Commit Graph

626 Commits

Author SHA1 Message Date
christos 8f75e4b21c simplify more (from rudolf) 2019-10-23 14:45:38 +00:00
sevan 0e74c10957 No need to empose the script to be runnable during boot time, it prevents the
script from wroking if the system is booted into single user mode & then
moved onto multi-user mode.

Reported by <pgoyette> for NPF but the issue is there in PF too.
2019-10-05 22:21:29 +00:00
nonaka da6a94293e Moved zfs out of MKX11 block.
Fix build failure without X11.
2019-09-18 05:16:15 +00:00
brad 12ea0a140d Add support for legacy ZFS filesystems, specified by mountpoint=legacy
in the ZFS properties of the dataset and a simple man page for
mount_zfs.  With this, it is possible to put ZFS filesystems in
/etc/fstab as file system type zfs.

Add a rc.d script that kicks the module ZFS load mostly before
mountall runs simular to what LVM does.  This allows for any legacy
mounts to be specified in critical_local_filesystems and allows for
ZFS pools on top of cgd (probably among other things).  Introduce a
rc.conf variable called zfs which needs to be set to YES, in the usual
manor of things, to get zvols and ZFS dataset support rather then just
assume that 'zfs mount' does that in mountall.  Fix a problem in
mountall if ZFS is not compiled into the system.
2019-09-15 19:38:08 +00:00
rin 01a583bbb1 little bit verbose for slow machines 2019-08-09 10:05:44 +00:00
nakayama fa4c499b74 Add $_rc_subr_loaded before ". /etc/rc.subr" for speedup and consistency. 2019-08-07 19:30:00 +00:00
maxv 0323b962b3 Remove comment, since there is no parsing anymore. 2019-05-13 18:53:10 +00:00
kre 480c945f6e I should know better! Don't rely upon the way the shell implements
pipes.   Skip the "error" printf from GetSmtId() as there is no easy
portable way to avoid it occurring (there are complicated ways) - but
we don't need it, there is no logical difference between "error" and ""
so just use the latter (if we get an ID, good, if there is nothing, then
there is none - saying 'error' does not mean anything.)
2019-05-12 11:55:47 +00:00
kre 6ae1c84105 No change... Previous log message should have said:
Install rc.d/smtoff
2019-05-12 01:50:14 +00:00
kre 1aa98bd080 install rc.d 2019-05-12 01:33:47 +00:00
kre 7476299781 Restructure code a little.
Use quoting everywhere possibly useful (always the right way, except
in the few cases where it is wrong...)

Avoid using cut & grep (from /usr/bin) so script could run before /usr
is mounted (pity cpuctl is in /usr/sbin ...).

Use sysctl -n rather than attempting to parse its output.
2019-05-12 00:24:03 +00:00
maxv 907a706c0b Add smtoff, an rc.d script that disables Simultaneous Multi-Threading. It
parses the output of cpuctl, and executes "cpuctl offline" for each CPU
that has SmtID!=0.

The default is "smtoff=NO", which means that SMT remains enabled.
2019-05-11 19:31:03 +00:00
roy b312a806c1 Fix build, install wsmoused 2019-04-25 11:21:34 +00:00
roy d73f7f4f61 Don't install YP rc.d files with MKYP=no 2019-04-25 08:56:21 +00:00
leot 39ae4dd0ba Do not start npf again at reboot (it is started via npf_boot) 2019-04-19 18:36:25 +00:00
sevan 967446d222 Include npf_boot rc.d scripts which loads an interim config early in boot.
By default /etc/default/npf.boot.conf which can be overriden by /etc/npf.boot.conf.
2019-04-10 00:32:15 +00:00
sevan 14689fed34 Add an initial ruleset and rc script for NPF to protect host during early stage
of boot, similar to what is currently available for PF.
2019-04-02 01:50:32 +00:00
mrg 0050db9471 only flush routes in stop routine if flushroutes is true, same as
the start up.
2018-10-23 09:25:33 +00:00
martin a52a4fdc24 Apply patch from Ian D. Leroux in PR bin/51019:
when unmounting tmpfs file systems at shutdown time, avoid unmounting
a tmpfs created by init on /dev - behaviour overridable from rc.conf.
By default all tmpfs that have device nodes are not mounted.
2018-10-19 14:11:12 +00:00
jmcneill 51976c5c14 If fs_spec starts with the special string "ROOT.", replace it with a device
path derived from the value of the kern.root_device sysctl.
2018-10-06 13:09:53 +00:00
martin 56d7a6f003 Discussed some years ago but never commited: add an option to have a
single tmpfs (on /tmp) and use that for /var/shm as well (via a symlink
created after the tmpfs on /tmp has been mounted)
2018-09-30 10:38:05 +00:00
maxv 6049b090a1 Remove the userland part of ISDN. The kernel part is untouched for now.
ipppctl was actually an exact copy of pppoectl; there is no functional
change in pppoectl in this commit.
2018-09-23 07:24:19 +00:00
christos f062baa468 handle v6 addresses 2018-08-13 09:16:06 +00:00
roy eb279c7f26 Allow rc.conf to setup resolv.conf via resolvconf(8).
This allows all static network config to be in rc.conf rather than
spread across files.
2018-07-27 15:31:02 +00:00
roy b729dec75a Remove dhclient from the base system.
Discussed here:
https://mail-index.netbsd.org/tech-userlevel/2018/06/21/msg011233.html
2018-06-29 12:34:13 +00:00
sevan 66fd14939a Prior to ZFSv15, volinit was an undocumented command which could be used to
populate /dev with zvol device nodes.
Following on with the recent ZFS/DTrace update, this is no longer a valid option
and causes the mountall script to barf zfs usage() following from
unrecognized command 'volinit' error.
2018-06-08 14:44:21 +00:00
riastradh aafff8763a Revert previous: Don't generate XMSS host keys for sshd by default.
XMSS is a stateful post-quantum signature scheme.

- Post-quantum security for _online_ authentication is not important
  until quantum computers become practical; there's no danger of
  retroactive forgery in sessions that have already completed.

- As a stateful signature schemes, XMSS is qualitatively different
  from all the other ones sshd supports, requiring additional
  administrative care: roll back the state (e.g., from a disk backup
  or VM snapshot), and you've shot yourself in the foot.

If users want XMSS keys, they can make them explicitly, but there's
no need for this to be enabled by default.

Discussed with christos offline.
2018-05-26 19:18:11 +00:00
jmcneill c9b64841e5 Silence ssh-keygen output when host keys are generated. Instead, print only
key fingerprints. This replaces dozens of lines out ASCII art output with
something more reasonable:

armv7# service sshd start
ssh-keygen: 1024 SHA256:ynP4BQ2B0Fknnf9PfF4QoUDlYi0+7rNfYXTOYP2cDic root@armv7 (DSA)
ssh-keygen: 521 SHA256:Eoj382aaJNlSxuq/aYj3AXgxfMJAkyVPoCQd2BNjJiA root@armv7 (ECDSA)
ssh-keygen: 256 SHA256:+e9/qTbbN/g6xvkadtHsmIQ+Pc0afZRxbXJsk2HKIzY root@armv7 (ED25519)
ssh-keygen: 2048 SHA256:urNaF/m6oiCe5hXFZBxGLW2PvLz0ibtRFrqYw6R+qTw root@armv7 (RSA)
ssh-keygen: 256 SHA256:Su2Nal2W3vrFz8ukpcSXngl1/bu6xUm1nSvbxTHe9Js root@armv7 (XMSS)
Starting sshd.
2018-05-26 00:17:54 +00:00
christos e5ff1cf5fd Simplify so we don't have to hard-code the key filenames in two places. 2018-04-09 15:02:39 +00:00
christos 733ab037c6 support xmss keys 2018-04-07 00:41:16 +00:00
uwe 097b3add5a Actually install dhcpd6 rc script. Organize CONFIGFILES
alphabetically again while where.

PR 53018
2018-02-17 03:02:04 +00:00
christos b985414b8f Merge autofs support from: Tomohiro Kusumi
XXX: Does not work yet
2018-01-09 03:31:12 +00:00
is d9123c9e75 Add startup file for dhcp v6 with builtin isc-dhcp. Alas, this needs to
be a seperate process. On the positive side: this can't break the dhcpd
for IPv4 when tested.
2017-12-29 18:15:48 +00:00
kre 6b923cca7a Do away with (not well specified, even if it happens to work) absurd
15 arg test ([ ]) expression, and replace it with several well defined
2 arg tests, combined with (also well defined) sh syntax.
2017-12-04 14:50:33 +00:00
sevan 0759fcfcfc With the new version of OpenSSH, SSHv1 is no longer supported server-side.
Along with that rsa1 type keys are no longer supported.
Don't try to generate such keys on new systems.

ok christos
2017-10-07 21:41:51 +00:00
kre 810e1e7da1 Revert previous - not a typo, even though it looks like one 2017-07-06 09:49:39 +00:00
kre b1a3593132 PR misc/52370
Correct typo.

XXX pullup 8, pullup 7
2017-07-06 09:24:47 +00:00
christos 71cba524e4 add scripts for npfd 2017-01-05 14:39:09 +00:00
kre 8ad774dbf7 Undo change to a comment made when I thought another change to the
script was needed ... the unnecessary script change was never committed,
but the comment that described it was...    No functional change.
2016-11-19 01:14:58 +00:00
kre 1675d6af19 The config file is not required to exist (unless specified via -d).
(reported by rhialto@falu.nl)  Don't fail to start if it doesn't.

Make sure the directory for the config file exists inside the chroot before
attempting to copy into it ("confdir" was calculated, but never used...)

While here, fix getopts usage (obviously only ever previously tested when
the -c arg was the first option...) and don't use test(1)'s -o operator
(especially not when one of the other args is an unknown string).
If -c is given (and we will chroot), require filename to be full path.

Misc minor style cleanups.
2016-11-18 23:10:05 +00:00
riastradh 6b3de624e6 Handle variable expansion and comma/space separators in postconf.
From Timo Buhrmester:
https://mail-index.netbsd.org/tech-userlevel/2016/08/20/msg010301.html
2016-10-30 15:47:06 +00:00
christos 90ff2f0a25 Adjust for new ifconfig address/mask output. 2016-10-19 21:27:10 +00:00
kre a5229b934a Cause rc to abort if mounting any of the critical local filesystems fails
rather than just ignoring the error.

Don't bother attempting to clear the contents of /var/run if /var/run
does not exist.

In that case the mkdir of /var/run/lvm would have failed - correct that
by using mkdir -p (which as a side effect will ensure /var/run exists
and is available for later scripts to use if for some reason it did not exist.)
2016-07-23 01:38:35 +00:00
dholland 796a3ac327 Avoid unnecessary use of basename(1). From Jukka Salmi a long, long time
ago on a tech-kern far, far away.
2016-04-23 21:24:31 +00:00
christos d6c8225a0e use kat, a version of cat that strips comments 2016-03-06 18:50:06 +00:00
roy 2357a4fb46 Use the new -P option to work out which pidfile dhcpcd will use. 2016-01-07 22:03:00 +00:00
roy d0367588d0 Instead of waiting for a duration based in IPv6 DAD count sysctl,
wait for 15 seconds for tentative flags to clear allowing 5 seconds
for detached flags to clear as well from configured addresses.

This is now protocol independant and allows time for the interfaces to
work out if they have a carrier or not.
2016-01-07 11:51:07 +00:00
christos dd01c08e97 remove some stuff we don't have; rename rc command variable. 2015-12-23 04:38:00 +00:00
christos ff0756d560 Add ip6addrctl 2015-12-13 02:05:15 +00:00
christos 0e5ab369bd PR/49380: KAMADA Ken'ichi: ntpd_chrootdir does not work on NetBSD 7.0_BETA
Provide /etc/resolv.conf so that it can resolve names. This is needed because
of deferred name resolution.
XXX: pullup -7
2015-11-23 19:56:47 +00:00