cwinfo/yggdrasil-go
4
0
Fork 0
mirror of https://github.com/cwinfo/yggdrasil-go.git synced 2025-07-25 16:06:46 +00:00
Code Releases Activity
2,182 Commits 2 Branches 0 Tags
df7ca3a5b888ac487026e469bcb9af037d8c9aa6
Commit Graph

164 Commits

Author SHA1 Message Date
Neil Alexander
bc78530fcb Build packages in GitHub Actions 2022-04-17 23:38:16 +01:00
Neil Alexander
41d890bb64 Run goimports 2022-04-17 18:02:25 +01:00
R4SAS
620b901473 Revert downgrading of wireguard and update wintun in windows installer (#865) 
* Revert "Revert Wireguard update"

This reverts commit 03a5cce5bb.

Signed-off-by: R4SAS <r4sas@i2pmail.org>

* [win] update installer build script

Signed-off-by: R4SAS <r4sas@i2pmail.org>

* [appveyor] use golang 1.17.3 for building

Signed-off-by: R4SAS <r4sas@i2pmail.org>

* [appveyor] use golang 1.17.5 for building

Signed-off-by: R4SAS <r4sas@i2pmail.org>

* test script

Signed-off-by: R4SAS <r4sas@i2pmail.org>

* test msi and semver scripts

Signed-off-by: R4SAS <r4sas@i2pmail.org>

Co-authored-by: Neil Alexander <neilalexander@users.noreply.github.com>
 2022-01-30 21:57:10 +00:00
Neil Alexander
09ea351682 Update build 2022-01-30 19:59:17 +00:00
Neil Alexander
6d92edd405 Move src/mobile into main repository (#864) 
* Move `src/mobile` into main repository

* Update go.mod/go.sum

* Move to `contrib`, separate mobile build script
 2022-01-30 19:48:32 +00:00
Neil Alexander
a4bdf3de32 Remove CAP_NET_RAW from systemd service unit, as it's not clear why it is there in the first place 2022-01-15 22:17:49 +00:00
Neil Alexander
408d381591 Set hostArchitectures in macOS .pkg installer 2021-12-06 11:19:58 +00:00
Neil Alexander
4f3117d81d Use network-online.target instead of network.target for systemd service unit 2021-11-03 17:40:06 +00:00
Neil Alexander
99227b60ce Update CI to use Go 1.17, produce Apple Silicon builds (closes #844) 2021-09-28 11:02:15 +01:00
cofob
6a0ddc20ef Allow yggdrasil bind to ports <1024 2021-07-21 17:57:59 +07:00
Neil Alexander
2fc34bbd5a Revert "Merge pull request #796 from Chaz6/update-systemd-files" 
This reverts commit 88bd098f91, reversing
changes made to 4d798a3494.
 2021-07-04 09:26:17 +01:00
Chris Hills
9391430bc0 Update binary path in systemd service files to match the website. 2021-07-02 13:14:13 +01:00
Neil Alexander
9b68ac5702 Fix wintun hopefully 2021-06-13 11:13:02 +01:00
Neil Alexander
38e05b5f4c Download wintun on first pass 2021-06-13 11:07:19 +01:00
Neil Alexander
8621223a1f Remove -aslr 2021-06-13 11:04:27 +01:00
Neil Alexander
272670b85b Fix version numbers in MSI 2021-06-13 11:03:01 +01:00
Neil Alexander
63967462d9 Update MSI build again 2021-06-13 10:58:15 +01:00
Neil Alexander
3b669a15ed Update build-msi.sh 2021-06-13 10:47:14 +01:00
Neil Alexander
45d6a1e6e5 Revert "Build MSIs for Windows using CircleCI (#766)" 
This reverts commit f0a5cd542c.
 2021-06-13 10:42:31 +01:00
Arceliar
838bca083d remove bashisms for semver 2021-06-06 02:33:11 -05:00
Neil Alexander
2b6aa3e2d7 Semver version fix 2021-06-05 22:38:37 +01:00
Neil Alexander
c5529a3a38 Use git describe again 2021-06-05 22:28:29 +01:00
Neil Alexander
e827e5d313 Go back to old semver version for now 2021-06-05 22:09:15 +01:00
Neil Alexander
5cede61a34 Use git describe output for versions 2021-06-05 21:32:18 +01:00
Arceliar
6bc2044ced update ironwood dependency, fix ansible code, go mod tidy 2021-05-23 17:52:10 -05:00
Christer Warén
9b67eb7ef2 Update Dockerfile 
Removing personal information
 2021-03-24 15:39:55 +02:00
Neil Alexander
f0a5cd542c Build MSIs for Windows using CircleCI (#766) 
* Try to build MSIs from CircleCI using wixl/msitools

* Upload msis

* Change condition

* Update Platform

* Update Platform

* Don't build ARM, it's apparently not well supported

* Don't build ARM, it's apparently not well supported

* Remove appveyor config

* Update comments

* newline
 2021-03-07 14:03:34 +00:00
rany
5b326d8bb8 Update generate.sh (#736) 
The AppArmor profile in contrib forbids `/usr/bin/yggdrasil` from reading the file in `/var/backups/yggdrasil.conf...`. This works around that restriction by having the shell do the reading of `/var/backups/yggdrasil.conf...` file while providing the same exact functionality without making the AppArmor profile less restrictive. 

Another change is the safe perms for the `/etc/yggdrasil.conf` (so that config will have 0640 permissions). This is important because if we kept the default of 644 then any user (privileged or unprivileged) will have the ability to read the yggdrasil private key. We use a restrictive umask of 0027 to make this possible.
 2020-12-06 20:52:54 +00:00
rany
709ea6976c apparmor: allow yggdrasil to resolve hostnames (#739) 
The apparmor profile in it's current state won't allow resolving hostnames. We need `<abstractions/nameservice>` because we simply can't just allow `/etc/resolv.conf`. This is because systemd-resolved, resolvconf, and others rely on symbolic links to `/etc/resolv.conf` which would make this extremely complicated.  `<abstractions/nameservice>` deals with this complexity to allow every single one of those packages (systemd-resolved, resolvconf, ... ).

```
  network inet stream,
  network inet dgram,
  network inet6 dgram,
  network inet6 stream,
  network netlink raw,
```
was removed because it's already included in `<abstractions/nameservice>`. Some permissions that are no longer needed in newer yggdrasil versions were also removed.

`owner /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,` was changed to `/sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,` because there is no guarantee that yggdrasil will always be run as root. (`owner` makes sure that the process's user and the file have the same owner, in that case, root. This might not always be the case so `owner` was removed)
 2020-12-06 20:52:10 +00:00
Neil Alexander
1492738c9e golangci-lint in CI (#733) 
* golangci-lint in CI

* Put CI in own job

* Run verify job

* Use go get

* Fix typo

* Name lint instead of verify

* Read the config

* Use debug tag

* Tweaks
 2020-09-27 14:28:25 +01:00
Arceliar
7a314afb31 check if an error was returned by Core._init and return it if so 2020-03-31 18:14:20 -05:00
Neil Alexander
e7228c7ae4 Merge pull request #666 from jcgruenhage/ansible-genkeys-progress-bar 
add a progress bar to the ansible key generator
 2020-03-25 20:55:15 +00:00
Jan Christian Grünhage
30bfa04c47 add a progress bar to the ansible key generator 2020-03-23 23:26:41 +01:00
Rany
c1816ae86f Update usr.bin.yggdrasil 2020-03-10 16:47:41 +02:00
Neil Alexander
d160eccab0 Hopefully really actually fix it this time 2020-02-21 19:32:36 +00:00
Neil Alexander
7d590e31b0 Include yggdrasil-default-config.service 2020-02-21 19:14:40 +00:00
William Fleurant
a2adcbd7e4 docker: build and copy genkeys 2020-01-05 15:26:08 -05:00
Neil Alexander
4b16c325a3 Merge pull request #607 from Arano-kai/feature/systemd_modular_unit 
Systemd: move config generation to a separate unit
 2019-12-10 12:02:46 +00:00
Neil Alexander
1a1e32c411 Fix syntax error in build-msi.sh 2019-12-10 11:40:16 +00:00
Neil Alexander
4762edc2b3 Package display name 2019-12-10 11:38:58 +00:00
Neil Alexander
6f927b0613 Reverse upgrade condition 2019-12-10 11:33:52 +00:00
Neil Alexander
3e388cd7f9 Try to avoid breaking Wintun during upgrades 2019-12-10 11:27:49 +00:00
Neil Alexander
152f5838f8 Update metadata 2019-12-10 11:17:15 +00:00
Neil Alexander
1d41199501 Move Wintun to separate feature 2019-12-10 10:55:20 +00:00
Neil Alexander
bf5d5b2269 Rename service from 'yggdrasil' to 'Yggdrasil' 2019-12-04 09:29:30 +00:00
Neil Alexander
16e55992b6 Move yggdrasil.conf to ALLUSERSPROFILE 2019-11-29 11:06:08 +00:00
Neil Alexander
c17c4af26d Don't normalise on upgrade 2019-11-28 13:08:56 +00:00
Neil Alexander
3f29a2ff05 Some comments 2019-11-28 13:00:52 +00:00
Neil Alexander
3734a73d6f Don't impersonate user for updateconfig.bat 2019-11-28 11:16:36 +00:00
Neil Alexander
42d4a51765 Set output logging 2019-11-28 10:56:22 +00:00