aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* release Consfigurator 0.13.0 (-1 to Debian unstable)v0.13.0debian/0.13.0-1archive/debian/0.13.0-1Sean Whitton2021-12-15
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* DATA.FILES-TREE docstring: state that IDEN1 can be a nested subdirSean Whitton2021-12-15
| | | | | | | The existing text does not imply that IDEN1 has to be right under LOCATION, but let's make it explicit. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* DATA.FILES-TREE docstring: minor formatting and wording changesSean Whitton2021-12-15
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add :FILES-TREE data sourceDavid Bremner2021-12-15
| | | | | | | This allows the user to conveniently maintain a set of files in their consfig tree (or elsewhere) for deployment as data. Signed-off-by: David Bremner <david@tethera.net>
* rename combinator UNAPPLY->UNAPPLIED and add new UNAPPLY macroSean Whitton2021-12-13
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* PROPSPEC class definition: refactor to avoid unneeded HANDLER-CASESean Whitton2021-12-13
| | | | | Suggested-by: Yehouda Harpaz <yeh@lispworks.com> Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* IN-CONSFIG: don't accept NIL as argumentSean Whitton2021-12-13
| | | | | | | | | | | | | If *CONSFIG* is NIL because the user called (in-consfig nil), then initialising a propspec without any supplied list of ASDF systems will still result in a NO-CONSFIG warning, the text of which suggests calling IN-CONSFIG. For now, avoid that situation by disallowing (in-consfig nil). If the user doesn't want to use the *CONSFIG* feature, it is probably best if they muffle the warning or explicitly supply a list of ASDF systems in each piece of code that initialises propspecs, rather than declaring (in-consfig nil). Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add POSTFIX:DAEMON-SOCKET-DIRECTORYSean Whitton2021-12-09
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* introduction.rst: fix FILE:CONTAINS-LINES exampleSean Whitton2021-12-08
| | | | | Reported-by: Andreas Reuleaux <rx@a-rx.info> Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* CRON:RUNS-CONSFIGURATOR: make unapplicableSean Whitton2021-12-07
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* CRON:SYSTEM-JOB: make unapplicable & use FILE:EXISTS-WITH-CONTENTSean Whitton2021-12-07
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* APACHE:HTTPS-VHOST: note that doesn't currently install renewal hookSean Whitton2021-12-07
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add LETS-ENCRYPT:CERTIFICATE-OBTAINED-STANDALONESean Whitton2021-12-03
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* signal a warning, not an error, when *CONSFIG* is not setSean Whitton2021-12-03
| | | | | | | | | *CONSFIG* is meant to be an optional feature, and this should make it easier to write code which doesn't use it. For example, code running in an IMAGE-DUMPED image might use (deploy-these :local ...) to build a propspec, but *PACKAGE* is likely to be COMMON-LISP-USER, not the user's consfig. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* CONTINUE-DEPLOY*-PROGRAM: initialise special variablesSean Whitton2021-12-03
| | | | | | Before this change, the variables would be unbound in IMAGE-DUMPED images. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* APACHE:HTTPS-VHOST http->https: use %{SERVER_NAME} & HTTP status 301Sean Whitton2021-12-02
| | | | | | The use of %{SERVER_NAME} makes the configuration line a constant value. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* APACHE:HTTPS-VHOST: narrow the scope of .well-known rewrite ruleSean Whitton2021-12-02
| | | | | | | The new rule is sufficient for the Let's Encrypt challenge to succeed, and has the advantage of avoiding interference with other subpaths of .well-known/. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* release Consfigurator 0.12.3 (-1 to Debian unstable)v0.12.3debian/0.12.3-1archive/debian/0.12.3-1Sean Whitton2021-11-28
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* define +ALPHANUM+ at compile time tooSean Whitton2021-11-28
| | | | | | | Necessary because we use #.(length +alphanum+) later in the file. Reported-by: Yehouda Harpaz <yeh@lispworks.com> Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* replace usage of UIOP version comparison utilities with our ownSean Whitton2021-11-28
| | | | | | | | | DATA.GIT-SNAPSHOT generates version numbers like 2342423.ab09890f2bcd where only the first, purely numerical component is intended for comparison, and the second component is just additional information. UIOP's utilities don't give the correct answers for cases like that; e.g. (uiop:version<= "1.a" "0") => T. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* EVAL-IN-REINVOKED: use a more descriptive name for the dumped imageSean Whitton2021-11-28
| | | | | | The name will show up in, e.g., top(1) inside containers. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* LXC:LXC-LS: always pass -1 command line argumentSean Whitton2021-11-28
| | | | | | | | With most connection types stdout is not a tty and so we get one entry per line anyway. However, unless we explicitly pass -1, lxc-ls(1) can add unwanted trailing whitespace to these lines. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* LINES: support trimming the linesSean Whitton2021-11-20
| | | | | | TRIMFUN will typically be STRING-TRIM, STRING-LEFT-TRIM or STRING-RIGHT-TRIM. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* release Consfigurator 0.12.2 (-1 to Debian unstable)v0.12.2debian/0.12.2-1archive/debian/0.12.2-1Sean Whitton2021-11-15
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* fixes to permit dumping and reinvoking and then dumping againSean Whitton2021-11-14
| | | | | | | | | | | | | | | | | | - Update stored checksums when reinvoking, else the SBCL-specific checks in %DUMP-CONSFIGURATOR-IN-GRANDCHILD will always fail in reinvoked images. - Also update *US* when reinvoking; previously, the code in IMAGE-DUMPED to skip the dump when the target filename is the executable we're running from was using the old value of *US* and thus would probably never skip the dump. - Don't abort the dump just because the target filename is the executable we're running from (I believe the restriction was accidentally included when refactoring a previous work-in-progress version of fbe55a361f). - %DUMP-CONSFIGURATOR-IN-GRANDCHILD: ensure we remove the hook which evaluates the parent process's request so it doesn't get run again. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* *US*: use SB-EXT:*RUNTIME-PATHNAME* not SB-EXT:*CORE-PATHNAME*Sean Whitton2021-11-14
| | | | | | SB-EXT:*RUNTIME-PATHNAME* is the path to the executable. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add HAS-HOSTATTRSSean Whitton2021-11-14
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* FILE:{DATA,SECRET}-UPLOADED: add descriptionsSean Whitton2021-11-11
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* always use CL, ANAPHORA, ALEXANDRIA and CONSFIGURATOR packagesSean Whitton2021-11-11
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add RANDOM-ALPHANUMERICSean Whitton2021-11-11
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* release Consfigurator 0.12.1 (-1 to Debian unstable)v0.12.1debian/0.12.1-1archive/debian/0.12.1-1Sean Whitton2021-11-09
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* avoid trying to define +NAMESPACE-TYPES+ at all on non-LinuxSean Whitton2021-11-09
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* LXC:USER-CONTAINER-FOR docstring: fix typoSean Whitton2021-11-09
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* avoid unbound variable error on older kernels without CLONE_NEWTIMESean Whitton2021-11-09
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* INSTALLER:CLEANLY-INSTALLED-ONCE: fix type of :REMOTE-HOME connattrSean Whitton2021-11-09
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* COLLAPSE{,-PROPAPP}-TYPES: invert logicSean Whitton2021-11-09
| | | | | | | | | These functions are used to determine whether a composite property is :POSIX or :LISP. If any of the composing properties are :LISP, then we need to return :LISP, such that attempting to apply the composite property using a POSIX-type connection produces an error. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* release Consfigurator 0.12.0 (-1 to Debian unstable)v0.12.0debian/0.12.0-1archive/debian/0.12.0-1Sean Whitton2021-11-08
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* style guide: prefer to switch user than to update ownershipSean Whitton2021-11-08
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* use higher-numbered codes for change status, 1 for unhandled errorsSean Whitton2021-11-08
| | | | | | | | When SBCL fails to start up, such as when previously-loaded shared libraries cannot be found while trying to reinvoke a dumped image, it exits 1. We must avoid erroneously interpreting this as a successful attempt to make changes. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* :SBCL: avoid adding :DATA hostattrs that persist in *HOST*Sean Whitton2021-11-08
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* REHOME-CONNECTION: move call to UPLOAD-ALL-PREREQUISITE-DATASean Whitton2021-11-08
| | | | | | | | It's the fact we're changing to a different home directory that's part of the same root filesystem, and with the same UID/GID ranges, that means we call UPLOAD-ALL-PREREQUISITE-DATA with this connection object. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add LXC properties, :LXC{,-UNPRIV-ATTACH} connections, WITH-HOMEDIRSean Whitton2021-11-08
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add Linux namespace-entering connectionsSean Whitton2021-11-08
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add CAPABILITY-P and grovel for some Linux capability constantsSean Whitton2021-11-04
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* :SETUID: pass target uid to POSIX-LOGIN-ENVIRONMENT for correct PATHSean Whitton2021-11-01
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* rename FIREWALLD:ZONE-DIRECT-RULE -> FIREWALLD:DIRECT-RULESean Whitton2021-11-01
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* ON{-APPLY,}-CHANGE: always return result of primary propappSean Whitton2021-11-01
| | | | | | | In particular, if the secondary propapps are applied but make no change, do not return :NO-CHANGE as the overall result. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add APT:BACKPORTS-INSTALLED{,-MINIMALLY}Sean Whitton2021-11-01
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* FIREWALLD:ZONE: note idea to use hostattrs to gather zone settingsSean Whitton2021-11-01
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* FIREWALLD:HAS-ZONE: reload after adding zoneSean Whitton2021-11-01
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
generated by cgit v1.2.3 (git 2.39.1) at 2024-05-18 18:13:23 +0000