]> git.ipfire.org Git - ipfire-2.x.git/log
ipfire-2.x.git
4 years agolfs: Drop quotes in DEPS variable
Michael Tremer [Mon, 23 Mar 2020 19:34:57 +0000 (19:34 +0000)] 
lfs: Drop quotes in DEPS variable

Not sure why this has ever been there. This simply makes it
nicer to read and edit because we can have line-breaks now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocdrom: Cleanup everything after mastering
Michael Tremer [Mon, 23 Mar 2020 19:34:56 +0000 (19:34 +0000)] 
cdrom: Cleanup everything after mastering

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoxz: update to 5.2.5
Marcel Lorenz [Thu, 19 Mar 2020 20:20:49 +0000 (21:20 +0100)] 
xz: update to 5.2.5

4 years agocore143: add coreutils
Arne Fitzenreiter [Mon, 23 Mar 2020 18:33:39 +0000 (18:33 +0000)] 
core143: add coreutils

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocoreutils: update rootfiles
Peter Müller [Mon, 3 Feb 2020 17:39:00 +0000 (17:39 +0000)] 
coreutils: update rootfiles

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocoreutils: update to 8.31
Peter Müller [Mon, 3 Feb 2020 17:39:00 +0000 (17:39 +0000)] 
coreutils: update to 8.31

Refer to https://lists.gnu.org/archive/html/coreutils-announce/2019-03/msg00000.html
for release announcements.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add glibc
Arne Fitzenreiter [Sun, 22 Mar 2020 19:10:46 +0000 (19:10 +0000)] 
core143: add glibc

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agovdr: fix build with glibc 2.31
Arne Fitzenreiter [Sun, 22 Mar 2020 19:04:14 +0000 (19:04 +0000)] 
vdr: fix build with glibc 2.31

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoglibc: Update to 2.31
Michael Tremer [Wed, 5 Feb 2020 11:45:46 +0000 (11:45 +0000)] 
glibc: Update to 2.31

Fixes: #12288
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoqemu: Fix build against glibc >= 2.31
Michael Tremer [Wed, 5 Feb 2020 11:45:45 +0000 (11:45 +0000)] 
qemu: Fix build against glibc >= 2.31

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add hwdata
Arne Fitzenreiter [Sat, 21 Mar 2020 16:30:15 +0000 (16:30 +0000)] 
core143: add hwdata

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agohwdata: update PCI/USB databases
Peter Müller [Wed, 19 Feb 2020 19:58:00 +0000 (19:58 +0000)] 
hwdata: update PCI/USB databases

PCI IDs: 2020-02-16 03:15:02
USB IDs: 2020-01-09 20:34:06

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add strongswan
Arne Fitzenreiter [Sat, 21 Mar 2020 16:28:04 +0000 (16:28 +0000)] 
core143: add strongswan

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agostrongSwan: update to 5.8.2
Peter Müller [Wed, 19 Feb 2020 21:48:00 +0000 (21:48 +0000)] 
strongSwan: update to 5.8.2

Please refer to https://wiki.strongswan.org/versions/75 for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add rules.pl
Arne Fitzenreiter [Sat, 21 Mar 2020 16:26:38 +0000 (16:26 +0000)] 
core143: add rules.pl

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agorules.pl: Fix SNAT over VPN.
Stefan Schantl [Thu, 20 Feb 2020 16:24:23 +0000 (17:24 +0100)] 
rules.pl: Fix SNAT over VPN.

This commit adds flags which will are applied if SNAT should be used on
the red address or any configured alias.

They prevent doing the SNAT when tranismitting packet through a VPN over the red interface.

Fixes #12162.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Tested-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add swap changes
Arne Fitzenreiter [Sat, 21 Mar 2020 16:23:36 +0000 (16:23 +0000)] 
core143: add swap changes

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoswap: Start swap after mounting filesystems
Michael Tremer [Thu, 20 Feb 2020 19:04:30 +0000 (19:04 +0000)] 
swap: Start swap after mounting filesystems

When using a swap file, it is not being activated correctly
when the filesystem it is residing on is not mounted, yet.

The root file system is mounted read-only here before
S40mountfs is being executed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add unbound
Arne Fitzenreiter [Sat, 21 Mar 2020 16:17:11 +0000 (16:17 +0000)] 
core143: add unbound

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound: Update to 1.10.0
Matthias Fischer [Sat, 22 Feb 2020 10:04:17 +0000 (11:04 +0100)] 
unbound: Update to 1.10.0

For details see:
https://lists.nlnetlabs.nl/pipermail/unbound-users/2020-February/006711.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add apr and pcre
Arne Fitzenreiter [Sat, 21 Mar 2020 16:15:00 +0000 (16:15 +0000)] 
core143: add apr and pcre

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoUpdate Apache Dependencies
Wolfgang Apolinarski [Mon, 2 Mar 2020 19:06:53 +0000 (20:06 +0100)] 
Update Apache Dependencies

Update apache dependencies:
APR: update to version 1.7.0
PCRE: update to version 8.44
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add dhcp.cgi and fireinfo.cgi
Arne Fitzenreiter [Sat, 21 Mar 2020 16:12:54 +0000 (16:12 +0000)] 
core143: add dhcp.cgi and fireinfo.cgi

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agofireinfo.cgi: improve readability of command outputs
Peter Müller [Sat, 7 Mar 2020 18:58:00 +0000 (18:58 +0000)] 
fireinfo.cgi: improve readability of command outputs

Especially when it comes to the output of "uname -a", <code> tags
greatly improve readability.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agodhcp.cgi: avoid unnecessary line break
Peter Müller [Sat, 7 Mar 2020 19:01:00 +0000 (19:01 +0000)] 
dhcp.cgi: avoid unnecessary line break

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add ntp
Arne Fitzenreiter [Sat, 21 Mar 2020 16:06:21 +0000 (16:06 +0000)] 
core143: add ntp

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agontp: Update to 4.2.8p14
Matthias Fischer [Mon, 9 Mar 2020 18:45:36 +0000 (19:45 +0100)] 
ntp: Update to 4.2.8p14

For details see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add libssh
Arne Fitzenreiter [Sat, 21 Mar 2020 16:04:58 +0000 (16:04 +0000)] 
core143: add libssh

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agotshark: Update to version 3.2.2 .
Erik Kapfer [Tue, 10 Mar 2020 08:21:08 +0000 (09:21 +0100)] 
tshark: Update to version 3.2.2 .

Update to 3.2.x includes, several bugfixes, updated protocols, new and updated features.
For the complete changelog, take a look into here --> https://www.wireshark.org/docs/relnotes/ .

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agolibssh: Update to version 0.9.3 .
Erik Kapfer [Tue, 10 Mar 2020 08:21:07 +0000 (09:21 +0100)] 
libssh: Update to version 0.9.3 .

Fixes CVE-2019-14889 and several issues after an security audit.
The complete changelog can be found in here --> https://www.libssh.org/category/release/ .
This version is also needed for tshark-3.2.2 to prevent
'error while loading shared libraries: libssh.so.4' for sshdump and ciscodump.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agomake.sh: Umount /tmp when it is a ramdisk
Michael Tremer [Tue, 10 Mar 2020 13:28:53 +0000 (13:28 +0000)] 
make.sh: Umount /tmp when it is a ramdisk

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agomake.sh: Move ccache's temp directory into /tmp
Michael Tremer [Tue, 10 Mar 2020 13:26:06 +0000 (13:26 +0000)] 
make.sh: Move ccache's temp directory into /tmp

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocdrom+flash-image: Move all temporary files to /tmp
Michael Tremer [Tue, 10 Mar 2020 13:26:05 +0000 (13:26 +0000)] 
cdrom+flash-image: Move all temporary files to /tmp

Since /tmp is now a ramdisk, we move all temporary files into it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocdrom: Do not write the temporary tarball to disk
Michael Tremer [Tue, 10 Mar 2020 13:26:04 +0000 (13:26 +0000)] 
cdrom: Do not write the temporary tarball to disk

In order to remove any duplicate files in the tarball, we
have to unpack it again. The whole filesystem is written
to disk twice which is unnecessary.

This patch removes that temporary step and reduces IO
during the build.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agomake.sh: Make /tmp a ramdisk if ramdisks are enabled
Michael Tremer [Tue, 10 Mar 2020 13:26:03 +0000 (13:26 +0000)] 
make.sh: Make /tmp a ramdisk if ramdisks are enabled

The build system is writing a large amount of temporary file
systems that might land on disk or at least in the journal.

This change will speed up the build and remove a lot of I/O
usage.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agonginx: Update to version 1.17.8 .
Erik Kapfer [Tue, 10 Mar 2020 15:28:56 +0000 (16:28 +0100)] 
nginx: Update to version 1.17.8 .

New mainlain version which includes hugh amount of changes.
For a complete overview, please take alook in here -->
http://nginx.org/en/CHANGES .

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoxinetd: Delete symlinks with uninstallation .
Erik Kapfer [Tue, 10 Mar 2020 15:36:38 +0000 (16:36 +0100)] 
xinetd: Delete symlinks with uninstallation .

Fixes #12303

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agode.pl: update German translations
Peter Müller [Sun, 15 Mar 2020 13:38:00 +0000 (13:38 +0000)] 
de.pl: update German translations

This patch adds German translations for the new DNS CGI, some parts of
the hardware vulnerability mitigation CGI, improves some existing
translations and corrects some Deppenleerzeichen and Bildzeitungsbindestriche.

The third version of this patch is correctly based against upstream 'next',
honours Michaels opinion and contains updated language_issues.de and
language_missings files.

Since "./make lang" complains about missing translations marked as unused
in first place, no changes have been made to them in order to avoid
collateral damage.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agokeepalived: Update to version 2.0.20 .
Erik Kapfer [Mon, 16 Mar 2020 12:42:59 +0000 (13:42 +0100)] 
keepalived: Update to version 2.0.20 .

Since this update is a mayor version update, it brings a lot of changes.
The changelog can be found in here --> http://www.keepalived.com/changelog.html .
Added /etc/sysconfig/keepalived in ROOTFILE and in backup/includes.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: add openssl
Arne Fitzenreiter [Sat, 21 Mar 2020 15:58:31 +0000 (15:58 +0000)] 
core143: add openssl

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoopenssl: Update to 1.1.1e
Michael Tremer [Wed, 18 Mar 2020 14:04:27 +0000 (14:04 +0000)] 
openssl: Update to 1.1.1e

Fixed an overflow bug in the x64_64 Montgomery squaring procedure used
in exponentiation with 512-bit moduli (CVE-2019-1551).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoPostfix: update to 3.5.0
Peter Müller [Wed, 18 Mar 2020 21:16:00 +0000 (21:16 +0000)] 
Postfix: update to 3.5.0

Please refer to http://www.postfix.org/announcements/postfix-3.5.0.html
for release announcements.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoTor: update to 0.4.2.7
Peter Müller [Thu, 19 Mar 2020 09:11:00 +0000 (09:11 +0000)] 
Tor: update to 0.4.2.7

Please refer to https://blog.torproject.org/new-releases-03510-0419-0427
for release announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: add gcc, binutils and cairo to update
Arne Fitzenreiter [Sat, 21 Mar 2020 15:51:03 +0000 (15:51 +0000)] 
core142: add gcc, binutils and cairo to update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocairo: Update to 1.16.0
Michael Tremer [Fri, 20 Mar 2020 13:37:50 +0000 (13:37 +0000)] 
cairo: Update to 1.16.0

This updates the package and adds a patch so that it compiles
with binutils 2.34.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agobinutils: update to 2.34
Peter Müller [Fri, 20 Mar 2020 13:37:51 +0000 (13:37 +0000)] 
binutils: update to 2.34

Cc: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agogcc: Update to 9.3.0
Michael Tremer [Fri, 20 Mar 2020 13:38:33 +0000 (13:38 +0000)] 
gcc: Update to 9.3.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agobluetooth: drop outdated bluetooth addon
Arne Fitzenreiter [Mon, 2 Mar 2020 11:58:35 +0000 (12:58 +0100)] 
bluetooth: drop outdated bluetooth addon

The cgi support only rfcomm modem dialup. This is not used by modern hardware.
Also the used bluez stack version is outdated long time.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore143: open core updater
Arne Fitzenreiter [Sat, 21 Mar 2020 15:38:22 +0000 (15:38 +0000)] 
core143: open core updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agokernel: update to 4.14.173 core142 v2.25-core142
Arne Fitzenreiter [Wed, 11 Mar 2020 21:59:38 +0000 (22:59 +0100)] 
kernel: update to 4.14.173

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoRevert "kernel: update to 4.14.172"
Arne Fitzenreiter [Tue, 10 Mar 2020 07:32:48 +0000 (07:32 +0000)] 
Revert "kernel: update to 4.14.172"

This reverts commit 1773544d025591d4096ee91bcc598dac19fa0f24.

with 4.14.172 klogd is not updated and the firewall log/graphs are not
working

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agosuricata: use KILL is suricata not shut down normal.
Arne Fitzenreiter [Mon, 9 Mar 2020 06:41:32 +0000 (06:41 +0000)] 
suricata: use KILL is suricata not shut down normal.

sometimes suricata hung and lock the pidfile at
suricata stop.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: start suricata before unbound after update
Arne Fitzenreiter [Thu, 5 Mar 2020 05:54:09 +0000 (05:54 +0000)] 
core142: start suricata before unbound after update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: add unbound.conf to updater
Arne Fitzenreiter [Wed, 4 Mar 2020 21:49:05 +0000 (21:49 +0000)] 
core142: add unbound.conf to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound: Disable using mixed case for DNS queries
Michael Tremer [Wed, 4 Mar 2020 21:11:53 +0000 (21:11 +0000)] 
unbound: Disable using mixed case for DNS queries

This seems to cause that some resolvers do not respond
to queries any more until unbound falls back.

To ensure better DNS performance, we disabled this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound: Only launch one process
Michael Tremer [Wed, 4 Mar 2020 21:11:52 +0000 (21:11 +0000)] 
unbound: Only launch one process

When unbound is running multiple threads, we have observed
that queries where sent for each thread.

Since no user should have so much DNS traffic that more than
one processor core is being saturated, this is a safe change.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound.conf: Do not set defaults explicitly
Peter Müller [Mon, 20 Jan 2020 19:36:00 +0000 (19:36 +0000)] 
unbound.conf: Do not set defaults explicitly

In order to keep configuration files small and easy to review/audit,
omitting defaults makes more sense than configure them explicitly (have
changed my mind here).

Unbound comes with a good default confiuration, and we should only make
changes when they are necessary. In addition, this patch updates the
documentation's URL to the current one.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agodns.cgi: restart suricata before unbound reload
Arne Fitzenreiter [Wed, 4 Mar 2020 21:38:24 +0000 (21:38 +0000)] 
dns.cgi: restart suricata before unbound reload

if unbound is reloaded it start a bunch of dns queries
so suricata needs to now which servers should used.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agobackup: Fix saving DNS settings
Michael Tremer [Wed, 4 Mar 2020 10:44:50 +0000 (10:44 +0000)] 
backup: Fix saving DNS settings

There was a typo in /var/ipfire/dns/servers and the settings
file was not explicitely included in the backup.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound/red.up: run unbound update-forwarders after suricata init.
Arne Fitzenreiter [Wed, 4 Mar 2020 07:52:56 +0000 (08:52 +0100)] 
unbound/red.up: run unbound update-forwarders after suricata init.

The old suricata instance blocks dns requests if the red ip has changed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: fix typo's at remove/update dns forwareders changes
Arne Fitzenreiter [Tue, 3 Mar 2020 12:25:17 +0000 (13:25 +0100)] 
core142: fix typo's at remove/update dns forwareders changes

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agokernel: update to 4.14.172
Arne Fitzenreiter [Tue, 3 Mar 2020 12:23:29 +0000 (13:23 +0100)] 
kernel: update to 4.14.172

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agobackup: add /var/ipfire/dns/server to include
Arne Fitzenreiter [Mon, 2 Mar 2020 22:25:41 +0000 (22:25 +0000)] 
backup: add /var/ipfire/dns/server to include

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound: drop remove-dns-fowarders at red.down
Arne Fitzenreiter [Mon, 2 Mar 2020 17:54:48 +0000 (17:54 +0000)] 
unbound: drop remove-dns-fowarders at red.down

this functions has only reloaded unbound config
which is useless at shutting down the red interface.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoudev: build after kmod
Arne Fitzenreiter [Mon, 2 Mar 2020 08:15:00 +0000 (08:15 +0000)] 
udev: build after kmod

eudev depends on kmod to install all needed rules

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: stop squid and suricata while update
Arne Fitzenreiter [Sun, 1 Mar 2020 21:54:28 +0000 (21:54 +0000)] 
core142: stop squid and suricata while update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound: speed-up remove forwarders
Arne Fitzenreiter [Sun, 1 Mar 2020 19:41:13 +0000 (20:41 +0100)] 
unbound: speed-up remove forwarders

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: ship unbound initskript
Arne Fitzenreiter [Sun, 1 Mar 2020 18:41:16 +0000 (19:41 +0100)] 
core142: ship unbound initskript

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound: fix typo at safesearch for googe
Arne Fitzenreiter [Sun, 1 Mar 2020 18:41:15 +0000 (19:41 +0100)] 
unbound: fix typo at safesearch for googe

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound: run "time-fix" before savesearch resolves
Arne Fitzenreiter [Sun, 1 Mar 2020 18:41:14 +0000 (19:41 +0100)] 
unbound: run "time-fix" before savesearch resolves

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agounbound: update savesearch after reload configfiles
Arne Fitzenreiter [Sun, 1 Mar 2020 18:41:13 +0000 (19:41 +0100)] 
unbound: update savesearch after reload configfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agolang: Improvements to French translation
Stéphane Pautrel [Fri, 28 Feb 2020 15:32:21 +0000 (15:32 +0000)] 
lang: Improvements to French translation

This patch adds translations for the new DNS part as well
as various improvements.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: add kmod to updater
Arne Fitzenreiter [Sun, 1 Mar 2020 19:45:30 +0000 (19:45 +0000)] 
core142: add kmod to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agokmod: Update to 26
Michael Tremer [Thu, 27 Feb 2020 14:53:48 +0000 (14:53 +0000)] 
kmod: Update to 26

This patch links kmod against OpenSSL which is required to
decode the kernel modules' PKCS#7 signatures.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agomake.sh: add core to version string
Arne Fitzenreiter [Wed, 26 Feb 2020 18:16:00 +0000 (18:16 +0000)] 
make.sh: add core to version string

this make it easier to find the unstable and testing build for a core update in fireinfo.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agodnsdist: a compile thread needs two gigabyte of ram
Arne Fitzenreiter [Tue, 25 Feb 2020 20:38:19 +0000 (20:38 +0000)] 
dnsdist: a compile thread needs two gigabyte of ram

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: replace "pakfire remove"
Arne Fitzenreiter [Tue, 25 Feb 2020 20:35:57 +0000 (20:35 +0000)] 
core142: replace "pakfire remove"

i have cut and paste this from older core but its not working

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: remove dropped packages
Arne Fitzenreiter [Tue, 25 Feb 2020 06:55:30 +0000 (06:55 +0000)] 
core142: remove dropped packages

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: fix typo
Arne Fitzenreiter [Tue, 25 Feb 2020 06:41:14 +0000 (06:41 +0000)] 
core142: fix typo

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agopakfire: Re-install previous core update when in testing mode
Arne Fitzenreiter [Mon, 24 Feb 2020 18:51:24 +0000 (18:51 +0000)] 
pakfire: Re-install previous core update when in testing mode

Fixes: #12302
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Tested-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: ship updated fireinfo.cgi
Arne Fitzenreiter [Mon, 24 Feb 2020 19:20:12 +0000 (19:20 +0000)] 
core142: ship updated fireinfo.cgi

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agofireinfo.cgi: Use pakfire lib to gather the pakfire version.
Stefan Schantl [Sun, 23 Feb 2020 15:13:46 +0000 (16:13 +0100)] 
fireinfo.cgi: Use pakfire lib to gather the pakfire version.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoppp: Add upstream patch to fix bounds check in EAP code.
Stefan Schantl [Sat, 22 Feb 2020 14:02:24 +0000 (15:02 +0100)] 
ppp: Add upstream patch to fix bounds check in EAP code.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agow_scan: fix country and satalite selection menu
Arne Fitzenreiter [Fri, 21 Feb 2020 21:33:23 +0000 (22:33 +0100)] 
w_scan: fix country and satalite selection menu

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agou-boot: split rpi aarch64 quirk into parts
Arne Fitzenreiter [Fri, 21 Feb 2020 08:26:36 +0000 (09:26 +0100)] 
u-boot: split rpi aarch64 quirk into parts

on of the changed variables was used before the old quirk.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoTor: update to 0.4.2.6
Peter Müller [Sat, 1 Feb 2020 21:38:00 +0000 (21:38 +0000)] 
Tor: update to 0.4.2.6

Please refer to https://blog.torproject.org/new-releases-tor-0426-0418
for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: add changed u-boot files to updater
Arne Fitzenreiter [Thu, 20 Feb 2020 11:32:43 +0000 (11:32 +0000)] 
core142: add changed u-boot files to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agou-boot: add quirk for rpi on aarch64
Arne Fitzenreiter [Thu, 20 Feb 2020 11:24:36 +0000 (12:24 +0100)] 
u-boot: add quirk for rpi on aarch64

the current rpi u-boot will not load the ramdisk correctly so the kernel will
crash with loaded ramdisk.
Remove ramdisk and replace root UUID by /dev/mmcblk0p3 if boot was on
armv8 and rpi.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agou-boot: remove kirkwood kernel detection from bootscript
Arne Fitzenreiter [Thu, 20 Feb 2020 11:21:28 +0000 (12:21 +0100)] 
u-boot: remove kirkwood kernel detection from bootscript

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agored.up: move update-dns-forwareders behind the firewall
Arne Fitzenreiter [Wed, 19 Feb 2020 14:51:48 +0000 (14:51 +0000)] 
red.up: move update-dns-forwareders behind the firewall

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoflash-images: update the uENV root UUID also on arch64
Arne Fitzenreiter [Wed, 19 Feb 2020 08:49:21 +0000 (08:49 +0000)] 
flash-images: update the uENV root UUID also on arch64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: add ppp to updater
Arne Fitzenreiter [Tue, 18 Feb 2020 17:13:48 +0000 (17:13 +0000)] 
core142: add ppp to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoppp: Update to 2.4.8
Stefan Schantl [Tue, 18 Feb 2020 10:18:13 +0000 (11:18 +0100)] 
ppp: Update to 2.4.8

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoelinks: suppress welcome dialog
Arne Fitzenreiter [Mon, 17 Feb 2020 21:47:25 +0000 (21:47 +0000)] 
elinks: suppress welcome dialog

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agodehydrated: Fix various syntax errors
Michael Tremer [Mon, 17 Feb 2020 11:59:32 +0000 (11:59 +0000)] 
dehydrated: Fix various syntax errors

* The backup include file was missing a leading slash
which caused no files to be backed up.

* The shell escaping was broken so a new configuration file
was useless.

Fixes: #12297
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agopaks: remove scripts for elinks and phpSANE
Arne Fitzenreiter [Mon, 17 Feb 2020 21:38:42 +0000 (21:38 +0000)] 
paks: remove scripts for elinks and phpSANE

phpSANE is dropped long ago and elinks in core now.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agopaks: add/move extract_backup_includes to pak update scripts
Arne Fitzenreiter [Mon, 17 Feb 2020 21:34:14 +0000 (21:34 +0000)] 
paks: add/move extract_backup_includes to pak update scripts

this function allow to update the backup filelist before the backup was done in uninstall.sh at packet updates.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocore142: remove old ddns python-2.7 version
Arne Fitzenreiter [Mon, 17 Feb 2020 08:53:31 +0000 (08:53 +0000)] 
core142: remove old ddns python-2.7 version

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agoddns: rootfile update
Arne Fitzenreiter [Mon, 17 Feb 2020 08:50:46 +0000 (08:50 +0000)] 
ddns: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 years agocyrus-imapd: Drop package
Michael Tremer [Wed, 5 Feb 2020 11:44:17 +0000 (11:44 +0000)] 
cyrus-imapd: Drop package

This package is outdated and unmaintained for many many years.
I am not sure if this even works and if there are any users.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>