X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai-redep;h=3e1263d39551582d085adb46560588389ec20b68;hb=5ccaac3779f6bcf991e6ab0f7d545b37e3a4db63;hp=7dc0d097496e679750ad4437ee5a2acdce5026de;hpb=ba2a6b887fe5a9ed627e9f0947265b37abbcf7aa;p=automated-distro-installer diff --git a/fai-redep b/fai-redep index 7dc0d09..3e1263d 100755 --- a/fai-redep +++ b/fai-redep @@ -1,4 +1,4 @@ -#!/bin/bash -l +#!/bin/bash # Copyright (C) 2016 Ian Kelling # This program is free software; you can redistribute it and/or @@ -21,8 +21,11 @@ x="$(readlink -f "$BASH_SOURCE")"; cd ${x%/*} usage() { cat </dev/null ||: # broken pipe -declare -A sums -while read -r sum file; do - sums[$file]=$sum -done < <(cat /a/bin/fai-basefiles/md5sums.txt) -{ timeout 2 curl -s http://fai-project.org/download/basefiles/md5sums.txt ||:; } | - while read -r sum file; do - if [[ ${sums[$file]} && ${sums[$file]} != $sum ]]; then - echo "${0##*/}: WARNING!!!!!!!!! NEW UPSTREAM BASEFILE: $file" - fi - done -rsync -r --delete /a/bin/fai-basefiles/basefiles root@$faiserver_host:/srv/fai/config +rsync -rplt --delete $BASEFILE_DIR/*.gz root@$faiserver_host:/srv/fai/config/basefiles/ ssh root@$faiserver_host bash <<'EOF' set -eE -o pipefail -set -x # make it the root because pxe-kexec only looks there. # It wouldn't be too hard to change if we needed. # We could also just dump things in /srv/tftp, but fai @@ -81,21 +74,17 @@ sed -ri 's,^ *(TFTP_DIRECTORY=).*,\1"/srv/tftp/fai",' /etc/default/tftpd-hpa systemctl restart tftpd-hpa chmod 644 /srv/fai/config/files/root/.ssh/authorized_keys/GRUB_PC chmod -R a+rX /srv/fai/config/distro-install-common -# this basefile has tar acls bug, so I'm using my own -# local one for now. -#cd /srv/fai/config/basefiles -#u=http://fai-project.org/download/basefiles/XENIAL64.tar.xz -#wget -nv -N $u changed=false f=/srv/fai/nfsroot/root/.ssh/known_hosts +install -d -m 700 /srv/fai/nfsroot/root/.ssh # the known hosts entries that fai already sets up are like # IP,HOSTNAME key_info... # we are skipping the ip, because it doesn't block ssh # with a prompt as long as you have the user supplied hostname, # and i don't want to deal with getting it, it's not adding # any important security in this case. -if ! grep -xFq "$line" $f; then +if ! grep -xFq "$line" $f &>/dev/null; then changed=true printf "%s\n" "$line" >>$f fi