Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-01-15 | Since we now show the installer output we want that new line back. | Robert Peichaer | |
OK halex@ | |||
2014-01-12 | Place a SHA256 (not SHA256.sig, sorry not yet) onto the install*.iso | Theo de Raadt | |
media to give some upcoming changes a chance of working. Long discussions with todd and rpe | |||
2014-01-12 | sync | Theo de Raadt | |
2014-01-12 | sync | Theo de Raadt | |
2014-01-11 | when selecting sets to install, postpone the xbase/comp check so the | Alexander Hall | |
comp set does not get readded if the xbase set is being removed later on the same input line "nice semantics" deraadt@ | |||
2014-01-11 | add a few things mumble | Theo de Raadt | |
2014-01-11 | No need for a bin/cpio link on the media, because the pax|tar binary does | Theo de Raadt | |
not support cpio anymore. | |||
2014-01-11 | Butcher a smaller tar/pax here, which has no cpio support | Theo de Raadt | |
ok guenther | |||
2014-01-11 | use -DSHA2_ONLY to be more clear about what we are butchering | Theo de Raadt | |
idea from tedu | |||
2014-01-11 | use NOMAN=1 for all directories | Theo de Raadt | |
2014-01-11 | unify with other Makefiles around here | Theo de Raadt | |
2014-01-10 | remove md5 after installing it (with the links to the sha256/512 commands). | Theo de Raadt | |
this is because the md5/sha256/sha512 are in the same binary, found in the md5 directory, but the version on the media lacks md5 support. Understand? | |||
2014-01-09 | sync | Theo de Raadt | |
2014-01-09 | Mention that T5120/T5220 systems require an OBP update if they are below 4.28 | Miod Vallat | |
level (matching the stealth commit to sparc64.html years ago); and update the OBP update section to point to the current Oracle ``Firmware Domwnloads'' page. | |||
2014-01-09 | copy the relevant key for the release onto the media | Theo de Raadt | |
2014-01-09 | sync | Theo de Raadt | |
2014-01-09 | ramdisks need a /etc/signify directory | Theo de Raadt | |
2014-01-09 | we need to build a ztscale stub for zaurus media. | Theo de Raadt | |
2014-01-08 | Take restore off the floppy media for now. Sorry. | Theo de Raadt | |
2014-01-08 | Switch to using the base sha256 command, rather than some customized | Theo de Raadt | |
abomination. install.sub chunk tested by rpe | |||
2014-01-08 | sync | Theo de Raadt | |
2014-01-08 | enter md5 directory | Theo de Raadt | |
2014-01-08 | Build a -DSMALL verison of md5 for the install media (will be installed | Theo de Raadt | |
as sha256 and sha512, primarily) | |||
2014-01-08 | always include dd | Theo de Raadt | |
2014-01-08 | rename SHA256_ONLY to SHA2_SMALL; changing things so that sha512 support | Theo de Raadt | |
is also pulled in | |||
2014-01-08 | enable building of signify in the ramdisks | Theo de Raadt | |
2014-01-07 | Make skipping the root fs DUID aware. | Robert Peichaer | |
If ROOTDEV is either the device from fstab or the converted DUID device name with the partition added, skip the current fstab entry ok halex@ | |||
2014-01-07 | SRCDRS usr.bin usr.sbin is a bad idea (because of PIE). The places we | Theo de Raadt | |
pick binaries up must be compiled -static or at least in some safe model for reuse. Since we now use distrib/special for those, we can safely remove usr.bin and usr.sbin from this list. | |||
2014-01-06 | In the new PIE world, all dynamic binaries (for instance those found | Theo de Raadt | |
in usr.bin and usr.sbin on the install media) must be re-compiled non-PIE (here, in the special directory) so that crunchgen can reuse them. This issue is most acute on i386, which has register pressure, and does weird things for PIE. thanks for matthew for helping figure this out. | |||
2014-01-06 | we do not need apm or apmd on the install media, that is silly | Theo de Raadt | |
2014-01-06 | Remove mention of installXX not bootable on IP27/35. | Miod Vallat | |
2014-01-06 | Rework the setup of the bootable installation cd-rom (installXX.iso) to | Miod Vallat | |
contain both a 2048-byte sector ffs filesystem, and a 512-byte volume header, so that the IP27 boot magic^Wuglyness recently added to the boot-only cd-rom (cdXX.iso) can be applied as well. The full-blown installation iso can now boot on IP27/28/30/32/35. | |||
2014-01-06 | sync | Miod Vallat | |
2014-01-06 | sync | Miod Vallat | |
2014-01-06 | sync | Theo de Raadt | |
2014-01-05 | Like upgrade, use feed_random right after mounting filesystems. This | Theo de Raadt | |
is less than ideal. We hope the kernel has good entropy already, because this is a reinstall?? Or maybe the ftp server startup has run to completion? Or if this is an autoinstall, that config has enough unique in it? This needs more work, but the existing late-entropy feed sequence is worse. discussed at length with rpe, who tested it | |||
2014-01-05 | We can feed_random right after mounting the filesystems, hoping we pick | Theo de Raadt | |
up the previous kernel's /var/db/host.random ok rpe | |||
2014-01-05 | provide feed_random() and store_random(). The first is used by install or | Theo de Raadt | |
upgrade to feed as much additional usable entropy (as early as possible) to the current bsd.rd install kernel. The latter is used late in the procedure to store entropy for the next boot (of a real kernel) based on an issue described by dtucker, must conversation with halex and rpe tested by rpe | |||
2014-01-04 | sync | Theo de Raadt | |
2013-12-31 | sync | Todd T. Fries | |
2013-12-28 | sync | Theo de Raadt | |
2013-12-27 | sync | Theo de Raadt | |
2013-12-24 | sync | Theo de Raadt | |
2013-12-24 | sync | Theo de Raadt | |
2013-12-23 | The xbase set requires the comp set. If xbase is in the selection, | Robert Peichaer | |
but not comp, put comp back in automatically. suggested by and ok deraadt@ ok halex@ | |||
2013-12-23 | sync | Theo de Raadt | |
2013-12-21 | sync | Theo de Raadt | |
2013-12-21 | sync | Theo de Raadt | |
2013-12-18 | change password prompts (for the good of install.conf) | Alexander Hall | |
add autoinstall question for root ssh pubkey make pubkey prompts appear in autoinstall log ideas from and ok deraaddt@, ok rpe@ | |||
2013-12-17 | sync | Theo de Raadt | |