DGNum/infrastructure
9
6
Fork 3
Code Issues 27 Pull requests 29 Projects 1 Releases Packages Wiki Activity Actions

fix(k-radius): Reduce log level

Browse source 
In debug mode, the radius secrets were printed to the log...
This commit is contained in:
Tom Hubrecht 2025-05-02 10:29:45 +02:00
parent 2537b8550d
commit b13ba3f17a
Signed by: thubrecht
SSH key fingerprint: SHA256:r+nK/SIcWlJ0zFZJGHtlAoRwq1Rm+WcKAm5ADYMoQPc
4 changed files with 16 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
REUSE.toml
View file

@ -20,7 +20,7 @@ precedence = "closest"
[[annotations]]
SPDX-FileCopyrightText = "2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>"
SPDX-License-Identifier = "EUPL-1.2"
path = ["machines/nixos/compute01/ds-fr/01-smtp-tls.patch", "machines/nixos/compute01/librenms/kanidm.patch", "machines/nixos/compute01/stirling-pdf/*.patch", "machines/nixos/vault01/k-radius/packages/01-python_path.patch", "machines/nixos/vault01/k-radius/packages/02-remove-noisy-logs.patch", "machines/nixos/web01/crabfit/*.patch", "machines/nixos/web02/cas-eleves/01-pytest-cas.patch", "patches/lix/01-disable-installChecks.patch", "patches/nixpkgs/01-pretalx-environment-file.patch", "patches/nixpkgs/03-crabfit-karla.patch", "patches/nixpkgs/05-netbird-relay.patch", "patches/cas-eleves/01-ldap-settings.patch"]
path = ["machines/nixos/compute01/ds-fr/01-smtp-tls.patch", "machines/nixos/compute01/librenms/kanidm.patch", "machines/nixos/compute01/stirling-pdf/*.patch", "machines/nixos/vault01/k-radius/packages/01-python_path.patch", "machines/nixos/vault01/k-radius/packages/02-remove-noisy-logs.patch", "machines/nixos/vault01/k-radius/packages/03-set-log-level.patch", "machines/nixos/web01/crabfit/*.patch", "machines/nixos/web02/cas-eleves/01-pytest-cas.patch", "patches/lix/01-disable-installChecks.patch", "patches/nixpkgs/01-pretalx-environment-file.patch", "patches/nixpkgs/03-crabfit-karla.patch", "patches/nixpkgs/05-netbird-relay.patch", "patches/cas-eleves/01-ldap-settings.patch"]
precedence = "closest"
[[annotations]]

1
default.nix
View file

@ -107,6 +107,7 @@ let
"machines/nixos/compute01/stirling-pdf/*.patch"
"machines/nixos/vault01/k-radius/packages/01-python_path.patch"
"machines/nixos/vault01/k-radius/packages/02-remove-noisy-logs.patch"
"machines/nixos/vault01/k-radius/packages/03-set-log-level.patch"
"machines/nixos/web01/crabfit/*.patch"
"machines/nixos/web02/cas-eleves/01-pytest-cas.patch"
"patches/lix/01-disable-installChecks.patch"

13
machines/nixos/vault01/k-radius/packages/03-set-log-level.patch Normal file
View file

@ -0,0 +1,13 @@
diff --git i/kanidm/radius/__init__.py w/kanidm/radius/__init__.py
index e707cf602..999c8e7bf 100644
--- i/kanidm/radius/__init__.py
+++ w/kanidm/radius/__init__.py
@@ -40,7 +40,7 @@ def find_radius_config_path() -> Optional[Path]:
def instantiate(_: Any) -> Any:
"""start up radiusd"""
logging.basicConfig(
- level=logging.DEBUG,
+ level=logging.INFO,
stream=sys.stderr,
)
logging.info("Starting up!")

1
machines/nixos/vault01/k-radius/packages/pykanidm.nix
View file

@ -19,6 +19,7 @@ buildPythonPackage {
patches = [
./02-remove-noisy-logs.patch
./03-set-log-level.patch
];
sourceRoot = "source/pykanidm";