lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-19 19:15:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
13,377 Commits 1 Branch 0 Tags
Commit Graph

225 Commits

Author SHA1 Message Date
Franco Fichtner
2a4c3a4869 firmware: add a configuration file and fix prompt hint 2021-11-15 13:35:14 +01:00
Franco Fichtner
44d015f053 firmware: implement cross-ABI reinstall #5144 2021-11-09 09:46:58 +01:00
Franco Fichtner
a4726d4409 firmware: fix check for base/kernel reboot 
opnsense-update no longer sets -bkp by default which
requires us to use them on the command line.
 2021-10-26 12:16:38 +02:00
Franco Fichtner
a137d96af8 firmware: in case of fs integrity issues try not to break upgrades 
File is always packaged, but we cannot trust the file system.
 2021-10-14 14:49:11 +02:00
Franco Fichtner
7063dc9e02 firmware: shift away from old-style firmware-xxx files 
opnsense-update can read the upgrade hint itself.  We may have
to stash an ABI in there to reach to a different location without
the need to publish a symbolic link.

Move the firmware message to a data location for cleanliness.
 2021-09-28 07:38:21 +02:00
Franco Fichtner
239a6e5dba firmware: masking vulnerability urls in FreeBSD due to UUID use 2021-09-01 14:36:49 +02:00
Ad Schellevis
19a927ce2c firmware: a major upgrade logically also expects a reboot. 
The other side could check if the action would be a major upgrade, but it feels more clear to always communicate the correct intention.
If this doesn't have side affects, we could change 1077e0a2a8/src/opnsense/mvc/app/views/OPNsense/Core/firmware.volt (L223) as well

cc @fichtner
 2021-08-25 18:07:17 +02:00
Franco Fichtner
9506f4c1c6 firmware: now that we use TEE we should define it #5136 2021-08-05 14:27:30 +02:00
Franco Fichtner
af7543e79b firmware: visibility issue on #5136 2021-08-05 13:05:23 +02:00
Franco Fichtner
1c895ed435 firmware: also check plugins for up to date core pkg #5136 2021-08-05 10:05:23 +02:00
Franco Fichtner
f9f9dd28c1 firmware: remove spurious grep 2021-08-03 12:30:10 +02:00
Franco Fichtner
16a3559747 firmware: replace php with pkg version compare 
As a small bonus now also corectly check if an upgrade
for opnsense-update is available.  If not, we are now
able to ignore the downgrade.
 2021-08-03 12:23:54 +02:00
Franco Fichtner
5969d20641 firmware: backend now supports reinstall like opnsense-bootstrap -q 2021-08-03 11:49:20 +02:00
Franco Fichtner
4472a23596 firmware: switch to FreeBSD where appropriate 2021-08-02 21:48:29 +02:00
Franco Fichtner
7165b665eb firmware: sync plugins in console update; closes #5136 2021-08-01 11:27:05 +02:00
Franco Fichtner
5e860053e1 firmware: mask subscription in GUI output 2021-07-22 10:16:04 +02:00
Franco Fichtner
83cd07eda4 firmware: add version/date header here as well 2021-07-14 09:22:46 +02:00
Franco Fichtner
9dc9c4e864 firmware: add backend glue to support install probing of plugins #5037 
Allows to list dependencies as well.  Remove the JSON return, best to
use something as follows now:

    # configctl firmware probe && configctl firmware product
 2021-06-17 10:32:53 +02:00
Franco Fichtner
a759338381 firmware: push automatic flags to firmware for #5025 2021-05-31 14:49:27 +02:00
Franco Fichtner
0dbfddd864 firmware: exclude /etc/csh.cshrc for #4936 2021-04-22 17:16:10 +02:00
Franco Fichtner
35217ba0d1 firmware: if upstream package is missing complain; closes #4906 
This points to a configuration error that should be resolved one
way or another.
 2021-04-09 14:18:26 +02:00
Franco Fichtner
7d7aaa633d firmware: separate error for "forbidden" #4906 2021-04-09 14:06:27 +02:00
Franco Fichtner
2fe4de6819 firmwre: make this clearer 
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well.  Need to think about it.
 2021-04-07 12:07:32 +02:00
Franco Fichtner
65ae6246e7 firmware: same here 2021-04-01 11:39:33 +02:00
Erik Inge Bolsø
2ec2b3d8f7
firmware/health.sh: refine missing/invalid signature message (#4840) 2021-03-18 14:19:53 +01:00
Franco Fichtner
c08a4fb9fd firmware: small issue with lost init of pipe #4500 2021-03-08 19:11:22 +01:00
Franco Fichtner
70f856bf2f firmware: emit api version string, second major iteration already #4500 2021-02-25 13:59:35 +01:00
Franco Fichtner
889e24c965 firwarme: abstract LOCKFILE away 
Now we only deal with LOCKFILE in the firmware scripts folder.
 2021-02-19 13:20:48 +01:00
Franco Fichtner
99944f462e firmware: hide LOCKFILE behind small read script 
One old bit of compat glue can kick the bucket as well.
 2021-02-19 11:52:20 +01:00
Franco Fichtner
38b0e8ff6c firmware: get rid of old naming convention; closes #4718 2021-02-19 11:43:03 +01:00
Franco Fichtner
eb6cbc0164 firmware: single spot for update/upgrade code #4718 2021-02-19 11:29:38 +01:00
Franco Fichtner
8c2ea1f344 firmware: for core that works, for crypto it does not 
Since the fetch blocks some time and is not completely reliable
it doesn't really matter if we have it or not.

While here remove a bit of cruft.
 2021-02-18 10:24:04 +01:00
Franco Fichtner
2caeb508fc firmware: flush line for new package 2021-02-17 15:14:32 +01:00
Franco Fichtner
1e4aac005a firmware: use cannonical -p and -t update 
opnsense-update can now handle it correctly and we save another
invoke from here.
 2021-02-17 15:03:23 +01:00
Franco Fichtner
e321ab47a6 firmware: no, not going to fix this mess #4500 2021-02-17 14:02:04 +01:00
Franco Fichtner
8a6642c862 firmware: lock pkg when not upgrading it 
It can be snatched from any mirror if given which is very
bad when FreeBSD repo is enabled.  A simple pkg-install
will pull in pkg and break the system.
 2021-02-17 13:52:10 +01:00
Franco Fichtner
a55afaac12 firmware: add crypto package to health check #4500 2021-02-17 13:33:20 +01:00
Franco Fichtner
31ca550304 firmware: correct timestamp to reflect date(1) output 2021-02-17 09:47:01 +01:00
Franco Fichtner
2520f59669 firmwware: slight code updates for check #4500 2021-02-16 16:11:49 +01:00
Franco Fichtner
58b96bc114 firmware: third and last batch #4500 2021-02-16 15:59:37 +01:00
Franco Fichtner
d44a148899 firmware: second batch in check script #4500 2021-02-16 15:52:58 +01:00
Franco Fichtner
9a08ea91e9 firmware: settle on 4 spaces for indent, first batch, minor removals #4500 2021-02-16 15:44:04 +01:00
Franco Fichtner
0f1484b3a2 firmware: strict install policy using php version_compare() #4500 
We have to see how this holds up in practice.  Reinstall was considered
as well for further protection but that might be even trickier depending
on what locking and version tricks the user did to their install to
retain a particular (working) state.
 2021-02-16 15:08:26 +01:00
Franco Fichtner
e4392fb854 firmware: pin critical updates to our repo #4500 
While testing pkg was snatched from FreeBSD mirror, which isn't
advisable (nevermind that FreeBSD mirror was enabled in the first
place).

Do the same for the release type shift to avoid pivoting towards
third party repos for any reason whatsoever.
 2021-02-16 15:03:56 +01:00
Franco Fichtner
9a01e5399d firmware: UX and display tweaks 2021-02-16 10:31:04 +01:00
Franco Fichtner
31cefec61b firmware: when config.xml looks like a factory reset register plugins/release #4500 
This way the build can do all sorts of funny things and we will end up
with a consistent config.xml after boot.  For people restoring other
config.xml that is not the case but in this scenario the user is likely
aware of what he or she is doing.
 2021-02-16 10:05:27 +01:00
Franco Fichtner
4cf0720b66 firmware: merge updates and release type result parsing #4500 
With this we get as much visibility as pkg can offer us.  Merge
some code in the process as the release type shift is nothing
special anymore.
 2021-02-16 00:40:20 +01:00
Franco Fichtner
e283a5942d firmware: UX and JS changes #4500 2021-02-15 19:52:15 +01:00
Franco Fichtner
8d7ce38678 firmware: add upgrade sets to status if found and required #4500 2021-02-15 13:51:54 +01:00
Franco Fichtner
2ecd584c9a firmware: firmware-* files private to check.sh #4500 
Remove unused JS while here.
 2021-02-15 13:07:00 +01:00