24 Commits (fd6850c7efcd043c04c9f4d85626571cae170dfd)

Author	SHA1	Message	Date
Pierre-Elliott Bécue	35d4841638	Allow setup-gpg.sh --import to receive, trust, and add to configure multiple public keys at once	2 years ago
Stéphane Lesimple	a6a25fd53b	feat: add type8 and type9 password hashes ... This requires the-bastion-mkhash-helper v1.1.0+	2 years ago
Stéphane Lesimple	f4650bd0dc	chore: shell/functions: remove now unused global var	3 years ago
Stéphane Lesimple	a178aa7906	enh: cron scripts: factorize common code and standardize logging	4 years ago
Stéphane Lesimple	744bd5fa0c	enh: introduce exit_fail and exit_success for shell scripts	4 years ago
Stéphane Lesimple	ae997dd93c	chore: shellcheck: rewrite shell-check.sh and make files compliant with v0.8.0	4 years ago
Stéphane Lesimple	b3af2933f9	enh: install.inc: random delay under CI	4 years ago
Stéphane Lesimple	be6a71afab	fix: install.inc: verbose under CI	4 years ago
Stéphane Lesimple	2f623dfb3a	fix: install.inc: fail nicely on invalid JSON under set -e	4 years ago
Stéphane Lesimple	000ed4e8af	feat: move scripts to GnuPG 2.x and add tests	4 years ago
Stéphane Lesimple	e847a19857	enh: ttyrec & yubico installs: hardcode URLs for when API is down	4 years ago
Stéphane Lesimple	d51c4c8be0	fix: tests: full tests on FreeBSD	4 years ago
Stéphane Lesimple	c201f44d83	enh: tests: refactor the framework for more maintainability ... The chain of executions is as is: - `docker_build_and_run_tests_all.sh` - launches several instances of `docker_build_and_run_tests.sh` - builds docker images with the `target_role.sh` and `tester_role.sh` entrypoints - inside the tester docker, `tester_role.sh` launches `launch_tests_on_instance.sh` - the target docker gets tested after setting up accounts, SSH etc. Previously, these scripts passed options to each other either by a mix of environment variables and command-line arguments, with some inconsistencies here and there. Now, `launch_tests_on_instance.sh` supports a lot of command-line options, which can be specified directly if testing a remote server, or can be passed-through by the calling script in case of docker tests. `docker_build_and_run_tests.sh` and `docker_build_and_run_tests_all.sh` also support to passthrough these options down.	5 years ago
Stéphane Lesimple	850c8cabd4	fix: freebsd: install script: prefer fetch over curl	5 years ago
Stéphane Lesimple	003052530e	feat: preparatory work to support Debian 11 "Bullseye" ... We still need to replacee pam_tally2 by pam_faillock Debian 11 is NOT yet supported, and won't be before it's released as stable.	5 years ago
Stéphane Lesimple	e37e235bf5	enh: install.inc: try harder to hit GitHub API in CI	5 years ago
Stéphane Lesimple	7b7c395c55	enh: osh-orphaned-homedir.sh: add more security checks to ensure we don't archive still-used home dirs	5 years ago
Stéphane Lesimple	7dabfc7135	fix: install-yubico-piv-checker: ppc64le installation was broken	5 years ago
Stéphane Lesimple	70feff2c2d	enh: install: use in-place overwrite for sudoers files ... This fixes a race condition in sudo where it would log a log of error messages to syslog if used while we're running the install script: files around sudoers.d/ are then moved around, and it'll yell for each file it previously listed if the file no longer exists when it tries to stat() it. It also deprecates the --no-wait flag of the install script, as now the sudoers.d/ directory will always have integrity at all times. Signed-off-by: Stéphane Lesimple <stephane.lesimple+bastion@ovhcloud.com>	5 years ago
Stéphane Lesimple	62d6393d56	feat: add yubico-piv-checker install script	5 years ago
Stéphane Lesimple	4cb09a9570	nh: remove hardcoded .ssh/authorized_keys2 everywhere	5 years ago
Stéphane Lesimple	9f1a8b925e	enh: install: better handling of non-Linux standard paths	5 years ago
Stéphane Lesimple	09bd6dffd9	fix: freebsd: add md5sum_compat() ... to account for systems where md5sum's binary name is gmd5sum	5 years ago
Stéphane Lesimple	fde20136ef	Initial commit	5 years ago