openSUSE Autoinstall

Download

autoinstall@lists.opensuse.org

April 2020

2 participants
2 discussions

[opensuse-autoinstall] AutoYaST tools: feedback wanted
by Imobach González Sosa 27 Apr '20

27 Apr '20

Hi all, After doing some research[1] (thanks all for your feedback), the YaST team has started to work on improving AutoYaST. We have identified some areas that we should focus on. One of them, is the process of creating an AutoYaST profile. Creating a profile can be quite challenging, so we offer two different tools to help you in this process: * The "yast2 clone_system" command, which generates a profile with the configuration of the current system. It allows to filter which parts of the profile take into account. * The "AutoYaST UI", which allows to create a profile from scratch (or by cloning the configuration of the current system) and modify the values using a UI. This tool is included in the "autoyast2" package. However, we wonder how do you create your profiles. Do you use any of those tools? Or do you just write some XML yourself? Perhaps you use the tools and tweak the results later... Moreover, we would love to know which problems do you face when you try to create a new profile. Is there anything our tools could do to make your life easier? What about providing some kind of "templates" (minimal, full...) you can tweak? Any other idea? Please, if you can, help us with providing your feedback. Of course, any comment beside these questions is highly appreciated as well. Regards, Imo [1] https://lists.opensuse.org/opensuse-factory/2020-04/msg00291.html -- Imobach González Sosa YaST Team at SUSE LLC https://imobachgs.github.io/ -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner(a)opensuse.org

1 0

[opensuse-autoinstall] AutoYast with HTTPS
by Tobias Federl 01 Apr '20

01 Apr '20

Hi all, since using SMT on SLES 12 AutoYast does not work with HTTPS anymore After booting up the kernel and first connecting to the AutoYast XML file there comes up an error 60: SSL certificate problem: self signed certificate in chain But there is an official wildcard certificate on my SMT Server, and a curl -v check shows, that is running great: VSZ-10:/etc/apache2/vhosts.d # curl https://smt.campuslan.de/ -v * Hostname was NOT found in DNS cache * Trying 148.251.229.82... * Connected to smt.campuslan.de (148.251.229.82) port 443 (#0) * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs/ * SSLv3, TLS handshake, Client hello (1): * SSLv3, TLS handshake, Server hello (2): * SSLv3, TLS handshake, Certificate (11): * SSLv3, TLS handshake, Server key exchange (12): * SSLv3, TLS handshake, Server finished (14): * SSLv3, TLS handshake, Client key exchange (16): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * Server certificate: * subject: OU=Domain Control Validated; CN=*.campuslan.de * start date: 2019-03-28 18:04:04 GMT * expire date: 2021-05-10 18:07:48 GMT * subjectAltName: smt.campuslan.de matched * issuer: C=BE; O=GlobalSign nv-sa; CN=AlphaSSL CA - SHA256 - G2 * SSL certificate verify ok. > GET / HTTP/1.1 > User-Agent: curl/7.37.0 > Host: smt.campuslan.de > Accept: */* Setting up everything to HTTP works. With Apache 2.2 on SLES11 this worked fine. Do I have to integrate my certificate path to inst_server.conf or smth? Thanks for your help Tobias -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner(a)opensuse.org

1 0