Franco Fichtner
602a5b416d
firmware: patch header in consistently
...
The information is relatively helpful so we might as well
complete the script use.
2022-01-26 08:06:06 +01:00
Franco Fichtner
910c1f2a7b
firmware: more changes here in the future
2022-01-24 09:49:09 +01:00
Franco Fichtner
6560bd9bbc
firmware: use new feature of opnsense-update
...
Remembers the last packages set upgraded to to avoid too
much spurious upgrade attempts.
2022-01-20 11:34:17 +01:00
Franco Fichtner
9181b5136d
firmware: print these here for diagnostics as well
2022-01-19 13:23:13 +01:00
Franco Fichtner
61720fe233
scripts: tabs vs. spaces
2022-01-11 11:22:03 +01:00
Franco Fichtner
ea2349af06
firmware: apparently /etc/motd is gone on FreeBSD 13
...
Long live /var/run/motd then...
2021-12-17 10:13:42 +01:00
Franco Fichtner
1977e3539f
Revert "firmware: work around FreeBSD 13 faulty validation"
...
This reverts commit d7d69895cd8672379a634488fb116e1a0bbbeaa6.
Was properly solved in stable/22.1.
2021-12-14 11:58:36 +01:00
Franco Fichtner
d7d69895cd
firmware: work around FreeBSD 13 faulty validation
...
ping6: -4 and -6 cannot be used simultaneously
No, that's not how argument parsing works...
2021-12-10 12:46:40 +01:00
Franco Fichtner
1d713525c1
firmware: add new flag for update-based reboot #5358
...
Keep old flag in place to not break any API consumers for a while.
2021-11-17 12:46:05 +01:00
Franco Fichtner
ff8e2fdc97
firmware: streamline -s/implied script a bit more
2021-11-17 12:04:05 +01:00
Franco Fichtner
bf4325abd8
firmware: check for valid command first and exit if not found
...
Avoids a random sleep execution for no reachable command.
2021-11-16 14:13:09 +01:00
Franco Fichtner
d2f9efcd69
firmware: allow launcher to operate on a random sleep if requested
...
To make verbatim script passthrough work we also need to introduce
a scripting option to reach the random sleep option afterwards.
We add a random delay of up to 25 minutes to the cron based operations
in order to give the update servers more room to breathe.
2021-11-16 13:22:05 +01:00
Franco Fichtner
82d21d0775
firmware: hook up 'latest' script, use it in dashboard widget as well
...
Paired with a nightly cron job this can hint at updates on a daily basis
automatically now.
2021-11-16 11:00:40 +01:00
Franco Fichtner
cd77cec93a
firmware: add a 'latest' script to derive update info from changelog
2021-11-16 10:14:10 +01:00
Franco Fichtner
edd17b5a33
firmware: make changelog.txz location permanent
...
Download only if necessary, but verify and unpack unconditionally.
Add a cron job for nightly poll to be used with upcoming pending
script to "skim" the changelog for potential updates.
2021-11-16 09:53:47 +01:00
Franco Fichtner
3585c06da6
firmware: only fetch changelogs if the server file changed
2021-11-15 14:18:47 +01:00
Franco Fichtner
2a4c3a4869
firmware: add a configuration file and fix prompt hint
2021-11-15 13:35:14 +01:00
Franco Fichtner
44d015f053
firmware: implement cross-ABI reinstall #5144
2021-11-09 09:46:58 +01:00
Franco Fichtner
a4726d4409
firmware: fix check for base/kernel reboot
...
opnsense-update no longer sets -bkp by default which
requires us to use them on the command line.
2021-10-26 12:16:38 +02:00
Franco Fichtner
a137d96af8
firmware: in case of fs integrity issues try not to break upgrades
...
File is always packaged, but we cannot trust the file system.
2021-10-14 14:49:11 +02:00
Franco Fichtner
7063dc9e02
firmware: shift away from old-style firmware-xxx files
...
opnsense-update can read the upgrade hint itself. We may have
to stash an ABI in there to reach to a different location without
the need to publish a symbolic link.
Move the firmware message to a data location for cleanliness.
2021-09-28 07:38:21 +02:00
Franco Fichtner
239a6e5dba
firmware: masking vulnerability urls in FreeBSD due to UUID use
2021-09-01 14:36:49 +02:00
Ad Schellevis
19a927ce2c
firmware: a major upgrade logically also expects a reboot.
...
The other side could check if the action would be a major upgrade, but it feels more clear to always communicate the correct intention.
If this doesn't have side affects, we could change 1077e0a2a8/src/opnsense/mvc/app/views/OPNsense/Core/firmware.volt (L223) as well
cc @fichtner
2021-08-25 18:07:17 +02:00
Franco Fichtner
9506f4c1c6
firmware: now that we use TEE we should define it #5136
2021-08-05 14:27:30 +02:00
Franco Fichtner
af7543e79b
firmware: visibility issue on #5136
2021-08-05 13:05:23 +02:00
Franco Fichtner
1c895ed435
firmware: also check plugins for up to date core pkg #5136
2021-08-05 10:05:23 +02:00
Franco Fichtner
f9f9dd28c1
firmware: remove spurious grep
2021-08-03 12:30:10 +02:00
Franco Fichtner
16a3559747
firmware: replace php with pkg version compare
...
As a small bonus now also corectly check if an upgrade
for opnsense-update is available. If not, we are now
able to ignore the downgrade.
2021-08-03 12:23:54 +02:00
Franco Fichtner
5969d20641
firmware: backend now supports reinstall like opnsense-bootstrap -q
2021-08-03 11:49:20 +02:00
Franco Fichtner
4472a23596
firmware: switch to FreeBSD where appropriate
2021-08-02 21:48:29 +02:00
Franco Fichtner
7165b665eb
firmware: sync plugins in console update; closes #5136
2021-08-01 11:27:05 +02:00
Franco Fichtner
5e860053e1
firmware: mask subscription in GUI output
2021-07-22 10:16:04 +02:00
Franco Fichtner
83cd07eda4
firmware: add version/date header here as well
2021-07-14 09:22:46 +02:00
Franco Fichtner
9dc9c4e864
firmware: add backend glue to support install probing of plugins #5037
...
Allows to list dependencies as well. Remove the JSON return, best to
use something as follows now:
# configctl firmware probe && configctl firmware product
2021-06-17 10:32:53 +02:00
Franco Fichtner
a759338381
firmware: push automatic flags to firmware for #5025
2021-05-31 14:49:27 +02:00
Franco Fichtner
0dbfddd864
firmware: exclude /etc/csh.cshrc for #4936
2021-04-22 17:16:10 +02:00
Franco Fichtner
35217ba0d1
firmware: if upstream package is missing complain; closes #4906
...
This points to a configuration error that should be resolved one
way or another.
2021-04-09 14:18:26 +02:00
Franco Fichtner
7d7aaa633d
firmware: separate error for "forbidden" #4906
2021-04-09 14:06:27 +02:00
Franco Fichtner
2fe4de6819
firmwre: make this clearer
...
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well. Need to think about it.
2021-04-07 12:07:32 +02:00
Franco Fichtner
65ae6246e7
firmware: same here
2021-04-01 11:39:33 +02:00
Erik Inge Bolsø
2ec2b3d8f7
firmware/health.sh: refine missing/invalid signature message ( #4840 )
2021-03-18 14:19:53 +01:00
Franco Fichtner
c08a4fb9fd
firmware: small issue with lost init of pipe #4500
2021-03-08 19:11:22 +01:00
Franco Fichtner
70f856bf2f
firmware: emit api version string, second major iteration already #4500
2021-02-25 13:59:35 +01:00
Franco Fichtner
889e24c965
firwarme: abstract LOCKFILE away
...
Now we only deal with LOCKFILE in the firmware scripts folder.
2021-02-19 13:20:48 +01:00
Franco Fichtner
99944f462e
firmware: hide LOCKFILE behind small read script
...
One old bit of compat glue can kick the bucket as well.
2021-02-19 11:52:20 +01:00
Franco Fichtner
38b0e8ff6c
firmware: get rid of old naming convention; closes #4718
2021-02-19 11:43:03 +01:00
Franco Fichtner
eb6cbc0164
firmware: single spot for update/upgrade code #4718
2021-02-19 11:29:38 +01:00
Franco Fichtner
8c2ea1f344
firmware: for core that works, for crypto it does not
...
Since the fetch blocks some time and is not completely reliable
it doesn't really matter if we have it or not.
While here remove a bit of cruft.
2021-02-18 10:24:04 +01:00
Franco Fichtner
2caeb508fc
firmware: flush line for new package
2021-02-17 15:14:32 +01:00
Franco Fichtner
1e4aac005a
firmware: use cannonical -p and -t update
...
opnsense-update can now handle it correctly and we save another
invoke from here.
2021-02-17 15:03:23 +01:00