pxe-server

ge-aerospace/pxe-server

Fork 0

Commit Graph

Author	SHA1	Message	Date
cproudlock	397063f987	Webapp: Updates pages, image page tabs with review-before-save, BPRT sync Updates group: - Dell drivers and BIOS: check Dell's catalogs against all three driver maps and models.txt, download with a shared speed cap, repack, preview, apply with backups and rollback. - iPXE boot files: check GitHub for the signed Secure Boot set, verify the sha256 and each file's signer, install atomically, roll back. Includes the by-hand procedure. - Blancco: upload a release, stage it, test-boot it from the menu, activate, roll back. - BPRT sync: validate a batch uploaded from the MediaCreator Lite cache (scripts/windows/Sync-BPRT.ps1 or a zip), show the diff, swap with the site overlay files kept. Images: one sidebar entry per image with Overview, Drivers, Unattend and OS and Packages tabs. Every save shows a diff first, keeps the file's format, makes a backup and can be undone. Driver lint runs inline. Enrollment: upload standard/engineer MCL packages, one per tenant/purpose, with archive and restore. Hardware coverage counts engineer as Win11.	2026-10-13 16:58:55 -04:00
cproudlock	c16a4f23b4	webapp: extract service layer (config.py + services/) from app.py Phase 1a of a multi-session refactor toward a clean blueprint structure. Pulls the helper code that lived alongside the routes in the 1621-line app.py into focused modules. app.py is now 625 lines of mostly routes plus a small Flask wiring header. Behaviour is unchanged: smoke-tested against the 8 main GET routes (200 OK). New modules: - config.py env vars + IMAGE_TYPES + FRIENDLY_NAMES + SHARED_DEPLOY_* taxonomy + unattend XML namespaces. - services/audit.py audit log file handler + audit() helper. - services/csrf.py session CSRF token + before_request validator wired via init_csrf(app). - services/fs.py image_root / deploy_path / unattend_path / control_path / tools_path + load_json / save_json + resolve_destination. - services/system.py service_status / find_usb_mounts / find_upload_sources. - services/images.py image_status + load_image_config. - services/deploy.py import_deploy + _merge_tree + _replace_with_symlink + allowed_import_source. - services/unattend.py parse_unattend / build_unattend_xml / extract_form_data and the qn / qwcm / settings pass helpers. - services/wim.py extract_startnet / update_startnet / list_files wrapping wimextract / wimupdate / wimdir. Endpoint names kept stable (dashboard, clonezilla_backups, etc.) so existing url_for(...) calls in templates are unchanged. Phase 1b (Flask blueprints with ".endpoint" naming) deferred to a future session because it requires updating ~30 url_for sites in templates and is mostly cosmetic. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-08 18:25:32 -04:00

Author

SHA1

Message

Date

cproudlock

397063f987

Webapp: Updates pages, image page tabs with review-before-save, BPRT sync

Updates group:
- Dell drivers and BIOS: check Dell's catalogs against all three driver maps
  and models.txt, download with a shared speed cap, repack, preview, apply
  with backups and rollback.
- iPXE boot files: check GitHub for the signed Secure Boot set, verify the
  sha256 and each file's signer, install atomically, roll back. Includes the
  by-hand procedure.
- Blancco: upload a release, stage it, test-boot it from the menu, activate,
  roll back.
- BPRT sync: validate a batch uploaded from the MediaCreator Lite cache
  (scripts/windows/Sync-BPRT.ps1 or a zip), show the diff, swap with the site
  overlay files kept.

Images: one sidebar entry per image with Overview, Drivers, Unattend and OS and
Packages tabs. Every save shows a diff first, keeps the file's format, makes a
backup and can be undone. Driver lint runs inline.

Enrollment: upload standard/engineer MCL packages, one per tenant/purpose,
with archive and restore. Hardware coverage counts engineer as Win11.

2026-10-13 16:58:55 -04:00

cproudlock

c16a4f23b4

webapp: extract service layer (config.py + services/) from app.py

Phase 1a of a multi-session refactor toward a clean blueprint
structure. Pulls the helper code that lived alongside the routes in
the 1621-line app.py into focused modules. app.py is now 625 lines
of mostly routes plus a small Flask wiring header. Behaviour is
unchanged: smoke-tested against the 8 main GET routes (200 OK).

New modules:

- config.py            env vars + IMAGE_TYPES + FRIENDLY_NAMES +
                       SHARED_DEPLOY_* taxonomy + unattend XML
                       namespaces.
- services/audit.py    audit log file handler + audit() helper.
- services/csrf.py     session CSRF token + before_request validator
                       wired via init_csrf(app).
- services/fs.py       image_root / deploy_path / unattend_path /
                       control_path / tools_path + load_json /
                       save_json + resolve_destination.
- services/system.py   service_status / find_usb_mounts /
                       find_upload_sources.
- services/images.py   image_status + load_image_config.
- services/deploy.py   import_deploy + _merge_tree +
                       _replace_with_symlink + allowed_import_source.
- services/unattend.py parse_unattend / build_unattend_xml /
                       extract_form_data and the qn / qwcm / settings
                       pass helpers.
- services/wim.py      extract_startnet / update_startnet / list_files
                       wrapping wimextract / wimupdate / wimdir.

Endpoint names kept stable (dashboard, clonezilla_backups, etc.) so
existing url_for(...) calls in templates are unchanged. Phase 1b
(Flask blueprints with ".endpoint" naming) deferred to a future
session because it requires updating ~30 url_for sites in templates
and is mostly cosmetic.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-08 18:25:32 -04:00

2 Commits