diff options
| author | Paul Buetow <paul@buetow.org> | 2026-07-09 10:18:21 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-07-09 10:18:21 +0300 |
| commit | 037fc22517361d3a9973cb8dc09040c378c2d913 (patch) | |
| tree | fe09b6a73eb6a94ba0e053f79e011d03caf075ab /frontends/etc/dserver | |
| parent | 1ea362740236e8e12ea9459a5065f8571a81a99e (diff) | |
packages: harden NetBSD dtail pipeline (review findings)
- Makefile: .SHELLFLAGS := -ec — with .ONESHELL a failing intermediate
recipe line (remote pkg_create, scp, PV upload) previously did not
stop the recipe and make exited 0; also remove stale /tmp package
artifacts at target start so a failed build can never silently
re-upload an old tgz, guard against an empty extracted version, and
quote the tr operand
- dtail-netbsd.json.tpl + rc.d: move the SSH host key from volatile
/var/run/dserver/cache to persistent /var/db/dserver/ssh_host_key so
it survives reboots (clients re-accept the key once after upgrade)
- pkg-dtail-netbsd.sh: reject a missing version argument; write the
pkg_summary via a temp file so a pkg_info failure cannot publish a
truncated pkg_summary.gz; document that the dserver user/group is a
deliberate manual install step
- key-cache template: comment now states the daily cron entry is added
manually at install time (documented in the pkgrepo skill)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Diffstat (limited to 'frontends/etc/dserver')
| -rw-r--r-- | frontends/etc/dserver/dtail-netbsd.json.tpl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/frontends/etc/dserver/dtail-netbsd.json.tpl b/frontends/etc/dserver/dtail-netbsd.json.tpl index cd99560..634fcca 100644 --- a/frontends/etc/dserver/dtail-netbsd.json.tpl +++ b/frontends/etc/dserver/dtail-netbsd.json.tpl @@ -90,7 +90,7 @@ }, "Server": { "SSHBindAddress": "0.0.0.0", - "HostKeyFile": "/var/run/dserver/cache/ssh_host_key", + "HostKeyFile": "/var/db/dserver/ssh_host_key", "HostKeyBits": 2048, "MapreduceLogFormat": "default", "MaxConcurrentCats": 2, |