summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #87 from herbertd/master1.1.4Herbert Duarte2014-06-192-2/+2
|\ | | | | Bump package versions to 1.1.4
| * Bump package versions to 1.1.4Herbert Duarte2014-06-192-2/+2
|/
* Merge pull request #86 from jkaplowitz/support-key-expirationjkaplowitz2014-06-191-0/+67
|\ | | | | Support key expiration
| * Support key expirationJimmy Kaplowitz2014-06-191-0/+67
| | | | | | | | | | | | | | | | | | | | | | We're exploring a way to support short-lived SSH keys with automatic expiration. The spec for this is currently highly experimental, subject to change, and therefore premature to document, but this pull request is public and we welcome input from anyone. I've tested this via our backports Debian image and with a key matching our spec, confirming that it gets removed from authorized_keys within 5 minutes of the expiration timestamp.
* | Merge pull request #84 from jkaplowitz/user-removal-fixjkaplowitz2014-06-192-21/+45
|\ \ | |/ | | Bugfix: Remove users keys when gone from metadata
| * Bugfix: Remove users keys when gone from metadataJimmy Kaplowitz2014-06-192-21/+45
|/ | | | | | | | | | | | | | | | | | Previously, the manage accounts daemon relied solely on the metadata server to know which accounts to examine. It ignored all other accounts. This means that, when the last reference to an account was removed from the metadata server, the final SSH key would linger untouched. Now, enumerate all accounts on the system (as revealed by the system's passwd database). If an account has a ~/.ssh/authorized_keys file but was not reflected in the metadata server, run our key update routine with an empty list of SSH keys to remove any added-by-Google keys that may be present. I successfully tested this on a backports Debian image, by killing the running daemon, copying over the files, starting the daemon, ensuring it could create a new user as before, and ensuring it deletes that user's only key after the user is removed from the metadata server.
* Merge pull request #80 from jeremyje/masterJeremy Edwards2014-06-131-2/+4
|\ | | | | Use cat instead of printf to display metadata value.
| * Use cat instead of printf to display metadata value.Jeremy Edwards2014-06-121-2/+4
|/
* Merge pull request #77 from rjschwei/noexecConfJeremy Edwards2014-06-091-0/+0
|\ | | | | Fix package creation warning
| * - system parameter configuration file should not have executable bitRobert Schweikert2014-06-041-0/+0
|/ | | | | | set + this file is not executed, having the executable bit set generates a warning in OBS when packaging
* Merge pull request #76 from herbertd/masterHerbert Duarte2014-06-031-0/+9
|\ | | | | Fix ssh keys files being emptied when disk is full.
| * Fix ssh keys files being emptied when disk is full.Herbert Duarte2014-06-031-0/+9
|/ | | | | Check that the disk has enough space (size of the ssh keys file + 1MB) before attempting to move the temporary file to its final destination.
* Merge pull request #75 from jeremyje/masterJeremy Edwards2014-06-021-0/+2
|\ | | | | get_metadata_value now properly falls back to project level attributes.
| * Fix bug in get_metadata_value where it wasn't properly falling back to ↵Jeremy Edwards2014-06-021-0/+2
| | | | | | | | project level attributes.
* | Merge pull request #74 from jeremyje/masterJeremy Edwards2014-06-024-4/+4
|\ \ | |/ | | Update http header for retrieving instance metadata.
| * Update http header for retrieving instance metadata.Jeremy Edwards2014-06-024-4/+4
|/
* Merge pull request #70 from jeremyje/masterHerbert Duarte2014-06-021-9/+34
|\ | | | | Update get_metadata_value to use v1 metadata server url.
| * Add quotes around printf in get_metadata_value to print multi-line responses.Jeremy Edwards2014-06-021-1/+1
| |
| * Cleanup get_metadata_value script, removed attributes/ path.Jeremy Edwards2014-06-021-4/+2
| |
| * Update get_metadata_value to use v1 metadata server url for instance with ↵Jeremy Edwards2014-06-021-9/+36
| | | | | | | | fallback to project.
| * Update get_metadata_value to use v1 metadata server url.Jeremy Edwards2014-05-221-2/+2
| |
* | Merge pull request #73 from kratorius/fix-license-checkJeremy Edwards2014-06-025-10/+60
|\ \ | |/ |/| Fix license check when gcimagebundle is run outside of GCE
| * Restored original order of parametersVito Giuliani2014-05-313-5/+4
| |
| * Pass the result of the function call as an argument in place of a callableVito Giuliani2014-05-304-6/+8
| |
| * Test that gcimagebundle doesn't fail when run locallyVito Giuliani2014-05-283-3/+22
| |
| * Load licenses only if running on GCEVito Giuliani2014-05-283-7/+37
|/
* Merge pull request #69 from yueluog/master1.1.3Yue Luo2014-05-082-2/+2
|\ | | | | Bump up the package version to 1.1.3.
| * Bump up the package version to 1.1.3.Yue Luo2014-05-082-2/+2
|/
* Merge pull request #68 from wedsonaf/masterJeremy Edwards2014-05-051-2/+2
|\ | | | | | | * Disable lazy init of inode table and journal when formatting volumes. * Enable discard when mounting volumes.
| * Enable discard when mounting volumes.Wedson Almeida Filho2014-05-051-1/+1
| | | | | | | | | | This allows the file system to tell the underlying volume that it is not interested in blocks, for example, when the files are removed.
| * Disable lazy init of inode table and journal.Wedson Almeida Filho2014-05-051-1/+1
|/ | | | | | Now that discard with guaranteed zeroing is supported by PD, initializing them is really fast and prevents perf from being affected when the filesystem is first mounted.
* Merge pull request #67 from jeremyje/masterJeremy Edwards2014-05-011-2/+8
|\ | | | | Log to console the startup script download log when it fails.
| * Log to console the startup script download log when it fails.Jeremy Edwards2014-05-011-2/+8
|/
* Merge pull request #66 from kimasaki/masterJeremy Edwards2014-04-251-4/+4
|\ | | | | Changed normal sshkeys metadata query log entries from level INFO to DEBUG since it is not necessary to log.
| * Update desired_accounts.pykimasaki2014-04-251-4/+4
|/
* Merge pull request #64 from GoogleCloudPlatform/fingerprintsshenl2014-04-231-0/+29
|\ | | | | Print the fingerprints of the SSH public keys at boot time
| * Update onbootshenl2014-04-231-1/+1
| |
| * Update onbootshenl2014-04-231-6/+6
| |
| * Update onbootshenl2014-04-231-6/+6
| |
| * Update onbootshenl2014-04-231-3/+3
| |
| * Update onbootshenl2014-04-231-6/+6
| |
| * Output SSH public key fingerprints at bootshenl2014-04-231-0/+29
|/
* Merge pull request #62 from herbertd/master1.1.2Herbert Duarte2014-04-152-2/+2
|\ | | | | Bump package versions to 1.1.2.
| * Bump package versions to 1.1.2.Herbert Duarte2014-04-152-2/+2
|/
* Merge pull request #52 from feczo/patch-2Jeremy Edwards2014-04-101-1/+4
|\ | | | | Update block_disk.py
| * Update block_disk.pyfeczo2014-04-111-1/+1
| |
| * Update block_disk.pyfeczo2014-03-191-1/+4
| | | | | | | | | | in case you specify gcimagebundle -d /dev/sda1 the message is not leading you to specify a disk, it makes you confused about why a single partition is not a single partition
* | Merge pull request #61 from yueluog/masterYue Luo2014-04-098-14/+17
|\ \ | | | | | | Switch to IP address to access metadata server.
| * | Incorporate code review feedback.Yue Luo2014-04-093-9/+11
| | |
| * | Merge remote-tracking branch 'upstream/master'Yue Luo2014-04-091-1/+1
| |\ \ | |/ / |/| |
View Lorry Controller Status