Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Ensure use of NetworkManager Key-files instead of ifcfg files #119

Open
ferricoxide opened this issue Jun 5, 2024 · 1 comment
Labels
enhancement New feature or request

Comments

@ferricoxide
Copy link
Member

Is your feature request related to a problem? Please describe.

As noted in AMIgen9 #22:

While writing security-automation for the watchmaker project (see: ash-linux-formula plus3it/ash-linux-formula#506), a security-finding came up for the network configuration files. This led me to find a vendor-article on the deprecation of ifcfg files in RHEL 9 and later (see the "NetworkManager connection profiles in ifcfg format are deprecated" section of the linked-document for specific verbiage). The AMIgen automation needs to be updated to account for this change

There are similar notes for RHEL8 noting that the deprecation is pending: it might be a good idea to update the EL8 automation to better align to that pending-deprecation and associated warning.

Describe the solution you'd like

As with the previously-linked AMIgen9 issue:

AMIgen bakes in the cloud-init service. Instances launched from AMIgen-created images already leverage cloud-init for boot-time automation-tasks. The ifcfg to NM-keyfile operation could be included by way of a per once stage script.

Describe alternatives you've considered

Additional context

@ferricoxide ferricoxide added the enhancement New feature or request label Jun 5, 2024
@ferricoxide
Copy link
Member Author

While the legacy files are being created in PostBuild.sh, it's not 100% clear that a similar mechanism can be used for creating the NM-keyfiles from the get-go.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant