[ClusterLabs] jquery in pcs package

[Tony Stocker]

On Thu, Jul 2, 2020 at 9:52 AM Tomas Jelinek <tojeline at redhat.com> wrote:

> problem. We have been working on a new version of the web UI which will
> be compatible with the newest libraries and will allow upgrading them
> continuously.

This is good news. Thanks.

>
> As has been pointed out in this thread, security tools may base
> reporting issues only on libraries' version numbers.

Yes, I'm not a fan of security 'tools' that merely read a version
number and declare one guilty of having vulnerabilities based on that
alone, unfortunately though that enlightened view is not shared by the
troglodytes that populate most security scanning teams.


> Running pcsd web UI is optional. It is enabled by default but it can be
> easily and safely turned off. There is no negative impact on other pcs /
> pcsd functionalities. If you turn the web UI off, pcsd will still run
> and listen to network connections (port 2224 by default). However, all
> requests against the web UI will result in a simple page saying the web
> UI is not enabled and no jQuery library will be served.
>
> To turn the web UI off, set:
> PCSD_DISABLE_GUI=true
> in /etc/sysconfig/pcsd (/etc/default/pcsd or other location depending on
> Linux distribution you are running) and restart pcsd service.

This is excellent news! I appreciate this a great deal!

>
> In newer versions of pcsd, you may also configure addresses pcsd binds
> to by setting PCSD_BIND_ADDR in the same file.

Also extraordinarily helpful! I knew that there had to be a way to do
this, but the various instruction sets and how-tos about using
Pacemaker usually completely ignore these type of elements, and there
wasn't much coming up with web searches on the topic (or my seartch
terms were simply inappropriate.) But having this flexibility is
excellent! Again, thanks for the instructions on this!


> Regards,
> Tomas

Thanks very much!
Tony