├── .gitignore
├── LICENSE
├── README.md
├── Vagrantfile
├── buildbot.tac
├── centos-7.sh
├── debian-9.sh
├── freebsd-11.sh
├── install-mbedtls.sh
├── netbsd-7.sh
├── oas.sh
├── openbsd-6.sh
├── recipes
    └── Solaris113.txt
├── sbuild.sh
├── scripts
    ├── base.ps1
    ├── build-deps.ps1
    ├── buildbot.ps1
    ├── cmake.ps1
    ├── evaltimer.ps1
    ├── git.ps1
    ├── msibuilder.ps1
    ├── pip.ps1
    ├── ps_support.ps1
    ├── python.ps1
    ├── reboot.ps1
    ├── vcpkg.ps1
    └── vsbuildtools.ps1
├── setup-generic-buildsystem.sh
├── setup-samba-share.sh
├── smb.conf.tmpl
├── solaris-113.sh
└── ubuntu-1604.sh


/.gitignore:
--------------------------------------------------------------------------------
1 | .vagrant
2 | ubuntu-*-cloudimg-console.log
3 | *.swp
4 | buildbot-host/buildmaster/master.ini
5 | buildbot-host/buildmaster/worker.ini
6 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | Copyright 2017 Samuli Seppänen and OpenVPN Technologies, Inc (from this 
 2 | point onward "developers") and contributors. All rights reserved.
 3 | 
 4 | Redistribution and use in source and binary forms, with or without modification, 
 5 | are permitted provided that the following conditions are met:
 6 | 
 7 | 1. Redistributions of source code must retain the above copyright notice, this 
 8 | list of conditions and the following disclaimer.
 9 | 
10 | 2. Redistributions in binary form must reproduce the above copyright notice, 
11 | this list of conditions and the following disclaimer in the documentation and/or 
12 | other materials provided with the distribution.
13 | 
14 | THIS SOFTWARE IS PROVIDED BY THE DEVELOPERS ''AS IS'' AND ANY EXPRESS OR IMPLIED 
15 | WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 
16 | MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT 
17 | SHALL THE DEVELOPERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 
18 | INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 
19 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 
20 | PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 
21 | LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE 
22 | OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF 
23 | ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
24 | 
25 | The views and conclusions contained in the software and documentation are those 
26 | of the authors and should not be interpreted as representing official policies, 
27 | either expressed or implied, of the developers.
28 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # openvpn-vagrant
 2 | 
 3 | Vagrantfile and support scripts for use in OpenVPN development and testing.
 4 | 
 5 | # Prequisites
 6 | 
 7 | You need to install Virtualbox and Vagrant.
 8 | 
 9 | # List of VMs
10 | 
11 | The following Vagrant VM are provisioned to include everything needed to build 
12 | OpenVPN on them. Both OpenSSL and MbedTLS builds are supported out of the box:
13 | 
14 | * centos-7
15 | * debian-9
16 | * freebsd-11
17 | * netbsd-7
18 | * openbsd-6
19 | * solaris-113
20 | * ubuntu-1604
21 | * ubuntu-1804
22 | 
23 | Note that it is not possible to legally distribute the base box for solaris-113; 
24 | please refer to [recipes/Solaris113.txt](recipes/Solaris113.txt) for details.
25 | 
26 | These VMs are special-purpose:
27 | 
28 | * openvpn-build: cross-compile OpenVPN using [openvpn-build](https://github.com/OpenVPN/openvpn-build) (Ubuntu 16.04)
29 | * openvpn-build-bionic: cross-compile OpenVPN using [openvpn-build](https://github.com/OpenVPN/openvpn-build) (Ubuntu 18.04)
30 | * sbuild: build OpenVPN 2.x Debian/Ubuntu packages using [sbuild_wrapper](https://github.com/OpenVPN/sbuild_wrapper) (Ubuntu 18.04)
31 | * oas: [OpenVPN Access Server](https://openvpn.net/faq/what-is-openvpn-access-server/) for testing / experimentation (Ubuntu 18.04)
32 | * msibuilder: build package OpenVPN and package it as MSI using the [WiX toolset](http://wixtoolset.org) (Windows Server 2019)
33 | 
34 | # Building and packaging OpenVPN on Windows for Windows
35 | 
36 | Windows MSI packages can be built with the "msibuilder" VM. After provisioning
37 | you will find the build base directory under C:\\Users\\Vagrant\\build. To
38 | build just follow the instructions outlined in
39 | `openvpn-build/windows-msi/README.rst <https://github.com/OpenVPN/openvpn-build/blob/master/windows-msi/README.rst>`_
40 | 
41 | # Logging into the Windows VMs from Linux
42 | 
43 | If you're running Vagrant on Linux you're almost certainly using
44 | [FreeRDP](https://www.freerdp.com/). That means you have to accept the Windows
45 | VM's host key before attempting to "vagrant rdp" into it:
46 | 
47 |     $ xfreerdp /v:127.0.0.1:3389
48 | 
49 | Once the host key is in FreeRDP's cache you can connect to the instance. For example:
50 | 
51 |     $ vagrant rdp msibuilder
52 | 
53 | # Buildbot
54 | 
55 | Everything buildbot-related is now in its own repository:
56 | 
57 | * https://github.com/OpenVPN/openvpn-buildbot
58 | 
59 | # TODO
60 | 
61 | * Merge [testing: Add vagrant based integration tests](https://github.com/OpenVPN/openvpn/pull/45) into this repository
62 | 


--------------------------------------------------------------------------------
/Vagrantfile:
--------------------------------------------------------------------------------
  1 | # -*- mode: ruby -*-
  2 | # vi: set ft=ruby :
  3 | 
  4 | Vagrant.configure("2") do |config|
  5 | 
  6 |   config.vagrant.plugins = [ "vagrant-vbguest" ]
  7 | 
  8 |   config.vm.define "centos-7" do |box|
  9 |     box.vm.box = "centos/7"
 10 |     box.vm.box_version = "1710.01"
 11 |     box.vm.hostname = "centos-7.local"
 12 |     box.vm.network "private_network", ip: "192.168.58.101"
 13 |     box.vm.synced_folder ".", "/vagrant", type: "virtualbox"
 14 |     box.vm.provision "shell", path: "centos-7.sh"
 15 |     box.vm.provision "shell", path: "install-mbedtls.sh"
 16 |     box.vm.provider "virtualbox" do |vb|
 17 |       vb.gui = false
 18 |       vb.memory = 768
 19 |     end
 20 |   end
 21 | 
 22 |   config.vm.define "debian-9" do |box|
 23 |     box.vm.box = "debian/stretch64"
 24 |     box.vm.box_version = "9.2.0"
 25 |     box.vm.hostname = "debian-9.local"
 26 |     box.vm.network "private_network", ip: "192.168.58.102"
 27 |     box.vm.synced_folder ".", "/vagrant", type: "virtualbox"
 28 |     box.vm.provision "shell", path: "debian-9.sh"
 29 |     box.vm.provider "virtualbox" do |vb|
 30 |       vb.gui = false
 31 |       vb.memory = 768
 32 |     end
 33 |   end
 34 | 
 35 |   config.vm.define "freebsd-11" do |box|
 36 |     box.ssh.shell = "sh"
 37 |     box.vm.box = "openvpn/FreeBSD-11.1p3"
 38 |     box.vm.box_version = "1"
 39 |     box.vm.hostname = "freebsd-11.local"
 40 |     box.vm.network "private_network", ip: "192.168.58.103"
 41 |     box.vm.synced_folder ".", "/vagrant", type: "rsync"
 42 |     box.vm.provision "shell", path: "freebsd-11.sh"
 43 |     box.vm.provider "virtualbox" do |vb|
 44 |       vb.gui = false
 45 |       vb.memory = 768
 46 |       vb.customize ["modifyvm", :id, "--usb", "on"]
 47 |       vb.customize ["modifyvm", :id, "--usbehci", "off"]
 48 |     end
 49 |   end
 50 | 
 51 |   config.vm.define "openbsd-6" do |box|
 52 |     box.vm.box = "generic/openbsd6"
 53 |     box.vm.box_version = "1.2.38"
 54 |     box.vm.hostname = "openbsd-6.local"
 55 |     box.vm.network "private_network", ip: "192.168.58.104"
 56 |     box.vm.provision "shell", path: "openbsd-6.sh"
 57 |     box.vm.provider "virtualbox" do |vb|
 58 |       vb.gui = false
 59 |       vb.memory = 768
 60 |     end
 61 |   end
 62 | 
 63 |   config.vm.define "solaris-113" do |box|
 64 |     # we use a local box for licensing reasons, see recipes/Solaris113.txt
 65 |     box.vm.box = "solaris113-v1.box"
 66 |     #box.vm.box_version = "1"
 67 |     box.vm.hostname = "solaris113.local"
 68 |     box.vm.network "private_network", ip: "192.168.58.105"
 69 |     box.vm.provision "shell", path: "solaris-113.sh"
 70 |     box.vm.provider "virtualbox" do |vb|
 71 |       vb.gui = false
 72 |       vb.memory = 1024
 73 |     end
 74 |   end
 75 | 
 76 |   config.vm.define "ubuntu-1604" do |box|
 77 |     box.vm.box = "ubuntu/xenial64"
 78 |     box.vm.box_version = "20171118.0.0"
 79 |     box.vm.hostname = "ubuntu-1604.local"
 80 |     box.vm.network "private_network", ip: "192.168.58.106"
 81 |     box.vm.synced_folder ".", "/vagrant", type: "virtualbox"
 82 |     box.vm.provision "shell", path: "ubuntu-1604.sh"
 83 |     box.vm.provision "shell", path: "install-mbedtls.sh"
 84 |     box.vm.provider "virtualbox" do |vb|
 85 |       vb.gui = false
 86 |       vb.memory = 768
 87 |     end
 88 |   end
 89 | 
 90 |   config.vm.define "netbsd-7" do |box|
 91 |     box.vm.box = "netbsd/NetBSD-7.0"
 92 |     box.vm.box_version = "1.0.0"
 93 |     box.vm.hostname = "netbsd-7.local"
 94 |     box.vm.network "private_network", ip: "192.168.58.108"
 95 |     box.vm.provision "shell", path: "netbsd-7.sh"
 96 |     box.vm.synced_folder ".", "/vagrant", disabled: true
 97 |     box.vm.provider "virtualbox" do |vb|
 98 |       vb.gui = false
 99 |       vb.memory = 768
100 |     end
101 |   end
102 | 
103 |   config.vm.define "ubuntu-1804" do |box|
104 |     box.vm.box = "ubuntu/bionic64"
105 |     box.vm.box_version = "20180823.0.0"
106 |     box.vm.hostname = "ubuntu-1804.local"
107 |     box.vm.network "private_network", ip: "192.168.58.109"
108 |     box.vm.provision "shell", path: "ubuntu-1604.sh"
109 |     box.vm.provision "shell", path: "install-mbedtls.sh"
110 |     box.vm.provider "virtualbox" do |vb|
111 |       vb.gui = false
112 |       vb.memory = 768
113 |     end
114 |   end
115 | 
116 |   config.vm.define "openvpn-build-bionic" do |box|
117 |     box.vm.box = "ubuntu/bionic64"
118 |     box.vm.box_version = "20180823.0.0"
119 |     box.vm.hostname = "openvpn-build-bionic.local"
120 |     box.vm.network "private_network", ip: "192.168.58.110"
121 |     box.vm.synced_folder ".", "/vagrant", type: "virtualbox"
122 |     box.vm.provision "shell" do |s|
123 |       s.path = "setup-generic-buildsystem.sh"
124 |       s.args = ["-f"]
125 |     end
126 |     box.vm.provision "shell", path: "setup-samba-share.sh"
127 |     box.vm.provider "virtualbox" do |vb|
128 |       vb.gui = false
129 |       vb.memory = 1024
130 |     end
131 |   end
132 | 
133 |   config.vm.define "sbuild" do |box|
134 |     box.vm.box = "ubuntu/bionic64"
135 |     box.vm.box_version = "20180823.0.0"
136 |     box.vm.hostname = "sbuild.local"
137 |     box.vm.network "private_network", ip: "192.168.58.111"
138 |     box.vm.provision "shell", path: "sbuild.sh"
139 |     box.vm.provider "virtualbox" do |vb|
140 |       vb.gui = false
141 |       vb.memory = 1024
142 |     end
143 |   end
144 | 
145 |   config.vm.define "oas" do |box|
146 |     box.vm.box = "ubuntu/bionic64"
147 |     box.vm.box_version = "20191030.0.0"
148 |     box.vm.hostname = "oas.local"
149 |     box.vm.network "private_network", ip: "192.168.58.112"
150 |     box.vm.provision "shell", path: "oas.sh"
151 |     box.vm.provider "virtualbox" do |vb|
152 |       vb.gui = false
153 |       vb.memory = 2048
154 |     end
155 |   end
156 | 
157 |   config.vm.define "msibuilder" do |box|
158 |     box.vm.box = "gusztavvargadr/windows-server"
159 |     box.vm.box_version = "1809.0.2208"
160 |     box.winrm.max_tries = 90
161 |     box.winrm.retry_delay = 2
162 |     box.winrm.timeout = 360
163 |     box.vm.boot_timeout = 360
164 |     box.vm.hostname = "msibuilder"
165 |     box.vm.network "private_network", ip: "192.168.58.113"
166 |     box.vm.synced_folder ".", "/vagrant"
167 |     box.vm.provision "shell", path: "scripts/evaltimer.ps1"
168 |     box.vm.provision "shell", path: "scripts/base.ps1"
169 |     box.vm.provision "shell", path: "scripts/git.ps1"
170 |     box.vm.provision "shell", path: "scripts/cmake.ps1"
171 |     box.vm.provision "shell" do |s|
172 |       s.path = "scripts/msibuilder.ps1"
173 |       s.args = ["-workdir", "C:\\Users\\vagrant\\Downloads"]
174 |     end
175 |     box.vm.provision "shell", path: "scripts/python.ps1"
176 |     box.vm.provision "shell", path: "scripts/pip.ps1"
177 |     box.vm.provision "shell", path: "scripts/vsbuildtools.ps1"
178 |     box.vm.provision "shell" do |s|
179 |       s.path = "scripts/vcpkg.ps1"
180 |       s.args = ["-workdir", "C:\\users\\vagrant\\buildbot\\windows-server-2019-static-msbuild"]
181 |     end
182 |     box.vm.provision "shell", path: "scripts/reboot.ps1"
183 |     box.vm.provision "shell" do |s|
184 |       s.path = "scripts/build-deps.ps1"
185 |       s.args = ["-workdir", "C:\\users\\vagrant\\buildbot\\windows-server-2019-static-msbuild",
186 |                 "-openvpn_ref", "master",
187 |                 "-openvpn_build_ref", "master",
188 |                 "-openvpn_gui", "master",
189 |                 "-openssl", "openssl3"]
190 |     end
191 |     box.vm.provider "virtualbox" do |vb|
192 |       vb.gui = false
193 |       vb.cpus = 2
194 |       vb.memory = 3072
195 |     end
196 |     box.vm.provider "hyperv" do |hv, override|
197 |       hv.maxmemory = 3072
198 |       hv.memory = 3072
199 |     end
200 |   end
201 | 
202 |   config.vm.define "msibuilder25" do |box|
203 |     box.vm.box = "gusztavvargadr/windows-server"
204 |     box.vm.box_version = "1809.0.2208"
205 |     box.winrm.max_tries = 90
206 |     box.winrm.retry_delay = 2
207 |     box.winrm.timeout = 360
208 |     box.vm.boot_timeout = 360
209 |     box.vm.hostname = "msibuilder25"
210 |     box.vm.network "private_network", ip: "192.168.58.114"
211 |     box.vm.synced_folder ".", "/vagrant"
212 |     box.vm.provision "shell", path: "scripts/evaltimer.ps1"
213 |     box.vm.provision "shell", path: "scripts/base.ps1"
214 |     box.vm.provision "shell", path: "scripts/git.ps1"
215 |     box.vm.provision "shell", path: "scripts/cmake.ps1"
216 |     box.vm.provision "shell" do |s|
217 |       s.path = "scripts/msibuilder.ps1"
218 |       s.args = ["-workdir", "C:\\Users\\vagrant\\Downloads"]
219 |     end
220 |     box.vm.provision "shell", path: "scripts/python.ps1"
221 |     box.vm.provision "shell", path: "scripts/pip.ps1"
222 |     box.vm.provision "shell", path: "scripts/vsbuildtools.ps1"
223 |     box.vm.provision "shell" do |s|
224 |       s.path = "scripts/vcpkg.ps1"
225 |       s.args = ["-workdir", "C:\\users\\vagrant\\buildbot\\windows-server-2019-static-msbuild"]
226 |     end
227 |     box.vm.provision "shell", path: "scripts/reboot.ps1"
228 |     box.vm.provision "shell" do |s|
229 |       s.path = "scripts/build-deps.ps1"
230 |       s.args = ["-workdir", "C:\\users\\vagrant\\buildbot\\windows-server-2019-static-msbuild",
231 |                 "-openvpn_ref", "release/2.5",
232 |                 "-openvpn_build_ref", "release/2.5",
233 |                 "-openvpn_gui", "master",
234 |                 "-openssl", "openssl"]
235 |     end
236 |     box.vm.provider "virtualbox" do |vb|
237 |       vb.gui = false
238 |       vb.cpus = 2
239 |       vb.memory = 3072
240 |     end
241 |     box.vm.provider "hyperv" do |hv, override|
242 |       hv.maxmemory = 3072
243 |       hv.memory = 3072
244 |     end
245 |   end
246 | end
247 | 


--------------------------------------------------------------------------------
/buildbot.tac:
--------------------------------------------------------------------------------
 1 | import fnmatch
 2 | import os
 3 | import sys
 4 | 
 5 | from twisted.application import service
 6 | from twisted.python.log import FileLogObserver
 7 | from twisted.python.log import ILogObserver
 8 | 
 9 | from buildbot_worker.bot import Worker
10 | 
11 | # setup worker
12 | basedir = os.environ.get("BUILDBOT_BASEDIR",
13 |     os.path.abspath(os.path.dirname(__file__)))
14 | application = service.Application('buildbot-worker')
15 | 
16 | 
17 | application.setComponent(ILogObserver, FileLogObserver(sys.stdout).emit)
18 | # and worker on the same process!
19 | buildmaster_host = os.environ.get("BUILDMASTER", 'localhost')
20 | port = int(os.environ.get("BUILDMASTER_PORT", 9989))
21 | workername = os.environ.get("WORKERNAME", 'docker')
22 | passwd = os.environ.get("WORKERPASS")
23 | 
24 | # delete the password from the environ so that it is not leaked in the log
25 | blacklist = os.environ.get("WORKER_ENVIRONMENT_BLACKLIST", "WORKERPASS").split()
26 | for name in list(os.environ.keys()):
27 |     for toremove in blacklist:
28 |         if fnmatch.fnmatch(name, toremove):
29 |             del os.environ[name]
30 | 
31 | keepalive = 600
32 | umask = None
33 | maxdelay = 300
34 | allow_shutdown = None
35 | maxretries = 10
36 | delete_leftover_dirs = False
37 | 
38 | s = Worker(buildmaster_host, port, workername, passwd, basedir,
39 |            keepalive, umask=umask, maxdelay=maxdelay,
40 |            allow_shutdown=allow_shutdown, maxRetries=maxretries,
41 |            delete_leftover_dirs=delete_leftover_dirs)
42 | s.setServiceParent(application)
43 | 


--------------------------------------------------------------------------------
/centos-7.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | echo "Preparing OpenVPN 2 build environment"
 4 | echo
 5 | yum -y install lzo-devel openssl-devel pam-devel pkcs11-helper-devel gnutls-devel autoconf libtool make cmake git net-tools
 6 | echo
 7 | echo "Preparing OpenVPN 3 build enviroment"
 8 | echo
 9 | yum install -y epel-release
10 | yum install -y mbedtls-devel glib2-devel jsoncpp-devel libuuid-devel lz4-devel gcc-c++ git autoconf automake make pkgconfig fping
11 | 
12 | 


--------------------------------------------------------------------------------
/debian-9.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | echo "Updating package cache"
 4 | apt-get update
 5 | echo
 6 | echo "Preparing OpenVPN 2 build environment"
 7 | echo
 8 | apt-get -y install liblzo2-dev libssl1.0-dev libpam-dev libpkcs11-helper1-dev libtool autoconf make cmake git fping net-tools liblz4-dev
 9 | echo
10 | echo "Preparing OpenVPN 3 build environment"
11 | apt-get -y install pkg-config autoconf libglib2.0-dev libjsoncpp-dev uuid-dev libmbedtls-dev liblz4-dev build-essential
12 | 


--------------------------------------------------------------------------------
/freebsd-11.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | echo "Preparing OpenVPN build environment"
 4 | pkg update
 5 | pkg install --yes sudo automake autoconf fping git lzo2 liblz4 \
 6 | 		libtool mbedtls cmake
 7 | 
 8 | # make sure tap driver is loaded (tun automatically is)
 9 | kldload if_tap
10 | if grep if_tap /boot/loader.conf
11 | then
12 |     echo "loader.conf already has if_tap"
13 | else
14 |     echo 'if_tap_load="YES"' >>/boot/loader.conf
15 | fi
16 | 
17 | # FreeBSD puts lzo into /usr/local/{include,lib} where our configure 
18 | # will not find it -> make symlinks
19 | echo "creating lzo2 convenience symlinks..."
20 | cd /usr/include && ln -s ../local/include/lzo .
21 | cd /usr/lib && ln -s ../local/lib/liblzo2.* .
22 | 
23 | # same thing for mbedtls...
24 | echo "creating mbedTLS convenience symlinks..."
25 | cd /usr/include && ln -s ../local/include/mbedtls .
26 | cd /usr/lib && ln -s ../local/lib/libmbed* .
27 | 
28 | 
29 | exit 0
30 | 


--------------------------------------------------------------------------------
/install-mbedtls.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | VERSION="2.6.0"
 4 | BASENAME="mbedtls-$VERSION"
 5 | TARBALL="$BASENAME-gpl.tgz"
 6 | 
 7 | curl -O https://tls.mbed.org/download/$TARBALL
 8 | tar -zxf $TARBALL
 9 | cd $BASENAME
10 | make
11 | make install
12 | 


--------------------------------------------------------------------------------
/netbsd-7.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | echo "Preparing OpenVPN build environment"
 4 | echo "installing packages... this will take a while if your network is slow"
 5 | 
 6 | # https://www.netbsd.org/docs/pkgsrc/using.html
 7 | PATH="/usr/pkg/sbin:$PATH"
 8 | PKG_PATH="ftp://ftp.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/7.0.2/All/"
 9 | export PATH PKG_PATH
10 | 
11 | # "-U" is needed to get cmake (because libarchive needs to be updated)
12 | pkg_add -U automake autoconf libtool fping git lzo lz4 mbedtls cmake
13 | 
14 | # the fping package is stupid and is missing the "fping6" symlink
15 | echo "fixing missing fping6 symlink..."
16 | cd /usr/pkg/sbin && ln -s fping fping6
17 | 
18 | # NetBSD puts lzo into /usr/pkg/{include,lib} where our configure
19 | # will not find it -> make symlinks
20 | echo "creating lzo2 convenience symlinks..."
21 | cd /usr/include && ln -s ../pkg/include/lzo .
22 | cd /usr/lib && ln -s ../pkg/lib/liblzo2.* .
23 | 
24 | # same thing for mbedtls...
25 | echo "creating mbedTLS convenience symlinks..."
26 | cd /usr/include && ln -s ../pkg/include/mbedtls .
27 | cd /usr/lib && ln -s ../pkg/lib/libmbed* .
28 | 
29 | exit 0
30 | 


--------------------------------------------------------------------------------
/oas.sh:
--------------------------------------------------------------------------------
1 | #!/bin/sh
2 | 
3 | echo "Setting up OpenVPN Access Server"
4 | echo
5 | apt update && apt -y install ca-certificates wget net-tools
6 | wget -qO - https://as-repository.openvpn.net/as-repo-public.gpg | apt-key add -
7 | echo "deb http://as-repository.openvpn.net/as/debian bionic main">/etc/apt/sources.list.d/openvpn-as-repo.list
8 | apt update && apt -y install openvpn-as
9 | 


--------------------------------------------------------------------------------
/openbsd-6.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | echo "Preparing OpenVPN build environment"
 4 | pkg_add -I sudo-- git autoconf-2.69p2 automake-1.15.1 \
 5 | 		fping lzo2 lz4 libtool mbedtls cmake
 6 | 
 7 | # OpenBSD wants to be told which auto* version to run (can have multiple)
 8 | echo "setting up AUTO_* environment variables (/etc/profile)"
 9 | echo "export AUTOCONF_VERSION=2.69" >>/etc/profile
10 | echo "export AUTOMAKE_VERSION=1.15" >>/etc/profile
11 | 
12 | # OpenBSD puts lzo into /usr/local/{include,lib} where our configure 
13 | # will not find it -> make symlinks
14 | echo "creating lzo2 convenience symlinks..."
15 | cd /usr/include && ln -s ../local/include/lzo .
16 | cd /usr/lib && ln -s ../local/lib/liblzo2.* .
17 | 
18 | # same thing for mbedtls...
19 | echo "creating mbedTLS convenience symlinks..."
20 | cd /usr/include && ln -s ../local/include/mbedtls .
21 | cd /usr/lib && ln -s ../local/lib/libmbed* .
22 | 
23 | echo "done!"
24 | exit 0
25 | 


--------------------------------------------------------------------------------
/recipes/Solaris113.txt:
--------------------------------------------------------------------------------
 1 | Build a (non-shared) Vagrant Box for Solaris 11.3
 2 | -----------------------------------------------
 3 | 
 4 | - download the "Oracle Solaris 11.3 VM Template for Oracle VM VirtualBox"
 5 |   from
 6 | 
 7 |   http://www.oracle.com/technetwork/server-storage/solaris11/downloads/vm-templates-2245495.html
 8 |   (free license, but only for "developing and testing your software")
 9 | 
10 |   -> sol-11_3-vbox.ova, about 1.8 Gbytes
11 | 
12 | - import the ova into VirtualBox
13 | 
14 | - work the installation menu (hostname, interface, timezone, language, ...)
15 | - root password (vagrant)
16 | - "create a user account" (vagrant/vagrant1)
17 |    ["must contain one special character"]
18 | 
19 | - machine will work a while, reboot, then come up with a gui login
20 | 
21 | - vagrant has sudo rights, but no "no password" ->
22 | 
23 |      sudo bash
24 |      echo "vagrant ALL=(ALL) NOPASSWD: ALL" >>sudoers
25 | 
26 | - install the "known insecure" key for vagrant
27 | 
28 |      $ cd
29 |      $ mkdir .ssh
30 |      $ wget --no-check-certificate -O .ssh/authorized_keys \
31 |        https://raw.githubusercontent.com/hashicorp/vagrant/master/keys/vagrant.pub
32 | 
33 | - no packages yet (nothing, no cc, auto*, git)
34 | 
35 |      $ sudo pkg install gcc autoconf automake libtool git  
36 | 
37 |      non-existing: lzo2 lz4 mbedtls fping
38 | 
39 | - get 3rd party packages:
40 | 
41 |      https://www.opencsw.org/package/fping/
42 |      https://www.opencsw.org/packages/CSWliblzo-dev   [??]
43 | 
44 |      $ sudo pkgadd -d http://get.opencsw.org/now
45 |      $ sudo /opt/csw/bin/pkgutil -U
46 |      $ sudo /opt/csw/bin/pkgutil -y -i liblzo_dev fping
47 | 
48 |      (/opt/csw/include/lzo, /opt/csw/lib/liblzo2*)
49 | 
50 | - base system updates
51 | 
52 |     $ sudo pkg install entire
53 | 
54 |   (do not ask...)
55 | 
56 | 
57 | - still missing at this point:
58 |        - lz4 (use bundled)
59 |        - mbedtls (compile on demand)
60 |        - tun/tap driver!
61 | 
62 | - shutdown -> pass to vagrant
63 | 
64 |      sudo init 0
65 |    
66 | 
67 | - export as vagrant box
68 | 
69 |    vagrant package --base sol-11_3-vbox --output solaris113-v1.box
70 |    (15+ minutes, the vdisk needs about 2.3Gbyte of space)
71 | 
72 |     -rw-r--r-- 1 gert users 2236915305 Nov 12 16:45 solaris113-v1.box
73 | 
74 | - possibly clean up $HOME/.vagrant.d/tmp/vagrant-package-<time>-<rnd>
75 |   afterwards, as vagrat is a bit sloppy about this... and leaves 2+G
76 |   behind here...
77 | 
78 | 
79 | - if you need to redo this, and have run "vagrant up solaris-113"
80 |   in the mean time, clear the cached copy of the last vagrant run from 
81 |     $HOME/.vagrant.d/boxes/<name_in_Vagrantfile>
82 |   (otherwise it will just ignore your new .box file)
83 | 
84 | 


--------------------------------------------------------------------------------
/sbuild.sh:
--------------------------------------------------------------------------------
 1 | echo "Updating package cache"
 2 | apt-get update
 3 | echo
 4 | echo "Installing sbuild_wrapper dependencies"
 5 | apt-get -y install sbuild git quilt debhelper
 6 | echo
 7 | echo "Cloning sbuild_wrapper if not present"
 8 | test -d sbuild_wrapper || git clone https://github.com/mattock/sbuild_wrapper.git
 9 | echo
10 | echo "Setting up sbuild_wrapper and schroots"
11 | cd sbuild_wrapper
12 | scripts/setup.sh
13 | scripts/setup_chroots.sh
14 | scripts/install-build-deps.sh
15 | scripts/update-all.sh
16 | scripts/prepare-all.sh
17 | 


--------------------------------------------------------------------------------
/scripts/base.ps1:
--------------------------------------------------------------------------------
 1 | # Preferred language and keyboard layout
 2 | $lang = "fi-FI"
 3 | 
 4 | Write-Host "Setting keyboard layouts"
 5 | $languages = New-WinUserLanguageList -Language $lang
 6 | $languages.Add($lang)
 7 | Set-WinUserLanguageList $languages -Force
 8 | 
 9 | if (-Not (Test-Path C:\ProgramData\chocolatey\bin\choco.exe)) {
10 |     Write-Host "Installing Chocolatey"
11 |     Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
12 | }
13 | 


--------------------------------------------------------------------------------
/scripts/build-deps.ps1:
--------------------------------------------------------------------------------
 1 | param ([string] $workdir,
 2 |        [string] $openvpn_ref = "master",
 3 |        [string] $openvpn_build_ref = "master",
 4 |        [string] $openvpn_gui_ref = "master",
 5 |        [string] $openssl = "openssl3",
 6 |        [switch] $debug)
 7 | 
 8 | if ($debug -eq $true) {
 9 |   . $PSScriptRoot\ps_support.ps1
10 | }
11 | 
12 | Write-Host "Setting up openvpn build dependencies with vcpkg"
13 | 
14 | if (-Not (Test-Path $workdir)) {
15 |   New-Item -Type directory $workdir
16 |   if ($debug -eq $true) { CheckLastExitCode }
17 | }
18 | 
19 | Add-MpPreference -ExclusionPath $workdir
20 | if ($debug -eq $true) { CheckLastExitCode }
21 | 
22 | if (-Not (Test-Path "${workdir}\openvpn")) {
23 |   cd $workdir
24 |   & git.exe clone -b $openvpn_ref https://github.com/OpenVPN/openvpn.git "${workdir}\openvpn"
25 |   if ($debug -eq $true) { CheckLastExitCode }
26 | }
27 | 
28 | if (-Not (Test-Path "${workdir}\openvpn-build")) {
29 |   & git.exe clone -b $openvpn_build_ref https://github.com/OpenVPN/openvpn-build.git "${workdir}\openvpn-build"
30 |   if ($debug -eq $true) { CheckLastExitCode }
31 | }
32 | 
33 | if (-Not (Test-Path "${workdir}\openvpn-gui")) {
34 |   & git.exe clone -b $openvpn_gui_ref https://github.com/OpenVPN/openvpn-gui.git "${workdir}\openvpn-gui"
35 |   if ($debug -eq $true) { CheckLastExitCode }
36 | }
37 | 
38 | cd "${workdir}\vcpkg"
39 | 
40 | # Install OpenVPN build dependencies
41 | $architectures = @('x64','x86','arm64')
42 | ForEach ($arch in $architectures) {
43 |     # openssl3:${arch}-windows is required for openvpn-gui builds
44 |     & .\vcpkg.exe `
45 |         --overlay-ports "${workdir}\openvpn\contrib\vcpkg-ports" `
46 |         --overlay-ports "${workdir}\openvpn-build\windows-msi\vcpkg-ports" `
47 | 	--overlay-triplets "${workdir}\openvpn\contrib\vcpkg-triplets" `
48 | 	install --triplet "${arch}-windows-ovpn" lz4 lzo $openssl pkcs11-helper tap-windows6 "${openssl}:${arch}-windows"
49 | 
50 |     & .\vcpkg.exe `
51 |         --overlay-ports "${workdir}\openvpn\contrib\vcpkg-ports" `
52 |         --overlay-ports "${workdir}\openvpn-build\windows-msi\vcpkg-ports" `
53 | 	--overlay-triplets "${workdir}\openvpn\contrib\vcpkg-triplets" `
54 |         upgrade --no-dry-run
55 | 
56 |     & .\vcpkg.exe integrate install
57 | }
58 | 
59 | # Ensure that we can convert the man page from rst to html
60 | & pip.exe --no-cache-dir install docutils
61 | 


--------------------------------------------------------------------------------
/scripts/buildbot.ps1:
--------------------------------------------------------------------------------
 1 | param ([string] $openvpnvagrant,
 2 |        [string] $workdir,
 3 |        [string] $buildmaster,
 4 |        [string] $workername,
 5 |        [string] $workerpass,
 6 |        [string] $user,
 7 |        [string] $password)
 8 | 
 9 | Write-Host "Setting up buildbot"
10 | 
11 | & pip.exe --no-cache-dir install twisted[tls]
12 | & pip.exe --no-cache-dir install pywin32
13 | & pip.exe --no-cache-dir install buildbot_worker==3.1.0
14 | if (-Not (Test-Path $workdir)) {
15 |   New-item -Type directory $workdir
16 | }
17 | Copy-Item "${openvpnvagrant}\buildbot-host\buildbot.tac" $workdir
18 | 
19 | Write-Host "Installing vswhere.exe to used by build steps"
20 | & choco.exe install -y vswhere
21 | 
22 | Write-Host "Configuring buildbot to launch at boot time"
23 | & choco.exe install -y nssm
24 | & nssm.exe install buildbot-worker C:\Python310\Scripts\twistd.exe
25 | & nssm.exe set buildbot-worker AppParameters "--nodaemon --python=buildbot.tac"
26 | & nssm.exe set buildbot-worker AppDirectory $workdir
27 | & nssm.exe set buildbot-worker AppExit Default Restart
28 | & nssm.exe set buildbot-worker AppEnvironmentExtra :WORKERNAME=$workername
29 | & nssm.exe set buildbot-worker AppEnvironmentExtra +WORKERPASS=$workerpass
30 | & nssm.exe set buildbot-worker AppEnvironmentExtra +BUILDMASTER=$buildmaster
31 | & nssm.exe set buildbot-worker AppStdout "${workdir}/twistd.log"
32 | & nssm.exe set buildbot-worker AppStderr "${workdir}/twistd.log"
33 | & nssm.exe set buildbot-worker AppRotateFiles 1
34 | & nssm.exe set buildbot-worker AppRotateBytes 1073741824
35 | & nssm.exe set buildbot-worker DisplayName buildbot-worker
36 | & nssm.exe set buildbot-worker ObjectName ".\${user}" "${password}"
37 | & nssm.exe set buildbot-worker Start SERVICE_AUTO_START
38 | & nssm.exe set buildbot-worker Type SERVICE_WIN32_OWN_PROCESS
39 | 
40 | Start-Service buildbot-worker
41 | 


--------------------------------------------------------------------------------
/scripts/cmake.ps1:
--------------------------------------------------------------------------------
1 | Write-Host "Installing cmake"
2 | & choco.exe install -y cmake --installargs 'ADD_CMAKE_TO_PATH=System'
3 | 


--------------------------------------------------------------------------------
/scripts/evaltimer.ps1:
--------------------------------------------------------------------------------
 1 | # Reset eveluation timer if necessary. This can be repeated six times and each
 2 | # gives 180 extra days of evaluation use.
 3 | if ((Get-Ciminstance -Class SoftwareLicensingProduct).LicenseStatus -ne 1) {
 4 |     Write-Host "Resetting license evaluation timer"
 5 |     & slmgr.vbs //B -rearm
 6 |     $need_restart = $true
 7 | }
 8 | 
 9 | if ($need_restart) {
10 |     Write-Host "Rebooting to finish the license evaluation timer reset"
11 |     # We need to schedule the restart or Vagrant will loose the WinRM
12 |     # connection and destroy the instance as a result.
13 |     shutdown /r /t 10
14 | }
15 | 


--------------------------------------------------------------------------------
/scripts/git.ps1:
--------------------------------------------------------------------------------
1 | Write-Host "Installing git"
2 | & choco.exe install -y git --params "/GitAndUnixToolsOnPath"
3 | 


--------------------------------------------------------------------------------
/scripts/msibuilder.ps1:
--------------------------------------------------------------------------------
 1 | param ([string] $workdir)
 2 | 
 3 | Write-Host "Installing dependencies for building MSI packages"
 4 | 
 5 | # Chocolatey package bundles WiX version too old for building ARM64 MSIs.
 6 | #& choco.exe install -y wixtoolset
 7 | 
 8 | Invoke-WebRequest -Uri https://wixtoolset.org/downloads/v3.14.0.4118/wix314.exe -Outfile "${workdir}/wix314.exe"
 9 | & "${workdir}/wix314.exe" /q
10 | 


--------------------------------------------------------------------------------
/scripts/pip.ps1:
--------------------------------------------------------------------------------
1 | Write-Host "Setting up pip"
2 | & python.exe -m ensurepip
3 | & python.exe -m pip install --upgrade pip
4 | 


--------------------------------------------------------------------------------
/scripts/ps_support.ps1:
--------------------------------------------------------------------------------
 1 | Set-StrictMode -Version Latest
 2 | Set-PSDebug -Trace 2
 3 | function CheckLastExitCode {
 4 |     param ([int[]]$SuccessCodes = @(0))
 5 | 
 6 |     if (!$?) {
 7 |         Write-Host "Last CMD failed" -ForegroundColor Red
 8 |         exit 1
 9 |     }
10 | 
11 |     if ((Test-Path variable:\lastExitCode) `
12 |       -and ($SuccessCodes -notcontains $lastExitCode)) {
13 |         Write-Host "EXE RETURNED EXIT CODE $lastExitCode" -ForegroundColor Red
14 |         exit $lastExitCode
15 |     }
16 | }
17 | 


--------------------------------------------------------------------------------
/scripts/python.ps1:
--------------------------------------------------------------------------------
1 | Write-Host "Installing python"
2 | & choco.exe install -y python
3 | 


--------------------------------------------------------------------------------
/scripts/reboot.ps1:
--------------------------------------------------------------------------------
1 | Write-Host "Rebooting to finish Visual Studio 2019 build tools installation"
2 | shutdown /r /t 10
3 | 


--------------------------------------------------------------------------------
/scripts/vcpkg.ps1:
--------------------------------------------------------------------------------
 1 | param ([string] $workdir,
 2 |        [switch] $debug)
 3 | 
 4 | if ($debug -eq $true) {
 5 |   . $PSScriptRoot\ps_support.ps1
 6 | }
 7 | 
 8 | if (-Not (Test-Path $workdir)) {
 9 |   New-Item -Type directory $workdir
10 |   if ($debug -eq $true) { CheckLastExitCode }
11 | }
12 | 
13 | Write-Host "Installing and setting up vcpkg"
14 | 
15 | if (-Not (Test-Path "${workdir}\vcpkg")) {
16 |   & git.exe clone https://github.com/microsoft/vcpkg.git "${workdir}\vcpkg"
17 |   if ($debug -eq $true) { CheckLastExitCode }
18 | }
19 | 
20 | # Bootstrap vcpkg
21 | & "${workdir}\vcpkg\bootstrap-vcpkg.bat"
22 | 
23 | # Update ports
24 | cd "${workdir}\vcpkg"
25 | & git.exe pull
26 | if ($debug -eq $true) { CheckLastExitCode }
27 | 
28 | # Ensure that OpenVPN build can find the dependencies
29 | & "${workdir}\vcpkg\vcpkg.exe" integrate install
30 | 


--------------------------------------------------------------------------------
/scripts/vsbuildtools.ps1:
--------------------------------------------------------------------------------
1 | Write-Host "Installing Visual Studio build tools"
2 | & choco.exe install -y visualstudio2019buildtools
3 | & choco.exe install -y visualstudio2019-workload-vctools --params "--add Microsoft.VisualStudio.Component.UWP.VC.ARM64 --add Microsoft.VisualStudio.Component.VC.Tools.ARM64 --add Microsoft.VisualStudio.Component.VC.ATL.Spectre --add Microsoft.VisualStudio.Component.VC.ATLMFC.Spectre --add Microsoft.VisualStudio.Component.VC.ATL.ARM64.Spectre --add Microsoft.VisualStudio.Component.VC.MFC.ARM64.Spectre --add Microsoft.VisualStudio.Component.VC.Runtimes.ARM64.Spectre --add Microsoft.VisualStudio.Component.VC.Runtimes.x86.x64.Spectre --quiet"
4 | 


--------------------------------------------------------------------------------
/setup-generic-buildsystem.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | #
 3 | # Script to setup the environment for openvpn-build/generic and openvpn-build/windows-nsis 
 4 | #
 5 | # This script works on Ubuntu 16.04 and 18.04.
 6 | 
 7 | CODENAME=`lsb_release -cs`
 8 | BUILD_DEPS="libpam0g-dev mingw-w64 man2html dos2unix nsis unzip wget curl autoconf libtool gcc-arm-linux-gnueabi python3-docutils"
 9 | OSSLSIGNCODE_URL="https://github.com/mtrojnar/osslsigncode.git"
10 | OPENVPN_BUILD_URL="https://github.com/OpenVPN/openvpn-build.git"
11 | MINGW_PACKAGES="mingw-w64 mingw-w64-common mingw-w64-i686-dev mingw-w64-x86-64-dev"
12 | NSIS_PACKAGES="nsis nsis-common nsis-doc nsis-pluginapi"
13 | GIT_PKG="git"
14 | OSSLSIGNCODE_DEPS="build-essential autoconf libtool libssl-dev python3-pkgconfig libcurl4-openssl-dev libgsf-1-dev"
15 | 
16 | check_if_root() {
17 |     if ! [ `whoami` = "root" ]; then
18 |             echo "ERROR: you must run this script as root!"
19 |             exit 1
20 |     fi
21 | }
22 | 
23 | install_packages() {
24 |     apt-get update
25 |     apt-get -y install $BUILD_DEPS $GIT_PKG $GNUEABI_PKG $MINGW_PACKAGES $NSIS_PACKAGES
26 | }
27 | 
28 | # osslsigncode is required for signing the binaries and installers
29 | install_osslsigncode() {
30 |     apt-get -y install $OSSLSIGNCODE_DEPS
31 |     git clone $OSSLSIGNCODE_URL
32 |     cd osslsigncode
33 |     ./autogen.sh
34 |     ./configure
35 |     make
36 |     make install
37 |     cd ..
38 | }
39 | 
40 | clone_openvpn_build() {
41 |     if ! [ -d "openvpn-build" ]; then
42 |         git clone $OPENVPN_BUILD_URL
43 |     fi
44 | }
45 | 
46 | # Main script
47 | check_if_root
48 | install_packages
49 | install_osslsigncode
50 | clone_openvpn_build
51 | 


--------------------------------------------------------------------------------
/setup-samba-share.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | #
 3 | # Setup a Samba share so that msibuilder VM can access build artefacts
 4 | 
 5 | share_dir="/home/vagrant/openvpn-build"
 6 | share_name="openvpn-build"
 7 | samba_user="vagrant"
 8 | samba_password="vagrant"
 9 | smb_conf_tmpl_src="/vagrant/smb.conf.tmpl"
10 | smb_conf_tmpl_dst="/etc/samba/smb.conf.tmpl"
11 | 
12 | echo "Installing Samba server and client"
13 | apt-get -y install samba smbclient
14 | 
15 | echo "Enabling Samba share"
16 | test -d $share_dir || mkdir -p $share_dir
17 | chmod 755 $share_dir
18 | mkdir -p /etc/samba
19 | touch /etc/samba/smb.conf
20 | test -f /etc/samba/smb.conf.dist || cp -v /etc/samba/smb.conf /etc/samba/smb.conf.dist
21 | cp -v $smb_conf_tmpl_src $smb_conf_tmpl_dst
22 | 
23 | # Sed will get confused about the slashes in the share directory path unless
24 | # we use something else as a separator
25 | sed -i "s+==SHARE_DIR==+$share_dir+g" $smb_conf_tmpl_dst
26 | sed -i "s/==SHARE_NAME==/$share_name/g" $smb_conf_tmpl_dst
27 | sed -i "s/==SAMBA_USER==/$samba_user/g" $smb_conf_tmpl_dst
28 | cmp $smb_conf_tmpl_dst /etc/samba/smb.conf
29 | if [ $? -ne 0 ]; then
30 |     mv $smb_conf_tmpl_dst /etc/samba/smb.conf
31 | else
32 |     rm -f $smb_conf_tmpl_dst
33 | fi
34 | 
35 | pdbedit -L|grep "^${samba_user}:" > /dev/null
36 | if [ $? -ne 0 ]; then
37 |     echo "Adding samba user \"${samba_user}\" with password \"${samba_password}\""
38 |     yes $samba_password|head -n 2|smbpasswd -a -s $samba_user
39 | fi
40 | 
41 | systemctl restart smbd
42 | 


--------------------------------------------------------------------------------
/smb.conf.tmpl:
--------------------------------------------------------------------------------
  1 | #
  2 | # Sample configuration file for the Samba suite for Debian GNU/Linux.
  3 | #
  4 | #
  5 | # This is the main Samba configuration file. You should read the
  6 | # smb.conf(5) manual page in order to understand the options listed
  7 | # here. Samba has a huge number of configurable options most of which 
  8 | # are not shown in this example
  9 | #
 10 | # Some options that are often worth tuning have been included as
 11 | # commented-out examples in this file.
 12 | #  - When such options are commented with ";", the proposed setting
 13 | #    differs from the default Samba behaviour
 14 | #  - When commented with "#", the proposed setting is the default
 15 | #    behaviour of Samba but the option is considered important
 16 | #    enough to be mentioned here
 17 | #
 18 | # NOTE: Whenever you modify this file you should run the command
 19 | # "testparm" to check that you have not made any basic syntactic 
 20 | # errors. 
 21 | 
 22 | #======================= Global Settings =======================
 23 | 
 24 | [global]
 25 | 
 26 | ## Browsing/Identification ###
 27 | 
 28 | # Change this to the workgroup/NT-domain name your Samba server will part of
 29 |    workgroup = vagrant
 30 | 
 31 | # server string is the equivalent of the NT Description field
 32 | 	server string = %h server (Samba, Ubuntu)
 33 | 
 34 | # Windows Internet Name Serving Support Section:
 35 | # WINS Support - Tells the NMBD component of Samba to enable its WINS Server
 36 | #   wins support = no
 37 | 
 38 | # WINS Server - Tells the NMBD components of Samba to be a WINS Client
 39 | # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
 40 | ;   wins server = w.x.y.z
 41 | 
 42 | # This will prevent nmbd to search for NetBIOS names through DNS.
 43 |    dns proxy = no
 44 | 
 45 | #### Networking ####
 46 | 
 47 | # The specific set of interfaces / networks to bind to
 48 | # This can be either the interface name or an IP address/netmask;
 49 | # interface names are normally preferred
 50 | ;   interfaces = 127.0.0.0/8 eth0
 51 | 
 52 | # Only bind to the named interfaces and/or networks; you must use the
 53 | # 'interfaces' option above to use this.
 54 | # It is recommended that you enable this feature if your Samba machine is
 55 | # not protected by a firewall or is a firewall itself.  However, this
 56 | # option cannot handle dynamic or non-broadcast interfaces correctly.
 57 | ;   bind interfaces only = yes
 58 | 
 59 | 
 60 | 
 61 | #### Debugging/Accounting ####
 62 | 
 63 | # This tells Samba to use a separate log file for each machine
 64 | # that connects
 65 |    log file = /var/log/samba/log.%m
 66 | 
 67 | # Cap the size of the individual log files (in KiB).
 68 |    max log size = 1000
 69 | 
 70 | # If you want Samba to only log through syslog then set the following
 71 | # parameter to 'yes'.
 72 | #   syslog only = no
 73 | 
 74 | # We want Samba to log a minimum amount of information to syslog. Everything
 75 | # should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
 76 | # through syslog you should set the following parameter to something higher.
 77 |    syslog = 0
 78 | 
 79 | # Do something sensible when Samba crashes: mail the admin a backtrace
 80 |    panic action = /usr/share/samba/panic-action %d
 81 | 
 82 | 
 83 | ####### Authentication #######
 84 | 
 85 | # Server role. Defines in which mode Samba will operate. Possible
 86 | # values are "standalone server", "member server", "classic primary
 87 | # domain controller", "classic backup domain controller", "active
 88 | # directory domain controller". 
 89 | #
 90 | # Most people will want "standalone sever" or "member server".
 91 | # Running as "active directory domain controller" will require first
 92 | # running "samba-tool domain provision" to wipe databases and create a
 93 | # new domain.
 94 |    server role = standalone server
 95 | 
 96 | # If you are using encrypted passwords, Samba will need to know what
 97 | # password database type you are using.  
 98 |    passdb backend = tdbsam
 99 | 
100 |    obey pam restrictions = yes
101 | 
102 | # This boolean parameter controls whether Samba attempts to sync the Unix
103 | # password with the SMB password when the encrypted SMB password in the
104 | # passdb is changed.
105 |    unix password sync = yes
106 | 
107 | # For Unix password sync to work on a Debian GNU/Linux system, the following
108 | # parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
109 | # sending the correct chat script for the passwd program in Debian Sarge).
110 |    passwd program = /usr/bin/passwd %u
111 |    passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
112 | 
113 | # This boolean controls whether PAM will be used for password changes
114 | # when requested by an SMB client instead of the program listed in
115 | # 'passwd program'. The default is 'no'.
116 |    pam password change = yes
117 | 
118 | # This option controls how unsuccessful authentication attempts are mapped
119 | # to anonymous connections
120 |    map to guest = bad user
121 | 
122 | ########## Domains ###########
123 | 
124 | #
125 | # The following settings only takes effect if 'server role = primary
126 | # classic domain controller', 'server role = backup domain controller'
127 | # or 'domain logons' is set 
128 | #
129 | 
130 | # It specifies the location of the user's
131 | # profile directory from the client point of view) The following
132 | # required a [profiles] share to be setup on the samba server (see
133 | # below)
134 | ;   logon path = \\%N\profiles\%U
135 | # Another common choice is storing the profile in the user's home directory
136 | # (this is Samba's default)
137 | #   logon path = \\%N\%U\profile
138 | 
139 | # The following setting only takes effect if 'domain logons' is set
140 | # It specifies the location of a user's home directory (from the client
141 | # point of view)
142 | ;   logon drive = H:
143 | #   logon home = \\%N\%U
144 | 
145 | # The following setting only takes effect if 'domain logons' is set
146 | # It specifies the script to run during logon. The script must be stored
147 | # in the [netlogon] share
148 | # NOTE: Must be store in 'DOS' file format convention
149 | ;   logon script = logon.cmd
150 | 
151 | # This allows Unix users to be created on the domain controller via the SAMR
152 | # RPC pipe.  The example command creates a user account with a disabled Unix
153 | # password; please adapt to your needs
154 | ; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
155 | 
156 | # This allows machine accounts to be created on the domain controller via the 
157 | # SAMR RPC pipe.  
158 | # The following assumes a "machines" group exists on the system
159 | ; add machine script  = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u
160 | 
161 | # This allows Unix groups to be created on the domain controller via the SAMR
162 | # RPC pipe.  
163 | ; add group script = /usr/sbin/addgroup --force-badname %g
164 | 
165 | ############ Misc ############
166 | 
167 | # Using the following line enables you to customise your configuration
168 | # on a per machine basis. The %m gets replaced with the netbios name
169 | # of the machine that is connecting
170 | ;   include = /home/samba/etc/smb.conf.%m
171 | 
172 | # Some defaults for winbind (make sure you're not using the ranges
173 | # for something else.)
174 | ;   idmap uid = 10000-20000
175 | ;   idmap gid = 10000-20000
176 | ;   template shell = /bin/bash
177 | 
178 | # Setup usershare options to enable non-root users to share folders
179 | # with the net usershare command.
180 | 
181 | # Maximum number of usershare. 0 (default) means that usershare is disabled.
182 | ;   usershare max shares = 100
183 | 
184 | # Allow users who've been granted usershare privileges to create
185 | # public shares, not just authenticated ones
186 |    usershare allow guests = yes
187 | 
188 | #======================= Share Definitions =======================
189 | 
190 | # Un-comment the following (and tweak the other settings below to suit)
191 | # to enable the default home directory shares. This will share each
192 | # user's home directory as \\server\username
193 | ;[homes]
194 | ;   comment = Home Directories
195 | ;   browseable = no
196 | 
197 | # By default, the home directories are exported read-only. Change the
198 | # next parameter to 'no' if you want to be able to write to them.
199 | ;   read only = yes
200 | 
201 | # File creation mask is set to 0700 for security reasons. If you want to
202 | # create files with group=rw permissions, set next parameter to 0775.
203 | ;   create mask = 0700
204 | 
205 | # Directory creation mask is set to 0700 for security reasons. If you want to
206 | # create dirs. with group=rw permissions, set next parameter to 0775.
207 | ;   directory mask = 0700
208 | 
209 | # By default, \\server\username shares can be connected to by anyone
210 | # with access to the samba server.
211 | # Un-comment the following parameter to make sure that only "username"
212 | # can connect to \\server\username
213 | # This might need tweaking when using external authentication schemes
214 | ;   valid users = %S
215 | 
216 | # Un-comment the following and create the netlogon directory for Domain Logons
217 | # (you need to configure Samba to act as a domain controller too.)
218 | ;[netlogon]
219 | ;   comment = Network Logon Service
220 | ;   path = /home/samba/netlogon
221 | ;   guest ok = yes
222 | ;   read only = yes
223 | 
224 | # Un-comment the following and create the profiles directory to store
225 | # users profiles (see the "logon path" option above)
226 | # (you need to configure Samba to act as a domain controller too.)
227 | # The path below should be writable by all users so that their
228 | # profile directory may be created the first time they log on
229 | ;[profiles]
230 | ;   comment = Users profiles
231 | ;   path = /home/samba/profiles
232 | ;   guest ok = no
233 | ;   browseable = no
234 | ;   create mask = 0600
235 | ;   directory mask = 0700
236 |  realm = vagrant.local
237 |  netbios name = SMB
238 |  security = user
239 |  vfs objects = acl_xattr
240 |  dedicated keytab file = /etc/krb5.keytab
241 |  map acl inherit = Yes
242 |  store dos attributes = Yes
243 |  map untrusted to domain = Yes
244 |  log level = 1
245 | 
246 | [printers]
247 |    comment = All Printers
248 |    browseable = no
249 |    path = /var/spool/samba
250 |    printable = yes
251 |    guest ok = no
252 |    read only = yes
253 |    create mask = 0700
254 | 
255 | # Windows clients look for this share name as a source of downloadable
256 | # printer drivers
257 | [print$]
258 |    comment = Printer Drivers
259 |    path = /var/lib/samba/printers
260 |    browseable = yes
261 |    read only = yes
262 |    guest ok = no
263 | # Uncomment to allow remote administration of Windows print drivers.
264 | # You may need to replace 'lpadmin' with the name of the group your
265 | # admin users are members of.
266 | # Please note that you also need to set appropriate Unix permissions
267 | # to the drivers directory for these users to have write rights in it
268 | ;   write list = root, @lpadmin
269 | 
270 | 
271 | [==SHARE_NAME==]
272 | path = ==SHARE_DIR==
273 | browsable = Yes
274 | writeable = Yes
275 | force user = ==SAMBA_USER==
276 | force group = ==SAMBA_USER==
277 | 


--------------------------------------------------------------------------------
/solaris-113.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | #!/bin/sh
 4 | 
 5 | echo "Preparing OpenVPN build environment"
 6 | 
 7 | # make sure tap driver is loaded (tun automatically is)
 8 | # (3rd party package)
 9 | echo "Checking for tun/tap driver..."
10 | 
11 | if [ -f /usr/kernel/drv/amd64/tun -a -f /usr/kernel/drv/amd64/tap ]
12 | then
13 |     echo " ... tun/tap driver already there, good"
14 | else
15 |     echo " ... fetching/building/installing tun/tap driver..."
16 |     cd /tmp
17 |     wget -O kaizawa-tuntap.tar.gz https://github.com/kaizawa/tuntap/tarball/master
18 |     tar xvfz kaizawa-tuntap.tar.gz
19 |     if [ -d kaizawa-tuntap-* ] ; then
20 |         cd kaizawa-tuntap-*
21 |         ./configure && make && sudo make install
22 |     else
23 |         echo "ERROR: tun driver retrieval/extraction failed?"
24 |         ls -lrt
25 |         exit 1
26 |     fi
27 | fi
28 | 
29 | 
30 | # CSW package puts lzo into /opt/csw/{include,lib} where our configure 
31 | # will not find it -> make symlinks
32 | echo "creating lzo2 convenience symlinks..."
33 | cd /usr/include && ln -s /opt/csw/include/lzo .
34 | cd /usr/lib && ln -s /opt/csw/lib/liblzo2.* .
35 | 
36 | # we have no mbedtls yet, so if you want, add mbedtls fetch/build
37 | # instructions here...
38 | #
39 | # same thing for mbedtls...
40 | #echo "creating mbedTLS convenience symlinks..."
41 | #cd /usr/include && ln -s ../local/include/mbedtls .
42 | #cd /usr/lib && ln -s ../local/lib/libmbed* .
43 | 
44 | exit 0
45 | 


--------------------------------------------------------------------------------
/ubuntu-1604.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | echo "Updating package cache"
 4 | apt-get update
 5 | echo
 6 | echo "Preparing OpenVPN 2 build environment"
 7 | echo
 8 | apt-get -y install liblzo2-dev libssl-dev libpam-dev libpkcs11-helper1-dev libtool autoconf make cmake git net-tools liblz4-dev fping
 9 | echo
10 | echo "Preparing OpenVPN 3 build environment"
11 | apt-get -y install pkg-config autoconf libglib2.0-dev libjsoncpp-dev uuid-dev libmbedtls-dev liblz4-dev build-essential
12 | 


--------------------------------------------------------------------------------