Alpha1
w/o bastille console
This commit is contained in:
@@ -230,7 +230,8 @@ create_jail() {
|
|||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [ -z "${LINUX_JAIL}" ]; then
|
if [ -n "${LINUX_JAIL}" ]; then
|
||||||
|
echo "Hit LinJail" #SRDEBUG
|
||||||
if [ ! -d "${bastille_jail_base}" ]; then
|
if [ ! -d "${bastille_jail_base}" ]; then
|
||||||
mkdir -p "${bastille_jail_base}"
|
mkdir -p "${bastille_jail_base}"
|
||||||
fi
|
fi
|
||||||
@@ -241,7 +242,11 @@ create_jail() {
|
|||||||
mkdir -p "${bastille_jail_path}/tmp"
|
mkdir -p "${bastille_jail_path}/tmp"
|
||||||
touch "${bastille_jail_path}/dev/shm"
|
touch "${bastille_jail_path}/dev/shm"
|
||||||
touch "${bastille_jail_path}/dev/fd"
|
touch "${bastille_jail_path}/dev/fd"
|
||||||
cp -R ${bastille_releasesdir}/${RELEASE} ${bastille_jail_path}
|
echo "${bastille_releasesdir}/${RELEASE}/" #SRDEBUG
|
||||||
|
echo "${bastille_jail_path}/" #SRDEBUG
|
||||||
|
cp -RPf ${bastille_releasesdir}/${RELEASE}/* ${bastille_jail_path}/
|
||||||
|
ln -s ${bastille_jail_path}/bin/login ${bastille_jail_path}/usr/bin/login
|
||||||
|
echo "CP Done" #SRDEBUG
|
||||||
|
|
||||||
if [ ! -d "${bastille_jail_template}" ]; then
|
if [ ! -d "${bastille_jail_template}" ]; then
|
||||||
mkdir -p "${bastille_jail_template}"
|
mkdir -p "${bastille_jail_template}"
|
||||||
@@ -271,7 +276,7 @@ create_jail() {
|
|||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [ -z "${EMPTY_JAIL}" ]; then
|
if [ -z "${EMPTY_JAIL}" ] && [ -z "${LINUX_JAIL}" ]; then
|
||||||
if [ ! -d "${bastille_jail_base}" ]; then
|
if [ ! -d "${bastille_jail_base}" ]; then
|
||||||
mkdir -p "${bastille_jail_base}"
|
mkdir -p "${bastille_jail_base}"
|
||||||
fi
|
fi
|
||||||
@@ -302,8 +307,7 @@ create_jail() {
|
|||||||
if [ -n "${INTERFACE}" ]; then
|
if [ -n "${INTERFACE}" ]; then
|
||||||
local bastille_jail_conf_interface=${INTERFACE}
|
local bastille_jail_conf_interface=${INTERFACE}
|
||||||
fi
|
fi
|
||||||
|
generate_jail_conf
|
||||||
generate_linux_jail_conf
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
## using relative paths here
|
## using relative paths here
|
||||||
@@ -385,25 +389,25 @@ create_jail() {
|
|||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
if [ -n "${VNET_JAIL}" ]; then
|
||||||
## create home directory if missing
|
## create home directory if missing
|
||||||
if [ ! -d "${bastille_jail_path}/usr/home" ]; then
|
if [ ! -d "${bastille_jail_path}/usr/home" ]; then
|
||||||
mkdir -p "${bastille_jail_path}/usr/home"
|
mkdir -p "${bastille_jail_path}/usr/home"
|
||||||
|
fi
|
||||||
|
## link home properly
|
||||||
|
if [ ! -L "home" ]; then
|
||||||
|
ln -s usr/home home
|
||||||
|
fi
|
||||||
|
|
||||||
|
## TZ: configurable (default: Etc/UTC)
|
||||||
|
ln -s "/usr/share/zoneinfo/${bastille_tzdata}" etc/localtime
|
||||||
|
|
||||||
|
# Post-creation jail misc configuration
|
||||||
|
# Create a dummy fstab file
|
||||||
|
touch "etc/fstab"
|
||||||
|
# Disables adjkerntz, avoids spurious error messages
|
||||||
|
sed -i '' 's|[0-9],[0-9]\{2\}.*[0-9]-[0-9].*root.*kerntz -a|#& # Disabled by bastille|' "etc/crontab"
|
||||||
fi
|
fi
|
||||||
## link home properly
|
|
||||||
if [ ! -L "home" ]; then
|
|
||||||
ln -s usr/home home
|
|
||||||
fi
|
|
||||||
|
|
||||||
## TZ: configurable (default: Etc/UTC)
|
|
||||||
ln -s "/usr/share/zoneinfo/${bastille_tzdata}" etc/localtime
|
|
||||||
|
|
||||||
# Post-creation jail misc configuration
|
|
||||||
# Create a dummy fstab file
|
|
||||||
touch "etc/fstab"
|
|
||||||
# Disables adjkerntz, avoids spurious error messages
|
|
||||||
sed -i '' 's|[0-9],[0-9]\{2\}.*[0-9]-[0-9].*root.*kerntz -a|#& # Disabled by bastille|' "etc/crontab"
|
|
||||||
|
|
||||||
## VNET specific
|
## VNET specific
|
||||||
if [ -n "${VNET_JAIL}" ]; then
|
if [ -n "${VNET_JAIL}" ]; then
|
||||||
## VNET requires jib script
|
## VNET requires jib script
|
||||||
@@ -413,6 +417,8 @@ create_jail() {
|
|||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
elif [ -n "${LINUX_JAIL}" ]; then
|
||||||
|
generate_linux_jail_conf
|
||||||
else
|
else
|
||||||
## Generate minimal configuration for empty jail
|
## Generate minimal configuration for empty jail
|
||||||
generate_minimal_conf
|
generate_minimal_conf
|
||||||
@@ -422,8 +428,8 @@ create_jail() {
|
|||||||
chmod 0700 "${bastille_jailsdir}/${NAME}"
|
chmod 0700 "${bastille_jailsdir}/${NAME}"
|
||||||
|
|
||||||
# Jail must be started before applying the default template. -- cwells
|
# Jail must be started before applying the default template. -- cwells
|
||||||
if [ -z "${EMPTY_JAIL}" ]; then
|
if [ -z "${EMPTY_JAIL}" ] && [ -z "${LINUX_JAIL}" ]; then
|
||||||
bastille start "${NAME}"
|
bastille start "${NAME}"
|
||||||
elif [ -n "${EMPTY_JAIL}" ]; then
|
elif [ -n "${EMPTY_JAIL}" ]; then
|
||||||
# Don't start empty jails unless a template defined.
|
# Don't start empty jails unless a template defined.
|
||||||
if [ -n "${bastille_template_empty}" ]; then
|
if [ -n "${bastille_template_empty}" ]; then
|
||||||
@@ -456,6 +462,8 @@ create_jail() {
|
|||||||
if [ -n "${bastille_template_empty}" ]; then
|
if [ -n "${bastille_template_empty}" ]; then
|
||||||
bastille template "${NAME}" ${bastille_template_empty} --arg BASE_TEMPLATE="${bastille_template_base}" --arg HOST_RESOLV_CONF="${bastille_resolv_conf}"
|
bastille template "${NAME}" ${bastille_template_empty} --arg BASE_TEMPLATE="${bastille_template_base}" --arg HOST_RESOLV_CONF="${bastille_resolv_conf}"
|
||||||
fi
|
fi
|
||||||
|
elif [ -n "${LINUX_JAIL}" ]; then
|
||||||
|
warn "Templates not available for Linux jails yet."
|
||||||
else # Thin jail.
|
else # Thin jail.
|
||||||
if [ -n "${bastille_template_thin}" ]; then
|
if [ -n "${bastille_template_thin}" ]; then
|
||||||
bastille template "${NAME}" ${bastille_template_thin} --arg BASE_TEMPLATE="${bastille_template_base}" --arg HOST_RESOLV_CONF="${bastille_resolv_conf}"
|
bastille template "${NAME}" ${bastille_template_thin} --arg BASE_TEMPLATE="${bastille_template_base}" --arg HOST_RESOLV_CONF="${bastille_resolv_conf}"
|
||||||
@@ -463,12 +471,14 @@ create_jail() {
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
# Apply values changed by the template. -- cwells
|
# Apply values changed by the template. -- cwells
|
||||||
if [ -z "${EMPTY_JAIL}" ]; then
|
if [ -z "${EMPTY_JAIL}" ] && [ -z "${LINUX_JAIL}" ]; then
|
||||||
bastille restart "${NAME}"
|
bastille restart "${NAME}"
|
||||||
|
echo "2.1" #SRDEBUG
|
||||||
elif [ -n "${EMPTY_JAIL}" ]; then
|
elif [ -n "${EMPTY_JAIL}" ]; then
|
||||||
# Don't restart empty jails unless a template defined.
|
# Don't restart empty jails unless a template defined.
|
||||||
if [ -n "${bastille_template_empty}" ]; then
|
if [ -n "${bastille_template_empty}" ]; then
|
||||||
bastille restart "${NAME}"
|
bastille restart "${NAME}"
|
||||||
|
echo "2.2" #SRDEBUG
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
@@ -543,7 +553,7 @@ if [ -n "${NAME}" ]; then
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
|
|
||||||
if [ -z "${LINUX_JAIL}" ]; then
|
if [ -n "${LINUX_JAIL}" ]; then
|
||||||
case "${RELEASE}" in
|
case "${RELEASE}" in
|
||||||
bionic|ubuntu_bionic|ubuntu|ubuntu-bionic)
|
bionic|ubuntu_bionic|ubuntu|ubuntu-bionic)
|
||||||
## check for FreeBSD releases name
|
## check for FreeBSD releases name
|
||||||
|
|||||||
Reference in New Issue
Block a user