Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
260,147 Commits 606 Branches 0 Tags 3.1 GiB
b6a911a673
Commit Graph

602 Commits

Author SHA1 Message Date
roy
b729dec75a Remove dhclient from the base system. 
Discussed here:
https://mail-index.netbsd.org/tech-userlevel/2018/06/21/msg011233.html
 2018-06-29 12:34:13 +00:00
sevan
66fd14939a Prior to ZFSv15, volinit was an undocumented command which could be used to 
populate /dev with zvol device nodes.
Following on with the recent ZFS/DTrace update, this is no longer a valid option
and causes the mountall script to barf zfs usage() following from
unrecognized command 'volinit' error.
 2018-06-08 14:44:21 +00:00
riastradh
aafff8763a Revert previous: Don't generate XMSS host keys for sshd by default. 
XMSS is a stateful post-quantum signature scheme.

- Post-quantum security for _online_ authentication is not important
  until quantum computers become practical; there's no danger of
  retroactive forgery in sessions that have already completed.

- As a stateful signature schemes, XMSS is qualitatively different
  from all the other ones sshd supports, requiring additional
  administrative care: roll back the state (e.g., from a disk backup
  or VM snapshot), and you've shot yourself in the foot.

If users want XMSS keys, they can make them explicitly, but there's
no need for this to be enabled by default.

Discussed with christos offline.
 2018-05-26 19:18:11 +00:00
jmcneill
c9b64841e5 Silence ssh-keygen output when host keys are generated. Instead, print only 
key fingerprints. This replaces dozens of lines out ASCII art output with
something more reasonable:

armv7# service sshd start
ssh-keygen: 1024 SHA256:ynP4BQ2B0Fknnf9PfF4QoUDlYi0+7rNfYXTOYP2cDic root@armv7 (DSA)
ssh-keygen: 521 SHA256:Eoj382aaJNlSxuq/aYj3AXgxfMJAkyVPoCQd2BNjJiA root@armv7 (ECDSA)
ssh-keygen: 256 SHA256:+e9/qTbbN/g6xvkadtHsmIQ+Pc0afZRxbXJsk2HKIzY root@armv7 (ED25519)
ssh-keygen: 2048 SHA256:urNaF/m6oiCe5hXFZBxGLW2PvLz0ibtRFrqYw6R+qTw root@armv7 (RSA)
ssh-keygen: 256 SHA256:Su2Nal2W3vrFz8ukpcSXngl1/bu6xUm1nSvbxTHe9Js root@armv7 (XMSS)
Starting sshd.
 2018-05-26 00:17:54 +00:00
christos
e5ff1cf5fd Simplify so we don't have to hard-code the key filenames in two places. 2018-04-09 15:02:39 +00:00
christos
733ab037c6 support xmss keys 2018-04-07 00:41:16 +00:00
uwe
097b3add5a Actually install dhcpd6 rc script. Organize CONFIGFILES 
alphabetically again while where.

PR 53018
 2018-02-17 03:02:04 +00:00
christos
b985414b8f Merge autofs support from: Tomohiro Kusumi 
XXX: Does not work yet
 2018-01-09 03:31:12 +00:00
is
d9123c9e75 Add startup file for dhcp v6 with builtin isc-dhcp. Alas, this needs to 
be a seperate process. On the positive side: this can't break the dhcpd
for IPv4 when tested.
 2017-12-29 18:15:48 +00:00
kre
6b923cca7a Do away with (not well specified, even if it happens to work) absurd 
15 arg test ([ ]) expression, and replace it with several well defined
2 arg tests, combined with (also well defined) sh syntax.
 2017-12-04 14:50:33 +00:00
sevan
0759fcfcfc With the new version of OpenSSH, SSHv1 is no longer supported server-side. 
Along with that rsa1 type keys are no longer supported.
Don't try to generate such keys on new systems.

ok christos
 2017-10-07 21:41:51 +00:00
kre
810e1e7da1 Revert previous - not a typo, even though it looks like one 2017-07-06 09:49:39 +00:00
kre
b1a3593132 PR misc/52370 
Correct typo.

XXX pullup 8, pullup 7
 2017-07-06 09:24:47 +00:00
christos
71cba524e4 add scripts for npfd 2017-01-05 14:39:09 +00:00
kre
8ad774dbf7 Undo change to a comment made when I thought another change to the 
script was needed ... the unnecessary script change was never committed,
but the comment that described it was...    No functional change.
 2016-11-19 01:14:58 +00:00
kre
1675d6af19 The config file is not required to exist (unless specified via -d). 
(reported by rhialto@falu.nl)  Don't fail to start if it doesn't.

Make sure the directory for the config file exists inside the chroot before
attempting to copy into it ("confdir" was calculated, but never used...)

While here, fix getopts usage (obviously only ever previously tested when
the -c arg was the first option...) and don't use test(1)'s -o operator
(especially not when one of the other args is an unknown string).
If -c is given (and we will chroot), require filename to be full path.

Misc minor style cleanups.
 2016-11-18 23:10:05 +00:00
riastradh
6b3de624e6 Handle variable expansion and comma/space separators in postconf. 
From Timo Buhrmester:
https://mail-index.netbsd.org/tech-userlevel/2016/08/20/msg010301.html
 2016-10-30 15:47:06 +00:00
christos
90ff2f0a25 Adjust for new ifconfig address/mask output. 2016-10-19 21:27:10 +00:00
kre
a5229b934a Cause rc to abort if mounting any of the critical local filesystems fails 
rather than just ignoring the error.

Don't bother attempting to clear the contents of /var/run if /var/run
does not exist.

In that case the mkdir of /var/run/lvm would have failed - correct that
by using mkdir -p (which as a side effect will ensure /var/run exists
and is available for later scripts to use if for some reason it did not exist.)
 2016-07-23 01:38:35 +00:00
dholland
796a3ac327 Avoid unnecessary use of basename(1). From Jukka Salmi a long, long time 
ago on a tech-kern far, far away.
 2016-04-23 21:24:31 +00:00
christos
d6c8225a0e use kat, a version of cat that strips comments 2016-03-06 18:50:06 +00:00
roy
2357a4fb46 Use the new -P option to work out which pidfile dhcpcd will use. 2016-01-07 22:03:00 +00:00
roy
d0367588d0 Instead of waiting for a duration based in IPv6 DAD count sysctl, 
wait for 15 seconds for tentative flags to clear allowing 5 seconds
for detached flags to clear as well from configured addresses.

This is now protocol independant and allows time for the interfaces to
work out if they have a carrier or not.
 2016-01-07 11:51:07 +00:00
christos
dd01c08e97 remove some stuff we don't have; rename rc command variable. 2015-12-23 04:38:00 +00:00
christos
ff0756d560 Add ip6addrctl 2015-12-13 02:05:15 +00:00
christos
0e5ab369bd PR/49380: KAMADA Ken'ichi: ntpd_chrootdir does not work on NetBSD 7.0_BETA 
Provide /etc/resolv.conf so that it can resolve names. This is needed because
of deferred name resolution.
XXX: pullup -7
 2015-11-23 19:56:47 +00:00
roy
8b04443cd8 Fix the problem of just having a valid interface name in dhcpcd_flags. 2015-10-16 18:06:22 +00:00
roy
c95ec17135 Make mdnsd start before NETWORKING and require staticroute, mountcritlocal 
and networking.
Fixes PR install/43313.
 2015-10-15 16:47:28 +00:00
riz
e3d8d886ce Implement "status" command for postfix - makes tools like ansible 
happier.
 2015-07-23 17:12:16 +00:00
dholland
562a53e657 /usr/sbin/chown -> /sbin/chown 
(not sure why these need explicit paths at all, but whatevs)
 2015-07-03 18:36:54 +00:00
prlw1
68974b6b61 Apply modified version of patch from Wolfgang Stukenbrock in PR bin/41766 
This forcibly unmounts tmpfs file systems, so that swapctl doesn't run
out of swap itself, eventually trying to kill pid 1.

No objections since:
  http://mail-index.netbsd.org/current-users/2015/03/16/msg026908.html
 2015-04-20 18:01:46 +00:00
jmcneill
f02362348e fix typo in previous; pass -y unconditionally to resize_ffs, not -p 2015-04-07 18:02:11 +00:00
jmcneill
906c0d847e add KEYWORD: interactive, honour resize_root_flags and resize_root_postcmd rc vars 2015-04-06 22:40:09 +00:00
mlelstv
b68ba22239 Parse config file like ifconfig.if(5). 
First word is always the module name, followed by options.
Load modules right after root filesystem is checked and before it
becomes writable.
 2015-04-06 15:07:50 +00:00
chopps
94dff34741 Add resize_root boot operation. If resize_root=YES in rc.conf then 
the system attempts to resize the root file system to fill it's
partition prior to mounting read-write. Useful for things like AMI
file system images. May eventually be used by arm images after
coming up with similar solution for increasing the parition size.
 2015-03-30 10:58:37 +00:00
jmcneill
7ba4328bfa Process /etc/modules.conf (if present) at startup, before securelevel is 
raised, to allow module loading on ports without a module aware bootloader.
 2015-03-21 19:10:43 +00:00
joerg
88c9fb0be8 Add rc script for /sbin/iscsid. 2015-02-21 23:13:00 +00:00
jmcneill
f1c95757e8 It doesn't make sense to start wpa_supplicant from an rc.d script without 
the -B flag, so always prepend it to $rc_flags.
 2015-01-22 19:50:21 +00:00
spz
1690f8559d new ntpd wants to be able to translate ntp into a port number after chroot, 
so give it its own small copy of /etc/services in the chroot
 2014-12-25 23:00:18 +00:00
christos
bd08953ecc Add new keytype, replace duplicated code with loop 2014-10-19 16:33:01 +00:00
christos
bad357ce4f fix syntax error 2014-10-14 20:49:47 +00:00
roy
f68fe4cac7 Use checkyesnox to test rtsol as it has been removed including its 
default configuration which we should not warn about.
 2014-09-21 09:48:32 +00:00
roy
f542fd2122 Don't try and install rc.d/rtsold 2014-09-11 18:01:22 +00:00
roy
c6314d6139 Remove rtsol(8) and rtsold(8) as their functionality is in dhcpcd(8). 
Remove rtsol(8) from rc.d/network.
Add -w seconds command to ifconfig to wait for N seconds for until DAD
has finished on all addresses.
Use ifconfig -w in rc.d/network instead of a forced sleep.

As discussed on tech-net@
 2014-09-11 13:10:03 +00:00
wiz
7f6fa64667 'file system' for consistency with documentation (instead of 'filesystem'). 2014-07-22 17:11:09 +00:00
spz
652bd7d1b3 Create the dhcpd.leases file if it doesn't exist already, don't just 
warn about it not being there.
Closes PR misc/48868
 2014-07-17 07:17:03 +00:00
tls
916085404d Make named and the rest of BIND seed their RNG from /dev/urandom, not /dev/random. Better would be to rip the enormous gonkulating RNG machinery out of libisc entirely. Later. 2014-07-13 22:06:56 +00:00
spz
46ee6da10e create /etc/rndc.key on start if it doesn't already exist 2014-07-08 07:04:07 +00:00
uebayasi
a270487d77 Indent. 2014-04-29 09:58:18 +00:00
uebayasi
4f67388957 Refactor a little to remove huge indents. 2014-04-29 09:56:16 +00:00