Commit Graph

38 Commits

Author SHA1 Message Date
Jérémy Lecour 937e75daa7 Rename incs_policy template 2021-02-22 10:15:53 +01:00
Jérémy Lecour 21f4544016 Install default check_policy file on init 2021-02-22 09:36:53 +01:00
Jérémy Lecour 01a19ad2da Release 2.7.0 2020-11-13 15:49:43 +01:00
Jérémy Lecour 76a298c042 bkctld-rm: delete empty jails in incs directory 2020-11-13 15:33:18 +01:00
Jérémy Lecour f9018738b9 tests: use FORCE flag to remove jail in tests 2020-11-13 15:32:19 +01:00
Jérémy Lecour 3c5a646ae3 bkctld-rm: list jails from incs directory
We list jails in "incs" directory, not in "jails" directory so we can 
clean old incs after a jail is archived
2020-11-12 18:35:41 +01:00
Jérémy Lecour 2ccd8c1b8d add a [-f|--force] option to remove confirmation on some commands 2020-10-11 14:57:47 +02:00
Jérémy Lecour 9eae80c002 globally disable shecllcheck SC2034 in lib/includes
Many variables defined in this file are not used here.
2020-10-11 14:56:22 +02:00
Jérémy Lecour 05c3715c6a Better help message composition and formating 2020-10-11 14:53:26 +02:00
Jérémy Lecour 2ad1032f9d Release 2.6.0 2020-10-07 20:51:29 +02:00
Jérémy Lecour c1fbe6394f Add "version" and extract "help" options 2020-10-07 20:50:17 +02:00
Jérémy Lecour 2057a6fd80 Restore compatibility with Debian <10
ssh-keygen has "-f prefix_path" in openssh-server version 7.9+
2020-09-25 14:12:12 +02:00
Jérémy Lecour 7d1964370d jails and incs lists are sorted alphanumerically 2020-08-28 10:21:13 +02:00
Jérémy Lecour bc6a571595 whitespaces for readability 2020-08-19 13:58:23 +02:00
Jérémy Lecour ea9aac50a3 explicit path refix for ssh-keygen 2020-08-19 13:58:03 +02:00
Jérémy Lecour 1063dfe74d bkctld: don't replace SSH host keys when creating/updating a jail 2020-08-19 13:57:18 +02:00
Jérémy Lecour c141986a6d create new ssh keys for new jails instead of copying those from the host
It increases the security by having different keys between jails.
It reduces the risk of changing the keys of jails after creationtheir 
creation.
2020-08-07 14:24:20 +02:00
Jérémy Lecour 0ad1e8d342 Split check into check-jails and check-setup
bkctld-check-setup checks if the partition is mounted and writable, if 
firewall is configured and if all jails are started
2020-07-10 14:34:06 +02:00
Jérémy Lecour 64ec60428d error() function accepts an optional return code 2020-05-01 09:51:09 +02:00
Jérémy Lecour ea912c40f0 missing whitespace 2020-04-20 23:43:56 +02:00
Jérémy Lecour 5f3cc873a1 fix date format 2020-04-20 23:43:45 +02:00
Jérémy Lecour 86e88ad2c2 fix log date format
%S = seconds
%s = number of seconds since epoch
2020-04-20 23:30:45 +02:00
Jérémy Lecour 205e3774a9 rewrite log messages and format 2020-04-20 08:29:21 +02:00
Jérémy Lecour 478703d96e No space before colons in log messages 2020-04-19 09:56:52 +02:00
Jérémy Lecour 32f242fe9c Reorganize temp files and lock files
Temp files/dirs all share a common prefix, so we can delete them all 
effectively
Lock file is managed globally for bkctld-rm.
No need for a lock file for bkctld-inc anymore since there is a check on 
the inc directory before starting.
2020-04-19 09:55:43 +02:00
Jérémy Lecour f7e8324ba5 Embed check-incs and check-last-incs in bkctld 2020-04-18 10:29:21 +02:00
Jérémy Lecour 0dcd72d3f2 move relative_date() function to includes files 2020-04-18 10:28:44 +02:00
Jérémy Lecour e5997400cd bkctld-check: verify that firewall rules are sourced 2020-04-08 12:26:59 +02:00
Jérémy Lecour 53b8fe8376 extract variable "jail_sshd_config" 2020-04-08 00:32:15 +02:00
Jérémy Lecour 2ef20df5ca whitespaces 2020-04-05 11:43:52 +02:00
Jérémy Lecour db70bd21e9 use explicitly relative path 2020-04-03 09:58:10 +02:00
Jérémy Lecour 3f3ffbfffd bkctld-start: extract "mount_jail_fs" function 2020-04-03 09:48:54 +02:00
Jérémy Lecour 1da1c8a7fe extract function for jail config directory 2020-04-02 18:39:15 +02:00
Jérémy Lecour 45036bf731 fix incs policy on jail init 2020-04-02 18:28:41 +02:00
Jérémy Lecour 54e66aea84 Raise error if missing arguments in functions 2020-04-02 18:27:54 +02:00
Jérémy Lecour c58878b065 extract functions for config files 2020-04-02 18:26:53 +02:00
Jérémy Lecour 779dd9c518 use new conventions 2020-04-02 01:17:11 +02:00
Jérémy Lecour 01cc972d83 rename lib/config to lib/includes 2020-04-02 00:31:57 +02:00
Renamed from lib/config (Browse further)