| Name | Modified | Size |
|---|---|---|
| .. | ||
| bash | ||
| firewalld | ||
| systemd | ||
| admin.user.p4s | 4 months ago | 119 B |
| configure_sample_depot_for_sdp.sh | 4 months ago | 15 KB |
| gen_sudoers.sh | 25 days ago | 12 KB |
| install_sdp.sh | 4 days ago | 100 KB |
| mkdirs.cfg | about a month ago | 7 KB |
| mkdirs.sh | about a month ago | 96 KB |
| NoTicketExpiration.group.p4s | 4 months ago | 201 B |
| os_tweaks.sh | 4 years ago | 4 KB |
| parse_sysctl.pl | 4 years ago | 8 KB |
| .shellcheckrc | about a year ago | 126 B |
| Change | User | Description | Committed |
|---|---|---|---|
| 31344 | C. Thomas Tyler | Added default P4ALIASES for perforce OS user to SDP. | 4 days ago |
| 31313 | C. Thomas Tyler | Added '.service' alternatives for all systemctl services, because command completion on s...ome platforms appends the '.service' suffix, and the sudo entries will not work unless '.service' is listed. So for example, now both of these will work: $ sudo systemctl start p4d_1 $ sudo systemctl start p4d_1.service Added support for the opt_perforce_sdp_backup service and timer, including adding explicit support for enabling and disabling the timer. « |
25 days ago |
| 31310 | C. Thomas Tyler | Simplified and clarified messaging about Mac OSX support: It is not supported. Also... added clarity about bash version requirements, i.e. requires bash 4.x+, works with 5.x+. (Lack of support for Mac OSX is for several reasons, one being that Mac OSX as of Sequoia ships only with bash 3.x). « |
29 days ago |
| 31307 | C. Thomas Tyler | Added mention of SuSE 15 in PLATFORM SUPPORT section, after recent changes to support tha...t platform. « |
30 days ago |
| 31303 | C. Thomas Tyler | Fixed issue where invalid sudoers file could be generated if setcap and getcap are not av...ailable, e.g. on SuSE 15 systems. Added helix-auth to standard list of managed services. « |
about a month ago |
| 31300 | C. Thomas Tyler | Made 'p4p' and 'p4proxy' completely synonomous. Fixed an issue in mkdirs.sh where, if i...nstalling proxy with 'ServerType=p4p' in the config file but not using '-t p4p', it would trying installing non-proxy elements. Similar for p4broker. This was due to logic determining user intent occuring only during command line processing needed to be deferred until after the config file was processed, allowing either '-t p4p' on the command line or 'ServerType=p4p' in the mkdirs.cfg file to have the same effect, as intended. command line processing « |
about a month ago |
| 31297 | C. Thomas Tyler | Fixed bug adding multiple additional OS groups. | about a month ago |
| 31293 | C. Thomas Tyler | Fixed chicken-and-egg issue with non-default p4d version selected in install_sdp.sh leadi...ng to mkdirs.sh error. This fix also makes determination of the default version for P4 binaries more robust. « |
about a month ago |
| 31290 | C. Thomas Tyler |
Completed changes needed to make p4d_master an alias for p4d_commit and still allow both. |
about a month ago |
| 31285 | C. Thomas Tyler | Fix so MASTER_ID value written into mkdirs.N.cfg file is correct. This fixes an issue whe...re p4_N.vars files are generated with an incorrect P4MASTER_ID value. With this change, passsing the ServerID from install_sdp.sh to called mkdirs.sh will no longer require the '-s <ServerID>' nor the '-t <ServerType>' command line options. Also change text in generated config file to indicate that it is OK to set the ServerID of a commit/master server if you have a desired ServerID that is different from the SDP-default (currently master.N). Adjusted terminology to prefer 'p4d_commit' over 'p4d_master', but preserve p4d_master as a synonym for backward compatibility with older config giles. #review-31286 « |
about a month ago |
| 31282 | C. Thomas Tyler | Added policycoreutils-python-utils package to yum/dnf repo list. | about a month ago |
| 31262 | C. Thomas Tyler | Fixed issue with detection of whether 'perforce' user pre-exists if it was created with L...DAP (where the 'id -u' is not a reliable check). This resulted in a failure to create the perforce OS user because 'useradd' won't work in an LDAP environment. Warning: Review code carefully; the test suite does not currently simulate an LDAP environment, so this requires manual testing in an LDAP environemt, at least for now. « |
about a month ago |
| 31261 | C. Thomas Tyler | Tweaks to make package installs even more reliable on apt-get systems. | about a month ago |
| 31260 | C. Thomas Tyler | Enhanced reliability on apt-get systems by avoiding interactive prompts you can get from... 'apt-get install -y', e.g. "new kernel available" messages that cause a hang. « |
about a month ago |
| 31254 | C. Thomas Tyler | Refined fix to work for local and online installs. | about a month ago |
| 31253 | C. Thomas Tyler | Fixed addtional bootstrapping issues in environments with bad umask. | about a month ago |
| 31251 | C. Thomas Tyler | Implemented elaborate workaround to gnarly RHEL/dnf bug. | about a month ago |
| 31248 | C. Thomas Tyler | Enhanced to do package installation earlier so we don't get errors if required utilities... like rsync, that would be installed later by packages anyway, don't cause an abort. Fixed: SDP-1197 (Bug): install_sdp.sh now installs OS packages before checking for required utils like rsync. « |
2 months ago |
| 31241 | C. Thomas Tyler | Fixed issues related to operating on security hardened OS base images, specifically with... a non-default root umask and crontab disabled by default. « |
2 months ago |
| 31219 | C. Thomas Tyler | Cosmetic tweaks; non-functional change. | 2 months ago |
| 31182 | C. Thomas Tyler | Adapted opt_perforce_sdp_backup service to work with SELinux in enforcing mode. Added... logic from sdp_upgrade.sh that installs SDP the backup service into install_sdp.sh. With this adjustment, the service now specifies the "on disk" location of the file; no symlinks are allowed in the absolute path to the script (to keep SELinux happy). For clarity, 'User=root' was added to the systemd service file for the backup utility. « |
2 months ago |
| 31151 | C. Thomas Tyler | Fixed typo in error message. | 2 months ago |
| 31147 | C. Thomas Tyler | Fixed bug that, if '-no_systemd' option was used, would result in erroneous error: Cou...ld not determine init mechanism. Systemd, SysV, and Launchd aren't available. Aborting. « |
2 months ago |
| 31133 | C. Thomas Tyler | Fixed bug detecting whether SELinux is enabled or not. | 2 months ago |
| 31110 | C. Thomas Tyler | Fixed issue where install_sdp.sh could not install non-default version of p4d binary spec...ified in the sdp_install.cfg file. Fixes SDP_1182 - install_sdp.sh ignores p4d version specified in cfg file. « |
2 months ago |
| 31071 | C. Thomas Tyler | Refined man page output. | 3 months ago |
| 31068 | C. Thomas Tyler |
Adjusted to avoid using HOME for root; using /root as a fixed value. |
3 months ago |
| 31016 | C. Thomas Tyler | Changed default Helix Core version to r24.2. Improved documentation and error messages... in get_helix_binaries.sh. « |
3 months ago |
| 30991 | C. Thomas Tyler | Fixed sestatus call (typo). | 3 months ago |
| 30944 | ftp | Added full path to sdp_upgrade.sh in immutable area to list of scripts that can be called... with limited sudo. « |
3 months ago |
| 30936 | C. Thomas Tyler | Enhanced SELinux detection logic to so semanage and restorecon are called only if it is b...eneficial to do so. « |
4 months ago |
| 30892 | C. Thomas Tyler | Added usage error for unkown option/flag. | 4 months ago |
| 30890 | C. Thomas Tyler | Tweaked to pass '-D', if provided, on to mkdirs.sh | 4 months ago |
| 30888 | C. Thomas Tyler | Revised to abort if mkdirs.sh was not successful. | 4 months ago |
| 30887 | C. Thomas Tyler | Refined logic for creating Perforce Package Base dir. | 4 months ago |
| 30884 | C. Thomas Tyler | Fixed bootstrapping issue on machines with no prior Perforce package structure /opt/perfo...rce. « |
4 months ago |
| 30883 | C. Thomas Tyler | Corrected text in message confusing ufw with firewalld firewalls. | 4 months ago |
| 30847 | C. Thomas Tyler | The '-init' now creates an initial live checkpoint. | 4 months ago |
| 30839 | C. Thomas Tyler | Adjusted mkdirs.sh to be backward compatible with old structure installs (not using packa...ge dirs). « |
4 months ago |
| 30828 | C. Thomas Tyler | Cosmetic fix - removal of spurious '\' character in output. | 4 months ago |
| 30824 | C. Thomas Tyler | Spell check (using 'aspell check install_sdp.sh') and cosmetic fixes. No functional chang...e. « |
4 months ago |
| 30821 | C. Thomas Tyler | Another tweawk for NoOp mode. | 4 months ago |
| 30820 | C. Thomas Tyler | Fixed issues with NoOp mode. | 4 months ago |
| 30797 | C. Thomas Tyler | Internal documentation change; no functional impact. | 4 months ago |
| 30782 | C. Thomas Tyler | Added new install_sdp.sh script and supporting documentation. The new install_sdp.sh ma...kes SDP independent of the separate Helix Installer software (the reset_sdp.sh script). The new script greatly improves the installation experience for new server machines. It is ground up rewrite of the reset_sdp.sh script. The new script preserves the desired behaviors of the original Helix Installer script, but is focused on the use case of a fresh install on a new server machine. With this focus, the scripts does not have any "reset" logic, making it completely safe. Added various files and functionalityfrom Helix Installer into SDP. * Added firewalld templates to SDP, and added ufw support. * Improved sudoers generation. * Added bash shell templates. This script also installs in the coming SDP Package structure. New installs use a modified SDP structure that makes it so the /p4/sdp and /p4/common now point to folders on the local OS volume rather than the /hxepots volume. The /hxdepots volume, which is often NFS mounted, is still used for depots and checkpoints, and for backups. The new structure uses a new /opt/perforce/helix-sdp structure under which /p4/sdp and /p4/common point. This structure also contains the expaneded SDP tarball, downloads, helix_binaries, etc. This change represents the first of 3-phase rollout of the new package structure. In this first phase, the "silent beta" phase, the new structure is used for new installations only. This phase requires no changes to released SDP scripts except for mkdirs.sh, and even that script remains backward-compatible with the old structure if used independently of install_sdp.sh. If used with install_sdp.sh, the new structure is used. In the second phase (targeted for SPD 2024.2 release), the sdp_upgrade.sh script will convert existing installations to the new structure. In the third phase (targeted for SDP 2025.x), this script will be incorporated into OS pacakge installations for the helix-sdp package. Perforce internal wikis have more detail on this change. #review-30783 « |
4 months ago |
| 30681 | C. Thomas Tyler | Added gen_sudoers.sh script to generate a sudoers file for perforce OSUSER. This genera...tes a more secure limited sudoers file. Previously, adding a sudoers entry for the OSUSER (usually 'perforce') was done only by the Helix Installer. In the Helix Installer variant, a single "one-size-filts-all" sudoers file was used, with the following characteristics: * The instances for Helix Core services were referenced with a '*' wildcard to match all SDP instances, which has since been determined to introduce a vulnerability. In this new script, the wildcard is replaced with separate entries for each SDP instance. * There were entries for all known paths of utilities like lslocks, setcap, and getcap. This new script generates the correct path valid for the current machine. With this change, the functionality will be available in the SDP directly. This new gen_sudoers.sh script can be called by mkdirs.sh directly to update the sudoers file each time a new SDP instance is added, if the new '-fs' (full sudo) or '-ls' (limited sudoers) entries are used. There is no change to the default behavior of mkdirs.sh; only a change if new options are utilized. This script comes with docs and examples for the new script as well as doc changes for mkdirs.sh. (Also added missing documentation for the '-no_enable' option). Further changes needed: * Add doc reference in SDP_Guide.Unix.adoc « |
5 months ago |
| 30527 | C. Thomas Tyler | Corrected issue where systemd service is configured with P4USER rather than OSUSER. #r...eview-30528 « |
7 months ago |
| 30503 | C. Thomas Tyler | Completed earlier work to use TarRootUnsupported variable to reduce hard-coding. | 8 months ago |
| 30502 | C. Thomas Tyler | Added SDP Version file to set of files copied to local, non-package area. | 8 months ago |
| 30474 | C. Thomas Tyler | Fixed typo/bug. | 8 months ago |