CVS commit: [netbsd-10] src

["Martin Husemann" <martin%netbsd.org@localhost>]

Module Name:    src
Committed By:   martin
Date:           Mon Oct  2 13:26:04 UTC 2023

Modified Files:
        src/distrib/amd64/liveimage/emuimage [netbsd-10]: rc.conf.emuimage
        src/distrib/evbarm/liveimage/armimage [netbsd-10]: rc.conf.armimage
        src/distrib/sets/lists/etc [netbsd-10]: mi
        src/distrib/utils/embedded/conf [netbsd-10]: evbarm.conf evbmips.conf
            usermode.conf x86.conf
        src/etc/defaults [netbsd-10]: rc.conf
        src/etc/rc.d [netbsd-10]: Makefile
Added Files:
        src/etc/rc.d [netbsd-10]: certctl_init

Log Message:
Pull up following revision(s) (requested by riastradh in ticket #381):

        distrib/utils/embedded/conf/evbarm.conf: revision 1.42
        distrib/sets/lists/etc/mi: revision 1.273
        etc/rc.d/Makefile: revision 1.118
        distrib/utils/embedded/conf/usermode.conf: revision 1.7
        etc/rc.d/certctl_init: revision 1.1
        distrib/evbarm/liveimage/armimage/rc.conf.armimage: revision 1.2
        etc/defaults/rc.conf: revision 1.166
        distrib/amd64/liveimage/emuimage/rc.conf.emuimage: revision 1.3
        distrib/utils/embedded/conf/x86.conf: revision 1.11
        distrib/utils/embedded/conf/evbmips.conf: revision 1.4

/etc/rc.d/cerctl_init: New script for certctl rehash in live images.

This is very limited -- it does not supplant postinstall to rehash
certificates on upgrade; it only runs certctl rehash if
/etc/openssl/certs is an empty directory, as you get in live images
not created with sysinst.

We could also have a more general-purpose way to run postinstall(8)
on first boot of an image, but that has a lot more moving parts to
think about, so let's start with this limited-scope low-risk
approach.

PR install/57629

/etc/rc.d/certctl_init: Default off.
Otherwise in systems without certctl_init=YES, such as systems
installed with sysinst(8) where it's unnecessary because the rehash
has already happened at install time, you'll get spurious warnings.


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.2.2.1 \
    src/distrib/amd64/liveimage/emuimage/rc.conf.emuimage
cvs rdiff -u -r1.1 -r1.1.2.1 \
    src/distrib/evbarm/liveimage/armimage/rc.conf.armimage
cvs rdiff -u -r1.270.2.1 -r1.270.2.2 src/distrib/sets/lists/etc/mi
cvs rdiff -u -r1.41 -r1.41.2.1 src/distrib/utils/embedded/conf/evbarm.conf
cvs rdiff -u -r1.3 -r1.3.2.1 src/distrib/utils/embedded/conf/evbmips.conf
cvs rdiff -u -r1.6 -r1.6.2.1 src/distrib/utils/embedded/conf/usermode.conf
cvs rdiff -u -r1.10 -r1.10.2.1 src/distrib/utils/embedded/conf/x86.conf
cvs rdiff -u -r1.162.2.1 -r1.162.2.2 src/etc/defaults/rc.conf
cvs rdiff -u -r1.116 -r1.116.2.1 src/etc/rc.d/Makefile
cvs rdiff -u -r0 -r1.1.2.2 src/etc/rc.d/certctl_init

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.