summaryrefslogtreecommitdiff
path: root/configs
diff options
context:
space:
mode:
Diffstat (limited to 'configs')
-rw-r--r--configs/kvmd/ipmipasswd14
-rw-r--r--configs/kvmd/main/v1-hdmi.yaml7
-rw-r--r--configs/kvmd/main/v1-vga.yaml7
-rw-r--r--configs/os/systemd/kvmd-ipmi.service15
4 files changed, 41 insertions, 2 deletions
diff --git a/configs/kvmd/ipmipasswd b/configs/kvmd/ipmipasswd
new file mode 100644
index 00000000..14b45a94
--- /dev/null
+++ b/configs/kvmd/ipmipasswd
@@ -0,0 +1,14 @@
+# This file describes the credentials for IPMI users. The first pair separated by colon
+# is the login and password with which the user can access to IPMI. The second pair
+# is the name and password with which the user can access to KVMD API. The arrow is used
+# as a separator and shows the direction of user registration in the system.
+#
+# WARNING! IPMI protocol is completly unsafe by design. In short, the authentication
+# process for IPMI 2.0 mandates that the server send a salted SHA1 or MD5 hash of the
+# requested user's password to the client, prior to the client authenticating. Never use
+# the same passwords for KVMD and IPMI users. This default configuration is shown here
+# for example only.
+#
+# And even better not to use IPMI. Instead, you can directly use KVMD API using curl.
+
+admin:admin -> admin:admin
diff --git a/configs/kvmd/main/v1-hdmi.yaml b/configs/kvmd/main/v1-hdmi.yaml
index c36632cc..7b886167 100644
--- a/configs/kvmd/main/v1-hdmi.yaml
+++ b/configs/kvmd/main/v1-hdmi.yaml
@@ -1,6 +1,8 @@
# Don't touch this file otherwise your device may stop working.
# You can find a working configuration in /usr/share/kvmd/configs.default/kvmd.
+logging: !include logging.yaml
+
kvmd:
server:
host: 127.0.0.1
@@ -40,4 +42,7 @@ kvmd:
- "--port={port}"
- "--drop-same-frames=30"
-logging: !include logging.yaml
+ipmi:
+ kvmd:
+ host: 127.0.0.1
+ port: 8081
diff --git a/configs/kvmd/main/v1-vga.yaml b/configs/kvmd/main/v1-vga.yaml
index 46c2fad3..4a9baddc 100644
--- a/configs/kvmd/main/v1-vga.yaml
+++ b/configs/kvmd/main/v1-vga.yaml
@@ -1,6 +1,8 @@
# Don't touch this file otherwise your device may stop working.
# You can find a working configuration in /usr/share/kvmd/configs.default/kvmd.
+logging: !include logging.yaml
+
kvmd:
server:
host: 127.0.0.1
@@ -44,4 +46,7 @@ kvmd:
- "--host={host}"
- "--port={port}"
-logging: !include logging.yaml
+ipmi:
+ kvmd:
+ listen: 127.0.0.1
+ port: 8081
diff --git a/configs/os/systemd/kvmd-ipmi.service b/configs/os/systemd/kvmd-ipmi.service
new file mode 100644
index 00000000..2689aa8c
--- /dev/null
+++ b/configs/os/systemd/kvmd-ipmi.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=IPMI to KVMD proxy
+After=kvmd.service
+
+[Service]
+User=kvmd
+Group=kvmd
+Type=simple
+Restart=always
+RestartSec=3
+
+ExecStart=/usr/bin/kvmd-ipmi
+
+[Install]
+WantedBy=multi-user.target