summaryrefslogtreecommitdiff
path: root/distrib/miniroot
AgeCommit message (Collapse)Author
2017-01-24ftplist.cgi provides the http server from previous installs as theRobert Peichaer
first line of its output. In contrast to the rest of the list of mirror servers, this first line does not have any location info. Only use this first line as default answer, if it has no location info. OK krw@
2017-01-24Don't allow any control and space characters in the answer to theRobert Peichaer
"System hostname" question. OK tb@ krw@ 'sure' deraadt@ positive feedback on the idea halex@
2017-01-23Clean up possible leftover prefetch area in case of installer restarts.Robert Peichaer
OK tb@
2017-01-23Export AI_MAC and AI_SERVER in addition to AI_MODE so they're visibleRobert Peichaer
in the install.site and upgrade.site scripts. OK tb@
2017-01-22Ensure the right hand side of the test is not treated as pattern.Robert Peichaer
OK tb@
2017-01-22= -> == inside [[ ]] tests.Robert Peichaer
2017-01-22Unobscure the installer script code a bit by adding and rewording comments.Robert Peichaer
2017-01-22Prefix local variables with '_'.Robert Peichaer
2017-01-22Tweak previous ...Robert Peichaer
- remove the unsued _err variable - rework the extraction of the mirror dir info from HTTP_LIST - use INSTALL_MIRROR to save the mirror info from HTTP_LIST - use _http_proto to for the final INSTALL_URL if it's a mirror - assign the correct info to INSTALL_URL - write INSTALL_URL to /etc/installurl on install if a mirror was used Feedback and OK tb@ 'Looks good' deraadt@
2017-01-21Start creating and using /etc/installurl. This file is createdRobert Peichaer
during installation if an OpenBSD mirror server is used for the sets download. It contains the mirror server url in the same format as provided by ftplist.cgi. The installurl file is used by the OpenBSD installer, the syspatch(8) and the pkg_add(1) commands. Stop creating and updating the /etc/pkg.conf file - the pkg_add(1) command will use the information in installurl. Use a new dbversion of the CGIs which accecpt and provide mirror urls without the release/arch part at the end.. Idea from ajacoutot@ Joint work with and OK ajacoutot@ tb@ beck@ deraadt@
2017-01-20Use a global variable PUB_KEY for the location of the key file.Robert Peichaer
OK tb@ krw@
2017-01-11Eliminate an error message by checking whether /tmp/i/hosts exists beforeTheo Buehler
calling sed -i on it. While there, use a stricter regular expression, as suggested by halex. Problem reported by Pedro Caetano. ok mestre, halex; ok rpe for earlier version without regex tweak
2017-01-11typo: verfied -> verifiedAntoine Jacoutot
ok jmc@
2017-01-10whitespaceTheo de Raadt
2017-01-10When installing with a dhcp server that does not provide domain-nameAlexander Bluhm
and name-server information, the user was not asked for this configuration. Do not assign a default value to _dn and _ns before the values are checked with -n in donetconfig(). Fix from halex@; tested and OK rpe@
2017-01-09Use a verified list of distribution set files extracted fromRobert Peichaer
the SHA256.sig file which is signed by the OpenBSD project. Deny the use of mirror servers where the verification fails. Site specifc sets (siteXX.tgz and siteXX-hostname.tgz) or self compiled sets in local setups are still supported by using the index.txt file. Files listed in SHA256.sig override any file listed in index.txt. Support http://server and https://server as answers to the "HTTP Server?" question. This allows a user to control the logic used to download the set files on architectures that have tls support for ftp(1). 'server' --> Use https for the sets download. If the server does not support https, fall back to http but only after user confirmation. 'https://server'--> Use https only for the sets download. 'http://server' --> Use http only for the sets download. NOTE: If the autoinstall(8) feature is used, the installer aborts the installation or upgrade in the following cases: - a mirror server provides an invalid SHA256.sig file - 'server' is used, https fails and the question to confirm the fallback to http is not answered in the response file. - 'https://server' is used but ftp(1) has no tls support. - 'https://server' is used but not supported by the server. Suggested by, in joint work with and OK deraadt@ Feedback, testing and OK tb@ positive feedback halex@ for the http/https part
2017-01-04Support https for the url to the autopartitioning template forRobert Peichaer
disklabel on platforms that have tls enabled ftp(1) including error handling in case ftp(1) doesn't have it. OK tb@ halex@
2017-01-04Enforce https for connections to ftplist.cgi and ftpinstall.cgi onRobert Peichaer
platforms that have tls enabled ftp(1). OK tb@
2017-01-03Add https support to the OpenBSD installer.Robert Peichaer
The sets are downloaded using https per default. If the server does not support https, the installer offers falling back to http after asking for confirmation. NOTE: Depending on the setup, people using autoinstall(8) might need to add this new installer question to the response file. Unable to connect using https. Use http instead = yes|no Joint work with and 'go for it' from deraadt@ Tested from and OK tb@ Feedback and OK for the approach halex@
2016-12-30Switch the connection to ftp.openbsd.org from using the ip addressRobert Peichaer
to hostname as preparation for an upcoming change. But to ensure proper name resolution in case dns is not available yet, add an entry to the hosts file. After an installation, remove it so it does not end up in the final hosts file. Not needed for upgrades because the file is not copied to the upgraded system. OK deraadt@
2016-12-30Also link with -ltls -lssl -lcrypto, in case the instbin binary containsTheo de Raadt
calls to those libraries.
2016-12-30create etc/ssl directory on all media (in case we want to put a file there)Theo de Raadt
2016-12-28Replace literal ^M with $(echo '\r') to avoid cluttering diffs.Robert Peichaer
OK halex@ fine for deraadt@
2016-12-27Remove user uucp and group news from base.Jeremie Courreges-Anglas
2016-12-19Revert r1.934 to unbreak autoinstallRobert Peichaer
2016-12-19- no need to export the TERM variable twiceRobert Peichaer
- re-format case-block - unquote single word default answer - use 'break' instead of return to leave (same effect here, but needed later when the function is no function anymore) - use -q option with kbd to limit output to warnings/errors only discussed with and OK krw@ tb@
2016-12-18Split _issue msg and "Continue without verification?" question.Robert Peichaer
Prodded by and OK aja@ OK halex@ krw@
2016-11-25The build systems now uses the user build and the group wobj.Robert Peichaer
Add them to bsd.rd and set the ownership and permissions of /usr/obj and /usr/xobj accordingly. feedback and OK tb@ Looks good deraadt@
2016-11-24Don't manually add a route to an alias IP via 127.0.0.1. This isKenneth R Westerback
now automatically handled by the kernel. The same change was made to /etc/netstart in 5.5 with r1.139. Should fix the (U)pgrade problem reported on bugs@ by Clint Pachl. ok mpi@
2016-11-14Ensure, that the root disk question is added to the response fileRobert Peichaer
mail. found by and OK tb@ OK halex@ krw@
2016-11-05Remove the obj, xobj and src directories from the base set.Robert Peichaer
The installer will create these directories during install. So local setups will not get overwritten during upgrades. idea from and OK deraadt@ with help from and OK tb@ feedback from and no objections halex@
2016-10-30Search for and create a prefetch area only for nonlocal sources.Robert Peichaer
This enables the installer to verify local set files even if the prefetch area would not fit on the local disk. OK krw@ on a similar diff Idea from and OK naddy@ Feedback and OK tb@
2016-10-29Fix an issue found by naddy@ where the installer was not ableRobert Peichaer
to fetch local sets without a SHA256.sig file in a directory unreachable by the unprivileged users. The missing SHA256.sig file caused an early exit from the for-loop where the _unpriv variable is unset in case of local sets. - Move the check of the set location (local/net) to the top - Set the ftp command title based on the _srclocal variable - Remove the now unnecessary second _unpriv= OK naddy@
2016-10-28- move SHA256 SHA256.sig h fail from _tmpsrc to /tmpRobert Peichaer
- cleanup SHA256 and SHA256.sig before download - move assignment of _cfile and _srclocal to the top In a later step, this allows verification of local sets without the need of a prefetch area which is not used in this case anyway. Idea from and OK naddy@ OK krw@
2016-10-23Exit autoinstall in case of missing / or duplicate mountpoints.Robert Peichaer
This also covers the case when a template is rejected by disklabel. OK krw
2016-10-09Re-enable fetching sets from local sources (disk, cdrom, nfs) as root.Robert Peichaer
It's the users responsibility to ensure the integrity of these files! Problem found by Laurence Tratt who placed the sets in his home dir where the unprivileged users now used by the installer weren't able to read them from. discussed with deraadt@ OK krw@
2016-09-26Add _ping user/group.Florian Obser
OK natano on a previous diff which used a different uid/gid. naddy@ pointed out that uid/gid was already taken on "important" systems. Turns out we cannot easily recycle freed up uids/gids so settle on 51.
2016-09-25Tweak/add comments.Robert Peichaer
with input from and OK tb OK halex krw
2016-09-25Tweak addel(), rmel() and bsort() to not emit a leading/trailing blank.Robert Peichaer
OK tb krw
2016-09-22The tape install method is gone for a while already.Robert Peichaer
Remove leftovers. OK krw halex deraadt
2016-09-22vi is not available on the install media.Robert Peichaer
Besides ... real men use ed! OK krw halex deraadt
2016-09-17ping6(8) is now a hardlink to ping(8).Florian Obser
The instbin stuff looks good to deraadt@
2016-09-16Revert last. -f is a bad bad idea here.Kenneth R Westerback
ok deraadt@
2016-09-16Use 'umount -f' so failing to umount root does not blow up install/upgradeKenneth R Westerback
while root (sic) causes are probed. Problem reported by RD Thrush via bugs@ and reproduced locally.
2016-09-13Provide a stripped down group file for the install media.Robert Peichaer
Saves precious 896 bytes as a side effect. OK deraadt
2016-09-13"Make disk selection dumb again", or at least make the change lessAlexander Hall
intrusive. Default to the first available disk, skipping to the next (and so on), should the selected one be determined unsuitable for the install or upgrade taking place. "please commit" deraadt@
2016-09-11ramdisk ftp(1) client never probes for ftp & ftp-data services, becauseTheo de Raadt
only http is used.
2016-09-11ramdisk does not need a passwd entry for uucp.Theo de Raadt
2016-09-11a lonely little spaceTheo de Raadt
2016-09-10Ensure that a previous cdrom install method is passed throughRobert Peichaer
to install_sets() and that it is presented as default answer. - fix pattern in waitcgiinfo() to match method=cd0. - use a separate variable _im to set INSTALL_METHOD resp might get overwritten in install_cdrom() OK halex
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-18 11:31:46 +0000