[node-patches] Change in ovirt-node[master]: init: Add support for disable_aes_ni cmdline args

[hadong0720 at gmail.com]

hadong has uploaded a new change for review.

Change subject: init: Add support for disable_aes_ni cmdline args
......................................................................

init: Add support for disable_aes_ni cmdline args

This patch adds support for configuring disable_aes_ni in cmdline args:
disable_aes_ni=[y|n]
This informations are sued to set disable_aes_ni=[y|n] during
an auto-installation.

Change-Id: I665c0ebfbc5cd16cffa307cd9ac4d99ec38761ca
Signed-off-by: hadong <hadong0720 at gmail.com>
---
M scripts/ovirt-auto-install.py
M scripts/ovirt-init-functions.sh.in
2 files changed, 18 insertions(+), 4 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/59/18459/1

diff --git a/scripts/ovirt-auto-install.py b/scripts/ovirt-auto-install.py
index ed26580..7b0e61a 100755
--- a/scripts/ovirt-auto-install.py
+++ b/scripts/ovirt-auto-install.py
@@ -95,6 +95,16 @@
             ssh.strong_rng(OVIRT_VARS["OVIRT_USE_STRONG_RNG"])
 
 
+class ConfigureAESNI(Transaction.Element):
+    title = "Configuring SSH AES NI"
+
+    def commit(self):
+        if "OVIRT_DISABLE_AES_NI" in OVIRT_VARS and \
+           not OVIRT_VARS["OVIRT_DISABLE_AES_NI"] is "":
+            ssh = security.Ssh()
+            ssh.disable_aesni(OVIRT_VARS["OVIRT_DISABLE_AES_NI"])
+
+
 class ConfigureLogging(Transaction.Element):
     title = "Configuring Logging"
 
@@ -172,6 +182,10 @@
     if "OVIRT_USE_STRONG_RNG" in OVIRT_VARS:
         tx.append(ConfigureStrongRNG())
 
+    #set ssh AES NI
+    if "OVIRT_DISABLE_AES_NI" in OVIRT_VARS:
+        tx.append(ConfigureAESNI())
+
     tx.append(ConfigureLogging())
 
     tx.append(ConfigureCollectd())
diff --git a/scripts/ovirt-init-functions.sh.in b/scripts/ovirt-init-functions.sh.in
index 1d1ab8e..aaa132c 100644
--- a/scripts/ovirt-init-functions.sh.in
+++ b/scripts/ovirt-init-functions.sh.in
@@ -234,7 +234,7 @@
     #   hostname=fqdn
     #   tuned=profile
     #   keyboard=layout
-    #   aesni=[y|n]
+    #   disable_aes_ni=[y|n]
     #   use_strong_rng=<bytes>
     #   nfsv4_domain=domain
     #   TBD logrotate maxsize
@@ -397,7 +397,7 @@
     # the tuned profile to run by default
     tuned_profile=
 
-    # aesni=[y|n]
+    # disable_aes_ni=[y|n]
     # disable AES-NI
     disable_aes_ni=
 
@@ -732,10 +732,10 @@
             tuned*)
             tuned_profile=${i#tuned=}
             ;;
-            aesni=1 | aesni=y | aesni=yes)
+            disable_aes_ni=1 | disable_aes_ni=y | disable_aes_ni=yes)
             disable_aes_ni="True"
             ;;
-            aesni=0 | aesni=n | aesni=no)
+            disable_aes_ni=0 | disable_aes_ni=n | disable_aes_ni=no)
             disable_aes_ni="False"
             ;;
             nfsv4_domain*)


-- 
To view, visit http://gerrit.ovirt.org/18459
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I665c0ebfbc5cd16cffa307cd9ac4d99ec38761ca
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: master
Gerrit-Owner: hadong <hadong0720 at gmail.com>