plus3it / plus3it/amigen8

[Feature Request] Ensure use of NetworkManager Key-files instead of ifcfg files

Open
#119 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
Shell
Stars
10
Forks
16
PR merge metrics
No merged PRs in 30d

Description

Is your feature request related to a problem? Please describe.

As noted in AMIgen9 #22:

While writing security-automation for the watchmaker project (see: ash-linux-formula https://github.com/plus3it/ash-linux-formula/pull/506), a security-finding came up for the network configuration files. This led me to find a vendor-article on the deprecation of ifcfg files in RHEL 9 and later (see the "NetworkManager connection profiles in ifcfg format are deprecated" section of the linked-document for specific verbiage). The AMIgen automation needs to be updated to account for this change

There are similar notes for RHEL8 noting that the deprecation is pending: it might be a good idea to update the EL8 automation to better align to that pending-deprecation and associated warning.

Describe the solution you'd like

As with the previously-linked AMIgen9 issue:

AMIgen bakes in the cloud-init service. Instances launched from AMIgen-created images already leverage cloud-init for boot-time automation-tasks. The ifcfg to NM-keyfile operation could be included by way of a per once stage script.

Describe alternatives you've considered

Additional context

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the cloud-init configuration and per-once stage used by AMIgen, then review how EL8 network configuration is generated. Done means the image automation accounts for NetworkManager key-files instead of ifcfg files and addresses the noted pending deprecation for EL8.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux, shell
Domain
cloud, devops, operating-systems
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.