode (#3425) ... Signed-off-by: dereknola <derek.nola@suse.com>	4 years ago
Erik Wilson	f6153201ba	Add diagnostics collection scripts ... Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>	4 years ago
Erik Wilson	7f0bdf8a1e	check-config: Remove NF_NAT_IPV4 and NF_NAT_NEEDED from kernel check	4 years ago
Jean-Philippe Evrard	eabc82c724	Remove trailing whitespaces ... To please my OCD, and remove my editor flashing boxes, I am removing trailing whitespaces. They have no purpose in life.	5 years ago
Erik Wilson	5b98d10e4b	Warn if NPC can't start rather than fatal error ... If the ip_set kernel module is not available we should warn that the network policy controller can not start rather than cause a fatal error. Also adds module probing and config checks for ip_set.	5 years ago
Erik Wilson	3c945476f6	Revert check-config's "Silence modprobe warnings" ... This reverts commit 8edbe30c8c.	5 years ago
Erik Wilson	8edbe30c8c	Silence modprobe warnings	5 years ago
Erik Wilson	c83ec56cbe	Non-fatal warning for check-config modules	5 years ago
Erik Wilson	7b3a2d33d1	Clean up check-config exit code & text	5 years ago
Erik Wilson	cc4026e1e2	Search system path for iptables in check-config	5 years ago
Erik Wilson	a73f8b1773	Update check-config.sh for k3s	5 years ago
Erik Wilson	b0d1ca9c21	Add check-config.sh from moby	5 years ago