Commit Graph

1541 Commits

Author SHA1 Message Date
Michael Shigorin
a2fcc601c9 syslinux: process @rescue_hash@ (forensic mode)
This value is used to authenticate rescue rootfs image
by verifying the squashfs file's sha256sum before use
(propagator-20140419+).

Looks like this check might be useful for other stage2
images as well but let's get started with this one.

Thanks Maxim Suhanov <suhanov/group-ib.ru> for both
http://www.forensicswiki.org/wiki/Forensic_Live_CD_issues
and propagator patches.
2014-04-19 13:48:11 +04:00
Michael Shigorin
635018aa86 base+rescue: added agetty
Found it in yet another TODO at last;
serial console support is requisite.
2014-04-19 13:47:53 +04:00
Michael Shigorin
9a124f1745 rescue+extra: a bunch of long tail packages
These are mostly less known ones lurking in Sisyphus;
some of those might go, some might stick.
2014-04-19 13:47:53 +04:00
Michael Shigorin
f7002d8373 rescue+{crypto,misc}: a few more additions
Massive Solutions' intranet wiki page on firmware
has proved useful yet again, and stegdetect has been
omitted given that steghide is there already.
2014-04-19 13:47:53 +04:00
Michael Shigorin
2f3614b2de rescue+x11: several more assorted GUIs
These have been spotted while working on text-based utility
package lists; dvdisaster is rather welcome on x11 pkglist too.
2014-04-19 13:47:52 +04:00
Michael Shigorin
2e86bfdab0 archive+extra: a few more microtools
xbiso is xbox xdvdfs iso extraction utility;
mdbtools helps use MS Access files.
2014-04-19 13:47:31 +04:00
Michael Shigorin
84a591471c syslinux: fix "forensic" wording
Thanks Maxim Suhanov (suhanov <AT> group-ib.ru,
http://www.forensicswiki.org/wiki/User:.FUF)
for taking the time to review regular-rescue image.

Note that there are more than just filesystems:
arrays, logical volumes and swaps aren't activated either;
startup-rescue >= 0.18 should make that clear enough.

syslinux shortcut handling is case-insensitive,
let's find yet another letter...
2014-04-19 13:47:31 +04:00
Michael Shigorin
b7d8a9862d {rescue,security}+extra: a few more utilities
biew was strangely missing indeed; several more
http://www.forensicswiki.org/wiki/Category:Tools
added as these have been packaged for ALT already;
fatback is on the way and dc3dd should come soon.

Debugging department has seen a /minor facelift/ too.

Some tools depend on X11 though and have been put
into a separate pkglist for that matter.
2014-04-15 19:48:57 +04:00
Michael Shigorin
c3d5683658 gear-store-tags 2014-04-14 23:33:21 +04:00
Michael Shigorin
485d93d37f 1.1.31-alt1
- live: refactoring
- forensics mode
2014-04-14 23:32:52 +04:00
Michael Shigorin
fce9b2e6a6 regular.mk: added forensics mode to rescue flavour
Just a convenient knob for a few things done previously
to help spare the interesting bits from being overrun.

NB: live_rw isn't added although it might be useful
    since that would yield too many boot targets overall;
    this is likely to change some day, hopefully when
    media type detection/handling is implemented.

Let's bump syslinux timeout to 20 seconds either
so that iKVM users have a chance to select anything
and not just see the default booting after a few
screen area size changes.
2014-04-14 23:32:16 +04:00
Michael Shigorin
22ead42a87 rescue+misc: added lsof
Wonder how it's been missing for 3+ years...
2014-04-14 21:11:06 +04:00
Michael Shigorin
8362a7b905 syslinux: add forensics mode
A variant of rescue that marks the need to be careful
towards block devices and filesystems thus reducing
the amount of auto-activation done by startup-rescue
(0.17 or newer).
2014-04-14 20:50:19 +04:00
Michael Shigorin
4cfac68563 live.mk: minor live-gimp updates
cvltonemap is no more available in sisyphus/p7;
xsane and usbutils were sorely missing (thanks dd@).

NB: fim is currently i586-only, need to fix or drop it.
2014-04-14 18:35:13 +04:00
Michael Shigorin
05371a6c25 server.mk, test.mk: added zabbix images
server-zabbix.iso is ready for deployment,
and live-zabbix.iso is zabbix agent + firefox
(needs at least Server to be specified properly
within zabbix_agentd.conf when booted).
2014-04-14 18:33:02 +04:00
Michael Shigorin
490ec2ec0d server: added zabbix target
This is a refactored result of Zabbix-related experiments;
we can do a rough zabbix server sketch that still requires
its own setup to go.

NB: both the pkglist and the target are describing several
distinct things actually: zabbix server, zabbix agent,
and the underlying SQL/HTTP/SMTP servers which might get
their own smaller targets some day.
2014-04-14 18:33:02 +04:00
Michael Shigorin
b79895681f server.mk: shift use/power/acpi/button to server-mini
It used to be added in server-ovz but it really belongs to
the underlying server-mini already as more images built
upon that one should perform correct shutdown given ATX
compatible case/mobo or a VM that can do ACPI.
2014-04-14 18:33:02 +04:00
Michael Shigorin
0e72c67e98 Revert "regular.mk: use imagewriter"
This reverts commit fd8f375573.
xdg-su is broken (some would say beyond repair) regarding DE
detection and handling of various GUI helper utilities,
especially in graceful fallback department; only a few images
can get imagewriter until this is fixed, let kde4 be the one.
2014-04-12 20:02:48 +04:00
Michael Shigorin
a9c9b032e8 live: use/deflogin (along with fixups)
It appears that live feature has been buggy regarding user
groups: its 30-users script would create a predefined account
with fixed supplementry groups list, and even if deflogin feature
got used too it would fail to add any groups to already existing
account since its useradd(8) call would fail.

Let's drop this duplication which has been long overdue anyways.

Thanks dd@ for both reporting the problem and carrying out
initial investigation.
2014-04-12 18:41:12 +04:00
Michael Shigorin
54609e4785 deflogin: refactoring and fixup
There have been several problems with this feature:
- a typo;
- non-existant GROUPS (even a single one) would block setting
  all of the supplementary groups but separately-set 'wheel';
- this feature isn't used much actually so sees no battle testing.

The typo has been just fixed; GROUPS are now applied by iteration
which is less effective but more reliable; an additional script
hook to write down login invitation for the first passwordless
account (if any) has been implemented; and several more group
managing targets have been added (based on live feature's script).
2014-04-12 18:32:40 +04:00
Michael Shigorin
0650f6d42d deflogin: explicit ROOTPW_EMPTY
This relates to commit f2892ad3e4
as there's an obvious need to be able to set empty root password
for LiveCDs but previous implementation was very fragile (and is
going to stay that way) -- so clear and separate knob for making
an image defenseless looks better.
2014-04-12 18:28:48 +04:00
Michael Shigorin
b9dffe2101 gear-store-tags 2014-04-07 23:39:02 +04:00
Michael Shigorin
c4d48c00b1 1.1.30-alt1
- robotics support
2014-04-07 23:38:32 +04:00
Michael Shigorin
ed75be87a1 syslinux: fix mediacheck label for gfxboot
Whoops, the very first build of a real distro with gfxboot
has shown that the label isn't picked up there... and things
are actually worse: iso.needscheck gfxboot test seems to look
up "check=1" in sectors where it might have been landing back
then but it's just not there by now; some kludgery is due in
branding-altlinux-sisyphus unfortunately.
2014-04-07 23:32:38 +04:00
Michael Shigorin
735eb6ea41 mediacheck: purge more packages
No use to hunt make or diff file-by-file.

Well this chroot should have been more lean
in the first place (or a few files in initrd)
but life is short so better use/baby/steps.
2014-04-07 23:32:38 +04:00
Michael Shigorin
8abdb7402b mediacheck: drop firmware/udev as well
These aren't needed in this subprofile but can sneak in
via e.g. SYSTEM_PACKAGES.
2014-04-07 23:32:38 +04:00
Dmitry Derjavin
172942243a Robotics related package list, feature and live-robo target added. 2014-04-04 15:49:34 +04:00
Michael Shigorin
b0adfd04c5 gear-store-tags 2014-03-31 23:59:32 +04:00
Michael Shigorin
97145c91f9 1.1.29-alt1
- mediacheck feature
2014-03-31 23:56:15 +04:00
Michael Shigorin
622fd2d160 regular.mk: gnustep will use/mediacheck
This is an experimental addition to an image that might
get some attention (and broken downloads as well).
2014-03-31 23:54:57 +04:00
Michael Shigorin
ae983176c0 test.mk: live-{isomd5sum=>mediacheck}
Update accordingly to feature change.

Note that the new image is quite minimalistic/useless.
2014-03-31 23:50:46 +04:00
Michael Shigorin
f28a83cac6 mediacheck: the former isomd5sum
This one is quite different already and utility-based name
was pretty clumsy; meet the new feature and retire the old
experimental one.

Please note that quite aggressive cleanups are implemented
within this stage2-based subprofile for the simple reason
that it has a single task to do; nothing else is expected
to be configured into it for that matter.

This functionality asks to be further moved into initrd of course;
adding it there will take a few more decisions to be made, mostly
regarding user interaction in failure scenarios, and it looks like
mkimage will have to be patched in case this doesn't just go into
full.cz under some sort of conditional check.
2014-03-31 23:50:00 +04:00
Michael Shigorin
71db9c6701 syslinux: support forthcoming mediacheck feature
Just a humble config snippet for another squashfs;
note that @bootargs@ aren't expected at all this time.
2014-03-31 23:50:00 +04:00
Michael Shigorin
44e778c9bd regular.mk, p7.mk: server-{un-def=>hyperv}
The whole story with this installer has been due to a query
at #altlinux whether there's a distribution image similar
to altlinux-p7-rescue.iso which appears to be booting under
Hyper-V Gen. 2 without a hitch; changing just the kernel
towards the newer one made the user rather happy since
everything worked out-of-box for him, even unimportant bits.

Of course it's mostly due to boyarsh@'s preceding work :)

NB: there's no use to build i586 version as that hypervisor
lacks CSM (BIOS implementation) and would only boot UEFI
compatible operating systems with pretty strict requirements.
2014-03-31 23:50:00 +04:00
Michael Shigorin
1ee5f0561a desktop+razorqt+extra: a few more extras
quiterss is lurking in autoimports so far,
gotta have a look at it...
2014-03-31 23:50:00 +04:00
Michael Shigorin
d9e591a953 regular.mk: man-whatis available within sysv-tde
As proposed by Speccyfighter:

http://lists.altlinux.org/pipermail/community/2014-March/681897.html

...but not installed by default due to overhead:

http://bugzilla.altlinux.org/21838
2014-03-31 23:49:59 +04:00
Michael Shigorin
067b4d1cfb regular.mk: use gdm2.20 for sysv-gtk based images
It has dawned on me that gdm2.20 is more widely useful
within sysvinit based builds: lightdm with gtk greeter
would fail to poweroff/reboot while this one would not.
2014-03-31 23:49:42 +04:00
Michael Shigorin
8419175c02 syslinux: help git grep *_size
It's not exactly obvious how install2_size, live_size or rescue_size
get defined since the variable names themselves get constructed;
help git grep these down.
2014-03-31 23:45:43 +04:00
Michael Shigorin
add424fe76 server: ensure ACPI poweroff support
acpid is not enough since power button handling configuration
has been split apart; and tracking this in zillion places is
utterly useless in face of a specially trained power feature.

Just use it.
2014-03-31 23:45:41 +04:00
Michael Shigorin
b3a91c4895 x11: use/firmware for 3D acceleration
At least Radeon drivers badly need those,
e.g. SUMO_uvd.bin + PALM_pfp.bin for C60 APU.

Helps live-flightgear.iso a lot indeed!
2014-03-31 23:45:19 +04:00
Michael Shigorin
2abee7d82c t7.mk: added altlinux-t7-gnustep-systemd.iso
Another bridgelet.
2014-03-31 23:44:23 +04:00
Michael Shigorin
07779c625b regular.mk: added regular-gnustep-systemd.iso
aen@ asked to ship this one as well; no problem given mixins,
still being able to *switch* the init instead of regrafting
would be very beneficial.

NB:
- wdm can't do autologin;
- wdm can poweroff/halt;
- wdm+autologin won't work under systemd (via prefdm.service);
- nodm will work under systemd;
- nodm will ruin consolehelper -> livecd-install by root's PATH;
- gdm2.20 is lightweight, feature complete and sovereign enough.
2014-03-26 21:01:18 +04:00
Michael Shigorin
a4b4aeb6da x11-autologin: added some warnings to README
nodm needs fixing indeed but let's spell this clearly at least.
2014-03-25 14:51:42 +04:00
Michael Shigorin
d4d16d62cf gear-store-tags 2014-03-24 23:59:05 +04:00
Michael Shigorin
445c361a15 1.1.28-alt1
- install2: more cleanups
2014-03-24 22:20:35 +04:00
Michael Shigorin
c9ca03ffee regular.mk: go on vnc-free with sysv-tde
The reason for an explicit cleanup is that VNC installation support
is now left in by default (see #29901); thus this commit is only
keeping the status quo for this image.
2014-03-24 22:20:28 +04:00
Michael Shigorin
d9d09c72d2 systemd: drop the obsolete feature
This one is really not needed, use/init/* instead.
Been declared obsolete for more than 9 months.
2014-03-24 22:11:42 +04:00
Michael Shigorin
c7e4f5e330 desktop+gnustep*: current updates
A few more tweaks for changes in sisyphus and t7 repos;
thanks real@ for both fixing and tracking things.
2014-03-24 21:56:29 +04:00
Michael Shigorin
9a05187e16 repo: minor important remark
Installation finishes just fine if bzip2-compressed
hash files are removed *but* apt-cdrom add will fail.
2014-03-24 21:56:29 +04:00
Michael Shigorin
b4b9f26cd8 http-server: no more php5-eaccelerator
It's missing in Sisyphus since php5 update to 5.5.x;
while an opcode cache would be a powerful boost for
many webapps this has to be sorted out in repos first.
2014-03-24 21:56:29 +04:00