X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai-redep;h=3e1263d39551582d085adb46560588389ec20b68;hb=45578de750fb07f7a7f64181e6b3b749ef727725;hp=eafb1dc6426caa9c9dadf1f64350de27ceb66215;hpb=ee5c5007f3426705012f2943c345b1194a988c62;p=automated-distro-installer diff --git a/fai-redep b/fai-redep index eafb1dc..3e1263d 100755 --- a/fai-redep +++ b/fai-redep @@ -23,7 +23,9 @@ usage() { cat </dev/null ||: # broken pipe -# built BELENOS basefile with mk-basefile -J BELENOS64. it's stored in -# it's own repo which is published alongside this one called -# fai-basefiles due to being a large binary file. - -declare -A sums -while read -r sum file; do - sums[$file]=$sum -done < <(cat /a/bin/fai-basefiles/md5sums.txt) - -{ timeout 2 curl -s http://fai-project.org/download/basefiles/md5sums.txt ||:; } | - while read -r sum file; do - if [[ ${sums[$file]} && ${sums[$file]} != $sum ]]; then - echo "${0##*/}: WARNING!!!!!!!!! NEW UPSTREAM BASEFILE: $file" - fi - done -rsync -r --delete /a/bin/fai-basefiles/basefiles root@$faiserver_host:/srv/fai/config +rsync -rplt --delete $BASEFILE_DIR/*.gz root@$faiserver_host:/srv/fai/config/basefiles/ ssh root@$faiserver_host bash <<'EOF' set -eE -o pipefail -set -x # make it the root because pxe-kexec only looks there. # It wouldn't be too hard to change if we needed. # We could also just dump things in /srv/tftp, but fai @@ -88,21 +74,17 @@ sed -ri 's,^ *(TFTP_DIRECTORY=).*,\1"/srv/tftp/fai",' /etc/default/tftpd-hpa systemctl restart tftpd-hpa chmod 644 /srv/fai/config/files/root/.ssh/authorized_keys/GRUB_PC chmod -R a+rX /srv/fai/config/distro-install-common -# this basefile has tar acls bug, so I'm using my own -# local one for now. -#cd /srv/fai/config/basefiles -#u=http://fai-project.org/download/basefiles/XENIAL64.tar.xz -#wget -nv -N $u changed=false f=/srv/fai/nfsroot/root/.ssh/known_hosts +install -d -m 700 /srv/fai/nfsroot/root/.ssh # the known hosts entries that fai already sets up are like # IP,HOSTNAME key_info... # we are skipping the ip, because it doesn't block ssh # with a prompt as long as you have the user supplied hostname, # and i don't want to deal with getting it, it's not adding # any important security in this case. -if ! grep -xFq "$line" $f; then +if ! grep -xFq "$line" $f &>/dev/null; then changed=true printf "%s\n" "$line" >>$f fi