169 Commits

Author SHA1 Message Date
Franco Fichtner
9679c969f6 firmware: remove type.install, bring code closer together #4500 2021-02-12 19:59:48 +01:00
Franco Fichtner
10eab0ae68 firmware: get rid of firmware type name #4500
From the user side no functional changes.  What this can do
now is decide whether to update or do a release type transition.
In most cases it is safer to get all updates first and then
do a release type transition afterwards.  This can follow when
firmware type install can be shelved.
2021-02-12 19:37:58 +01:00
Franco Fichtner
d00a9f3c16 firmware: correct install time and loop check_package #4500
The former is so we have the date of the install point, not the
date of the package build time.  And, secondly, if we loop the
argument for check through the JSON we know to put the result
into perspective later on.
2021-02-12 14:48:20 +01:00
Franco Fichtner
db87488b40 firmware: remove PIPEFILE #4500 2021-02-12 12:11:38 +01:00
Franco Fichtner
67e3da7600 firmware: no more PIPEFILE in security audit #4500 2021-02-12 11:54:09 +01:00
Franco Fichtner
37664543e1 firmware: extent connectivity script, add to shell #4500
We can actually get rid of PIPEFILE if we do not need the
return value of the command.  More simplification on the
way.
2021-02-12 11:53:04 +01:00
Franco Fichtner
f059f6cd59 firmware: bugs and tweaks #4500 2021-02-12 10:54:42 +01:00
Franco Fichtner
35d88e8da4 firmware: support repository info for updates #4500 2021-02-12 00:03:32 +01:00
Franco Fichtner
724167b44b firmware: remove cruft, show log during check #4500 2021-02-11 22:14:08 +01:00
Franco Fichtner
cc58fd6009 firmware: background the update check, funnel it back to GUI #4500 2021-02-11 20:38:34 +01:00
Franco Fichtner
84b086ec96 firmware: provide check data to caller for upcoming refactor #4500 2021-02-11 16:29:28 +01:00
Franco Fichtner
d8e0eb669a firmware: remove debug output 2021-02-11 15:34:44 +01:00
Franco Fichtner
6a2c0c4e72 firmware: report enabled repositories #4500 2021-02-11 13:26:10 +01:00
Franco Fichtner
bfbc0bdccb firmware: warn on incomplete repository, change release type priority #4500 2021-02-10 16:06:49 +01:00
Franco Fichtner
831fcec40b firmware: add a functional stub for connectivity audit #4500
pkg update -f is a good starting point, but we also need to check
DNS etc. so that is still a subject to debate.
2021-02-10 13:39:22 +01:00
Franco Fichtner
2a860c841d firmware: business changelogs from separate mirror #4500 2021-02-10 13:14:37 +01:00
Franco Fichtner
12637eb7f5 rc: let opnsense-version -c check package file existence 2021-02-05 13:26:43 +01:00
Franco Fichtner
b35843fdbc firmware: opnsense-version will do the trick 2021-02-05 10:22:55 +01:00
Franco Fichtner
024bb6a003 firmware: UX rework done now #4500
Removed more fluff, concepts anf functionality are there.
Plugin conflict labels could probably require improvement,
but the way they work is relatively complicated, but maybe
it is only getting late.

As soon as we have plugin JSON metadata we can ship the
plugin conflict rework as well as that seems to help a lot
when recovering from strange situations (mostly development
things, but we never know).
2021-02-05 00:09:58 +01:00
Franco Fichtner
8158ef8a6c firmware: deal with plugin to config syncs 2021-02-04 17:53:32 +01:00
Franco Fichtner
2573b7325a firmware: do not show subscription key on firmware status page #4500 2021-02-04 12:02:03 +01:00
Franco Fichtner
c05df172aa firmware: add information page #4500 2021-02-03 14:21:20 +01:00
Franco Fichtner
1c8e3a3a47 firmware: update text and make notes for later #4500 2021-01-29 19:38:12 +01:00
Franco Fichtner
f2ca74384a firmware: fix fetch of changelogs on dvd images 2021-01-28 09:16:25 +01:00
Franco Fichtner
d91e308001 firmware: allow to run audits from firmware upgrade console option #4500
Type "s" for security audit, or "h" for health audit.

We don't add it to the option prompt to not clutter the menu flow.
This is mostly for debug and development purposes.
2021-01-16 16:25:33 +01:00
Franco Fichtner
7d5b8bc24e firmware: oops, to bring stderr into pipe move redirect here #4500 2021-01-16 13:37:56 +01:00
Franco Fichtner
6a65666a1c firmware: support console-based audit output 2021-01-16 12:55:41 +01:00
Franco Fichtner
c5521fecac firmware: do not allow plugin install if remote repo version differs #4500
We need the matching mirror version for the plugins to install so
simply block the update and let the user update first (instead of
only checking for updates and then installing later versions of
plugins).

This was a larger problem in past years but it is good practice to
require an up-to-date system anyway.
2021-01-16 10:14:46 +01:00
Franco Fichtner
93be19f402 firmware; show repository in overview; closes #4578 2021-01-12 11:20:14 +01:00
Franco Fichtner
3bb2b4eb14 firmware: print core package name, database checkup first or return 2021-01-09 21:29:17 +01:00
Franco Fichtner
92c019b913 firmware: pretty sure parsing REMOVED was working in pkg 1.12 2021-01-05 17:02:31 +01:00
Franco Fichtner
a69351722c firmware: proper path to pkg-static 2021-01-01 20:04:25 +01:00
Franco Fichtner
d6f32818b9 firmware: add version output to audit logs; closes #4375 2020-12-17 10:57:35 +01:00
Franco Fichtner
b515105e12 firmware: -d will for install, but we just want to check 2020-12-16 10:20:21 +01:00
Franco Fichtner
b206ad8443 firmware: fix some issues with missing repository on server 2020-12-13 11:40:13 +01:00
Franco Fichtner
34ebcf6fb5 firmware: properly report an unsigned repostory
The repository is rejected but an internal error returned.  Let's
make this explicit as it is a configuration error anyway.
2020-08-24 11:44:25 +02:00
Franco Fichtner
e22bb69cb6 firmware: ignore man page database regeneration
Looks like on the running system and in the build system the values
are static but obviously going from build to running system the
regenerate causes the checksums to shift.  Not a security issue for
the "man" page databadse so better to hide these files from the
audit to avoid confusion and questions.

PR: https://forum.opnsense.org/index.php?topic=18484.0
2020-08-07 12:51:59 +02:00
Franco Fichtner
2ad9300a32 firmware: also show not installed not orphaned missing #1663 2020-02-20 20:32:23 +01:00
Franco Fichtner
15fbeec367 firmware: good-will nit-picking and some more work to do 2020-02-20 19:50:12 +01:00
Ad Schellevis
64052fae97 install missing plugins configd call: configctl firmware confplugins for https://github.com/opnsense/core/issues/1663 2020-02-17 10:19:49 +01:00
Franco Fichtner
c20b0083ef firmware: add /etc/remote to whitelist, NTP GPS uses it 2019-11-01 20:13:49 +01:00
Franco Fichtner
df0734b37b firmware: expect pkg to be installed as non-automatic #3473 2019-10-28 10:44:34 +01:00
Franco Fichtner
7ff6b2013f firmware: we need to be aware of locks here 2019-10-07 11:35:21 +02:00
Franco Fichtner
b4929f5332 firmware: use opnsense-revert to reinstall
Since the health check complains about a lot of different things
and opnsense-revert can repair most of it it is only fair to offer
this fix through GUI reinstall buttons via opnsense-revert for
an overly pleasing UX.
2019-10-07 11:15:09 +02:00
Franco Fichtner
3f69b12fc8 firmware: move echo to more appropriate spot 2019-09-29 12:47:49 +02:00
Franco Fichtner
058ee11a06 firmware: verify mtree signature if there #3473 2019-09-25 13:29:59 +02:00
Franco Fichtner
08e7fca0fc firmware: pkg is part of core, no need to double-check #3473 2019-09-24 09:40:59 +02:00
Franco Fichtner
982712a824 firmware: extend health check #3473 2019-09-24 09:09:40 +02:00
Franco Fichtner
245486bc87 firmware: add version/repository check for core packages #3473 2019-09-23 09:56:36 +02:00
Franco Fichtner
a58ad17289 firmware: fixed upsteam in pkg 1.12 2019-09-23 07:46:29 +02:00