securing installation

[Rudy Gevaert]

Michael Tautschnig wrote:
>> Michael Tautschnig wrote:
>>> [...]
>>>> The only question is where should I add the code that views the cgi 
>>>> script?  Should I add in the rcS file?  And where?  I guess some things 
>>>> have to be configure first before I start the download.
>>>>
>>> I think a hook for the task confdir should do; just note that you can't 
>>> put that
>>> into the config space :-), but it must go in the NFSROOT instead.
>> I don't have any experience of putting hooks in the nfsroot.
>>
>> I do have found the file
>> get-config-dir-svn
>>
>> I certainly have to add some code so it recognizes svn+ssh.  I could go and 
>> put the request to the cgi script in there :) but that isn't quite nice.
>>
>> Where should I put the hook?
>>
> 
> I think it works the following way: put your code in a script
> $NFSROOT/$FAI/hooks/confdir.DEFAULT, where $NFSROOT and $FAI are set in
> make-fai-nfsroot.conf and fai.conf, respectively.

I'll try this out tomorrow.  I now have my FAI pulling the config space 
from a svn repository.

> 
> About svn+ssh: I think latest FAI should already allow that, so it depends on
> your actual version.

I checked the fai's svn repository and it doesn't.  I also had to change
mkrw -s 100m $FAI to mkrw -s 500m $FAI.  My config space was to big to 
fit on 100M. ( a couple of basefiles are in place)




-- 
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Rudy Gevaert          Rudy.Gevaert at UGent.be          tel:+32 9 264 4734
Directie ICT, afd. Infrastructuur ICT Department, Infrastructure office
Groep Systemen                    Systems group
Universiteit Gent                 Ghent University
Krijgslaan 281, gebouw S9, 9000 Gent, Belgie               www.UGent.be
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --