summaryrefslogtreecommitdiff
path: root/distrib/amd64
AgeCommit message (Collapse)Author
2019-04-30repair more trivial differencesTheo de Raadt
2019-04-30rm is in /bin, no need to specifyTheo de Raadt
2019-04-30pull cdfs into ramdisk_cdTheo de Raadt
2019-04-30Every Makefile on every architecture had deviated in unique ways.Theo de Raadt
Eliminate many more differences. When it makes sense, build bsd.rd and miniroot/ramdisk.fs and cd.iso in the same directory. More steps coming after this..
2019-04-29These Makefile.inc are now empty and unused.Theo de Raadt
2019-04-29TOPDIR and TOP are not neccessary.Theo de Raadt
2019-04-29remove the abstraction REV on top of abstraction OSrev which is alwaysTheo de Raadt
the sme.
2019-04-28oops, repair some BSDRD confusionTheo de Raadt
2019-04-28cleanup the situation around "df -i"Theo de Raadt
2019-04-28Cull BSDRD variables which are always bsd.rdTheo de Raadt
2019-04-28CBIN variable is also pointless, it is always "instbin". Rather thanTheo de Raadt
having two mysterious names, let's settle on one.
2019-04-28Use new vnconfig vnd-auto-allocate mode. Resolve some variation betweenTheo de Raadt
architectures, and start removing some crazy junk that has collected over the years. Being tested on all architectures... ok various people.
2019-04-14Instead of using COPTS=-Oz (and similar) in make environment to forceTheo de Raadt
tightly-built ramdisk kernels, set the option in per-arch Makefile.inc based upon SMALL_KERNEL
2019-04-05Use new rdsetroot.Theo de Raadt
2019-03-05install*.{fs,iso} get larger due to clang library changesTheo de Raadt
2019-02-05sets grew a little, install*.* need to alsoTheo de Raadt
2019-01-02due to retpoline, some media do increase slightlyTheo de Raadt
2018-10-07add new ral-rt3290 firmwareJonathan Gray
ok kevlo@
2018-06-06Add RETGUARD to clang for amd64. This security mechanism uses per-functionmortimer
random cookies to protect access to function return instructions, with the effect that the integrity of the return address is protected, and function return instructions are harder to use in ROP gadgets. On function entry the return address is combined with a per-function random cookie and stored in the stack frame. The integrity of this value is verified before function return, and if this check fails, the program aborts. In this way RETGUARD is an improved stack protector, since the cookies are per-function. The verification routine is constructed such that the binary space immediately before each ret instruction is padded with int03 instructions, which makes these return instructions difficult to use in ROP gadgets. In the kernel, this has the effect of removing approximately 50% of total ROP gadgets, and 15% of unique ROP gadgets compared to the 6.3 release kernel. Function epilogues are essentially gadget free, leaving only the polymorphic gadgets that result from jumping into the instruction stream partway through other instructions. Work to remove these gadgets will continue through other mechanisms. Remaining work includes adding this mechanism to assembly routines, which must be done by hand. Many thanks to all those who helped test and provide feedback, especially deaadt, tb, espie and naddy. ok deraadt@
2018-03-21trim cert.pem on all arches that install it. use the installed file fromStuart Henderson
DESTDIR rather than reaching around in src. ok deraadt
2017-11-19add growfs(8) to ramdiskjob
Some resizing scenarios can be done from within single user mode, but resizing the root partition required you to bring your own growfs(8) binary into the ramdisk environment. This commit adds growfs(8) to the ramdisks (the ones that don't have space constraints) to simplify such operations. OK deraadt@
2017-08-13strip .SUNW_ctf in the remaining strip invocationsJasper Lievisse Adriaanse
broke amd64/ramdisk_cd as it no longer fit; spotted by jsg@ ok deraadt@ mpi@
2017-07-28DEFAULTSETS, SANESETS and THESETS are set in the install.md scriptsRobert Peichaer
according to the same logic for all architectures but sgi. Consolidate setting them in one place in install.sub and incorporate the sgi specific MDSETS and MDSANESETS. Introduce MDSANESETS complementing MDSETS which makes the construction of DEFAULTSETS, THESETS and SANESETS clearer in install.sub. While here, adjust the comment about how MDSETS used now. OK deraadt@
2017-07-25change -Os to -Oz all around the treeRobert Nagy
clang optimizes better for size with -Oz so use that as a default to avoid overflowing the ramdisk floppies. gcc now accepts -Oz as an alias for -Os. ok kettenis@
2017-07-08hook up slaacd to the installer on media where we have INET6Florian Obser
2017-07-08Increase size to make slaacd fit.Florian Obser
Size problem noted by me, correct fix from deraadt@
2017-06-13The KARL compile.tgz linkkit adds some growth to the base set.Theo de Raadt
Prepare the install*.fs files for this growth.
2017-06-03kernels in compile dirs are readonly, and the bsd.rd we created hasTheo de Raadt
tracked that permission. Make the copy in $RELEASEDIR a+r
2017-01-22Whitespaces ...Robert Peichaer
2016-12-30Install cert.pem + ftp(1) binary that supports SSL, so the install scriptTheo de Raadt
can perform https fetches. While non-critical for sets (which are verified using signify), it is an uplift for communication towards the ftp.openbsd.org cgi which provides mirror proposals, entropy seeds, and current time. [The install script changes are not included in this commit] ok beck jsing rpe
2016-11-24Use makefs to build bsd.rd. amd64 and i386 are first; other platformsMartin Natano
will follow with some safety distance when I figured out all MD quirks. makefs allows to build the ramdisk image as an unprivileged user. The next step in the quest to reduce root during builds. ok deraadt
2016-10-19Inline IMAGE, CBIN, CRUNCHCONF and XNAME.Martin Natano
ok deraadt
2016-10-19Inline IMAGE, CBIN, CRUNCHCONF and XNAME.Martin Natano
ok deraadt
2016-10-19Unshare Makefile.inc so we can determine how to squeeze makefsTheo de Raadt
into the picture. ok natano
2016-10-14Use new kernel compile method for ramdisks, de-escalating to $BUILDUSERTheo de Raadt
as required. much help from natano and tb.
2016-09-17ping6(8) is now a hardlink to ping(8).Florian Obser
The instbin stuff looks good to deraadt@
2016-09-13Provide a stripped down group file for the install media.Robert Peichaer
Saves precious 896 bytes as a side effect. OK deraadt
2016-09-04Move files created by root during install/upgrade in a subdir ofRobert Peichaer
/tmp with proper permissions so that unprivileged programs can not tamper with them. positive feedback from deraadt OK halex
2016-09-04Move files created by root during install/upgrade in a subdir ofRobert Peichaer
/tmp with proper permissions so that unprivileged programs can not tamper with them. positive feedback from deraadt OK halex
2016-09-03Enable a stripped down version of doas(1) on the install media.Robert Peichaer
OK halex, tb, deraadt
2016-09-02Fix misleading 'No valid MBR or GPT' message when no OpenBSD area is found.Paul Irofti
The current code is too strict and checks for an OpenBSD area inside an MBR or GPT and if it fails to find one reports that there's no valid MBR or GPT (which is misleading because the MBR/GPT is valid). Instead, do two checks (similar to i386): first see if there's an MBR or GPT present on the disk and if there is then check for the OpenBSD area. OK krw@, halex@.
2016-04-02- merge install.sh into install.sub as do_install()Robert Peichaer
- merge upgrade.sh into install.sub as do_upgrade() - delete install.sh and upgrade.sh - make install.sub executable - turn install and upgrade into symbolic links to install.sub - add autoinstall symbolic link to install.sub - change dot.profile to use these symlinks - introduce a -m option to set MODE in install.sub - alternativly set MODE and AUTO depending on PROGNAME - execute the do_{install,upgrade) functions depending on $MODE OK halex@, krw@ 'go for it' deraadt@
2016-02-08If manual disklabel editing is requested during install, don't emitKenneth R Westerback
verbiage explaining what disklabels are. If you don't know, you should be using (A)uto! ok rpe@ halex@
2015-12-29Change patterns in case-blocks from a*|A* to [aA]*Robert Peichaer
OK halex@ krw@
2015-12-28- no need to insist on EFISYS partitions on non-root disks.Robert Peichaer
- prevent autoinstall loop OK krw@
2015-12-18Introduce a new function disk_has() to inspect a disk if it has aRobert Peichaer
partition-table of a certain type and optionally if it has a partition of a certain type. Use disk_has() in the install.md script to replace all the various "fdisk <disk> | grep <pattern>" commands greatly simplifying things. positive feedback from sthen@ "time to get it really tested" deraadt@ OK krw@
2015-12-02If (O)penBSD is not offered as a partitioning option, do not acceptKenneth R Westerback
'O*|o*' as a valid response. Ignore it as we do other invalid input. armv7 is special case to be handled separately. Noticed by kettenis@. ok deraadt@ rpe@
2015-12-02Make GPT an option equivalent to MBR when installing. Warn that theKenneth R Westerback
result may not be bootable if GPT is used on a machine that did not boot via EFI. But allow the user to proceed if the user insists. Sometimes you just want to create an EFI bootable image on a non-EFI machine. Enforce the presence of both an OpenBSD partition and an EFI Sys partition if GPT partitioning is used. Prompted by complaints and observations from kettenis@. Verbiage tweak from doug@. Tested & ok rpe@.
2015-11-09Fix commas in "Use (W)hole disk MBR..." question.Robert Peichaer
OK jmc@ krw@
2015-10-25Use 'fdisk -i', instead of 'fdisk -e' with a here document ofKenneth R Westerback
'reinit;update;write;quit'. They've done the same thing for some time now. Tweaks & test from rpe@. ok rpe@ deraadt@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-25 15:07:44 +0000