unkinben
274c480b09
bootapi replaces Cobbler's PXE/kickstart side. It resolves a PXE-booting host
from NetBox (by MAC or hostname), renders an iPXE boot script and a kickstart
from Go text/templates, and serves them over HTTP. The ENC half already moved to
encapi; this covers the provisioning/boot half.
What's here:
- cmd/bootapi + internal/{config,model,netbox,render,server}; embedded default
templates under templates/ (AlmaLinux 9 + Fedora kickstarts, iPXE boot +
unknown-MAC fallbacks) ported from Cobbler's boot/bootstrap contract.
- NetBox client (v4.x API) behind a Resolver interface with a short-TTL cache;
tested against httptest fixtures using real NetBox JSON shapes.
- chi HTTP server: /ipxe/{mac}, /boot/ipxe?mac=, /ks/{ident}, healthz/readyz,
Prometheus /metrics. Unknown MAC -> safe fallback iPXE (200), unknown KS -> 404.
- Secrets (root pw hash, ssh keys) injected at render time from env/Vault, never
NetBox. Config is env-based per estate convention.
- Makefile (build/test/lint/docker + patch/minor/major), Dockerfile (distroless),
.woodpecker (pre-commit, golangci-lint v2 + go test -race, docker build on PR;
image push + Gitea binary release on v* tag), docs/ and example config.
go build/vet clean, go test -race green, golangci-lint v2 clean, pre-commit clean.
Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
11 lines
523 B
Cheetah
11 lines
523 B
Cheetah
{{- /*
|
|
Safe default for an UNKNOWN MAC (NetBox has no matching device). We deliberately
|
|
do NOT start an installer for a machine we can't identify — that could wipe a
|
|
production box that PXE-booted by accident. Instead we boot from local disk, so
|
|
an already-installed host just continues, and a brand-new host loops back to PXE
|
|
on its next attempt (by which point NetBox should know it).
|
|
*/ -}}
|
|
#!ipxe
|
|
echo bootapi: unknown MAC ${net0/mac}; not provisioning. Booting local disk.
|
|
sanboot --no-describe --drive 0x80 || exit
|