X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai-redep;h=5306d9736707a8b683e9fdb4da8be9a57889659f;hb=c47175685b348735b3440e16851dde2cc39b6f3f;hp=94a85db5b387c87d13f87467ad53843f5162ad50;hpb=34839ddd0fbddfe203a3aa5b3387186a273e31df;p=automated-distro-installer diff --git a/fai-redep b/fai-redep index 94a85db..5306d97 100755 --- a/fai-redep +++ b/fai-redep @@ -24,6 +24,8 @@ usage() { usage: ${0##*/} [-h|--help] [HOST] [DISTRO] Deploy fai config (the one in nfs) to HOST or default faiserver Specify DISTRO for setting up DESKTOP packages. + +Note: uses paths specific to authors machine. EOF exit $1 } @@ -60,22 +62,7 @@ pall+=($(/a/bin/buildscripts/emacs -p; /a/bin/distro-setup/distro-pkgs $distro)) ssh root@$faiserver_host dd of=/srv/fai/config/package_config/DESKTOP 2>/dev/null ||: # broken pipe -# built BELENOS basefile with mk-basefile -J BELENOS64. it's stored in -# it's own repo which is published alongside this one called -# fai-basefiles due to being a large binary file. - -declare -A sums -while read -r sum file; do - sums[$file]=$sum -done < <(cat /a/bin/fai-basefiles/md5sums.txt) - -{ timeout 2 curl -s http://fai-project.org/download/basefiles/md5sums.txt ||:; } | - while read -r sum file; do - if [[ ${sums[$file]} && ${sums[$file]} != $sum ]]; then - echo "${0##*/}: WARNING!!!!!!!!! NEW UPSTREAM BASEFILE: $file" - fi - done -rsync -r --delete /a/bin/fai-basefiles/basefiles root@$faiserver_host:/srv/fai/config +rsync -rplt --delete /a/bin/fai-basefiles/basefiles root@$faiserver_host:/srv/fai/config ssh root@$faiserver_host bash <<'EOF' set -eE -o pipefail set -x @@ -88,21 +75,17 @@ sed -ri 's,^ *(TFTP_DIRECTORY=).*,\1"/srv/tftp/fai",' /etc/default/tftpd-hpa systemctl restart tftpd-hpa chmod 644 /srv/fai/config/files/root/.ssh/authorized_keys/GRUB_PC chmod -R a+rX /srv/fai/config/distro-install-common -# this basefile has tar acls bug, so I'm using my own -# local one for now. -#cd /srv/fai/config/basefiles -#u=http://fai-project.org/download/basefiles/XENIAL64.tar.xz -#wget -nv -N $u changed=false f=/srv/fai/nfsroot/root/.ssh/known_hosts +install -d -m 700 /srv/fai/nfsroot/root/.ssh # the known hosts entries that fai already sets up are like # IP,HOSTNAME key_info... # we are skipping the ip, because it doesn't block ssh # with a prompt as long as you have the user supplied hostname, # and i don't want to deal with getting it, it's not adding # any important security in this case. -if ! grep -xFq "$line" $f; then +if ! grep -xFq "$line" $f &>/dev/null; then changed=true printf "%s\n" "$line" >>$f fi