##// END OF EJS Templates
Raspi2-3_GenImage
RSS

Cloner depuis https://github.com/drtyhlpr/rpi23-gen-image.git

-Enable_nonfree no longer enables non-free packages while install. now it enables non free packacges in sources.list...
-Enable_nonfree no longer enables non-free packages while install. now it enables non free packacges in sources.list -Fix: check for kernel_threads -Fix: Cryptfs Kernel parameters -Renamed: Kernel_reduce renamed for better varaible grouping to Reduce_kernel -Fix: defaultgov check in 13-kernel.sh -Dropped: Enable_DHCP - now seperated in Enable_eth_dhcp and enable_wifi_dhcp -Feature: Dhcp and static configuration of both wired and wifi interface -Feature: added uart_2ndstage=1 for even more uart output in early stages -Renamed: eth.network and wlan.network to eth0 and wlan0 -Improve: sanity check for stattic ip -Renamed: Enable_SSHD to SSH_Enable for better variable gouping -Renamed PASSWORD to ROOT_PASSWORD for better distinction with USER_PASSWORD -Improved: Enable_dbus check on firstboot (generate-machineid) -improved: Reduce if ipv6 disable remove xtables -Improved: recomend $Release if xorg is enabled on some rpi models -Install wpasupplicant if Enabled_wireless is true -Reorder key:value in rpi23-gen-image.sh -fixing some wrong var assingments and missing declarations in rpi23-gen-image.sh -updated precompiled kernel links - changed the following default values: "Reduce_*,cryptfs_keysize (support for 0 and 1),rpi_model" - added a complete config (rpi3buster-fullconfig) in sync with new order of key:value in rpi23-gen-image.sh thx to trampeltier@fsfe for testing a lot!
Unknown - - Load All Authors

Fichier de la dernière révision:

r732:4551fcf06923
r732:4551fcf06923
Show More
21-firewall.sh
54 lines | 1.9 KiB | application/x-sh | BashLexer
/ bootstrap.d / 21-firewall.sh
Historique | Source | Brut |Copy content |Copy permalink
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56 #
Jan Wagner
spliting more files, fix-uboot, fix-fbturbo, fix-locale
 r67 # Setup Firewall
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56 #
Jan Wagner
spliting more files, fix-uboot, fix-fbturbo, fix-locale
 r67 # Load utility functions
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56 . ./functions.sh
if [ "$ENABLE_IPTABLES" = true ] ; then
# Create iptables configuration directory
drtyhlpr
Added Raspberry Pi 3 model support
 r94 mkdir -p "${ETC_DIR}/iptables"
Unknown
iptables fix...
 r279
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 if [ "$KERNEL_NF" = false ] ; then
Unknown
formating and dropbear fix for static ip
 r569 # iptables-save and -restore are slaves of iptables and thus are set accordingly
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 chroot_exec update-alternatives --verbose --set iptables /usr/sbin/iptables-legacy
fi
Unknown
iptables fix...
 r279
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install iptables systemd service
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_readonly files/iptables/iptables.service "${ETC_DIR}/systemd/system/iptables.service"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install flush-table script called by iptables service
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_exec files/iptables/flush-iptables.sh "${ETC_DIR}/iptables/flush-iptables.sh"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install iptables rule file
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_readonly files/iptables/iptables.rules "${ETC_DIR}/iptables/iptables.rules"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
# Reload systemd configuration and enable iptables service
chroot_exec systemctl daemon-reload
chroot_exec systemctl enable iptables.service
if [ "$ENABLE_IPV6" = true ] ; then
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
 r502 if [ "$KERNEL_NF" = false ] ; then
Unknown
formating and dropbear fix for static ip
 r569 # iptables-save and -restore are slaves of iptables and thus are set accordingly
drtyhlpr
Merge branch 'testing' into dropbear
 r530 chroot_exec update-alternatives --verbose --set ip6tables /usr/sbin/ip6tables-legacy
Unknown
formating and dropbear fix for static ip
 r569 fi
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install ip6tables systemd service
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_readonly files/iptables/ip6tables.service "${ETC_DIR}/systemd/system/ip6tables.service"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
 r71 # Install ip6tables file
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_exec files/iptables/flush-ip6tables.sh "${ETC_DIR}/iptables/flush-ip6tables.sh"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
drtyhlpr
Added Raspberry Pi 3 model support
 r94 install_readonly files/iptables/ip6tables.rules "${ETC_DIR}/iptables/ip6tables.rules"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56
# Reload systemd configuration and enable iptables service
chroot_exec systemctl daemon-reload
chroot_exec systemctl enable ip6tables.service
fi
drtyhlpr
fast fix for issues/128...
 r240
Unknown
-Enable_nonfree no longer enables non-free packages while install. now it enables non free packacges in sources.list...
 r732 if [ "$SSH_ENABLE" = false ] ; then
drtyhlpr
fast fix for issues/128...
 r240 # Remove SSHD related iptables rules
sed -i "/^#/! {/SSH/ s/^/# /}" "${ETC_DIR}/iptables/iptables.rules" 2> /dev/null
sed -i "/^#/! {/SSH/ s/^/# /}" "${ETC_DIR}/iptables/ip6tables.rules" 2> /dev/null
fi
Filip Pytloun
Refactor: split bootstrap actions and allow custom
 r56 fi