1. 13 Feb, 2024 3 commits
    • Andrew Walker's avatar
      WIP filter-list fix · 99b8d1d3
      Andrew Walker authored
      99b8d1d3
    • Andrew Walker's avatar
      Refactor force option (#13121) · fef49ce9
      Andrew Walker authored
      fef49ce9
    • sonicaj's avatar
      NAS-125367 / 24.10 / Disable learning of bridge interface members (#12886) · e4131d82
      sonicaj authored
      * Disable learning of bridge interface members
      
      This commit fixes an issue where on certain hardware, the bridge interface takes some time to set up, causing a delay in network setup and disrupting other services when they attempt to use the network. To address this issue after syncing with Caleb we decided that we will disable learning of all bridge members allowing the bridge to become active without unnecessary delay
      
      * Refactor bridge learning method name
      
      * Add a db field for bridge interface to configure learning
      
      * Make changes to reflect enable learning flag in the actual bridge interface configuration
      e4131d82
  2. 12 Feb, 2024 5 commits
    • sonicaj's avatar
      Make sure middleware socket is present (#13122) · 3d89a563
      sonicaj authored
      This commit fixes an issue where checking file's existence we were running it whereas it required middlewared to be actually running - now this becomes a problem in our unit tests pipeline as middleware is not running in the docker container we create and these changes are not really required either for us torun the unit tests etc.
      3d89a563
    • bmeagherix's avatar
      NAS-126731 / 24.10 / Improve failover handling of a large number of targets (#12967) · 91410150
      bmeagherix authored
      - On boot do not start with cluster_mode enabled on target extents.
      
      - When the STANDBY node boots, it will initiate a job that resettles the DLM
        (on both nodes) and then steps thru the extents (20 at a time), configuring
        cluster_mode
      
      - Define the fileio/blockio based extents in /etc/scst.conf for BOTH nodes,
        albeit with active 0 parameter set on the STANDBY node.
      
      - On failover on the ACTIVE node, become_active iscsitarget rather than restart it.
        This avoids running scstadmin, instead will make precise changes to the scst /sys
        interface. We only do the bare minimum that we need (makes extents active, and
        replace the HA target based LUNs with real extent based ones).
      
      - On failover on the STANDBY node, start iscsitarget but with minimal config.
        This will be corrected by the iscsi.alua.standby_after_start job.
      
      - For inter-node HA targets tweak the recovery_tmo parameter to 10 seconds.
        Otherwise we can expect stalls on a newly elected ACTIVE node, before it logs
        out the HA targets it needed when it was STANDBY.
      
      - When adding a target-extent mapping, configure the ACTIVE node first, then
        the STANDBY node.  The STANDBY node will initiate the bring up of
        cluster_mode.
      
      - When removing a target-extent mapping call removed_target_extent on the
        STANDBY node to more cleanly tear down associated DLM config.
      91410150
    • Andrew Walker's avatar
      Fix schema for privilege plugin (#13123) · a987d02c
      Andrew Walker authored
      local and ds groups are written via group ID, but are returned
      as full group entries.
      a987d02c
    • Andrew Walker's avatar
      Fix webui access flag in auth.me for custom privileges (#13117) · 7da5aa19
      Andrew Walker authored
      We need to allow webui access if at least one of user roles grant
      webui access.
      7da5aa19
    • Caleb St. John's avatar
  3. 10 Feb, 2024 1 commit
  4. 09 Feb, 2024 1 commit
  5. 08 Feb, 2024 2 commits
    • Caleb St. John's avatar
      NAS-124714 / 24.10 / replace crypt module with cryptit (#13111) · 3f07136b
      Caleb St. John authored
      * fix import order
      
      * add sha512_crypt to utils.crypto.py
      
      * use sha512_crypt in account.py
      
      * add check_unixhash to utils/crypto.py
      
      * use check_unixhash in authenticate.py
      
      * unnecessary overload of twofactor_id variable
      
      * add python3-cryptit as dependency
      3f07136b
    • themylogin's avatar
      NAS-125924 / 24.10 / Make `run` use thread pool (#13099) · d861213c
      themylogin authored
      * `middlewared.utils.functools` -> `middlewared.utils.functools_`
      
      * Get rid of `Popen` in `wireguard.py`
      
      * Get rid of `Popen` in `init_shutdown_script.py`
      
      * Create a global `+io_thread_pool_executor`
      
      * Get rid of `Popen` in `bootenv.py`
      
      * `test_02_create_be_duplicate_name`
      
      * Get rid of `Popen` in `kerberos.py` (not tested)
      
      * Get rid of `Popen` in `smb.py`
      
      * Get rid of `Popen` in `smb_/passdb.py` (not tested)
      
      * Get rid of `Popen` in `system/lifecycle.py`
      
      * Make `run` use thread pool
      
      * Explain `Too many open files` error
      d861213c
  6. 06 Feb, 2024 6 commits
  7. 05 Feb, 2024 2 commits
  8. 02 Feb, 2024 3 commits
  9. 01 Feb, 2024 11 commits
  10. 31 Jan, 2024 6 commits