| Age | Commit message (Collapse) | Author |
|---|
|
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
because of User.shadowConfig
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
probably because of "now :: Property Linux"
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
Signed-off-by: Zihao Wang <dev@wzhd.org>
|
|
|
|
|
|
generate good filenames for config directories.
spwhitton has a branch that could use this, and there are several places
in propellor that do something ad-hoc that would have been better
implemented using this. I was not able to switch any of the existing
ad-hoc stuff, but this can be used going forward for new stuff.
This commit was sponsored by Anthony DeRobertis on Patreon.
|
|
|
|
|
|
|
|
Compile with GHC 8.0.1 against lts-7.16.
|
|
|
|
|
|
hiddenService'/hiddenServiceAvailable'
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Remove --build which is no longer present.
Order the list of options the same.
Document --rm-key in man page.
|
|
encoding-related crashes in eg, Propellor.Property.File.
|
|
|
|
|
|
|
|
which prevented non-root users from doing anything in the chroot.
|
|
from eg, "import Propellor"
|
|
configuration in the current directory, rather than ~/.propellor/config.hs
The config,hs name now seems a bit badly chosen, propellor.hs would be less
ambiguous. To avoid accidentially running with a config.hs for something
else, the file content has to contain "Propellor".
Note that checkRepoUpToDate is only run for ~/.propellor/. I guess
propellor configs in other directories won't have been set up that way,
and it would take some changes to make that not hardcode use of
dotPropellor.
There's a new security boundary here, since running propellor looks at the
cwd, whose contents might not be user the user's control. The security
checks I added for this seem pretty good, but even if they can be bypassed,
this is not much different than `make` using the Makefile in cwd.
This commit was sponsored by Ole-Morten Duesund on Patreon.
|
|
This is to allow multiple admins of iabak to access the privdata. Since
there's a single privdata file for all machines in a propellor
deployment, and I don't want them to see all my secrets, we needed to
break it out.
|
|
|
|
ghc 7 does not support -fno-warn-redundant-constraints so this can't be
done on a per-module basis.
It would be good to revert this commit when dropping support for ghc 7.
|
|
Only a couple of the constraints were really redundant. The rest are
essential to propellor's tracking of Info propigation, so I silenced the
warning for those.
It would be better to only silence the warning for the functions with the
extra constraints, but IIRC warnings can only be silenced on an entire file
basis.
This commit was sponsored by Andreas on Patreon.
|
|
|
|
|
|
You might want to test Group.hasUser; I wasn't actually able to test it.
|
|
|
|
|
|
debootstrap. Thanks, mithrandi.
This commit was sponsored by Jake Vosloo on Patreon.
|
|
|
|
|
