Commit Graph

103 Commits

Author SHA1 Message Date
themylogin
51d5f07215 Merge pull request #594 from truenas/NAS-127426
NAS-127426 / 24.10 / Use new installer
2024-04-03 19:18:40 +02:00
themylogin
61d736103e Remove legacy BSD-related code 2024-03-15 12:15:58 +01:00
themylogin
8e32cf8d5c Perform database migration right in installer 2024-03-04 13:23:57 +01:00
themylogin
214b0ab4e5 Use new installer 2024-02-22 15:13:49 +01:00
themylogin
9ade226dae Do not pass -exclude-file to unsquashfs on FreeBSD
(cherry picked from commit c55c693fd9)
2024-02-14 12:31:20 +00:00
themylogin
44f5ff3540 Properly cleanup old manifest from the cloned /data directory
(cherry picked from commit 1827421be6)
2024-02-14 11:57:42 +00:00
themylogin
44ec1afe88 Do not create pristine snapshot for cloned datasets 2024-02-01 13:43:04 +01:00
themylogin
6479060aaf Preserve nvram files of vms across scale upgrades 2024-01-31 23:24:22 +01:00
themylogin
68f4081b26 Umount child datasets on extraction failure. Do not overwrite existing files when extracting squashfs 2024-01-31 23:23:16 +01:00
themylogin
3e366b1e4c Clone datasets using new fhs manifest options 2024-01-31 23:23:16 +01:00
themylogin
68cb874536 Do not leave leftover datasets when installation fails 2024-01-31 23:23:16 +01:00
themylogin
bcb7e87bde Do not copy files when datasets were cloned 2024-01-31 23:23:16 +01:00
themylogin
91592f0c18 Support cloning updated BE datasets 2024-01-31 23:22:16 +01:00
themylogin
f21b96f860 Copy logs on upgrade
(cherry picked from commit 8b9eca2d60)
2024-01-31 23:22:16 +01:00
M. Rehan
7b3f63d5be Fix conditional checking for nvram directory existence in old BE 2024-02-01 00:17:53 +05:00
M. Rehan
2960a08d92 Preserve nvram files of vms across scale upgrades 2024-01-31 06:03:02 +05:00
themylogin
f1a5547ee1 Restore progress reporting accidentally removed by e29b5d5b1c 2023-11-22 12:21:15 +01:00
Andrew Walker
24a95474b0 Fix upgrade path for Core to SCALE (#512)
TrueNAS Core installs by default do not have a /home directory and
so it should be omitted when copying data to new boot environment
on that platform. No attempt is made to copy a non-default /home
configuration because that directory is used in SCALE and may cause
undesired behavior post-upgrade.
2023-10-16 05:14:14 -07:00
Andrew Walker
e500ae81fd rsync home dir to new boot environment on upgrade (#504)
We now store SSH keys for admin user in /home and so we should preserve
it on upgrades.
2023-10-05 11:46:46 -07:00
Andrew Walker
d127911f59 Make more filesystem paths readonly (#496)
* Add new default dataset for /root
* Make /opt readonly
* Make / readonly
2023-09-28 06:24:44 -07:00
Andrew Walker
0785669cc5 NAS-124055 / 24.04 / Implement dataset-based filesystem hierarchy (#494)
Create filesystem hierarchy for new boot environments based
on specifications in fhs.py file in truenas_install directory.
Exact spec for datasets is something we will fine-time as time
goes on.

This gives us more flexibility regarding which parts of FS to
make readonly, and also identifying precise local changes from
a pristine environment that users have made to system files.

Precise settings detailed in comments in the specification file.
Overall, this gives better posture for STIG compliance regarding
auditability and prevention of unauthorized OS changes.
2023-09-13 11:25:06 -07:00
themylogin
cc06d2c360 Accomodate all cgroups versions when checking if a process is running under kubernetes 2023-08-01 18:20:52 +02:00
root
e29b5d5b1c Revert "NAS-122119 / use LD_LIBRARY_PATH when installing / upgrading (#432)"
This reverts commit 0b7cf58069.
2023-07-28 08:21:28 -04:00
themylogin
b4bdcead89 More verbose install progress 2023-07-10 15:33:42 +02:00
themylogin
5854e04af7 Allow passing explicit new dataset name (for the HA update) 2023-07-06 11:04:18 +02:00
Waqar Ahmed
39f538a7a1 Make sure we configure fips appropriately on install/upgrade of scale 2023-06-16 14:54:13 +04:00
themylogin
78f007cb12 Allow installing SCALE on CORE-created boot pool without upgrading existing CORE installation
(cherry picked from commit ad94a62efd)
2023-06-03 09:19:51 -04:00
themylogin
293bee60fd Merge pull request #427 from truenas/NAS-121891
NAS-121891 / 23.10 / More deprecated services warnings. Also, distinguish fatal errors and…
2023-05-30 18:02:10 +02:00
themylogin
20e4cfd603 Better error/warning messages 2023-05-25 20:58:37 +02:00
Andrew Walker
0b7cf58069 NAS-122119 / use LD_LIBRARY_PATH when installing / upgrading (#432)
Python modules imported within the truenas-initrd.py script may link
against libs that are only present in the squashfs dir and so we should
make ld aware of the usr/lib dir within it since we're not chrooted.
2023-05-25 05:15:10 -07:00
themylogin
530d1932af PEP8 2023-05-24 19:09:17 +02:00
themylogin
7f661591cd More outdated services 2023-05-24 19:09:17 +02:00
themylogin
5e8d9615b7 More deprecated services warnings. Also, distinguish fatal errors and warnings 2023-05-24 19:09:17 +02:00
themylogin
32f86bca00 Fix infinite recursion 2023-05-03 18:34:51 +02:00
themylogin
24832d78f0 Precheck for S3 service 2023-05-03 11:49:19 +02:00
themylogin
8e0f6b1194 Run autotune in installer 2023-03-24 13:02:24 +01:00
themylogin
4ff257d58e Set authentication method using truenas-set-authentication-method.py helper script 2022-11-20 12:39:28 +01:00
M. Rehan
5b9a0cd91e Set 0o600 permissions for database files 2022-08-30 20:14:11 +05:00
caleb
f785e2e777 call truenas-nvdimm.py 2022-08-18 12:08:33 -04:00
Waqar Ahmed
b6a8856c6b Crypto related libraries should be used when proc is mounted
This commit adds changes to move setting password and updating some
other configuration bits when proc is mounted as when corssl is used,
it uses a library which requires proc to be available in order to
determine which module is being used.
2022-08-17 23:17:59 +05:00
Umer Saleem
93fc4e21d3 NAS-115611: Create EFI boot entries for all boot disks
Currently, grub-install only creates one EFI boot entry for one boot
disk. If that boot disk gets compromised, system cannot boot from any
other disk since the boot entry is not present. Creating boot entries
for all boot disks fixes this issue.

Signed-off-by: Umer Saleem <usaleem@ixsystems.com>
2022-06-02 21:35:28 +05:00
themylogin
9983c98085 Merge pull request #244 from truenas/NAS-115041
NAS-115041 / 22.12 / Proper way of obtaining /dev in chroot
2022-03-07 19:13:14 +01:00
themylogin
6d8b9447af Destroy old boot-pool/grub dataset when upgrading FreeBSD installations recursively because it can contain snapshots 2022-03-04 13:42:20 +01:00
themylogin
09d25b353d Proper way of obtaining /dev in chroot 2022-03-03 17:30:36 +01:00
Waqar Ahmed
9bc56498ee Ensure we close db cursor 2022-02-09 02:57:25 +05:00
Waqar Ahmed
88ef429bde Close cursor/db connection 2022-02-08 10:08:05 +05:00
Waqar Ahmed
59eea09410 Configure serial appropriately on install/upgrade 2022-02-07 21:22:23 +05:00
Waqar Ahmed
63f3ee3ef3 Explicitly enable/disable serial-getty service on upgrades 2022-02-07 00:08:08 +05:00
themylogin
3a8392689f Merge pull request #221 from truenas/NAS-114205
NAS-114205 / 22.02 / Have empty `/boot/grub` directory in rootfs image
2022-02-04 18:56:49 +03:00
Andrew
5039499903 Failing to enable services from our JSON file should not be fatal (#223) 2022-02-02 16:38:45 -05:00