859 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Pat Maddox	c9d28ceed1	Document Bastille VNET on GCP	2022-07-30 20:59:50 -07:00
Christer Edwards	c50e99b3e7	Merge pull request #533 from cqexbesd/colour ... Enable colour only when writing to a tty	2022-07-23 21:23:16 -06:00
Andrew Stevenson	a0b7bc54e0	Enable colour only when writing to a tty ... The escape codes can confuse other scripts and things in pipes	2022-07-23 09:29:42 +00:00
Christer Edwards	639334052f	Merge pull request #532 from cedwards/update_doc_version ... update versions from 12.x to 13.x	2022-07-22 07:56:32 -06:00
Christer Edwards	40c99ef979	update versions from 12.x to 13.x	2022-07-22 07:55:22 -06:00
Christer Edwards	260149c2a9	Merge pull request #530 from JRGTH/clone_cmd_fixes ... Update the exec.* with uniq_epair when cloning jails	2022-07-18 10:31:59 -06:00
Christer Edwards	722adc44cb	Merge pull request #531 from cedwards/cmd_bugfix ... bugfix for cmd when using ALL target	2022-07-18 10:28:11 -06:00
Christer Edwards	e35c59330d	bugfix for cmd when using ALL target	2022-07-17 18:43:13 -06:00
JRGTH	74b6eb76e7	Update the exec.* with uniq_epair when cloning jails ... This update will fix the startup error after cloning a jail, this was because the exec.prestart/poststop not being properly updated.	2022-07-14 21:41:52 -04:00
Christer Edwards	da377f4735	Merge pull request #529 from BastilleBSD/fete_nationale_2022 ... prepare for fete nationale 2022	2022-07-13 21:32:33 -06:00
Christer Edwards	f5b47d8f9e	prepare for fete nationale 2022	2022-07-13 21:30:04 -06:00
Christer Edwards	6de6e7bc6f	Merge pull request #519 from JRGTH/bootstrap_fixes ... Avoid cache/RELEASE dirs creation on Linux jails	2022-07-10 20:23:44 -06:00
Christer Edwards	533d108d91	Merge pull request #526 from boogiewookie/master ... The text speaks of defining an OVERLAY but the example uses CP.	2022-07-10 20:23:22 -06:00
Kevet Duncombe	a5bf6eca16	Merge pull request #1 from boogiewookie/boogiewookie-patch-1 ... Update README.md	2022-06-20 06:35:02 -05:00
Kevet Duncombe	10468cd08f	Update README.md	2022-06-20 06:30:42 -05:00
Christer Edwards	e8a72bcd75	Merge pull request #520 from JRGTH/cmd_fixes ... Allow 'bastille cmd' on Linux jails	2022-05-31 13:36:31 -06:00
JRGTH	b69eedc066	Allow 'bastille cmd' on Linux jails ... Allow executing commands on Linux jails with `bastille cmd`.	2022-05-16 09:34:37 -04:00
JRGTH	62d038049d	Avoid cache/RELEASE dirs creation on Linux jails ... Don't create unused/stale cache/RELEASE directory/datasets on Linux jails creation.	2022-05-15 04:15:39 -04:00
Christer Edwards	3ba1024704	Merge pull request #510 from cyrilst/patch-1 ... Repair table, fix incorrect descriptions	2022-05-04 14:50:24 -06:00
Christer Edwards	dbb720fef4	Merge pull request #500 from eborisch/graceful_network_stop ... Permit outgoing network connections during stop action	2022-05-04 14:49:26 -06:00
Christer Edwards	d0903347a6	Merge pull request #502 from nmurali94/master ... Extend RDR to support logging	2022-05-04 14:47:30 -06:00
Christer Edwards	b9d38a5d01	Merge pull request #505 from ctuffli/patch-1 ... Allow Linux jails to see their mount points	2022-05-04 14:46:38 -06:00
Christer Edwards	f14eddc958	Merge pull request #507 from ellislm/fix_vnet_epair ... fix non-unique epair creation when using vnet	2022-05-04 14:45:33 -06:00
Christer Edwards	e64c81d18a	Merge pull request #515 from ddowse/template-ip6 ... Add variable JAIL_IP6 to access ip6.addr in templates	2022-05-04 14:44:00 -06:00
Christer Edwards	674a34d69c	Merge pull request #511 from fellmoon/patch-1 ... Update bootstrap.rst	2022-05-04 14:38:39 -06:00
fellmoon	a97ac27a46	Update bootstrap.rst	2022-05-04 22:27:15 +02:00
Daniel Dowse - Freelancer	4302445eb5	Add variable JAIL_IP6 to access ip6.addr in templates	2022-04-08 15:26:53 +02:00
fellmoon	d9f1dfdc2f	Update bootstrap.rst ... added example how to bootstrap hardenedbsd	2022-03-21 00:42:39 +01:00
cyrilst	ebb93c795e	Repair table, fix incorrect descriptions	2022-03-16 13:55:51 +01:00
Logan Ellis	dbd4b5edc5	fix non-unique epair creation when using vnet	2022-03-10 00:08:38 -08:00
Chuck Tuffli	abc8a6b280	Allow Linux jails to see their mount points ... Some Linux packages (shakes fist angrily at Java) look to see if `/proc` is mounted as a part of the installation by running `mountpoint /proc` While the Linux jail can see the contents of its `/proc` directory, the linprocfs driver will not generate the correct contents for `/proc/mounts` or `/proc/self/mountinfo` as `kern_getfsstat()` will, by default, filter all mount points other than the jail's chroot directory. Fix is to set `enforce_statfs` to allow mount points below the jail's chroot directory to be visible.	2022-03-04 08:16:33 -08:00
Niketh Murali	6e5a566d7f	Extend RDR to support logging ... PF allows us to log rdr rules. The syntax to enable this is found in pf.conf under the syntax grammar section for rdr-rule. This commit extends Bastille's command line interface to allow users to choose to log their rdr rules using the pf.conf syntax - `````````````````````````````````````````````````````` tcp|udp host_port jail_port [log ['(' logopts ')'] ] `````````````````````````````````````````````````````` Here, the syntax after jail_port is optional. This is sufficient to provide backwards compatibility. The keyword 'log' enables logging with the default options. The user can also provide custom options - logopts - whose the syntax and allowed keywords are defined in pf.conf. It's left to the user to supply correct logopts as the code does not verify those values or their syntax.	2022-03-01 21:54:34 -05:00
Eric A. Borisch	24eb03c2e6	Permit outgoing connections during stop action	2022-02-24 09:42:40 -06:00
Christer Edwards	ff7de9167a	Merge pull request #498 from cedwards/master ... 0.9.20220216 release	2022-02-16 23:34:59 -07:00
Christer Edwards	aafc2b3323	0.9.20220216 release	2022-02-16 23:28:09 -07:00
Christer Edwards	efed673e76	Merge pull request #490 from noracenofun/new-option--p-for-list-release ... added the new option -p for list release	2022-02-16 23:05:03 -07:00
Christer Edwards	6aa6e40db1	Merge pull request #485 from JRGTH/clonejail_support ... Initial support for clone jails	2022-02-16 23:02:41 -07:00
Christer Edwards	4726c48813	Merge pull request #491 from JRGTH/rename_fixes ... Consistency improvements	2022-02-16 22:59:31 -07:00
Christer Edwards	920ca1fba0	Merge pull request #497 from frikilax/fix_fstab_clone ... CLONE.SH::FIXED:: update fstab paths with new jail path	2022-02-16 22:58:52 -07:00
Theo BERTIN	6ca0369072	CLONE.SH::ADDED:: Complete FSTAB_RELEASE grep from fstab to get all release names ... some release names (such as 14.0-CURRENT) were not correctly extracted from the fstab during fstab modification	2022-02-11 10:16:59 +01:00
Theo BERTIN	66d830a55f	CLONE.SH::ADDED:: update fstab paths with new jail path	2022-02-11 09:41:02 +01:00
Christer Edwards	e4e1fadf35	Merge pull request #495 from gogolok/readme_fix_formatting ... README: Fix formatting	2022-02-02 12:35:47 -07:00
Robert Gogolok	6b43067d86	README: Fix formatting	2022-02-02 09:03:55 +01:00
JRGTH	9052271232	Consistency improvements	2022-01-17 20:47:48 -04:00
noracenofun	4be7795f0a	added the new option -p for list release ... This new option lists the patch level of FreeBSD releases.	2022-01-18 01:05:29 +01:00
Christer Edwards	ab43a7569f	Merge pull request #488 from JRGTH/rename_fixes ... Update Linuxjail name entries upon jail renaming	2022-01-17 16:21:37 -07:00
Christer Edwards	d7d0d864c3	Merge pull request #489 from noracenofun/bootstrap-aarch64/arm64-Debian/Ubuntu ... bootstrap aarch64/arm64 Debian/Ubuntu support	2022-01-17 16:20:38 -07:00
Christer Edwards	5d9ea33889	Merge pull request #486 from noracenofun/patch-1 ... optimizing command `list -a`	2022-01-17 16:19:24 -07:00
noracenofun	dc9b5fb9bd	bootstrap aarch64/arm64 Debian/Ubuntu ... added support to bootstrap aarch64/arm64 Debian or Ubuntu for ARM64 hosts	2022-01-16 19:51:58 +01:00
JRGTH	a62f36333d	Update Linuxjail name entries upon jail renaming	2022-01-16 14:00:23 -04:00