Commit Graph

637 Commits

Author SHA1 Message Date
Michael Shigorin
a11384edc1 browser: add use/browser/firefox/h264
These packages have been suggested by mvk@ to enable H.264 support
when no flash plugin is shipped (most likely for security reasons).
2016-03-10 18:55:57 +03:00
Michael Shigorin
e4384c1c42 net-eth: bumped DHCP_TIMEOUT from 3 to 7
This has been requested by Balbes so as to avoid premature
DHCP timeouts with some gigabit networks; see also
http://forum.altlinux.org/index.php?topic=36495.msg281385#msg281385
2016-03-09 18:24:58 +03:00
2271b03445 add use/net-eth/networkd 2016-03-02 07:38:58 +03:00
Michael Shigorin
5ea3f714aa net-eth: systemd-networkd configuration support
shaba@ asked if it's feasible to extend 50-net-eth
with a generator for systemd-networkd style configs
having provided examples; here it is (depends on
/etc/systemd/network/ being packaged into that one).

(fixed up by shaba@'s removal of superfluous quotes)
2016-03-02 07:38:47 +03:00
43b8835922 add qemu-guest-agent to vmguest kvm 2016-03-02 07:28:21 +03:00
ad4bffe965 enable service network for etcnet and NM, not for systemd-networkd 2016-03-02 07:20:22 +03:00
Michael Shigorin
b5900acbe3 slinux: use lightdm and installer fonts
gdm2.20 seems rather obsolete by now, let's move on;
and m-p doesn't just lump a huge bunch of stuff in,
vector fonts for installer are requested explicitly.
2016-02-29 21:49:33 +03:00
Michael Shigorin
6047c71440 simply.mk, slinux: optimize for reuse
...by moving reference to a package list that *deducts*
packages from a feature (that should lend itself for reuse)
to a particular distribution's configuration (that can have
some specific polish).

The problem was that basing junior on slinux feature while
adding some KDE/Qt-based packages to it failed miserably
in a hard-to-debug manner: adding every package that's been
requested but not installed by hand suddenly made it build,
see also http://altlinux.org/mkimage/debug [ru]
2016-02-29 21:49:06 +03:00
Michael Shigorin
89f894485c browser: upgrade Java 6 to Java 7
...and Sun JDK to OpenJDK (thx cas@).
2016-02-28 22:23:02 +03:00
Michael Shigorin
935d250834 desktop.mk, fonts, install2: explicit installer fonts
mixin/desktop-installer became *quite* inobvious
even for me over time, and it's not easy to grep up;
let's introduce explicit targets where one is expected
to expect those.
2016-02-10 18:01:33 +03:00
Michael Shigorin
47ffa675d4 install2: cosmetic fix
(missing space)
2016-02-10 15:12:06 +03:00
Michael Shigorin
8ce8ce89cf control: install2 support
rootfs scripts should hit installer some day; the problem
is with variables (dumping 'em wholesale looks dirty,
and proxying those sort of defeats the approach)
rather than with scripts.

Until then, transform the data from the single variable
into a file containing one facility per line for
installer-1.8.31+ to consume.
2016-02-10 15:12:00 +03:00
Michael Shigorin
1e39ab3a30 control: added some actual ldv@'s settings
As noted in the comment, these include a few quite strong ones:
- sshd(8) will only allow in "wheel" and "users" members
  by keys, no password access is allowed;
- password change even by root is subject to quality checks;
- su(8) is only useful to lower privileges and not gain those
  (so root access is available either through local console
  or via use of ssh keys).

Don't use if frowned upon.
2016-02-10 15:11:41 +03:00
Michael Shigorin
0717417e11 cleanup: add jeos targets
This is based on distro/regular-jeos but torn into two
and somewhat updated for sisyphus-going-to-bring-p8:
1) libcap-ng is now required by util-linux;
2) bridge-utils might be needed for subsequent images.
2016-02-10 15:11:24 +03:00
Michael Shigorin
b1005e5146 ovz-server: split into tagged/{base,server}+openvz
Those packages which are *required* should be available
for standalone use; and those which are optional should go
into extras.

Adjust server feature accordingly.
2016-02-10 15:11:18 +03:00
Michael Shigorin
f197b9714c firmware: a trivial tracing fixup
The issue with these "; @:" thinglets is that mkimage-profiles
relies on target tracing (see commit 788cad8 some four years ago);
and this tracing approach relies on non-empty recipes which do call
shell (which gets (ab)used) unlike empty ones which oviously don't.

So this _will_ be traced properly:

    a: b
	@echo "hello world"

and this will too:

    a: b; @:

but this will result in a broken graph with REPORT=1:

    a: b
2016-02-05 09:19:43 +03:00
Michael Shigorin
647294f40a x11: tweak kde5 target
icon-theme-oxygen is required by kf5-oxygen <- kde5 <- kde5-big
by now so it's not needed to specify it explicitly anymore;
and zerg@ has just packaged some translations, let's jump in!
2016-02-03 17:34:55 +03:00
Michael Shigorin
4de3463b81 rescue: relax OpenSSH 7 key/algo restrictions
Apparently DH SHA1 key exchange algorithm is still in wide
use at least within Cisco products (there's a real world
case involving our user), and some still use DSA keys
which might be longer than "allowed" yet not trusted anymore.

See also:
http://www.openssh.com/legacy.html
http://bugzilla.altlinux.org/31716
http://altlinux.org/changes (Jan 2016; RU)
2016-01-25 23:04:27 +03:00
Michael Shigorin
929fb2f333 live: improve README regarding variables
It's been an old intent to add/move feature-specific
variable documentation into the features themselves,
this might be a pilot project. :-)
2016-01-16 18:45:33 +03:00
Michael Shigorin
1335e4cfd3 firmware: added qlogic target
This has been (tangentially) requested for HP blades:
http://forum.altlinux.org/index.php?topic=36122.0
2015-12-23 20:31:50 +03:00
Michael Shigorin
457c00b823 stage2, lowmem: update cleanup hooks for qt5
There's /usr/share/qt5/translations/ now too, handle that.

OTOH we've got some CJK support already, time to split up
those "cleanups" into some target locale set dependent form.
2015-12-04 20:58:32 +03:00
Aleksey Avdeev
58254f05eb install2: Add xorg-drv-vboxvideo
Signed-off-by: Aleksey Avdeev <avdeev@pkcc-tb.ru>
2015-12-03 19:42:46 +03:00
Michael Shigorin
5a1def512b server: add firmware to installers
It's been found out in the field that the lack of firmware
can hurt quite significantly; just add that.
2015-11-30 23:08:02 +03:00
Michael Shigorin
547af7bd8a init: drop useless bits
These lines don't effect anything currently due to #30806.
2015-11-30 17:17:08 +03:00
Michael Shigorin
df45ac1bca initial ntp feature
This one has been partially implemented for regular builds
but making it generally available seems much better.
2015-11-30 16:49:32 +03:00
Michael Shigorin
79b92db55d stage2: mv use/stage2/cifs{-install,}
This has no users in master but out-of-tree branches might need
a trivial update.

The rationale is that it's actually for *any* stage2 and not related
to specifically "install" at all (otherwise it should have been moved
to install2 feature altogether).

Note that there's no reason to add nfs-utils similarly as make-initrd
requires kinit-utils which includes its own nfsmount.
2015-11-16 15:48:33 +03:00
Michael Shigorin
8fc08068f3 x11-autologin: updated sddm case
Looks like "LXQt" session type is broken for
sddm 0.12.0 with lxqt 0.10.0 while "lxqt" one
is fine; so be it.
2015-11-03 18:13:11 +03:00
Michael Shigorin
708cc4fc4b x11: e19 -> enlightenment
The packages have been renamed quite some time ago,
no need to introduce artificial multifurcation.
2015-10-29 16:53:21 +03:00
Michael Shigorin
4534ca313b init: improve systemd debug facilities
The "best" "feature" of systemd "init system" has just
emerged once again: it will happily sit there idling
given startup or shutdown loops resulting in what looks
like a hang to an unsuspecting user; let's provide the
suspecting one with at least some tools described at
http://www.freedesktop.org/wiki/Software/systemd/Debugging
2015-10-20 14:18:18 +03:00
Michael Shigorin
206491d078 x11-autologin: nopasswdlogin group for sddm too
See also this somewhat related conversation (in Russian):
https://forum.altlinux.org/index.php?topic=28619.345
2015-10-14 18:50:01 +03:00
Michael Shigorin
4a503294a3 browser: tweak target dependencies
The issue with this was that plain use/browser/firefox/esr
didn't actually pull in the feature as such; it MUST NOT
pull in use/browser/firefox since it will change semantics
from "if it's Firefox make it ESR" to outright "use FX ESR"
(starterkits depend on the former and it was intentional).
2015-10-14 17:04:49 +03:00
Michael Shigorin
bf232c04bf x11-autologin: updated KDE5 session name
s/PLASMA/Plasma/ (thanks zerg@)
2015-09-24 22:04:24 +03:00
Aleksey Avdeev
47f8d6ef1c services: Add systemd-specific hooks
Signed-off-by: Aleksey Avdeev <avdeev@pkcc-tb.ru>
2015-09-24 20:41:39 +03:00
Michael Shigorin
5af8b76db8 browser: introduce firefox-esr support
FX_FLAVOUR variable can be set anywhere to switch
use/browser/firefox to prefer ESR packages, including
the appropriate localization ones.

Note that there's no dependency as it can be set in e.g.
starterkits (still unset in regular builds) wholesale
but shouldn't affect those of them lacking firefox.
2015-09-08 20:11:45 +03:00
Michael Shigorin
8dd2c5d00d im: drop dependency upon l10n
This was wrong as l10n with no LOCALE would result
in "lang=" being added to the boot menu and not
overridden by F2 selection.
2015-09-08 18:07:20 +03:00
Michael Shigorin
881163dcff live: tweak HOMEPAGE
The reason behind this silly patch is that the default URL
can be left alone with no rebuilds neccessary but with the
intranet services delivered through a "captive portal" or
a redirecting proxy; we definitely don't want the canonical
wiki URL, http://www.altlinux.org, blocked by a rule made
for redirecting the default homepage, so let it be another
one which is served but not widely known or linked to.
2015-09-07 19:33:11 +03:00
Michael Shigorin
7f742a8ac2 x11: add IM hints
This makes use of IM_PACKAGES variable processed by
newly added im feature so that DE-specific targets
could tell which DE-specific IM packages they'd like
on a system *iff* use/im has been requested.

Might be lacking right now, to be sorted out with
the actual users.
2015-09-02 16:32:34 +03:00
Michael Shigorin
d773be4dc9 im: new feature
This one has emerged due to request by Chú minh
to add Vietnamese support to LXDE starterkit.
2015-09-02 16:31:42 +03:00
Michael Shigorin
c83b1f105b image.in, branding: comment fixups
(rather cosmetic changes)
2015-08-07 16:55:34 +03:00
Michael Shigorin
9d77c2d4b3 docs: new feature
This one has been brewin' for quite a while but has been
completed finally; some tweaks sure can come in later but
it's working.

Please note that it's rather needed for "proper" distros
with specific branding and docs packages prepared for those;
one should use l10n feature most likely too.
2015-08-07 16:55:28 +03:00
Michael Shigorin
33f79ccf8a cleanup: a tiny but importand hint
I keep forgetting that CLEAUP_PACKAGES come with
/var/lib/{apt,rpm} purge, gotta do something...
2015-08-04 15:58:59 +03:00
Michael Shigorin
82aa130441 wireless: add rescue support
The "full" target should care for rescue bits as well
(remember that THE_* won't go there); thus regular-rescue.iso
will receive these couple hundred useful kilobytes as well.
2015-07-22 00:32:18 +03:00
Michael Shigorin
30d38381a3 init: rework de-systemd-ization
It's the very same problem that must be solved within mkimage:
some package lists get expanded early and some late thus having
no chance to influence apt's choices of alternatives made early
(in fact, too early).

Until that, here's another kludge...

PS: turns out that ^systemd- is not "drop ^systemd" but rather:
    systemd-analyze
    systemd-coredump
    systemd-journal-gateway
    systemd-networkd
    systemd-sysvinit
    -- thus one /really/ wants something else.
2015-06-29 20:26:33 +03:00
Michael Shigorin
1345c6e041 syslinux: dropped netinstall snippet (useless)
This one was an experimental but the server is long
offline and isn't going back up; remove the obsolete
config snippet, if/when it's done again it's the easiest
part to be restored (the implementation should provide
HTTP/FTP/NFS-publishable deliverables without the need
to extract those from ISO images).
2015-06-22 23:16:50 +03:00
Michael Shigorin
47c1639618 init: added experimental polkit "support"
This one relies on the controversial polkit-sysvinit package
that subverts policykit using well known groups to make it
"work" for things like NM and shutdown helpers.

See also http://altlinux.org/sysvinit and feel free to improve.
2015-06-16 14:49:59 +03:00
Michael Shigorin
b44e602802 deflogin: added sudoers security note
/etc/sudoers is persistent with regard to userdel(8)
so removing a LiveCD user isn't going to drop this kind
of the added privilege and might result in an unintended
grant of those by adding a user with the same name after
permanent LiveCD installation.

This has been spotted by Speccyfighter:
https://bugzilla.altlinux.org/31071
2015-06-16 13:10:41 +03:00
Michael Shigorin
b76aa22729 live: implemented kernel driver cleanup
This one is alike to install2's one; it's not a shared rootfs
script/variable though as contexts differ a lot, let's be careful.

The commit has been missing from 1.1.64 somehow, found in patch
series while figuring out why LIVE_CLEANUP_KDRIVERS seems to be
just ignored in live-privacy *after* the massive rebase of that
branch...
2015-06-12 20:39:43 +03:00
Michael Shigorin
18dbadd81c syslinux: introduce SYSLINUX_DIRECT
There's a convention that syslinux configuration snippets
carrying the names of subprofiles involved are picked up
automatically; there were a few special cases already
when this is actually inconvenient, and there's another
one at hand so let's just step up and do it.

NB: this is a sort of a hacky hook though, wish an elegant
    interface would come to mind some day.
2015-06-05 11:13:36 +03:00
Michael Shigorin
1e84c84971 dev: added a line to predefined shell history
This one has been proposed by Oleg Ivanov again,
and more are supposed to come as people use it.
2015-06-05 11:10:53 +03:00
Michael Shigorin
345375f535 rescue: adjust for rescue-remote as well
The added initscript used to be purged by 98-init-rescue
which has been somewhat overlooked during vain attempts
to build an image that would actually run it!
2015-06-01 20:08:34 +03:00