mirror of
https://github.com/hackacad/bastille.git
synced 2026-01-02 10:49:48 +01:00
Merge branch 'master' into rel/0.12
This commit is contained in:
@@ -110,7 +110,7 @@ automatically. This feature is new since version 0.10.20231013.
|
||||
|
||||
```shell
|
||||
ishmael ~ # bastille setup -h
|
||||
ishmael ~ # Usage: bastille setup [pf|bastille0|zfs|vnet]
|
||||
ishmael ~ # Usage: bastille setup [pf|network|zfs|vnet]
|
||||
```
|
||||
|
||||
On fresh installations it is likely safe to run `bastille setup` with no
|
||||
|
||||
@@ -9,7 +9,7 @@ options for a Bastille host with one command.
|
||||
.. code-block:: shell
|
||||
|
||||
ishmael ~ # bastille setup -h ## display setup help
|
||||
ishmael ~ # bastille setup bastille0 ## only configure loopback interface
|
||||
ishmael ~ # bastille setup network ## only configure loopback interface
|
||||
ishmael ~ # bastille setup pf ## only configure default firewall
|
||||
ishmael ~ # bastille setup zfs ## only configure ZFS storage
|
||||
ishmael ~ # bastille setup vnet ## only configure VNET bridge
|
||||
|
||||
@@ -30,11 +30,16 @@
|
||||
|
||||
bastille_config="/usr/local/etc/bastille/bastille.conf"
|
||||
. /usr/local/share/bastille/common.sh
|
||||
|
||||
if [ ! -f "${bastille_config}" ]; then
|
||||
cp /usr/local/etc/bastille/bastille.conf.sample ${bastille_config}
|
||||
fi
|
||||
|
||||
# shellcheck source=/usr/local/etc/bastille/bastille.conf
|
||||
. ${bastille_config}
|
||||
|
||||
usage() {
|
||||
error_exit "Usage: bastille setup [pf|bastille0|zfs|vnet]"
|
||||
error_exit "Usage: bastille setup [pf|network|zfs|vnet]"
|
||||
}
|
||||
|
||||
# Check for too many args
|
||||
@@ -42,13 +47,13 @@ if [ $# -gt 1 ]; then
|
||||
usage
|
||||
fi
|
||||
|
||||
# Configure bastille0 network interface
|
||||
configure_bastille0() {
|
||||
info "Configuring bastille0 loopback interface"
|
||||
# Configure bastille loopback network interface
|
||||
configure_network() {
|
||||
info "Configuring ${bastille_network_loopback} loopback interface"
|
||||
sysrc cloned_interfaces+=lo1
|
||||
sysrc ifconfig_lo1_name="bastille0"
|
||||
sysrc ifconfig_lo1_name="${bastille_network_loopback}"
|
||||
|
||||
info "Bringing up new interface: bastille0"
|
||||
info "Bringing up new interface: ${bastille_network_loopback}"
|
||||
service netif cloneup
|
||||
}
|
||||
|
||||
@@ -123,7 +128,7 @@ configure_zfs() {
|
||||
# Run all base functions (w/o vnet) if no args
|
||||
if [ $# -eq 0 ]; then
|
||||
sysrc bastille_enable=YES
|
||||
configure_bastille0
|
||||
configure_network
|
||||
configure_pf
|
||||
configure_zfs
|
||||
fi
|
||||
@@ -136,8 +141,13 @@ help|-h|--help)
|
||||
pf|firewall)
|
||||
configure_pf
|
||||
;;
|
||||
bastille0|loopback)
|
||||
configure_bastille0
|
||||
bastille0)
|
||||
# TODO remove in future release 0.13
|
||||
warn "'bastille setup bastille0' will be deprecated in the next 0.13 version."
|
||||
configure_network
|
||||
;;
|
||||
network|loopback)
|
||||
configure_network
|
||||
;;
|
||||
zfs|storage)
|
||||
configure_zfs
|
||||
|
||||
Reference in New Issue
Block a user