mirror of
https://github.com/openglow-org/forgefirm.git
synced 2026-09-27 16:51:12 -07:00
ScottW514
97287aa6a9
meta-forgefirm: the forgefirm-users init replays the account at boot; sshd refuses root and empty passwords and runs only while the panel turns it on; the release image keeps an empty root password for the console; the console banner; avahi announces forgefirm.local; https in libmicrohttpd and ulfius; the panel on 80 and 443; the license bundle on the rootfs; release.sh checks the root policy on the built rootfs. forgetest: the commission suites (commission, commission_dark, commission_sheet: 23 cases); the runner turns cloud mode on with the typed phrase for a test that declares it; the baseline's motor_lock is 0; the log-export test checks the bundle for the camera key; the record helpers write bytes as given and join the daemon's paths as POSIX. The stream harness gains rule 24: a hold verdict is held again after a resume. Bench drills: lens_travel.py and lens_stop_accel.py. Docs: BRINGUP carries the present state; CAMPAIGN-LOG carries the dated record.
30 lines
1.0 KiB
BlitzBasic
30 lines
1.0 KiB
BlitzBasic
SUMMARY = "ForgeFIRM operator accounts: record replay and the root shell warning"
|
|
DESCRIPTION = "Replays the account record (/data/forgefirm/users, written \
|
|
by forgectrl) into the system account files at boot and on reload, \
|
|
removes the local accounts the record does not name, and installs the \
|
|
warning an interactive root shell prints."
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda2f7b4f302"
|
|
|
|
SRC_URI = " \
|
|
file://forgefirm-users.init \
|
|
file://forgefirm-root.sh \
|
|
"
|
|
|
|
S = "${WORKDIR}"
|
|
|
|
inherit update-rc.d
|
|
|
|
INITSCRIPT_NAME = "forgefirm-users"
|
|
# 05: rcS has run (mountall mounted /data at S03) and sshd starts at
|
|
# S09, so the accounts exist before the first login can arrive.
|
|
INITSCRIPT_PARAMS = "start 05 2 3 4 5 ."
|
|
|
|
# useradd, groupadd, usermod, userdel, groupdel
|
|
RDEPENDS:${PN} += "shadow"
|
|
|
|
do_install() {
|
|
install -Dm 0755 ${WORKDIR}/forgefirm-users.init ${D}${sysconfdir}/init.d/forgefirm-users
|
|
install -Dm 0644 ${WORKDIR}/forgefirm-root.sh ${D}${sysconfdir}/profile.d/forgefirm-root.sh
|
|
}
|