Skip to content

fix: Opaal not included in bootstrap or cert update #29

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
synackd merged 10 commits into from
Jul 16, 2025
Merged

fix: Opaal not included in bootstrap or cert update #29

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
5d5f2c1
Found that Opaal was missed in the cert update
PowellTravis Jul 10, 2025
460f1a2
Added openchami.target restart
PowellTravis Jul 11, 2025
03abc7c
Comment above openchami.target
PowellTravis Jul 11, 2025
a945b6b
Opaal sed path update
PowellTravis Jul 11, 2025
2cd236e
Opaal bootstrap update
PowellTravis Jul 11, 2025
47e2c07
Force Build to Pass before merge allow
PowellTravis Jul 11, 2025
89e44ef
Requested Changes.
PowellTravis Jul 15, 2025
35864df
* update
PowellTravis Jul 15, 2025
e5f7576
Changed indentaions and help page
PowellTravis Jul 16, 2025
2fa8f42
Updated restart to have user restart
PowellTravis Jul 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions scripts/bootstrap_openchami.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,7 @@ generate_environment_file() {
local short_name=$(hostname -s)
local dns_name=$(hostname -d)
local system_fqdn=$(hostname)

sed -i "s/^SYSTEM_NAME=.*/SYSTEM_NAME=${short_name}/" /etc/openchami/configs/openchami.env
sed -i "s/^SYSTEM_DOMAIN=.*/SYSTEM_DOMAIN=${dns_name}/" /etc/openchami/configs/openchami.env
sed -i "s/^SYSTEM_URL=.*/SYSTEM_URL=${system_fqdn}/" /etc/openchami/configs/openchami.env
Expand All @@ -40,10 +41,12 @@ generate_environment_file() {

acme_correction() {
local system_fqdn=$(hostname)
primary_ip=$(hostname -I | awk '{print $1}')
sed -i "s|-d .* \\\\|-d ${system_fqdn} \\\\|" /etc/containers/systemd/acme-deploy.container
sed -i "s/^ContainerName=.*/ContainerName=${system_fqdn}/" /etc/containers/systemd/acme-register.container
sed -i "s/^HostName=.*/HostName=${system_fqdn}/" /etc/containers/systemd/acme-register.container
sed -i "s|-d .* \\\\|-d ${system_fqdn} \\\\|" /etc/containers/systemd/acme-register.container
sed -i "s|--add-host='demo\.openchami\.cluster:[0-9\.]*'|--add-host='${system_fqdn}:${primary_ip}'|" /etc/containers/systemd/opaal.container
}

# Check and create secrets with random passwords if needed
Expand Down
27 changes: 21 additions & 6 deletions scripts/openchami-certificate-update
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ update_dns() {
local system_fqdn=$1
local short_name="${system_fqdn%%.*}"
local dns_name="${system_fqdn#*.}"
local primary_ip=$(hostname -I | awk '{print $1}')

# Update names in environment and acme containers
sed -i "s/^SYSTEM_NAME=.*/SYSTEM_NAME=${short_name}/" /etc/openchami/configs/openchami.env
Expand All @@ -18,15 +19,29 @@ update_dns() {
sed -i "s/^ContainerName=.*/ContainerName=${system_fqdn}/" /etc/containers/systemd/acme-register.container
sed -i "s/^HostName=.*/HostName=${system_fqdn}/" /etc/containers/systemd/acme-register.container
sed -i "s|-d .* \\\\|-d ${system_fqdn} \\\\|" /etc/containers/systemd/acme-register.container
sed -i "s|--add-host='.*|--add-host='${system_fqdn}:${primary_ip}'|" /etc/containers/systemd/opaal.container

# Re-apply Certificates
systemctl restart acme-deploy
systemctl restart haproxy
# Reload systemD after .container changes
systemctl daemon-reload

echo "Changed FQDN to ${1}"
echo 'Either restart all of the OpenCHAMI services:'
echo
echo ' sudo systemctl restart openchami.target'
echo
echo 'or run the following to just regenerate/redeploy the certificates:'
echo
echo ' sudo systemctl restart acme-deploy'
echo
}

help_page() {
echo "OpenCHAMI Certificate Update"
echo "Usage: $0 update (dns name) ex. demo.openchami.cluster"
echo "Update OpenCHAMI Certificates"
echo "Usage: $0 update FQDN"
echo
echo "EXAMPLES:"
echo " $0 update demo.openchami.cluster"

}
case "$1" in
Expand All @@ -43,7 +58,7 @@ case "$1" in
fi
;;
*)
help_page
exit 1
help_page
exit 1
;;
esac