X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai-redep;h=3e1263d39551582d085adb46560588389ec20b68;hb=57d028e3d91f320b56394730993706cdde66834b;hp=94a85db5b387c87d13f87467ad53843f5162ad50;hpb=34839ddd0fbddfe203a3aa5b3387186a273e31df;p=automated-distro-installer diff --git a/fai-redep b/fai-redep index 94a85db..3e1263d 100755 --- a/fai-redep +++ b/fai-redep @@ -24,6 +24,8 @@ usage() { usage: ${0##*/} [-h|--help] [HOST] [DISTRO] Deploy fai config (the one in nfs) to HOST or default faiserver Specify DISTRO for setting up DESKTOP packages. + +Note: uses paths specific to authors machine. EOF exit $1 } @@ -39,7 +41,7 @@ distro=$2 # use it, so look it up just to avoid the warning spam. faiserver_host=$(chost $host) || faiserver_host=$host -rsync -rlp --delete --relative --exclude /fai/config/basefiles/ fai/config root@$faiserver_host:/srv +rsync -rlpt --delete --relative --exclude /fai/config/basefiles/ fai/config root@$faiserver_host:/srv scp -q ~/.ssh/home.pub \ @@ -60,25 +62,9 @@ pall+=($(/a/bin/buildscripts/emacs -p; /a/bin/distro-setup/distro-pkgs $distro)) ssh root@$faiserver_host dd of=/srv/fai/config/package_config/DESKTOP 2>/dev/null ||: # broken pipe -# built BELENOS basefile with mk-basefile -J BELENOS64. it's stored in -# it's own repo which is published alongside this one called -# fai-basefiles due to being a large binary file. - -declare -A sums -while read -r sum file; do - sums[$file]=$sum -done < <(cat /a/bin/fai-basefiles/md5sums.txt) - -{ timeout 2 curl -s http://fai-project.org/download/basefiles/md5sums.txt ||:; } | - while read -r sum file; do - if [[ ${sums[$file]} && ${sums[$file]} != $sum ]]; then - echo "${0##*/}: WARNING!!!!!!!!! NEW UPSTREAM BASEFILE: $file" - fi - done -rsync -r --delete /a/bin/fai-basefiles/basefiles root@$faiserver_host:/srv/fai/config +rsync -rplt --delete $BASEFILE_DIR/*.gz root@$faiserver_host:/srv/fai/config/basefiles/ ssh root@$faiserver_host bash <<'EOF' set -eE -o pipefail -set -x # make it the root because pxe-kexec only looks there. # It wouldn't be too hard to change if we needed. # We could also just dump things in /srv/tftp, but fai @@ -88,21 +74,17 @@ sed -ri 's,^ *(TFTP_DIRECTORY=).*,\1"/srv/tftp/fai",' /etc/default/tftpd-hpa systemctl restart tftpd-hpa chmod 644 /srv/fai/config/files/root/.ssh/authorized_keys/GRUB_PC chmod -R a+rX /srv/fai/config/distro-install-common -# this basefile has tar acls bug, so I'm using my own -# local one for now. -#cd /srv/fai/config/basefiles -#u=http://fai-project.org/download/basefiles/XENIAL64.tar.xz -#wget -nv -N $u changed=false f=/srv/fai/nfsroot/root/.ssh/known_hosts +install -d -m 700 /srv/fai/nfsroot/root/.ssh # the known hosts entries that fai already sets up are like # IP,HOSTNAME key_info... # we are skipping the ip, because it doesn't block ssh # with a prompt as long as you have the user supplied hostname, # and i don't want to deal with getting it, it's not adding # any important security in this case. -if ! grep -xFq "$line" $f; then +if ! grep -xFq "$line" $f &>/dev/null; then changed=true printf "%s\n" "$line" >>$f fi