]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/log
people/pmueller/ipfire-2.x.git
3 years agodhcpcd: reimport default config and add timeout 60
Arne Fitzenreiter [Wed, 31 Mar 2021 06:39:06 +0000 (08:39 +0200)] 
dhcpcd: reimport default config and add timeout 60

the example has some new default options like rapid_commit
also increase the timeout to a minute.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.26
Arne Fitzenreiter [Thu, 25 Mar 2021 17:31:53 +0000 (17:31 +0000)] 
kernel: update to 5.10.26

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.25
Arne Fitzenreiter [Mon, 22 Mar 2021 06:00:29 +0000 (06:00 +0000)] 
kernel: update to 5.10.25

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.24
Arne Fitzenreiter [Fri, 19 Mar 2021 06:21:00 +0000 (07:21 +0100)] 
kernel: update to 5.10.24

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update i586 and x86_64 rootfiles
Arne Fitzenreiter [Fri, 5 Feb 2021 08:15:01 +0000 (09:15 +0100)] 
kernel: update i586 and x86_64 rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: i586 and x86_64 rootfile update
Arne Fitzenreiter [Thu, 21 Jan 2021 13:34:39 +0000 (14:34 +0100)] 
kernel: i586 and x86_64 rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.23
Arne Fitzenreiter [Fri, 12 Mar 2021 11:16:13 +0000 (12:16 +0100)] 
kernel: update to 5.10.23

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: fix messed up armv5tel rootfile
Arne Fitzenreiter [Wed, 10 Mar 2021 21:01:49 +0000 (21:01 +0000)] 
kernel: fix messed up armv5tel rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokerneltest: add dhcpcd to updater
Arne Fitzenreiter [Wed, 10 Mar 2021 14:15:49 +0000 (15:15 +0100)] 
kerneltest: add dhcpcd to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoRevert "Revert "dhcpcd: Update to 9.4.0""
Arne Fitzenreiter [Wed, 10 Mar 2021 14:14:12 +0000 (15:14 +0100)] 
Revert "Revert "dhcpcd: Update to 9.4.0""

This reverts commit c1b356d20da2ebb162072787927b5babbafebfa4.

3 years agoRevert "Revert "dhcpcd: Update to 9.3.4""
Arne Fitzenreiter [Wed, 10 Mar 2021 14:13:26 +0000 (15:13 +0100)] 
Revert "Revert "dhcpcd: Update to 9.3.4""

This reverts commit 7c6a4babf851a13292f0cfa90ca9e3fbfc42525c.

3 years agoinitskripts: networking: fix dhcpcd shutdown
Arne Fitzenreiter [Wed, 10 Mar 2021 13:29:54 +0000 (14:29 +0100)] 
initskripts: networking: fix dhcpcd shutdown

with kernel 5.10 dhcpcd hung at shutdown if red was a wireless client
becuase there was two running instances. This change repeat the
dcpcd -k call.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.22
Arne Fitzenreiter [Wed, 10 Mar 2021 13:29:27 +0000 (14:29 +0100)] 
kernel: update to 5.10.22

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: arm* disable alg modules
Arne Fitzenreiter [Mon, 8 Mar 2021 21:24:16 +0000 (21:24 +0000)] 
kernel: arm* disable alg modules

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: arm* oldconfig
Arne Fitzenreiter [Sun, 7 Mar 2021 23:16:18 +0000 (23:16 +0000)] 
kernel: arm* oldconfig

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: arm* enable UAS for USB storage
Arne Fitzenreiter [Sun, 7 Mar 2021 22:58:42 +0000 (22:58 +0000)] 
kernel: arm* enable UAS for USB storage

this is needed for newer USB enclosures to support trim
and get better speed. (already enabled on x86*)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: x86* disable alg modules
Arne Fitzenreiter [Sun, 7 Mar 2021 22:52:35 +0000 (23:52 +0100)] 
kernel: x86* disable alg modules

the application layer gateway modules can used to bypass the nat
via nat slipstreaming. I had disabled all of them. If one is really needed
we can reenable it later.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.21
Arne Fitzenreiter [Sun, 7 Mar 2021 22:52:10 +0000 (23:52 +0100)] 
kernel: update to 5.10.21

3 years agokernel: update to 5.10.20
Arne Fitzenreiter [Sun, 7 Mar 2021 21:06:18 +0000 (22:06 +0100)] 
kernel: update to 5.10.20

3 years agokernel: fix leds on geos and alix
Arne Fitzenreiter [Sun, 28 Feb 2021 08:42:48 +0000 (09:42 +0100)] 
kernel: fix leds on geos and alix

the platform driver cannot register the leds if GPIO_CS5535 is compiled as module

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.19
Arne Fitzenreiter [Fri, 26 Feb 2021 19:57:20 +0000 (20:57 +0100)] 
kernel: update to 5.10.19

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.18
Arne Fitzenreiter [Wed, 24 Feb 2021 20:31:20 +0000 (21:31 +0100)] 
kernel: update to 5.10.18

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.17
Arne Fitzenreiter [Thu, 18 Feb 2021 06:45:26 +0000 (07:45 +0100)] 
kernel: update to 5.10.17

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokerneltest: add leds initskript.
Arne Fitzenreiter [Wed, 17 Feb 2021 19:47:57 +0000 (20:47 +0100)] 
kerneltest: add leds initskript.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoinitskripts: leds: remove obsolete kirkwood devices
Arne Fitzenreiter [Wed, 17 Feb 2021 19:45:48 +0000 (20:45 +0100)] 
initskripts: leds: remove obsolete kirkwood devices

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoinitskripts: leds: add new pcengines apu1 led name.
Arne Fitzenreiter [Wed, 17 Feb 2021 19:43:35 +0000 (20:43 +0100)] 
initskripts: leds: add new pcengines apu1 led name.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: add pc engines apu1 led detection with new bios.
Arne Fitzenreiter [Wed, 17 Feb 2021 19:41:23 +0000 (20:41 +0100)] 
kernel: add pc engines apu1 led detection with new bios.

bios 4.x change the dmi device name from APU to apu1

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoinitskripts: leds: update for new upstream netdev-trigger
Arne Fitzenreiter [Wed, 17 Feb 2021 19:34:05 +0000 (20:34 +0100)] 
initskripts: leds: update for new upstream netdev-trigger

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.16
Arne Fitzenreiter [Sat, 13 Feb 2021 13:48:03 +0000 (14:48 +0100)] 
kernel: update to 5.10.16

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.15
Arne Fitzenreiter [Wed, 10 Feb 2021 15:37:31 +0000 (16:37 +0100)] 
kernel: update to 5.10.15

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.14
Arne Fitzenreiter [Tue, 9 Feb 2021 12:30:53 +0000 (13:30 +0100)] 
kernel: update to 5.10.14

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokerneltest: add xtabkes-addons, linux-atm, u-boot and firewall initskript
Arne Fitzenreiter [Sat, 6 Feb 2021 14:35:57 +0000 (15:35 +0100)] 
kerneltest: add xtabkes-addons, linux-atm, u-boot and firewall initskript

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update aarch64 config and rootfiles
Arne Fitzenreiter [Fri, 5 Feb 2021 08:35:23 +0000 (08:35 +0000)] 
kernel: update aarch64 config and rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokerneltest: remove intel microcode and update ssh settings
Arne Fitzenreiter [Fri, 5 Feb 2021 08:19:05 +0000 (09:19 +0100)] 
kerneltest: remove intel microcode and update ssh settings

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update i586 and x86_64 rootfiles
Arne Fitzenreiter [Fri, 5 Feb 2021 08:15:01 +0000 (09:15 +0100)] 
kernel: update i586 and x86_64 rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.13
Arne Fitzenreiter [Thu, 4 Feb 2021 10:09:35 +0000 (11:09 +0100)] 
kernel: update to 5.10.13

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: x86_64 rootfile update
Arne Fitzenreiter [Sun, 31 Jan 2021 15:33:39 +0000 (16:33 +0100)] 
kernel: x86_64 rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.12
Arne Fitzenreiter [Sun, 31 Jan 2021 15:33:13 +0000 (16:33 +0100)] 
kernel: update to 5.10.12

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.11
Arne Fitzenreiter [Thu, 28 Jan 2021 07:32:41 +0000 (08:32 +0100)] 
kernel: update to 5.10.11

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoRevert "Revert "make: update to 4.3""
Arne Fitzenreiter [Wed, 27 Jan 2021 12:45:44 +0000 (13:45 +0100)] 
Revert "Revert "make: update to 4.3""

This reverts commit 85f5656aca91992d8cf135da603d729cc8ac8e0d.

3 years agou-boot-friendlyarm: disable build
Arne Fitzenreiter [Tue, 26 Jan 2021 19:12:14 +0000 (20:12 +0100)] 
u-boot-friendlyarm: disable build

this does not built with kernel-5.10 (headers?)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agou-boot: update to 2021.01
Arne Fitzenreiter [Tue, 26 Jan 2021 19:10:22 +0000 (20:10 +0100)] 
u-boot: update to 2021.01

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update armv5tel config and rootfiles
Arne Fitzenreiter [Tue, 26 Jan 2021 19:08:28 +0000 (20:08 +0100)] 
kernel: update armv5tel config and rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.10
Arne Fitzenreiter [Tue, 26 Jan 2021 19:04:56 +0000 (20:04 +0100)] 
kernel: update to 5.10.10

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoadd kerneltest core update to build installable package for testing
Arne Fitzenreiter [Thu, 21 Jan 2021 16:54:11 +0000 (17:54 +0100)] 
add kerneltest core update to build installable package for testing

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: i586 and x86_64 rootfile update
Arne Fitzenreiter [Thu, 21 Jan 2021 13:34:39 +0000 (14:34 +0100)] 
kernel: i586 and x86_64 rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: enable PREEMPT_VOLUNTARY and set timer to 100HZ
Arne Fitzenreiter [Thu, 21 Jan 2021 13:33:13 +0000 (14:33 +0100)] 
kernel: enable PREEMPT_VOLUNTARY and set timer to 100HZ

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.9
Arne Fitzenreiter [Thu, 21 Jan 2021 13:32:02 +0000 (14:32 +0100)] 
kernel: update to 5.10.9

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: Enable BBR as default TCP congestion algorithm
Michael Tremer [Tue, 12 Jan 2021 11:32:58 +0000 (11:32 +0000)] 
kernel: Enable BBR as default TCP congestion algorithm

This will increase throughput since BBR is more modern and adjusted to
the nowadays version of the Internet whereas Cubic is more conservative
and might not always fully saturate the downlink.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agokernel: Enable DMA engines on x86_64
Michael Tremer [Tue, 12 Jan 2021 11:02:19 +0000 (11:02 +0000)] 
kernel: Enable DMA engines on x86_64

Those are already enabled as modules in i586.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agokernel: Trust the randomness from the CPU
Michael Tremer [Tue, 12 Jan 2021 10:55:57 +0000 (10:55 +0000)] 
kernel: Trust the randomness from the CPU

This will allow the kernel to seed its CRNG using RDSEED or RDRAND.

During the boot process, it is required that the CRNG is being
initialised, but it may take some long time on systems that do not have
a random number generator.

This is the default for various other distributions like Debian.

Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agokernel: Compile RNG drivers into the kernel
Michael Tremer [Tue, 12 Jan 2021 10:52:30 +0000 (10:52 +0000)] 
kernel: Compile RNG drivers into the kernel

The kernel will try to gather entropy really early in the boot process
where those device drivers might not have been loaded yet. They are
small and can therefore be compiled into the kernel like we already do
on ARM.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agokernel: update to 5.10.6
Arne Fitzenreiter [Sat, 9 Jan 2021 22:47:05 +0000 (23:47 +0100)] 
kernel: update to 5.10.6

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agokernel: update to 5.10.5
Arne Fitzenreiter [Thu, 7 Jan 2021 22:22:08 +0000 (23:22 +0100)] 
kernel: update to 5.10.5

todo: add armv5tel and aarch64 config and rootfiles.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agoxtables-addons: update to 3.13
Arne Fitzenreiter [Thu, 7 Jan 2021 13:56:55 +0000 (14:56 +0100)] 
xtables-addons: update to 3.13

this is needed for kernel 5.10.x

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agolinux-atm: fix build with kernel >= 5.2
Arne Fitzenreiter [Thu, 7 Jan 2021 13:45:19 +0000 (14:45 +0100)] 
linux-atm: fix build with kernel >= 5.2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 years agocore158: Ship ppp
Michael Tremer [Fri, 2 Jul 2021 14:39:33 +0000 (14:39 +0000)] 
core158: Ship ppp

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoRevert "ppp: update to 2.4.9"
Michael Tremer [Fri, 2 Jul 2021 14:38:28 +0000 (14:38 +0000)] 
Revert "ppp: update to 2.4.9"

This reverts commit 0cd9215b565e7c3ef34699b695aaab7eba1dc510.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoaws-cli: Depend on python3-six
Michael Tremer [Thu, 1 Jul 2021 17:16:36 +0000 (17:16 +0000)] 
aws-cli: Depend on python3-six

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoRevert "python-six: Removal of python2 & 3 addon versions of six"
Michael Tremer [Thu, 1 Jul 2021 17:16:09 +0000 (17:16 +0000)] 
Revert "python-six: Removal of python2 & 3 addon versions of six"

This reverts commit 3a61ae73fa179adb24f9feeb8ee486c1900609bf.

This module is required by awscli.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore158: Fully terminate apache before restarting it
Michael Tremer [Thu, 1 Jul 2021 10:10:17 +0000 (10:10 +0000)] 
core158: Fully terminate apache before restarting it

Asking apache to restart itself fails when the binary is changed and
some symbols cannot be resolved. We therefore terminate all processes
and start them again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore158: Fix name of vnstat initscript
Michael Tremer [Thu, 1 Jul 2021 10:09:40 +0000 (10:09 +0000)] 
core158: Fix name of vnstat initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore158: Actually drop motion instead of monit
Michael Tremer [Mon, 28 Jun 2021 19:29:27 +0000 (19:29 +0000)] 
core158: Actually drop motion instead of monit

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore158: Uninstall all dropped add-ons
Michael Tremer [Mon, 28 Jun 2021 17:32:52 +0000 (17:32 +0000)] 
core158: Uninstall all dropped add-ons

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoUpdate French translation
Stéphane Pautrel [Mon, 28 Jun 2021 16:12:21 +0000 (16:12 +0000)] 
Update French translation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoRevert "OpenSSH: restrict file permissions for sshd_config to 0600"
Michael Tremer [Thu, 24 Jun 2021 17:45:17 +0000 (17:45 +0000)] 
Revert "OpenSSH: restrict file permissions for sshd_config to 0600"

This reverts commit a9fb87809eccdc7ea7736659ceec929a028761d4.

This prevents the SSH configuration being parsed by the web user
interface.

Reported-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoRevert "ncat: Update to 7.91"
Michael Tremer [Thu, 24 Jun 2021 09:17:57 +0000 (09:17 +0000)] 
Revert "ncat: Update to 7.91"

This reverts commit ee3b6ba0c7d3cc88667922f96db2ac0bd5630625.

ncat segfaults straight away (#12647)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoovpnmain.cgi: Fix typos.
Stefan Schantl [Tue, 22 Jun 2021 12:56:52 +0000 (14:56 +0200)] 
ovpnmain.cgi: Fix typos.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoovpnmain.cgi: Call correct system_output() function.
Stefan Schantl [Tue, 22 Jun 2021 12:52:36 +0000 (14:52 +0200)] 
ovpnmain.cgi: Call correct system_output() function.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoMerge branch 'core157'
Michael Tremer [Mon, 21 Jun 2021 19:41:25 +0000 (19:41 +0000)] 
Merge branch 'core157'

3 years agocore157: Ship lua
Michael Tremer [Mon, 21 Jun 2021 19:39:30 +0000 (19:39 +0000)] 
core157: Ship lua

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoovpnmain.cgi: Fix detection of used DH key lenght.
Stefan Schantl [Mon, 21 Jun 2021 15:45:05 +0000 (17:45 +0200)] 
ovpnmain.cgi: Fix detection of used DH key lenght.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agovpnmain.cgi: Fix typo.
Stefan Schantl [Mon, 21 Jun 2021 12:44:58 +0000 (14:44 +0200)] 
vpnmain.cgi: Fix typo.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agopppsetup.cgi: Fix typos.
Stefan Schantl [Mon, 21 Jun 2021 12:44:57 +0000 (14:44 +0200)] 
pppsetup.cgi: Fix typos.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoMerge remote-tracking branch 'origin/next'
Michael Tremer [Mon, 21 Jun 2021 10:04:11 +0000 (10:04 +0000)] 
Merge remote-tracking branch 'origin/next'

3 years agonano: Update to 5.8
Matthias Fischer [Sun, 20 Jun 2021 12:18:13 +0000 (14:18 +0200)] 
nano: Update to 5.8

For details see:
https://www.nano-editor.org/news.php

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoknot: Update to 3.0.7
Matthias Fischer [Sun, 20 Jun 2021 12:15:20 +0000 (14:15 +0200)] 
knot: Update to 3.0.7

For details see:
https://www.knot-dns.cz/2021-06-16-version-307.html

Features:

        knotd: new configuration policy option for CDS digest algorithm setting #738
        keymgr: new command for primary SOA serial manipulation in on-secondary signing mode

Improvements:

        knotd: improved algorithm rollover to shorten the last step of old RRSIG publication

Bugfixes:

        knotd: zone is flushed upon server start, despite DNSSEC signing is up-to-date
        knotd: wildcard nonexistence is proved on empty-non-terminal query
        knotd: redundant wildcard proof for non-authoritative data in a reply
        knotd: missing wildcard proofs in a wildcard-cname loop reply
        knotd: incorrectly synthesized CNAME owner from a wildcard record #715
        knotd: zone-in-journal changeset ignores journal-max-usage limit #736
        knotd: incorrect processing of zone-in-journal changeset with SOA serial 0
        knotd: broken initialization of processing workers if SO_REUSEPORT(_LB) not available
        kjournalprint: reported journal usage is incorrect #736
        keymgr: cannot parse algorithm name ed448 #739
        keymgr: default key size not set properly
        kdig: failed to process huge DoH responses
        libknot/probe: some corner-case bugs

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoTor: update to 0.4.6.5
Peter Müller [Sun, 20 Jun 2021 10:49:17 +0000 (12:49 +0200)] 
Tor: update to 0.4.6.5

Please refer to the .tar.gz's ReleaseNote file for the full changelog
since version 0.4.5.8; it is too large to include it here.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agospeed.cgi: Add requirement for general-functions.pl.
Stefan Schantl [Sat, 19 Jun 2021 14:03:14 +0000 (16:03 +0200)] 
speed.cgi: Add requirement for general-functions.pl.

The CGI now requires the general-functions library, because the
get_red_interface() function is used.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agomemory.cgi: Fix missing qoutes.
Stefan Schantl [Sat, 19 Jun 2021 13:52:34 +0000 (15:52 +0200)] 
memory.cgi: Fix missing qoutes.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoDrop obsolete files from bluetooth package
Michael Tremer [Fri, 18 Jun 2021 16:17:27 +0000 (16:17 +0000)] 
Drop obsolete files from bluetooth package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agogeneral-functions.pl: Explicitely call new system function
Michael Tremer [Fri, 18 Jun 2021 15:12:53 +0000 (15:12 +0000)] 
general-functions.pl: Explicitely call new system function

Perl seems to just "guess" that someone no longer wants to use the
builtin "system" command when there is a function with the same name.

I have no idea what kind of liquid they are drinking, but because of the
side effects of that stuff, we explicitely call our system() function.

Not that that would be necessary, but why not waste a couple more CPU
cycles?

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoBump release of all packages with CGI files
Michael Tremer [Fri, 18 Jun 2021 15:08:57 +0000 (15:08 +0000)] 
Bump release of all packages with CGI files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoproxy.cgi: Suppress Squid version by default
Peter Müller [Fri, 18 Jun 2021 07:07:21 +0000 (09:07 +0200)] 
proxy.cgi: Suppress Squid version by default

While hiding version information does not come with any _actual_
security improvements, it is generally a good thing to do so by default:
Attackers will still be able to reasonably guess or enumerate the
software version running, but need to conduct additional effort to do
so, hence more likely raising alerts and drawing attention on their
operation.

In addition, we suppress version details somewhere else in IPFire 2.x by
default, too (e. g. Unbound and Apache), so we can justify this patch by
aiming to stay consistent, I guess. :-)

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agocore158: Ship web-user-interface
Michael Tremer [Thu, 17 Jun 2021 20:12:32 +0000 (20:12 +0000)] 
core158: Ship web-user-interface

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 years agoMerge branch 'perl-system' into next
Michael Tremer [Thu, 17 Jun 2021 20:11:47 +0000 (20:11 +0000)] 
Merge branch 'perl-system' into next

3 years agohardwaregraphs.cgi: Perform all sensor lookups in pure perl.
Stefan Schantl [Thu, 17 Jun 2021 19:52:00 +0000 (21:52 +0200)] 
hardwaregraphs.cgi: Perform all sensor lookups in pure perl.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoservices.cgi: Redesign isautorun() because shell globbing cannot used anymore.
Stefan Schantl [Thu, 17 Jun 2021 16:54:17 +0000 (18:54 +0200)] 
services.cgi: Redesign isautorun() because shell globbing cannot used anymore.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoremote.cgi: Fix splitting output from ssh-keygen.
Stefan Schantl [Tue, 15 Jun 2021 17:19:24 +0000 (19:19 +0200)] 
remote.cgi: Fix splitting output from ssh-keygen.

The split function requires an string as input.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agodhcp.cgi: Fix typo and displaying advanced options syntax.
Stefan Schantl [Mon, 14 Jun 2021 19:38:42 +0000 (21:38 +0200)] 
dhcp.cgi: Fix typo and displaying advanced options syntax.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agofireinfo.cgi: Fix read-in profile data.
Stefan Schantl [Tue, 8 Jun 2021 16:03:30 +0000 (18:03 +0200)] 
fireinfo.cgi: Fix read-in profile data.

To read-in the whole file content the data type needs to be an array.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agotime.cgi: Get and manipuate date and time in pure perl
Stefan Schantl [Thu, 20 May 2021 19:13:50 +0000 (21:13 +0200)] 
time.cgi: Get and manipuate date and time in pure perl

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agonetexternal.cgi: Grab DNS servers in pure perl
Stefan Schantl [Thu, 20 May 2021 18:31:33 +0000 (20:31 +0200)] 
netexternal.cgi: Grab DNS servers in pure perl

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agoids-functions.pl: Use new system methods
Stefan Schantl [Thu, 20 May 2021 17:53:00 +0000 (19:53 +0200)] 
ids-functions.pl: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agonetwork-functions.pl: Use new system methods
Stefan Schantl [Thu, 20 May 2021 17:50:01 +0000 (19:50 +0200)] 
network-functions.pl: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agomdstat.cgi: Print mdstat status in pure perl
Stefan Schantl [Thu, 20 May 2021 17:46:59 +0000 (19:46 +0200)] 
mdstat.cgi: Print mdstat status in pure perl

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agofireinfo.cgi: Use new system methods
Stefan Schantl [Thu, 20 May 2021 17:43:10 +0000 (19:43 +0200)] 
fireinfo.cgi: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agovpnmain.cgi: Use new system methods
Stefan Schantl [Thu, 20 May 2021 16:36:44 +0000 (18:36 +0200)] 
vpnmain.cgi: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agopppsetup.cgi: Use new system methods
Stefan Schantl [Thu, 20 May 2021 15:58:24 +0000 (17:58 +0200)] 
pppsetup.cgi: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
3 years agowireless.cgi: Use new system methods
Stefan Schantl [Thu, 20 May 2021 15:45:30 +0000 (17:45 +0200)] 
wireless.cgi: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>