| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
Require firewall setup before running rc.d/netwait, otherwise the ping
packets sent by netwait may not get through.
PR: 207916
Approved by: re (marius)
|
|
|
|
|
|
|
|
| |
MFC r296542: Load linux64 module for amd64 if Linux abi enabled.
Reviewed by: emaste@
Approved by: re (marius)
Differential Revision: https://reviews.freebsd.org/D5567
|
|
|
|
|
|
| |
PR: 207095
Submitted by: madpilot
Approved by: re (marius)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
ntp leap-leapseconds support.
r289421:
Add default leap-seconds file. This should help ntp networks get the
leap second date correct
Updates to the file can be obtained from ftp://time.nist.gov/pub/ or
ftp://tycho.usno.navy.mil/pub/ntp/.
r293037:
Update leap-seconds to latest. This will satisfy the ntpd leap-second
version check.
r294773:
Add support for automatic leap-second file updates.
The working copy of leapfile resides in /var/dbntpd.leap-seconds.list.
/etc/ntp/leap-seconds (periodically updated from ftp://time.nist.gov/pub/
or ftp://tycho.usno.navy.mil/pub/ntp/) contains the master copy should
automatic leapfile updates be disabled (default).
Automatic leapfile updates are fetched from $ntp_leapfile_sources,
defaulting to https://www.ietf.org/timezones/data/leap-seconds.list,
within $ntp_leapfile_expiry_days (default 30 days) from leap-seconds
file expiry. Automatic updates can be enabled by setting
$daily_ntpd_leapfile_enable="YES" in periodic.conf. To avoid congesting
the ntp leapfile source the automatic update randomized by default but
can be disabled through daily_ntpd_avoid_congestion="NO" in
periodic.conf.
r294884:
Allow specification of fetch options for ntp leap-seconds fetch.
Approved by: re (gjb)
|
|
|
|
|
|
|
|
| |
Allow the (old rc-style) exec_afterstart jail parameters to start numbering
at 0, like exec_prestart and the others do. Make param0 optional, i.e.
still look for param1.
PR: 142973
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Enhance rc.d/netwait script to wait for late-attaching interfaces such as
USB NICs.
USB network hardware may not be enumerated and available when the rc.d
networking scripts run. Eventually the USB attachment completes and devd
events cause the network initialization to happen, but by then other rc.d
scripts have already failed, because services which depend on NETWORKING
(such as mountcritremote) may end up running before the network is actually
ready.
There is an existing netwait script, but because it is dependent on
NETWORKING it runs too late to prevent failure of some other rc
scripts. This change flips the order so that NETWORKING depends on netwait,
and netwait now depends on devd and routing (the former is needed to make
interfaces appear, and the latter is needed to run the ping tests in
netwait).
The netwait script used to be oriented primarily towards "as soon as any
host is reachable the network is fully functional", so you gave it a list of
IPs to try and you could optionally name an interface and it would wait for
carrier on that interface. That functionality still works the same, but now
you can provide a list of interfaces to wait for and it waits until each one
of them is available. The ping logic still completes as soon as the first IP
on the list responds.
These changes were submitted by Brenden Molloy <brendan+freebsd@bbqsrc.net>
in PR 205186, and lightly modified by me to allow a list of interfaces
instead of just one.
PR: 205186
Relnotes: yes
|
|
|
|
| |
Fix a conversion error in rc.d/jail
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Let old-style (shell-based) jail configuration handle jail names that
contain characters not allowed in a shell variable (such as "-").
These will be replaced by an underscore in jail config variables,
e.g. for jail "foo-bar" you would set "jail_foo_bar_hostname".
This is separate from the current code that changes the jail names
if they contain "." or "/". It also doesn't apply to jails defined
in a jail.conf file.
PR: 191181
|
|
|
|
|
|
|
|
| |
Add support for the new "-manage-gids" option for the nfsuserd daemon
to the rc scripts. With these changes, setting nfs_server_managegids="YES"
in /etc/rc.conf will enable this capability.
Relnotes: yes
|
|
|
|
|
|
|
|
| |
MFH (r283301, r289592, r291582): rc script improvements
MFH (r287880): respect manually configured forwarders when using DHCP
MFH (r289321): deconfuse man page
PR: 184047 203580 204931
|
|
|
|
|
| |
PR: base/189696
Submitted by: ganael.laplanche@martymac.org
|
| |
|
|
|
|
|
|
|
| |
The "automount" rc script should depend on "automountd", not the other
way around.
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
When stopping ugidfw, it is not enough to just try unloading the module. If
the module is built-in to the kernel then the kldunload will fail. Rather
than do this just check if there are rules and then remove them all.
Relnotes: yes
|
|
|
|
| |
Use read to parse a line instead of set.
|
|
|
|
|
| |
- Add uid check.
- Report delay<0 as a warning.
|
|
|
|
|
|
|
| |
Update only static routes when an interface is specified. This fixed
a bad side-effect reported in PR 202144.
PR: 202144
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bug fixes and feature adds
- Remove extranious echo that breaks puppet
- Handle restarts of multiple pflog devices correctly
- Add the ability to perform actions on specific pflog devices.
Typo Fix.
PR: 199150
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
r271893:
Don't install /etc/rc.d/rwho unless MK_RCMDS == yes
Sponsored by: EMC / Isilon Storage Division
r271895:
Don't install /etc/rc.d/ftp-proxy unless MK_PF == yes
Sponsored by: EMC / Isilon Storage Division
r272043:
Don't install /etc/rc.d/keyserv unless MK_OPENSSL == yes
Sponsored by: EMC / Isilon Storage Division
r278249:
Honor the following flags with the following rc.d scripts for services that can
be easily decoupled from the boot process without disrupting other services
- MK_APM && MK_ACPI: powerd
- MK_BOOTPARAMD: bootparams
- MK_FTP: ftpd
- MK_INETD: inetd
- MK_LEGACY_CONSOLE: moused, syscons
- MK_MAIL: othermta
- MK_NS_CACHING: nscd
- MK_NTP: ntpd (ntpdate is required by other services and can't be easily
conditionalized -- yet..)
- MK_ROUTED: routed
- MK_SENDMAIL: sendmail
- MK_TIMED: timed
- MK_VI: virecover
Sponsored by: EMC / Isilon Storage Division
r278282:
Use FILES+= idiom instead of _inetd when referencing inetd rc.d script
This was a discrepancy between ^/projects/building-blocks and ^/head that I
didn't resolve before committing the change to ^/head
Pointyhat to: me
Reported by: jhb
Sponsored by: EMC / Isilon Storage Division
r278466:
Remove explicit routing/sendmail rc.d inclusion in FILES
Reported by: Guy Yur <guyyur@gmail.com>
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
| |
Unbreak rcorder when MK_UNBOUND == no by moving local_unbound from REQUIRE:
in NETWORKING to BEFORE: in the script
|
|
|
|
|
|
| |
LOGIN to
BEFORE: in utx
|
|
|
|
|
|
| |
Do not try to create a /dev/log symlink in a jail.
PR: 179828
|
|
|
|
|
|
|
|
| |
r277678:
Add MK_CCD knob for building and installing ccd(4), ccdconfig, etc
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
| |
Don't add static IPv6 routes when to all FIBs when
net.add_addr_allfibs is 0.
|
| |
|
|
|
|
|
|
|
|
| |
r277736:
Honor MK_ACCT with etc/rc.d/accounting
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
| |
r277741:
Respect MK_KERBEROS with etc/rc.d/ipropd_master and etc/rc.d/ipropd_slave
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
| |
r277728:
Add MK_AUTOFS knob for building and installing autofs(4), et al
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
| |
r277725:
Add MK_HAST knob for building and installing hastd(8), et al
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
r277675:
Add MK_ISCSI knob for building the iscsi initiator, iscsi daemon, kernel
modules, etc
Sponsored by: EMC / Isilon Storage Division
r277726:
Build sbin/iscontrol again if MK_ISCSI != no
Pointyhat to: me
r278070:
Remove duplicate MK_ISCSI block and sort the conditional blocks so this error
won't crop up again in the future
Reported by: gjb
|
|
|
|
|
|
|
|
|
| |
ipfilter 5.1.2 (vs 4.1.28 in previous releases of FreeBSD) stores IPv4
and IPv6 rules in a single table. ipf -6 -Fa will flush the whole table,
including IPv4 rules. This patch removes the redundant ipf -I -6 -Fa
statement.
PR: 188318
|
|
|
|
|
|
|
|
|
| |
Add mount.procfs jail parameter, so procfs can be mounted when a prison's
root is in its fstab.
Also fix a typo while I'm at it.
PR: 197237 197066
|
|
|
|
|
|
|
|
| |
r277730:
Honor MK_ACPI in etc/devd and etc/rc.d
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
r277740:
Honor MK_WIRELESS with etc/rc.d/hostapd and etc/rc.d/wpa_supplicant
Sponsored by: EMC / Isilon Storage Division
r278053:
Remove hostapd and wpa_supplicant from FILES so they're installed conditionally
if MK_WIRELESS != no
|
|
|
|
|
|
|
|
| |
r277733:
Honor MK_AMD with etc/rc.d/amd
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
| |
r277732:
Honor MK_API in etc/rc.d
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
r277731:
Honor MK_LPR with etc/rc.d/lpd
Sponsored by: EMC / Isilon Storage Division
r277734:
Remove explicit inclusion of lpd from FILES
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
| |
r277739:
Honor MK_JAIL with etc/rc.d/jail
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
r277686:
Install bsnmp rc.d script if MK_BSNMP != no
Sponsored by: EMC / Isilon Storage Division
r277687:
Fill in entries for MK_BSNMP == no
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
| |
r271892 (by ngie):
Sort the optional rc.d scripts by their knobs
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
| |
Make it possible to specify flags for autofs daemons in rc.conf.
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
Add support for multiple instances of ftp-proxy
and pflog devices.
PR: conf/158171
Submitted by: Thomas Johnson <tom@claimlynx.com>
|
|
|
|
|
| |
- Honer MK_KERBEROS for Heimdal rc.d scripts.
- Add rc.c/kerberos to OLD_FILES.
|
|
|
|
| |
Fix a typo; master server for iprop service should be singular.
|
|
|
|
|
| |
Fix a bug which prevented mount.fstab parameter from being converted
when jail_JID_devfs_enable=NO.
|
|
|
|
| |
Use ipv6_prefer when at least one ifconfig_IF_ipv6 is configured.
|
|
|
|
|
| |
Return false status only when adding a route is failed. It could
erroneously return false due to an afexists() check loop in routing_start().
|