Commit Graph

1028 Commits

Author SHA1 Message Date
Michael Tremer
b8fdc7398c static-routes: Make it clear that we are reloading routes
When RED is brought down, we will reload all static routes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-09-13 15:03:59 +01:00
Michael Tremer
3da2a66193 aws: Don't update the system on first boot
This will violate AWS policy and therefore had to be removed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-31 11:08:53 +01:00
Michael Tremer
95b87f39ac localnet: Set FQDN without using domainname command
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-23 10:18:59 +01:00
Michael Tremer
84cd9b9162 Drop the network-trigger script
This is done at boot time and doesn't normally need to be done again.

On AWS or in the setup, renaming any network interfaces is being
handled automatically.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-22 14:05:43 +01:00
Michael Tremer
f3d59d2c94 firstsetup: There is no need to restart udev here
All network interfaces are renamed accordingly in setup

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-22 14:02:43 +01:00
Michael Tremer
c5465a9453 aws: Let udev rename all network interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-22 14:00:39 +01:00
Michael Tremer
046ef135e6 Merge remote-tracking branch 'origin/efi' into next 2018-08-16 12:49:13 +01:00
Michael Tremer
242cfc3395 localnet: Properly format and quote variables
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-16 12:42:25 +01:00
Michael Tremer
5b9f387d59 localnet: Correctly set domain name
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-16 12:41:52 +01:00
Michael Tremer
96422f85b6 aws: Hide pakfire update output
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-15 11:51:53 +01:00
Michael Tremer
40436fa149 aws: Write user-data log to file only
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-15 11:51:53 +01:00
Michael Tremer
281d75c945 aws: Execute reboot when an update requires one
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-15 11:51:53 +01:00
Michael Tremer
3eeff87fe6 Fix typo in unbound initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-15 11:51:53 +01:00
Michael Tremer
9ae73c3090 aws: Set PATH to search in /usr/local/(s)bin
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-15 11:51:53 +01:00
Michael Tremer
6cf586436b aws: Import pakfire keys before the first launch
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-15 11:51:53 +01:00
Michael Tremer
bd7d957fae aws: Log output of user-data script to /root/user-data.log
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-15 11:51:53 +01:00
Michael Tremer
0ed9b77099 aws: Install all available updates first
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-15 10:11:08 +01:00
Michael Tremer
647ca912a2 aws: Setup DNS during init phase
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-15 10:10:13 +01:00
Michael Tremer
8defa50e73 aws: Execute user-data script while we have networking up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 12:14:49 +01:00
Michael Tremer
467581b8ab avahi: Update to 0.7
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 11:19:25 +01:00
Arne Fitzenreiter
79bcc6f769 collectd: fix cpufreq plugin enable
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-03 16:13:12 +02:00
Michael Tremer
0cf70cae66 aws: Disable SSH password authentication by default
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-30 16:54:50 +01:00
Michael Tremer
4e4c122c58 aws: Add support for a script that can be executed at first boot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 16:19:46 +01:00
Michael Tremer
ba06294341 aws: Always exit the init script cleanly
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 16:05:15 +01:00
Michael Tremer
6cf5a533f5 partresize: Remove debugging line
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 12:03:10 +00:00
Michael Tremer
43829df3bb partresize: Only regenerate configuration instead of re-installing GRUB
This should not be necessary

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 12:03:09 +00:00
Michael Tremer
6a7e6b4499 AWS: Give setup user permissions to read its own SSH keys
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 15:06:39 +01:00
Michael Tremer
87d7fc6609 aws: Unlock setup account
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 14:20:18 +01:00
Michael Tremer
53eb49180e aws: Install SSH keys only for setup user
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 14:20:18 +01:00
Michael Tremer
e2d9fe7e16 aws: setup user should not be a system user
Login is not permitted for system users

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 14:20:18 +01:00
Michael Tremer
693208bf63 aws: Don't start ssh right away
sshctrl calls sshd directly which won't work at time of the first boot
because no keys will be generated.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-12 09:59:31 +01:00
Michael Tremer
1413006b5b aws: Create "setup" user to run setup
Amazon does not permit that a user logs in as root directly.
Instead they insist on using sudo.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-10 18:40:06 +01:00
Arne Fitzenreiter
37458540bf collect: fix cpufreq graph on some machines.
the file cpuinfo_cur_freq does not exist on all systems that support collect
cpufreq data.

fixes #11739
2018-07-03 15:09:40 +02:00
Arne Fitzenreiter
1ac0d5c598 Merge branch 'aarch64' into next
Conflicts:
	config/rootfiles/core/121/filelists/acpid
	config/rootfiles/core/121/filelists/apache2
	config/rootfiles/core/121/filelists/apr
	config/rootfiles/core/121/filelists/aprutil
	config/rootfiles/core/121/filelists/armv5tel/files
	config/rootfiles/core/121/filelists/armv5tel/linux-initrd-kirkwood
	config/rootfiles/core/121/filelists/armv5tel/linux-initrd-multi
	config/rootfiles/core/121/filelists/armv5tel/linux-kirkwood
	config/rootfiles/core/121/filelists/armv5tel/linux-multi
	config/rootfiles/core/121/filelists/armv5tel/rpi-firmware
	config/rootfiles/core/121/filelists/armv5tel/u-boot
	config/rootfiles/core/121/filelists/armv5tel/u-boot-kirkwood
	config/rootfiles/core/121/filelists/armv5tel/u-boot-mkimage
	config/rootfiles/core/121/filelists/beep
	config/rootfiles/core/121/filelists/cmake
	config/rootfiles/core/121/filelists/crda
	config/rootfiles/core/121/filelists/dhcp
	config/rootfiles/core/121/filelists/flex
	config/rootfiles/core/121/filelists/i586/grub
	config/rootfiles/core/121/filelists/i586/intel-microcode
	config/rootfiles/core/121/filelists/i586/linux
	config/rootfiles/core/121/filelists/i586/linux-initrd
	config/rootfiles/core/121/filelists/iw
	config/rootfiles/core/121/filelists/jwhois
	config/rootfiles/core/121/filelists/libidn
	config/rootfiles/core/121/filelists/multipath-tools
	config/rootfiles/core/121/filelists/pcre
	config/rootfiles/core/121/filelists/tar
	config/rootfiles/core/121/filelists/unbound
	config/rootfiles/core/121/filelists/wget
	config/rootfiles/core/121/filelists/x86_64/grub
	config/rootfiles/core/121/filelists/x86_64/intel-microcode
	config/rootfiles/core/121/filelists/x86_64/linux
	config/rootfiles/core/121/filelists/x86_64/linux-initrd
	config/rootfiles/core/122/filelists/aarch64/files
	config/rootfiles/core/122/filelists/acpid
	config/rootfiles/core/122/filelists/apache2
	config/rootfiles/core/122/filelists/apr
	config/rootfiles/core/122/filelists/aprutil
	config/rootfiles/core/122/filelists/armv5tel/linux-initrd-kirkwood
	config/rootfiles/core/122/filelists/armv5tel/linux-initrd-multi
	config/rootfiles/core/122/filelists/armv5tel/linux-kirkwood
	config/rootfiles/core/122/filelists/armv5tel/linux-multi
	config/rootfiles/core/122/filelists/armv5tel/rpi-firmware
	config/rootfiles/core/122/filelists/armv5tel/u-boot
	config/rootfiles/core/122/filelists/armv5tel/u-boot-kirkwood
	config/rootfiles/core/122/filelists/armv5tel/u-boot-mkimage
	config/rootfiles/core/122/filelists/beep
	config/rootfiles/core/122/filelists/cmake
	config/rootfiles/core/122/filelists/crda
	config/rootfiles/core/122/filelists/dhcp
	config/rootfiles/core/122/filelists/flex
	config/rootfiles/core/122/filelists/i586/grub
	config/rootfiles/core/122/filelists/i586/intel-microcode
	config/rootfiles/core/122/filelists/i586/linux
	config/rootfiles/core/122/filelists/i586/linux-initrd
	config/rootfiles/core/122/filelists/iw
	config/rootfiles/core/122/filelists/jwhois
	config/rootfiles/core/122/filelists/libidn
	config/rootfiles/core/122/filelists/multipath-tools
	config/rootfiles/core/122/filelists/pcre
	config/rootfiles/core/122/filelists/tar
	config/rootfiles/core/122/filelists/unbound
	config/rootfiles/core/122/filelists/wget
	config/rootfiles/core/122/filelists/x86_64/grub
	config/rootfiles/core/122/filelists/x86_64/intel-microcode
	config/rootfiles/core/122/filelists/x86_64/linux
	config/rootfiles/core/122/filelists/x86_64/linux-initrd
	config/rootfiles/core/123/filelists/unbound
	config/rootfiles/oldcore/121/filelists/acpid
	config/rootfiles/oldcore/121/filelists/apache2
	config/rootfiles/oldcore/121/filelists/apr
	config/rootfiles/oldcore/121/filelists/aprutil
	config/rootfiles/oldcore/121/filelists/armv5tel/files
	config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-kirkwood
	config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-multi
	config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-rpi
	config/rootfiles/oldcore/121/filelists/armv5tel/linux-kirkwood
	config/rootfiles/oldcore/121/filelists/armv5tel/linux-multi
	config/rootfiles/oldcore/121/filelists/armv5tel/linux-rpi
	config/rootfiles/oldcore/121/filelists/armv5tel/rpi-firmware
	config/rootfiles/oldcore/121/filelists/armv5tel/u-boot
	config/rootfiles/oldcore/121/filelists/armv5tel/u-boot-kirkwood
	config/rootfiles/oldcore/121/filelists/armv5tel/u-boot-mkimage
	config/rootfiles/oldcore/121/filelists/beep
	config/rootfiles/oldcore/121/filelists/cmake
	config/rootfiles/oldcore/121/filelists/crda
	config/rootfiles/oldcore/121/filelists/dhcp
	config/rootfiles/oldcore/121/filelists/flex
	config/rootfiles/oldcore/121/filelists/i586/grub
	config/rootfiles/oldcore/121/filelists/i586/intel-microcode
	config/rootfiles/oldcore/121/filelists/i586/linux
	config/rootfiles/oldcore/121/filelists/i586/linux-initrd
	config/rootfiles/oldcore/121/filelists/iw
	config/rootfiles/oldcore/121/filelists/jwhois
	config/rootfiles/oldcore/121/filelists/libidn
	config/rootfiles/oldcore/121/filelists/multipath-tools
	config/rootfiles/oldcore/121/filelists/pcre
	config/rootfiles/oldcore/121/filelists/tar
	config/rootfiles/oldcore/121/filelists/wget
	config/rootfiles/oldcore/121/filelists/x86_64/grub
	config/rootfiles/oldcore/121/filelists/x86_64/intel-microcode
	config/rootfiles/oldcore/121/filelists/x86_64/linux
	config/rootfiles/oldcore/121/filelists/x86_64/linux-initrd
	make.sh
2018-07-03 11:52:05 +01:00
Arne Fitzenreiter
cf7a7a874f Merge remote-tracking branch 'origin/master' into aarch64 2018-07-02 19:07:22 +01:00
Michael Tremer
eb7ccf87c5 AWS: Store instance id
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:54:51 +01:00
Michael Tremer
464c27554c aws: Re-enable check if we are actually running on EC2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:52:54 +01:00
Michael Tremer
9a56118b61 aws: Suppress any output from ending dhclient
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:51:39 +01:00
Michael Tremer
787469ebd6 aws: No need to wake up udev again
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:51:18 +01:00
Michael Tremer
470e85c365 AWS: Rename network interfaces only when necessary
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:44:14 +01:00
Michael Tremer
2e42a9eaa1 AWS: Import SSH keys before meddling with the network
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 11:43:35 +01:00
Michael Tremer
48a7737fdd firewall: Allow starting without a green interface
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 10:32:31 +01:00
Michael Tremer
f487e37393 AWS: No need to restart udev any more
The renames the network interfaces itself now

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 20:35:29 +01:00
Michael Tremer
4c0bd63ea4 localnet: Don't write local hostname to /etc/hosts
This is now being provided by nss-myhostname

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:58:42 +01:00
Michael Tremer
c7141f0479 AWS: Rename all interfaces when booting up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:40:31 +01:00
Michael Tremer
8f2c3b49b6 aws: Apply SSH configuration changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-30 19:25:29 +01:00
Arne Fitzenreiter
4838034131 random: update initskript for machines with low entropy
the script wait until crng is correct initialized before restore the
random seed and make some disc io to work around low entropy at boot
on some machines. Not really a fix but it should be better than reverting
CVE-2018-1108 fixes from kernel.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-06-28 20:48:58 +02:00
Michael Tremer
7d06d0de7b AWS: Restart udev to rename network interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 11:15:29 +01:00
Michael Tremer
0f224ad770 AWS: Add support for ORANGE
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 11:01:33 +01:00
Michael Tremer
1a0d8b0573 AWS: Remove some debugging line
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-06-28 10:57:50 +01:00