wrouesnel / netboot / 37400995822

45%

main: 45%

push

github

pixiecore: send identity headers to the Secure Boot signing service, add --secureboot-delegate-insecure

Requests to --secureboot-delegate-url now carry the headers that
identify Pixiecore to the API server (X-Pixiecore-IP, -Hostname, the
port, proxy and DNS headers), so a service can tell Pixiecores apart.
--api-header headers are still only sent to the API server. Commands
without the API flags, such as boot, use the default IP and hostname.

--secureboot-delegate-insecure turns off verification of the signing
service's certificate, for testing. It can't be used with
--secureboot-delegate-ca-cert, and prints a warning.

The error when the local IP address can't be detected now names the
URL it was detecting for, and the flag to set.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

17 of 26 new or added lines in 2 files covered. (65.38%)

2122 of 4740 relevant lines covered (44.77%)

6.53 hits per line