Commit Graph

7 Commits

Author SHA1 Message Date
M. Rehan
5b6668f186 Enforce data directory paths and permissions 2024-05-24 01:06:00 +05:00
Waqar Ahmed
a1b641c9bf Validate reference files when validating system state 2023-12-29 23:51:36 +05:00
Andrew Walker
0785669cc5 NAS-124055 / 24.04 / Implement dataset-based filesystem hierarchy (#494)
Create filesystem hierarchy for new boot environments based
on specifications in fhs.py file in truenas_install directory.
Exact spec for datasets is something we will fine-time as time
goes on.

This gives us more flexibility regarding which parts of FS to
make readonly, and also identifying precise local changes from
a pristine environment that users have made to system files.

Precise settings detailed in comments in the specification file.
Overall, this gives better posture for STIG compliance regarding
auditability and prevention of unauthorized OS changes.
2023-09-13 11:25:06 -07:00
Waqar Ahmed
ff44f92846 Add rsync as a dependency for builder and add validation as well 2022-03-15 22:07:00 +05:00
Waqar Ahmed
8bd0382b89 Add validation to ensure that packages only build from truenas organization 2021-08-19 12:39:39 +05:00
Waqar Ahmed
722262f2d4 Always validate system/manifest 2021-05-09 23:27:38 +05:00
Waqar Ahmed
2fa2441a54 Validate manifet when executing other targets 2021-05-09 23:27:38 +05:00