241 Commits

Author SHA1 Message Date
Franco Fichtner
602a5b416d firmware: patch header in consistently
The information is relatively helpful so we might as well
complete the script use.
2022-01-26 08:06:06 +01:00
Franco Fichtner
910c1f2a7b firmware: more changes here in the future 2022-01-24 09:49:09 +01:00
Franco Fichtner
6560bd9bbc firmware: use new feature of opnsense-update
Remembers the last packages set upgraded to to avoid too
much spurious upgrade attempts.
2022-01-20 11:34:17 +01:00
Franco Fichtner
9181b5136d firmware: print these here for diagnostics as well 2022-01-19 13:23:13 +01:00
Franco Fichtner
61720fe233 scripts: tabs vs. spaces 2022-01-11 11:22:03 +01:00
Franco Fichtner
ea2349af06 firmware: apparently /etc/motd is gone on FreeBSD 13
Long live /var/run/motd then...
2021-12-17 10:13:42 +01:00
Franco Fichtner
1977e3539f Revert "firmware: work around FreeBSD 13 faulty validation"
This reverts commit d7d69895cd8672379a634488fb116e1a0bbbeaa6.
Was properly solved in stable/22.1.
2021-12-14 11:58:36 +01:00
Franco Fichtner
d7d69895cd firmware: work around FreeBSD 13 faulty validation
ping6: -4 and -6 cannot be used simultaneously

No, that's not how argument parsing works...
2021-12-10 12:46:40 +01:00
Franco Fichtner
1d713525c1 firmware: add new flag for update-based reboot #5358
Keep old flag in place to not break any API consumers for a while.
2021-11-17 12:46:05 +01:00
Franco Fichtner
ff8e2fdc97 firmware: streamline -s/implied script a bit more 2021-11-17 12:04:05 +01:00
Franco Fichtner
bf4325abd8 firmware: check for valid command first and exit if not found
Avoids a random sleep execution for no reachable command.
2021-11-16 14:13:09 +01:00
Franco Fichtner
d2f9efcd69 firmware: allow launcher to operate on a random sleep if requested
To make verbatim script passthrough work we also need to introduce
a scripting option to reach the random sleep option afterwards.

We add a random delay of up to 25 minutes to the cron based operations
in order to give the update servers more room to breathe.
2021-11-16 13:22:05 +01:00
Franco Fichtner
82d21d0775 firmware: hook up 'latest' script, use it in dashboard widget as well
Paired with a nightly cron job this can hint at updates on a daily basis
automatically now.
2021-11-16 11:00:40 +01:00
Franco Fichtner
cd77cec93a firmware: add a 'latest' script to derive update info from changelog 2021-11-16 10:14:10 +01:00
Franco Fichtner
edd17b5a33 firmware: make changelog.txz location permanent
Download only if necessary, but verify and unpack unconditionally.

Add a cron job for nightly poll to be used with upcoming pending
script to "skim" the changelog for potential updates.
2021-11-16 09:53:47 +01:00
Franco Fichtner
3585c06da6 firmware: only fetch changelogs if the server file changed 2021-11-15 14:18:47 +01:00
Franco Fichtner
2a4c3a4869 firmware: add a configuration file and fix prompt hint 2021-11-15 13:35:14 +01:00
Franco Fichtner
44d015f053 firmware: implement cross-ABI reinstall #5144 2021-11-09 09:46:58 +01:00
Franco Fichtner
a4726d4409 firmware: fix check for base/kernel reboot
opnsense-update no longer sets -bkp by default which
requires us to use them on the command line.
2021-10-26 12:16:38 +02:00
Franco Fichtner
a137d96af8 firmware: in case of fs integrity issues try not to break upgrades
File is always packaged, but we cannot trust the file system.
2021-10-14 14:49:11 +02:00
Franco Fichtner
7063dc9e02 firmware: shift away from old-style firmware-xxx files
opnsense-update can read the upgrade hint itself.  We may have
to stash an ABI in there to reach to a different location without
the need to publish a symbolic link.

Move the firmware message to a data location for cleanliness.
2021-09-28 07:38:21 +02:00
Franco Fichtner
239a6e5dba firmware: masking vulnerability urls in FreeBSD due to UUID use 2021-09-01 14:36:49 +02:00
Ad Schellevis
19a927ce2c firmware: a major upgrade logically also expects a reboot.
The other side could check if the action would be a major upgrade, but it feels more clear to always communicate the correct intention.
If this doesn't have side affects, we could change 1077e0a2a8/src/opnsense/mvc/app/views/OPNsense/Core/firmware.volt (L223) as well

cc @fichtner
2021-08-25 18:07:17 +02:00
Franco Fichtner
9506f4c1c6 firmware: now that we use TEE we should define it #5136 2021-08-05 14:27:30 +02:00
Franco Fichtner
af7543e79b firmware: visibility issue on #5136 2021-08-05 13:05:23 +02:00
Franco Fichtner
1c895ed435 firmware: also check plugins for up to date core pkg #5136 2021-08-05 10:05:23 +02:00
Franco Fichtner
f9f9dd28c1 firmware: remove spurious grep 2021-08-03 12:30:10 +02:00
Franco Fichtner
16a3559747 firmware: replace php with pkg version compare
As a small bonus now also corectly check if an upgrade
for opnsense-update is available.  If not, we are now
able to ignore the downgrade.
2021-08-03 12:23:54 +02:00
Franco Fichtner
5969d20641 firmware: backend now supports reinstall like opnsense-bootstrap -q 2021-08-03 11:49:20 +02:00
Franco Fichtner
4472a23596 firmware: switch to FreeBSD where appropriate 2021-08-02 21:48:29 +02:00
Franco Fichtner
7165b665eb firmware: sync plugins in console update; closes #5136 2021-08-01 11:27:05 +02:00
Franco Fichtner
5e860053e1 firmware: mask subscription in GUI output 2021-07-22 10:16:04 +02:00
Franco Fichtner
83cd07eda4 firmware: add version/date header here as well 2021-07-14 09:22:46 +02:00
Franco Fichtner
9dc9c4e864 firmware: add backend glue to support install probing of plugins #5037
Allows to list dependencies as well.  Remove the JSON return, best to
use something as follows now:

    # configctl firmware probe && configctl firmware product
2021-06-17 10:32:53 +02:00
Franco Fichtner
a759338381 firmware: push automatic flags to firmware for #5025 2021-05-31 14:49:27 +02:00
Franco Fichtner
0dbfddd864 firmware: exclude /etc/csh.cshrc for #4936 2021-04-22 17:16:10 +02:00
Franco Fichtner
35217ba0d1 firmware: if upstream package is missing complain; closes #4906
This points to a configuration error that should be resolved one
way or another.
2021-04-09 14:18:26 +02:00
Franco Fichtner
7d7aaa633d firmware: separate error for "forbidden" #4906 2021-04-09 14:06:27 +02:00
Franco Fichtner
2fe4de6819 firmwre: make this clearer
Ideally, opnsense-update -M should replace this except
that -M is used to gain mirror access from other scripts
as well.  Need to think about it.
2021-04-07 12:07:32 +02:00
Franco Fichtner
65ae6246e7 firmware: same here 2021-04-01 11:39:33 +02:00
Erik Inge Bolsø
2ec2b3d8f7
firmware/health.sh: refine missing/invalid signature message (#4840) 2021-03-18 14:19:53 +01:00
Franco Fichtner
c08a4fb9fd firmware: small issue with lost init of pipe #4500 2021-03-08 19:11:22 +01:00
Franco Fichtner
70f856bf2f firmware: emit api version string, second major iteration already #4500 2021-02-25 13:59:35 +01:00
Franco Fichtner
889e24c965 firwarme: abstract LOCKFILE away
Now we only deal with LOCKFILE in the firmware scripts folder.
2021-02-19 13:20:48 +01:00
Franco Fichtner
99944f462e firmware: hide LOCKFILE behind small read script
One old bit of compat glue can kick the bucket as well.
2021-02-19 11:52:20 +01:00
Franco Fichtner
38b0e8ff6c firmware: get rid of old naming convention; closes #4718 2021-02-19 11:43:03 +01:00
Franco Fichtner
eb6cbc0164 firmware: single spot for update/upgrade code #4718 2021-02-19 11:29:38 +01:00
Franco Fichtner
8c2ea1f344 firmware: for core that works, for crypto it does not
Since the fetch blocks some time and is not completely reliable
it doesn't really matter if we have it or not.

While here remove a bit of cruft.
2021-02-18 10:24:04 +01:00
Franco Fichtner
2caeb508fc firmware: flush line for new package 2021-02-17 15:14:32 +01:00
Franco Fichtner
1e4aac005a firmware: use cannonical -p and -t update
opnsense-update can now handle it correctly and we save another
invoke from here.
2021-02-17 15:03:23 +01:00