124 lines
2.4 KiB
Markdown
124 lines
2.4 KiB
Markdown
# Running finger on FreeBSD
|
|
|
|
Tested on FreeBSD 15.0-RELEASE using clang 19, meson, and ninja inside a Bastille thin jail.
|
|
|
|
## Dependencies
|
|
|
|
```sh
|
|
pkg install git meson ninja pkgconf boost-all googletest
|
|
```
|
|
|
|
## Build
|
|
|
|
```sh
|
|
git clone https://github.com/waffle2k/finger /usr/local/src/finger
|
|
cd /usr/local/src/finger
|
|
meson setup builddir
|
|
meson compile -C builddir
|
|
meson install -C builddir
|
|
```
|
|
|
|
`meson install` places the binary at `/usr/local/bin/finger`.
|
|
|
|
## Plan Files
|
|
|
|
Create one file per username under `/var/finger/users/`. The file contents are returned when that user is fingered.
|
|
|
|
```sh
|
|
mkdir -p /var/finger/users
|
|
echo "Out to lunch." > /var/finger/users/pete
|
|
```
|
|
|
|
Test locally:
|
|
|
|
```sh
|
|
printf 'pete\r\n' | nc -w 2 127.0.0.1 79
|
|
```
|
|
|
|
## RC Service
|
|
|
|
Create `/usr/local/etc/rc.d/fingerd`:
|
|
|
|
```sh
|
|
#!/bin/sh
|
|
# PROVIDE: fingerd
|
|
# REQUIRE: NETWORKING
|
|
# KEYWORD: shutdown
|
|
|
|
. /etc/rc.subr
|
|
|
|
name="fingerd"
|
|
rcvar="fingerd_enable"
|
|
command="/usr/local/bin/finger"
|
|
pidfile="/var/run/fingerd.pid"
|
|
command_interpreter=""
|
|
|
|
start_cmd="fingerd_start"
|
|
stop_cmd="fingerd_stop"
|
|
status_cmd="fingerd_status"
|
|
|
|
fingerd_start() {
|
|
echo "Starting ${name}."
|
|
/usr/sbin/daemon -p ${pidfile} -f ${command}
|
|
}
|
|
|
|
fingerd_stop() {
|
|
if [ -f ${pidfile} ]; then
|
|
echo "Stopping ${name}."
|
|
kill $(cat ${pidfile}) && rm -f ${pidfile}
|
|
else
|
|
echo "${name} is not running."
|
|
fi
|
|
}
|
|
|
|
fingerd_status() {
|
|
if [ -f ${pidfile} ] && kill -0 $(cat ${pidfile}) 2>/dev/null; then
|
|
echo "${name} is running as pid $(cat ${pidfile})."
|
|
else
|
|
echo "${name} is not running."
|
|
fi
|
|
}
|
|
|
|
load_rc_config $name
|
|
run_rc_command "$1"
|
|
```
|
|
|
|
```sh
|
|
chmod +x /usr/local/etc/rc.d/fingerd
|
|
```
|
|
|
|
Enable at boot and start:
|
|
|
|
```sh
|
|
sysrc fingerd_enable=YES
|
|
service fingerd start
|
|
```
|
|
|
|
## Bastille Jail Setup (optional)
|
|
|
|
If running inside a Bastille thin jail, bind-mount the plan files directory from the host so they can be managed without entering the jail.
|
|
|
|
Host fstab (`/usr/local/bastille/jails/finger/fstab`):
|
|
|
|
```
|
|
/srv/finger/users /usr/local/bastille/jails/finger/root/var/finger/users nullfs rw 0 0
|
|
```
|
|
|
|
To redirect external port 79 into the jail, add to `/usr/local/bastille/jails/finger/rdr.conf`:
|
|
|
|
```
|
|
dual re0 any any tcp 79 79
|
|
```
|
|
|
|
pf will apply this as:
|
|
|
|
```
|
|
rdr pass on re0 inet proto tcp from any to any port = finger -> <jail-ip> port 79
|
|
```
|
|
|
|
Rebuild after source changes:
|
|
|
|
```sh
|
|
bastille cmd finger sh -c 'cd /usr/local/src/finger && meson compile -C builddir && meson install -C builddir'
|
|
```
|