Commit Graph

726 Commits

Author SHA1 Message Date
Tom Rhodes
b507bda539 Give users the ability to load a mac_bsdextended(4) ruleset on boot (defaults
to NO of course).  Provide a basic ruleset file, rc.bsdextended, but allow
the filename to be overridden through rc.conf.

Discussed with:	rwatson (awhile ago)
2004-09-29 00:12:28 +00:00
Doug Barton
8f1bb3891d Create a named chroot directory structure in /var/named, and use it
by default when named is enabled. Also, improve our default directory
layout by creating /var/named/etc/namedb/{master|slave} directories,
and use the former for the generated localhost* files.

Rather than using pax to copy device entries, mount devfs in the
chroot directory.

There may be some corner cases where things need to be adjusted,
but overall this structure has been well tested on a production
network, and should serve the needs of the vast majority of users.

UPDATING has instructions on how to do the conversion for those
with existing configurations.
2004-09-28 09:46:00 +00:00
Doug Barton
85aca891e7 It's not necessary to create an rndc.key file if the user already
has an rndc.conf file.

Submitted by:	Sergey Mokryshev <mokr@mokr.net>
2004-09-26 07:01:56 +00:00
Doug Barton
ae00aa68e8 Fix two glitches that appear in the non-chroot case. First, if not
chrooted the pid symlink code should not fire. Also, remove the quotes
around the chroot variable in the rndc-confgen invocation so that if
not chrooted the command will still succeed.

Pointed out by:	Sean McNeil <sean@mcneil.com>
2004-09-24 23:49:38 +00:00
Giorgos Keramidas
2e1114f054 Fix a comment typo: s/neccessary/necessary/ 2004-09-24 11:04:27 +00:00
Doug Barton
fb9540a0dc Update to reflect BIND 9 in the base:
1. Making the pid symlink now has to happen after named starts, otherwise
it can generate a fatal error.

2. named-xfer is not part of the BIND 9 world.

3. BIND 9 needs a /dev/random in the chroot directory if chrooted.

4. Only the pid file is symlinked now, the ndc socket is BIND 8 only.

5. Create an rndc.key file for the user if one does not exist.
This (generally) allows a BIND 8 config file to be used in a BIND 9
world with little or no modification.
2004-09-24 04:53:18 +00:00
Dag-Erling Smørgrav
5a70daa23f If $dumpdev is set to AUTO, use the first suitable swap partition listed
in /etc/fstab, or print an error message if no suitable device was found.

MFC after:	4 weeks
2004-09-20 17:48:45 +00:00
Pawel Jakub Dawidek
9468063a70 Teach swap1 script how to remove added swap devices on system shutdown.
Without this change, if one had a swap-on-mirror configuration, gmirror
will rebuild mirror component(s) on boot, because they are dirty (they
were open on shutdown).
2004-09-17 17:58:19 +00:00
Giorgos Keramidas
a73af104ef We don't have any providers of `beforenetlkm' in FreeBSD. Remove the
dependency to it from our rc.d scripts.

Approved by:	mtm
2004-09-16 17:04:20 +00:00
Giorgos Keramidas
a71fcfed55 Fix requirement of network' to NETWORK' because the former isn't
provided by any rc.d script.

Approved by:	mtm
2004-09-16 17:03:12 +00:00
Sean Chittenden
6e03664cc4 Bring back etc/rc.d/ntpdate as requested by scads of people. This isn't a
complete backout as the ntpd_sync_on_start etc/rc.conf tunable is still
present, though the default is now NO (was YES).  Since we're no longer
syncing time at startup by default when ntpd is enabled (as was the case
24hrs ago), remove UPDATING entry pointing out that ntpd(1) -g is slower
than ntpdate(1).

Hopefully ntpd_sync_on_start="YES" can be made the default for -CURRENT
after 5.3 is cut.  At the very least, this should be set to YES when a
user requests to have ntpd enabled via sysinstall(1).

Requested by:	many
2004-09-15 01:08:33 +00:00
Sean Chittenden
756b0fff51 Stop using ntpdate(1) in our startup procedure. Replace ntpdate(1) with
calls to ntpd -g.  ntpd is noticeably slower than ntpdate, but is also more
accurate.  This removes the nasty hackery in rc.d/ntpdate that would parse
out ntp servers from /etc/ntp.conf (ntpd knows how to read its own config
file).  By default, ntpd *will* sync with its listed time servers.  To
turn this off so that ntpd does not sync, ntpd_sync_on_start="NO" can be
added to /etc/rc.conf.  If ntpd is not enabled (the default), then time is
not synced on startup.  ntpdate has been depreciated by the ntpd authors
for quite some time so this change shouldn't be unexpected.

Suggested by:	des
Approved by:	roberto (resident ntp guru)
2004-09-14 03:04:50 +00:00
Sean Chittenden
0050f9ec3c Stop using ntpdate(1) in our startup proceedure. Replace ntpdate(1) with
calls to ntpd -g.  ntpd is noticably slower than ntpdate, but is also more
accurate.  This removes the nasty hackery in rc.d/ntpdate that would parse
out ntp servers from /etc/ntp.conf (ntpd knows how to read its own config
file).  By default, ntpd *will* sync with its listed time servers.  To
turn this off so that ntpd does not sync, ntpd_sync_on_start="NO" can be
added to /etc/rc.conf.  If ntpd is not enabled (the default), then time is
not synced on startup.  ntpdate's use has been depreciated by the ntpd
authors for quite some time so this change shouldn't be unexpected.

Suggested by:	des
Approved by:	roberto (resident ntp guru)
2004-09-14 03:01:38 +00:00
Ruslan Ermilov
e114c8953a A power failure left the temporary /var/.diskless directory
on my system, and since then my /var was always created as
MFS which was very surprising.  Fix this for /tmp and /var.
2004-09-13 17:40:14 +00:00
David E. O'Brien
28b81da2d8 Restore NetBSD SCM ID.
Submitted by:	delphij@beastie.frontfree.net
2004-09-09 16:41:55 +00:00
Max Laier
9b56caaef4 Don't rely on properly setup linker.hints to figure out that pflog is now
part of the pf module.
While here fix a comment that was c'n'ped from rc.d/pf

PR:		bin/71096 (partly)
Submitted by:	Ville-Pertti Keinonen
MFC after:	2 days
2004-08-31 14:23:51 +00:00
Ken Smith
11980247d9 Protect the command flags set in the rc.conf files in case they're
more than one word, adding some quotes.

Advice from:	mtm (my first attempt wasn't quite right)
Reviewed by:	mtm
MFC after:	3 days
2004-08-29 15:02:43 +00:00
Dag-Erling Smørgrav
da5d8b9395 Always quote variables in tests, to ensure correct evaluation even when
they are empty or undefined.

MFC after:	3 days
2004-08-19 08:55:24 +00:00
Thomas Quinot
8f6270dbb4 Skip entries for GBDE swap devices if they are commented out in /etc/fstab.
Reviewed by:	des
2004-08-18 21:54:40 +00:00
Jacques Vidrine
fc94eecc8f Create temporary files safely.
Submitted by:	Jon Passki <cykyc@yahoo.com>
2004-08-16 16:37:06 +00:00
Gregory Neil Shapiro
d1fb385c10 Fix the startup logic for sendmail. If sendmail_enable=yes, don't start
the submit and outbound daemon, else if sendmail_submit_enable=yes, don't
start the outbound daemon.  Only one daemon should be started.

Also, do not rebuild database maps at boot time.  The code didn't pay
attention to SENDMAIL_MAP_TYPE and assumed 'hash'.  Also, admins may
not want maps automatically rebuilt just because the back end database
has changed.  Finally, some maps are built with mode tools than just
makemap (e.g., using cidrexpand on the access text file before sending
it to makemap).

Noticed by:	ache
Reviewed by:	ache
2004-08-05 03:09:54 +00:00
Mark Murray
e46792f8f1 Give sshd a secure startup, but with a tweakable timeout so that
the box won't hang forever at startup.
2004-08-04 08:10:37 +00:00
Mike Makonnen
83f00c3c07 Finish cleanup of rc.d/netif. It's now possible to start/stop more
than one interface from the command line:
	# /etc/rc.d/netif start bfe0 xl0
It's also possible to restart an interface(s):
	# /etc/rc.d/netif restart bfe0

This required some changes to rc.subr(8) so that if the start/stop commands
are overidden the rest of the command line (after the start/stop/etc... cmd)
is passed through to the subroutines.
2004-07-30 17:19:35 +00:00
Oliver Eikemeier
e193a85e5b back out the localkg changes until things have settled.
Discussed with:	mtm
2004-07-28 00:09:19 +00:00
Mike Makonnen
c6cb9d2e4b Even though binaries will give 0 matches, make it explicit. 2004-07-27 16:59:35 +00:00
Mike Makonnen
15eb1e8b45 Ports related rc.d cleanups:
o Separate out local (ports) scripts that use rc.d, and the old style
  startup/shutdown scripts and execute them separately. On startup the
  rc.d style scripts are executed first and then the old-style scripts.
  On shutdown, exactly the reverse happens.
o The rc.d ports scripts should now behave more like base system scripts.
  Scripts ending in .sh will be sourced into the current shell, while the
  rest will be executed in a subshell. Previously, all ports scripts,
  regardless of the .sh suffix, were executed in a subshell.
o The parent script, /etc/rc.d/localpkg, passes its command line arguments
  straight to the rc.d ports scripts. This means they should now honor
  faststop and faststart commands as well. Old style scripts, should not see
  any differences. They will still get either a start or stop command.
o The initial phrase shown during shutdown has been changed to use
  "local packages" instead of "daemon processes" to be more inline with the
  phrase used during local package startup. The phrases are also used only for
  old-style ports script startup/shutdown, whereas previously they were being
  used for both rc.d and old-style scripts. This should make startup/shutdown
  output a bit less ugly.

Discussed with:	portmgr
Has Reservations: eik
2004-07-24 14:56:21 +00:00
Simon L. B. Nielsen
64785dbd46 For the gbde attach script:
- Ask the user up to X times (3 by default) for the pass-phrase, if
  it is incorrect the first time.
- Add support for storing the lockfiles in another other directory
  than /etc.
- Document that it is possible to override the location of each single
  lockfile.

Approved by:	pjd
2004-07-18 18:01:48 +00:00
Max Laier
b78518bb34 Swap order of ruleset load and enabling pf to work around a problem on altq
startup. Moreover, this is the "more logic" order.
2004-06-23 01:42:06 +00:00
Dag-Erling Smørgrav
e0ae81f32a Correct an error carried over from the nsswitch.conf(5) manual page; add
a note to UPDATING since users may have to manually remove an incorrect
nsswitch.conf.

Noticed by:	simon
2004-06-21 19:38:58 +00:00
Brian Feldman
d5ed4f061e Allow setting the system console keyboard via the ${keyboard} rc.conf
directive.
2004-06-18 20:09:30 +00:00
David E. O'Brien
1a32b4cbcf Back out rev 1.3.
This is one of the few RC scripts that doesn't use rc.subr, and thus
doesn't source rc.conf. :-(
2004-06-08 19:53:25 +00:00
David E. O'Brien
749fdbb557 Don't assume everyone's /etc/[default/]rc.conf 'entropy_file' is "/entropy". 2004-06-07 09:16:19 +00:00
Jens Schweikhardt
d8beb0fd3b Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
Hajimu UMEMOTO
b351b78a10 Add ip6addrctl_enable and ip6_addrctl_verbose option. If
ip6addrctl_enable is set to YES, address selection policy is installed
into kernel.
If there is /etc/ip6addrctl.conf, it is used for address selection
policy.  Even if there is no /etc/ip6addrctl.conf, we install default
policy.  In this case, if ipv6_enable is set to YES, we use address
selection policy described in RFC 3484 as default.  Otherwise, we
install priority policy for IPv4 address.
The default of ip6addrctl_enable is NO for now.  However, it may
better to enable it by default.
2004-06-02 09:39:49 +00:00
Dag-Erling Smørgrav
5f3ba2f5d4 Install nsswitch. 2004-05-24 14:17:19 +00:00
Dag-Erling Smørgrav
cba155c0c2 If nsswitch.conf does not exist, create it with the default settings.
The reason for doing this is that (at least some) 4.x binaries are very
unhappy if host.conf does not exist, and if we create host.conf but not
nsswitch.conf, nsswitch.conf will be created at the next reboot, so it
is better to create a correct nsswitch.conf right away.
2004-05-24 11:53:26 +00:00
Dag-Erling Smørgrav
749f60c715 Move the task of updating nsswitch.conf / host.conf into a separate
script called nsswitch.
2004-05-24 11:48:58 +00:00
Mike Makonnen
56d01be439 Really remove the return statement this time. Thanks to
ru for noticing.
2004-05-20 15:53:49 +00:00
Mike Makonnen
63d260104a The err routine requires two arguments: an exit value and a string.
Additionaly, it will exit the script so an return statements after
calling it are superflous.
2004-05-20 14:16:05 +00:00
Nate Lawson
ccc09458fa Change hw.acpi.cpu.cx_lowest to accept values in the form of C1,
C2, ...  Update power_profile to use the new format.  Update the
man page to reflect this and give more info on Cx states.
2004-05-07 05:22:38 +00:00
Poul-Henning Kamp
d8337944e0 Protect som cross-script invocations by checks to see that the target
script exists.  This allows pruning of rc.d scripts without getting
too many ugly boottime error message
2004-04-28 13:20:15 +00:00
Poul-Henning Kamp
8956ceaff0 Initdiskless must run before ipfw, or people will not be able to
use the conf/* stuff for their firewall configuration.

Running ipfw before could seem to make sense in that it would allow
one to setup access to the NFS server on a "default-deny" kernel,
but it is pretty obvious to the casual observer that such a configuration
never makes it far enough to mount the NFS-root in the first place.
2004-04-28 13:18:22 +00:00
Ruslan Ermilov
3ee3cd3165 Replace shell's positional parameters safely. 2004-04-28 09:09:27 +00:00
Poul-Henning Kamp
edf28a672b When using this in non-NFSroot circumstances, mount -t nfs may
return empty.  Add a dummy element to prevent the alternate action
of the shell builtin "set"
2004-04-27 15:42:34 +00:00
Simon L. B. Nielsen
f59f70e231 Removes the check for the existence of the sysctl variable
debug.watchdog since it is not created by hardware watchdog(4) devices.
The watchdog(4) device is always compiled in the kernel, so removing the
check should not cause any problems.

Approved by:	phk
2004-04-26 19:41:37 +00:00
Darren Reed
da48dbe191 apply patch so pr can be closed
PR:		misc/56715
Submitted by:	grant@NetBSD.org
Reviewed by:	darrenr
2004-04-20 13:30:49 +00:00
Max Khon
ca813d2986 sendmail_submit_enable and sendmail_outbound_enable checks were reverted.
Found by:	Morten Rodal <morten@rodal.no>
2004-04-17 19:09:09 +00:00
Brooks Davis
7aa81b88a2 Actually install preseedrandom.
Reported by:	bde
2004-04-17 04:12:27 +00:00
Brooks Davis
21462105eb Remove bogus checks on the value of ${entropy_file} and hardcode out
entropy source to /entropy.  We have to assume there is no rc.conf at
this stage of the boot process.

Reported by:	njl
2004-04-15 18:23:14 +00:00
Brooks Davis
6ea20e1c98 Band-aid diskless booting by running a new preseedrandom script before
initdiskless.  The output of several commands and if available the
contents of /entropy are feed into /dev/random to kickstart the PRNG.
/etc/rc.d/initrandom is left alone to maintain the previous behavior as
much as possiable.

Further work in this area is probably needed.

Discussed with:	markm
2004-04-15 17:52:53 +00:00
Brooks Davis
ff356053a1 Catch up with diskless split "diskless" is no longer provided.
Suggested by:	cperciva
2004-04-12 18:11:00 +00:00
Mark Murray
37c79b8006 Take into account hardware-supplied entropy. If the entropy source
is hardware, the Yarrow initialisations don't need to be done.
2004-04-09 15:56:16 +00:00
Wes Peters
85d4d6aa5b Style fixes, as suggested by Jens Schweikhardt <schweikh@schweikhardt.net> 2004-04-06 23:15:48 +00:00
Wes Peters
6e46025ebf Split ramdisk processing in two so it can actually work. Ownerships
and permissions specified per rc.conf(5) now apply both to the md
device and to the mountpoint directory, after the mount has completed.
This has to be done in two steps, because chown is not available
until after /usr has been mounted, but the mdconfig and newfs steps
have to complete before fstab processing.
2004-04-06 18:26:43 +00:00
Max Khon
a3e34d6908 Add separate script for natd. This fixes race condition with "ipfw restart"
(when new natd is started before old natd died) and allows to manage natd
without touching ipfw.

natd should probably be killed with SIGKILL when stopping natd.
2004-04-05 16:29:45 +00:00
Max Khon
299b2a180b Allow this script to be used for Postfix:
- Use sendmail_foo variables after load_rc_config so that they actually work.
- Utilize sendmail_procname.
- Check sendmail_submit_enable instead of sendmail_enable when dealing
with mail submission MTA.
2004-04-05 16:26:22 +00:00
Max Laier
6cd9ebedd7 Add rc.d script to start pflogd and add rcvars etc. Also document vars in
rc.conf(5) and put a sample entry to newsyslog.conf

Reviewed by:	-current
Approved by:	bms(mentor)
2004-04-02 19:25:27 +00:00
Kirill Ponomarev
0a25d7a9ea - Use "/bin/hostname" explicitly instead of "hostname".
Approved by:	tobez
MFC after:	1 week
2004-04-02 12:18:40 +00:00
Luigi Rizzo
99e9614386 Extensive documentation changes to the script, but only
comments and empty lines have been touched.

All of this should go in the diskless(8) manpage, now if we had
some kind of 'literate programming' tool to extract the comments
from the script and put them in a reasonable nroff format, it
would be a lot easier to keep code and docs in sync
2004-03-31 08:43:20 +00:00
Luigi Rizzo
220ee8be37 Minor changes mostly as discussed on the lists a few days ago:
+ SUBDIR.cpio.gz prevents files from SUBDIR/ to be copied when
   priming the memory filesystems. This restores the old behaviour
   and makes the copy process a lot more efficient

 + look for templates also in the list of directories supplied by
   bootp/dhcp via the T134 option aka kern.bootp_cookie

 + keep track of directories temporarily mounted with "remount"
   or "diskless_remount" commands and unmount them once we are done
   with them (at the end of this script).
2004-03-31 07:24:15 +00:00
Dag-Erling Smørgrav
696733c7fa Fix the case where $ntpdate_hosts was not specified and /etc/ntp.conf
does not exist.

Submitted by:	ru
2004-03-29 20:00:54 +00:00
Doug Barton
af85ab16a3 A few small cleanups:
1. Add the shutdown keyword so that the script is run at shutdown time,
and the mixer* files are saved.
2. Twiddle whitespace.
3. Remove an unecessary function, and therefore collapse one variable.
2004-03-27 09:26:22 +00:00
Max Laier
f5559064a9 Install the pf rc.d-script (missed Makefile update in original commit)
Approved by:	bms(mentor)
2004-03-24 21:54:44 +00:00
Pawel Jakub Dawidek
b4dae77e8b Added 'nojail' keyword for rc.d/mixer script, while mixer(8) is not
usable in jail by default (no /dev/mixer).
2004-03-24 12:49:34 +00:00
Brooks Davis
3e091039ee Overhaul the /etc/rc.d/diskless script by splitting it out into
hostname, resolve, tmp, and var scripts.  The latter three are new and
were repo copied.  These scripts no longer depend on being booted with
and NFS root instead attempt to automaticly create mfs /tmp and /var
volumes if the they are not writable.  This behavior can be overridden
in /etc/rc.conf.

Reviewed by:    luigi, pjd
2004-03-23 23:22:35 +00:00
Max Laier
1f4408f321 Add rc.d script for pf(4) (more to come once pflogd(8) works as well).
Update defaults and write some lines for rc.conf(5) also.
Mostly dup'ed from ipf

Reviewed by:	-current
Approved by:	bms(mentor)
2004-03-23 22:30:15 +00:00
Dag-Erling Smørgrav
75213c3ed7 Set start_cmd and stop_cmd correctly so the code that extracts the names
of the ntp servers from ntp.conf is actually used.  Remove pidfile since
ntpdate is not a daemon.
2004-03-22 16:35:35 +00:00
Brian Feldman
1cc06a21b6 Add a way for rc.d/devfs to set more than just the system devfs up.
Yes, this means for stuff OTHER than jails, too.  Example usage:
#devfs_system_ruleset="root"
devfs_set_rulesets="/dev=root /etc/namedb/dev=named_devfs"
2004-03-20 07:10:16 +00:00
Chad David
450e8255a1 Echo and pass dumpdev as the device argument to savecore.
PR: bin/51655
2004-03-18 15:18:20 +00:00
John Baldwin
659dc72f99 Add a mixer script that saves the current settings of all mixers present
in the system on shutdown and restores the settings on boot.  The settings
can also be reset to the saved values via 'mixer reload'.

Reviewed by:	current@
2004-03-15 23:09:17 +00:00
Wes Peters
68898c7350 Add script for creating ramdisks at boot time, in time to be processed
by fstab.
2004-03-15 18:36:21 +00:00
Doug Barton
0a54defb08 1. Remove the named_rcng variable. Mike's caution in this area was a good
thing, but we're ready to move on.

2. Remove the -g default argument in named_flags. It doesn't actually do
what most users think it does, and what most users want it to do is already
accomplished with a proper default group for the bind user, which we have.
Also, the -g knob does something entirely different in BIND 9, which leads
to a lot of needless confusion/aggravation.

3. In the rc.d script, don't bogusly override $command, or $rc_flags. Both
are adequately handled in rc.conf[.local].

4. DO properly override $rc_flags if user has named_chrootdir set.
This may need to be revisited, but should be ok for now.

5. Protect all chrootdir-related bits under that variable, instead of
named_rcng.

There is more work to be done here, especially in the area of BIND 9
compatibility, but this is a start at least.

Prompted in part by (legitmate) grousing from: kuriyama, Randy Bush
2004-03-14 19:10:06 +00:00
Brooks Davis
14b34e45f8 If /conf/diskless_remount exists, use it to remount the entire /conf
directory.  This allows multiple roots (say for different architectures)
to share the same set of /conf files.
2004-03-12 04:40:16 +00:00
Tim Kientzle
9a7e5d92a7 Don't run fsck if there's no /etc/fstab.
In particular, this allows a "virgin" system installed from
source (installworld, installkernel, cd etc && make distribution)
to boot correctly and modestly simplifies the creation
of single-partition network/cdrom/CF bootable images.
2004-03-11 20:00:10 +00:00
Poul-Henning Kamp
4238829d77 Make this file more generally usable:
Trigger not only on diskless booting sysctls being set, but also
on the existence of the file "/etc/diskless".  But do not try to
extract IP# related keywords in that case.

Add a general "remount" facility to allow non-NFS remounting.
2004-03-09 23:06:50 +00:00
Pawel Jakub Dawidek
bd57d5b0f5 Mark scripts as not usable inside a jail by adding keyword 'nojail'.
Some suggestions from:	rwatson, Ruben de Groot <mail25@bzerk.org>
2004-03-08 12:25:05 +00:00
Bruce Evans
6ed53a0a05 Removed definition of NOPROG. It was just a style bug (a NetBSD macro
that became obsolete in NetBSD 22 months ago).

Submitted by:	ru
2004-03-05 16:13:22 +00:00
Pawel Jakub Dawidek
6be8dbad95 One tab too much. 2004-03-05 09:18:40 +00:00
Pawel Jakub Dawidek
303d38369a Teach 'hostname' script how to act inside a jail.
No objections from:	mtm, arch@
2004-03-05 09:17:01 +00:00
Mike Makonnen
fdf7479859 When this script included NetBSD specific logic, the NetBSD branch
included a start_precmd check for gated. The precommand was not
executed in the FreeBSD branch. When I did a mass removal of
NetBSD specific logic a while back this file apparently got only
a partial treatement. This bug did not have any functional consequences,
however, since the precommand was not declared to the rc.subr routines.

Noticed by: pjd
2004-03-05 08:03:04 +00:00
Mike Makonnen
fc3a64301a The syslogd script should require that /var is cleaned before it runs.
Otherwise it could be in the situation where its log socket is removed
after it has started.

Noticed by: jhay
2004-03-05 07:55:04 +00:00
Mike Makonnen
6e571c7035 Remove scripts we don't use from requirement lines. These were
hold-overs from the initial NetBSD import.
2004-03-05 07:43:38 +00:00
Bruce Evans
10c707cd50 Removed include of bsd.own.mk. It was just a style bug (half-baked
chumminess with the implementation).
2004-03-05 05:48:58 +00:00
Bruce M Simpson
140e05c9db Forgotten commit: Hook /etc/rc.d/ike up to the build. 2004-03-04 21:03:36 +00:00
Mike Makonnen
30c360afba From the PR:
Certain MTA configurations mean that the notifications from
	virecover keep bouncing; so here's a patch to allow administrators
	to turn them off.

PR:		conf/54910
Submitted by:	bms (with a minor cleanup)
2004-03-03 15:21:01 +00:00
Brian Feldman
2e8fe46f97 Further shuffle runcom ordering so that netif does not start before
ipfw, but ipfw and ipfilter do start before dhclient.
2004-02-29 01:42:48 +00:00
Brian Feldman
c9b510efc9 What depends on ipfilter should probably also start ipfw at the same time. 2004-02-27 22:08:19 +00:00
Christian Brueffer
7f69f64c25 Fix typo 2004-02-23 22:00:44 +00:00
Mike Makonnen
3c8e9ebafb Don't forget to enable the ipv6 firewall once the rules are loaded.
PR:		misc/61501
Submitted by:	Roderick van Domburg <r.s.a.vandomburg@student.utwente.nl>
2004-02-19 06:53:24 +00:00
Mike Makonnen
097b26a617 In-line documentation.
Prodded by: alfred
2004-02-19 05:49:06 +00:00
Johan Karlsson
c1405562c4 Fix typo in comment, s/reebots/reboots/
PR:		62481
Submitted by:	Ulrich Spoerlein <q at uni.de>
2004-02-07 23:13:28 +00:00
Warner Losh
a88ffc6f99 ttys is gone, kill it here too 2004-02-07 15:46:20 +00:00
Mike Makonnen
a8811e9d1d Now that devfs is mandatory, there is no need to muck around
with tty/pty permissions.

Noticed by:	brooks
OKed:		phk
2004-02-07 07:10:25 +00:00
Dag-Erling Smørgrav
4cef3cb0e3 Require initrandom rather than random, since random requires
mountcritlocal, which requires disks, which gbde_swap provides.

Noticed by:	brooks
2004-02-05 21:40:37 +00:00
Dag-Erling Smørgrav
df3ac04211 We don't really need a lockfile, and most likely can't create one at
this point.
2004-02-04 15:53:49 +00:00
Mike Makonnen
33dc111393 o Unbreak the individual jail starting patch that I broke when
I committed it. Apologies to Juergen Unger <j.unger@addict.de>.
o When stopping jails output the hostname of the jails that
  were stopped.
o Refactor
o Remove extraneous empty line
o Correct spelling error
2004-02-03 12:59:30 +00:00
Dag-Erling Smørgrav
607b5a9109 Add support for initializing swap devices with random one-shot keys. Note
that the keys are currently generated by computing the MD5 checksum of 512
bytes read from /dev/random, and are passed to gbde on the command line.

Sponsored by:	Teleplan AS
2004-02-03 11:26:08 +00:00
Dag-Erling Smørgrav
87e1ee7afb Missed one in previous commit. 2004-02-03 10:22:55 +00:00
Dag-Erling Smørgrav
b324f932ff Style fixes. 2004-02-03 10:21:35 +00:00
Mike Makonnen
2104ae4ea4 Configure a jail sysctl value only if it is different than
what the rc.conf(5) knob specifies. Also, correct a minor
capitalization error.
2004-02-03 07:15:32 +00:00
Pawel Jakub Dawidek
40c0076346 Teach /etc/rc.d/dumpon script how to stop.
Reviewed by:	gordon
Approved by:	gordon, scottl (mentor)
2004-02-02 19:05:06 +00:00
Mike Makonnen
5d2885f928 Support starting/stoping of jails individually.
This commit also removes the support for the sysutils/jailer port. This
is inline with the general policy to keep ports related knobs out
of the base system's configuration mechanism.

Submitted by: Juergen Unger <j.unger@addict.de>
2004-02-02 13:25:28 +00:00
Nate Lawson
c5f3bff0be Remove only X[0-9]-lock. 2004-01-27 18:19:32 +00:00
Maxime Henrion
226b72f862 Move the test used to determine whether IPFilter is loaded or not
into its own function to avoid a small duplication of code.
2004-01-24 20:40:11 +00:00
Mike Makonnen
fe93d19e19 Remove an extraneous semicolon (;;). 2004-01-17 11:52:37 +00:00
Mike Makonnen
82e3bcc0d5 Use the checkyesno routine instead of a case statement to
check an rc.conf(5) variable. This is in line with rc.d style.
2004-01-17 11:31:15 +00:00
Mike Makonnen
e27b3ff8b6 Remove checks for the FreeBSD OS. 2004-01-17 11:25:16 +00:00
Mike Makonnen
e90a5063a4 Make conform to general rc.d style. 2004-01-17 11:19:01 +00:00
Mike Makonnen
f2bdfc7dc7 o Rename the start command to conform to rc.d style.
o Move the additional commands list to the end of the
  variable initialization to conform to rc.d style
2004-01-17 11:15:04 +00:00
Mike Makonnen
143d8a9539 Simplify setting of securelevel. 2004-01-17 11:11:18 +00:00
Mike Makonnen
62e02b0dad Remove variables whose sole purpose was to make easier to
work with the NetBSD specific stuff.
2004-01-17 11:06:41 +00:00
Mike Makonnen
82387f41ed Luke Mewburn has indicated that they (NetBSD) are not interested
in keeping the scripts under rc.d in sync with us. So, remove
NetBSD specific stuff (which made our scripts more complicated
than necessary).

The NetBSD ident string will be left intact, both for history and
also incase we wish to pull in future versions.
2004-01-17 10:59:43 +00:00
Mike Makonnen
9dd342fee6 Luke Mewburn has indicated that they (NetBSD) are not interested
in keeping the scripts under rc.d in sync with us. So, remove
NetBSD specific stuff (which made our scripts more complicated
than necessary).

The NetBSD ident string will be left intact, both for history and
also incase we wish to pull in future versions.
2004-01-17 10:40:45 +00:00
Mike Makonnen
1afce00360 Luke Mewburn has indicated that they (NetBSD) are not interested
in keeping the scripts under rc.d in sync with us. So, begin removal
of NetBSD specific stuff (which made our scripts more complicated
than necessary), starting with the NetBSD KEYWORD.
2004-01-17 10:16:38 +00:00
Brooks Davis
f0e62d30bd Don't run newaliases if sendmail_enable=NONE.
Submitted by:	Matt Peterson <matt at peterson dot org>
Approved by:	silence on freebsd-rc
2004-01-05 19:14:47 +00:00
Sergey Babkin
dfa244fc22 Added support for intelligent handling of DST transitions in cron.
reviewed by: imp
2003-12-25 23:29:19 +00:00
Nate Lawson
3662033599 Add power_profile, a script that changes the ACPI CPU Cx idle state and/or
the throttling state in response to line transitions.  Future plans
include adding support for CPU frequency changes.

Add a devd.conf entry for calling this script.

The default values for this are:
performance_cx_lowest="HIGH"       # Use HLT (C0) online
performance_throttle_state="HIGH"  # 100% (no throttling)
economy_cx_lowest="LOW"            # Use the lowest Cx state possible
economy_throttle_state="HIGH"      # 100% (no throttling)
2003-12-18 04:39:57 +00:00
Sean Chittenden
12335de1f5 Backout ataraid rcng script. I must have missed ar0 in my scan of /dev
after my first reboot because sure enough, I'm seeing it there now and
ata(4) is doing the right thing(TM).

Pointed out by:	des
2003-12-14 13:36:36 +00:00
Sean Chittenden
7e6b2a1467 Add a script that allows software RAID sets to be created before file
systems are mounted.  An example set of entries for /etc/rc.conf:

ataraid_enable="YES"
ataraid_devices="ar0"
ataraid_ar0_set="ad2 ad3"
ataraid_ar0_type="RAID1"

Because there is no "correct" way of doing ATA raid (ie, geom vs.
atacontrol vs. vinum) that is bikeshed proof, this rcng script stays within
the bounds of atacontrol and assumes that other RAID solutions for GEOM or
vinum will end up in a different rcNG script.

Reviewed by:	green
2003-12-14 09:42:02 +00:00
Peter Wemm
a0ac36d5f1 Change rc.d/syscons to not need /usr/sbin/ispcvt to exist. This should
make it work for all non-i386 syscons platforms.
2003-12-10 15:48:49 +00:00
Mike Makonnen
ed0bd3657c o Rename devfs_link() to make_symlink() and turn it into a generic
symlinking routine.
o Modify rc.d/jail to create its own symlink relative to the jail's
  filesystem
2003-12-09 08:51:11 +00:00
Mike Makonnen
16805414e4 If fdescfs(5) is mounted in a jail unmount it before devfs(5).
Submitted by:	"Scot W. Hetzel" <hetzelsw@westbend.net>
2003-12-09 08:32:43 +00:00
Mike Makonnen
71516efe7b If rc.d/mountcritlocal is unable to mount local filesystems,
then immediately terminate the shell (during boot this
also terminates the parent rc(8) shell). This was the pre-rcNG behaviour.

Also, remove an extraneous mount /.

PR:		conf/57659
Submitted by:	yar (with modifications)
2003-12-09 08:17:33 +00:00
Mike Makonnen
7645a316db Redirect rc(8) output to a file in the jail's /var/log directory.
Previously it was redirected to /dev/null.

Submitted by: phk
2003-12-09 08:09:04 +00:00
Mike Makonnen
c4818267a4 When clearing /tmp, X11 lock and temporary files are special.
Remove them unconditionaly.

PR:		bin/59065
Approved by:	re (scottl)
2003-12-01 16:35:57 +00:00
Bruce M Simpson
a2ed0b4e3d Add a means of starting an IKE daemon from the rc system at an appropriate
time during the boot process. This is needed in the case where NFS mounts
from servers reachable only via IPSEC are in /etc/fstab.

PR:		conf/42497
Submitted by:	Volker Stolz
Approved by:	re (rwatson)
2003-11-28 17:28:42 +00:00
Maxime Henrion
0bb582b106 Change a bogus -n parameter to echo(1). 2003-11-03 17:03:01 +00:00
Hajimu UMEMOTO
2fa02b748e install address selection policy into kernel when there is
/etc/ip6addrctl.conf.
following sample of ip6addrctl.conf is a good default:

#Prefix       Precedence Label
::1/128               50     0
::/0                  40     1
2002::/16             30     2
::/96                 20     3
::ffff:0:0/96         10     4
2003-10-30 17:55:52 +00:00
Doug Barton
809a0e6290 * Remove the OS specific bits, since NetBSD isn't interested in
porting this stuff back.

* Test /etc/motd for writability before trying to update it. This is
especially useful when /etc/ is mounted ro, like on a diskless boot.
(Thanks to phk for the idea on this one.)

* Make the "updating" message reflect what actually happens.
2003-10-13 08:44:07 +00:00
Doug Barton
76f9428757 Remove trailing whitespace 2003-10-13 08:20:55 +00:00
Doug Barton
9f29b7170b Update references to rc.diskless[12] 2003-10-13 08:18:05 +00:00
Kris Kennaway
63d707097e Bump default /etc size from 2MB to 5MB to deal with bloat^Wgrowth in
the size of /etc.
2003-10-12 00:19:45 +00:00
Poul-Henning Kamp
e0f8a7e7af Fix typo.
Spotted by:	"Bjoern A. Zeeb" <bzeeb@zabbadoz.net>
2003-10-03 19:57:58 +00:00
Poul-Henning Kamp
027ec595a1 More checking if kenv actually know something.
Guard against test(1)-unfriendly outputs from kenv.
2003-10-03 19:07:31 +00:00
Poul-Henning Kamp
91c1935fe5 In case we have no /etc/resolv.conf, don't try to make it out of
thin blue air if the kenv doesn't have any info.

This improves the truth value of the comment above significantly and
reduces the bogous output on the console considerably.
2003-10-03 18:26:33 +00:00
Maxime Henrion
c7b33a84a4 Fix bogon in ipfilter_resync() introduced in my last commit.
Spotted by:	Gennady Proskurin <gpr@nvnpp.vrn.ru>
2003-10-03 11:57:43 +00:00
Maxime Henrion
50e8b3f340 A number of fixes/enhancements for the ipfilter rc script:
- Use a more robust check to determine if we need to load ipl.ko.
- Don't try to run ipf -E if ipfilter is already enabled.  Look at
  the net.inet.ipf.fr_running sysctl to figure this out.  This fixes
  a warning message about ipfilter being already initialized.
- Only one ipf -E command is needed.  We don't need an extra one for
  the -6 case which would only print a warning message about ipfilter
  being already initialized.
- Fix one occurence where we were running /sbin/ipf directly without
  using the ${ipfilter_program} variable if set.
- In ipfilter_stop(), don't try to save the firewall state tables if
  ipfilter is disabled.  Similarly, don't try to disable it if it's
  already disabled.  This fixes some more error messages.
2003-09-27 13:50:47 +00:00
Martin Blapp
0c6d0171e6 Get rid of a nasty error message that tells us
dhclient couldn't get killed.

If we execute 'dhclient -r', dhclient gets already
killed, so there is no need to do it twice. Only do
this if we really have to release some leases.

Reviewed by:	silence on freebsd-rc@yahoogroups.com
2003-09-16 02:56:13 +00:00
Mike Makonnen
c09d2c2bc2 Remove deprecated files no longer neccesary as part of rc.d. Include
a note in UPDATING about removing them from current installations.
2003-08-29 13:25:08 +00:00
Mike Makonnen
66338db9e9 Enhance the jail start/stop script.
o The following additional configuration attributes of a jail can be
  controlled from rc.conf:
	- mounting devfs(5)
	- mounting fdescfs(5)
	- mounting procfs(5)
	- custom devfs(8) ruleset
	  If no ruleset is specified, the default jail ruleset is used.

o The output of executing /etc/rc in the jail is now redirected
  to /dev/null. Instead, the hostname of the jail is echoed if
  the jail(8) command exited successfully. If the output is wanted
  it can probably be redirected to a file (/var/run/$jail maybe)
  instead of /dev/null.

Submitted by:	Scot W. Hetzel <hetzels@westbend.net>
		with modifications by Jens Rehsack <rehsack@liwing.de>
		and me.
2003-08-24 06:29:32 +00:00
Mike Makonnen
130112f793 Add a general mechanism for creating and applying
devfs(8) rules in rc(8). It is most useful for applying
rules to devfs(5) mount points in /dev or inside jails.
The following line of script is sufficient to
mount a relatively useful+secure devfs(5) in a jail:

	devfs_mount_jail /some/jail/dev

Some new shell routines available to scripts that source
rc.subr(5):
	o devfs_link		- Makes it a little easier to create symlinks
	o devfs_init_rulesets	- Create devfs(8) rulesets from devfs.rules
	o devfs_set_ruleset	- Set a ruleset to a devfs(5) mount
	o devfs_apply_ruleset	- Apply a ruleset to a devfs(5) mount
	o devfs_domount		- Mount devfs(5) and apply some ruleset
	o devfs_mount_jail	- Mount devfs(5) and apply a ruleset
				  appropriate to jails.

Additional rulesets can be specified in /etc/devfs.rules.
If the devfs_system_ruleset variable is defined in rc.conf
and it contains the name of a ruleset defined in /etc/defaults/devfs.rules
or user supplied rulesets in /etc/devfs.rules then that ruleset will
be applied to /dev at startup by the /etc/rc.d/devfs script. It can
also be applied post-startup:

	/etc/rc.d/devfs start

This is a more flexible mechanism than the previous method of using
/etc/devfs.conf. However, that method is still available.

Note: since devfs(8) doesn't provide any way for creating symlinks
as part of a ruleset, anyone wishing to create symlinks in a devfs(5)
as part of the bootup sequence will still have to rely on /etc/devfs.conf.
2003-08-20 06:15:18 +00:00
Jun Kuriyama
7a79a9d713 Quote $jail_exec with double-quote to avoid "[: unexpected operator". 2003-08-19 03:49:30 +00:00
Gordon Tetlow
a4e945c1f9 Prepend /lib to the search order for libraries. 2003-08-17 07:49:11 +00:00
Hartmut Brandt
8b296e19bd Now that routes for IP over ATM may look much more complex than before,
use the atmconfig(8) utility instead of route(8) to install those routes.
For this we need a new rc.conf variable natm_static_routes that works
just like static_routes except that the referenced routes use the syntax
of atmconfig(8).

Okay'ed by:	mtm
2003-08-14 15:27:32 +00:00
Max Khon
4bab0ee528 Correct typo in Matt's name. 2003-08-07 21:06:32 +00:00
Mike Makonnen
41f0e9d32c Rename localdaemons to localpkg.
The original name was really a mistake since
/usr/local/etc/rc.d scripts can (and usually do) start
more than just daemons. Even the output in the script
uses 'local packages.' Also, the term 'local daemons' is
used by rc.d/local, which was etc/rc.local of rcOG fame.
No repo-copy because there isn't much history to save.
I will remove localdaemons shortly with all the other
files that don't belong in rc.d anymore.

Discussed with:	dougb, freebsd-rc@yahoogroups.com
2003-08-06 00:35:13 +00:00
Mike Makonnen
770086e47b Apply some sort of order to the FILES list. 2003-07-30 20:05:20 +00:00
Mike Makonnen
81ad367d25 Add two files (early.sh and gbde) that previously were not
hooked up to the build.
2003-07-30 19:53:40 +00:00
Mike Makonnen
7a34a70b8d tty whacking should occur early, but not so early that the
required commands are not on a mounted file system.

Noticed by: bde
2003-07-30 18:53:59 +00:00
Hartmut Brandt
c5670cc3b1 Convert the atm{2,3}.sh rc scripts to normal rc.d scripts. Add support
for the harp(4) pseudo driver and for loadable native HARP drivers
(like hfa_pci).

To use harp(4) the rc variable natm_interfaces must be set to the
list of NATM interfaces to be used for HARP. These interfaces
will be brought up with ifconfig and the harp(4) will be loaded.

To use loadable native HARP drivers atm_load must be set to
the list of drivers to load.

Reviewed by:	mtm, gordon (partly)
2003-07-28 13:30:42 +00:00
Martin Blapp
0888a8766e Always start dhclient in the background.
Reviewed by:	mtm
2003-07-28 08:15:52 +00:00
Martin Blapp
60613d0ae7 Add -dynamic to natd if dhcp is used for the natd interface.
Kill natd in stop().

Reviewed by:	mtm
2003-07-27 20:34:30 +00:00
Mike Makonnen
a3c2b42158 Define the stop command to do nothing when only a specific
interface is to be stopped. In this case we don't want to go
beyond releasing the lease.
2003-07-26 18:58:46 +00:00
Mike Makonnen
312ba8d00a When stopping a dhcp interface, don't just release the lease on
the address, also kill the dhclient process. Instead of doing the
release in the stop command, move it to the precmd stage and allow
rc.subr(8) to automatically kill the dhclient process by leaving the
stop command undefined.

Noticed by:	mbr
2003-07-26 18:50:53 +00:00
Mike Makonnen
1fa84077e8 Move a period out of an if... clause. The period terminates the
line and must always appear on the line.

Submitted by:	netchild
2003-07-15 12:39:37 +00:00
Mike Makonnen
5a44cde9d8 Make sure ipmon is run after cleaning up in /var. Otherwise,
we would lose it's pid file. Also, cleanup the depencies in
rc.d/cleanvar

PR: bin/53516
2003-07-14 13:02:36 +00:00
Mike Makonnen
1cb7d2af50 Not everyone uses the base system sshd. They can use the sshd_program
variable in rc.conf to have sshd from ports (or somewhere else) installed.
So, don't make the sshd_config for the base system a required file
to start the service.

PR: conf/45766
2003-07-13 01:49:07 +00:00
Mike Makonnen
1790807ec0 Be specific about which domainname is not set. It seems the man page
reference is not enough.
2003-07-09 03:21:03 +00:00
Mike Makonnen
3b5ba84fd2 Have mktemp(1) construct the temporary file name for us instead
of providing a template manually.

Submitted by:	Lars Eggert <larse@isi.edu>
2003-06-30 22:06:26 +00:00
Brooks Davis
a83659958b Allow diskless_remount files to contain path beginning with / which will
be mounted relative to the NFS root mountpoint.

Reviewed by:	dillon at backplane.com
MFC After:	3 days
2003-06-30 21:47:06 +00:00
Tom Rhodes
f74dd4e7cc Properly use ld.so.conf and ld-elf.so.conf as discussed in the manual page.
PR:		25527
Submitted by:	Alexey Neyman <alex.neyman@auriga.ru>
Reviewed by:	jdp
2003-06-30 15:02:05 +00:00
Mike Makonnen
63e11eb5e3 Ugh. Remove debugging echo. 2003-06-29 17:59:09 +00:00
Mike Makonnen
b166db2bfd Implement individual operations on static and dhcp interfaces. Previously
network interfaces could only be turned on and off as a group (all
static interfaces or all dhcp interfaces).

When used to start the interface a 'long form' ifconfig output is
used to show the status of the interface, but when stopping an interface
the script will simply output the name of the interface. This is simply my
personal preference. Hopefully as this functionality matures we can
stabilize on a prefered form of output for these scripts.

A stop command to the dhclient script now explicitly releases the dhcp lease.
Behaviour at system shutdown; however, is unchanged since dhclient is not,
by default, run at that time. The client will not release its lease
at shutdown.
2003-06-29 05:34:41 +00:00
Mike Makonnen
2a7ea7e487 o Hookup rc.d/routing and rc.d/netoptions
o Ensure rc.d/network2 and rc.d/network3 are not automatically run
  during boot
o Modify script headers so rcorder(8) can put the two scripts in the
  correct sequence.
2003-06-29 05:15:57 +00:00
Mike Makonnen
cf6b0ea705 o Repocopied routing and netoptions from network2 and network3, respectively.
o Change the provider names.
o Separate routing into two parts: static routing and routing options. The
  start command will run both parts, but they can be run separately using
  the static and options command, respectively:
  (/etc/rc.d/routing static; /etc/rc.d/routing options)
2003-06-29 05:09:48 +00:00
Sean Kelly
370c3cb57c - Add a software watchdog facility.
This commit has two pieces. One half is the watchdog kernel code which lives
primarily in hardclock() in sys/kern/kern_clock.c. The other half is a userland
daemon which, when run, will keep the watchdog from firing while the userland
is intact and functioning.

Approved by:	jeff (mentor)
2003-06-26 09:50:52 +00:00
Poul-Henning Kamp
6594eed30a Remove the devdb stuff, the kernel answers these questions just fine. 2003-06-20 09:47:09 +00:00
Garrett Wollman
41598123b9 Add a script to automatically attach gbde devices found in fstab
(or rc.conf) at boot time, and detach them when shutting down.  Not
added to the Makefile to give the rcng gurus an opportunity to improve
it.
2003-06-17 02:56:29 +00:00
Bruce Evans
5ea728feec Fixed some style bugs (disorder and long lines). 2003-06-11 23:17:01 +00:00
Mike Makonnen
8d2536a058 o Have rc.d/apm report on the status of apm.
o Modify rc.d/apmd to make correct use of this information.

Submitted by: Simon L. Nielsen <simon@nitro.dk> (with minor modifications)
2003-06-09 17:44:30 +00:00
Mike Makonnen
d679c13014 The dhcp_program and dhcp_flags variables have to be renamed to
take advantage of the rc.subr(8) glue. They are renamed dhclient_program
and dhclient_flags.
	o Rename them in rc.conf(5)
	o Rename them in /etc/defaults/rc.conf
	o Add the deprecated variables to /etc/rc.subr
	o Isolate the use  of the 'command' variable to the
	  NetBSD specific parts in /etc/rc.d/dhclient.
	o Now that dhcp_flags has also been renamed it will
	  be applied properly by rc.subr(8) glue code.

Reported by:	John Nielsen <john@jnielsen.net>
2003-06-07 10:31:17 +00:00
Mike Makonnen
c2762004a6 Remove a debugging aid the crept in during the last commit. It doesn't
really make much difference since this script is not used during startup
and is due to be removed before RELENG_5.

Submitted by: "Simon L. Nielsen" <simon@nitro.dk>
2003-06-06 13:00:43 +00:00
Gordon Tetlow
25c01919eb Move networkfs_types from mountcritlocal into defaults/rc.conf as netfs_types.
Also add logic into mountcritremote to add extra_netfs_types to the list.

This unbreaks putting smbfs, portalfs and now nwfs in fstab.
2003-06-01 01:43:37 +00:00
Gordon Tetlow
378157120c nwfs is network filesystem. Treat it as such when mounting filesystems. 2003-06-01 00:32:03 +00:00
Mike Makonnen
6aeefcde4b Apparently ldconfig(8) prefers the format as the first argument
with the rest of the options following it. This caused problems for
people using ldconfig_insecure=yes because the '-i' switch was being
positioned before the format argument.

Approved by:	markm/mentor (implicit), re/rwatson
PR:		47430
2003-05-18 03:39:39 +00:00
Mike Makonnen
66d67af4b4 Install kpasswdd.
Approved by: markm/mentor, re/rwatson
2003-05-18 03:34:24 +00:00
Hajimu UMEMOTO
bcd1e80f87 pccard_ether didn't setup IPv6 after rcTOS sweep.
Reviewed by:	mtm and dougb
Approved by:	re (scott)
2003-05-12 11:36:50 +00:00
Mike Makonnen
e27f221c32 s/kadmind5/kadmin/
Approved by:	markm (mentor)
2003-05-06 02:28:03 +00:00
Doug Barton
05ca3441c0 Allow users to configure stuff in /dev once again by re-doing the devfs
script to read /etc/devfs.conf, and take appropriate actions based on
what it finds there.

The (commented out) examples in the new devfs.conf file are taken in
part from the old rc.devfs script.
2003-05-06 01:10:33 +00:00
David E. O'Brien
ae362fa12f Back out the amd64 additions. Hammer doesn't do APM, and we certainly aren't
ready for any ibcs2_compat bits yet.
2003-05-06 00:09:51 +00:00
David E. O'Brien
8ac66afea9 We won't do APM on Hammer -- ACPI is the game there. 2003-05-05 23:55:43 +00:00
Mike Makonnen
575716147b Move securelevel further back in the boot order.
Approved by:	markm (mentor)(implicit)
Reviewed by:	dougb
2003-05-05 15:38:41 +00:00
Mike Makonnen
7361edc7a1 The vi(1) recovery script cannot send mail regarding interrupted
sessions if the mailer is dynamically linked. This happens because
on some systems the ldconfig script is run after the vi recovery
script.

I thought I had already fixed this with revision 1.5 of rc.d/ldconfig,
but apparently not. So, in addition I'm making ldconfig a requirement
of this script.

Approved by:	markm (mentor)(implicit)
PR: bin/51767
2003-05-05 09:53:32 +00:00
Bruce Evans
859992daa9 Catch up with 1995(?) for modem speeds (use 57600 instead of 115200 for
the example host to modem speed).
2003-05-05 03:26:50 +00:00
Bruce Evans
4740b116be When resetting to defaults, reset drainwait to the current default pf
`sysctl -n kern.drainwait` instead of to the boot-time default of 300.
2003-05-04 22:46:33 +00:00
Mike Makonnen
7b579aff4c Huh? When did the etc bits for amd64 get added?
Make sure they're ported over to rc.d.
While I'm at it correct a logic mistake in rc.d/apmd.

Approved by:	markm (mentor)(implicit)
2003-05-02 08:35:17 +00:00
Mike Makonnen
994336cdd9 Create a symbolic link /dev/vga -> /dev/ttyv0.
We can't remove the sourcing of /etc/rc.devfs yet in case the user
might have custom entries in it. We will have to come up with an
/etc/devfs.rules or something to make this kind of thing easier.

Approved by:	markm (mentor)(implicit)
2003-05-02 08:10:58 +00:00
Mark Murray
20a83c49ba Make the defaults for Kerberos 5 a little more up-to-date. 2003-04-30 20:58:49 +00:00
Mike Makonnen
7256f99c75 This script should require mountcritremote, since that is the last
script at which a filesystem will be mounted in FreeBSD. Without this
the script was being inserted later in the boot than necessary.

Approved by:	markm (mentor) (implicit)
Reviewed by:	dougb
Noticed by:	Andrzej ToboÅa <san@wilk.2a.pl>
2003-04-30 07:12:09 +00:00
Mike Makonnen
c56836728a o Make the 'Ip-filter module loaded' messages informational
o Make 'No ipnat rules' a warning
o Remove unecessary ' ..'

Approved by:	markm (implicit)
2003-04-30 02:54:17 +00:00
Mike Makonnen
f686a8e864 Running the script with restart or manually stopping and starting
it doesn't work because the start_cmd doesn't enable ipfilter if
it is currently disabled.

Approved by:	markm (mentor) (implicit)
Submitted by:	Michael Lyngbøl <lyngbol@bifrost.lyngbol.dk>
PR:		conf/46103
2003-04-30 02:19:38 +00:00
John W. De Boskey
18ba26f0b8 Add rc.subr (found during new /etc/netstart testing) 2003-04-29 12:08:43 +00:00
Doug Barton
ff50165760 Move the mktemp invocation inside motd_start to avoid creating temp
files when uptdate_motd and clear_tmp_enable are both NO.

Submitted by:	Alex Deiter <tiamat@komi.mts.ru>
2003-04-29 06:56:40 +00:00
Warner Losh
e50dfdc9ab xten isn't needed after tw is gone.
Approved by: re@ (scottl)
2003-04-27 05:49:53 +00:00
Mike Makonnen
20350cadb9 Use $ipnat_program instead of the hardcoded path, which was wron
anyways.

Approved by:	markm (mentor) (implicit)
Submitted by:	leafy <leafy@leafy.idv.tw>
2003-04-24 18:14:52 +00:00
Mike Makonnen
f6b6e5ea40 o Add support for running /etc/rc.early
o Re-run through /etc/sysctl.conf a second time just before we set
  the securelevel.

Approved by:	markm (mentor) (implicit)
Reviewed by:	dougb
2003-04-24 08:27:29 +00:00
Mike Makonnen
8cf06adbcb Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc.
o group them together so they run one right after another
	o use the NetBSD supplied ipfs script instead of tacking
	  it on to the end of ipnat
	o Load the ipl module in ipnat and ipfilter, if it's not already
	  loaded
	o In ipmon and ipnat show a warning if neither ipfilter nor
	  ipnat is enabled or the ipl module is not loaded, and exit

Approved by:	markm (mentor) (implicit)
Tested by:	leafy <leafy@leafy.idv.tw>
2003-04-24 08:20:47 +00:00
Makoto Matsushita
7172e3d4bf Set appropriate tag "fsck" to logger(1) for background fsck messages.
PR:		51174
Submitted by:	Alex Popa <razor@ldc.ro>
2003-04-23 15:38:02 +00:00
Mike Makonnen
67b53e9721 Run interface specific scripts for dhcp interfaces too.
This is how it has always been done (before and after rc.d) but
I somehow failed to include it when I broke up network1.

Submitted by:	bmah
Approved by:	markm (mentor)(implicit)
2003-04-20 19:14:16 +00:00
Mike Makonnen
cd3b264dfd Spell ${_jail} correctly
Submitted by: Shizuka Kudo <shizukakudo_99@yahoo.com>
Approved by:	markm (mentor) (implicit)
2003-04-19 07:50:32 +00:00
Mike Makonnen
23cecb19f0 The changes to rc.d/network1 will not get merged in by
mergemaster if it does not appear in the list of files to install.
2003-04-19 01:56:44 +00:00
Mike Makonnen
459e7c4314 o Hook the new files up to the build.
o Make sure all the scripts reference rc.d/netif and not rc.d/network1

Approved by:	markm (mentor)
2003-04-18 17:55:05 +00:00
Mike Makonnen
6167ee89ee Make use of the dhclient script. This will bring up/down dhcp
interfaces.

Approved by:	markm (mentor)
2003-04-18 17:53:02 +00:00
Mike Makonnen
8b3695ab45 Break out and rewrite the network setup scripts.
o /etc/network.subr contains common subroutines used for seting
	  up network interfaces
	o rc.d/hostname sets the hostname if not already set
	o rc.d/nisdomain sets the nis domain *after* rpcbind but
	  before the yp* daemons. This fixes issues with temporary
	  hangs when looking up informaion in nis before it's ready.
	o rc.d/netif brings network interfaces (minus dhcp)  up.
	o rc.d/network1 has been disabled and will be retired before
	  RELENG_5. It will be replaced by rc.d/netif

Approved by:	markm (mentor)
2003-04-18 17:51:54 +00:00
Mike Makonnen
61c79e443b Fix typo (and make it more explicit/self-documenting).
Noticed by:	gshapiro
2003-04-16 16:44:00 +00:00
Mike Makonnen
676f8a41dd o Add a script to start jails on boot.
o Hook it up to the build

Approved by:	markm (mentor)
Submitted by:	Clement Laforet <sheepkiller@cultdeadsheep.org> (modified)
Prodded by:	mike
2003-04-16 16:27:23 +00:00
Mike Makonnen
1d89dde13e Make the 'restart' command work. Otherwise, it would successfully
stop ipfw, but not enable it again.

Aesthetic changes
	o Use positve logic (instead of negative)
	o create a 'stop' function, rather than putting the
	  commands in the stop_cmd variable.

Submitted by:	des
Approved by:	markm (mentor) (implicit)
2003-03-30 15:52:18 +00:00
Hajimu UMEMOTO
667b217aa3 add missing `ipf -s'.
Submitted by:	Mark Huizer <xaa+freebsd@timewasters.nl>
2003-03-22 14:53:23 +00:00
Crist J. Clark
abb4bd6cde Attach the kldxref script to the build/install. 2003-03-17 23:20:48 +00:00
Crist J. Clark
5d75ba3db9 A new rc-ng script to build linker.hints files with kldxref(8)
automatically at boot time. Associated rc.conf(5) knobs and
documentation are included.
2003-03-17 23:15:53 +00:00
Mark Murray
38b1858b1b Initiate KerberosIV de-orbit burn. Disconnect the /etc configs. 2003-03-08 09:50:11 +00:00
Hajimu UMEMOTO
b209d7e493 Latest IPFilter requires flushing rules for IPv6 separately
from IPv4.
2003-03-05 17:16:22 +00:00
Doug Barton
f2883df60d Don't try to deal with vi.recover if the directory doesn't exist
PR:		conf/24515
Submitted by:	Jeroen C. van Gelderen <jeroen@systemics.com>
2003-02-21 09:37:20 +00:00
Mike Makonnen
f8a5334bb6 We stopped reloading rc.conf for each script a long time ago. Things
shouldn't depend on that any more.

PR:		conf/48332
Approved by:	markm (mentor)(implicit)
2003-02-16 20:46:08 +00:00
John Hay
8a3a674f02 kenv moved from /usr/bin/ to /bin/. 2003-02-15 16:34:14 +00:00
John Hay
160b4bbe6a Add another backslash ('\'). 2003-02-15 16:29:20 +00:00
Mike Makonnen
8484cf9776 When cleaning /var/run make sure the control files are not removed
unconditionally when the script is being rerun (when it is called
with the reload argument).

PR:		conf/47517
Approved by:	markm (mentor)
2003-02-15 06:00:11 +00:00
Warner Losh
c42073b2d4 Back out 1.143 and 1.144. They are no longer needed now that we start
devd later in the boot process.  This should fix all the problems
people have had with those commits.  Diskless should be working again,
and those that mount /usr with nfs should be able to do that again too.
2003-02-12 04:26:10 +00:00
Warner Losh
6d60ce9310 Start devd after the networking stuff, but before we mount the
critical remote systems.  This lets us run commands from devd that
aren't on the / partition.  This also means we can remove some kludges
from the networking startup that I added a while ago that caused other
problems.

There's still a race in starting devd that needs to be fixed in devd
so that things present at boot will be configured by the time devd
does daemon().  That race will be fixed later.
2003-02-12 04:22:40 +00:00
Warner Losh
5b3e8e8d83 Now that we don't have the NODEVFS case, we can just check to see if a
device node exists directly to see if OLDCARD is compiled into the
kernel.  This eliminates the scary warning that people using NEWCARD
are seeing when they have pccard_enable=YES in their /etc/rc.conf
files.
2003-02-12 04:12:23 +00:00
Mike Makonnen
c20168e432 NETWORKING should also mean routing daemons are up.
Approved by:	markm (mentor)
2003-01-25 23:14:08 +00:00
Mike Makonnen
4d1483b4fe Start isdnd before ppp for those folks who use ppp-over-isdn.
Approved by: markm (mentor)
2003-01-25 23:03:48 +00:00
Mike Makonnen
77c1940282 Read /etc/rc.subr.
Approved by: markm (mentor)(implicit)
Noticed by: kris
2003-01-25 20:02:35 +00:00
Mike Makonnen
9a03c49d6c Cleanup as many instances of rc.conf variable use before
calling load_rc_config().

Approved by:	markm (mentor) dougb
2003-01-24 00:37:52 +00:00
Mike Makonnen
eeefb22eb0 Missing '$'
Approved by: markm (mentor)(implicit)
2003-01-23 04:31:55 +00:00
Mike Makonnen
fff6d6f312 Add a missing OR.
Approved by: markm (mentor)(implicit)
2003-01-20 18:57:16 +00:00
Mike Makonnen
5a28517db0 Purely cosmetic change.
The # PROVIDE line should precede the # REQUIRE line.

Approved by: markm (mentor)
2003-01-16 02:27:52 +00:00
Mike Makonnen
dbc8124671 Finish merging in rev. 1.124 of rc.network, so that natd can be used
withough the $natd_interface having to be explicitly specified on the
command line.

Approved by: markm (mentor)
Submitted by: Aaron D. Gifford <agifford@infowest.com>
PR: conf/47024

MFC: upon re approval
2003-01-14 15:43:02 +00:00
Mike Makonnen
48055d8c9d Fix the named script to find the correct pid file for the
named(8) daemon by providing a new rc.conf knob: named_pidfile
that defaults to the path specified in the system-installed named.conf(5).

Approved by: markm (mentor)
Reviewed by: dougb
Noticed by : Galen Sampson <galen_sampson@yahoo.com>
	     Dan Pelleg <daniel+bsd@pelleg.org>
PR: conf/46402
MFC:	2 weeks (with re@ approval)
2003-01-12 04:53:54 +00:00
Matthew Dillon
a6d86686ee Forgot to add rcconf.sh to the Makefile, and forgot to rename rcconf to
rcconf.sh in the last commit.
2002-12-22 22:25:53 +00:00
Matthew Dillon
eb7bf00306 Do not unconditionally load the configuration files for the RCNG case.
Instead, load them as part of the rc.d system.  This allows us to prioritize
the initidiskless script so it runs before the configuration files are loaded
and allows us to get rid of the exit 2 hack in /etc/rc.  The exit 2 never
worked anyway since it did not unset the prior configuration, causing the
diskless code to not operate properly.

Do a major cleanup and revamping of the diskless code for RCNG.  This will
be backported to the non-RCNG scripts as well as -stable.

With suggestions from: Mike Makonnen <mtm@identd.net>
MFC after:	7 days
2002-12-22 22:18:41 +00:00
Kirk McKusick
123a5dff98 Delay an optional amount of time after booting before starting a
background fsck. The delay defaults to sixty seconds to allow
large applications such as the X server to start before disk I/O
bandwidth is monopolized by fsck.

Submitted by:	Brooks Davis <brooks@one-eyed-alien.net>
Sponsored by:   DARPA & NAI Labs.
2002-12-18 07:21:31 +00:00
Doug Barton
7020c7759b Bring in the settings from /etc/rc.devfs, which include the vga symlink
that's being replaced here. This is what /etc/rc does now.

There is no NetBSD devfs, so there is no compatibility issue.

Not objected to by:	FreeBSD-rc@yahoogroups.com
Approved by:		re (murray)
2002-12-15 21:56:53 +00:00
Warner Losh
96ac3c4b16 o Don't consider LOOPBACK devices as configured... 2002-12-13 23:36:31 +00:00
Warner Losh
c9e1bbfb91 o redirect the grep to /dev/null
o use ifn rather than interface in rc.network
o merge into rc.d/network1

Approved by: (re blanket)
2002-12-12 09:31:10 +00:00
Warner Losh
406259c133 Two fixes for devd:
1) Move devd to the start of the head of the boot process rather than the end.
2) Disable devctl if devd is disabled.
2002-11-30 00:40:53 +00:00
Robert Watson
881a0ee9b5 Update rc scripts to load mac_lomac instead of lomac.
Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:51:03 +00:00
Warner Losh
7b13078b41 Add devd to the mix. It should run basically last at this point.
# I've tested this, but only lightly, so please email me with problems.
2002-11-09 07:45:53 +00:00
Bill Fenner
04b3b6443c Force rpcbind to start even if it wasn't enabled. This solves the ypbind
problems people were having at startup.

Approved by:    re
2002-11-04 20:51:20 +00:00
Hajimu UMEMOTO
7b988fe73c Add IPv6 setup for ipfilter. `ipv6_ipfilter_rules' was added
to specify rules definition file for ipfilter.  The default is
/etc/ipf6.rules.  If there is a file which is specified by
'ipv6_ipfilter_rules', IPv6 rule is installed.

Reviewed by:	Ronald van der Pol <Ronald.vanderPol@rvdp.org>
MFC after:	1 week
2002-11-02 08:21:26 +00:00
Gordon Tetlow
cbde04a9b7 Wrap test case in an if statement to avoid crunching a return value. 2002-10-31 02:06:05 +00:00
Bill Fenner
be9faa3290 Fix "err" usage.
PR:		44284
Submitted by:	Sergey Mokryshev <mokr@mokr.net>
2002-10-26 00:18:06 +00:00
Bill Fenner
dab1b45261 Fix two typos. Using "-eq" instead of "=" in a [ caused an error when
an entry in /etc/sysctl.conf didn't exist.  Fixing this exposed a minor
typo "exits" vs. "exist".

However, there doesn't appear to be any provision to run this with
the "lastload" argument, meaning that the error will never appear.
2002-10-25 23:02:54 +00:00
Maxim Sobolev
119b9f09e9 Fix silly typo: loacal --> local. 2002-10-17 23:46:32 +00:00
Jens Schweikhardt
0de35d0351 s/dependancy/dependency/ 2002-10-12 13:49:21 +00:00
Jens Schweikhardt
143085107b Fix style bugs:
* Space -> tabs conversion.
* Removed blanks before semicolon in "if ... ; then".
* Proper indentation of misindented lines.
* Put a full stop after some comments.
* Removed whitespace at end of line.

Approved by:	silence from gordon
2002-10-12 10:31:31 +00:00
Dima Dorfman
2dbe6947fa Aesthetics: Output a prefix before sourcing rc.local as the old rc
script did.  Stuff in rc.local frequently has lines like
"echo -n ' service_name'" which look ugly without a prefix and a
trailing period.  Likewise for rc.shutdown.local for consistency.
2002-10-12 07:23:43 +00:00
Dima Dorfman
2ca85e3d5e In a diskless setup, rc.d/initdiskless may overwrite parts of /etc on
a per-machine or per-cluster (with different ways of expressing what's
part of a cluster) basis.  In order for this to be effective, rc.conf
has to be reread after initdiskless is finished.  Implement this by
adding a hook to etc/rc which rereads rc.conf by request.  This can
also be implemented by renaming initdiskless to initdiskless.sh and
sourcing rc.conf there manually, but it was decided that, that would
be uglier than a hook in etc/rc.

Developed in concert with:	gordon
2002-10-02 00:59:14 +00:00
Ruslan Ermilov
7206028152 test -h is deprecated; use -L instead.
PR:             bin/40846
2002-10-01 13:29:45 +00:00
Matthew N. Dodd
e2540a6d46 - Recognize 'idt' interfaces.
- The start command is 'atm_start' not 'start_cmd'.
2002-09-30 08:01:43 +00:00