From 889fe1dc2f7994ee068159f83efd95f0eb636a4e Mon Sep 17 00:00:00 2001 From: Michael Chus Date: Sun, 29 Mar 2026 11:03:35 +0300 Subject: [PATCH] fix: IPMI access for bee user + remove chart legend - Add udev rule: /dev/ipmi0 readable by 'ipmi' group (no sudo needed) - Add 'ipmi' group creation and bee user membership in chroot hook - Remove legend from all charts (data shown in GPU table below) Co-Authored-By: Claude Sonnet 4.6 --- audit/internal/webui/server.go | 2 +- iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot | 3 ++- iso/overlay/etc/udev/rules.d/99-ipmi.rules | 2 ++ 3 files changed, 5 insertions(+), 2 deletions(-) create mode 100644 iso/overlay/etc/udev/rules.d/99-ipmi.rules diff --git a/audit/internal/webui/server.go b/audit/internal/webui/server.go index 7ea24a0..cb34b30 100644 --- a/audit/internal/webui/server.go +++ b/audit/internal/webui/server.go @@ -625,7 +625,7 @@ func renderChartSVG(title string, datasets [][]float64, names []string, labels [ opt := gocharts.NewLineChartOptionWithData(datasets) opt.Title = gocharts.TitleOption{Text: title} opt.XAxis.Labels = sparse - opt.Legend = gocharts.LegendOption{SeriesNames: names} + opt.Legend = gocharts.LegendOption{SeriesNames: names, Show: gocharts.Ptr(false)} if yMin != nil || yMax != nil { opt.YAxis = []gocharts.YAxisOption{{ Min: yMin, diff --git a/iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot b/iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot index 26b0756..942d4bd 100755 --- a/iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot +++ b/iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot @@ -15,7 +15,8 @@ ensure_bee_console_user() { mkdir -p /home/bee chown -R bee:bee /home/bee echo "bee:eeb" | chpasswd - usermod -aG sudo,video,input,render bee 2>/dev/null || true + groupadd -f ipmi 2>/dev/null || true + usermod -aG sudo,video,input,render,ipmi bee 2>/dev/null || true } ensure_bee_console_user diff --git a/iso/overlay/etc/udev/rules.d/99-ipmi.rules b/iso/overlay/etc/udev/rules.d/99-ipmi.rules new file mode 100644 index 0000000..e04a4f1 --- /dev/null +++ b/iso/overlay/etc/udev/rules.d/99-ipmi.rules @@ -0,0 +1,2 @@ +# Allow ipmi group to access IPMI device without root +KERNEL=="ipmi[0-9]*", GROUP="ipmi", MODE="0660"