liminix

dan/liminix

Fork 5

Commit Graph

Select branches

Hide Pull Requests

armv7

doc-do-over

fallover

firescape

first-do-no-arm

gateway-profile

hark-how-all-the-belkin-rings

lte

main

mainline-omnia-wip

module-based-network

nftables-turned

runciter

tftpboot-append-dtb

wip-pstore-tls

#10

#11

#12

#13

#14

#15

#16

#2

#3

#4

#5

#6

#7

aaa6e353db incz is a very rudimentary log shipper for zinc search Daniel Barlow 2024-09-08 16:38:37 +0100
69bf6cb5fb write-fennel quote PATH properly Daniel Barlow 2024-09-07 22:31:44 +0100
9f58e7b926 maybe fix nixpkgs-unstable lua Daniel Barlow 2024-09-07 00:58:11 +0100
5a5c27ab9f think Daniel Barlow 2024-09-06 22:37:49 +0100
277c91acdf Revert "remove luaposix ref in write-fennel" Daniel Barlow 2024-09-06 00:32:05 +0100
e0725489ca unbreak pppoe ci job Daniel Barlow 2024-09-06 00:29:42 +0100
cc47515cf8 watch-outputs remove debug code Daniel Barlow 2024-09-06 00:13:30 +0100
464913cc8f tangc use spawn to invoke jose Daniel Barlow 2024-09-06 00:12:45 +0100
e604d628e3 fennel anoia.process.spawn Daniel Barlow 2024-09-06 00:11:33 +0100
e2a597589b anoia.fs.find-executable looks for bin in colon-sep list of directories Daniel Barlow 2024-09-06 00:08:40 +0100
a139a262c1 seedrng: init at 2022.04 Raito Bezarius 2024-09-05 14:16:38 +0200
6a5fed83dd conditional fetch in json-to-fstree Daniel Barlow 2024-09-05 10:39:59 +0100
bcf5ab24e8 tidy watch-outputs startup message Daniel Barlow 2024-09-05 10:11:16 +0100
32bf80c6fa devout: unlink socket pathname before binding Daniel Barlow 2024-09-05 10:05:13 +0100
12275f6896 add more test for table= Daniel Barlow 2024-09-04 21:21:30 +0100
a60c2539a6 remove luaposix ref in write-fennel Daniel Barlow 2024-09-04 21:21:02 +0100
146a2d9ac0 fix startup race/fencepost in watch-ssh-keys Daniel Barlow 2024-09-04 21:19:51 +0100
091d863710 extract pppoe/l2tp common code Daniel Barlow 2024-09-04 00:12:26 +0100
c7bcfbfa34 make pppoe/l2tp more consistent Daniel Barlow 2024-09-03 22:57:45 +0100
500a3c1025 make nodefaultroute explicit in ppp Daniel Barlow 2024-09-03 22:53:13 +0100
0c0d0eed8a make watch-ssh-keys robust against missing key Daniel Barlow 2024-09-03 22:51:29 +0100
699cf97206 improve tangc http error messages Daniel Barlow 2024-09-03 22:50:55 +0100
cd0093279c think Daniel Barlow 2024-09-01 10:14:31 +0100
034d6aacc4 tangc handle non-zero exit from jwe dec Daniel Barlow 2024-09-01 09:57:38 +0100
e590c0ad3f secrets subscriber: add provider as dep to controlled service Daniel Barlow 2024-09-01 09:56:59 +0100
14abdd9998 tang: notify on ready Daniel Barlow 2024-08-31 23:24:50 +0100
6287b92000 fix bugs handling base64 padding Daniel Barlow 2024-08-31 22:20:37 +0100
d2215d3e56 tangc popen retry on short read Daniel Barlow 2024-08-31 22:18:23 +0100
3cf2308bee tangc: stop printing unexpected blank lines Daniel Barlow 2024-08-31 15:29:10 +0100
3913989be3 provide string to perform-encryption Daniel Barlow 2024-08-31 15:27:54 +0100
43e5e6876e improve tangc error messages Daniel Barlow 2024-08-31 15:22:26 +0100
7d6c80570c refactor all writeFennelScript calls to use writeFennel directly Daniel Barlow 2024-08-30 20:57:42 +0100
e745991b9d restart pppoe/l2tp in secrets changes Daniel Barlow 2024-08-30 20:49:27 +0100
defbfce1fb finish converting outputRef to lambda Daniel Barlow 2024-08-30 20:46:48 +0100
0df2c83382 tighten perms on service state directory Daniel Barlow 2024-08-29 23:56:43 +0100
01c28de88d think Daniel Barlow 2024-08-29 23:56:20 +0100
2bf197cad8 document outputs and secrets Daniel Barlow 2024-08-29 23:55:32 +0100
a8a19977ca (untested) template service for tang encrypted secrets Daniel Barlow 2024-08-28 22:32:26 +0100
8a9284af1e think Daniel Barlow 2024-08-28 22:23:00 +0100
7351e143c5 remove redundant sourcing of ${serviceFns} Daniel Barlow 2024-08-28 21:28:27 +0100
283c3154a7 missing file in s6-rc-up-tree test fixture Daniel Barlow 2024-08-28 21:18:54 +0100
34f37d60d9 missed adding this Daniel Barlow 2024-08-28 20:56:29 +0100
fe7b092075 (untested) http basic auth for outboard secrets Daniel Barlow 2024-08-28 20:53:59 +0100
b56f121e04 fetch lua glue: handle missing content-length Daniel Barlow 2024-08-28 19:52:00 +0100
d5d621f310 rename http-fstree => json-to-fstree Daniel Barlow 2024-08-28 19:12:00 +0100
da95a9fa62 tangc support encryption Daniel Barlow 2024-08-28 18:55:20 +0100
85071c88e7 remove argv0 from calls to jose Daniel Barlow 2024-08-28 11:16:43 +0100
74093b7ee3 josep! runs jose without json parsing the output Daniel Barlow 2024-08-28 08:13:50 +0100
41733e58d6 remove unused code, tidy string parsing Daniel Barlow 2024-08-28 07:20:07 +0100
9041d5d63a add jose! fn to reduce error-checking boilerplate Daniel Barlow 2024-08-28 07:10:47 +0100
001ebdc601 remove unused requires Daniel Barlow 2024-08-28 06:52:04 +0100
1f97409474 add popen2 to anoia.fs Daniel Barlow 2024-08-28 06:49:43 +0100
a41839f3d1 clevis-decrypt-tang in fennel Daniel Barlow 2024-08-28 01:37:44 +0100
ff76d854fc extend libfetch lua glue to other HTTP methods Daniel Barlow 2024-08-28 01:37:02 +0100
81a6480a4f anoia add base64 deode Daniel Barlow 2024-08-27 22:42:03 +0100
c7164a6f4a sshd can use outputRef for authorized_keys Daniel Barlow 2024-08-25 16:35:50 +0100
83ca86fe42 keys in service output tree are strings Daniel Barlow 2024-08-25 15:59:24 +0100
1b4106e2a3 ssh-keys service, draft Daniel Barlow 2024-08-25 15:09:31 +0100
89912c766b nixpkgs 24.11 qemu does not expect texinfo Daniel Barlow 2024-08-25 14:23:29 +0100
9828b007ae watch-ssh-keys turns secrets-service into authorized_keys files Daniel Barlow 2024-08-24 23:25:32 +0100
f34abc85ae add macros param to write-fennel Daniel Barlow 2024-08-24 23:19:46 +0100
b475a680fb define-tests macro, evals body only when inside fennelrepl --test Daniel Barlow 2024-08-24 21:50:30 +0100
43612af71a anoia: %% is alias for string.formt Daniel Barlow 2024-08-24 13:56:54 +0100
5695c47496 add dig to anoia Daniel Barlow 2024-08-23 23:27:29 +0100
e3ec514710 think Daniel Barlow 2024-08-23 23:27:17 +0100
99f68e5421 destructure params in ssh service Daniel Barlow 2024-08-23 23:13:49 +0100
9c30b6f882 change output references from attrset to lambda Daniel Barlow 2024-08-23 22:25:57 +0100
dd75322c10 think Daniel Barlow 2024-08-23 21:45:18 +0100
869a508c0a add authorizedKeys option to ssh service Daniel Barlow 2024-08-23 20:35:07 +0100
e835473945 patch dropbear to add -U option Daniel Barlow 2024-08-23 19:58:05 +0100
055268d5d2 upgrade dropbear Daniel Barlow 2024-08-23 19:57:10 +0100
ff38bcacbb improve devout error reporting Daniel Barlow 2024-08-21 23:24:13 +0100
a6128955e7 ppp modules: permit (mostly) same params for l2tp as pppoe Daniel Barlow 2024-08-21 23:10:28 +0100
531cb113be devout needs a longer startup timeout Daniel Barlow 2024-08-21 23:09:11 +0100
daede666cb in router-with-l2tp use secrets for ppp username/password Daniel Barlow 2024-08-21 00:17:53 +0100
2992771c7e pppoe allow secrets for username/password Daniel Barlow 2024-08-21 00:17:22 +0100
4cc82e1502 liminix.types.replacable is a string or ref to an output Daniel Barlow 2024-08-21 00:16:14 +0100
21f2320d86 inline method Daniel Barlow 2024-08-20 23:26:11 +0100
d40ada4251 use structured ppp params in ppp test Daniel Barlow 2024-08-20 23:25:31 +0100
4053ea9481 secrets/subscriber implement different restart types Daniel Barlow 2024-08-20 22:56:26 +0100
54d3415885 pppoe convert to using a config file Daniel Barlow 2024-08-20 22:55:30 +0100
264d83c98d move some secret-watching stuff from hostapd to secrets Daniel Barlow 2024-08-20 21:49:11 +0100
97defc2076 hostapd: get secrets service/path from attrs Daniel Barlow 2024-08-17 22:22:33 +0100
ddaa5476d3 override clevis derivation (experimental) Daniel Barlow 2024-08-15 23:02:54 +0100
bcd9d56624 start devout after mdevd Daniel Barlow 2024-08-15 23:01:29 +0100
e2c883356c add secrets-subscriber service, make hostapd use it Daniel Barlow 2024-08-15 23:00:41 +0100
d79a941504 new package watch-outputs and example of its use Daniel Barlow 2024-08-14 22:58:17 +0100
2f82e0dab8 hostapd set permissions on dir in /run/ Daniel Barlow 2024-08-14 22:57:02 +0100
fc03965915 hostapd literal_or_output use an attrset for dispatch Daniel Barlow 2024-08-14 22:56:01 +0100
d2d3af2587 outboard secrets: loop in service Daniel Barlow 2024-08-14 22:41:56 +0100
310ac30f24 http-fstree needs to write state and .lock for anoia.svc Daniel Barlow 2024-08-14 22:39:41 +0100
45a7f96bd4 anoia table= compares tables Daniel Barlow 2024-08-14 22:36:28 +0100
79445fd962 support multi-arg assoc Daniel Barlow 2024-08-14 22:34:37 +0100
a9ddd78482 think Daniel Barlow 2024-08-12 22:59:03 +0100
4fb8253e57 first pass at outboard secrets Daniel Barlow 2024-08-12 22:57:21 +0100
ff3a1905a5 pass service to output fn in output-template Daniel Barlow 2024-08-12 22:53:07 +0100
3c353e4aff support json quoting in output-template Daniel Barlow 2024-08-10 23:42:08 +0100
ba21384fde new: output-template interpolates output values into config file Daniel Barlow 2024-08-10 23:06:47 +0100
2480fdef5b set up nginx on bordervm for testing outboard secrets Daniel Barlow 2024-08-10 23:05:50 +0100
409c1cfb16 think Daniel Barlow 2024-08-10 23:05:15 +0100