84685f24c9
Ssh.hostKeys now also installs any available SshEd25519 keys.
2015-01-04 15:59:54 -04:00
f1a1d0001a
sshPubKey is renamed to Ssh.pubKey, and has an added SshKeyType parameter.
2015-01-04 15:57:27 -04:00
52664e6220
sshPubKey is renamed to Ssh.pubKey
2015-01-04 15:36:53 -04:00
0f41071cb5
transition docs
2015-01-04 15:22:22 -04:00
ad984e74e4
propellor spin
2015-01-04 15:00:40 -04:00
bb7b8e7891
add $INCLUDE of pubkeys before zone file is written, to avoid pogoing
2015-01-04 14:22:44 -04:00
43e15c8add
fix serial incrementing
2015-01-04 14:17:33 -04:00
f36443755e
propellor spin
2015-01-04 14:05:42 -04:00
8c1006c654
propellor spin
2015-01-04 13:56:55 -04:00
ce7f14b9b3
propellor spin
2015-01-04 13:52:59 -04:00
baf1dcc822
accidentially merged
2015-01-04 13:47:03 -04:00
bf34d6f423
propellor spin
2015-01-04 13:42:01 -04:00
e67901a77b
use separate directory for dnssec files
2015-01-04 13:22:23 -04:00
d6c8ddb955
resign zone if keys change
2015-01-04 13:13:06 -04:00
8172f243d7
DNS WIP
2015-01-04 12:44:05 -04:00
a1f61e09b8
stub signedPrimary
2015-01-03 19:10:28 -04:00
4dd6596919
add DnsSec module
2015-01-03 19:10:17 -04:00
05004730c7
add DnsSec privdata types
2015-01-03 19:08:32 -04:00
932cb7c5d6
add hasPrivContentFrom
2015-01-03 19:07:59 -04:00
7cbd367e1c
Update intermediary propellor in --spin --via
2015-01-01 17:13:03 -04:00
31739ac1a6
propellor spin
2015-01-01 16:19:32 -04:00
f89aeaa0e8
propellor spin
2015-01-01 16:18:36 -04:00
d5cfadd899
Detect #774376 and refuse to use docker if the system is so broken that docker exec doesn't enter a chroot.
2015-01-01 15:41:31 -04:00
858ded043b
more cruft from new image
2015-01-01 15:15:44 -04:00
b50f33395e
update docs
2015-01-01 13:57:13 -04:00
6fb45673d0
propellor spin
2015-01-01 13:42:34 -04:00
f3f60a74c4
propellor spin
2015-01-01 13:36:51 -04:00
b059ae4c77
propellor spin
2015-01-01 13:34:02 -04:00
72b7b06525
propellor spin
2015-01-01 13:31:30 -04:00
0b4a95f6c2
--spin checks if the DNS matches any configured IP address property of the host, and if not, sshes to the host by IP address.
2015-01-01 13:28:17 -04:00
c7aac0b35e
remove screen workaround
...
Turns out elephant's oldusenet shellbox docker instance somehow had a
non-setguid screen binary. Dunno how; reinstall fixed it.
2014-12-23 15:45:35 -04:00
35ccb0fac6
fix screen dir mode
2014-12-23 15:29:23 -04:00
a48f5916e1
propellor spin
2014-12-23 14:22:50 -04:00
b8be8c244e
propellor spin
2014-12-22 17:16:52 -04:00
26a4c164e4
gitriddance
2014-12-22 15:05:05 -04:00
dc36a98fc1
Revert ensureProperty warning message, too many false positives in places where Info is correctly propigated. Better approach needed.
2014-12-21 21:33:03 -04:00
d194765e10
propellor spin
2014-12-21 21:14:11 -04:00
23399416f1
broke up big function to describe PrivDataField
2014-12-14 16:14:05 -04:00
71723ca09f
support for crypted passwords in privdata
...
* Added CryptPassword to PrivDataField, for password hashes as produced
by crypt(3).
* User.hasPassword and User.hasSomePassword will now use either
a CryptPassword or a Password from privdata, depending on which is set.
2014-12-14 15:24:10 -04:00
2e2438ae66
improve haddock formating of filenames
2014-12-09 14:22:37 -04:00
b22201e36b
Fix Apache.siteEnabled to update the config file and reload apache when configuration has changed.
2014-12-09 00:34:24 -04:00
f8943c2036
fix a case where fileProperty reported a change despite not making one
...
The problem occurred because two lists of lines of the file can be
different, while representing the same file content. For example:
["foo", "bar"]
["foo\nbar"]
2014-12-09 00:30:04 -04:00
834a05e25a
refactor
2014-12-08 01:22:29 -04:00
06975ec5e1
another place to use toResult
2014-12-08 01:12:55 -04:00
3c7219874b
finished accidentially committed bit
2014-12-08 01:07:31 -04:00
4e9b01a8a7
propellor spin
...
(cherry picked from commit 1d02d589c7
2014-12-08 01:07:25 -04:00
42a0c83248
Display a warning when ensureProperty is used on a property which has Info and is so prevented from propigating it.
...
Would much rather a type-based fixed, but this is all I have for now.
2014-12-07 17:09:55 -04:00
5a932c382d
docuemnt info propigtion problem
2014-12-07 16:37:02 -04:00
2fe0b28982
more uses for hostContext
2014-12-07 15:21:55 -04:00
089b7131a6
caution
2014-12-07 15:13:28 -04:00
9ca332e481
Fixed privdata introspection for User.hasPassword and User.hasSomePassword
...
This is not a complete fix for the problem that Info doen't propigate
from the called property when code does something like:
do
hostname <- asks hostName
ensureProperty $ foo hostname
Instead, I just eliminated the need to implement hasPassword that way,
by making the PrivData Info use a HostContext which automatically
gets the right hostname passed to it.
All other uses of withPrivData don't have the problem. It's still possible
for the user to run into the problem if they write something like the
above, where foo is a property that uses privdata. However, all properties
that take a Context now also accept a HostContext, so it's at least less
likely the user needs to write that.
2014-12-07 15:03:06 -04:00
8c12047b6b
simplify using makeChange
2014-12-07 14:49:12 -04:00
6a906c8a4c
typo
2014-12-07 12:50:40 -04:00
52a83a8911
enable shadow passwords
...
I have seen weird almost boot failures when they're disabled, including a
segfault.
2014-12-06 15:39:02 -04:00
7983046cd5
update
2014-12-06 15:28:30 -04:00
bdbf787e2c
keep and use Reboot.now
2014-12-06 13:32:53 -04:00
29442f222e
Reboot.atEnd
2014-12-06 13:21:19 -04:00
62697c7b7f
reboot at end of propellor run when clean os has been installed
2014-12-06 06:41:21 -04:00
fcff7762e3
endAction can be used to register an action to run once propellor has successfully run on a host.
2014-12-06 06:34:32 -04:00
c97dd0d708
spelling typo
2014-12-05 19:33:34 -04:00
a7e71faaaa
forgot to add new Mount lib
2014-12-05 17:54:29 -04:00
5ae6a302df
some comments
2014-12-05 17:44:09 -04:00
00ab240164
fix install of debootstrap from source
2014-12-05 16:48:52 -04:00
527975dffe
hasSomePassword and hasPassword now check to make sure shadow passwords are enabled.
2014-12-05 16:33:23 -04:00
bf9284d05c
I have now successfully used propellor to convert a Fedora system into a bootable and fully working Debian system
2014-12-05 16:22:11 -04:00
97e9433f1b
rollback if renameing fails
...
This avoids leaving the system in a broken state where some directories
have been renamed away any others not.
Future work: If the rename list contains (foo, bar) and (newfoo,foo),
reorder the list to gather those two actions together to minimize
the amount of time that foo is missing. In case of power loss or something.
2014-12-05 12:50:01 -04:00
4be893f0bf
more improvements to takeover
2014-12-04 17:34:47 -04:00
f1fd75c9ec
more work on OS takeover
2014-12-04 17:11:15 -04:00
f78c2f16d1
update name of libgnutls dev package
2014-12-03 19:05:36 -04:00
c9d09afafa
Run apt-cache policy with LANG=C.
2014-12-01 11:59:27 -04:00
4c2eac2d3c
remove -i, seems not needed and may be causing problem
2014-11-27 19:10:39 -04:00
9500e9bb81
added more debugging
2014-11-27 17:55:56 -04:00
7ddb862176
propellor spin
2014-11-27 17:51:41 -04:00
5a104675e4
avoid crash on no propellor.debug setting
2014-11-26 10:51:29 -04:00
e07dc9b1d3
propellor.debug can be set in the git config to enable more persistent debugging output.
2014-11-25 18:55:12 -04:00
7d0f79a0c7
Group: preferred style
...
Signed-off-by: Félix Sipma <felix.sipma@no-log.org>
2014-11-25 13:12:56 -04:00
40374c10de
cron.runPropellor now runs propellor, rather than using its Makefile. This is more robust.
...
Particularly, the Makefile would try to build propellor if there were
updates, but if this build failed because a bad commit was pushed, it would
abort w/o pulling any new fixed commits.
Anyway, it's better to move away from using the makefile when possible as
it's just for bootstrapping, and also I would like to make "make" not
default to running propellor as that can be confusing behavior.
(I can't change that yet; needed for upgrades. Should be fine to change
after several more releases, or maybe a year..)
2014-11-25 11:33:45 -04:00
934171e2ea
rename
2014-11-24 00:52:46 -04:00
8d1814a884
move property to ssh module
2014-11-24 00:51:36 -04:00
9ac4e94625
oops
2014-11-24 00:50:48 -04:00
ccdbf0026d
more work; builds now
2014-11-24 00:40:53 -04:00
f85026da7f
better property names
2014-11-23 19:49:53 -04:00
3ef6e352c3
one more merge test
...
--allow-empty added to commit, because the spins could all be empty
2014-11-23 18:51:07 -04:00
9d975e9ee4
add --merge
2014-11-23 18:48:52 -04:00
baba668033
hasSomePassword and hasPassword now default to using the name of the host as the Context for the password. To specify a different context, use hasSomePassword' and hasPassword' (API change)
2014-11-23 16:40:21 -04:00
d8624e2e5d
WIP
2014-11-23 16:12:39 -04:00
0ea0f7f4de
--spin can be passed multiple hosts, and it will provision each host in turn.
...
Note that if it fails to spin a host, it will stop. I think this is better
than continuing to the next, because there might be a reason to spin hosts
in some specific order (ie, update dns first and then use it).
2014-11-23 15:17:57 -04:00
3c952a0de9
comment
2014-11-23 14:40:28 -04:00
226981cda4
Git: bareRepo
...
Signed-off-by: Félix Sipma <felix.sipma@no-log.org>
2014-11-23 14:39:01 -04:00
6aa21366d5
Group properties
...
Signed-off-by: Félix Sipma <felix.sipma@no-log.org>
2014-11-23 14:37:49 -04:00
69eace8e9a
preferred style
2014-11-23 14:37:37 -04:00
f4e06ae778
User: hasGroup
...
Signed-off-by: Félix Sipma <felix.sipma@no-log.org>
2014-11-23 14:37:10 -04:00
5fefb161c3
propellor spin
2014-11-22 22:37:25 -04:00
ca09087caf
propellor spin
2014-11-22 22:24:09 -04:00
81e52f1e14
update
2014-11-22 22:13:00 -04:00
96ecbaad25
pute full path to bin/propellor inside shim
2014-11-22 22:10:53 -04:00
7c5188b202
propellor spin
2014-11-22 22:01:19 -04:00
5360e466d3
reorg
2014-11-22 21:50:49 -04:00
cc8babccc8
propellor spin
2014-11-22 21:37:39 -04:00
1d5d911aa0
propellor spin
2014-11-22 21:30:50 -04:00
50b6e37790
propellor spin
2014-11-22 21:10:35 -04:00
1338f4effd
don't remove old localdir before tarball unpack
...
it may get messy if old stuff is left, but there is state in there
2014-11-22 20:42:31 -04:00
58b5de7802
Revert "avoid removing whole localdir every time the precompiled tarball is uploaded"
...
This reverts commit 40bec41f56
2014-11-22 20:42:20 -04:00
40bec41f56
avoid removing whole localdir every time the precompiled tarball is uploaded
...
There's some state in there..
Moved it to a shim subdir, which can be deleted and the tarball unpacked to
recreate it.
2014-11-22 20:35:46 -04:00
868d7cdcb5
avoid loop after uploading precompiled tarball
...
The localdir still has no .git repo, so it looped.
2014-11-22 20:29:27 -04:00
239581c759
reorg
2014-11-22 20:17:46 -04:00
eb946f109b
look for /usr/local/propellor/.git to know if it's fully deployed
...
When propellor is deployed by uploading the binary, there's no git repo, so
each spin needs to re-upload it to get any config changes. This should be
rare since this is only intended to be used when taking over a host and
getting it properly set up from source, but it still needs to be supported.
2014-11-22 20:02:44 -04:00
9a8fcf80bb
Hostname parameters not containing dots are looked up in the DNS to find the full hostname.
2014-11-22 19:58:35 -04:00
95f78a0586
propellor spin
2014-11-22 17:22:11 -04:00
aa986724a2
propellor spin
2014-11-22 17:16:25 -04:00
a4edc404f0
propellor spin
2014-11-22 16:20:02 -04:00
02e0fac683
propellor spin
2014-11-22 16:17:39 -04:00
cb94e7484e
propellor spin
2014-11-22 16:14:20 -04:00
7ed9f70504
propellor spin
2014-11-22 16:12:53 -04:00
6be56755ee
propellor spin
2014-11-22 16:10:46 -04:00
392a0d3c1c
propellor spin
2014-11-22 16:06:44 -04:00
6d13790afa
propellor spin
2014-11-22 15:58:09 -04:00
40339a7fd8
propellor spin
2014-11-22 15:54:31 -04:00
97931fe670
propellor spin
2014-11-22 15:50:14 -04:00
395f311e1e
propellor spin
2014-11-22 15:48:17 -04:00
615799dbcc
propellor spin
2014-11-22 15:19:20 -04:00
ef883cbbe8
still do peer-to-peer git push when there are no git remotes
2014-11-22 15:18:30 -04:00
151aadd4e2
propellor spin
2014-11-22 15:11:24 -04:00
0b9164e286
propellor spin
2014-11-22 15:01:08 -04:00
fdde4d91c7
propellor spin
2014-11-22 13:48:16 -04:00
8e5551c925
avoid unncessary apt-get upgrade
2014-11-22 13:44:25 -04:00
fd3335e40e
--via implemented
2014-11-22 12:57:07 -04:00
e0c2d6a73a
comment
2014-11-22 02:04:01 -04:00
128e16472a
compress tarball
...
11 mb -> 4 mb
2014-11-22 01:13:53 -04:00
c0662e6258
comment
2014-11-22 00:52:59 -04:00
cd6ca049b8
cleanup
2014-11-22 00:50:56 -04:00
ea058a5f9f
remove test hack
2014-11-22 00:47:26 -04:00
5d6e1a27a5
propellor spin
2014-11-22 00:46:07 -04:00
0d65fdeb1d
propellor spin
2014-11-22 00:44:13 -04:00
083b82d810
propellor spin
2014-11-22 00:36:16 -04:00
1af398d33e
propellor spin
2014-11-22 00:35:14 -04:00
f1fdd6f678
propellor spin
2014-11-22 00:34:34 -04:00
e5135c1948
propellor spin
2014-11-22 00:32:04 -04:00
99e0a5fea7
propellor spin
2014-11-22 00:27:35 -04:00
7fd338f96f
propellor spin
2014-11-22 00:25:00 -04:00
f62d2fb183
propellor --spin can now deploy propellor to hosts that do not have git, ghc, or apt-get. This is accomplished by uploading a fairly portable precompiled tarball of propellor.
2014-11-22 00:22:19 -04:00
6eb64d56e3
avoid setting title when not at console
2014-11-21 23:33:39 -04:00
0a415a7b41
show last line if it cannot be parsed as a serialized Result
2014-11-21 23:30:40 -04:00
6cdd37d9ff
propellor spin
2014-11-21 20:53:38 -04:00
b373ffb761
allow disabling nspawn params, and default to bind mounting /etc/resolv.conf
2014-11-21 20:32:32 -04:00
96c4890d89
propellor spin
2014-11-21 20:19:20 -04:00
6be49197f6
allow configuring systemd-nspawn parameters
2014-11-21 20:09:33 -04:00
6c92f1034f
split out info types
2014-11-21 18:55:33 -04:00
6e8b28cd3c
propellor spin
2014-11-21 17:11:26 -04:00
33e9b10c19
typo
2014-11-21 16:02:10 -04:00
Joey Hess
Joey Hess
Félix Sipma
Joey Hess