summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2019-02-26crank to 6.5-betaTheo de Raadt
2019-02-24Remove -S from install commandskn
As of usr.bin/xinstall/install.c revision 1.68, -S is a no-op and install(1) will always create files safely, thus clean the option usage from the tree. Diff from Lauri Tirkkonen <lotheac at iki dot fi>, thanks.
2019-02-19Simplify NFS check in reorder_libs()kn
Loop over df(1)'s output directly, ensure the resulting list of block devices is unique to avoid later duplicity checks and redundant mount(8) invocations. This allows direct bail out on invalid types and simpler saving for later remount. OK deraadt
2019-02-19sync staff datasize-cur with defaultJonathan Gray
ok deraadt@
2019-02-11We no longer need /etc/unwindFlorian Obser
OK sthen
2019-02-11Since the new trust anchor format no longer contains constantlyFlorian Obser
changing timestamps we can track it in /etc/changelist. OK sthen
2019-02-10Revert previous. requested by deraadt@Matthieu Herrb
2019-02-10Remove old X proto documentation directoriesMatthieu Herrb
2019-02-10crank limits because of mesaTheo de Raadt
2019-02-07No need to run unbound-anchor anymore. Unwind(8) handles the bootstrapFlorian Obser
correctly itself now. At leat considering the end of life times of OpenBSD releases and the speed at which the root key signing key (KSK) rolls. On the other hand, unbound-anchor assumes a certain network quality which we cannot guarantee in places where we want to run unwind(8). This in turn can lead to unbound-anchor stalling the boot process.
2019-02-056.6 firmware keyStuart Henderson
2019-02-056.6 packages keyChristian Weisgerber
2019-02-05Add an example unwind.conf.Florian Obser
Note that unwind(8) works without a config file in many (most?) cases. This provides an example on how to use the captive portal detection feature. Input benno Input & OK sthen
2019-02-05sets grew a little, install*.* need to alsoTheo de Raadt
2019-02-03add 6.6 base keyTheo de Raadt
2019-02-03crank datasize, because mesa is a pigTheo de Raadt
2019-01-29add /etc/unwind.conf in changelist(5)Sebastien Marie
ok florian@
2019-01-27Add domain-s also known as DNS over TLS (DoT)Daniel Jakots
ok deraadt@ florian@
2019-01-27Create /etc/unwind.Florian Obser
re-commit now that snapshots are over the bump. OK deraadt
2019-01-26revert for now, sysmerge needs to create the group first.Florian Obser
found the hard way by deraadt
2019-01-26rc(8) bits for unwind(8); OK deraadtFlorian Obser
2019-01-26create /etc/unwind; OK deraadtFlorian Obser
2019-01-26add _unwind user; OK deraadtFlorian Obser
2019-01-24Bump default datasize on arm64 to 768M to prepare for building clang 7.Mark Kettenis
ok deraadt@, visa@
2019-01-24Drop the ttyflags message.Antoine Jacoutot
suggested by and ok deraadt@ ("I think we never hang there anymore")
2019-01-21Use ${rcexec} in rc_pre to do the config testing. This allows to specifyClaudio Jeker
macros with spaces in them. With and OK ajacoutot
2019-01-20untabifyMatthieu Herrb
2019-01-20New doc directories for xorgprotoMatthieu Herrb
2019-01-20The shell will strip the quotes from daemon_flags when starting a daemon so makeAntoine Jacoutot
sure pexp matches the process (i.e. doesn't include the quotes). It's a bit hackish but it allows things like these in rc.conf.local: relayd_flags=-D IPS="1.2.3.4 2.3.4.5" And we properly end up with... $ grep ^pexp /var/run/rc.d/relayd pexp=/usr/sbin/relayd -D IPS=1.2.3.4 1.2.3.5 ... which matches what is in the process list: root 14217 <snip> 0:00.01 /usr/sbin/relayd -D IPS=1.2.3.4 1.2.3.5 There's always the possibility that we have introduced a regressions with hand crafted functions in rc.d scripts (mostly from packags), so watch out. reported by and debugged with claudio@
2019-01-19document pwraction in the example fileTed Unangst
2019-01-19Clean-up unused directoriesMatthieu Herrb
2019-01-12Use acpidump -q to avoid message about ACPI information not being found.Mark Kettenis
Many arm64 systems use device trees instead of ACPI and acpidump is expectected to fail on those systems. And vmm(4) doesn't provide ACPI information either. ok deraadt@
2019-01-08Move acme-client.conf to examples. Since we no longer store theFlorian Obser
agreement url in here we no longer need to updated it all the time. OK deraadt
2018-12-206.2 keys no longer requiredTheo de Raadt
2018-12-16Remove control-use-cert. It is ignored for local sockets (since unbound 1.7.3).Tim van der Molen
OK florian@ sthen@
2018-12-12add commented-out "val-log-level: 2" next to the uncommentable line toStuart Henderson
enable dnssec validation, it's really useful for debug
2018-12-11the world is not ready for dnssec enabled by defaultFlorian Obser
2018-12-10remove qname-minimisation from sample config, this was turned on byStuart Henderson
default upstream in 1.7.2 (picked up by us with the update to 1.7.3). ok florian@
2018-12-07Remove public resolver IP addresses, just provide a neutral "documentationStuart Henderson
prefix" address instead - there are so many available with varying policies that this isn't a good place to list them (and might imply some kind of recommendation which is not intended). Particularly prompted by several on the previous list (he.net and opendns) strip RRSIG from results which cause DNSSEC failures now that validation is enabled in the example config as noticed by solene@. While there, shrink qname-minimisation comment to match other nearby comments, and drop dns64 example which is quite a specialist use case and not really needed in this basic example.
2018-12-07Enable DNSSEC validation.Florian Obser
Requested by & OK claudio Input & OK sthen OK job, solene Various commenting that they run with validation since a long time without issues.
2018-11-17add the missing space. in the future, should mail -f the file to ensure it ↵Theo de Raadt
is correct format
2018-11-17make the bogon set competely or-longer, rather than having to manage itTheo de Raadt
or-longer at useage time. ok job benno
2018-11-13Grow sgi iso to make room for clang.Visa Hankala
Cluebat and OK deraadt@
2018-10-31Import new moduli.Darren Tucker
2018-10-29Revert previous (for now).Antoine Jacoutot
semarie found a few regressions with daemon that will fail if cwd is not accessible.
2018-10-16Change the way we call su(1) in rcexec:Antoine Jacoutot
- drop `-'l' to prevent simulating a full login and running /root/.profile (prodded by a mail from J Greely) - use `-m' to preserve the environment because we now set HOME to "/" like /etc/rc does; note that we now also clear the environment using `env -i' before running su(1) which leaves us with only HOME, PATH and SHELL Committing early to catch regressions fast, if any. ok halex@
2018-09-27Add vmctl stop -a [-fw] option to stop or terminate all running VMs.Reyk Floeter
This is also be used to simplify the vmd rc stop script. OK mlarkin@ ccardenas@
2018-09-23add 6.5 syspatch public keyRobert Nagy
2018-09-216.5 firmware keyStuart Henderson
2018-09-20grow alpha and hppa media to accomodate some recent growthTheo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-21 04:05:05 +0000