aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* release Consfigurator 0.11.0 (-1 to Debian unstable)v0.11.0debian/0.11.0-1archive/debian/0.11.0-1Sean Whitton2021-09-29
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* USER:{HAS-ACCOUNT-WITH-UID,%HAS-UID-GID}: tweak docstringsSean Whitton2021-09-29
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add USER:HAS-LOCKED-PASSWORDDavid Bremner2021-09-29
| | | | | | | This is useful when access is provided by other means (e.g. ssh keypairs) or as part of locking a user out completely. Signed-off-by: David Bremner <david@tethera.net>
* add USER:HAS-ACCOUNT-WITH-UIDDavid Bremner2021-09-29
| | | | | | | | | | | | The anticipated use case is where both uid and gid are to be set; making GID an optional keyword argument just allows a shorthand for the case of matching gid and uid. The limitation to a Debian-like OS is because of the assumption of a primary group per user. Refactor PASSWD-ENTRY to support a new function GROUP-ENTRY that does the same thing, but with the group database instead of the passwd database. Signed-off-by: David Bremner <david@tethera.net>
* programmatic application of properties: error out if no *CONNECTION*Sean Whitton2021-09-29
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* DATA.LOCAL-FILE: fix IN-PACKAGE formSean Whitton2021-09-29
| | | | | Reported-by: David Bremner <david@tethera.net> Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* drop obsolete export of CAN-PROBABLY-FORKSean Whitton2021-09-19
| | | | | | The function was removed in f4e9170e73cb4bcfa7328422b4ff4f72d1339dd0. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add SYSTEMD:LINGERING-ENABLEDSean Whitton2021-09-18
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add FILE:LACKS-LINES-MATCHINGSean Whitton2021-09-12
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* IMAGE-DUMPED: fix call to OSICAT-POSIX:CHMODSean Whitton2021-09-12
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* SBUILD:BUILT: add periodically rebuilding the schroot to exampleSean Whitton2021-09-12
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* :SETUID: use OSICAT:USER-INFO rather than parsing id(1) outputSean Whitton2021-09-09
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* also redirect *DEBUG-IO* output when compiling and loading systemsSean Whitton2021-09-09
| | | | | | CFFI outputs C toolchain commands it runs to *DEBUG-IO*. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* expand notes on alternative to forkingSean Whitton2021-09-09
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add :SETUID security notesSean Whitton2021-09-09
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* use CFFI, mostly via Osicat, for all syscalls/libc except fork(2)Sean Whitton2021-09-09
| | | | | | | | | | Also replace some calls to chmod(1) with calls to chmod(2). Using CFFI rather than implementation-specific wrappers should be better for portability. Also with this commit we stop hard coding types like uid_t as :UNSIGNED-INT, which was less portable. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* refactor APPLY-AND-PRINT, hopefully in favour of readabilitySean Whitton2021-09-08
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add dep on Anaphora and use APROG1, ALET & AAND in various placesSean Whitton2021-09-08
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* refactor SILENT-SEQPROPS and inline WITH-SKIP-PROPERTYSean Whitton2021-09-08
| | | | | | Previously, part of APPLY-AND-PRINT was duplicated in SILENT-SEQPROPS. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* DEFPROP: make it possible to RETURN-FROM property subroutinesSean Whitton2021-09-08
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* SHELL-WRAP-CONNECTION CONNECTION-WRITEFILE: execute just one commandSean Whitton2021-08-31
| | | | | | Should improve performance, especially when connection latency is high. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* :LOCAL CONNECTION-WRITEFILE: use UIOP:RENAME-FILE-OVERWRITING-TARGETSean Whitton2021-08-31
| | | | | | Avoids starting an external process. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* RUN: combine creating the temporary file with running the commandSean Whitton2021-08-31
| | | | | | Should improve performance, especially when connection latency is high. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* MKTEMP: factor out MKSTEMP-CMDSean Whitton2021-08-31
| | | | | | No functional change. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* MKTEMP: also fail if mktemp(1) outputs anything to stderrSean Whitton2021-08-31
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* use UIOP:XDG-CACHE-HOMESean Whitton2021-08-31
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* RUN: at level 4, debug printing excludes the redirection of stdoutSean Whitton2021-08-31
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* LOCAL-CONNECTION docstring: connection is not always the root LispSean Whitton2021-08-31
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add CONNECTION-READFILE-AND-REMOVE to improve RUN performanceSean Whitton2021-08-31
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* cache XDG_CACHE_HOME as a connattrSean Whitton2021-08-31
| | | | | | This should provide a performance improvement. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* fix XDG_CONFIG_HOME -> XDG_CACHE_HOME as intendedSean Whitton2021-08-31
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* UPLOAD-ALL-PREREQUISITE-DATA: query remote cache contents just onceSean Whitton2021-08-31
| | | | | | | | Should improve performance, especially when connection latency is high. We already implicitly assume that only one attempt to upload prerequisite data is going on at once. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* rework PUSHNEW-HOSTATTRS to use EQUAL not EQL & add PUSHNEW-HOSTATTRSean Whitton2021-08-31
| | | | | | | | | | | | | | | Previously, PUSHNEW-HOSTATTRS always used EQL to determine whether a hostattr was already pushed, which would give the wrong answer for many common cases. Now default to using EQUAL, and provide a way for the caller to specify the test function. PUSHNEW-HOSTATTRS now takes a list of hostattrs as a single parameter, rather than using &REST, in order to make room for the new :TEST keyword parameter. To mitigate the inconvenience of no longer using &REST, add PUSHNEW-HOSTATTR. Also fix some parameter and function names in docstrings. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* mention ssh(1) ControlPersist & add idea about making it automaticSean Whitton2021-08-25
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* release Consfigurator 0.10.0 (-1 to Debian unstable)v0.10.0debian/0.10.0-1archive/debian/0.10.0-1Sean Whitton2021-08-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* d/control: drop rst backticks around ":POSIX"Sean Whitton2021-08-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* README.rst: tweak wording introducing :POSIX propertiesSean Whitton2021-08-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* LIBVIRT:KVM-BOOTS-CHROOT-FOR: on DEBIANLIKE, install initramfs-toolsSean Whitton2021-08-22
| | | | | | | Avoids the subsequent attempt to edit /etc/initramfs-tools/modules failing simply because the directory /etc/initramfs-tools does not exist. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* MOUNT:UNMOUNTED-BELOW-AND-REMOVED: don't unmount DIR itselfSean Whitton2021-08-22
| | | | | | | | | | | If DIR is itself a mount point then previously we would never delete its contents because the unmounting is done first. This meant that when MOUNT:UNMOUNTED-BELOW-AND-REMOVED was used to remove the root filesystem of a container or virtual machine, for example, then whether the contents of the root filesystem was actually deleted depended upon whether DIR happened to be a mount point. This change ensures that the deletion is always done. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* MOUNT:UNMOUNTED-BELOW: add :AND-AT argumentSean Whitton2021-08-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* make LIBVIRT:KVM-BOOTS-CHROOT{,-FOR} unapplicableSean Whitton2021-08-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* upload Lisp systems as tarballs, not concatenated sourceSean Whitton2021-08-22
| | | | | | This should enable depending on Lisp systems which use the CFFI Groveller. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* simplify quick start & mention enabling SSH connection sharingSean Whitton2021-08-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* rewrite first section of README.rst & Debian package descriptionSean Whitton2021-08-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* note about requiring Lisp implementation fork(2) wrappersSean Whitton2021-08-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* don't fail when stderr from POST-FORK grandchild process is emptySean Whitton2021-08-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* release Consfigurator 0.9.1 (-1 to Debian unstable)v0.9.1debian/0.9.1-1archive/debian/0.9.1-1Sean Whitton2021-08-20
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* Merge tag 'debian/0.8.0-2'Sean Whitton2021-08-20
|\ | | | | | | | | | | consfigurator release 0.8.0-2 for unstable (sid) [dgit] [dgit distro=debian no-split --quilt=linear]
| * Commit Debian 3.0 (quilt) metadatadebian/0.8.0-2archive/debian/0.8.0-2Sean Whitton2021-07-24
| | | | | | | | [dgit (9.13) quilt-fixup]
| * debian/: changelog for 0.8.0-2 uploadSean Whitton2021-07-24
| | | | | | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>