diff options
| author | Andre McCurdy <armccurdy@gmail.com> | 2018-05-30 17:16:47 -0700 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-07-02 11:41:25 +0100 |
| commit | 9f3445c9e512cb9a79e6cfd20c213f5fcbeda39b (patch) | |
| tree | d16ee58e8ad85b292643783c280c772b6d7ca2ea /meta/recipes-core/dropbear | |
| parent | 92c5eeaff9a36789d4c48507b0771b9f2829285f (diff) | |
| download | poky-9f3445c9e512cb9a79e6cfd20c213f5fcbeda39b.tar.gz | |
dropbear: drop run time detection of read-only rootfs
Previously, when dropbear was started via its init script, relocation
of DROPBEAR_RSAKEY_DIR to support read-only rootfs was handled at
run time from within the init script.
Update the init script to take advantage of the read-only rootfs
config setup by read_only_rootfs_hook() and therefore be consistent
with startup under systemd (where relocation of DROPBEAR_RSAKEY_DIR
is handled by the read_only_rootfs_hook() at build time).
(From OE-Core rev: 4990f87b2f6a8b30c8d1c767636e7f5527f595ba)
(From OE-Core rev: b1f3fac327da43ccc079a03d3554f1365b298608)
Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core/dropbear')
| -rwxr-xr-x | meta/recipes-core/dropbear/dropbear/init | 26 |
1 files changed, 8 insertions, 18 deletions
diff --git a/meta/recipes-core/dropbear/dropbear/init b/meta/recipes-core/dropbear/dropbear/init index f6e1c462fa..ffab7a2362 100755 --- a/meta/recipes-core/dropbear/dropbear/init +++ b/meta/recipes-core/dropbear/dropbear/init | |||
| @@ -17,8 +17,11 @@ NAME=dropbear | |||
| 17 | DESC="Dropbear SSH server" | 17 | DESC="Dropbear SSH server" |
| 18 | PIDFILE=/var/run/dropbear.pid | 18 | PIDFILE=/var/run/dropbear.pid |
| 19 | 19 | ||
| 20 | # These values may be replaced by those from /etc/default/dropbear | ||
| 21 | DROPBEAR_RSAKEY_DIR="/etc/dropbear" | ||
| 20 | DROPBEAR_PORT=22 | 22 | DROPBEAR_PORT=22 |
| 21 | DROPBEAR_EXTRA_ARGS= | 23 | DROPBEAR_EXTRA_ARGS= |
| 24 | DROPBEAR_RSAKEY_ARGS= | ||
| 22 | NO_START=0 | 25 | NO_START=0 |
| 23 | 26 | ||
| 24 | set -e | 27 | set -e |
| @@ -28,32 +31,19 @@ test "$NO_START" = "0" || exit 0 | |||
| 28 | test -x "$DAEMON" || exit 0 | 31 | test -x "$DAEMON" || exit 0 |
| 29 | test ! -h /var/service/dropbear || exit 0 | 32 | test ! -h /var/service/dropbear || exit 0 |
| 30 | 33 | ||
| 31 | readonly_rootfs=0 | ||
| 32 | for flag in `awk '{ if ($2 == "/") { split($4,FLAGS,",") } }; END { for (f in FLAGS) print FLAGS[f] }' </proc/mounts`; do | ||
| 33 | case $flag in | ||
| 34 | ro) | ||
| 35 | readonly_rootfs=1 | ||
| 36 | ;; | ||
| 37 | esac | ||
| 38 | done | ||
| 39 | |||
| 40 | if [ $readonly_rootfs = "1" ]; then | ||
| 41 | mkdir -p /var/lib/dropbear | ||
| 42 | DROPBEAR_RSAKEY_DEFAULT="/var/lib/dropbear/dropbear_rsa_host_key" | ||
| 43 | else | ||
| 44 | DROPBEAR_RSAKEY_DEFAULT="/etc/dropbear/dropbear_rsa_host_key" | ||
| 45 | fi | ||
| 46 | |||
| 47 | test -z "$DROPBEAR_BANNER" || \ | 34 | test -z "$DROPBEAR_BANNER" || \ |
| 48 | DROPBEAR_EXTRA_ARGS="$DROPBEAR_EXTRA_ARGS -b $DROPBEAR_BANNER" | 35 | DROPBEAR_EXTRA_ARGS="$DROPBEAR_EXTRA_ARGS -b $DROPBEAR_BANNER" |
| 49 | test -n "$DROPBEAR_RSAKEY" || \ | 36 | test -n "$DROPBEAR_RSAKEY" || \ |
| 50 | DROPBEAR_RSAKEY=$DROPBEAR_RSAKEY_DEFAULT | 37 | DROPBEAR_RSAKEY="${DROPBEAR_RSAKEY_DIR}/dropbear_rsa_host_key" |
| 51 | 38 | ||
| 52 | gen_keys() { | 39 | gen_keys() { |
| 53 | if [ -f "$DROPBEAR_RSAKEY" -a ! -s "$DROPBEAR_RSAKEY" ]; then | 40 | if [ -f "$DROPBEAR_RSAKEY" -a ! -s "$DROPBEAR_RSAKEY" ]; then |
| 54 | rm $DROPBEAR_RSAKEY || true | 41 | rm $DROPBEAR_RSAKEY || true |
| 55 | fi | 42 | fi |
| 56 | test -f $DROPBEAR_RSAKEY || dropbearkey -t rsa -f $DROPBEAR_RSAKEY $DROPBEAR_RSAKEY_ARGS | 43 | if [ ! -f "$DROPBEAR_RSAKEY" ]; then |
| 44 | mkdir -p ${DROPBEAR_RSAKEY%/*} | ||
| 45 | dropbearkey -t rsa -f $DROPBEAR_RSAKEY $DROPBEAR_RSAKEY_ARGS | ||
| 46 | fi | ||
| 57 | } | 47 | } |
| 58 | 48 | ||
| 59 | case "$1" in | 49 | case "$1" in |
