summaryrefslogtreecommitdiffstats
path: root/etc/rc.d
Commit message (Collapse)AuthorAgeFilesLines
* MFC r318975:delphij2017-05-311-4/+6
| | | | | | | | Tighten /entropy permissions. PR: 219527 Reported by: Lu Tung-Pin <lutungpin at openmailbox.org> Submitted by: jilles
* MFC 317729:n_hibma2017-05-262-6/+6
| | | | | | | Silence sysctl in startup scripts. This makes 'stop' behave consistently with 'start' in the script. Also use $SYSCTL instead of sysctl for consistency within that script.
* MFC r311103, r311907:ian2017-03-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Update ntp.conf to use the ntpd pool feature. Our previous ntp.conf file configured 3 servers from freebsd.pool.ntp.org using 3 separate 'server' config lines. That is now replaced with a single 'pool' line which causes ntpd to add multiple servers from the pool. More than just making the config smaller, the pool feature in ntpd has one major advantage over configuring 3 separate servers from a pool: if a server that was added using a 'pool' statement provides bad time (initially or at some later date), ntpd automatically discards it and configures a new different server from the pool without needing to be restarted. These changes also add a 'tos' line to control how many pool servers get added, a 'restrict source' line that is required to allow ntpd to add new peers from the pool, and it deletes a 'restrict 127.127.1.0' line that does nothing and should never have been there (127.127.1.0 is not a valid IP address, it's a refclock identifier). Add "pool" to the keywords that rc.d/ntpdate examines to find a server address in ntp.conf.
* MFC r307159: Add jail_confwarn="NO" (default YES)dteske2016-12-131-1/+2
| | | | | | Differential Revision: https://reviews.freebsd.org/D7465 Reviewed by: jelischer Sponsored by: FIS Global, Inc.
* MFC r303943: Allow enforce_statfs (see jail(8)) to be set per jaildteske2016-12-131-0/+1
| | | | Reviewed by: jelischer
* MFC r307755: swapoff: Remove only late devices with -aL.jilles2016-11-191-1/+1
| | | | | | | | | | | | | | | Currently, '/etc/rc.d/swaplate stop' removes all swap devices. This can be very slow and may not even be possible if there is a lot of swap space in use. However, removing swap devices is only needed for late swap devices that may depend on daemons that subsequent shutdown steps stop. Normal swap devices such as hard disk partitions will remain available throughout the shutdown process and need not be removed. In swapoff, interpret -aL to remove late swap devices only, and use this in etc/rc.d/swaplate. The meaning of -aL in swapon remains unchanged (add all swap devices, both normal and late). PR: 187081
* MFC r307182,307191,307192: rc.d/zfsbe: new script designed for BE supportavg2016-11-033-1/+73
|
* MFC r307786:bapt2016-10-251-2/+5
| | | | | | | Do not install NIS program rc script if WITHOUT_NIS is set PR: 213375 Submitted by: sergey@akhmatov.ru
* MFC r304779, r304780, r304781, r304782, r304802cy2016-08-271-3/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r304779: Revert r298887 (spelling fix) and remove $FreeBSD$ because text changes to leap-seconds invaldidates validation hash at the end of the file. Remove svn:keywords and replace with fbsd:nokeywords=yes to support this change. r304780: Change the algorithm by which /var/db/leap-seconds is updated. 1. Use the leap-seconds version number (update time) to determine whether to update the file or not. 2. If the version numbers of the files is the same, use the later expiry date to determine which file to use. Suggested by: ian@ r304781: Add logic to replace the working ntp leap-seconds file in /var/db if it contains a $FreeBSD$ header. The header will cause the file to fail checksum of the hash causing ntpd to ignore the file. r304782: Make validation of the leap-seconds file unconditional. r304802: Remove the gratuitous check for $FreeBSD$ and rename the function to ntpd_init_leapfile, to ensure a copy exists in /var/db if a copy isn't already there. Reported by: ache@
* MFH (r303716, r303719): drop SSH1 support, disable DSA by defaultdes2016-08-051-1/+1
| | | | | | PR: 208254 Approved by: re (gjb) Relnotes: yes
* MFC r302857:jamie2016-07-171-3/+6
| | | | | | | | Start jails non-parallel if jail_parallel_start is NO. This was true for an explicitly specified jail list; now it's also true for all jails. PR: 209112 Approved by: re (gjb)
* MFC r302855:jamie2016-07-171-15/+16
| | | | | | | | | Wait for jails to complete startup if jail_parallel_start is YES, instead of assuming they'll take less than one second. PR: 203172 Submitted by: dmitry2004@yandex.ru Approved by: re (gjb)
* Separate BLACKLIST vs BLACKLIST_SUPPORT properlylidl2016-06-071-1/+1
| | | | Sponsored by: The FreeBSD Foundation
* Connect ypldap(8) script on Makefile, forgotten on my previous commit r301480.araujo2016-06-061-0/+1
|
* Add rc.d script for ypldap(8).araujo2016-06-061-0/+27
|
* Add basic blacklist build supportlidl2016-06-022-0/+50
| | | | | | | | Reviewed by: rpaulo Approved by: rpaulo Relnotes: YES Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D5913
* Fix exit status of "service routing start <af> <iface>"asomers2016-06-021-0/+5
| | | | | | | | | | | etc/rc.d/routing Ignore the exit status of options_{inet,inet6,atm}. It's meaningless. Reviewed by: hrs MFC after: 4 weeks Sponsored by: Spectra Logic Corp Differential Revision: https://reviews.freebsd.org/D6687
* Fix indentation in dhclient rc.d scriptvangyzen2016-05-311-1/+1
|
* Cosmetics: add missing space after the ':' in etc/rc.d/random.trasz2016-05-311-2/+2
| | | | | MFC after: 1 month Sponsored by: The FreeBSD Foundation
* Fix circular dependency created after r287197 between ldconfig and ↵ngie2016-05-302-4/+14
| | | | | | | | | | | | | | | | | | | mountcritremote ldconfig is already required by mountcritremote indirectly, as noted by rcorder: > rcorder: Circular dependency on provision `mountcritremote' in file `ldconfig'. Having mountcritremote REQUIRE ldconfig breaks dependency ordering. Making the ldconfig hints be conditionally regenerated from mountcritremote when remote filesystems are mounted is done after this change, similar to cleanvar being conditionally called after the change. Differential Revision: https://reviews.freebsd.org/D6621 PR: 202726 Reviewed by: jilles Sponsored by: EMC / Isilon Storage Division
* Make netif REQUIRE hostidngie2016-05-291-1/+1
| | | | | | | | | | | | | As noted in the PR, if etc/rc.d/zvol is removed, netif will be run before hostid, and the MAC address generated for any bridge devices will be non-deterministic. Make the MAC address generated be deterministic for bridge devices by explicitly REQUIRE'ing hostid. This fixes up the rest of the PR, inadvertently committed in r299844 MFC after: 1 week PR: 195188 Sponsored by: EMC / Isilon Storage Division
* zfsd(8), the ZFS fault management daemonasomers2016-05-282-1/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add zfsd, which deals with hard drive faults in ZFS pools. It manages hotspares and replements in drive slots that publish physical paths. cddl/usr.sbin/zfsd Add zfsd(8) and its unit tests cddl/usr.sbin/Makefile Add zfsd to the build lib/libdevdctl A C++ library that helps devd clients process events lib/Makefile share/mk/bsd.libnames.mk share/mk/src.libnames.mk Add libdevdctl to the build. It's a private library, unusable by out-of-tree software. etc/defaults/rc.conf By default, set zfsd_enable to NO etc/mtree/BSD.include.dist Add a directory for libdevdctl's include files etc/mtree/BSD.tests.dist Add a directory for zfsd's unit tests etc/mtree/BSD.var.dist Add /var/db/zfsd/cases, where zfsd stores case files while it's shut down. etc/rc.d/Makefile etc/rc.d/zfsd Add zfsd's rc script sys/cddl/contrib/opensolaris/uts/common/fs/zfs/vdev.c Fix the resource.fs.zfs.statechange message. It had a number of problems: It was only being emitted on a transition to the HEALTHY state. That made it impossible for zfsd to take actions based on drives getting sicker. It compared the new state to vdev_prevstate, which is the state that the vdev had the last time it was opened. That doesn't make sense, because a vdev can change state multiple times without being reopened. vdev_set_state contains logic that will change the device's new state based on various conditions. However, the statechange event was being posted _before_ that logic took effect. Now it's being posted after. Submitted by: gibbs, asomers, mav, allanjude Reviewed by: mav, delphij Relnotes: yes Sponsored by: Spectra Logic Corp, iX Systems Differential Revision: https://reviews.freebsd.org/D6564
* Always create loopback routes on every fibasomers2016-05-271-10/+26
| | | | | | | | | | | | | | | | | | | | | | | | Always create loopback routes on every fib, for both IPv4 and IPv6 etc/rc.d/routing Create loopback IPv4 and IPv6 routes on every fib at boot. Revert 278302; now that all FIBs have IPv6 loopback routes, the "route add -reject" commands won't fail. tests/etc/rc.d/routing_test.sh Greatly simplify static_ipv6_loopback_route_for_each_fib. It was written under the assumption that loopback routes would be added to a given fib by the kernel as soon as an interface is configured on that fib. However, the logic can be much simpler now that we simply add loopback routes to all fibs at boot. This also removes the need to run the test as root, removes the restriction that net.add_addr_allfibs=0, and removes the need to configure fibs in kyua.conf. Also, add a test case for IPv4 loopback routes Sponsored by: Spectra Logic Corp Differential Revision: https://reviews.freebsd.org/D6582
* Use the expiry date to determine whether to replace the DB copy ofcy2016-05-251-2/+2
| | | | | | | | leapfile instead of using the leapfile serial number (create timestamp). PR: 209577 MFC after: 3 days
* Make hostid_save depend on hostidngie2016-05-151-1/+1
| | | | | MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
* Fix broken dependency with routed when MK_ROUTED != nongie2016-05-152-1/+2
| | | | | | | | Remove routed as a requirement in NETWORKING, and put it in routed as a BEFORE requirement instead MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
* Conditionalize installing etc/rc.d/atm{1,2,3}ngie2016-05-152-4/+9
| | | | | | | | `BEFORE: netif` was already in etc/rc.d/atm1, so no additional changes are needed in that script MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
* Conditionalize etc/rc.d/{zfs,zvol} install on MK_ZFS != nongie2016-05-151-2/+7
| | | | | MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
* Make FILESYSTEMS, dumpon, and var not depend on zfs and zvolngie2016-05-155-3/+4
| | | | | | | | Make zfs and zvol come before all of the items that depended on them previously MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
* Reduce redundancy after release-pkg merge to head in r298107ngie2016-05-151-38/+17
| | | | | | | | | | - Use BINDIR instead of FILESDIR - Default all <FILESGROUPS>MODEs to BINMODE with a single for-loop at the bottom of the Makefile - Move all of the conditionals under the relevant MK_* != no build conditional blocks Sponsored by: EMC / Isilon Storage Division
* Refactor the root mount hold code and add the wait to etc/rc.d/fsck.trasz2016-05-102-28/+17
| | | | | | | | | | | This fixes mounting (non-root) USB drives on boot with fsck enabled (with non-zero 'Pass#' field in fstab(5)). Reported by: Graham Menhennitt <graham at menhennitt.com.au> Reviewed by: jilles@ MFC after: 1 month Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D6221
* Only install etc/rc.d/{rfcomm_pppd_server,sdpd} if MK_BLUETOOTH != nongie2016-05-061-2/+2
| | | | | | | These are bluetooth specific services MFC after: 1 week Sponsored by: EMC / Isilon Storage Division
* etc: minor spelling fixes.pfg2016-05-011-2/+2
| | | | | | Mostly comments but these tend to be user-visible. MFC after: 2 weeks
* Fix incorrect permissions for /etc/rc.d/sendmail in fallout frompeter2016-04-301-1/+1
| | | | release-pkg merge.
* Make SERVERS REQUIRE clean when MK_KERBEROS==nongie2016-04-302-1/+2
| | | | | | | | | Make kdc run BEFORE SERVERS instead of being REQUIREd by SERVERS, so systems that pedantically check REQUIREs function after r270782 MFC after: 1 week X-MFC with: r270782 Sponsored by: EMC / Isilon Storage Division
* Add a savecore_enable variable support for the savecore rc scriptbapt2016-04-291-0/+1
| | | | | | | | By default set to 'YES' so it does not change the current behaviour for users, this variable allows to decide to not extract crach dumps from the dump device at boot time by setting it to "NO" in rc.conf. Sponsored by: Gandi.net
* Fix duplicate "name" variable that sneaked in with the rc description commit.lme2016-04-241-1/+1
| | | | Approved by: jhibbits
* Fix typo (forgotten "=" after desc).se2016-04-241-1/+1
|
* Cosmetics: - no need to escape the newline after '|'schweikh2016-04-241-4/+4
| | | | | - parenthesize the "case" string for symmetry and improved search for matching paren (e.g. with vi's %)
* Don't remove the /var/run/jail_name.id file if a jail fails to start.jamie2016-04-231-2/+0
| | | | | | | | | This messes up ezjail (and possibly others), when attempting to start a jail that already exists. PR: 208806 Reviewed by: tj MFC after: 5 days
* - Add descriptions to most of the rc scripts. Those are mostly taken from theirlme2016-04-23140-8/+145
| | | | | | | | daemon's manpage and probably improved. - Consistently use "filesystem" not "file system". Approved by: bapt, brueffer Differential Revision: D452
* Remove mroute6d rc scriptbapt2016-04-233-20/+1
| | | | | | | It is directly available via ports (pim6dd which provides the needed rc script) Reported by: lme Sponsored by: Essen Hackathon 2016
* Turn ssh_host_dsa_key back on until PR#208254 is taken care of.peter2016-04-171-1/+1
|
* MFHgjb2016-04-042-6/+22
|\ | | | | | | Sponsored by: The FreeBSD Foundation
| * pf: Friendly error message for status if pf.ko is not loadedkp2016-03-271-1/+5
| | | | | | | | | | | | | | | | | | Check if pf.ko is loaded (i.e. /dev/pf exists) before trying to use it. This means that '/etc/rc.d/pf status' will no longer return 'pfctl: /dev/pf: No such file or directory' but 'pf.ko is not loaded'. PR: 205671 Submitted by: Johannes Jost Meixner <xmj@FreeBSD.org>
| * rc.d: Make msgs a proper rc.d script.jilles2016-03-271-5/+17
| | | | | | | | | | PR: 207149 Reported by: Jonathan de Boyne Pollard
* | MFHgjb2016-03-141-1/+1
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Require firewall setup before running rc.d/netwait, otherwise the pingian2016-03-131-1/+1
| | | | | | | | | | | | | | packets sent by netwait may not get through. PR: 207916 Submitted by: John.Marshall@riverwillow.com.au (ipfw), ian@ (pf, ipfilter)
* | MFHgjb2016-03-101-0/+5
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Load linux64 module for amd64 if Linux abi enabled.dchagin2016-03-081-0/+5
| | | | | | | | | | | | Reviewed by: emaste@ MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D5567
OpenPOWER on IntegriCloud