Skip to content

[Feature Request] Ensure use of NetworkManager Key-files instead of ifcfg files #119

@ferricoxide

Description

@ferricoxide

Is your feature request related to a problem? Please describe.

As noted in AMIgen9 #22:

While writing security-automation for the watchmaker project (see: ash-linux-formula plus3it/ash-linux-formula#506), a security-finding came up for the network configuration files. This led me to find a vendor-article on the deprecation of ifcfg files in RHEL 9 and later (see the "NetworkManager connection profiles in ifcfg format are deprecated" section of the linked-document for specific verbiage). The AMIgen automation needs to be updated to account for this change

There are similar notes for RHEL8 noting that the deprecation is pending: it might be a good idea to update the EL8 automation to better align to that pending-deprecation and associated warning.

Describe the solution you'd like

As with the previously-linked AMIgen9 issue:

AMIgen bakes in the cloud-init service. Instances launched from AMIgen-created images already leverage cloud-init for boot-time automation-tasks. The ifcfg to NM-keyfile operation could be included by way of a per once stage script.

Describe alternatives you've considered

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions