starlingx
/
config
Code Issues Proposed changes
StarlingX System Configuration Management
34 Commits 22 Branches 9 Tags 78 MiB
Python 97.3%
Shell 2.3%
CSS 0.2%
Go to file
Andy Ning b91d206f56 Remove sha1 based kex algorithms 
This patch hardened server configuration including removing sha1 based
kex algorithms from the manifest template that puppet uses to generate
the configuration file sshd_config.

It also removed hardcoded sshd_config and ssh_config from repo, replaced
them with patches to openssh that harden both server and client
configuration.
This is particularly to address the requirements that the system should
be hardened from the very first boot up (before it is configured by
manifest apply)

It also removed old obsolete patch files in openssh directory to avoid
confusions.

Change-Id: Ic34bebfd88f46cade3596d920a00311f9aa5980f
Signed-off-by: Andy Ning <andy.ning@windriver.com>
 		2018-06-28 22:07:37 -04:00
compute-huge Integrate host configuration into configuration framework 2018-06-14 16:03:52 -05:00
computeconfig StarlingX open source release updates 2018-05-31 07:35:52 -07:00
config-gate StarlingX open source release updates 2018-05-31 07:35:52 -07:00
configutilities Allow large IP address ranges 2018-06-25 09:13:41 -05:00
controllerconfig Change release version to 18.04 for R6 development 2018-06-28 22:06:10 -04:00
puppet-manifests Configure ceph mon info on 2nd region compute host 2018-06-28 08:10:58 -04:00
puppet-modules-wrs Remove sha1 based kex algorithms 2018-06-28 22:07:37 -04:00
storageconfig StarlingX open source release updates 2018-05-31 07:35:52 -07:00
sysinv sysinv-agent: Do not report iSCSI local device to conductor 2018-06-28 08:16:59 -04:00
tmp/patch-scripts/EXAMPLE_SYSINV/scripts StarlingX open source release updates 2018-05-31 07:35:52 -07:00
.gitignore Add default test framework 2018-06-08 20:06:21 -05:00
.gitreview Add .gitreview 2018-05-31 07:35:52 -07:00
.zuul.yaml Add default test framework 2018-06-08 20:06:21 -05:00
CONTRIBUTORS.wrs StarlingX open source release updates 2018-05-31 07:35:52 -07:00
LICENSE StarlingX open source release updates 2018-05-31 07:35:52 -07:00
README.rst StarlingX open source release updates 2018-05-31 07:35:52 -07:00
centos_pkg_dirs Split centos-pkg-dirs along git boundaries. 2018-06-20 16:26:23 -04:00
mwa-pitta.map StarlingX open source release updates 2018-05-31 07:35:52 -07:00
test-requirements.txt Add default test framework 2018-06-08 20:06:21 -05:00
tox.ini Add default test framework 2018-06-08 20:06:21 -05:00

README.rst

stx-config

StarlingX Configuration Management