]> git.ipfire.org Git - ipfire-2.x.git/log
ipfire-2.x.git
5 years agocdrom: The order of arguments for mkisofs seems to be relevant
Michael Tremer [Sun, 22 Jul 2018 21:31:30 +0000 (22:31 +0100)] 
cdrom: The order of arguments for mkisofs seems to be relevant

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agogrub: apply vga fallback disable patch again
Arne Fitzenreiter [Sun, 22 Jul 2018 11:41:38 +0000 (13:41 +0200)] 
grub: apply vga fallback disable patch again

on some systems (e.g. J1900 based) grub detects a too low resolution
and use it. This is no problem in grub itself but the kernel not render
the consoles in this mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agosyslinux: update i586 rootfile
Arne Fitzenreiter [Sat, 21 Jul 2018 14:39:46 +0000 (16:39 +0200)] 
syslinux: update i586 rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agoflash-images: fix partition layout on i586
Arne Fitzenreiter [Sat, 21 Jul 2018 14:33:29 +0000 (16:33 +0200)] 
flash-images: fix partition layout on i586

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agoMerge branch 'next' into efi
Michael Tremer [Fri, 20 Jul 2018 12:47:20 +0000 (12:47 +0000)] 
Merge branch 'next' into efi

5 years agofireinfo: Import latest patches
Michael Tremer [Fri, 20 Jul 2018 12:06:11 +0000 (12:06 +0000)] 
fireinfo: Import latest patches

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoinstaller: Run install-bootloader script instead of own code
Michael Tremer [Fri, 20 Jul 2018 11:59:00 +0000 (11:59 +0000)] 
installer: Run install-bootloader script instead of own code

This allows us to keep the GRUB installation routine in one
place only.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agopartresize: Remove debugging line
Michael Tremer [Fri, 20 Jul 2018 11:53:55 +0000 (11:53 +0000)] 
partresize: Remove debugging line

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agopartresize: Only regenerate configuration instead of re-installing GRUB
Michael Tremer [Fri, 20 Jul 2018 11:53:24 +0000 (11:53 +0000)] 
partresize: Only regenerate configuration instead of re-installing GRUB

This should not be necessary

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoMove update-bootloader script into installer
Michael Tremer [Fri, 20 Jul 2018 11:51:50 +0000 (11:51 +0000)] 
Move update-bootloader script into installer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoupdate-bootloader: Allow passing device to install GRUB on
Michael Tremer [Fri, 20 Jul 2018 11:47:35 +0000 (11:47 +0000)] 
update-bootloader: Allow passing device to install GRUB on

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoupdate-bootloader: Extend script to support EFI
Michael Tremer [Fri, 20 Jul 2018 11:34:55 +0000 (11:34 +0000)] 
update-bootloader: Extend script to support EFI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoflash-image: use FAT for /boot partition on aarch64
Arne Fitzenreiter [Fri, 20 Jul 2018 11:24:49 +0000 (12:24 +0100)] 
flash-image: use FAT for /boot partition on aarch64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agoMerge branch 'next' into efi
Arne Fitzenreiter [Thu, 19 Jul 2018 17:15:50 +0000 (18:15 +0100)] 
Merge branch 'next' into efi

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Conflicts:
config/kernel/kernel.config.aarch64-ipfire

5 years agokernel: aarch64: enable virtio drivers
Arne Fitzenreiter [Thu, 19 Jul 2018 08:30:47 +0000 (09:30 +0100)] 
kernel: aarch64: enable virtio drivers

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agou-boot: boot aarch64 kernel without -multi extension
Arne Fitzenreiter [Thu, 19 Jul 2018 08:29:44 +0000 (09:29 +0100)] 
u-boot: boot aarch64 kernel without -multi extension

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agokernel: apply multi arch patchset for aarch64
Arne Fitzenreiter [Thu, 19 Jul 2018 08:28:27 +0000 (09:28 +0100)] 
kernel: apply multi arch patchset for aarch64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agocdrom: mkisofs seems to not like the order of the arguments
Michael Tremer [Mon, 16 Jul 2018 21:35:21 +0000 (22:35 +0100)] 
cdrom: mkisofs seems to not like the order of the arguments

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoRootfile update
Michael Tremer [Mon, 16 Jul 2018 21:31:11 +0000 (22:31 +0100)] 
Rootfile update

We don't have EFI on i586

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoAWS: Give setup user permissions to read its own SSH keys
Michael Tremer [Sat, 14 Jul 2018 14:06:39 +0000 (15:06 +0100)] 
AWS: Give setup user permissions to read its own SSH keys

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoaws: Unlock setup account
Michael Tremer [Thu, 12 Jul 2018 14:37:59 +0000 (15:37 +0100)] 
aws: Unlock setup account

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoaws: Install SSH keys only for setup user
Michael Tremer [Thu, 12 Jul 2018 12:57:19 +0000 (13:57 +0100)] 
aws: Install SSH keys only for setup user

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoaws: setup user should not be a system user
Michael Tremer [Thu, 12 Jul 2018 12:55:38 +0000 (13:55 +0100)] 
aws: setup user should not be a system user

Login is not permitted for system users

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agokernel: Enable EFI on aarch64
Michael Tremer [Sat, 14 Jul 2018 13:05:09 +0000 (14:05 +0100)] 
kernel: Enable EFI on aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoflash-images: Only install grub for EFI on aarch64
Michael Tremer [Thu, 12 Jul 2018 12:59:07 +0000 (13:59 +0100)] 
flash-images: Only install grub for EFI on aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Run isohybrid only when we have syslinux
Michael Tremer [Thu, 12 Jul 2018 09:39:57 +0000 (10:39 +0100)] 
cdrom: Run isohybrid only when we have syslinux

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Fix building GRUB image for aarch64
Michael Tremer [Tue, 10 Jul 2018 17:10:14 +0000 (18:10 +0100)] 
cdrom: Fix building GRUB image for aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Install ISOLINUX only on some architectures
Michael Tremer [Tue, 10 Jul 2018 14:34:30 +0000 (15:34 +0100)] 
cdrom: Install ISOLINUX only on some architectures

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Install iPXE only on x86
Michael Tremer [Tue, 10 Jul 2018 13:38:21 +0000 (14:38 +0100)] 
cdrom: Install iPXE only on x86

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Install memtest only on x86
Michael Tremer [Thu, 5 Jul 2018 22:29:20 +0000 (23:29 +0100)] 
cdrom: Install memtest only on x86

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoBuild efibootmgr and efivars only for x86_64 and aarch64
Michael Tremer [Thu, 21 Jun 2018 14:53:38 +0000 (15:53 +0100)] 
Build efibootmgr and efivars only for x86_64 and aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agosyslinux: Update to 6.04-pre1
Michael Tremer [Sun, 17 Jun 2018 21:49:14 +0000 (22:49 +0100)] 
syslinux: Update to 6.04-pre1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoinstaller: Install GRUB in removable mode as well
Michael Tremer [Sun, 17 Jun 2018 17:18:25 +0000 (18:18 +0100)] 
installer: Install GRUB in removable mode as well

This allows that a system will boot IPFire even when
no boot entry is configured in the EFI BIOS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoinstaller: Always install EFI bootloader on x86_64 and aarch64
Michael Tremer [Sun, 17 Jun 2018 17:16:26 +0000 (18:16 +0100)] 
installer: Always install EFI bootloader on x86_64 and aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoinstaller: Create a flag that marks if EFI support is available
Michael Tremer [Sun, 17 Jun 2018 17:15:08 +0000 (18:15 +0100)] 
installer: Create a flag that marks if EFI support is available

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoflash-image+cdrom: Execute ARMv5-specific code on ARMv5
Michael Tremer [Wed, 13 Jun 2018 22:21:58 +0000 (23:21 +0100)] 
flash-image+cdrom: Execute ARMv5-specific code on ARMv5

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoRootfile update for parted
Michael Tremer [Wed, 13 Jun 2018 22:05:44 +0000 (23:05 +0100)] 
Rootfile update for parted

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoBuild GRUB on aarch64
Michael Tremer [Mon, 11 Jun 2018 17:32:42 +0000 (18:32 +0100)] 
Build GRUB on aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomake.sh: Build popt earlier
Michael Tremer [Mon, 11 Jun 2018 16:13:40 +0000 (17:13 +0100)] 
make.sh: Build popt earlier

efivars depends on it and since it is a very common library
without any dependencies, we can build it very early

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agogrub: Don't explicitely set the font
Michael Tremer [Mon, 11 Jun 2018 09:32:28 +0000 (10:32 +0100)] 
grub: Don't explicitely set the font

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoinstaller: Add support to install on EFI systems
Michael Tremer [Mon, 11 Jun 2018 09:31:29 +0000 (10:31 +0100)] 
installer: Add support to install on EFI systems

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoparted: Update to 3.2
Michael Tremer [Mon, 11 Jun 2018 09:17:54 +0000 (10:17 +0100)] 
parted: Update to 3.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoflash-images: Make EFI partition 32MB
Michael Tremer [Thu, 7 Jun 2018 22:31:13 +0000 (23:31 +0100)] 
flash-images: Make EFI partition 32MB

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoflash-images: Cleanup partitioning code
Michael Tremer [Thu, 7 Jun 2018 22:18:08 +0000 (23:18 +0100)] 
flash-images: Cleanup partitioning code

No functional changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoflash-images: Mark the /boot partition as bootable
Michael Tremer [Thu, 7 Jun 2018 21:22:02 +0000 (22:22 +0100)] 
flash-images: Mark the /boot partition as bootable

Before, the ESP was marked as bootable which isn't necessary

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoflash-image: Use grub-install to install GRUB in EFI mode
Michael Tremer [Thu, 7 Jun 2018 21:18:32 +0000 (22:18 +0100)] 
flash-image: Use grub-install to install GRUB in EFI mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoflash-image: Mark the EFI system partition as such
Michael Tremer [Thu, 7 Jun 2018 21:17:34 +0000 (22:17 +0100)] 
flash-image: Mark the EFI system partition as such

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoflash-image: Remove any other GRUB configuration files in EFI mode
Michael Tremer [Thu, 7 Jun 2018 21:17:05 +0000 (22:17 +0100)] 
flash-image: Remove any other GRUB configuration files in EFI mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agogrub: Don't install an empty EFI configuration file
Michael Tremer [Thu, 7 Jun 2018 21:15:58 +0000 (22:15 +0100)] 
grub: Don't install an empty EFI configuration file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoAdd efibootmgr and efivar
Michael Tremer [Thu, 7 Jun 2018 14:33:48 +0000 (15:33 +0100)] 
Add efibootmgr and efivar

These packages are required to manage EFI boot options

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Select installation as default
Michael Tremer [Thu, 31 May 2018 14:24:51 +0000 (15:24 +0100)] 
cdrom: Select installation as default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoinstaller: Detect if we are running in EFI mode
Michael Tremer [Thu, 31 May 2018 14:24:39 +0000 (15:24 +0100)] 
installer: Detect if we are running in EFI mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Keep the EFI image on the ISO9660 file system as well
Michael Tremer [Thu, 31 May 2018 14:08:53 +0000 (15:08 +0100)] 
cdrom: Keep the EFI image on the ISO9660 file system as well

This allows systems to boot the EFI bootloader from the CDROM
file system instead of using the FAT filesystem which is for USB keys.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Add grub.cfg that allows to install IPFire
Michael Tremer [Thu, 31 May 2018 13:57:12 +0000 (14:57 +0100)] 
cdrom: Add grub.cfg that allows to install IPFire

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoEnable EFI on aarch64
Michael Tremer [Thu, 31 May 2018 12:47:47 +0000 (13:47 +0100)] 
Enable EFI on aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Install GRUB into EFI image
Michael Tremer [Thu, 31 May 2018 12:46:56 +0000 (13:46 +0100)] 
cdrom: Install GRUB into EFI image

This will start GRUB on EFI systems when booting from CD

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoFix syntax error in lfs/cdrom
Michael Tremer [Thu, 31 May 2018 11:46:01 +0000 (12:46 +0100)] 
Fix syntax error in lfs/cdrom

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agosyslinux: FTBFS with newer ld
Michael Tremer [Thu, 31 May 2018 10:01:08 +0000 (11:01 +0100)] 
syslinux: FTBFS with newer ld

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomake.sh: cdrkit required cmake to build
Michael Tremer [Thu, 31 May 2018 10:00:43 +0000 (11:00 +0100)] 
make.sh: cdrkit required cmake to build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agogrub: Build new version in EFI mode
Michael Tremer [Wed, 30 May 2018 14:43:30 +0000 (15:43 +0100)] 
grub: Build new version in EFI mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoAdjust variables that have been renamed
Michael Tremer [Wed, 30 May 2018 14:23:57 +0000 (15:23 +0100)] 
Adjust variables that have been renamed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Simplify commands that author the ISO image
Michael Tremer [Tue, 29 May 2018 19:14:59 +0000 (20:14 +0100)] 
cdrom: Simplify commands that author the ISO image

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocdrom: Build EFI-enabled ISO image
Michael Tremer [Fri, 16 Oct 2015 21:57:18 +0000 (23:57 +0200)] 
cdrom: Build EFI-enabled ISO image

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoConfig: Have a simple configuration variable that enables EFI
Michael Tremer [Fri, 16 Oct 2015 21:56:45 +0000 (23:56 +0200)] 
Config: Have a simple configuration variable that enables EFI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agosyslinux: Update to 6.03
Michael Tremer [Fri, 16 Oct 2015 21:52:09 +0000 (23:52 +0200)] 
syslinux: Update to 6.03

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoRemove dvdrtools for cdrkit
Michael Tremer [Sat, 3 Oct 2015 19:32:12 +0000 (21:32 +0200)] 
Remove dvdrtools for cdrkit

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoipfire-netboot: Ship EFI image
Michael Tremer [Sat, 3 Oct 2015 18:25:34 +0000 (20:25 +0200)] 
ipfire-netboot: Ship EFI image

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoEnable EFI on x86_64
Michael Tremer [Sat, 19 Sep 2015 21:17:02 +0000 (23:17 +0200)] 
Enable EFI on x86_64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoEnhance the flash image to support EFI
Michael Tremer [Sat, 22 Aug 2015 20:18:18 +0000 (21:18 +0100)] 
Enhance the flash image to support EFI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoRootfile update for aarch64 kernel
Michael Tremer [Sat, 14 Jul 2018 12:43:13 +0000 (13:43 +0100)] 
Rootfile update for aarch64 kernel

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoaarch64: Remove -multi suffix from kernel
Michael Tremer [Thu, 5 Jul 2018 22:28:15 +0000 (23:28 +0100)] 
aarch64: Remove -multi suffix from kernel

This gets in the way for authoring the CD and we will
never have any other kernels but the main one.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agolinux: Simplify compiling and installing the kernel
Michael Tremer [Thu, 5 Jul 2018 22:27:24 +0000 (23:27 +0100)] 
linux: Simplify compiling and installing the kernel

There was loads of duplicated code which could have been
made shorter by adding one variable.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoiptables: Ship all modules
Michael Tremer [Thu, 12 Jul 2018 09:04:37 +0000 (10:04 +0100)] 
iptables: Ship all modules

These have been all disabled with the last update of
the iptables package.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoRootfile update
Michael Tremer [Thu, 12 Jul 2018 09:03:34 +0000 (10:03 +0100)] 
Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoaws: Don't start ssh right away
Michael Tremer [Thu, 12 Jul 2018 08:59:31 +0000 (09:59 +0100)] 
aws: Don't start ssh right away

sshctrl calls sshd directly which won't work at time of the first boot
because no keys will be generated.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoOpenVPN: Deleted mtu-disc completely since it has been dropped.
Erik Kapfer [Fri, 6 Jul 2018 03:57:59 +0000 (05:57 +0200)] 
OpenVPN: Deleted mtu-disc completely since it has been dropped.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoclamav: Update to 0.100.1
Matthias Fischer [Mon, 9 Jul 2018 18:53:45 +0000 (20:53 +0200)] 
clamav: Update to 0.100.1

For details see:
https://blog.clamav.net/2018/07/clamav-01001-has-been-released.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoaws: Create "setup" user to run setup
Michael Tremer [Tue, 10 Jul 2018 17:32:20 +0000 (18:32 +0100)] 
aws: Create "setup" user to run setup

Amazon does not permit that a user logs in as root directly.
Instead they insist on using sudo.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agousbutils: Update rootfile
Michael Tremer [Tue, 3 Jul 2018 19:01:46 +0000 (20:01 +0100)] 
usbutils: Update rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agospice-protocol: rootfile update
Arne Fitzenreiter [Tue, 3 Jul 2018 15:03:37 +0000 (16:03 +0100)] 
spice-protocol: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agolibgcrypt: rootfile update
Arne Fitzenreiter [Tue, 3 Jul 2018 15:01:35 +0000 (16:01 +0100)] 
libgcrypt: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agoUpdate translations
Michael Tremer [Tue, 3 Jul 2018 14:33:04 +0000 (15:33 +0100)] 
Update translations

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoOpenVPN: x509 and DH-parameter check with Warnings and error messages in WUI
Erik Kapfer [Wed, 27 Jun 2018 07:34:21 +0000 (09:34 +0200)] 
OpenVPN: x509 and DH-parameter check with Warnings and error messages in WUI

Changes includes:
Own crypto warning and error message in WUI (can be extended to configuration too).
Check if DH-parameter is < 2048 bit with an error message and howto fix it.
Check if md5 is still in use with an error message and suggestion how to proceed further to fix it.
Check for soon needed RFC3280 TLS rules compliants and suggestion how to proceed further to fix it.
Disabled 1024 bit DH-parameter upload.
Changed de and en language files for DH-parameter upload (deleted 1024 bit).
Added explanations to de and en language files for the above changes.
Fixed Typo in en language file.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoRevert "OpenVPN: Clarify fundamental crypto errors but also warnings in WUI"
Michael Tremer [Tue, 3 Jul 2018 14:32:42 +0000 (15:32 +0100)] 
Revert "OpenVPN: Clarify fundamental crypto errors but also warnings in WUI"

This reverts commit 15a3aa45cf27c61a581f892b5f3a3905335a12b0.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocollect: fix cpufreq graph on some machines.
Arne Fitzenreiter [Tue, 3 Jul 2018 13:07:41 +0000 (15:07 +0200)] 
collect: fix cpufreq graph on some machines.

the file cpuinfo_cur_freq does not exist on all systems that support collect
cpufreq data.

fixes #11739

5 years agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Tue, 3 Jul 2018 10:52:18 +0000 (11:52 +0100)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

5 years agoMerge branch 'aarch64' into next
Arne Fitzenreiter [Tue, 3 Jul 2018 10:52:05 +0000 (11:52 +0100)] 
Merge branch 'aarch64' into next

Conflicts:
config/rootfiles/core/121/filelists/acpid
config/rootfiles/core/121/filelists/apache2
config/rootfiles/core/121/filelists/apr
config/rootfiles/core/121/filelists/aprutil
config/rootfiles/core/121/filelists/armv5tel/files
config/rootfiles/core/121/filelists/armv5tel/linux-initrd-kirkwood
config/rootfiles/core/121/filelists/armv5tel/linux-initrd-multi
config/rootfiles/core/121/filelists/armv5tel/linux-kirkwood
config/rootfiles/core/121/filelists/armv5tel/linux-multi
config/rootfiles/core/121/filelists/armv5tel/rpi-firmware
config/rootfiles/core/121/filelists/armv5tel/u-boot
config/rootfiles/core/121/filelists/armv5tel/u-boot-kirkwood
config/rootfiles/core/121/filelists/armv5tel/u-boot-mkimage
config/rootfiles/core/121/filelists/beep
config/rootfiles/core/121/filelists/cmake
config/rootfiles/core/121/filelists/crda
config/rootfiles/core/121/filelists/dhcp
config/rootfiles/core/121/filelists/flex
config/rootfiles/core/121/filelists/i586/grub
config/rootfiles/core/121/filelists/i586/intel-microcode
config/rootfiles/core/121/filelists/i586/linux
config/rootfiles/core/121/filelists/i586/linux-initrd
config/rootfiles/core/121/filelists/iw
config/rootfiles/core/121/filelists/jwhois
config/rootfiles/core/121/filelists/libidn
config/rootfiles/core/121/filelists/multipath-tools
config/rootfiles/core/121/filelists/pcre
config/rootfiles/core/121/filelists/tar
config/rootfiles/core/121/filelists/unbound
config/rootfiles/core/121/filelists/wget
config/rootfiles/core/121/filelists/x86_64/grub
config/rootfiles/core/121/filelists/x86_64/intel-microcode
config/rootfiles/core/121/filelists/x86_64/linux
config/rootfiles/core/121/filelists/x86_64/linux-initrd
config/rootfiles/core/122/filelists/aarch64/files
config/rootfiles/core/122/filelists/acpid
config/rootfiles/core/122/filelists/apache2
config/rootfiles/core/122/filelists/apr
config/rootfiles/core/122/filelists/aprutil
config/rootfiles/core/122/filelists/armv5tel/linux-initrd-kirkwood
config/rootfiles/core/122/filelists/armv5tel/linux-initrd-multi
config/rootfiles/core/122/filelists/armv5tel/linux-kirkwood
config/rootfiles/core/122/filelists/armv5tel/linux-multi
config/rootfiles/core/122/filelists/armv5tel/rpi-firmware
config/rootfiles/core/122/filelists/armv5tel/u-boot
config/rootfiles/core/122/filelists/armv5tel/u-boot-kirkwood
config/rootfiles/core/122/filelists/armv5tel/u-boot-mkimage
config/rootfiles/core/122/filelists/beep
config/rootfiles/core/122/filelists/cmake
config/rootfiles/core/122/filelists/crda
config/rootfiles/core/122/filelists/dhcp
config/rootfiles/core/122/filelists/flex
config/rootfiles/core/122/filelists/i586/grub
config/rootfiles/core/122/filelists/i586/intel-microcode
config/rootfiles/core/122/filelists/i586/linux
config/rootfiles/core/122/filelists/i586/linux-initrd
config/rootfiles/core/122/filelists/iw
config/rootfiles/core/122/filelists/jwhois
config/rootfiles/core/122/filelists/libidn
config/rootfiles/core/122/filelists/multipath-tools
config/rootfiles/core/122/filelists/pcre
config/rootfiles/core/122/filelists/tar
config/rootfiles/core/122/filelists/unbound
config/rootfiles/core/122/filelists/wget
config/rootfiles/core/122/filelists/x86_64/grub
config/rootfiles/core/122/filelists/x86_64/intel-microcode
config/rootfiles/core/122/filelists/x86_64/linux
config/rootfiles/core/122/filelists/x86_64/linux-initrd
config/rootfiles/core/123/filelists/unbound
config/rootfiles/oldcore/121/filelists/acpid
config/rootfiles/oldcore/121/filelists/apache2
config/rootfiles/oldcore/121/filelists/apr
config/rootfiles/oldcore/121/filelists/aprutil
config/rootfiles/oldcore/121/filelists/armv5tel/files
config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-kirkwood
config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-multi
config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-rpi
config/rootfiles/oldcore/121/filelists/armv5tel/linux-kirkwood
config/rootfiles/oldcore/121/filelists/armv5tel/linux-multi
config/rootfiles/oldcore/121/filelists/armv5tel/linux-rpi
config/rootfiles/oldcore/121/filelists/armv5tel/rpi-firmware
config/rootfiles/oldcore/121/filelists/armv5tel/u-boot
config/rootfiles/oldcore/121/filelists/armv5tel/u-boot-kirkwood
config/rootfiles/oldcore/121/filelists/armv5tel/u-boot-mkimage
config/rootfiles/oldcore/121/filelists/beep
config/rootfiles/oldcore/121/filelists/cmake
config/rootfiles/oldcore/121/filelists/crda
config/rootfiles/oldcore/121/filelists/dhcp
config/rootfiles/oldcore/121/filelists/flex
config/rootfiles/oldcore/121/filelists/i586/grub
config/rootfiles/oldcore/121/filelists/i586/intel-microcode
config/rootfiles/oldcore/121/filelists/i586/linux
config/rootfiles/oldcore/121/filelists/i586/linux-initrd
config/rootfiles/oldcore/121/filelists/iw
config/rootfiles/oldcore/121/filelists/jwhois
config/rootfiles/oldcore/121/filelists/libidn
config/rootfiles/oldcore/121/filelists/multipath-tools
config/rootfiles/oldcore/121/filelists/pcre
config/rootfiles/oldcore/121/filelists/tar
config/rootfiles/oldcore/121/filelists/wget
config/rootfiles/oldcore/121/filelists/x86_64/grub
config/rootfiles/oldcore/121/filelists/x86_64/intel-microcode
config/rootfiles/oldcore/121/filelists/x86_64/linux
config/rootfiles/oldcore/121/filelists/x86_64/linux-initrd
make.sh

5 years agoUpdate languages
Michael Tremer [Tue, 3 Jul 2018 09:34:57 +0000 (10:34 +0100)] 
Update languages

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoOpenVPN: Clarify fundamental crypto errors but also warnings in WUI
Erik Kapfer [Thu, 21 Jun 2018 09:46:36 +0000 (11:46 +0200)] 
OpenVPN: Clarify fundamental crypto errors but also warnings in WUI

Since OpenVPN-2.4.x, a lot of changes has been introduced. This patch should help the users for better understanding of errors in the cryptography.
It includes also potential warnings for upcoming changes and needed adjustments in the system.
This can also be extended in the future for upcoming configuration changes.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoOpenVPN: Prevent internal server error cause of bad header wrapper
Erik Kapfer [Thu, 21 Jun 2018 09:12:53 +0000 (11:12 +0200)] 
OpenVPN: Prevent internal server error cause of bad header wrapper

This fixes #11772 .

If the X509 are deleted, the openvpnctrl output generates a bad header wrapper error from the CGI
which causes an internal server error. The redirection of the openvpnctrl output fixes this.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agohplip: Update to version 3.18.6
Erik Kapfer [Thu, 21 Jun 2018 11:52:13 +0000 (13:52 +0200)] 
hplip: Update to version 3.18.6

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoguardian: Update to 2.0.2
Stefan Schantl [Wed, 27 Jun 2018 17:39:14 +0000 (19:39 +0200)] 
guardian: Update to 2.0.2

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoguardian.cgi: Remove support for owncloud
Stefan Schantl [Wed, 27 Jun 2018 17:39:13 +0000 (19:39 +0200)] 
guardian.cgi: Remove support for owncloud

Owncloud as an addon has been dropped for IPFire. As a result of this,
we do not need this code anymore.

Fixes #11572.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore123: Ship updated sysctl.conf
Michael Tremer [Tue, 3 Jul 2018 09:33:23 +0000 (10:33 +0100)] 
core123: Ship updated sysctl.conf

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agohide kernel addresses in /proc
Peter Müller [Sat, 30 Jun 2018 09:44:06 +0000 (11:44 +0200)] 
hide kernel addresses in /proc

Make sure kernel address space is hidden from files somewhere
in /proc . This reduces attack surface and partially addresses #11659.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore123: Ship updated usbutils
Michael Tremer [Tue, 3 Jul 2018 09:32:43 +0000 (10:32 +0100)] 
core123: Ship updated usbutils

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agousbutils: update to 010
Peter Müller [Sat, 30 Jun 2018 15:04:42 +0000 (17:04 +0200)] 
usbutils: update to 010

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore123: Ship updated GeoIP.dat
Michael Tremer [Tue, 3 Jul 2018 09:32:08 +0000 (10:32 +0100)] 
core123: Ship updated GeoIP.dat

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoupdate GeoIP.dat database
Peter Müller [Sat, 30 Jun 2018 15:10:12 +0000 (17:10 +0200)] 
update GeoIP.dat database

There are two GeoIP databases used in IPFire: One for firewall
rules, which is downloaded and installed automatically, and a
second one ("GeoIP.dat") for WebUI lookups via the Perl interface.

The latter one is not updated automatically and was outdated.
libloc will make things much easier here...

Fixes #11777.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomultipath-tools: Update to 0.7.7
Michael Tremer [Mon, 2 Jul 2018 18:10:36 +0000 (19:10 +0100)] 
multipath-tools: Update to 0.7.7

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>