Merge branch 'master' into rel/0.12

This commit is contained in:
Juan David Hurtado G
2024-11-24 11:08:39 -05:00
3 changed files with 21 additions and 11 deletions

View File

@@ -110,7 +110,7 @@ automatically. This feature is new since version 0.10.20231013.
```shell
ishmael ~ # bastille setup -h
ishmael ~ # Usage: bastille setup [pf|bastille0|zfs|vnet]
ishmael ~ # Usage: bastille setup [pf|network|zfs|vnet]
```
On fresh installations it is likely safe to run `bastille setup` with no

View File

@@ -9,7 +9,7 @@ options for a Bastille host with one command.
.. code-block:: shell
ishmael ~ # bastille setup -h ## display setup help
ishmael ~ # bastille setup bastille0 ## only configure loopback interface
ishmael ~ # bastille setup network ## only configure loopback interface
ishmael ~ # bastille setup pf ## only configure default firewall
ishmael ~ # bastille setup zfs ## only configure ZFS storage
ishmael ~ # bastille setup vnet ## only configure VNET bridge

View File

@@ -30,11 +30,16 @@
bastille_config="/usr/local/etc/bastille/bastille.conf"
. /usr/local/share/bastille/common.sh
if [ ! -f "${bastille_config}" ]; then
cp /usr/local/etc/bastille/bastille.conf.sample ${bastille_config}
fi
# shellcheck source=/usr/local/etc/bastille/bastille.conf
. ${bastille_config}
usage() {
error_exit "Usage: bastille setup [pf|bastille0|zfs|vnet]"
error_exit "Usage: bastille setup [pf|network|zfs|vnet]"
}
# Check for too many args
@@ -42,13 +47,13 @@ if [ $# -gt 1 ]; then
usage
fi
# Configure bastille0 network interface
configure_bastille0() {
info "Configuring bastille0 loopback interface"
# Configure bastille loopback network interface
configure_network() {
info "Configuring ${bastille_network_loopback} loopback interface"
sysrc cloned_interfaces+=lo1
sysrc ifconfig_lo1_name="bastille0"
sysrc ifconfig_lo1_name="${bastille_network_loopback}"
info "Bringing up new interface: bastille0"
info "Bringing up new interface: ${bastille_network_loopback}"
service netif cloneup
}
@@ -123,7 +128,7 @@ configure_zfs() {
# Run all base functions (w/o vnet) if no args
if [ $# -eq 0 ]; then
sysrc bastille_enable=YES
configure_bastille0
configure_network
configure_pf
configure_zfs
fi
@@ -136,8 +141,13 @@ help|-h|--help)
pf|firewall)
configure_pf
;;
bastille0|loopback)
configure_bastille0
bastille0)
# TODO remove in future release 0.13
warn "'bastille setup bastille0' will be deprecated in the next 0.13 version."
configure_network
;;
network|loopback)
configure_network
;;
zfs|storage)
configure_zfs