peter/infix
1
0
Fork 0
mirror of https://github.com/kernelkit/infix.git synced 2026-07-30 04:33:00 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,195 Commits 43 Branches 86 Tags
c3a4a93cc803440393ebeadb1e7ea196cb524d4e
Commit Graph
2195 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Joachim Wiberg c3a4a93cc8 confd: disable password aging when unlocking password login for user 
We cannot rely on time being correct.  Password expiration need to be handled
by external mechanism, e.g., RADIUS.

Fixes #534

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-08 13:35:27 +02:00
Joachim Wiberg 12d969ab0c confd: log PID in migration and prodoct probe scripts 
Like other scripts already do, makes it easier to read syslog.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-08 13:35:27 +02:00
Joachim Wiberg a275282307 confd: harmonize empty and missing password hash behavior 
Removing a user's password hash should be the same an empty password
hash.  In the latter case we already allow login with SSH keys, this
change harmonizes the behavior by also allowing login with SSH keys
when the users's password hash is removed.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-08 13:35:27 +02:00
Joachim Wiberg 39e4935369 confd: refactor user hash validation 
Consolidate empty password and $factory$ hash extraction to a common
function called before set_pasword().  The purpose is to ensure all
error handling and log messages are in the same place, except for
missing factory-password-hash, which is now treated as a PANIC and
logged to /dev/console.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-08 13:35:27 +02:00
Joachim Wiberg 9bbc973d9d confd: silence user group member check 
Fixes group record leakage to syslog.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-08 13:35:27 +02:00
Joachim Wiberg 43b3c43a38 doc: spell out meaning of OAM at least somewhere 
;-)

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-08 13:35:27 +02:00
Joachim Wiberg 0be6f5694c patches: make sure to version linux patches 
Just like other packages we should version our Linux patches as well,
even though it may be painful and cause some extra overhead, in the
end it allows multi-kernel setups and compatibility with customer's
using Infix as a BR2_EXTERNAL.

Fixes #489

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-08 13:35:27 +02:00
Joachim Wiberg 959ce88b83 board/common: fix bogus syslog warnings 
When syncing interface defaults at boot, some settings are read-only and
some are write-only.  Filter these out so sysctl does not log any bogus
Permission Denied messages.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-08 13:35:27 +02:00
Joachim Wiberg c925b2f0a8 board/riscv64: initial support for StarFive VisonFive2 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-08 13:35:27 +02:00
Mattias WalströmandJoachim Wiberg 8c333ab7e5 Fix regression when merge /usr 
cp: cannot stat '/home/lazzer/Documents/addiva/infix/board/common/rootfs/bin/onieprom': No such file or directory
Signed-off-by: Mattias Walström <lazzer@gmail.com>
 2024-08-07 17:22:25 +02:00
Mattias Walström 2194f7bebe Merge /usr/* directories into / 
/usr/bin  -> /bin
/usr/sbin -> /sbin
/usr/lib  -> /lib
 2024-08-06 11:15:38 +02:00
Mattias Walström 0f305ccb84 buildroot: Remove commits from when rousette was introduced 
* spdlog: set SPDLOG_FMT_EXTERNAL=OFF
* linux-pam: Set libdir to /usr/lib to get pkg-config to work
 2024-08-06 11:15:38 +02:00
Joachim Wiberg ee3c7f44e5 doc: new hardware section, Using a USB Stick 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-04 07:42:44 +02:00
Joachim Wiberg f0ae642144 doc: minor, whitespace cleanup + root -> admin 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-04 07:42:44 +02:00
Joachim Wiberg 438ea3818e board/common: add support for auto-mounting USB sticks 
Fixes #497

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-04 07:42:44 +02:00
Joachim Wiberg 9457521626 qemu.sh: check if mkfs.vfat exists, fall back to mkfs.exfat 
Also add disk label for future experiments.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-04 07:42:44 +02:00
Joachim Wiberg b9238b2a96 board: add support for exFAT file systems 
From https://en.wikipedia.org/wiki/exFAT:

   ... a file system optimized for flash memory such as USB flash
   drives and SD cards.
   ... has been adopted by the SD Association as the default file
   system for SDXC and SDUC cards larger than 32 GB.

The exfatprogs is also a default installed package on most modern
distros, compared to dosfstools (mkfs.vfat) which is not.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-04 07:42:44 +02:00
Joachim Wiberg c7c21b3f6e buildroot: bump to v2024.02.4 LTS 
Adjust defconfigs after revert of OpenSSL engines before .4 release.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-08-02 22:51:21 +02:00
Joachim Wiberg 1b996f543a package/python-yangdoc: bump to v0.6.0 
Fixes #529

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-07-11 02:47:02 +02:00
Joachim Wiberg ffb3af5533 buildroot: bump for security fixes 
- OpenSSH CVE-2024-6387

 - GLIBC-SA-2024-0004:
     ISO-2022-CN-EXT: fix out-of-bound writes when writing escape
     sequence (CVE-2024-2961)

 - GLIBC-SA-2024-0005:
     nscd: Stack-based buffer overflow in netgroup cache (CVE-2024-33599)

 - GLIBC-SA-2024-0006:
     nscd: Null pointer crash after notfound response (CVE-2024-33600)

 - GLIBC-SA-2024-0007:
     nscd: netgroup cache may terminate daemon on memory allocation
     failure (CVE-2024-33601)

 - GLIBC-SA-2024-0008:
     nscd: netgroup cache assumes NSS callback uses in-buffer strings
     (CVE-2024-33602)

Please note, with this bump it is required to enable the new OpenSSL
option BR2_PACKAGE_LIBOPENSSL_ENGINES, otherwise libssh will not build.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-07-11 02:47:02 +02:00
Jon-Olov VatnandJoachim Wiberg 66d9a80600 Doc: fix typo 
[skip ci]
 2024-07-08 16:32:12 +02:00
Jon-Olov VatnandJoachim Wiberg f6e4ea3fa7 Doc: Minor tweaks to Speed/Duplex documentation. 
[skip ci]
 2024-07-08 16:32:12 +02:00
Jon-Olov VatnandJoachim Wiberg b7b3a55fbd Doc: Adding picture to illustrate ethernet auto-neg 
[skip ci]
 2024-07-08 16:32:12 +02:00
Jon-Olov VatnandJoachim Wiberg 2dab79c321 Doc: Include information on Ethernet config, status and stats 
[skip ci]
 2024-07-08 16:32:12 +02:00
Mattias Walström 2b5ed0615f Bump libyang, libnetconf2, sysrepo and netopeer2 
For netopeer2 we need to patch away local-users, since if it is enabled
netopeer2 requires all users that should be allowed to use netconf to
also be configured in ietf-netconf-server.

Also add some upstream patches.
 2024-07-03 09:08:56 +02:00
Joachim Wiberg a672074cef buildroot: fix libyang license hash, updated copyright year 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
v24.06.0 v24.06.0-rc2 		2024-06-28 15:25:11 +02:00
Joachim Wiberg 8f8766c340 package/python-libyang: allow building also for target 
No need to lock it down solely for host build-time use.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 15:24:28 +02:00
Joachim Wiberg 46598a875d package/python-yangdoc: fix misspelled DEPENDENCIES variable 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 15:23:27 +02:00
Joachim Wiberg d523e588d6 packakge: spellcheck license file references 
Minor spelling error and mistakes, hashes actually OK.

 - LICENCE -> LICENSE
 - LICENCE -> COPYING

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 15:21:48 +02:00
Joachim Wiberg 269c0f2b00 .github: generate checksum files also for latest build 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 14:49:25 +02:00
Joachim Wiberg 53c079e1b2 doc: update ChangeLog, final update for v24.06.0-rc1 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
v24.06.0-rc1 		2024-06-28 12:54:27 +02:00
Joachim Wiberg 10744c5116 board/common: extract YANG documentation for all builds 
This change builds on top of the earlier work to bootstrap Infix YANG
modules at build time.  Adding a step at the end of post-build.sh to
call the yangdoc tool.  The resulting yangdoc.html is a stand-alone HTML
file of (almost) all YANG nodes.  Almost because some top-level nodes
are unused by Infix atm. and have been filtered out for readability.

Fixes #432

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 12:54:27 +02:00
Joachim Wiberg edaaa33ddc package/python-yangdoc: new package 
To be used with automatic generation of YANG documentation extracted
from sysrepo at build time.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 12:54:27 +02:00
Joachim Wiberg 31a30c736a package/python-libyang: new package 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 12:54:27 +02:00
Joachim Wiberg 5a3897b1aa package/confd: drop empty help text 
This silences an annoying warning at defconfig/oldconfig about MD5CRYPT.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 12:54:27 +02:00
Joachim Wiberg 1fac47a728 doc: split CLI tutorial into multile files 
Fixes #455

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 12:54:27 +02:00
Joachim Wiberg f1585476da confd: fix ietf-tcp-common version 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2024-06-28 12:54:27 +02:00
Mattias Walström d27153ea95 Refactor randomization of transport protocol 
Simplify the logic and add a parameter to the command line parser
instead of environment variable.
 2024-06-27 15:43:06 +02:00
Mattias Walström e3cd981830 restconf: Add workaround for bug in request 2.32.x 2024-06-27 15:43:06 +02:00
Mattias Walström 3b8505f8c4 sysrepo-cpp: Add timeout to getData 2024-06-27 15:43:06 +02:00
Mattias Walström 3feea4d9e2 rousette: Add timeout option 2024-06-27 15:43:06 +02:00
Mattias Walström 91c55ddeb8 backport fix for extending timeouts in initctl 2024-06-27 15:43:06 +02:00
Mattias Walström 4a3559d88f infamy: Remove duplicate function 
Get management ip was implemented in two functions, removing one.
 2024-06-27 15:43:06 +02:00
Mattias Walström d340ba7407 infamy: Wait for NETCONF and RESTCONF 
Also remove some code duplication.
 2024-06-27 15:43:06 +02:00
Mattias Walström b790c46dc4 restconf: Bugfix download yang modules 
Actually check if the model is already downloaded,
before download.
 2024-06-27 15:43:06 +02:00
Mattias Walström b57353294f test: usb: Make possible to run on physical devices 
Virtual devices always have two USB ports, but physical, may have more
or less.
 2024-06-27 15:43:06 +02:00
Mattias Walström c05ed73ff5 Document randomisation of restconf/netconf 2024-06-27 15:43:06 +02:00
Mattias Walström 4cc23092b2 restconf: Implement actions 
And refactor how it was implemented in netconf
 2024-06-27 15:43:06 +02:00
Mattias Walström 2919c23fde tests: containers: Adapt tests to work with restconf 
Move the web port used in containers from 80 -> 91
this to not collide with nginx which is required
for restconf.
 2024-06-27 15:43:06 +02:00
Mattias Walström df7dab5951 infamy: Randomize tests for restconf/netconf 2024-06-27 15:43:06 +02:00