base: switch from daily to hourly updates
in an event of a security vuln or other bug reports, nodes should get updates as quickly as possible.pull/2/head
parent
1c6ddb1f6a
commit
cf56b2a567
@ -1,11 +0,0 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
xbps-install -y opendoas tar curl diffutils
|
||||
|
||||
if [ ! -f /etc/doas.conf ]; then
|
||||
cat <<EOF > /etc/doas.conf
|
||||
permit nopass root
|
||||
permit setenv { -ENV PS1=\$DOAS_PS1 SSH_AUTH_SOCK } :wheel
|
||||
EOF
|
||||
fi
|
@ -0,0 +1,30 @@
|
||||
#!/bin/sh
|
||||
# try to ensure sysupdates are running regularily before doing anoything else
|
||||
xbps-install -y snooze
|
||||
ln -sfT /etc/sv/snooze-hourly /var/service/snooze-hourly
|
||||
mkdir -p /etc/cron.hourly
|
||||
if [ ! -f /etc/cron.hourly/sysupdate ]; then
|
||||
# may have been previously installed at daily schedule
|
||||
if [ -f /etc/cron.daily/sysupdate ]; then
|
||||
mv /etc/cron.daily/sysupdate /etc/cron.hourly/
|
||||
else
|
||||
# run updates approx. every hour
|
||||
cat <<EOF > /etc/cron.hourly/sysupdate
|
||||
#!/bin/sh
|
||||
exec /ssd/sysupdates/update.sh
|
||||
EOF
|
||||
fi
|
||||
fi
|
||||
chmod +x /etc/cron.hourly/sysupdate
|
||||
|
||||
# install required packages and config files
|
||||
set -e
|
||||
xbps-install -y opendoas tar gzip curl diffutils
|
||||
|
||||
# openbsd's doas util config, a minial replacement of sudo
|
||||
if [ ! -f /etc/doas.conf ]; then
|
||||
cat <<EOF > /etc/doas.conf
|
||||
permit nopass root
|
||||
permit setenv { -ENV PS1=\$DOAS_PS1 SSH_AUTH_SOCK } :wheel
|
||||
EOF
|
||||
fi
|
Loading…
Reference in New Issue