Compare commits
6 Commits
v2023.10.0
...
v2023.10.1
Author | SHA1 | Date | |
---|---|---|---|
b8a8c9257b | |||
7608a983e6 | |||
28c2bf152c | |||
707a8c6f30 | |||
4b5f2b63d0 | |||
ce0b211bfa |
3
Makefile
3
Makefile
@ -28,7 +28,7 @@ EMISSARY_ARCH ?= armv6
|
|||||||
EMISSARY_RECONCILIATION_INTERVAL ?=
|
EMISSARY_RECONCILIATION_INTERVAL ?=
|
||||||
EMISSARY_SERVER_URL ?=
|
EMISSARY_SERVER_URL ?=
|
||||||
|
|
||||||
BASE_INSTALL ?= install-emissary-files
|
BASE_INSTALL ?= install-emissary-files install-common-uci-defaults install-common-additional-agent-collectors
|
||||||
ADDITIONAL_INSTALL ?=
|
ADDITIONAL_INSTALL ?=
|
||||||
ADDITIONAL_OPENWRT_PACKAGES ?=
|
ADDITIONAL_OPENWRT_PACKAGES ?=
|
||||||
|
|
||||||
@ -100,6 +100,7 @@ gitea-release: tools/gitea-release/bin/gitea-release.sh
|
|||||||
\( -name '*.img.gz' \
|
\( -name '*.img.gz' \
|
||||||
-or -name '*.bin' \
|
-or -name '*.bin' \
|
||||||
-or -name '*.img' \
|
-or -name '*.img' \
|
||||||
|
-or -name '*.itb' \
|
||||||
\) -exec cp {} .gitea-release/ \;
|
\) -exec cp {} .gitea-release/ \;
|
||||||
|
|
||||||
GITEA_RELEASE_PROJECT="emissary-firmware" \
|
GITEA_RELEASE_PROJECT="emissary-firmware" \
|
||||||
|
@ -1 +1 @@
|
|||||||
2023.10.3-stable.410.a84fa05
|
2023.10.3-stable.538.9068203
|
||||||
|
@ -1,3 +1,3 @@
|
|||||||
install-bpi-r3-network-config:
|
install-bpi-r3-network-config:
|
||||||
mkdir -p files/etc/config
|
mkdir -p files/etc/config
|
||||||
cp misc/bpi-r3/uci/network files/etc/config/network
|
cp misc/bpi-r3/uci/network files/etc/config/network
|
6
install/common.mk
Normal file
6
install/common.mk
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
install-common-uci-defaults:
|
||||||
|
mkdir -p files/etc/uci-defaults
|
||||||
|
cp misc/common/uci-defaults/* files/etc/uci-defaults/
|
||||||
|
|
||||||
|
install-common-additional-agent-collectors: tools/yq/bin/yq
|
||||||
|
tools/yq/bin/yq -i '.agent.collectors += load("misc/common/agent/collectors.yml")' files/etc/emissary/agent.yml
|
@ -1,7 +1,3 @@
|
|||||||
install-rpi-network-config:
|
install-rpi-network-config:
|
||||||
mkdir -p files/etc/config
|
mkdir -p files/etc/config
|
||||||
cp misc/rpi/uci/network files/etc/config/network
|
cp misc/rpi/uci/network files/etc/config/network
|
||||||
|
|
||||||
install-rpi-uci-defaults:
|
|
||||||
mkdir -p files/etc/uci-defaults
|
|
||||||
cp misc/rpi/uci-defaults/* files/etc/uci-defaults/
|
|
9
misc/common/agent/collectors.yml
Normal file
9
misc/common/agent/collectors.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
- name: network-interfaces
|
||||||
|
command: ip
|
||||||
|
args:
|
||||||
|
- addr
|
||||||
|
- show
|
||||||
|
- name: emissary-firmware
|
||||||
|
command: cat
|
||||||
|
args:
|
||||||
|
- /etc/emissary_firmware
|
@ -1,37 +0,0 @@
|
|||||||
#/bin/sh
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
main() {
|
|
||||||
# Update default firewall ruleset
|
|
||||||
uci add firewall rule
|
|
||||||
uci set firewall.@rule[-1].name='Allow SSH on WAN'
|
|
||||||
uci set firewall.@rule[-1].src='wan'
|
|
||||||
uci set firewall.@rule[-1].proto='tcp'
|
|
||||||
uci set firewall.@rule[-1].dest_port='22'
|
|
||||||
uci set firewall.@rule[-1].target='ACCEPT'
|
|
||||||
|
|
||||||
uci add firewall rule
|
|
||||||
uci set firewall.@rule[-1].name='Allow HTTP on WAN'
|
|
||||||
uci set firewall.@rule[-1].src='wan'
|
|
||||||
uci set firewall.@rule[-1].proto='tcp'
|
|
||||||
uci set firewall.@rule[-1].dest_port='80'
|
|
||||||
uci set firewall.@rule[-1].target='ACCEPT'
|
|
||||||
|
|
||||||
uci add firewall rule
|
|
||||||
uci set firewall.@rule[-1].name='Allow HTTPS on WAN'
|
|
||||||
uci set firewall.@rule[-1].src='wan'
|
|
||||||
uci set firewall.@rule[-1].proto='tcp'
|
|
||||||
uci set firewall.@rule[-1].dest_port='443'
|
|
||||||
uci set firewall.@rule[-1].target='ACCEPT'
|
|
||||||
|
|
||||||
uci commit firewall
|
|
||||||
|
|
||||||
# Disable DNS-rebind protection
|
|
||||||
uci set dhcp.@dnsmasq[0].rebind_protection='0'
|
|
||||||
uci commit dhcp
|
|
||||||
|
|
||||||
reload_config
|
|
||||||
}
|
|
||||||
|
|
||||||
main
|
|
@ -1,37 +0,0 @@
|
|||||||
#/bin/sh
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
main() {
|
|
||||||
# Update default firewall ruleset
|
|
||||||
uci add firewall rule
|
|
||||||
uci set firewall.@rule[-1].name='Allow SSH on WAN'
|
|
||||||
uci set firewall.@rule[-1].src='wan'
|
|
||||||
uci set firewall.@rule[-1].proto='tcp'
|
|
||||||
uci set firewall.@rule[-1].dest_port='22'
|
|
||||||
uci set firewall.@rule[-1].target='ACCEPT'
|
|
||||||
|
|
||||||
uci add firewall rule
|
|
||||||
uci set firewall.@rule[-1].name='Allow HTTP on WAN'
|
|
||||||
uci set firewall.@rule[-1].src='wan'
|
|
||||||
uci set firewall.@rule[-1].proto='tcp'
|
|
||||||
uci set firewall.@rule[-1].dest_port='80'
|
|
||||||
uci set firewall.@rule[-1].target='ACCEPT'
|
|
||||||
|
|
||||||
uci add firewall rule
|
|
||||||
uci set firewall.@rule[-1].name='Allow HTTPS on WAN'
|
|
||||||
uci set firewall.@rule[-1].src='wan'
|
|
||||||
uci set firewall.@rule[-1].proto='tcp'
|
|
||||||
uci set firewall.@rule[-1].dest_port='443'
|
|
||||||
uci set firewall.@rule[-1].target='ACCEPT'
|
|
||||||
|
|
||||||
uci commit firewall
|
|
||||||
|
|
||||||
# Disable DNS-rebind protection
|
|
||||||
uci set dhcp.@dnsmasq[0].rebind_protection='0'
|
|
||||||
uci commit dhcp
|
|
||||||
|
|
||||||
reload_config
|
|
||||||
}
|
|
||||||
|
|
||||||
main
|
|
@ -2,8 +2,8 @@ all: bpi-r3
|
|||||||
|
|
||||||
bpi-r3:
|
bpi-r3:
|
||||||
$(MAKE) \
|
$(MAKE) \
|
||||||
OPENWRT_VERSION="23.05.0-rc3" \
|
OPENWRT_VERSION="23.05.0-rc4" \
|
||||||
IMAGEBUILDER_URL=https://downloads.openwrt.org/releases/23.05.0-rc3/targets/mediatek/filogic/openwrt-imagebuilder-23.05.0-rc3-mediatek-filogic.Linux-x86_64.tar.xz \
|
IMAGEBUILDER_URL=https://downloads.openwrt.org/releases/23.05.0-rc4/targets/mediatek/filogic/openwrt-imagebuilder-23.05.0-rc4-mediatek-filogic.Linux-x86_64.tar.xz \
|
||||||
ADDITIONAL_INSTALL="install-bpi-r3-network-config" \
|
ADDITIONAL_INSTALL="install-bpi-r3-network-config" \
|
||||||
ADDITIONAL_OPENWRT_PACKAGES="block-mount kmod-fs-ext4 kmod-usb-storage kmod-usb2" \
|
ADDITIONAL_OPENWRT_PACKAGES="block-mount kmod-fs-ext4 kmod-usb-storage kmod-usb2" \
|
||||||
OPENWRT_TARGET="mediatek/filogic" \
|
OPENWRT_TARGET="mediatek/filogic" \
|
||||||
|
@ -2,7 +2,7 @@ all: x86-generic
|
|||||||
|
|
||||||
x86-generic:
|
x86-generic:
|
||||||
$(MAKE) \
|
$(MAKE) \
|
||||||
ADDITIONAL_INSTALL="install-x86-network-config install-x86-uci-defaults" \
|
ADDITIONAL_INSTALL="install-x86-network-config" \
|
||||||
ADDITIONAL_OPENWRT_PACKAGES="dmidecode" \
|
ADDITIONAL_OPENWRT_PACKAGES="dmidecode" \
|
||||||
OPENWRT_TARGET="x86/generic" \
|
OPENWRT_TARGET="x86/generic" \
|
||||||
EMISSARY_ARCH="386" \
|
EMISSARY_ARCH="386" \
|
||||||
|
@ -2,7 +2,7 @@ all: rpi-4 rpi-3
|
|||||||
|
|
||||||
rpi-4:
|
rpi-4:
|
||||||
$(MAKE) \
|
$(MAKE) \
|
||||||
ADDITIONAL_INSTALL="install-rpi-network-config install-rpi-uci-defaults" \
|
ADDITIONAL_INSTALL="install-rpi-network-config" \
|
||||||
OPENWRT_TARGET="bcm27xx/bcm2711" \
|
OPENWRT_TARGET="bcm27xx/bcm2711" \
|
||||||
EMISSARY_ARCH="arm64" \
|
EMISSARY_ARCH="arm64" \
|
||||||
OPENWRT_PROFILE="rpi-4" \
|
OPENWRT_PROFILE="rpi-4" \
|
||||||
@ -10,7 +10,7 @@ rpi-4:
|
|||||||
|
|
||||||
rpi-3:
|
rpi-3:
|
||||||
$(MAKE) \
|
$(MAKE) \
|
||||||
ADDITIONAL_INSTALL="install-rpi-network-config install-rpi-uci-defaults" \
|
ADDITIONAL_INSTALL="install-rpi-network-config" \
|
||||||
OPENWRT_TARGET="bcm27xx/bcm2710" \
|
OPENWRT_TARGET="bcm27xx/bcm2710" \
|
||||||
EMISSARY_ARCH="arm64" \
|
EMISSARY_ARCH="arm64" \
|
||||||
OPENWRT_PROFILE="rpi-3" \
|
OPENWRT_PROFILE="rpi-3" \
|
||||||
|
Reference in New Issue
Block a user