underpost 2.99.4 → 2.99.5

package/.env.development

@@ -16,9 +16,6 @@ DEFAULT_DEPLOY_PATH=/
 MARIADB_HOST=changethis
 MARIADB_USER=changethis
 MARIADB_PASSWORD=changethis
-DD_LAMPP_TEST_DB_0=changethis
-WIFI=changethis
-ROUTER=changethis
 CLOUDINARY_CLOUD_NAME=changethis
 CLOUDINARY_API_KEY=changethis
 CLOUDINARY_API_SECRET=changethis

package/.env.production

@@ -17,9 +17,7 @@ DEFAULT_DEPLOY_PATH=/
 MARIADB_HOST=changethis
 MARIADB_USER=changethis
 MARIADB_PASSWORD=changethis
-DD_LAMPP_TEST_DB_0=changethis
-WIFI=changethis
-ROUTER=changethis
+WIFI_PASSWORD=changethis
 CLOUDINARY_CLOUD_NAME=changethis
 CLOUDINARY_API_KEY=changethis
 CLOUDINARY_API_SECRET=changethis

package/.env.test

@@ -16,9 +16,6 @@ DEFAULT_DEPLOY_PATH=/
 MARIADB_HOST=changethis
 MARIADB_USER=changethis
 MARIADB_PASSWORD=changethis
-DD_LAMPP_TEST_DB_0=changethis
-WIFI=changethis
-ROUTER=changethis
 CLOUDINARY_CLOUD_NAME=changethis
 CLOUDINARY_API_KEY=changethis
 CLOUDINARY_API_SECRET=changethis

package/README.md

@@ -18,7 +18,7 @@
 
 <!-- badges -->
 
-[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/2.99.4)](https://socket.dev/npm/package/underpost/overview/2.99.4) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
+[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/2.99.5)](https://socket.dev/npm/package/underpost/overview/2.99.5) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
 
 <!-- end-badges -->
 
@@ -66,7 +66,7 @@ Run dev client server
 npm run dev
 ```
 <!-- -->
-## underpost ci/cd cli v2.99.4
+## underpost ci/cd cli v2.99.5
 
 ### Usage: `underpost [options] [command]`
   ```

package/baremetal/commission-workflows.json

@@ -2,6 +2,7 @@
   "rpi4mbarm64-iso-ram": {
     "type": "iso-ram",
     "osIdLike": "debian ubuntu",
+    "architecture": "arm64",
     "isoUrl": "https://cdimage.ubuntu.com/releases/24.04/release/ubuntu-24.04.3-live-server-arm64.iso",
     "tftpPrefix": "rpi4mb",
     "bootstrapHttpServerPort": 8888,
@@ -31,6 +32,7 @@
   "rpi4mbarm64-chroot": {
     "type": "chroot-debootstrap",
     "osIdLike": "debian ubuntu",
+    "architecture": "arm64",
     "tftpPrefix": "rpi4mb",
     "bootstrapHttpServerPort": 8888,
     "menuentryStr": "UNDERPOST.NET UEFI/GRUB/MAAS RPi4 CHROOT commissioning (ARM64)",
@@ -65,6 +67,7 @@
   "rpi4mbarm64-iso-nfs": {
     "type": "iso-nfs",
     "osIdLike": "debian ubuntu",
+    "architecture": "arm64",
     "isoUrl": "https://cdimage.ubuntu.com/releases/24.04/release/ubuntu-24.04.3-live-server-arm64.iso",
     "tftpPrefix": "rpi4mb",
     "bootstrapHttpServerPort": 8888,
@@ -94,6 +97,7 @@
   "rpi4mbarm64-chroot-rocky9": {
     "type": "chroot-container",
     "osIdLike": "rhel centos fedora",
+    "architecture": "arm64",
     "tftpPrefix": "rpi4mb",
     "bootstrapHttpServerPort": 8888,
     "menuentryStr": "UNDERPOST.NET Rocky9 Container CHROOT NFS (ARM64)",
@@ -117,5 +121,53 @@
     "keyboard": {
       "layout": "es"
     }
+  },
+  "hp-envy-iso-nfs": {
+    "type": "iso-nfs",
+    "osIdLike": "debian ubuntu",
+    "architecture": "amd64",
+    "isoUrl": "https://releases.ubuntu.com/releases/24.04/ubuntu-24.04.3-live-server-amd64.iso",
+    "tftpPrefix": "envy",
+    "bootstrapHttpServerPort": 8888,
+    "menuentryStr": "UNDERPOST.NET UEFI/ISO-IPXE/MAAS hp-envy ISO-NFS commissioning (AMD64)",
+    "networkInterfaceName": "eth0",
+    "chronyc": {
+      "timezone": "America/Santiago",
+      "chronyConfPath": "/etc/chrony/chrony.conf"
+    },
+    "firmwares": [],
+    "maas": {
+      "commissioning": {
+        "architecture": "amd64/hwe-24.04-edge",
+        "name": "ubuntu/noble"
+      }
+    },
+    "keyboard": {
+      "layout": "es"
+    }
+  },
+  "hp-envy-iso-ram": {
+    "type": "iso-ram",
+    "osIdLike": "debian ubuntu",
+    "architecture": "amd64",
+    "isoUrl": "https://releases.ubuntu.com/releases/24.04/ubuntu-24.04.3-live-server-amd64.iso",
+    "tftpPrefix": "envy",
+    "bootstrapHttpServerPort": 8888,
+    "menuentryStr": "UNDERPOST.NET UEFI/ISO-IPXE/MAAS hp-envy ISO-RAM commissioning (AMD64)",
+    "networkInterfaceName": "eth0",
+    "chronyc": {
+      "timezone": "America/Santiago",
+      "chronyConfPath": "/etc/chrony/chrony.conf"
+    },
+    "firmwares": [],
+    "maas": {
+      "commissioning": {
+        "architecture": "amd64/hwe-24.04-edge",
+        "name": "ubuntu/noble"
+      }
+    },
+    "keyboard": {
+      "layout": "es"
+    }
   }
 }

package/bin/deploy.js

@@ -468,7 +468,7 @@ try {
       shellExec(`node bin new --deploy-id dd-default`);
       console.log(fs.existsSync(`./engine-private/conf/dd-default`));
       shellExec(`sudo rm -rf ./engine-private/conf/dd-default`);
-      shellExec(`node bin/deploy build-env`);
+      shellExec(`node bin/deploy build-envs`);
       break;
     }
 
@@ -477,7 +477,7 @@ try {
       shellExec(
         `underpost secret underpost --create-from-file /home/dd/engine/engine-private/conf/dd-cron/.env.production`,
       );
-      shellExec(`node bin/deploy sync-deploy-envs`);
+      shellExec(`node bin/deploy sync-envs`);
       shellExec(`node bin/build dd conf`);
       shellExec(`git add . && cd ./engine-private && git add .`);
       shellExec(`node bin cmt . ci package-pwa-microservices-template 'New release v:${process.argv[3]}'`);
@@ -537,45 +537,6 @@ ${shellExec(`git log | grep Author: | sort -u`, { stdout: true }).split(`\n`).jo
 
       break;
     }
-    case 'build-env': {
-      const buildEnv = (privateEnvPath, originEnv, env) => {
-        const privateEnv = dotenv.parse(fs.readFileSync(privateEnvPath, 'utf8'));
-        for (const key of Object.keys(privateEnv)) {
-          if (key in env) {
-            console.warn(`Key ${key} already exists in origin env`);
-            continue;
-          }
-          if (key in originEnv) {
-            console.warn(`Key ${key} already exists in origin env`);
-            env[key] = originEnv[key];
-            continue;
-          }
-          env[key] =
-            `${key}`.toUpperCase().match('API') ||
-            `${key}`.toUpperCase().match('KEY') ||
-            `${key}`.toUpperCase().match('SECRET') ||
-            `${key}`.toUpperCase().match('TOKEN') ||
-            `${key}`.toUpperCase().match('PASSWORD') ||
-            `${key}`.toUpperCase().match('MAC')
-              ? 'changethis'
-              : isNaN(parseFloat(privateEnv[key]))
-                ? `${privateEnv[key]}`.match(`@`)
-                  ? 'admin@default.net'
-                  : 'changethis'
-                : privateEnv[key];
-        }
-        return env;
-      };
-      for (let envPath of ['.env.development', '.env.production', '.env.test']) {
-        const originEnv = dotenv.parse(fs.readFileSync(`./${envPath}`, 'utf8'));
-
-        let env = {};
-        env = buildEnv(`./engine-private/conf/dd-cron/${envPath}`, originEnv, env);
-        env = buildEnv(`./engine-private/conf/dd-core/${envPath}`, originEnv, env);
-        writeEnv(envPath, env);
-      }
-      break;
-    }
 
     case 'maas-db': {
       // DROP, ALTER, CREATE, WITH ENCRYPTED
@@ -1121,20 +1082,67 @@ nvidia/gpu-operator \
       break;
     }
 
-    case 'sync-deploy-envs': {
-      const envObj = dotenv.parse(fs.readFileSync(`./engine-private/conf/dd-cron/.env.production`));
+    case 'build-envs': {
+      const buildEnv = (privateEnvPath, originEnv, env) => {
+        const privateEnv = dotenv.parse(fs.readFileSync(privateEnvPath, 'utf8'));
+        for (const key of Object.keys(privateEnv)) {
+          if (key in env) {
+            console.warn(`Key ${key} already exists in origin env`);
+            continue;
+          }
+          if (key in originEnv) {
+            console.warn(`Key ${key} already exists in origin env`);
+            env[key] = originEnv[key];
+            continue;
+          }
+          env[key] =
+            `${key}`.toUpperCase().match('API') ||
+            `${key}`.toUpperCase().match('KEY') ||
+            `${key}`.toUpperCase().match('SECRET') ||
+            `${key}`.toUpperCase().match('TOKEN') ||
+            `${key}`.toUpperCase().match('PASSWORD') ||
+            `${key}`.toUpperCase().match('MAC')
+              ? 'changethis'
+              : isNaN(parseFloat(privateEnv[key]))
+                ? `${privateEnv[key]}`.match(`@`)
+                  ? 'admin@default.net'
+                  : 'changethis'
+                : privateEnv[key];
+        }
+        return env;
+      };
+      for (let envPath of ['.env.development', '.env.production', '.env.test']) {
+        const originEnv = dotenv.parse(fs.readFileSync(`./${envPath}`, 'utf8'));
+
+        let env = {};
+        env = buildEnv(`./engine-private/conf/dd-cron/${envPath}`, originEnv, env);
+        env = buildEnv(`./engine-private/conf/dd-core/${envPath}`, originEnv, env);
+        writeEnv(envPath, env);
+      }
+      break;
+    }
+
+    case 'sync-envs': {
       for (const deployId of ['dd-cron'].concat(
         fs.readFileSync(`./engine-private/deploy/dd.router`, 'utf8').split(','),
       )) {
         for (const env of ['production', 'development', 'test']) {
           const _envObj = dotenv.parse(fs.readFileSync(`./engine-private/conf/${deployId}/.env.${env}`, 'utf8'));
-          _envObj.GITHUB_TOKEN = envObj.GITHUB_TOKEN;
+          for (const env of []) {
+            delete _envObj[env];
+          }
           writeEnv(`./engine-private/conf/${deployId}/.env.${env}`, _envObj);
         }
       }
       break;
     }
 
+    case 'envs': {
+      shellExec(`node bin/deploy sync-envs`);
+      shellExec(`node bin/deploy build-envs`);
+      break;
+    }
+
     case 'cyberia': {
       const { CyberiaDependencies } = await import(`../src/client/components/cyberia-portal/CommonCyberiaPortal.js`);
       for (const dep of Object.keys(CyberiaDependencies)) {
@@ -1148,7 +1156,7 @@ nvidia/gpu-operator \
       const help = `node bin/deploy pw <script-path> <from-path-in-pod> [to-path-on-local]`;
       const scriptPath = process.argv[3];
       const fromPath = process.argv[4];
-      const toPath = process.argv[5] ? process.argv[5] : fromPath ? `./${fromPath.split('/').pop()}` : '';
+      const toPath = process.argv[5] ? process.argv[5] : fromPath ? `/tmp/${fromPath.split('/').pop()}` : '';
       if (scriptPath === 'help') {
         logger.info(help);
         break;

package/cli.md

@@ -1,4 +1,4 @@
-## underpost ci/cd cli v2.99.4
+## underpost ci/cd cli v2.99.5
 
 ### Usage: `underpost [options] [command]`
   ```
@@ -243,12 +243,6 @@ Options:
   --manifest <path>            Web manifest path.
   --head-components <paths>    Comma-separated SSR head component paths.
   --body-components <paths>    Comma-separated SSR body component paths.
-  --deploy-id <deploy-id>      Build static assets for a specific deployment
-                               ID.
-  --build                      Triggers the static build process for the
-                               specified deployment ID.
-  --build-host <build-host>    Sets a custom build host for static documents or
-                               assets.
   --build-path <build-path>    Sets a custom build path for static documents or
                                assets.
   --env <env>                  Sets the environment for the static build (e.g.,
@@ -286,6 +280,8 @@ Options:
   --deploy-id <deploy-id>  Sets the deployment configuration ID for the
                            operation context.
   --build                  Sets the build context for the operation.
+  --copy                   Copies the configuration value to the clipboard
+                           (only for get operation).
   -h, --help               display help for command
  
 ```
@@ -495,7 +491,7 @@ Manages secrets for various platforms.
 
 Arguments:
   platform                            The secret management platform. Options:
-                                      docker, underpost.
+                                      underpost.
 
 Options:
   --init                              Initializes the secrets platform
@@ -546,10 +542,6 @@ Options:
                                        management.
   --node-name                          Set node name for kubeadm or k3s cluster
                                        env image context management.
-  --secrets                            Includes Dockerfile environment secrets
-                                       during the build.
-  --secrets-path [secrets-path]        Specifies a custom path for Dockerfile
-                                       environment secrets.
   --reset                              Performs a build without using the
                                        cache.
   --dev                                Use development mode.
@@ -800,7 +792,7 @@ Options:
 Runs specified scripts using various runners.
 
 Arguments:
-  runner-id                                       The runner ID to run. Options: dev-cluster,metadata,svc-ls,svc-rm,ssh-deploy-info,dev-hosts-expose,dev-hosts-restore,cluster-build,template-deploy,template-deploy-image,clean,pull,release-deploy,ssh-deploy,ide,crypto-policy,sync,stop,ssh-deploy-stop,ssh-deploy-db-rollback,ssh-deploy-db,ssh-deploy-db-status,tz,cron,get-proxy,instance-promote,instance,ls-deployments,host-update,dd-container,ip-info,db-client,git-conf,promote,metrics,cluster,deploy,disk-clean,disk-usage,dev,service,etc-hosts,sh,log,ps,ptls,release-cmt,deploy-test,sync-replica,tf-vae-test,spark-template,rmi,kill,secret,underpost-config,gpu-env,tf-gpu-test,deploy-job.
+  runner-id                                       The runner ID to run. Options: dev-cluster,metadata,svc-ls,svc-rm,ssh-deploy-info,dev-hosts-expose,dev-hosts-restore,cluster-build,template-deploy,template-deploy-image,clean,pull,release-deploy,ssh-deploy,ide,crypto-policy,sync,stop,ssh-deploy-stop,ssh-deploy-db-rollback,ssh-deploy-db,ssh-deploy-db-status,tz,cron,get-proxy,instance-promote,instance,ls-deployments,host-update,dd-container,ip-info,db-client,git-conf,promote,metrics,cluster,deploy,disk-clean,disk-devices,disk-usage,dev,service,etc-hosts,sh,log,ps,ptls,release-cmt,deploy-test,sync-replica,tf-vae-test,spark-template,rmi,kill,secret,underpost-config,gpu-env,tf-gpu-test,deploy-job.
   path                                            The input value, identifier, or path for the operation.
 
 Options:
@@ -941,6 +933,7 @@ Options:
   --mac <mac>                                   Specifies the MAC address for baremetal machine operations. Use "random" for random MAC, "hardware" to use device's actual MAC (no spoofing), or specify a MAC address.
   --ipxe                                        Chainloads iPXE to normalize identity before commissioning.
   --ipxe-rebuild                                Forces rebuild of iPXE binary with embedded boot script.
+  --ipxe-build-iso <iso-path>                   Builds a standalone iPXE ISO with embedded script for the specified workflow ID.
   --install-packer                              Installs Packer CLI.
   --packer-maas-image-template <template-path>  Creates a new image folder from canonical/packer-maas template path (requires workflow-id).
   --packer-workflow-id <workflow-id>            Specifies the workflow ID for Packer MAAS image operations.
@@ -966,7 +959,7 @@ Options:
   --rocky-tools-test                            Tests rocky linux tools in chroot environment.
   --bootcmd <bootcmd-list>                      Comma-separated list of boot commands to execute.
   --runcmd <runcmd-list>                        Comma-separated list of run commands to execute.
-  --logs <log-id>                               Displays logs for log id: dhcp, cloud, machine, cloud-config.
+  --logs <log-id>                               Displays logs for log id: dhcp,dhcp-lease,dhcp-lan,cloud-init,cloud-init-machine,cloud-init-config
   --dev                                         Sets the development context environment for baremetal operations.
   --ls                                          Lists available boot resources and machines.
   -h, --help                                    display help for command