Commit graph

590 commits

Author SHA1 Message Date
Gerd v. Egidy e9549eba34 don't do certificate verification for https downloads in the lua script
it is usually run during initramfs: we don't have a CA database there, so
all https downloads would fail otherwise.

Not doing cert verification at this step is clearly documented, so no
unexpected security risk for the user.
2022-08-07 12:56:41 +02:00
Gerd v. Egidy 81db3b13db improve error message in case the lua script can't download a file
Now prints the actual error message from the http library instead of a
generic "Could not connect" message.
2022-08-07 12:53:16 +02:00
Gerd v. Egidy bc797d36b9 Merge branch 'changelog' into 'main'
add "cow_label" and "cow_directory" changes to the changelog

See merge request systemrescue/systemrescue-sources!226
2022-08-06 13:15:39 +00:00
Gerd v. Egidy a7fd2a5855 add "cow_label" and "cow_directory" changes to the changelog 2022-08-06 15:14:56 +02:00
Gerd v. Egidy c42634e320 Merge branch 'cow-options-yaml' into 'main'
add cow_label and cow_directory options to the global scope of the yaml config file

See merge request systemrescue/systemrescue-sources!225
2022-08-05 20:14:12 +00:00
Gerd v. Egidy 533a4cab7e add cow_label and cow_directory options to the global scope of the yaml config file
Allows to set to set the persistent backing store options via the yaml config too and
not only through boot commandline options.
2022-08-05 22:05:02 +02:00
Gerd v. Egidy b85260c377 Merge branch 'improve-build' into 'main'
only unmount chroot /dev if still mounted

See merge request systemrescue/systemrescue-sources!224
2022-08-05 19:32:41 +00:00
Gerd v. Egidy 565c6d0451 only unmount chroot /dev if still mounted
The latest Arch updates changed mount behavior during build, at least that
is what I'm seeing on my machine. So only do the second unmount if the
chroot /dev is still mounted. Otherwise the build script would abort due to
the error returncode.
2022-08-05 21:29:28 +02:00
Gerd v. Egidy 6e524a040c don't enforce a changelog entry for releases with "test" in their name, same as with "beta" 2022-08-05 21:28:05 +02:00
Gerd v. Egidy 5e92f0be16 Merge branch 'new-programs' into 'main'
Add new programs (#298)

See merge request systemrescue/systemrescue-sources!223
2022-08-02 19:43:35 +00:00
Gerd v. Egidy efab792a6d changelog entries 2022-08-02 21:41:20 +02:00
Gerd v. Egidy e3537b6970 add new packages: rclone, qemu-img, multipath-tools, unrar (#298) 2022-08-02 21:28:42 +02:00
Gerd v. Egidy 6312e6d136 Merge branch 'mountall' into 'main'
Small mountall improvements

See merge request systemrescue/systemrescue-sources!222
2022-08-01 20:43:05 +00:00
Gerd v. Egidy c0cddfc630 add --readonly option to mountall 2022-08-01 22:40:48 +02:00
Gerd v. Egidy e3b7b2079e use already existing mountpoints in mountall when they are empty and nothing mounted 2022-08-01 22:12:52 +02:00
Gerd v. Egidy f3aa63d575 Merge branch 'changelog' into 'main'
more changelog entries for 9.04

See merge request systemrescue/systemrescue-sources!220
2022-07-31 10:45:37 +00:00
Gerd v. Egidy e4fdbb4d2b more changelog entries for 9.04 2022-07-31 12:44:37 +02:00
Gerd v. Egidy 2fd9741076 Merge branch 'xfce-browser' into 'main'
configure firefox as default browser in xfce

See merge request systemrescue/systemrescue-sources!219
2022-07-31 10:34:15 +00:00
Gerd v. Egidy 359083a0cc configure firefox as default browser in xfce 2022-07-31 12:31:24 +02:00
Gerd v. Egidy 294ed59c13 Merge branch 'nomdlvm' into 'main'
add "nomdlvm" boot commandline option to not activate md raid or lvm devices

See merge request systemrescue/systemrescue-sources!218
2022-07-27 20:54:16 +00:00
Gerd v. Egidy 23691f03cf add entries for nomdlvm to the syslinux and grub boot menus 2022-07-27 22:52:23 +02:00
Gerd v. Egidy 4109b1ea38 add "nomdlvm" boot commandline option to not activate md raid or lvm devices
Activating md raid or lvm means that the kernel changes the metadata like
timestamps and mount counts of the devices and writes them to disk.
Also reconstructing degraded md raid devices is automatically activated.
There are cases when writing to disks is absolutely not wanted. For example
when restoring data from broken disks or when doing forensics.

The nomdlvm boot commandline option prevents any activation and thus
not wanted writes. If the user wants to use md or lvm with the option
set, all md or lvm devices have to be manually found and activated.

nomdlvm is only implemented as boot commandline option and does not use
the YAML config file. The reason is that the udev rules are evaluated
before sysrescue-configuration.lua is run, so the YAML config is not
ready yet. Moving nomdlvm after sysrescue-configuration.lua would be
an invasive operation and modify the activation order of all md and lvm
devices for all cases, increasing the probability of regressions.
Also udev rules offer a direct access to boot commandline options, making
implementation straightforward and robust.
2022-07-27 22:27:11 +02:00
Gerd v. Egidy 3b15d84f08 Merge branch 'lua-dns-fix' into 'main'
fix dns requests in sysrescue-configuration.lua

See merge request systemrescue/systemrescue-sources!217
2022-07-26 20:39:52 +00:00
Gerd v. Egidy 59aab67d6d fix dns requests in sysrescue-configuration.lua (#291)
The dns library used by lua requires /etc/hosts to exist, otherwise all
requests for name resolution are denied. This meant that using the
sysrescuecfg boot option with a http URL and hostname did not work
while using an IP worked.

This patch adds an empty /etc/hosts file to the initramfs image to fix this.
2022-07-26 22:05:42 +02:00
Gerd v. Egidy 5f027069a5 Merge branch 'pacman-key' into 'main'
deliver SystemRescue with an already initialized pacman key database

See merge request systemrescue/systemrescue-sources!216
2022-07-24 21:17:41 +00:00
Gerd v. Egidy 9a0e4acd16 deliver SystemRescue with an already initialized pacman key database
Initializing the pacman key database during boot can take considerable time
and there is no locking during this time against concurrent file access.
This can lead to problems when installing packages soon after reboot.
This also speeds up the boot process.

Additional disk space requirement is about 1 MByte.

Fixes #290
2022-07-24 23:11:11 +02:00
Gerd v. Egidy d094639e5c Merge branch 'mountall-improvements' into 'main'
Several improvements to the mountall script

See merge request systemrescue/systemrescue-sources!215
2022-07-24 18:00:23 +00:00
Gerd v. Egidy 09fcf3a452 improve check if already mounted for btrfs filesystems in mountall 2022-07-24 19:56:47 +02:00
Gerd v. Egidy f38c7ba8ca detect and open LUKS encrypted devices in mountall 2022-07-24 19:46:56 +02:00
Gerd v. Egidy 2d8bb769c1 use /sys/class/block instead of /sys/block in mountall to get all partitions 2022-07-24 19:13:47 +02:00
Gerd v. Egidy c0a1af428a don't try to mount swap space in mountall 2022-07-24 19:07:04 +02:00
Gerd v. Egidy 9b2bb13393 Merge branch 'initramfs-dns' into 'main'
add patch for archiso to fix dns name resolution in the initramfs stage

See merge request systemrescue/systemrescue-sources!214
2022-07-05 20:03:59 +00:00
Gerd v. Egidy 92f24ce725 begin writing the changelog for 9.04 2022-07-05 22:00:07 +02:00
Gerd v. Egidy d024b66e04 add patch for archiso to fix dns name resolution in the initramfs stage
glibc recently changed how dns name resolution is implemented. It now
needs additional .so files that are loaded dynamically. Include these
files in the initramfs image.
2022-07-05 21:34:36 +02:00
Gerd v. Egidy 2292a6cb89 Merge branch 'bookmarks' into 'main'
allow to configure bookmarks for Firefox in the "sysconfig" scope of the yaml config file

See merge request systemrescue/systemrescue-sources!213
2022-06-08 20:37:45 +00:00
Gerd v. Egidy 3e41c00fc4 allow to configure bookmarks for Firefox in the "sysconfig" scope of the yaml config file 2022-06-08 22:35:55 +02:00
Gerd v. Egidy 7667cc2bac Merge branch 'firefox-ca' into 'main'
apply sysconfig.ca-trust to Firefox too

See merge request systemrescue/systemrescue-sources!212
2022-06-08 19:35:38 +00:00
Gerd v. Egidy 40aeaea9be apply sysconfig.ca-trust to Firefox too
Firefox doesn't use the system CA database but has it's own. Use the
policies.json file to let Firefox trust the entries from the
sysconfig.ca-trust of the YAML config too.
2022-06-08 21:33:54 +02:00
Gerd v. Egidy f2fb87e814 Merge branch 'remmina-popup' into 'main'
add a default config file to prevent remmina from showing an annoying popup on start

See merge request systemrescue/systemrescue-sources!211
2022-06-08 18:56:20 +00:00
Gerd v. Egidy 95f9d88922 add a default config file to prevent remmina from showing an annoying popup on start 2022-06-08 20:54:22 +02:00
Gerd v. Egidy 7634b92208 Merge branch 'initramfs-bool-parse' into 'main'
allow the same values for booleans during initramfs as in the python scripts

See merge request systemrescue/systemrescue-sources!210
2022-06-06 20:53:54 +00:00
Gerd v. Egidy b21ff875a7 allow the same values for booleans during initramfs as in the python scripts
True values are 'y', 'yes', 't', 'true', 'on', '1', '1.0';
false values are 'n', 'no', 'f', 'false', 'off', '0', '0.0'.
2022-06-06 22:51:16 +02:00
Gerd v. Egidy e8cf327452 Merge branch 'lua-no-yaml' into 'main'
Properly deal with cases when there is no config yaml file at all

See merge request systemrescue/systemrescue-sources!209
2022-06-06 11:38:10 +00:00
Gerd v. Egidy 85fa76051d don't throw an error on nonexistent config entries for "copytoram" "checksum" "loadsrm"
This can happen when there is no config yaml at all, for example when booting via PXE
2022-06-06 13:34:09 +02:00
Gerd v. Egidy 815ae32dde fix parsing command line option when there is no default yaml file at all 2022-06-06 12:36:16 +02:00
Gerd v. Egidy d05714a7c2 Merge branch 'ssh-auth-keys' into 'main'
add yaml config option to add ssh authorized_keys (sysconfig.authorized_keys)

See merge request systemrescue/systemrescue-sources!208
2022-06-04 21:07:25 +00:00
Gerd v. Egidy 49ea71d62b add yaml config option to add ssh authorized_keys (sysconfig.authorized_keys) 2022-06-04 23:05:22 +02:00
Gerd v. Egidy b16ed5df20 Merge branch 'timezone' into 'main'
add yaml config option to set timezone (sysconfig.timezone)

See merge request systemrescue/systemrescue-sources!207
2022-06-04 17:11:54 +00:00
Gerd v. Egidy 919914d48b add yaml config option to set timezone (sysconfig.timezone) 2022-06-04 19:09:44 +02:00
Gerd v. Egidy b8a5beff52 Merge branch 'load-srm-wait-online' into 'main'
wait until we are online before doing a http/https load-srm

See merge request systemrescue/systemrescue-sources!206
2022-06-04 15:18:28 +00:00