master

Rrestricted-band-treeadd permission rules for virtcca-deploy

30c21a5c创建于 26 天前历史提交

文件	最后提交记录	最后更新时间
99-virtcca-tmi-tsi.rules	add permission rules for virtcca-deploy	26 天前
cvm_template.xml	modify host file configuration commond, fix config and log path	1 个月前
ifcfg-template	feat: add Phase 5 VM startup verification and guest agent network config - Add Phase 5 (VM startup verification and interface configuration) to deployment pipeline: ping DHCP IP and send network interface info to guest_agent - Add send_interface_info_to_guest_agent() in NetworkService - Add dhcp_host_entries field to Virbr0NetworkInfo for DHCP host tracking	2 个月前
network_config.yaml.example	feat(monitor): add guest agent VM injection and setup scripts Add tools for injecting guest agent into VM images and automated VM deployment: - inject_guest_agent.sh: inject guest agent code, venv, config, and systemd service into VM image - setup_vm.sh: automated VM creation and deployment workflow - virtcca-guest-agent.service: systemd unit for guest agent auto-start - network_config.yaml.example: compute node network configuration template with VLAN, IP, and interface settings	1 个月前
virtcca-compute.service	t: add TMI ioctl service and refactor auth utilities - Add tmi_ioctl_service.py for TMI device ioctl calls (migration, data key gen/enc) - Extract auth logic (password hashing, JWT, account lock) into common auth_utils.py - Add SslKeyStore DB model for SSL key persistence - Add AGENT_DB path constant - Harden systemd services with restart limits and exit status prevention	1 个月前
virtcca-guest-agent.service	add service file for manager, compute and agent	1 个月前
virtcca-manager.service	t: add TMI ioctl service and refactor auth utilities - Add tmi_ioctl_service.py for TMI device ioctl calls (migration, data key gen/enc) - Extract auth logic (password hashing, JWT, account lock) into common auth_utils.py - Add SslKeyStore DB model for SSL key persistence - Add AGENT_DB path constant - Harden systemd services with restart limits and exit status prevention	1 个月前
virtcca_deploy.conf	feat: add TSI ioctl service and agent SSL key decryption via config file - Add tsi_ioctl_service.py with TSI ioctl wrapper (data_key_gen, data_key_enc) and MockTsiIoctlService for test environments - Add MockTmiIoctlService to tmi_ioctl_service.py with TMI_MOCK_MODE - Replace agent DB-based key storage with INI config file approach: agent reads encrypted key data from agent_ssl_key.conf instead of DB - Add resolve_agent_ssl_key in guest agent factory to decrypt SSL private key via TSI ioctl at startup, writing decrypted key to tmpfs - Inject agent_ssl_key.conf into qcow2 image during VM deployment via virt-customize, merging with user config into single execution - Remove agent node from _NODE_DB_MAP and ssl_commands CLI - Fix destroy_cvm_by_name TOCTOU race by handling VIR_ERR_NO_DOMAIN - Add agent_cert/agent_key config support in compute node - Rename cert files in config_qcow2.sh to agent.crt/agent.key/ca.crt	1 个月前