Leonardo Mendes 8dd45a3d0f Store IPSec cert and keys in LUKS filesystem
This commit updated ipsec-client to store certs and keys in LUKS
filesystem. The encrypted filesystem take some time to mount and
decrypted, so a script was created to check if the filesystem is
ready before start ipsec.

Test Plan:
PASS: Bootstrap, install and unlock a DX system with a worker. Wait
      until system reboots and verify unlocked enable available status.
      Then, observe IPSec is enabled, SAs are established and the
      symbolic links were created in the directories /etc/swanctl/x509
      and /etc/swanctl/private pointing to file in the directory
      /var/luks/stx/luks_fs/ipsec/{certs,keys}.

Story: 2010940
Task: 50086

Change-Id: Ifccd747bd1db8f565d4744d99d94a61a22d5890e
Signed-off-by: Leonardo Mendes <Leonardo.MendesSantana@windriver.com>
2024-08-28 14:38:00 -03:00
2019-04-19 19:52:42 +00:00
2021-08-27 08:39:06 -04:00
2018-05-31 07:35:52 -07:00
2023-07-19 12:18:04 -03:00

config

The starlingx/config repository handles the StarlingX configuration management services.

Its key component is the System Inventory Service (Sysinv), which provides the system command-line interface (CLI)1.

This repository is not intended to be developed standalone, but rather as part of the StarlingX Source System, which is defined by the StarlingX manifest2.

References


  1. https://docs.starlingx.io/cli_ref/system.html↩︎

  2. https://opendev.org/starlingx/manifest.git↩︎

Description
StarlingX System Configuration Management
Readme 90 MiB
Languages
Python 97.5%
Shell 2.1%
CSS 0.2%