summaryrefslogtreecommitdiff
path: root/distrib/amd64
AgeCommit message (Collapse)Author
2020-06-08growthTheo de Raadt
2020-05-18Make ffs2 the default for newfs; change all calls to create e.g. floppyOtto Moerbeek
filesystems or ramdisks to use explicit -O 1; installer already does that. ok sthen@
2020-05-17Change install images called *.fs to *.img. These are UFS filesystem images,Theo de Raadt
but additionally have a bootblock in the first 8K (since UFS does not use that space). There are some UEFI direct-from-internet bootloaders that require the name *.img. So this makes things more convenient for those, while keeping it consistant in all architectures. ok kettenis beck kn
2020-03-02amd64 ramdisk does not support CD9660, so no use to have a cd(4).Otto Moerbeek
Makes room for upcoming FFS2 support for the installer. ok deraadt@
2019-11-15grow an install mediaTheo de Raadt
2019-06-08include mount_nfs on the amd64 ramdisk_cd, ok jca deraadtStuart Henderson
2019-06-07eliminate differences between all the list files as much asTheo de Raadt
possible, and remove the failed previous attempts at sharing in ./miniroot and ./ramdisk. maybe now that differences are eliminated we can start a new sharing effort? i dunno..
2019-05-13Add tee(1) to the ramdisk filesystem and use it to provide both aChristian Weisgerber
moving progress bar during auto upgrade/install and a clean log afterwards. ok deraadt@
2019-05-03Further removal of differences (using install instead of cp, sortingTheo de Raadt
chunks in a specified order, using a few variables, performing bsd.rd to bsd.gz conversion as similar as possible)
2019-05-01verbose mkhybrid was never needed on these archTheo de Raadt
2019-04-30step by step, more removal of differencesTheo de Raadt
2019-04-30repair more trivial differencesTheo de Raadt
2019-04-30rm is in /bin, no need to specifyTheo de Raadt
2019-04-30pull cdfs into ramdisk_cdTheo de Raadt
2019-04-30Every Makefile on every architecture had deviated in unique ways.Theo de Raadt
Eliminate many more differences. When it makes sense, build bsd.rd and miniroot/ramdisk.fs and cd.iso in the same directory. More steps coming after this..
2019-04-29These Makefile.inc are now empty and unused.Theo de Raadt
2019-04-29TOPDIR and TOP are not neccessary.Theo de Raadt
2019-04-29remove the abstraction REV on top of abstraction OSrev which is alwaysTheo de Raadt
the sme.
2019-04-28oops, repair some BSDRD confusionTheo de Raadt
2019-04-28cleanup the situation around "df -i"Theo de Raadt
2019-04-28Cull BSDRD variables which are always bsd.rdTheo de Raadt
2019-04-28CBIN variable is also pointless, it is always "instbin". Rather thanTheo de Raadt
having two mysterious names, let's settle on one.
2019-04-28Use new vnconfig vnd-auto-allocate mode. Resolve some variation betweenTheo de Raadt
architectures, and start removing some crazy junk that has collected over the years. Being tested on all architectures... ok various people.
2019-04-14Instead of using COPTS=-Oz (and similar) in make environment to forceTheo de Raadt
tightly-built ramdisk kernels, set the option in per-arch Makefile.inc based upon SMALL_KERNEL
2019-04-05Use new rdsetroot.Theo de Raadt
2019-03-05install*.{fs,iso} get larger due to clang library changesTheo de Raadt
2019-02-05sets grew a little, install*.* need to alsoTheo de Raadt
2019-01-02due to retpoline, some media do increase slightlyTheo de Raadt
2018-10-07add new ral-rt3290 firmwareJonathan Gray
ok kevlo@
2018-06-06Add RETGUARD to clang for amd64. This security mechanism uses per-functionmortimer
random cookies to protect access to function return instructions, with the effect that the integrity of the return address is protected, and function return instructions are harder to use in ROP gadgets. On function entry the return address is combined with a per-function random cookie and stored in the stack frame. The integrity of this value is verified before function return, and if this check fails, the program aborts. In this way RETGUARD is an improved stack protector, since the cookies are per-function. The verification routine is constructed such that the binary space immediately before each ret instruction is padded with int03 instructions, which makes these return instructions difficult to use in ROP gadgets. In the kernel, this has the effect of removing approximately 50% of total ROP gadgets, and 15% of unique ROP gadgets compared to the 6.3 release kernel. Function epilogues are essentially gadget free, leaving only the polymorphic gadgets that result from jumping into the instruction stream partway through other instructions. Work to remove these gadgets will continue through other mechanisms. Remaining work includes adding this mechanism to assembly routines, which must be done by hand. Many thanks to all those who helped test and provide feedback, especially deaadt, tb, espie and naddy. ok deraadt@
2018-03-21trim cert.pem on all arches that install it. use the installed file fromStuart Henderson
DESTDIR rather than reaching around in src. ok deraadt
2017-11-19add growfs(8) to ramdiskjob
Some resizing scenarios can be done from within single user mode, but resizing the root partition required you to bring your own growfs(8) binary into the ramdisk environment. This commit adds growfs(8) to the ramdisks (the ones that don't have space constraints) to simplify such operations. OK deraadt@
2017-08-13strip .SUNW_ctf in the remaining strip invocationsJasper Lievisse Adriaanse
broke amd64/ramdisk_cd as it no longer fit; spotted by jsg@ ok deraadt@ mpi@
2017-07-28DEFAULTSETS, SANESETS and THESETS are set in the install.md scriptsRobert Peichaer
according to the same logic for all architectures but sgi. Consolidate setting them in one place in install.sub and incorporate the sgi specific MDSETS and MDSANESETS. Introduce MDSANESETS complementing MDSETS which makes the construction of DEFAULTSETS, THESETS and SANESETS clearer in install.sub. While here, adjust the comment about how MDSETS used now. OK deraadt@
2017-07-25change -Os to -Oz all around the treeRobert Nagy
clang optimizes better for size with -Oz so use that as a default to avoid overflowing the ramdisk floppies. gcc now accepts -Oz as an alias for -Os. ok kettenis@
2017-07-08hook up slaacd to the installer on media where we have INET6Florian Obser
2017-07-08Increase size to make slaacd fit.Florian Obser
Size problem noted by me, correct fix from deraadt@
2017-06-13The KARL compile.tgz linkkit adds some growth to the base set.Theo de Raadt
Prepare the install*.fs files for this growth.
2017-06-03kernels in compile dirs are readonly, and the bsd.rd we created hasTheo de Raadt
tracked that permission. Make the copy in $RELEASEDIR a+r
2017-01-22Whitespaces ...Robert Peichaer
2016-12-30Install cert.pem + ftp(1) binary that supports SSL, so the install scriptTheo de Raadt
can perform https fetches. While non-critical for sets (which are verified using signify), it is an uplift for communication towards the ftp.openbsd.org cgi which provides mirror proposals, entropy seeds, and current time. [The install script changes are not included in this commit] ok beck jsing rpe
2016-11-24Use makefs to build bsd.rd. amd64 and i386 are first; other platformsMartin Natano
will follow with some safety distance when I figured out all MD quirks. makefs allows to build the ramdisk image as an unprivileged user. The next step in the quest to reduce root during builds. ok deraadt
2016-10-19Inline IMAGE, CBIN, CRUNCHCONF and XNAME.Martin Natano
ok deraadt
2016-10-19Inline IMAGE, CBIN, CRUNCHCONF and XNAME.Martin Natano
ok deraadt
2016-10-19Unshare Makefile.inc so we can determine how to squeeze makefsTheo de Raadt
into the picture. ok natano
2016-10-14Use new kernel compile method for ramdisks, de-escalating to $BUILDUSERTheo de Raadt
as required. much help from natano and tb.
2016-09-17ping6(8) is now a hardlink to ping(8).Florian Obser
The instbin stuff looks good to deraadt@
2016-09-13Provide a stripped down group file for the install media.Robert Peichaer
Saves precious 896 bytes as a side effect. OK deraadt
2016-09-04Move files created by root during install/upgrade in a subdir ofRobert Peichaer
/tmp with proper permissions so that unprivileged programs can not tamper with them. positive feedback from deraadt OK halex
2016-09-04Move files created by root during install/upgrade in a subdir ofRobert Peichaer
/tmp with proper permissions so that unprivileged programs can not tamper with them. positive feedback from deraadt OK halex
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-29 14:41:37 +0000