diff options
| author | Cullum Smith <cullum@sacredheartsc.com> | 2024-10-31 21:36:39 -0400 |
|---|---|---|
| committer | Cullum Smith <cullum@sacredheartsc.com> | 2024-10-31 21:36:39 -0400 |
| commit | 2c9845db4bc00221bc3c2343a020208f7f532166 (patch) | |
| tree | 843bc24a1bbf2cad33c4bdc8a17c3d0d838fceb4 /scripts/os | |
| parent | 7eb111136453d0e8d8451d7dd85ba9892318f294 (diff) | |
| download | infrastructure-2c9845db4bc00221bc3c2343a020208f7f532166.tar.gz | |
many fixes
Diffstat (limited to 'scripts/os')
| -rw-r--r-- | scripts/os/freebsd/10-bootloader | 2 | ||||
| -rw-r--r-- | scripts/os/freebsd/50-idm | 8 | ||||
| -rw-r--r-- | scripts/os/freebsd/80-microcode | 12 |
3 files changed, 15 insertions, 7 deletions
diff --git a/scripts/os/freebsd/10-bootloader b/scripts/os/freebsd/10-bootloader index 3209927..a5c8908 100644 --- a/scripts/os/freebsd/10-bootloader +++ b/scripts/os/freebsd/10-bootloader @@ -11,7 +11,7 @@ install_file -m 0644 /etc/ttys kill -HUP 1 set_loader_conf \ - autoboot_delay=1 \ + autoboot_delay=3 \ beastie_disable=YES \ cc_htcp_load=YES \ kern.geom.label.disk_ident.enable=0 \ diff --git a/scripts/os/freebsd/50-idm b/scripts/os/freebsd/50-idm index 1585c6f..1e5e877 100644 --- a/scripts/os/freebsd/50-idm +++ b/scripts/os/freebsd/50-idm @@ -18,12 +18,16 @@ pkg install -y \ p5-Authen-SASL \ pam_mkhomedir +# Script to create /usr/local/home/${USER} on login. +install_file -m 0555 /usr/local/libexec/pam-create-local-homedir + # Configure PAM/NSS integration. +install_template -m 0644 \ + /etc/pam.d/login \ + /etc/pam.d/sshd install_file -m 0644 \ /etc/nsswitch.conf \ /etc/pam.d/system \ - /etc/pam.d/login \ - /etc/pam.d/sshd \ /etc/pam.d/sudo \ /etc/pam.d/su \ /etc/pam.d/other diff --git a/scripts/os/freebsd/80-microcode b/scripts/os/freebsd/80-microcode index f9e213e..0d2a910 100644 --- a/scripts/os/freebsd/80-microcode +++ b/scripts/os/freebsd/80-microcode @@ -7,8 +7,12 @@ if [ "$BOXCONF_VIRTUALIZATION_TYPE" != none ]; then return fi -pkg install -y cpu-microcode +if [ "${enable_microcode_updates:-}" = false ]; then + set_loader_conf cpu_microcode_load=NO +else + pkg install -y cpu-microcode -set_loader_conf \ - cpu_microcode_load=YES \ - cpu_microcode_name="/boot/firmware/${microcode_name}" + set_loader_conf \ + cpu_microcode_load=YES \ + cpu_microcode_name="/boot/firmware/${microcode_name}" +fi |