Compare commits

...

23 Commits

Author SHA1 Message Date
bb1328e27e v1.2.0 2019-05-21 18:00:07 +03:00
395613af57 Merge pull request #53 from balena-io/service-updates
Update service versions
2019-05-21 15:58:07 +01:00
199d8eb4a4 tidy: Remove unused DEVICE_CONFIG_OPENVPN_CONFIG variable
Change-type: patch
Signed-off-by: Rich Bayliss <rich@balena.io>
2019-05-21 15:47:57 +01:00
6fdc554e43 services: Update Registry service version
Update open-balena-registry to 2.7.0

This allows registry to be configured to use its internal Redis instance for caching. It is still disabled by default though.

Change-type: minor
2019-05-21 14:45:54 +01:00
f8b8a1589a services: Update API service version
Update open-balena-api from 0.11.8 to 0.19.5

This brings in the latest bugfixes and changes.

Change-type: patch
Signed-off-by: Rich Bayliss <rich@balena.io>
2019-05-21 14:01:38 +01:00
3bf14a2140 v1.1.1 2019-05-10 18:22:12 +03:00
fef145f993 Merge pull request #51 from balena-io/50-update-docker-compose
docker: Update docker-compose version to latest
2019-05-10 16:20:42 +01:00
e068f8058f docker: Update docker-compose version to latest
Connects-to: #50
Change-type: patch
Signed-off-by: Heds Simons <heds@balena.io>
2019-05-07 17:15:19 +01:00
c1ee146f0d v1.1.0 2019-05-07 14:38:17 +03:00
9ad92596b9 Merge pull request #49 from balena-io/48-s3-credential-changes
s3: Update to latest version with credentials
2019-05-07 12:36:26 +01:00
56de2d20bb s3: Update to latest version with credentials
Credentials for S3 can now be specified using the
following docker-compose based envvars:

* S3_MINIO_ACCESS_KEY
* S3_MINIO_SECRET_KEY

Connects-to: #48
Change-type: minor
Signed-off-by: Heds Simons <heds@balena.io>
2019-05-07 11:18:48 +01:00
290c90c262 v1.0.2 2019-04-18 15:30:38 +03:00
98b6100fed Merge pull request #45 from roman-mazur/roman/fix-build
scripts: Handle missing coreutils on Mac
2019-04-18 15:28:19 +03:00
e1bfb7f7b0 scripts: Handle missing coreutils on Mac
For convenience, also add instructions what to install.
Tha change also addresses invalid usage of 'local' outside of a function.

Change-type: patch
Signed-off-by: Roman Mazur <mazur.roman@gmail.com>
2019-04-16 18:05:16 +03:00
35ab5300e6 v1.0.1 2019-03-20 11:24:21 +02:00
fd031ad3a4 Merge pull request #42 from balena-io/prevent-root-ca-signing-vpn-ca
vpn: Remove BALENA_ROOT_CA from the VPN trust chain
2019-03-20 09:22:11 +00:00
95d53993bc vpn: Remove BALENA_ROOT_CA from the VPN trust chain
The VPN CA shouldn't need to be signed by the same CA that the HAproxy service
certificate is signed by. By removing this chain we are able to use a
different CA for the HTTPS services without impacting on the VPN service.

Change-type: patch
Signed-off-by: Rich Bayliss <rich@balena.io>
2019-03-20 09:13:19 +00:00
1721728794 v1.0.0 2019-03-15 17:29:55 +02:00
061440f109 Merge pull request #43 from balena-io/pin-service-tags
tags: Pin the image tags for the service stack
2019-03-15 15:28:08 +00:00
2f0fb27145 tags: Pin the image tags for the service stack
In order to have concrete releases of openBalena we should pin each
service to a given version. This PR is the start of this and marks
the first version of openBalena with known service tags.

Change-type: major
Signed-off-by: Rich Bayliss <rich@balena.io>
2019-03-15 15:14:57 +00:00
210bdcda37 v0.2.2 2019-03-08 15:44:55 +02:00
fac66040c8 Merge pull request #39 from balena-io/add-codeowners
codeowners: Add CODEOWNERS file
2019-03-08 13:42:59 +00:00
85a69c1ef1 codeowners: Add CODEOWNERS file
Add a CODEOWNERS file which includes the main repo owners.

Change-type: patch
Signed-off-by: Rich Bayliss <rich@balena.io>
2019-03-08 13:38:49 +00:00
12 changed files with 1315 additions and 50 deletions

2
.github/CODEOWNERS vendored Normal file
View File

@ -0,0 +1,2 @@
# Main repo owners:
* @dfunckt @richbayliss

875
.versionbot/CHANGELOG.yml Normal file
View File

@ -0,0 +1,875 @@
- commits:
- subject: 'tidy: Remove unused DEVICE_CONFIG_OPENVPN_CONFIG variable'
hash: 199d8eb4a454cc99a9cd8329fa6beae49b9040e1
body: ''
footer:
Change-type: patch
change-type: patch
Signed-off-by: Rich Bayliss <rich@balena.io>
signed-off-by: Rich Bayliss <rich@balena.io>
author: Rich Bayliss
- subject: 'services: Update Registry service version'
hash: 6fdc554e4396f950398fcf61640386ef70e57467
body: >
Update open-balena-registry to 2.7.0
This allows registry to be configured to use its internal Redis instance
for caching. It is still disabled by default though.
footer:
Change-type: minor
change-type: minor
author: Akis Kesoglou
- subject: 'services: Update API service version'
hash: f8b8a1589a6f46589721b0eb3cb2a156730ca56c
body: |
Update open-balena-api from 0.11.8 to 0.19.5
This brings in the latest bugfixes and changes.
footer:
Change-type: patch
change-type: patch
Signed-off-by: Rich Bayliss <rich@balena.io>
signed-off-by: Rich Bayliss <rich@balena.io>
author: Rich Bayliss
nested:
- commits:
- subject: Update typed-error to 3.1.0
hash: 7ba397da9f1765258c533d454aa49dbacb9c0b79
body: |
Update typed-error from 2.0.0 to 3.1.0
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
nested:
- commits:
- subject: 'dev: Enforce prettier coding standards'
hash: 47c07a641fa39ddb833b41aff7a918accad08289
body: ''
footer:
Change-type: minor
change-type: minor
Signed-off-by: Will Boyce <will@balena.io>
signed-off-by: Will Boyce <will@balena.io>
author: Will Boyce
- subject: 'npm: Update dependencies and remove `package-lock.json`'
hash: 067bceb5c8dfd46f7e4ff0f58dead46fd9626167
body: ''
footer:
Change-type: patch
change-type: patch
Signed-off-by: Will Boyce <will@balena.io>
signed-off-by: Will Boyce <will@balena.io>
author: Will Boyce
- subject: >-
codeowners: Add top contributors @wrboyce, @Page-, and
@dfunckt
hash: 6acc8757a594f74f264c8d68ea4501c61bda9951
body: ''
footer:
Change-type: patch
change-type: patch
Signed-off-by: Will Boyce <will@balena.io>
signed-off-by: Will Boyce <will@balena.io>
author: Will Boyce
- subject: 'versionbot: Add CHANGELOG.yml (for nested changelogs)'
hash: 2b684a0bb0c95a5dbd3b130ba0f184d3464d298f
body: ''
footer:
Change-type: patch
change-type: patch
Signed-off-by: Will Boyce <will@balena.io>
signed-off-by: Will Boyce <will@balena.io>
author: Will Boyce
version: typed-error-3.1.0
date: 2019-04-01T10:20:01.427Z
- commits:
- author: CameronDiver
body: ''
footers:
change-type: patch
signed-off-by: Cameron Diver <cameron@balena.io>
hash: aaa9391dc463c1037f85e845d30f6f9434bb4dc1
subject: Update README with new import style
date: '2018-11-01T12:08:25Z'
version: typed-error-3.0.2
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: 627cdd281d7b086df8fe5ed1ccb0e0e0df3df062
subject: Update to typescript 3
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: 00d182bb2bc29bd82adb4e8ea4527f6bda6c5278
subject: Update dev dependencies
- author: Pagan Gazzard
body: ''
hash: 94adac5d747f16b9228b39e56007ee0126c6f99c
subject: Add node-10 to the circle test suite
date: '2018-10-29T14:05:23Z'
version: typed-error-3.0.1
- commits:
- author: Will Boyce
body: >-
* Switch to `export ...` syntax (from `export = ...`)
* Fix invalid export of class inheriting non-exported
class
footers:
change-type: major
hash: a6307b8c04d3456ad7d8a6ac19035b5e718c4311
subject: Distribute generated typescript declaration
- author: Will Boyce
body: ''
footers:
change-type: patch
hash: 37c4b700baadba8cdd6bc0c40df74b30b1a6301c
subject: use circle for build/publish and add package-lock
- author: Will Boyce
body: ''
footers:
change-type: patch
hash: 83e809281f5172ca1ff71bdf0ee663cd504f1428
subject: add lint scripts/requirements
- author: Will Boyce
body: ''
footers:
change-type: minor
hash: da9431d08e501a0d4d0db3a7fb2c0bd06d76d064
subject: Remove `BaseError` class and directly subclass `Error`
- author: Will Boyce
body: ''
footers:
change-type: patch
hash: e46a36b54498b68f513c6cb947e217c11525e160
subject: 'Update dependencies, clean up package/tsconfig'
date: '2018-04-17T08:19:27Z'
version: typed-error-3.0.0
- commits:
- author: Akis Kesoglou
body: ''
footers:
change-type: patch
hash: d35c44f1e57f6386c6f769f8cafc28e0886719cc
subject: Add LICENSE
date: '2017-12-15T17:19:00Z'
version: typed-error-2.0.1
version: open-balena-api-0.19.5
date: 2019-05-20T12:59:21.646Z
- commits:
- subject: Some linting fixes for resin-lint 3
hash: 808fc3e1ec9b21d8df1166bc3265d92d6bfa1c59
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: open-balena-api-0.19.4
date: 2019-05-20T12:11:09.118Z
- commits:
- subject: Silence expected API key related rejections
hash: d9e10e7128be9c562bcabbd58243830c6b2d1e01
body: ''
footer:
Change-type: patch
change-type: patch
author: Akis Kesoglou
version: open-balena-api-0.19.3
date: 2019-05-17T11:47:13.587Z
- commits:
- subject: Update dependencies
hash: a01960d25643dd5da4f090638db8e87b297c00c5
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: open-balena-api-0.19.2
date: 2019-05-17T10:44:43.341Z
- commits:
- subject: Make use of a prepared query for device state query
hash: ffa3f0bbba27d2c7246a45ab4ed4ff342a5c772c
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
- subject: Update pinejs to 10.14.0
hash: ff02a77bebe6d4fbdd0a7fa9e2f2ef736fc560bc
body: |
Update pinejs from 10.11.0 to 10.14.0
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
nested:
- commits:
- subject: >-
Update pinejs-client-core and make use of prepared
queries
hash: f61469c74fcba879bffb1e5e677805480e16e614
body: |
Update abstract-sql-compiler from 6.4.0 to 6.4.2
Update odata-parser from 1.0.1 to 1.0.3
Update odata-to-abstract-sql from 3.1.1 to 3.1.2
Update pinejs-client-core from 5.3.6 to 5.5.1
Update sbvr-parser from 0.2.1 to 0.2.2
Update sbvr-types from 2.0.2 to 2.0.3
footer:
Change-type: minor
change-type: minor
author: Pagan Gazzard
nested:
- commits:
- subject: >-
Add .versionbot/CHANGELOG.yml for downstream
changelogs
hash: d871880a00c86b8eeec37489cf1d62a3688aabcc
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: odata-parser-1.0.3
date: 2019-05-08T14:25:13.528Z
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: 70ac83b0059a99d1d42e986f0a42fb7120c35ee8
subject: Update dependencies
date: '2019-04-15T06:51:46Z'
version: odata-parser-1.0.2
- commits:
- subject: Update and fix lodash typings
hash: 2bf073bbff3a94d66c31e07d98c3e298f5132b2c
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
- subject: Update husky/mocha dev dependencies
hash: 29f7d52185186bdb1171fdf27a923eb38887d009
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: abstract-sql-compiler-6.4.2
date: 2019-05-09T21:32:48.414Z
- commits:
- subject: Fix typescript compilation
hash: a3733e5c348687d74dd290538c6a7f3f3a4a4bb0
body: |
Update odata-parser from 1.0.1 to 1.0.3
Update odata-to-abstract-sql from 3.0.0 to 3.0.1
Update sbvr-parser from 0.2.1 to 0.2.2
Update sbvr-types from 2.0.0 to 2.0.3
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
nested:
- commits:
- subject: >-
Add .versionbot/CHANGELOG.yml for
downstream changelogs
hash: 45c5843b204def5a727b8ba8dfafb2a2347f50f3
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: sbvr-parser-0.2.2
date: 2019-05-08T14:23:57.847Z
- subject: Add node 12 tests
hash: 094c059eb3c5fd6f3502c53e40ed4b90197ed5c2
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
- subject: Add repo.yml for upstream changelogs
hash: 3f4bffe3a107a4b6fd30c15bf1e70c79e68e226e
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
- subject: >-
Add .versionbot/CHANGELOG.yml for downstream
changelogs
hash: 5e4ab1569e5e7f7648d4c14df8d3bf9f834a4828
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: abstract-sql-compiler-6.4.1
date: 2019-05-08T16:45:44.728Z
- commits:
- subject: >-
Fix downstream declaration creation errors due
to `Dictionary`
hash: a8a39edff8cc7e1d05fb9b67037718970e94296c
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-client-js-5.5.1
date: 2019-05-15T13:32:13.920Z
- commits:
- subject: >-
Add a prepare method that prepares a query into
a function
hash: eb7eccca7d90c453710575ebdf3adb9ef56835a7
body: ''
footer:
Change-type: minor
change-type: minor
author: Pagan Gazzard
version: pinejs-client-js-5.5.0
date: 2019-05-15T11:51:46.450Z
- commits:
- subject: Add CODEOWNERS
hash: e01174008f812e0c24ec1036aa1f9ff0bc716e85
body: ''
footer:
Change-type: patch
change-type: patch
Signed-off-by: Gergely Imreh <gergely@balena.io>
signed-off-by: Gergely Imreh <gergely@balena.io>
author: Gergely Imreh
version: pinejs-client-js-5.4.1
date: 2019-05-10T10:14:00.677Z
- commits:
- subject: >-
Add support for parameter aliases in resource
ids
hash: a4e6a640a3ced56bcd3ef7bf22770338e089a90d
body: ''
footer:
Change-type: minor
change-type: minor
author: Pagan Gazzard
version: pinejs-client-js-5.4.0
date: 2019-05-10T09:57:46.863Z
- commits:
- subject: Deduplicate transformation of GET results
hash: dd856e24072f652684adf63af97408ee0ba7389c
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-client-js-5.3.10
date: 2019-05-10T09:44:09.422Z
- commits:
- subject: >-
Simplify how we expose types, which means
`subscribe` is now exposed
hash: f81e0cc59e75e0f9ffc71d9f122b9cfab9c05165
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-client-js-5.3.9
date: 2019-05-10T08:57:16.276Z
- commits:
- subject: Add automatic formatting via prettier
hash: a345d32f295acfa8ed4e5b815c24e1e7fdb335f2
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-client-js-5.3.8
date: 2019-05-09T17:38:43.260Z
- commits:
- subject: 'Remove node 4 build, add node 12'
hash: 8d549277d80746feadbdd8a6bba37eb076270440
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
- subject: >-
Add .versionbot/CHANGELOG.yml for downstream
changelogs
hash: 067bedf65e86a902b7334ed6e5f117d6ac41afde
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-client-js-5.3.7
date: 2019-05-08T15:41:50.201Z
- commits:
- subject: Add node 12 tests
hash: a6cc208654a36228a35fb8d8886e62bccc3c9fa4
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
- subject: Add repo.yml for upstream changelogs
hash: e50ca4f49d80b3e89d37f7d8bf6607b0f797c7ae
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
- subject: >-
Add .versionbot/CHANGELOG.yml for downstream
changelogs
hash: 9d68e94757f2f9498dedf3d6f085ce77ea70652a
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: odata-to-abstract-sql-3.1.2
date: 2019-05-08T15:52:48.099Z
- commits:
- subject: >-
Add .versionbot/CHANGELOG.yml for downstream
changelogs
hash: cc2e3e23030521788c127b5750abf3c65645a710
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: sbvr-types-2.0.3
date: 2019-05-08T14:29:46.824Z
- commits:
- subject: >-
Add .versionbot/CHANGELOG.yml for downstream
changelogs
hash: 45c5843b204def5a727b8ba8dfafb2a2347f50f3
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: sbvr-parser-0.2.2
date: 2019-05-08T14:23:57.847Z
version: pinejs-10.14.0
date: 2019-05-15T14:12:22.538Z
- commits:
- subject: >-
Fix possible null error when using a parameter alias
with no value
hash: ee0cb996e27a2234eb62608152230074a614cc4e
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-10.13.3
date: 2019-05-14T11:01:52.288Z
- commits:
- subject: Add repo.yml for nested changelogs
hash: 02a34373d90f29b5ec06f9ae9823d87207fbb577
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-10.13.2
date: 2019-05-08T15:09:50.814Z
- commits:
- subject: Add node 12 to the circle tests
hash: 7ae335dce37abf005daaa2e43239ed26ae2519de
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-10.13.1
date: 2019-05-06T21:37:25.704Z
- commits:
- subject: Expose odata-compiler as a bin script
hash: cf86826e0d6653c456057d4de8d849d00ffc023f
body: >
This means that it will now match the module
dependencies of the
installed pinejs
footer:
Change-type: minor
change-type: minor
author: Pagan Gazzard
version: pinejs-10.13.0
date: 2019-05-06T17:33:54.911Z
- commits:
- subject: Expose sbvr-compiler as a bin script
hash: e6718ffe901b4d711f47493ff907ee1fe2f947e0
body: >
This means that it will now match the module
dependencies of the
installed pinejs
footer:
Change-type: minor
change-type: minor
author: Pagan Gazzard
- subject: >-
Move odata-metadata-generator into odata-metadata
directory
hash: d414696ff13c9d9f2183f44eda434d0da8d26f01
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-10.12.0
date: 2019-05-01T13:08:20.878Z
- commits:
- subject: >-
Update @types/lodash, avoiding `_.isObject` where
necessary
hash: 77a281beef4e9b82c6070dba3027ddd606e4c08b
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-10.11.3
date: 2019-05-01T11:07:54.197Z
- commits:
- subject: >-
Only validate the model if the query affected at least 1
row
hash: 8bfd0a1f1cd45a837957f210979ec910e0e46261
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-10.11.2
date: 2019-04-22T13:42:40.543Z
- commits:
- subject: >-
Switch odata-metadata-generator to using an abstract sql
model
hash: 9cf5c16b50f7371552cb8876dd5ca724cccdf911
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: pinejs-10.11.1
date: 2019-04-11T16:03:38.840Z
version: open-balena-api-0.19.1
date: 2019-05-15T19:19:14.258Z
- commits:
- subject: Update target to es2018
hash: b3bab02244ae85e4805db95eec92a3ae61fb0d92
body: ''
footer:
Change-type: minor
change-type: minor
author: Pagan Gazzard
version: open-balena-api-0.19.0
date: 2019-05-15T15:25:47.366Z
- commits:
- subject: 'bug: Resolve NPM dependency issues preventing startup'
hash: 13842dee794bd12465ba97572a7a3ee0a19b7fc6
body: |
Add `ts-node` as a dependency, as it had been marked as devOnly
in a previous PR.
footer:
Change-type: patch
change-type: patch
Signed-off-by: Rich Bayliss <rich@balena.io>
signed-off-by: Rich Bayliss <rich@balena.io>
author: Rich Bayliss
version: open-balena-api-0.18.6
date: 2019-05-10T11:05:12.524Z
- commits:
- subject: Add typed-error upstream to repo.yml
hash: d50d88a873988aa2c9cf1f50ed721fbf92565869
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
- subject: Add open-balena-base upstream to repo.yml
hash: 2d039de7c4c8f8728a5a5af931fa83f55ef2a303
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: open-balena-api-0.18.5
date: 2019-05-08T16:12:46.186Z
- commits:
- subject: Disable the service start limit
hash: d69d9b2355616685dfb570be6aa6c14ccc97a7c2
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
- subject: Update open-balena-base to v7.0.2
hash: d363fa289386f39de9af1bc3a3eb0690b35d9ea0
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: open-balena-api-0.18.4
date: 2019-05-06T11:23:47.208Z
- commits:
- subject: 'tests: Add test framework'
hash: 52c6eebcc45f637d15b48b7ea7942e6011b891eb
body: |
Add a test framework to allow testing of the openBalena API
Added CircleCI pipeline to run tests.
footer:
Change-type: patch
change-type: patch
Signed-off-by: Rich Bayliss <rich@balena.io>
signed-off-by: Rich Bayliss <rich@balena.io>
author: Rich Bayliss
version: open-balena-api-0.18.3
date: 2019-05-01T09:06:36.206Z
- commits:
- subject: Fix import ordering issue
hash: d4f207d8b7d9c55ef0f173fd3e58d20d46a964bc
body: ''
footer:
Change-type: patch
change-type: patch
author: Pagan Gazzard
version: open-balena-api-0.18.2
date: 2019-04-29T12:32:17.257Z
- commits:
- subject: 'versionbot: add machine readable changelog'
hash: 95c57fb121cda374e36e45aaf82ee36877e8b82f
body: ''
footer:
Change-type: patch
change-type: patch
Signed-off-by: Gergely Imreh <gergely@balena.io>
signed-off-by: Gergely Imreh <gergely@balena.io>
author: Gergely Imreh
version: open-balena-api-0.18.1
date: 2019-04-29T11:23:22.500Z
- commits:
- author: Gergely Imreh
body: |-
That OS version and upwards have docker with capability to pull
from registry v2.
footers:
change-type: minor
signed-off-by: Gergely Imreh <gergely@balena.io>
hash: 9fa9f17256d3c975f1fa590d5d132433d1b20646
subject: >-
device-config: allow devices going back to v1.2.1 to use
registry v2
date: '2019-04-29T09:32:40Z'
version: open-balena-api-0.18.0
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: 41b3e535f633862c8191c0ee94b2a089179316ef
subject: Handle requesting registry scopes with explicit indices above 20
date: '2019-04-26T19:16:24Z'
version: open-balena-api-0.17.4
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: 501a5cb839d7bd6e24a4e702c9b2d55f6a7ccdae
subject: Use more accurate `BadRequestError`s for invalid env var names
- author: Pagan Gazzard
body: ''
hash: ec8543f76672e23a36353f2d38444f74867a3e64
subject: Remove unnecessary `nameProp` argument from `addEnvHooks`
- author: Pagan Gazzard
body: ''
hash: 8ca26a0368feaf72a40d528fc462dbb953426797
subject: Avoid unnecessary object creation on env var validation
date: '2019-04-26T09:24:50Z'
version: open-balena-api-0.17.3
- commits:
- author: Will Boyce
body: >-
Allowing the server to dictate when keys are renegotiated allows
us to
control load spikes more effectively.
footers:
change-type: patch
signed-off-by: Will Boyce <will@balena.io>
hash: de52f7e24057f12b0b9381d462ca1d0d0ea5a8d6
subject: 'os-config: disable client-initiated vpn tls key renegotiation'
date: '2019-04-24T12:32:57Z'
version: open-balena-api-0.17.2
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: f4676ba5237d374c9148db9855e7e0ce29bddb38
subject: Remove unused `DEVICE_CONFIG_OPENVPN_CONFIG` fron env backend
date: '2019-04-19T14:06:00Z'
version: open-balena-api-0.17.1
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: minor
hash: ef31eaefa2c75a3e6f61268bdc60af4b1e39f970
subject: Rename `env_var_name` to `name` to match cloud
date: '2019-04-18T15:54:23Z'
version: open-balena-api-0.17.0
- commits:
- author: Rich Bayliss
body: |-
Add missing changes to make the `my_application` resource return
results, instead of throwing an exception.
footers:
change-type: patch
signed-off-by: Rich Bayliss <rich@balena.io>
hash: 065454c21c7308b9e51395186a8023fc3b11b6a7
subject: >-
fix: Changes required to make `my_application` resource
available
date: '2019-04-18T13:38:33Z'
version: open-balena-api-0.16.1
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: minor
hash: 12bab4ff126f8156afa8aa1ad62f8776746d7c6e
subject: Handle `my_applications` within pinejs
date: '2019-04-17T14:18:41Z'
version: open-balena-api-0.16.0
- commits:
- author: Will Boyce
body: ''
footers:
change-type: patch
signed-off-by: Will Boyce <will@balena.io>
hash: 285091d355eb71099925d8e0eb5748aa50213de5
subject: 'device-proxy: use `.balena` tld in favour of `.resin`'
date: '2019-04-17T12:13:03Z'
version: open-balena-api-0.15.2
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: 76063693f447bdd155abe12004d52e51831fe7a9
subject: Update method-override to 3.x
date: '2019-04-17T09:52:51Z'
version: open-balena-api-0.15.1
- commits:
- author: Pagan Gazzard
body: |-
Also splits index.js to make sure the bulk of it is typed
Update pinejs from 10.8.0 to 10.11.0
footers:
change-type: minor
hash: 384f53606795d4b565d8a851b86316ce4fcfbcb9
subject: >-
Rename `configPath` to `config` and make sure config.json is
valid
date: '2019-04-15T18:37:57Z'
version: open-balena-api-0.15.0
- commits:
- author: Pablo Carranza Velez
body: >-
Added to the supervisor in
https://github.com/balena-io/balena-supervisor/pull/934
We add this variable to the whitelist and add the information so
that the UI can show it and allow changing it.
footers:
change-type: minor
signed-off-by: Pablo Carranza Velez <pablocarranza@gmail.com>
hash: ed41b29c8211d37897f656ed5b55594f3317aebe
subject: >-
Whitelist the new RESIN_SUPERVISOR_INSTANT_UPDATE_TRIGGER
configuration variable
date: '2019-04-11T18:27:19Z'
version: open-balena-api-0.14.0
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: f827088cd504c62753390d2f3929d9b9de708914
subject: Fix `ResolvableReturnType` typing
date: '2019-04-02T15:20:27Z'
version: open-balena-api-0.13.3
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: c0e11d4fd0080a74ca67568062ec8133fa9deb68
subject: Add CODEOWNERS file
date: '2019-04-01T13:32:08Z'
version: open-balena-api-0.13.2
- commits:
- author: Pagan Gazzard
body: ''
footers:
change-type: patch
hash: da963b34c86e0f3a5bb7caefcf5cfad82a1de49e
subject: Add an index for the vpn's service instance lookup
date: '2019-04-01T13:18:22Z'
version: open-balena-api-0.13.1
- commits:
- author: Pagan Gazzard
body: Update pinejs from 10.6.1 to 10.8.0
footers:
change-type: patch
hash: 4f7200e14388b379e4b068a64acbf2d4f4d62a9c
subject: Use a readTransaction for device state
- author: Pagan Gazzard
body: ''
footers:
change-type: minor
hash: 1f5005153dcf8aeb20622b6f23cc0131b9afd74a
subject: >-
Remove runInTransaction wrapper to avoid unnecessary function
creation
- author: Pagan Gazzard
body: ''
hash: 4ce469103710955e23754b09a94f8d1793cf82bc
subject: Avoid need to repeateadly check for `readTransaction` existence
date: '2019-03-28T11:00:59Z'
version: open-balena-api-0.13.0
- commits:
- author: Stevche Radevski
body: |-
This will allow us to store the pre
and post-image build logs as shown in
the terminal.
footers:
change-type: minor
signed-off-by: Stevche Radevski <stevche@balena.io>
hash: e781deead7e08e4fc35e33769ab8262fdc941f2b
subject: Add build log to release resource
date: '2019-03-19T14:19:56Z'
version: open-balena-api-0.12.0
version: 1.2.0
date: 2019-05-21T14:52:12.117Z

View File

@ -4,6 +4,386 @@ All notable changes to this project will be documented in this file
automatically by Versionist. DO NOT EDIT THIS FILE MANUALLY!
This project adheres to [Semantic Versioning](http://semver.org/).
# v1.2.0
## (2019-05-21)
* tidy: Remove unused DEVICE_CONFIG_OPENVPN_CONFIG variable [Rich Bayliss]
* services: Update Registry service version [Akis Kesoglou]
* services: Update API service version [Rich Bayliss]
<details>
<summary> View details </summary>
## open-balena-api-0.19.5
### (2019-05-20)
* Update typed-error to 3.1.0 [Pagan Gazzard]
<details>
<summary> View details </summary>
### typed-error-3.1.0
#### (2019-04-01)
* dev: Enforce prettier coding standards [Will Boyce]
* npm: Update dependencies and remove `package-lock.json` [Will Boyce]
* codeowners: Add top contributors @wrboyce, @Page-, and @dfunckt [Will Boyce]
* versionbot: Add CHANGELOG.yml (for nested changelogs) [Will Boyce]
### typed-error-3.0.2
#### (2018-11-01)
* Update README with new import style [CameronDiver]
### typed-error-3.0.1
#### (2018-10-29)
* Update to typescript 3 [Pagan Gazzard]
* Update dev dependencies [Pagan Gazzard]
* Add node-10 to the circle test suite [Pagan Gazzard]
### typed-error-3.0.0
#### (2018-04-17)
* Distribute generated typescript declaration [Will Boyce]
* use circle for build/publish and add package-lock [Will Boyce]
* add lint scripts/requirements [Will Boyce]
* Remove `BaseError` class and directly subclass `Error` [Will Boyce]
* Update dependencies, clean up package/tsconfig [Will Boyce]
### typed-error-2.0.1
#### (2017-12-15)
* Add LICENSE [Akis Kesoglou]
</details>
## open-balena-api-0.19.4
### (2019-05-20)
* Some linting fixes for resin-lint 3 [Pagan Gazzard]
## open-balena-api-0.19.3
### (2019-05-17)
* Silence expected API key related rejections [Akis Kesoglou]
## open-balena-api-0.19.2
### (2019-05-17)
* Update dependencies [Pagan Gazzard]
## open-balena-api-0.19.1
### (2019-05-15)
* Make use of a prepared query for device state query [Pagan Gazzard]
* Update pinejs to 10.14.0 [Pagan Gazzard]
<details>
<summary> View details </summary>
### pinejs-10.14.0
#### (2019-05-15)
* Update pinejs-client-core and make use of prepared queries [Pagan Gazzard]
<details>
<summary> View details </summary>
#### odata-parser-1.0.3
##### (2019-05-08)
* Add .versionbot/CHANGELOG.yml for downstream changelogs [Pagan Gazzard]
#### odata-parser-1.0.2
##### (2019-04-15)
* Update dependencies [Pagan Gazzard]
#### abstract-sql-compiler-6.4.2
##### (2019-05-09)
* Update and fix lodash typings [Pagan Gazzard]
* Update husky/mocha dev dependencies [Pagan Gazzard]
#### abstract-sql-compiler-6.4.1
##### (2019-05-08)
* Fix typescript compilation [Pagan Gazzard]
<details>
<summary> View details </summary>
##### sbvr-parser-0.2.2
###### (2019-05-08)
* Add .versionbot/CHANGELOG.yml for downstream changelogs [Pagan Gazzard]
</details>
* Add node 12 tests [Pagan Gazzard]
* Add repo.yml for upstream changelogs [Pagan Gazzard]
* Add .versionbot/CHANGELOG.yml for downstream changelogs [Pagan Gazzard]
#### pinejs-client-js-5.5.1
##### (2019-05-15)
* Fix downstream declaration creation errors due to `Dictionary` [Pagan Gazzard]
#### pinejs-client-js-5.5.0
##### (2019-05-15)
* Add a prepare method that prepares a query into a function [Pagan Gazzard]
#### pinejs-client-js-5.4.1
##### (2019-05-10)
* Add CODEOWNERS [Gergely Imreh]
#### pinejs-client-js-5.4.0
##### (2019-05-10)
* Add support for parameter aliases in resource ids [Pagan Gazzard]
#### pinejs-client-js-5.3.10
##### (2019-05-10)
* Deduplicate transformation of GET results [Pagan Gazzard]
#### pinejs-client-js-5.3.9
##### (2019-05-10)
* Simplify how we expose types, which means `subscribe` is now exposed [Pagan Gazzard]
#### pinejs-client-js-5.3.8
##### (2019-05-09)
* Add automatic formatting via prettier [Pagan Gazzard]
#### pinejs-client-js-5.3.7
##### (2019-05-08)
* Remove node 4 build, add node 12 [Pagan Gazzard]
* Add .versionbot/CHANGELOG.yml for downstream changelogs [Pagan Gazzard]
#### odata-to-abstract-sql-3.1.2
##### (2019-05-08)
* Add node 12 tests [Pagan Gazzard]
* Add repo.yml for upstream changelogs [Pagan Gazzard]
* Add .versionbot/CHANGELOG.yml for downstream changelogs [Pagan Gazzard]
#### sbvr-types-2.0.3
##### (2019-05-08)
* Add .versionbot/CHANGELOG.yml for downstream changelogs [Pagan Gazzard]
#### sbvr-parser-0.2.2
##### (2019-05-08)
* Add .versionbot/CHANGELOG.yml for downstream changelogs [Pagan Gazzard]
</details>
### pinejs-10.13.3
#### (2019-05-14)
* Fix possible null error when using a parameter alias with no value [Pagan Gazzard]
### pinejs-10.13.2
#### (2019-05-08)
* Add repo.yml for nested changelogs [Pagan Gazzard]
### pinejs-10.13.1
#### (2019-05-06)
* Add node 12 to the circle tests [Pagan Gazzard]
### pinejs-10.13.0
#### (2019-05-06)
* Expose odata-compiler as a bin script [Pagan Gazzard]
### pinejs-10.12.0
#### (2019-05-01)
* Expose sbvr-compiler as a bin script [Pagan Gazzard]
* Move odata-metadata-generator into odata-metadata directory [Pagan Gazzard]
### pinejs-10.11.3
#### (2019-05-01)
* Update @types/lodash, avoiding `_.isObject` where necessary [Pagan Gazzard]
### pinejs-10.11.2
#### (2019-04-22)
* Only validate the model if the query affected at least 1 row [Pagan Gazzard]
### pinejs-10.11.1
#### (2019-04-11)
* Switch odata-metadata-generator to using an abstract sql model [Pagan Gazzard]
</details>
## open-balena-api-0.19.0
### (2019-05-15)
* Update target to es2018 [Pagan Gazzard]
## open-balena-api-0.18.6
### (2019-05-10)
* bug: Resolve NPM dependency issues preventing startup [Rich Bayliss]
## open-balena-api-0.18.5
### (2019-05-08)
* Add typed-error upstream to repo.yml [Pagan Gazzard]
* Add open-balena-base upstream to repo.yml [Pagan Gazzard]
## open-balena-api-0.18.4
### (2019-05-06)
* Disable the service start limit [Pagan Gazzard]
* Update open-balena-base to v7.0.2 [Pagan Gazzard]
## open-balena-api-0.18.3
### (2019-05-01)
* tests: Add test framework [Rich Bayliss]
## open-balena-api-0.18.2
### (2019-04-29)
* Fix import ordering issue [Pagan Gazzard]
## open-balena-api-0.18.1
### (2019-04-29)
* versionbot: add machine readable changelog [Gergely Imreh]
## open-balena-api-0.18.0
### (2019-04-29)
* device-config: allow devices going back to v1.2.1 to use registry v2 [Gergely Imreh]
## open-balena-api-0.17.4
### (2019-04-26)
* Handle requesting registry scopes with explicit indices above 20 [Pagan Gazzard]
## open-balena-api-0.17.3
### (2019-04-26)
* Use more accurate `BadRequestError`s for invalid env var names [Pagan Gazzard]
* Remove unnecessary `nameProp` argument from `addEnvHooks` [Pagan Gazzard]
* Avoid unnecessary object creation on env var validation [Pagan Gazzard]
## open-balena-api-0.17.2
### (2019-04-24)
* os-config: disable client-initiated vpn tls key renegotiation [Will Boyce]
## open-balena-api-0.17.1
### (2019-04-19)
* Remove unused `DEVICE_CONFIG_OPENVPN_CONFIG` fron env backend [Pagan Gazzard]
## open-balena-api-0.17.0
### (2019-04-18)
* Rename `env_var_name` to `name` to match cloud [Pagan Gazzard]
## open-balena-api-0.16.1
### (2019-04-18)
* fix: Changes required to make `my_application` resource available [Rich Bayliss]
## open-balena-api-0.16.0
### (2019-04-17)
* Handle `my_applications` within pinejs [Pagan Gazzard]
## open-balena-api-0.15.2
### (2019-04-17)
* device-proxy: use `.balena` tld in favour of `.resin` [Will Boyce]
## open-balena-api-0.15.1
### (2019-04-17)
* Update method-override to 3.x [Pagan Gazzard]
## open-balena-api-0.15.0
### (2019-04-15)
* Rename `configPath` to `config` and make sure config.json is valid [Pagan Gazzard]
## open-balena-api-0.14.0
### (2019-04-11)
* Whitelist the new RESIN_SUPERVISOR_INSTANT_UPDATE_TRIGGER configuration variable [Pablo Carranza Velez]
## open-balena-api-0.13.3
### (2019-04-02)
* Fix `ResolvableReturnType` typing [Pagan Gazzard]
## open-balena-api-0.13.2
### (2019-04-01)
* Add CODEOWNERS file [Pagan Gazzard]
## open-balena-api-0.13.1
### (2019-04-01)
* Add an index for the vpn's service instance lookup [Pagan Gazzard]
## open-balena-api-0.13.0
### (2019-03-28)
* Use a readTransaction for device state [Pagan Gazzard]
* Remove runInTransaction wrapper to avoid unnecessary function creation [Pagan Gazzard]
* Avoid need to repeateadly check for `readTransaction` existence [Pagan Gazzard]
## open-balena-api-0.12.0
### (2019-03-19)
* Add build log to release resource [Stevche Radevski]
</details>
# v1.1.1
## (2019-05-07)
* docker: Update docker-compose version to latest [Heds Simons]
# v1.1.0
## (2019-05-07)
* s3: Update to latest version with credentials [Heds Simons]
# v1.0.2
## (2019-04-17)
* scripts: Handle missing coreutils on Mac [Roman Mazur]
# v1.0.1
## (2019-03-20)
* vpn: Remove BALENA_ROOT_CA from the VPN trust chain [Rich Bayliss]
# v1.0.0
## (2019-03-15)
* tags: Pin the image tags for the service stack [Rich Bayliss]
# v0.2.2
## (2019-03-08)
* codeowners: Add CODEOWNERS file [Rich Bayliss]
# v0.2.1
## (2019-03-08)

View File

@ -1 +1 @@
0.2.1
1.2.0

8
Vagrantfile vendored
View File

@ -20,15 +20,21 @@ Vagrant.configure('2') do |config|
config.ssh.forward_agent = true
config.vm.provision :docker
config.vm.provision :docker_compose
$provision = <<-SCRIPT
DOCKER_COMPOSE_VERSION=1.24.0
touch /home/vagrant/.bashrc
grep -Fxq 'source /home/vagrant/openbalena/.openbalenarc' /home/vagrant/.bashrc || echo 'source /home/vagrant/openbalena/.openbalenarc' >> /home/vagrant/.bashrc
curl -o- https://raw.githubusercontent.com/creationix/nvm/v0.34.0/install.sh | bash
source "/home/vagrant/.nvm/nvm.sh" # This loads nvm
nvm install 10.15.0 && nvm use 10.15.0
# Install a newer version of docker-compose
(cd /usr/local/bin; \
sudo curl -o docker-compose --silent --location https://github.com/docker/compose/releases/download/$DOCKER_COMPOSE_VERSION/docker-compose-Linux-x86_64; \
sudo chmod a+x docker-compose)
SCRIPT
config.vm.provision :shell, privileged: false, inline: $provision

View File

@ -27,7 +27,6 @@ services:
DB_PORT: 5432
DB_USER: docker
DELTA_HOST: delta.${OPENBALENA_HOST_NAME}
DEVICE_CONFIG_OPENVPN_CONFIG: ${OPENBALENA_VPN_CONFIG}
DEVICE_CONFIG_OPENVPN_CA: ${OPENBALENA_VPN_CA_CHAIN}
DEVICE_CONFIG_SSH_AUTHORIZED_KEYS: ${OPENBALENA_SSH_AUTHORIZED_KEYS}
HOST: api.${OPENBALENA_HOST_NAME}
@ -64,7 +63,6 @@ services:
service: component
image: balena/open-balena-registry:${OPENBALENA_REGISTRY_VERSION_TAG:-master}
depends_on:
- api
- s3
- redis
volumes:
@ -76,6 +74,11 @@ services:
BALENA_TOKEN_AUTH_ISSUER: api.${OPENBALENA_HOST_NAME}
BALENA_TOKEN_AUTH_REALM: https://api.${OPENBALENA_HOST_NAME}/auth/v1/token
COMMON_REGION:
REGISTRY2_CACHE_ENABLED: "false"
REGISTRY2_CACHE_ADDR: 127.0.0.1:6379
REGISTRY2_CACHE_DB: 0
REGISTRY2_CACHE_MAXMEMORY_MB: 1024 # megabytes
REGISTRY2_CACHE_MAXMEMORY_POLICY: allkeys-lru
REGISTRY2_S3_BUCKET:
REGISTRY2_S3_KEY:
REGISTRY2_S3_SECRET:
@ -117,10 +120,13 @@ services:
s3:
extends:
file: ./common.yml
service: system
service: component
image: balena/open-balena-s3:${OPENBALENA_S3_VERSION_TAG:-master}
volumes:
- s3:/export
environment:
S3_MINIO_ACCESS_KEY: abcdef1234
S3_MINIO_SECRET_KEY: "1234567890"
redis:
extends:

5
compose/versions Normal file
View File

@ -0,0 +1,5 @@
export OPENBALENA_API_VERSION_TAG=v0.19.5
export OPENBALENA_DB_VERSION_TAG=v2.0.3
export OPENBALENA_REGISTRY_VERSION_TAG=v2.7.0
export OPENBALENA_S3_VERSION_TAG=v2.6.2
export OPENBALENA_VPN_VERSION_TAG=v8.10.0

View File

@ -1,2 +1,13 @@
type: 'generic'
type: "generic"
reviewers: 1
upstream:
- repo: open-balena-api
url: https://github.com/balena-io/open-balena-api
- repo: open-balena-vpn
url: https://github.com/balena-io/open-balena-vpn
- repo: open-balena-registry
url: https://github.com/balena-io/open-balena-registry
- repo: open-balena-db
url: https://github.com/balena-io/open-balena-db
- repo: open-balena-s3
url: https://github.com/balena-io/open-balena-s3

View File

@ -1,5 +1,11 @@
#!/bin/bash -e
echo_error() {
local RED=`tput setaf 1`
local RESET=`tput sgr0`
echo "${RED}ERROR: ${1}${RESET}"
}
REALPATH=
REALPATHS=(
'realpath'
@ -14,8 +20,13 @@ fi
done
if [ -z "${REALPATH}" ]; then
local RED=`tput setaf 1`
echo "${RED}ERROR: Unable to find suitable command for realpath."
echo_error 'Unable to find suitable command for realpath.'
if [ $(uname) == 'Darwin' ]; then
echo 'GNU coreutils are required to build openBalena on MacOS. To install with brew, run'
echo ''
echo ' brew install coreutils'
echo ''
fi
exit 1
fi

View File

@ -11,6 +11,12 @@ echo_bold() {
printf "\\033[1m%s\\033[0m\\n" "$@"
}
VERSIONS_FILE="${BASE_DIR}/compose/versions"
if [ ! -f "$VERSIONS_FILE" ]; then
echo_bold "No service versions defined in ${VERSIONS_FILE}"
exit 1
fi
ENV_FILE="${CONFIG_DIR}/activate"
if [ ! -f "$ENV_FILE" ]; then
echo_bold 'No configuration found; please create one first with: ./scripts/quickstart'
@ -19,7 +25,7 @@ if [ ! -f "$ENV_FILE" ]; then
fi
# shellcheck source=/dev/null
source "${ENV_FILE}"; docker-compose \
source "${VERSIONS_FILE}"; source "${ENV_FILE}"; docker-compose \
--project-name 'openbalena' \
-f "${BASE_DIR}/compose/services.yml" \
-f "${CONFIG_DIR}/docker-compose.yml" \

View File

@ -32,14 +32,9 @@ if [ ! -f $VPN_CA ] || [ ! -f $VPN_CRT ] || [ ! -f $VPN_KEY ] || [ ! -f $VPN_DH
rm -f $VPN_CA $VPN_CRT $VPN_DH $VPN_KEY
# generate VPN sub-CA
# generate VPN CA
"$easyrsa_bin" --pki-dir="${VPN_PKI}" init-pki &>/dev/null
"$easyrsa_bin" --pki-dir="${VPN_PKI}" --days="${CA_EXPIRY_DAYS}" --req-cn="vpn-ca.${CN}" build-ca nopass subca 2>/dev/null
# import sub-CA CSR into root PKI, sign, and copy back to vpn PKI
"$easyrsa_bin" --pki-dir="${ROOT_PKI}" import-req "${VPN_PKI}/reqs/ca.req" "vpn-ca" 2>/dev/null
"$easyrsa_bin" --pki-dir="${ROOT_PKI}" sign-req ca "vpn-ca" 2>/dev/null
cp "${ROOT_PKI}/issued/vpn-ca.crt" "${VPN_PKI}/ca.crt"
"$easyrsa_bin" --pki-dir="${VPN_PKI}" --days="${CA_EXPIRY_DAYS}" --req-cn="vpn-ca.${CN}" build-ca nopass 2>/dev/null
# generate and sign vpn server certificate
"$easyrsa_bin" --pki-dir="${VPN_PKI}" --days="${CRT_EXPIRY_DAYS}" build-server-full "vpn.${CN}" nopass 2>/dev/null
@ -48,8 +43,6 @@ if [ ! -f $VPN_CA ] || [ ! -f $VPN_CRT ] || [ ! -f $VPN_KEY ] || [ ! -f $VPN_DH
"$easyrsa_bin" --pki-dir="${VPN_PKI}" --keysize=2048 gen-dh 2>/dev/null
# update indexes and generate CRLs
"$easyrsa_bin" --pki-dir="${ROOT_PKI}" update-db 2>/dev/null
"$easyrsa_bin" --pki-dir="${VPN_PKI}" update-db 2>/dev/null
"$easyrsa_bin" --pki-dir="${ROOT_PKI}" gen-crl 2>/dev/null
"$easyrsa_bin" --pki-dir="${VPN_PKI}" gen-crl 2>/dev/null
fi

View File

@ -12,7 +12,7 @@ usage() {
echo " JWT_CRT Path to Token Auth certificate"
echo " JWT_KEY Path to Token Auth private key"
echo " JWT_KID Path to KeyID for the Token Auth certificate"
echo " VPN_CA Path to the VPN sub-CA certificate"
echo " VPN_CA Path to the VPN CA certificate"
echo " VPN_CRT Path to the VPN server certificate"
echo " VPN_KEY Path to the VPN server private key"
echo " VPN_DH Path to the VPN server Diffie Hellman parameters"
@ -40,35 +40,6 @@ b64file() {
b64encode "$(cat "$@")"
}
VPN_CONFIG=$(cat <<STR
client
remote vpn.$DOMAIN 443
resolv-retry infinite
remote-cert-tls server
ca /etc/openvpn/ca.crt
auth-user-pass /var/volatile/vpn-auth
auth-retry none
script-security 2
up /etc/openvpn-misc/upscript.sh
up-restart
down /etc/openvpn-misc/downscript.sh
comp-lzo
dev resin-vpn
dev-type tun
proto tcp
nobind
persist-key
persist-tun
verb 3
user openvpn
group openvpn
STR
)
cat <<STR
export OPENBALENA_PRODUCTION_MODE=false
export OPENBALENA_COOKIE_SESSION_SECRET=$(randstr 32)
@ -83,8 +54,7 @@ export OPENBALENA_TOKEN_AUTH_PUB=$(b64file "$JWT_CRT")
export OPENBALENA_TOKEN_AUTH_KEY=$(b64file "$JWT_KEY")
export OPENBALENA_TOKEN_AUTH_KID=$(b64file "$JWT_KID")
export OPENBALENA_VPN_CA=$(b64file "$VPN_CA")
export OPENBALENA_VPN_CA_CHAIN=$(b64file "$ROOT_CA" "$VPN_CA")
export OPENBALENA_VPN_CONFIG=$(b64encode "$VPN_CONFIG")
export OPENBALENA_VPN_CA_CHAIN=$(b64file "$VPN_CA")
export OPENBALENA_VPN_SERVER_CRT=$(b64file "$VPN_CRT")
export OPENBALENA_VPN_SERVER_KEY=$(b64file "$VPN_KEY")
export OPENBALENA_VPN_SERVER_DH=$(b64file "$VPN_DH")