1. 25 Oct, 2004 7 commits
  2. 22 Oct, 2004 1 commit
  3. 21 Oct, 2004 2 commits
  4. 20 Oct, 2004 1 commit
  5. 19 Oct, 2004 2 commits
  6. 18 Oct, 2004 2 commits
  7. 15 Oct, 2004 3 commits
  8. 14 Oct, 2004 3 commits
  9. 13 Oct, 2004 1 commit
  10. 11 Oct, 2004 10 commits
  11. 08 Oct, 2004 8 commits
    • Leigh B. Stoller's avatar
      ElabInElab fix: Remove use of control_iface in iptonodeid (the initial · 320dfab4
      Leigh B. Stoller authored
      query that maps the peer IP to a node in the DB). This was primarily
      used as a safety to make sure that the node_types entry really did
      match (in case the luser picked experimental addresses that conflicted
      with real testbed addresses?), but not sure this test really
      mattered. But, just to be safe, I changed it so that we check for a
      matching IP and role='ctrl'.
    • Leigh B. Stoller's avatar
      tbsetup/plab/libtestbed.py.in has moved up one level cause it is now used · a39e0c7d
      Leigh B. Stoller authored
      by more then just plab code.
    • Leigh B. Stoller's avatar
    • Mike Hibler's avatar
      Initial steps toward a hardware-assisted (switch VLAN) firewall implementation. · 0527441a
      Mike Hibler authored
      This checkin adds the necessary NS and client-side changes.
      You get such a firewall by creating a firewall object and doing:
      	$fw set-type ipfw2-vlan
      In addition to the usual firewall setup, it sets the firewall node command
      line to boot "/kernel.fw" which is an IPFW2-enabled kernel with a custom
      bridge hack.
      The client-side setup for firewalled nodes is easy: do nothing.
      The client-side setup for the firewall is more involved, using vlan devices
      and bridging and all sorts of geeky magic.
      Note finally that I don't yet have a decent set of default rules for anything
      other than a completely open firewall.  The rules might be slightly different
      than for the "software" firewall since they are applied at layer2 (and we want
      them just to be applied at layer2 and not multiple times)
    • Timothy Stack's avatar
      · ed8262c1
      Timothy Stack authored
      Made a pass over tar file related things:
      	* os/install-tarfile: Added support for bzip2 compressed files and
      	fixed the '.tgz' regex (it detected '.tar.tgz' before).  Also
      	binmode'd some file handles to squelch a warning on Redhat 9.
      	* tbsetup/fetchtar.proxy.in: Added 'https' as a valid protocol for
      	URLs and 'tar.bz2' as a valid extension.  Changed the wget call to
      	do 'timestamping', which means it should only download files that
      	have changed since the last download.
      	* tbsetup/tarfiles_setup.in: More 'https' and '.tar.bz2' stuff.
      	When downloading tarballs, copy the file name extension from the
      	URL onto the local file name so 'install-tarfile' can figure out
      	how to decompress it properly.
      	* tbsetup/ns2ir/tb_compat.tcl.in: Added a bunch of checks to the
      	tb-set-node-tarfiles function.
      	* www/faq.html, www/tutorial/nscommands.html,
      	www/tutorial/tutorial.html: Flesh out and clean up tarfile related
      	documentation.  Also added anchors for the individual functions so
      	you can link to them from other pages.
    • Mike Hibler's avatar
    • Leigh B. Stoller's avatar
      Add braindead node "localization" method to return stuff like roots · e6feadb4
      Leigh B. Stoller authored
      pub key, root password, etc. Currently just returning the pub key,
      which I stuck into a site variable. I need this for inner elab so that
      the standard image can be used; root ssh from inner boss will fail
      unless the pub key is changed, and we certainly do not want to have to
      create special images for inner elab nodes, unless we want to of
    • Mike Hibler's avatar
      Don't install canaryd in the mfs-install · a41fa099
      Mike Hibler authored