The Cisco phones on the Enterprise firmware fetch their directory
(directoryURL) over HTTP only. A separate root from the TFTP one: the
configuration files of the phones hold their SIP passwords.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UJKweojs6NK5svZwRgQjQH
On the first boot of Fedora CoreOS, rpm-ostree applies qemu-guest-agent
live and runs "systemd-tmpfiles --create --prefix=/var" after the
containers have started. The "d" line reset the SELinux label of the
directory Podman had relabeled, and every REGISTER then failed with
"ast_db_put: SQL logic error". The package now creates the directory and
its spool and log sub-directories, once.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UJKweojs6NK5svZwRgQjQH
Asterisk 22 (LTS) and dnsmasq from the Alpine 3.24 packages, in one image
built locally. Asterisk runs as UID 10036 with PJSIP only and an explicit
module list; dnsmasq serves the provisioning files of the phones over TFTP
from the virtiofs mount, where the host can write firmware images that do
not fit in an Ignition file.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UJKweojs6NK5svZwRgQjQH
Nicolas Massé