# i use faiserver as a dns alias, but ssh key is associated with
# a canonical hostname and we will have ssh warning spam unless we
# use it, so look it up just to avoid the warning spam.
faiserver_host=$(chost $host) || faiserver_host=$host
# i use faiserver as a dns alias, but ssh key is associated with
# a canonical hostname and we will have ssh warning spam unless we
# use it, so look it up just to avoid the warning spam.
faiserver_host=$(chost $host) || faiserver_host=$host
root@$faiserver_host:/srv/fai/config/files/root/.ssh/authorized_keys/GRUB_PC
# todo: automatically disable faiserver after a period so
# these files are not exposed.
root@$faiserver_host:/srv/fai/config/files/root/.ssh/authorized_keys/GRUB_PC
# todo: automatically disable faiserver after a period so
# these files are not exposed.
root@$faiserver_host:/srv/fai/config/distro-install-common
# should tar ssh all the files, but these ones really justified it
root@$faiserver_host:/srv/fai/config/distro-install-common
# should tar ssh all the files, but these ones really justified it
-# built BELENOS basefile with mk-basefile -J BELENOS64. it's stored in
-# it's own repo which is published alongside this one called
-# fai-basefiles due to being a large binary file.
+. /a/bin/distro-setup/pkgs
+pall+=($(/a/bin/buildscripts/emacs -p; /a/bin/distro-setup/distro-pkgs $distro))
+{ echo PACKAGES install; echo "${pall[*]}"|sed 's/ /\n/g'; } | \
+ ssh root@$faiserver_host dd of=/srv/fai/config/package_config/DESKTOP 2>/dev/null ||: # broken pipe
-{ timeout 2 curl -s http://fai-project.org/download/basefiles/md5sums.txt ||:; } |
- while read -r sum file; do
- if [[ ${sums[$file]} && ${sums[$file]} != $sum ]]; then
- echo "${0##*/}: WARNING!!!!!!!!! NEW UPSTREAM BASEFILE: $file"
- fi
- done
-rsync -r --delete /a/bin/fai-basefiles/basefiles root@$faiserver_host:/srv/fai/config
+rsync -rplt --delete $BASEFILE_DIR/*.gz root@$faiserver_host:/srv/fai/config/basefiles/
# make it the root because pxe-kexec only looks there.
# It wouldn't be too hard to change if we needed.
# We could also just dump things in /srv/tftp, but fai
# make it the root because pxe-kexec only looks there.
# It wouldn't be too hard to change if we needed.
# We could also just dump things in /srv/tftp, but fai
systemctl restart tftpd-hpa
chmod 644 /srv/fai/config/files/root/.ssh/authorized_keys/GRUB_PC
chmod -R a+rX /srv/fai/config/distro-install-common
systemctl restart tftpd-hpa
chmod 644 /srv/fai/config/files/root/.ssh/authorized_keys/GRUB_PC
chmod -R a+rX /srv/fai/config/distro-install-common
# the known hosts entries that fai already sets up are like
# IP,HOSTNAME key_info...
# we are skipping the ip, because it doesn't block ssh
# with a prompt as long as you have the user supplied hostname,
# and i don't want to deal with getting it, it's not adding
# any important security in this case.
# the known hosts entries that fai already sets up are like
# IP,HOSTNAME key_info...
# we are skipping the ip, because it doesn't block ssh
# with a prompt as long as you have the user supplied hostname,
# and i don't want to deal with getting it, it's not adding
# any important security in this case.