lgcosta
1fcd7b3046
- compat layer extended through the full BSD API surface pf_ioctl/pf_lb/ pf_if/pf_norm/pf_table/pf_ruleset/radix/md5/sha2 need (all compile): cpumem/counters model, ifaddr/ifg groups, cred view, endian+in6 names, NAT46/64, SipHash24, mbuf_list, frag6 helpers, ip6 forward/checksum, tcp options/FSM names, taskqueue & sysctl shims (documented in docs/porting-notes.md) - pfsrc/divert_sock.c: real BSD divert(4) as runtime-registered PF_DIVERT=32 socket family inside the module (sock_register; NPROTO=AF_MAX=45 -> zero core patches); divert_packet/divert6_packet wired for pf.c - compat/pfk_ifq.c: OpenBSD 8.0 ifq framework with priq back end; hfsc and fq_codel aliases pending M5 (recorded in feature matrix as pending) - design + plan updated for the divert decision (user-requested) - stage-port.sh: single deterministic rename program for headers and .c
27 lines
754 B
Cheetah
27 lines
754 B
Cheetah
#cloud-config
|
|
# Rendered per VM by scripts/vm-create.sh (tokens: @...@).
|
|
hostname: @VM@
|
|
manage_etc_hosts: true
|
|
ssh_pwauth: true
|
|
users:
|
|
- name: root
|
|
lock_passwd: false
|
|
ssh_authorized_keys:
|
|
- @SSH_PUBKEY@
|
|
chpasswd:
|
|
expire: false
|
|
users:
|
|
- name: root
|
|
password: "@ROOT_PASS@"
|
|
type: text
|
|
package_update: true
|
|
packages: @LAB_PACKAGES@
|
|
runcmd:
|
|
- |
|
|
printf 'net.ipv4.ip_forward=1\nnet.ipv4.conf.all.rp_filter=0\nnet.ipv4.conf.default.rp_filter=0\n' > /etc/sysctl.d/00-pflab.conf
|
|
sysctl -q -p /etc/sysctl.d/00-pflab.conf
|
|
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 0 > "$f"; done
|
|
- "printf '@ROOT_PASS@\\n@ROOT_PASS@\\n' | passwd root >/dev/null 2>&1 || true"
|
|
@RUNCMD_EXTRA@
|
|
- touch /run/pf-lab-ready
|