Changes in config

d0b2dbfa - Remove $FreeBSD$: one-line sh pattern

Wed, 16 Aug 2023 17:55:03 +0000

Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

9ed05409 - Revert r361257: bsdinstall: do a `certctl rehash` upon installation [...]

Thu, 17 Sep 2020 20:35:45 +0000

Revert r361257: bsdinstall: do a `certctl rehash` upon installation [...]As of r365829, any given base distribution set will now include the /etc/sslsymlinks that this rehash would've otherwise installed. This extra step isno longer required.MFC after: 1 weekX-MFC-With: r365837 List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

60403b98 - bsdinstall: Update loader.conf for new OpenZFS deps

Tue, 25 Aug 2020 21:07:27 +0000

bsdinstall: Update loader.conf for new OpenZFS depszfs.ko now includes the SPL but relies on cryptodev instead.Reported by: D Scott PhillipsSponsored by: iXsystems, Inc. List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

1840a4fa - bsdinstall: do a `certctl rehash` upon installation of configuration

Tue, 19 May 2020 15:19:39 +0000

bsdinstall: do a `certctl rehash` upon installation of configurationIf certctl is installed on the system we're configuring, do a certctlrehash.Note that certctl may not be present if the world we've installed was builteither WITHOUT_OPENSSL or WITHOUT_CAROOT. In this scenario, we don'tcurrently see if the host has a certctl as this may be an indication thatthe system *shouldn't* have certs installed into /etc/ssl.Reviewed by: allanjude, dteskeMFC after: 3 daysDifferential Revision: https://reviews.freebsd.org/D24640 List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

e7a71e6d - Add a comment explaining why the opensolaris_load line in loader.conf

Wed, 02 Oct 2019 16:09:28 +0000

Add a comment explaining why the opensolaris_load line in loader.confis explicitly added.Requested by: rgrimesMFC after: 3 daysMFC with: r353004Sponsored by: Rubicon Communications, LLC (Netgate) List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

8cdae52e - Explicitly add opensolaris_load="YES" to loader.conf through the

Wed, 02 Oct 2019 13:30:17 +0000

Explicitly add opensolaris_load="YES" to loader.conf through theinstaller when installing the system on a ZFS root filesystem.For arm64, zfs_load="YES" does not add opensolaris.ko as a klddependency, so add it explicitly to prevent boot-time failuresout-of-box.PR: 240478MFC after: 3 daysSponsored by: Rubicon Communications, LLC (Netgate) List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

33a5ef35 - Fix variable name typo in the bsdinstall ttys hardening code.

Thu, 20 Sep 2018 16:37:50 +0000

Fix variable name typo in the bsdinstall ttys hardening code.Submitted by: Jörg Pernfuß Reviewed by: allanjude, dab, emasteApproved by: re (gjb)Differential Revision: https://reviews.freebsd.org/D12476 List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

c12530ca - Ignore error return from newaliases(1)

Mon, 11 Sep 2017 17:39:21 +0000

Ignore error return from newaliases(1)This was originally added as "exit $SUCCESS" but with nothing to set theSUCCESS variable. Thus it became an exit with no argument, which justexits with the status of the preceding command.MFC after: 3 daysSponsored by: The FreeBSD Foundation List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

82ec242f - Add option to bsdinstall to disable insecure console, update stack guard option

Wed, 05 Jul 2017 13:37:27 +0000

Add option to bsdinstall to disable insecure console, update stack guard optionThis patch adds new bsdinstall option to hardening section that allows usersto change this behaviour to secure one and updates stack guard option so itwould set the value of relevant sysctl to 512 (2MB)Submitted by: Bartek RutkowskiReviewed by: adrian, bapt, emasteApproved by: bapt, emasteMFC after: 1 daySponsored by: Pixeware LTDDifferential Revision: https://reviews.freebsd.org/D9700 List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

98b9d384 - Fixed bsdinstall location of vfs.zfs.min_auto_ashift

Tue, 20 Jun 2017 08:03:50 +0000

Fixed bsdinstall location of vfs.zfs.min_auto_ashiftvfs.zfs.min_auto_ashift is a sysctl only not a tunable so updated bsdinstallto use the correct location /etc/sysctl.conf instead of /boot/loader.confReported by: Aaron CazaReviewed by: allanjudeMFC after: 2 daysSponsored by: MultiplayDifferential Revision: https://reviews.freebsd.org/D11278 List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

0e3f233f - Add new System Hardening menu and options to bsdinstall.

Fri, 15 Jul 2016 15:07:24 +0000

Add new System Hardening menu and options to bsdinstall.This patch add new 'hardening' file responsible for new bsdinstall'System Hardening' menu allowing users to set some sane and carefullypicked system security options (like random process id's, hidingother users/groups processes and others).All options are OFF by default in this patch due to POLA principlewith intention to turn change some of them to ON by default in future.Reviewed by: adrian, allanjude, bdrewery, nwhitehornApproved by: adrian, allanjudeMFC after: 7 days List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

fef95330 - Update copyrights

Fri, 11 Sep 2015 20:58:00 +0000

Update copyrightsMFC after: 3 daysX-MFC-to: stable/10 List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

ff7b134c - Ignore error results from newaliases(1)

Fri, 11 Sep 2015 20:39:41 +0000

Ignore error results from newaliases(1)MFC after: 3 daysX-MFC-to: stable/10 List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

6e15678a - Add ZFS support to the bsdinstall partition editor and sade.

Sat, 13 Sep 2014 18:24:54 +0000

Add ZFS support to the bsdinstall partition editor and sade.Submitted by: Kurt Lidl (original version)MFC after: 6 weeks List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

a7fb3c62 - Mask error from newaliases(1) when the hostname is not fully qualified.

Mon, 16 Dec 2013 15:52:44 +0000

Mask error from newaliases(1) when the hostname is not fully qualified.MFC after: 3 days List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

cd28e9c5 - I often forget that debugFile can begin with a + for deciding that debug

Fri, 08 Nov 2013 10:19:48 +0000

I often forget that debugFile can begin with a + for deciding that debugshould be sent to both the file (minus the leading +) and stdout. List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

66fd3214 - Copy the install log to the deployed /var/log directory so that we have

Fri, 08 Nov 2013 10:14:32 +0000

Copy the install log to the deployed /var/log directory so that we havepost-mortem data on how the machine was configured/installed. List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

9e513d31 - Semi-revert this one file out of r257842. The ttys(5) stuff, as we

Fri, 08 Nov 2013 10:09:34 +0000

Semi-revert this one file out of r257842. The ttys(5) stuff, as wediscussed on -current, was not supposed to go in but get solved ina different way -- e.g., init(8) logic).Discussed on: -current List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

bc4a673f - A series of changes tested together as a whole:

Fri, 08 Nov 2013 09:57:03 +0000

A series of changes tested together as a whole:+ Add a `-D FILE" command-line option for overriding the path to the bsdinstall log file (BSDINSTALL_LOG env var).+ Document new `-D FILE' in the man page for bsdinstall.+ If FILE in `-D FILE' begins with a +, debug output goes to stdout (interleaved between dialog(1) invocations/output) as well as to FILE (minus the leading + of course).+ If BSDINSTALL_LOG cannot be written, then debugging is disabled (except in the case of a leading + in the pathname, wherein debug will still be printed to stdout).+ Update source code formatting style.+ Fix a dangling participle ("Begun ..." -> "Began ...")+ Rewrite the docsinstall script (was necessary to abate direct dependency on BSDINSTALL_LOG (instead, use fault-tolerant bsdconfig framework which displays appropriate errors for package management).NB: docsinstall is still using pkg(8) after this change.+ Add additional debug output for dhclient/rtsol/wpa_cliscan+ Display script errors in a textbox rather than just on stdout+ Update many coments.+ Add new f_show_err() API call (like f_show_msg but changes the dialog title to "Error")(see bsdconfig's `common.subr').+ Add new f_eval_catch() API call for executing a command via eval but not before logging the command to debug. Several example cases documented in API header for function in bsdconfig's `common.subr'.+ Fix dialog auto-sizing when launched as an rvalue to a pipe for indirected scripts (previously would default to 24x80 sizing in this case, now it can autosize to full size even when in a pipe chain).+ Fix bug in f_snprintf if $format argument began with "-"; printf would misinterpret as a flag. (this is in bsdcofig's `strings.subr').+ Add accompanying f_sprintf() and f_vsprintf() to go along with already existing f_snprintf() and f_vsnprintf() (see bsdconfig's `strings.subr').+ Remove some unnecessary default ZFS datasets from the automatic "zfsboot" script. Such as: /usr/ports/distfiles /usr/ports/packages /usr/obj /var/db /var/empty /var/mail and /var/run (these can all be created as-needed once the system is installed).+ Remove setuid=off for /usr/home (as discussed from last round of CFT).+ Fix some i18n string violations in "zfsboot".+ Bolster debugging output in "zfsboot".+ Fix some string quoting issues in "zfsboot".+ Fix some variable scope issues in "zfsboot".+ Change "Create" to "Install" in "zfsboot" main menu.+ Increase error checking in "zfsboot" (type-check arguments and such).+ Add call to "graid destroy" killing automatic metadata (part of the series of pedantic destructions we do when bootstrapping a new/naked disk).+ Make judicious use of new f_eval_catch() in "zfsboot".+ Fixup some variable names for consistency (zfsboot).+ Fix an underride syntax parameter expansion folly (zfsboot).+ Confirm layout if not explicitly chosen when blindly proceeding (no longer have to touch anything on the ZFS menu if it scares you, just choose the omnibus "Install" option at the top and you'll be prompted to select vdev type and disks in the layout confirmation dialog).+ Change numbered menu items to alphabetic for more efficient navigation.+ Consolidate vdev selection and disk selection into a single stateful menu which performs validation and allows backing out to each previous menu as you go deeper.+ Redesign the ``Last Chance'' dialog (still using the same colors, but make it conform to a tolerable width and make disks appear in a block- quote style indented region).+ Fix a bug wherein we used the a lowercase variable name by accident (actual variable name declared as all-uppercase) at the time of initializing fstab(5) (not believed to cause any issues though).+ Update the geli setup infobox for each provider being initialized (not just at the onset -- since each ``geli init'' causes kernel messages to push our infobox off-screen).Reviewed by: Allan Jude Discussed on: -currentMFC after: 3 days List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config

cd88b886 - Add zfsboot module as an option for automatic configuration. Default is

Fri, 11 Oct 2013 20:41:35 +0000

Add zfsboot module as an option for automatic configuration. Default isto run interactively but it can be scripted too (optinally completelynon-interactive). Currently supports GELI and all ZFS vdev types. Alsoperforms validation on selections/settings providing error messages ifnecessary, explaining (in plain language) what the issue is. Currentlythe auto partitioning of naked disks only supports GPT and MBR (VTOC8pending for sparc64), so is only available for i386/amd64 install.Submitted by: Allan Jude , myselfReviewed by: Allan Jude Approved by: re (glebius) List of files: /freebsd-14.2/usr.sbin/bsdinstall/scripts/config