Commit Graph

2115 Commits

Author SHA1 Message Date
Michael Shigorin
2776e07dbd QUICKSTART: tweaked a tiny bit
~/.gitconfig is only relevant when git-core is installed,
no need to put it as a standalone item (turned up when
discussing things with cas@ on the way from #OSEDUCONF).
2016-02-10 15:11:51 +03:00
Michael Shigorin
1c23cf0e7f regular.mk: lock down jeos-ovz as per ldv@'s advice
This is a set of control(8) non-defaults that's recommended
for use with servers of significant security requirements.
2016-02-10 15:11:46 +03:00
Michael Shigorin
1e39ab3a30 control: added some actual ldv@'s settings
As noted in the comment, these include a few quite strong ones:
- sshd(8) will only allow in "wheel" and "users" members
  by keys, no password access is allowed;
- password change even by root is subject to quality checks;
- su(8) is only useful to lower privileges and not gain those
  (so root access is available either through local console
  or via use of ssh keys).

Don't use if frowned upon.
2016-02-10 15:11:41 +03:00
Michael Shigorin
fd0fb5f137 regular.mk: refactored jeos, added jeos-ovz
We've been pruning quite a few packages from a recently installed
altlinux-p7-server-ovz instance; looks like server-ovz's added
functionality should go into plain server instead, and -ovz flavour
should focus on bare metal HN.

In particular, bash-completion-1.99-alt3 seems to misbehave with
mount(8) at the very least -- better drop it for now.
2016-02-10 15:11:33 +03:00
Michael Shigorin
0717417e11 cleanup: add jeos targets
This is based on distro/regular-jeos but torn into two
and somewhat updated for sisyphus-going-to-bring-p8:
1) libcap-ng is now required by util-linux;
2) bridge-utils might be needed for subsequent images.
2016-02-10 15:11:24 +03:00
Michael Shigorin
b1005e5146 ovz-server: split into tagged/{base,server}+openvz
Those packages which are *required* should be available
for standalone use; and those which are optional should go
into extras.

Adjust server feature accordingly.
2016-02-10 15:11:18 +03:00
Michael Shigorin
e208d97f5a gear-store-tags 2016-02-08 23:05:21 +03:00
Michael Shigorin
9ecb784b07 1.1.84-alt1
- %name(7) :)
2016-02-08 23:04:27 +03:00
Michael Shigorin
a40a07253e image.in: cosmetic fix
Bring the stage/step prefix into line for those greppin' through.
2016-02-08 22:52:05 +03:00
Michael Shigorin
094cc85927 spec: install the manpage
%install wants a proper makefile target badly by now...
2016-02-08 22:51:58 +03:00
Michael Shigorin
93f9a2080a doc: added mkimage-profiles(7)
This initial page might lack a lot, don't be shy to blame me!
(thanks ldv@ for having skimmed it through though)
2016-02-08 22:51:55 +03:00
Michael Shigorin
f197b9714c firmware: a trivial tracing fixup
The issue with these "; @:" thinglets is that mkimage-profiles
relies on target tracing (see commit 788cad8 some four years ago);
and this tracing approach relies on non-empty recipes which do call
shell (which gets (ab)used) unlike empty ones which oviously don't.

So this _will_ be traced properly:

    a: b
	@echo "hello world"

and this will too:

    a: b; @:

but this will result in a broken graph with REPORT=1:

    a: b
2016-02-05 09:19:43 +03:00
Michael Shigorin
32e77dc97b regular.mk: added mdadm
...just in case a minimalistic server system
is needed on an actual bare metal host...
2016-02-05 09:19:33 +03:00
Michael Shigorin
7017d1ef16 desktop+lxqt+extra: added KF5 translations
kf5-i18-ru, in this case (of course this should be handled
by a proper l10n subsystem -- yet another use case for it,
just not clear what exactly do we want).
2016-02-03 17:36:32 +03:00
Michael Shigorin
647294f40a x11: tweak kde5 target
icon-theme-oxygen is required by kf5-oxygen <- kde5 <- kde5-big
by now so it's not needed to specify it explicitly anymore;
and zerg@ has just packaged some translations, let's jump in!
2016-02-03 17:34:55 +03:00
Michael Shigorin
a0058e54d4 gear-store-tags 2016-01-25 23:10:19 +03:00
Michael Shigorin
f6d5370e3a 1.1.83-alt1
- openssh 7.x (see also #31716)
2016-01-25 23:04:41 +03:00
Michael Shigorin
4de3463b81 rescue: relax OpenSSH 7 key/algo restrictions
Apparently DH SHA1 key exchange algorithm is still in wide
use at least within Cisco products (there's a real world
case involving our user), and some still use DSA keys
which might be longer than "allowed" yet not trusted anymore.

See also:
http://www.openssh.com/legacy.html
http://bugzilla.altlinux.org/31716
http://altlinux.org/changes (Jan 2016; RU)
2016-01-25 23:04:27 +03:00
Michael Shigorin
ee590934b4 desktop+gnustep: dropped FTBFS packages
These got removed from sisyphus
by cas@' task #156038
due to build failure.
2016-01-19 16:03:19 +03:00
Michael Shigorin
83c2df00a9 desktop+gnustep{,+etoile}: dropped FTBFS packages
These get removed from sisyphus
by sem@'s task #156063
due to build failure.
2016-01-19 16:01:03 +03:00
Michael Shigorin
929fb2f333 live: improve README regarding variables
It's been an old intent to add/move feature-specific
variable documentation into the features themselves,
this might be a pilot project. :-)
2016-01-16 18:45:33 +03:00
Michael Shigorin
1fd6e2d342 {base,desktop}+regular: commoditize smartmontools
Thanks ldv@ for having wondered aloud about
why server starterkits lack smartctl(8);
which is a shame indeed.
2016-01-14 20:23:07 +03:00
Michael Shigorin
37e77285cd stage2: tweak 99-cleanup-boot for efficiency
Thanks glebfm@ for noticing that Simply (an m-p-d product)
takes no kernel inside squashfs but relies on livecd-install's
50-restore-kernel.sh hook to copy the kernel from iso9660
and regenerate initrd (which is a must anyways but requires
System.map to be still around).

This saves about 3 Mb in ISO size for a LiveCD using
kernel-image-std-def-4.1.15-alt1.x86_64.rpm.
2016-01-12 20:10:37 +03:00
Michael Shigorin
837e6be9a7 gear-store-tags 2016-01-11 21:22:53 +03:00
Michael Shigorin
8d3dc12a9a 1.1.82-alt1
- firmwarez
2016-01-11 21:03:13 +03:00
Michael Shigorin
ce544b034e pkg.in/lists: updated server-ovz ones
Got a chance to have a look at your pkglists with ldv@
while setting up a new server? :)

-freeipmi-doc
-mkve
+postfix-tls
+traceroute
2016-01-11 20:57:30 +03:00
Michael Shigorin
97eee80f27 style.txt: avoid merge commits!
Merge commits aren't going to be merged upstream
for these break all sorts of git tools including
log -p, blame, bisect, etc (or make their use less
convenient).
2016-01-10 13:34:36 +03:00
Michael Shigorin
41d2644ebe style.txt: slightly better call for documenting
Sometimes we tend to "just" translate the code to human
which doesn't really help; what usually helps is noting
down what the code author intended to implement or fix,
and what was the case for that.
2016-01-10 13:31:38 +03:00
Michael Shigorin
3b3cf4cc93 QUICKSTART, mktmpdir, build.mk: hasher's /proc
Either /etc/hasher-priv/system or /etc/hasher-priv/user.d/$USER
must contain at least "allowed_mountpoints=/proc" for mkimage
to work for mkimage-profiles; thanks Daniil Golovanov for
providing feedback indicating the lack of the corresponding
checks.
2016-01-10 13:08:03 +03:00
Michael Shigorin
4dfc4417b7 rescue+extra: added jmtpfs
This one is useful for dealing with MTP-compatible
Android devices.
2016-01-03 18:29:08 +03:00
Michael Shigorin
ca8fbf4d04 regular.mk: add qlogic firmware to rescue too
This should have been committed yesterday
(or a year ago, better yet).
2015-12-24 12:07:47 +03:00
Michael Shigorin
0206553ab7 regular.mk: add qlogic firmware to server images
This might go to server-mini but should hit server-ovz as well...
oh well.
2015-12-23 20:34:46 +03:00
Michael Shigorin
1335e4cfd3 firmware: added qlogic target
This has been (tangentially) requested for HP blades:
http://forum.altlinux.org/index.php?topic=36122.0
2015-12-23 20:31:50 +03:00
Michael Shigorin
9758417d42 desktop+sane: added gscan2pdf
Thanks Jeffrey Ratcliffe for reminder:
http://lists.alioth.debian.org/pipermail/sane-devel/2015-December/034185.html
2015-12-15 00:37:43 +03:00
Michael Shigorin
de513c9f3a regular.mk: added a few more benchmarks
unixbench might still come handy, and stream-mem is better
custom-tailored for the task but still beta than nothin'.
2015-12-10 00:46:28 +03:00
Michael Shigorin
0fb879e0f2 base+bench, bench+x11: initial pkglists
These have been partially inspired by inquisitor's
build/altlinux/profile.live/packages collection of
more or less benchmarks/burn-in tools.

Those requiring libX11 won't hit regular-rescue.iso
so let's put them on a file of their own.

And while at that, there are a couple of MPI/IB
benchmarking tools as well.
2015-12-10 00:45:40 +03:00
Michael Shigorin
2b9e2f1a2b security+extra: added hashcat
It's been added to both sisyphus and p7/t7, so why not? :)
2015-12-08 19:05:35 +03:00
Michael Shigorin
4a88029366 gear-store-tags 2015-12-07 21:20:43 +03:00
Michael Shigorin
2784e38b96 1.1.81-alt1
- regular fixes
2015-12-07 20:51:45 +03:00
Michael Shigorin
5fad0e3d95 live.mk: added pciutils to game livecds
distro/.live-games really lacked this for a *long* time,
and asking people for what's their hardware given the
abscence of tools is wrong.
2015-12-07 16:42:10 +03:00
Michael Shigorin
9e03dee41c conf.d/README: be more concise
THE_KMODULES isn't referencing the actual *.ko files
but rather kernel-modules-* packages; it was a bit too
verbose to name *_KMODULES as *_KMODULE_PACKAGES even
if it was more self-explanatory of course, but still
we've got the first victim to that ambiguity.
2015-12-05 22:12:01 +03:00
Michael Shigorin
b50d011ad0 regular.mk: a few netsec tools to the rescue
This one has been triggered by a macchange NMU
speeding through sisyphus-cybertalk@...
2015-12-05 13:32:38 +03:00
Michael Shigorin
457c00b823 stage2, lowmem: update cleanup hooks for qt5
There's /usr/share/qt5/translations/ now too, handle that.

OTOH we've got some CJK support already, time to split up
those "cleanups" into some target locale set dependent form.
2015-12-04 20:58:32 +03:00
Michael Shigorin
5147dd43d8 xorg+misc: drop xorg-drv-multimedia
Not available as of xorg 1.18.0.
2015-12-04 20:07:28 +03:00
Michael Shigorin
d89aefd6b7 base+rescue: added acl
This is a tiny "trivial" package that's useful at times.
2015-12-04 15:55:06 +03:00
Michael Shigorin
efa2b9c8b3 regular.mk, regular+kde4: rosa-imagewriter use extended
It's been proposed to add an image writing tool to all of
the desktop regular builds (which is reasonable).

rosa-imagewriter depends on qt5 that's currently found in
lxqt, kde4 and kde5 flavours only so let's put it there.

imagewriter (the openSUSE's original one) goes to the rest of
DE builds: xdg-su would fallback to gksu if none of the desktops
got "detected", and that means several more megabytes of crap
(completely unneeded in WM-based images I think).
2015-12-04 15:38:08 +03:00
Aleksey Avdeev
58254f05eb install2: Add xorg-drv-vboxvideo
Signed-off-by: Aleksey Avdeev <avdeev@pkcc-tb.ru>
2015-12-03 19:42:46 +03:00
Michael Shigorin
72156f9334 gear-store-tags 2015-11-30 23:44:49 +03:00
Michael Shigorin
08c59ff030 1.1.80-alt1
- pre-starterkit cleanups
2015-11-30 23:44:15 +03:00
Michael Shigorin
12454d7d24 regular+server: add screen
It's been REALLY lacking in server starterkits as of 20150912.
2015-11-30 23:12:21 +03:00