summaryrefslogtreecommitdiff
path: root/distrib/miniroot
AgeCommit message (Collapse)Author
2014-01-28trim sane_sets()Alexander Hall
ok krw@
2014-01-27remove spaces right before ; and ;;Robert Peichaer
OK halex@
2014-01-26- extend logic to find a sensible location to place prefetched setsRobert Peichaer
- complain loudly on errors and give users a chance to react on them - improve detection if ftp fails while fetching sets - be more cautious while removing temporary directories joint work with and ok halex@
2014-01-26let ask_yn() return 0 for yes, 1 for noRobert Peichaer
from and OK halex@
2014-01-24don't ever use an unsigned SHA256Alexander Hall
ok rpe@
2014-01-23watch out, a white space!Theo de Raadt
2014-01-23- always show (ftp) progress bar with the appropriate titleRobert Peichaer
- the Verifying part is done even if the sets are on local media OK todd@ deraadt@
2014-01-23first take in using ftp -D to more consistently show "named" progressRobert Peichaer
during (pre)fetch/verify/install idea from and OK deraadt@
2014-01-19we no long use the /var/hash files, but rely on the SHA256.sig file.Theo de Raadt
We can remove the hashing support.
2014-01-17add signature checking and make checksum procedure more robust byAlexander Hall
prefetching sets to a temporary directory within /home, iff it is a separate mount point with rpe@ and deraadt@, "ffiinaallllyyy .... OK" rpe@ (r.i.p. progress bars)
2014-01-15Since we now show the installer output we want that new line back.Robert Peichaer
OK halex@
2014-01-11when selecting sets to install, postpone the xbase/comp check so theAlexander Hall
comp set does not get readded if the xbase set is being removed later on the same input line "nice semantics" deraadt@
2014-01-11No need for a bin/cpio link on the media, because the pax|tar binary doesTheo de Raadt
not support cpio anymore.
2014-01-10remove md5 after installing it (with the links to the sha256/512 commands).Theo de Raadt
this is because the md5/sha256/sha512 are in the same binary, found in the md5 directory, but the version on the media lacks md5 support. Understand?
2014-01-09copy the relevant key for the release onto the mediaTheo de Raadt
2014-01-09ramdisks need a /etc/signify directoryTheo de Raadt
2014-01-08Switch to using the base sha256 command, rather than some customizedTheo de Raadt
abomination. install.sub chunk tested by rpe
2014-01-07Make skipping the root fs DUID aware.Robert Peichaer
If ROOTDEV is either the device from fstab or the converted DUID device name with the partition added, skip the current fstab entry ok halex@
2014-01-07SRCDRS usr.bin usr.sbin is a bad idea (because of PIE). The places weTheo de Raadt
pick binaries up must be compiled -static or at least in some safe model for reuse. Since we now use distrib/special for those, we can safely remove usr.bin and usr.sbin from this list.
2014-01-05Like upgrade, use feed_random right after mounting filesystems. ThisTheo de Raadt
is less than ideal. We hope the kernel has good entropy already, because this is a reinstall?? Or maybe the ftp server startup has run to completion? Or if this is an autoinstall, that config has enough unique in it? This needs more work, but the existing late-entropy feed sequence is worse. discussed at length with rpe, who tested it
2014-01-05We can feed_random right after mounting the filesystems, hoping we pickTheo de Raadt
up the previous kernel's /var/db/host.random ok rpe
2014-01-05provide feed_random() and store_random(). The first is used by install orTheo de Raadt
upgrade to feed as much additional usable entropy (as early as possible) to the current bsd.rd install kernel. The latter is used late in the procedure to store entropy for the next boot (of a real kernel) based on an issue described by dtucker, must conversation with halex and rpe tested by rpe
2013-12-23The xbase set requires the comp set. If xbase is in the selection,Robert Peichaer
but not comp, put comp back in automatically. suggested by and ok deraadt@ ok halex@
2013-12-18change password prompts (for the good of install.conf)Alexander Hall
add autoinstall question for root ssh pubkey make pubkey prompts appear in autoinstall log ideas from and ok deraaddt@, ok rpe@
2013-12-16Replace `[RESPONSEFILE=...] install auto` voodoo with plain'ol getopts,Alexander Hall
as discussed with uwe@ at some point. ok krw@, rpe@, "Cool" uwe@
2013-12-16Change subject of install|upgrade log to match periodic maintenanceAlexander Hall
email subjects better. ok deraadt@ rpe@ Suggested by, and "Lovely" deraadt@, "Sure" rpe@,
2013-12-11make the word-matching of the autoinstaller config file allow skippingAlexander Hall
the trailing question mark, such as in "hostname = foo" noted by, discussed with, and ok rpe@
2013-12-11for automated installs, use the hostname from the dhcp lease by defaultAlexander Hall
ok rpe@
2013-12-09Make the response lookup of a question match on entire words, whereAlexander Hall
anything not being a whitespace is considered part of a word. deraadt@ likes it, rpe@ has approved of the idea
2013-12-08After a completed upgrade, present reboot and post-reboot instructions in aStefan Sperling
more intuitive order: Show the 'After rebooting, run sysmerge' hint below the line that explains how to reboot, instead of several lines above. Suggested by a new user doing the first upgrade. input/ok halex@ rpe@
2013-12-07Change the response file handling such that it "consumes" an answerAlexander Hall
once it's been used, and allow the same question to be answered multiple times. This way, responses to ask_which() questions no longer need the special magic we had for them being on a single line. idea from deraadt@ ok rpe@
2013-12-06Workaround closed stdin in non-interactive mode.Robert Peichaer
ok deraadt@
2013-12-05improve the question part (second line) of ask_which to actually includeAlexander Hall
the name of what we're asking for, rather than 'Which _one_ ...' Improves things a lot for the autoinstaller. ok rpe@
2013-12-04Defer spooling of the install log output mail until we are up andAlexander Hall
running again, with our mail system of choice running. ok deraadt@
2013-12-04Eliminate spurious space that breaks parsing of nwids containingKenneth R Westerback
blanks. Same fix was applied by todd@ to /etc/netstart (r1.114) in 2006. Pointed out by Remy via bugs@. Thanks!
2013-12-04the hostname.if for a vlan's parent interface should be mode 640 to avoidStuart Henderson
a warning at first boot ok deraadt
2013-12-02As the number of interactively triggered (A)utoinstall's should be quiteAlexander Hall
outnumbered by (I)nstall's and (U)pgrade's, reorder the alternatives. "sure" deraadt@
2013-12-01More robuse parsing of the DHCP lease file for autoinstall. This will,Alexander Hall
for example, bail out instead of producing annoying output if the filename statement does not match auto_(install|upgrade). Brought up again by Patrik Lundin, thanks! ok rpe@
2013-12-01Allows the autoinstaller to pass a public ssh key for inclusion in theAlexander Hall
user's .ssh/authorized_keys. Deliberately not in interactive mode since I am not sure it's worth adding another question that only quite few people would enjoy. ok rpe@
2013-11-29Move the comments out of get_responsefile() into a description blockRobert Peichaer
at the top. ok halex@
2013-11-29- Rename _bootdev to _ifdev now that we not only supportRobert Peichaer
the interface we netbooted from for initial dhcp reqest. - Change the error message in case no response file was found to match the info message at the beginning. ok krw@
2013-11-28simplify the check if a responsefile line is validRobert Peichaer
idea from and ok halex@
2013-11-28make ask_which bail out on a missing response in the autoinstall caseAlexander Hall
rather than looping endlessly. ok rpe@
2013-11-28- use IFS=<space><tab> to trim the leading/trailing blanks with readRobert Peichaer
- simplify the key/value splitting with a true halexism - recognize a line without a '=' by counting the chars in _key/_val instead of doing a string comparison which needs a temporary _k var - localize _l ok krw@ halex@
2013-11-28Now, that the auto installer supports both, install and upgrade,Robert Peichaer
use "non-interactive mode" instead of installation. ok deraadt@
2013-11-27wasteful spaces and tabs snuck in. Actually, it's true -- this is oneTheo de Raadt
place where they do matter...
2013-11-27Remove an outdated comment.Robert Peichaer
ok krw@ halex@
2013-11-25Allow auto install/upgrade in non-netbooted case.Robert Peichaer
Add some logic to get_responsefile() to select an interface for the initial dhcp request which tells what to do (install/upgrade) and where to fetch the responsefile from. - if netbooted, use the interface in netboot group, or - if only one interface exists, use it, or - if more intefaces exist, ask user which one to use Tweak ask_which() to be usable if $auto is true, but $RESPSONSEFILE not yet set. ok halex@ deraadt@
2013-11-25Rework _autorespond()Robert Peichaer
- strip leading/trailing blanks from question - strip leading blanks from answer - compare questions case insensitive - ignore empty and comment lines and lines without = - treat empty/missing/multiple answers as error and exit - ensure, that $RESPONSEFILE is actually an existing file. - unset IFS to preserve leading/trailing blanks on read. - use read -r, because we don't support line continuation in answers. - simplify the "_i=0 but we have a default answer" case a bit. lots of feedback from halex@ ok deraadt@ krw@
2013-11-23- use a flag file to recognize a successfull autoinstaller runRobert Peichaer
- use a shorter constant logfile name - quote From lines and remove ^M in ftp output from logfile - provide the autoinstaller logfile as mail to root with help and positive feedback halex@ krw@ deraadt@ ok halex@