aboutsummaryrefslogtreecommitdiff
path: root/src/connection/sudo.lisp
Commit message (Collapse)AuthorAge
* rename PASSPHRASE class and its associated functionsSean Whitton2022-04-10
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* rename READFILE, WRITEFILE, corresponding generics and some wrappersSean Whitton2022-04-02
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* rename CONNECTION-TEARDOWN -> CONNECTION-TEAR-DOWNSean Whitton2022-04-02
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* :SUDO: use :FROM not :AS for keyword argumentSean Whitton2022-04-02
| | | | | | Primarily to avoid confusion with :AS connection type. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* fix a comment's example usage of the :SSH connection typeSean Whitton2022-04-01
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* connection chain specs.: consistently use :USER for the target userSean Whitton2022-04-01
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* replace ESCAPE-SH-TOKEN and ESCAPE-SH-COMMAND with new SH-ESCAPESean Whitton2022-03-11
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add dep on Anaphora and use APROG1, ALET & AAND in various placesSean Whitton2021-09-08
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* :SUDO: ensure that stdin is a pipe, never a real fileSean Whitton2021-07-24
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* :SUDO: preserve SSH_AUTH_SOCK when sudoing to rootSean Whitton2021-05-30
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* convert CONNECTION slots to connattrs & fix finding homedirsSean Whitton2021-05-23
| | | | | | | | | | | | HOME does not take into account /etc/passwd inside the chroot, even when starting a login shell with, e.g., "chroot /chroot sh -lc 'echo $HOME'" -- we would need something which emulates login(1), like su(1), but the -c argument to su(1) is not portable. getent(1) is not POSIX. So use tilde expansion. Additionally, avoid having UPLOAD-ALL-PREREQUISITE-DATA store values for the remote UID, remote homedir etc. from *before* the chroot/setuid operation. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* rework uploading data to be in terms of CONNECTION-UPLOADSean Whitton2021-03-27
| | | | | | | | | | Incremental updates of items of prerequisite data was not implemented, so the previous meaning of CONNECTION-UPLOAD was not achieving much. This simplifies the core implementation, should still allow connection types to implement the method to provide optimisations, and provides a way to implement copying items of prerequisite data into chroots. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* Revert ":SUDO connection type: reset the working directory"Sean Whitton2021-03-25
| | | | | | | | This reverts commit 03faea5bac3337a23d821078984c12bdbedeb022. We are now handling this in RUN, MRUN, READFILE & WRITEFILE. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* fix GET-SUDO-PASSWORD when there is no passwordSean Whitton2021-03-23
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* move comments on :SUDO to the manual & drop a TODOSean Whitton2021-03-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* untabifySean Whitton2021-03-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add MAKE-PASSPHRASE and use it to protect more sudo passwordsSean Whitton2021-03-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* rename :DEBIAN-SBCL -> :SBCL & use a property to install sbclSean Whitton2021-03-22
| | | | | | | Unconditionally calling apt was actually the only Debian-specific thing about the connection type. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add facility for more regular progress and debug printingSean Whitton2021-03-21
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add and use :CONSFIGURATOR named readtableSean Whitton2021-03-20
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* hide sudo passwords in the debuggerSean Whitton2021-03-19
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* :SUDO connection type: reset the working directorySean Whitton2021-03-19
| | | | | | | We want use of this connection type to be as close as possible to just SSHing in as root. Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* simplify control flow by specialising on INPUT in CONNECTION-RUNSean Whitton2021-02-27
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* factor out SHELL-WRAP-CONNECTION superclassSean Whitton2021-02-27
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* use braces rather than parentheses with CL-INTERPOLSean Whitton2021-02-24
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* use MRUN rather than RUN in some more placesSean Whitton2021-02-24
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add some output as Consfigurator executes deploymentsSean Whitton2021-02-24
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* add TODO regarding :PASSWD & :NOPASSWDSean Whitton2021-02-23
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* fix checking stream element type in CONSFIGURATOR.CONNECTION.SUDOSean Whitton2021-02-23
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* attempt to fix streaming data into remote sudoSean Whitton2021-02-23
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* fix a few calls to RUNSean Whitton2021-02-23
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* fix basic functionality of the :SUDO connection typeSean Whitton2021-02-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* drop a blank lineSean Whitton2021-02-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* connection type :SUDO can just use cp(1) for CONNECTION-UPLOADSean Whitton2021-02-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* handle both possible values of INPUTSean Whitton2021-02-22
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* attempt to implement :SUDO connection typeSean Whitton2021-02-21
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* notes after reading sudo(1)Sean Whitton2021-02-21
| | | | Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
* start figuring out :SUDO connection typeSean Whitton2021-02-21
Signed-off-by: Sean Whitton <spwhitton@spwhitton.name>
generated by cgit v1.2.3 (git 2.39.1) at 2024-05-18 01:26:57 +0000