summaryrefslogtreecommitdiff
path: root/distrib/miniroot
AgeCommit message (Collapse)Author
2017-01-04Enforce https for connections to ftplist.cgi and ftpinstall.cgi onRobert Peichaer
platforms that have tls enabled ftp(1). OK tb@
2017-01-03Add https support to the OpenBSD installer.Robert Peichaer
The sets are downloaded using https per default. If the server does not support https, the installer offers falling back to http after asking for confirmation. NOTE: Depending on the setup, people using autoinstall(8) might need to add this new installer question to the response file. Unable to connect using https. Use http instead = yes|no Joint work with and 'go for it' from deraadt@ Tested from and OK tb@ Feedback and OK for the approach halex@
2016-12-30Switch the connection to ftp.openbsd.org from using the ip addressRobert Peichaer
to hostname as preparation for an upcoming change. But to ensure proper name resolution in case dns is not available yet, add an entry to the hosts file. After an installation, remove it so it does not end up in the final hosts file. Not needed for upgrades because the file is not copied to the upgraded system. OK deraadt@
2016-12-30Also link with -ltls -lssl -lcrypto, in case the instbin binary containsTheo de Raadt
calls to those libraries.
2016-12-30create etc/ssl directory on all media (in case we want to put a file there)Theo de Raadt
2016-12-28Replace literal ^M with $(echo '\r') to avoid cluttering diffs.Robert Peichaer
OK halex@ fine for deraadt@
2016-12-27Remove user uucp and group news from base.Jeremie Courreges-Anglas
2016-12-19Revert r1.934 to unbreak autoinstallRobert Peichaer
2016-12-19- no need to export the TERM variable twiceRobert Peichaer
- re-format case-block - unquote single word default answer - use 'break' instead of return to leave (same effect here, but needed later when the function is no function anymore) - use -q option with kbd to limit output to warnings/errors only discussed with and OK krw@ tb@
2016-12-18Split _issue msg and "Continue without verification?" question.Robert Peichaer
Prodded by and OK aja@ OK halex@ krw@
2016-11-25The build systems now uses the user build and the group wobj.Robert Peichaer
Add them to bsd.rd and set the ownership and permissions of /usr/obj and /usr/xobj accordingly. feedback and OK tb@ Looks good deraadt@
2016-11-24Don't manually add a route to an alias IP via 127.0.0.1. This isKenneth R Westerback
now automatically handled by the kernel. The same change was made to /etc/netstart in 5.5 with r1.139. Should fix the (U)pgrade problem reported on bugs@ by Clint Pachl. ok mpi@
2016-11-14Ensure, that the root disk question is added to the response fileRobert Peichaer
mail. found by and OK tb@ OK halex@ krw@
2016-11-05Remove the obj, xobj and src directories from the base set.Robert Peichaer
The installer will create these directories during install. So local setups will not get overwritten during upgrades. idea from and OK deraadt@ with help from and OK tb@ feedback from and no objections halex@
2016-10-30Search for and create a prefetch area only for nonlocal sources.Robert Peichaer
This enables the installer to verify local set files even if the prefetch area would not fit on the local disk. OK krw@ on a similar diff Idea from and OK naddy@ Feedback and OK tb@
2016-10-29Fix an issue found by naddy@ where the installer was not ableRobert Peichaer
to fetch local sets without a SHA256.sig file in a directory unreachable by the unprivileged users. The missing SHA256.sig file caused an early exit from the for-loop where the _unpriv variable is unset in case of local sets. - Move the check of the set location (local/net) to the top - Set the ftp command title based on the _srclocal variable - Remove the now unnecessary second _unpriv= OK naddy@
2016-10-28- move SHA256 SHA256.sig h fail from _tmpsrc to /tmpRobert Peichaer
- cleanup SHA256 and SHA256.sig before download - move assignment of _cfile and _srclocal to the top In a later step, this allows verification of local sets without the need of a prefetch area which is not used in this case anyway. Idea from and OK naddy@ OK krw@
2016-10-23Exit autoinstall in case of missing / or duplicate mountpoints.Robert Peichaer
This also covers the case when a template is rejected by disklabel. OK krw
2016-10-09Re-enable fetching sets from local sources (disk, cdrom, nfs) as root.Robert Peichaer
It's the users responsibility to ensure the integrity of these files! Problem found by Laurence Tratt who placed the sets in his home dir where the unprivileged users now used by the installer weren't able to read them from. discussed with deraadt@ OK krw@
2016-09-26Add _ping user/group.Florian Obser
OK natano on a previous diff which used a different uid/gid. naddy@ pointed out that uid/gid was already taken on "important" systems. Turns out we cannot easily recycle freed up uids/gids so settle on 51.
2016-09-25Tweak/add comments.Robert Peichaer
with input from and OK tb OK halex krw
2016-09-25Tweak addel(), rmel() and bsort() to not emit a leading/trailing blank.Robert Peichaer
OK tb krw
2016-09-22The tape install method is gone for a while already.Robert Peichaer
Remove leftovers. OK krw halex deraadt
2016-09-22vi is not available on the install media.Robert Peichaer
Besides ... real men use ed! OK krw halex deraadt
2016-09-17ping6(8) is now a hardlink to ping(8).Florian Obser
The instbin stuff looks good to deraadt@
2016-09-16Revert last. -f is a bad bad idea here.Kenneth R Westerback
ok deraadt@
2016-09-16Use 'umount -f' so failing to umount root does not blow up install/upgradeKenneth R Westerback
while root (sic) causes are probed. Problem reported by RD Thrush via bugs@ and reproduced locally.
2016-09-13Provide a stripped down group file for the install media.Robert Peichaer
Saves precious 896 bytes as a side effect. OK deraadt
2016-09-13"Make disk selection dumb again", or at least make the change lessAlexander Hall
intrusive. Default to the first available disk, skipping to the next (and so on), should the selected one be determined unsuitable for the install or upgrade taking place. "please commit" deraadt@
2016-09-11ramdisk ftp(1) client never probes for ftp & ftp-data services, becauseTheo de Raadt
only http is used.
2016-09-11ramdisk does not need a passwd entry for uucp.Theo de Raadt
2016-09-11a lonely little spaceTheo de Raadt
2016-09-10Ensure that a previous cdrom install method is passed throughRobert Peichaer
to install_sets() and that it is presented as default answer. - fix pattern in waitcgiinfo() to match method=cd0. - use a separate variable _im to set INSTALL_METHOD resp might get overwritten in install_cdrom() OK halex
2016-09-10Ensure that previous installer choices are available during upgradesRobert Peichaer
by moving waitcgiinfo() from install_http() to before install_sets() in do_upgrade(). OK halex
2016-09-10Ensure that install_files() returns successful if the _tmpsrcRobert Peichaer
directory does not exist. Otherwise, INSTALL_METHOD is not set and this information is not sent to the cgi server. OK halex
2016-09-10Fix detection if default route was set by dhclient in v4_defroute().Robert Peichaer
Route labels are now enclosed in double quotes (see r1.107 of src/sbin/route/show.c). OK claudio, krw no objections halex
2016-09-09There were 3 ways of using shell at the initial prompt of the installer.Robert Peichaer
One is enough. OK halex
2016-09-05Tweak comments and spacing.Robert Peichaer
OK krw, halex
2016-09-05Relax permissions to make files readable by unpriv users again.Robert Peichaer
Found out by naddy OK deraadt
2016-09-04Not having the root filesystem on the 'a' partition isAlexander Hall
stupi^Wunfortunate, so stop asking. deraadt@ and krw@ agrees ok rpe@
2016-09-04Improve the auto disk selection and also apply it for installs as wellAlexander Hall
as for upgrades. - For installs, find all and any disks available. - For upgrades, look for 'a' partitions with the typical root filesystem directories in them. In both cases, if one and only one match is found, it will be selected. If no disk or multiple disks are found, the installer will require you to specify a disk, be it by hand or by auto{install,upgrade}.conf. ok rpe@ krw@ "Innovative." deraadt@
2016-09-04Move files created by root during install/upgrade in a subdir ofRobert Peichaer
/tmp with proper permissions so that unprivileged programs can not tamper with them. positive feedback from deraadt OK halex
2016-09-03Make the installer safer by fetching and verifying external dataRobert Peichaer
as unprivileged users. OK halex, tb, deraadt
2016-09-03Add a do_as() function that executes commands as unprivileged userRobert Peichaer
and ensures that no processes of this user remain active afterwards. Optionally, it creates a file, that is owned by the user only for this command execution. Afterwards it's chown'd by root. Add wrapper functions for do_as(). unpriv() uses the _sndio user and unpriv2() uses the _file user to execute commands. OK halex, tb, deraadt
2016-09-03Add two users accounts to the install media that have no privilegesRobert Peichaer
on a base system. They are used with doas(1) to execute certain commands as unprivileged users during install and upgrade . OK halex, tb, deraadt
2016-09-03Enable a stripped down version of doas(1) on the install media.Robert Peichaer
OK halex, tb, deraadt
2016-09-02for an upgrade disk selection, present a default alternative of 'auto',Alexander Hall
which will scan the available disks, selecting the first disk with an 'a' partition of type 4.2BSD ok deraadt@ krw@ phessler@
2016-08-23Type. 'if' != 'lf'. Fixes error message and setting hostname from dhcp leaseKenneth R Westerback
during install. Spotted & diff from Patrik Lundin. Thanks!
2016-08-21Make lease_value() unescape quoted strings. To be fully compliant, weAlexander Hall
should unvis() it too, but I think this is enough, at least for now. ok krw@
2016-08-21tweak previousRobert Peichaer
OK halex, krw
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-11 11:57:39 +0000