mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-08-26 12:46:08 +00:00
1e2fb8171f
- Generating files in postinst script makes working with image-based systems harder as postinst scripts are not run when booting from a pristine image. So, move this to first_boot app's setup() method. - This means that first wizard secret is no longer displayed during package installation. This is a loss in usability, but might be acceptable: - We want to reduce the number of dialog box messages shown to the user during the installation of FreedomBox as a blend in Debian installer. Along with this change, if we migrate away from LDAP, then no messages will be shown anymore. - When users are installing using Debian installer, they don't have access to console to note down the secret. They can only note down on a physical medium. This is not the best way. Most of the time when I installed on machines, I just looked at the secret file later. - It is not expected that user will loose root access to the machine on which they installed 'freedombox' package (manually or through Debian installer) before they can type in the secret into the first wizard. Earlier, we had restrictions on the type of users who can login to the console and this could have happened. - We can eliminate a lintian warning that we are showing messages in a dialog in the postinst script instead of configure script. Tests: - Unit tests work. - Building Debian package with changes works. - Lintian warning about debconf has been eliminated. - On a fresh Debian Trixie machine, installing the newly built Debian package succeeds. It does not show first wizard secret related message. When web interface is accessed, secret is asked. Skipping the secret is not possible. Even before the creation of the secret file. - Providing incorrect secret leads to error message. Secret file can be read by root. The file is owned by plinth:plinth. The file has 0400 permissions. - The secret file contains a newline at the file but entering the secret without the newline character works. - The secret contains uppercase and lowercase ASCII characters and digits. The secret is 16 chars in length. - Incrementing the version number of first_boot app does not lead to change in the secret file contents. - The message in the first wizard secret form is as expected. - Building a disk image with newly built Debian package works. When the image is booted, it does not ask for first wizard secret. - When an existing machine is upgraded, if it is a disk image, first wizard secret file is not created and first wizard is not shown to the user. - When an existing machine is upgraded, if it is not a disk image, first wizard secret file is not changed and first wizard is not shown to the user. Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org> Reviewed-by: James Valleroy <jvalleroy@mailbox.org> [jvalleroy: Correct comment] Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
27 lines
1.4 KiB
Plaintext
27 lines
1.4 KiB
Plaintext
# Apache configuration for the Plinth itself is shipped with proper
|
|
# name plinth.conf. However, due to the nature of the package, Plinth
|
|
# takes the responsibility of configuring various other services
|
|
# behind Apache. The upstream hence ships various Apache
|
|
# configuration files which are enabled and disabled when user
|
|
# requests.
|
|
freedombox binary: non-standard-apache2-configuration-name *
|
|
|
|
# Plinth depends on Apache2 and cannot work with just any web server. Instead of
|
|
# being a simple web application it is an administration console that configures
|
|
# web servers. At some point we would like to work with other web servers but
|
|
# that requires significant effort.
|
|
freedombox binary: web-application-works-only-with-apache
|
|
|
|
# Not documentation
|
|
freedombox: package-contains-documentation-outside-usr-share-doc [usr/share/plinth/static/jslicense.html]
|
|
freedombox: package-contains-documentation-outside-usr-share-doc [usr/lib/python3/dist-packages/plinth-*.dist-info/top_level.txt]
|
|
|
|
# This executable is meant to executed from systemd service file and is not
|
|
# meant for user. However, don't install to /usr/libexec and follow systemd
|
|
# convention instead.
|
|
freedombox: executable-in-usr-lib [usr/lib/freedombox/freedombox-privileged]
|
|
|
|
# [Install] section is missing for the privileged daemon service because it is
|
|
# socket activated.
|
|
freedombox: systemd-service-file-missing-install-key [usr/lib/systemd/system/freedombox-privileged.service]
|