bb7b8e7891
add $INCLUDE of pubkeys before zone file is written, to avoid pogoing
2015-01-04 14:22:44 -04:00
43e15c8add
fix serial incrementing
2015-01-04 14:17:33 -04:00
f36443755e
propellor spin
2015-01-04 14:05:42 -04:00
8c1006c654
propellor spin
2015-01-04 13:56:55 -04:00
ce7f14b9b3
propellor spin
2015-01-04 13:52:59 -04:00
bf34d6f423
propellor spin
2015-01-04 13:42:01 -04:00
e67901a77b
use separate directory for dnssec files
2015-01-04 13:22:23 -04:00
d6c8ddb955
resign zone if keys change
2015-01-04 13:13:06 -04:00
8172f243d7
DNS WIP
2015-01-04 12:44:05 -04:00
a1f61e09b8
stub signedPrimary
2015-01-03 19:10:28 -04:00
4dd6596919
add DnsSec module
2015-01-03 19:10:17 -04:00
932cb7c5d6
add hasPrivContentFrom
2015-01-03 19:07:59 -04:00
d5cfadd899
Detect #774376 and refuse to use docker if the system is so broken that docker exec doesn't enter a chroot.
2015-01-01 15:41:31 -04:00
858ded043b
more cruft from new image
2015-01-01 15:15:44 -04:00
c7aac0b35e
remove screen workaround
...
Turns out elephant's oldusenet shellbox docker instance somehow had a
non-setguid screen binary. Dunno how; reinstall fixed it.
2014-12-23 15:45:35 -04:00
35ccb0fac6
fix screen dir mode
2014-12-23 15:29:23 -04:00
a48f5916e1
propellor spin
2014-12-23 14:22:50 -04:00
b8be8c244e
propellor spin
2014-12-22 17:16:52 -04:00
26a4c164e4
gitriddance
2014-12-22 15:05:05 -04:00
dc36a98fc1
Revert ensureProperty warning message, too many false positives in places where Info is correctly propigated. Better approach needed.
2014-12-21 21:33:03 -04:00
d194765e10
propellor spin
2014-12-21 21:14:11 -04:00
23399416f1
broke up big function to describe PrivDataField
2014-12-14 16:14:05 -04:00
71723ca09f
support for crypted passwords in privdata
...
* Added CryptPassword to PrivDataField, for password hashes as produced
by crypt(3).
* User.hasPassword and User.hasSomePassword will now use either
a CryptPassword or a Password from privdata, depending on which is set.
2014-12-14 15:24:10 -04:00
2e2438ae66
improve haddock formating of filenames
2014-12-09 14:22:37 -04:00
b22201e36b
Fix Apache.siteEnabled to update the config file and reload apache when configuration has changed.
2014-12-09 00:34:24 -04:00
f8943c2036
fix a case where fileProperty reported a change despite not making one
...
The problem occurred because two lists of lines of the file can be
different, while representing the same file content. For example:
["foo", "bar"]
["foo\nbar"]
2014-12-09 00:30:04 -04:00
834a05e25a
refactor
2014-12-08 01:22:29 -04:00
06975ec5e1
another place to use toResult
2014-12-08 01:12:55 -04:00
3c7219874b
finished accidentially committed bit
2014-12-08 01:07:31 -04:00
4e9b01a8a7
propellor spin
...
(cherry picked from commit 1d02d589c7
2014-12-08 01:07:25 -04:00
2fe0b28982
more uses for hostContext
2014-12-07 15:21:55 -04:00
089b7131a6
caution
2014-12-07 15:13:28 -04:00
9ca332e481
Fixed privdata introspection for User.hasPassword and User.hasSomePassword
...
This is not a complete fix for the problem that Info doen't propigate
from the called property when code does something like:
do
hostname <- asks hostName
ensureProperty $ foo hostname
Instead, I just eliminated the need to implement hasPassword that way,
by making the PrivData Info use a HostContext which automatically
gets the right hostname passed to it.
All other uses of withPrivData don't have the problem. It's still possible
for the user to run into the problem if they write something like the
above, where foo is a property that uses privdata. However, all properties
that take a Context now also accept a HostContext, so it's at least less
likely the user needs to write that.
2014-12-07 15:03:06 -04:00
8c12047b6b
simplify using makeChange
2014-12-07 14:49:12 -04:00
6a906c8a4c
typo
2014-12-07 12:50:40 -04:00
52a83a8911
enable shadow passwords
...
I have seen weird almost boot failures when they're disabled, including a
segfault.
2014-12-06 15:39:02 -04:00
7983046cd5
update
2014-12-06 15:28:30 -04:00
bdbf787e2c
keep and use Reboot.now
2014-12-06 13:32:53 -04:00
29442f222e
Reboot.atEnd
2014-12-06 13:21:19 -04:00
62697c7b7f
reboot at end of propellor run when clean os has been installed
2014-12-06 06:41:21 -04:00
a7e71faaaa
forgot to add new Mount lib
2014-12-05 17:54:29 -04:00
5ae6a302df
some comments
2014-12-05 17:44:09 -04:00
00ab240164
fix install of debootstrap from source
2014-12-05 16:48:52 -04:00
527975dffe
hasSomePassword and hasPassword now check to make sure shadow passwords are enabled.
2014-12-05 16:33:23 -04:00
bf9284d05c
I have now successfully used propellor to convert a Fedora system into a bootable and fully working Debian system
2014-12-05 16:22:11 -04:00
97e9433f1b
rollback if renameing fails
...
This avoids leaving the system in a broken state where some directories
have been renamed away any others not.
Future work: If the rename list contains (foo, bar) and (newfoo,foo),
reorder the list to gather those two actions together to minimize
the amount of time that foo is missing. In case of power loss or something.
2014-12-05 12:50:01 -04:00
4be893f0bf
more improvements to takeover
2014-12-04 17:34:47 -04:00
f1fd75c9ec
more work on OS takeover
2014-12-04 17:11:15 -04:00
f78c2f16d1
update name of libgnutls dev package
2014-12-03 19:05:36 -04:00
c9d09afafa
Run apt-cache policy with LANG=C.
2014-12-01 11:59:27 -04:00
4c2eac2d3c
remove -i, seems not needed and may be causing problem
2014-11-27 19:10:39 -04:00
7d0f79a0c7
Group: preferred style
...
Signed-off-by: Félix Sipma <felix.sipma@no-log.org>
2014-11-25 13:12:56 -04:00
40374c10de
cron.runPropellor now runs propellor, rather than using its Makefile. This is more robust.
...
Particularly, the Makefile would try to build propellor if there were
updates, but if this build failed because a bad commit was pushed, it would
abort w/o pulling any new fixed commits.
Anyway, it's better to move away from using the makefile when possible as
it's just for bootstrapping, and also I would like to make "make" not
default to running propellor as that can be confusing behavior.
(I can't change that yet; needed for upgrades. Should be fine to change
after several more releases, or maybe a year..)
2014-11-25 11:33:45 -04:00
934171e2ea
rename
2014-11-24 00:52:46 -04:00
8d1814a884
move property to ssh module
2014-11-24 00:51:36 -04:00
ccdbf0026d
more work; builds now
2014-11-24 00:40:53 -04:00
f85026da7f
better property names
2014-11-23 19:49:53 -04:00
baba668033
hasSomePassword and hasPassword now default to using the name of the host as the Context for the password. To specify a different context, use hasSomePassword' and hasPassword' (API change)
2014-11-23 16:40:21 -04:00
d8624e2e5d
WIP
2014-11-23 16:12:39 -04:00
3c952a0de9
comment
2014-11-23 14:40:28 -04:00
226981cda4
Git: bareRepo
...
Signed-off-by: Félix Sipma <felix.sipma@no-log.org>
2014-11-23 14:39:01 -04:00
6aa21366d5
Group properties
...
Signed-off-by: Félix Sipma <felix.sipma@no-log.org>
2014-11-23 14:37:49 -04:00
69eace8e9a
preferred style
2014-11-23 14:37:37 -04:00
f4e06ae778
User: hasGroup
...
Signed-off-by: Félix Sipma <felix.sipma@no-log.org>
2014-11-23 14:37:10 -04:00
5fefb161c3
propellor spin
2014-11-22 22:37:25 -04:00
ca09087caf
propellor spin
2014-11-22 22:24:09 -04:00
96ecbaad25
pute full path to bin/propellor inside shim
2014-11-22 22:10:53 -04:00
5360e466d3
reorg
2014-11-22 21:50:49 -04:00
cc8babccc8
propellor spin
2014-11-22 21:37:39 -04:00
1d5d911aa0
propellor spin
2014-11-22 21:30:50 -04:00
50b6e37790
propellor spin
2014-11-22 21:10:35 -04:00
6cdd37d9ff
propellor spin
2014-11-21 20:53:38 -04:00
b373ffb761
allow disabling nspawn params, and default to bind mounting /etc/resolv.conf
2014-11-21 20:32:32 -04:00
96c4890d89
propellor spin
2014-11-21 20:19:20 -04:00
6be49197f6
allow configuring systemd-nspawn parameters
2014-11-21 20:09:33 -04:00
6c92f1034f
split out info types
2014-11-21 18:55:33 -04:00
6e8b28cd3c
propellor spin
2014-11-21 17:11:26 -04:00
33e9b10c19
typo
2014-11-21 16:02:10 -04:00
f6afeb889f
lock down chroot perm
2014-11-21 16:01:51 -04:00
9e611d87cd
add debootstrap parameters
2014-11-21 15:55:27 -04:00
fbce215f33
implement teardown
2014-11-21 14:37:19 -04:00
36e89cd148
os info propigation
...
Also, lost the systemd-nspawn parameters; I'll do that some other way.
2014-11-21 14:31:13 -04:00
7d4d3e4451
fix info propigation
...
Need to propigate the full container info, not the subset used in chroot
deployment.
2014-11-21 14:11:02 -04:00
5e1a47552a
propellor spin
2014-11-21 13:57:58 -04:00
09e79e6263
propellor spin
2014-11-21 13:55:42 -04:00
3ba82a1c9c
propellor spin
2014-11-21 13:49:17 -04:00
ae6a5e815c
propellor spin
2014-11-21 12:35:07 -04:00
976afedea3
propellor spin
2014-11-21 12:18:03 -04:00
6a5a1bc761
systemd container may be mostly done (untested)
2014-11-21 12:17:03 -04:00
45349c210d
add missing support for reverting chroot
...
wow, that was suprisingly trivial!
2014-11-21 01:09:15 -04:00
a904476333
avoid console output when chaining into chroot and not at console
2014-11-21 01:05:51 -04:00
f9cc7c149e
incomplete systemd container support
2014-11-20 17:18:26 -04:00
3669bd61d0
propellor spin
2014-11-20 16:07:57 -04:00
2293b46bf7
fix chroot info propigation
2014-11-20 16:04:48 -04:00
a4f04fcb02
propellor spin
2014-11-20 15:15:28 -04:00
b8b746a7f1
starting work on a Chroot module
...
factored out info up-propigation code rom Docker
2014-11-20 14:15:26 -04:00
5e4c57652c
fix docker container provisioning
...
Since the containers are no longer on the host list, they were not found
while provisioning, oops.
To fix, had to add to a host's info a map of the containers docked to it.
Unfortunately, that required Propellor.Types.Info be glommed into
Propellor.Types, since it needed to refer to Host.
2014-11-20 00:21:40 -04:00
d49d251897
separate docker container type
...
Docker containers are now a separate data type, cannot be included in the
main host list, and are instead passed to Docker.docked. (API change)
2014-11-19 23:11:34 -04:00
3343b220a8
propellor spin
2014-11-19 21:21:20 -04:00
205d192559
fix param order
2014-11-19 21:16:18 -04:00
Joey Hess
Joey Hess
Félix Sipma
Joey Hess