-
Notifications
You must be signed in to change notification settings - Fork 70
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
this is same as r4e variant Docs added to include the new variant Release notes updated with the new feature Signed-off-by: Sayan Paul <[email protected]>
- Loading branch information
Showing
7 changed files
with
529 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,78 @@ | ||
--- | ||
title: Fedora-iot | ||
parent: Upgrading configs | ||
nav_order: 4 | ||
--- | ||
|
||
# Upgrading Fedora iot configs | ||
|
||
Occasionally, changes are made to Fedora-iot Butane configs (those that specify `variant: fiot`) that break backward compatibility. While this is not a concern for running machines, since Ignition only runs one time during first boot, it is a concern for those who maintain configuration files. This document serves to detail each of the breaking changes and tries to provide some reasoning for the change. This does not cover all of the changes to the spec - just those that need to be considered when migrating from one version to the next. | ||
|
||
{: .no_toc } | ||
|
||
1. TOC | ||
{:toc} | ||
|
||
## From Version 1.0.0 to Version 1.1.0 | ||
|
||
There are no breaking changes between versions 1.0.0 and 1.1.0 of the `fiot` configuration specification. Any valid 1.0.0 configuration can be updated to a 1.1.0 configuration by changing the version string in the config. | ||
|
||
The following is a list of notable new features. | ||
|
||
### Special mode bits supported | ||
|
||
The `mode` field of the `files` and `directories` sections now respects the setuid, setgid, and sticky bits. Previous spec versions ignore these bits. | ||
|
||
<!-- butane-config --> | ||
```yaml | ||
variant: fiot | ||
version: 1.1.0 | ||
storage: | ||
files: | ||
- path: /usr/local/bin/setuid | ||
mode: 04755 | ||
contents: | ||
source: https://rootkit.example.com/setuid | ||
directories: | ||
- path: /var/local/tmp | ||
mode: 01777 | ||
``` | ||
### AWS S3 access point ARN support | ||
The sections which allow fetching a remote URL now accept AWS S3 access point ARNs (`arn:aws:s3:<region>:<account>:accesspoint/<accesspoint>/object/<path>`) in the `source` field. | ||
|
||
<!-- butane-config --> | ||
```yaml | ||
variant: fiot | ||
version: 1.1.0 | ||
storage: | ||
files: | ||
- path: /etc/example | ||
mode: 0644 | ||
contents: | ||
source: arn:aws:s3:us-west-1:123456789012:accesspoint/test/object/some/path | ||
``` | ||
|
||
### Local SSH key and systemd unit references | ||
|
||
SSH keys and systemd units are now embeddable via file references to local files. The specified path is relative to a local _files-dir_, specified with the `-d`/`--files-dir` option to Butane. If no _files-dir_ is specified, this functionality is unavailable. | ||
|
||
<!-- butane-config --> | ||
```yaml | ||
variant: fiot | ||
version: 1.1.0 | ||
systemd: | ||
units: | ||
- name: example.service | ||
contents_local: example.service | ||
- name: example-drop-in.service | ||
dropins: | ||
- name: example-drop-in.conf | ||
contents_local: example.conf | ||
passwd: | ||
users: | ||
- name: core | ||
ssh_authorized_keys_local: | ||
- id_rsa.pub | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters