Drop ez-ipupdate

We do not use this at all any more, because it has been replaced
by ddns.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Drop DirectFB

This package is not very useful on its own and nobody
seems to pull this as dependency any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Drop check_mk_agent

This add-on is unmaintained in IPFire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Drop multicat & bitstream

This reverts commit 0a21ce42e113f6c75f992d4ad1b88812ecc6b150.

These packages have never been updated and nodody in the team
is willing to support them.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Drop batctl

This package is no longer used. BATMAN is slightly out of fashion
and can be disabled in our kernel, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Drop arm

This is a CLI tool for Tor which is no longer maintained upstream.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: Build lua before haproxy.

In commit b6ab15eaa2a899944c7edca99769fa4469f215d3 lua support
for haproxy has been enabled, so lua now has to be compiled before
haproxy.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core142: add pakfire changes to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: Configure Pakfire to load packages from the correct tree

This will configure Pakfire that people who install a nightly
build will also get the packages for this build, etc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: Cleanup code that builds ${SYSTEM_RELEASE}

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: Tidy up Git commands

No functional changes. Just making them shorter.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

pakfire: Add version suffix when in a certain tree

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

pakfire.cgi: Add UI to select repository

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

pakfire.cgi: Rename %pakfiresettings to %cgiparams

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

pakfire.cgi: Remove some old settings

These can no longer be modified in the GUI and are used nowhere.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

pakfire: Automatically compose $version

The tree in which pakfire is looking for packages and Core Updates
has been hardcoded into /opt/pakfire/etc/pakfire.conf.

This patch adds a new function which reads the system release
from /etc/system-release.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

dnsdist: Update to 1.4.0

This patch updates dnsdist to the latest release.

Additionally it includes /etc/sysconfig/dnsdist in the backup
and enables DNS-over-TLS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

haproxy: Update to 2.1.3

This updates haproxy to the latest version.

In addition, support for Lua scripts is compiled in.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

suricata: Update to 5.0.2

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 4.14.171

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: armv5tel rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

qemu: bump pak version

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

clamav: Update to 0.102.2

For details see:
https://blog.clamav.net/2020/02/clamav-01022-security-patch-released.html

"ClamAV 0.102.2 is a security patch release..."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Qemu: remove not needed files for aarch64 and PA-RISC

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Qemu: Remove unneeded files

These are needed for s390, riscv and microblaze.

See
https://lists.fedoraproject.org/pipermail/packaging/2012-July/008557.html

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Qemu: remove files for sparc

This is based on the debian package content (qemu-system-sparc)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Qemu: remove files only needed for Power PC

This is based on the debian package content (qemu-system-pcc)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

tmux: Update to 3.0.a

For details see:
https://raw.githubusercontent.com/tmux/tmux/3.0a/CHANGES

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core142: add squid to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

squid: Update to 4.10

For details see:
http://www.squid-cache.org/Versions/v4/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

mc: Update to 4.8.24

For details see:
http://midnight-commander.org/wiki/NEWS-4.8.24

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core142: add suricata changes to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

suricata: Enable RDP protocol parser.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ruleset-sources: Update snort dl urls.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

suricata: Enable new and rust-depended protocol parsers.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Suricata: Update to 5.0.1

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core142: add kernel to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core142: move 140/141 file to oldcore

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core142: start updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: enable and enforce signed kernel modules

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 4.14.170

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: drop kirkwood kernel

perl 5.30 will not work on kirkwood platform and firewinfo reports less than 10 users so we will drop the support for the platform.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

unbound: try resolve twice before time sync with ipfire server

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

unbound: add returncode to resolve function

this is used for time fix check.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

PPP: Always fetch DNS servers from provider

We will later decide whether we want to use them or not

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pppsetup.cgi: Drop DNS setting

This has already been dropped and should not be added again
to the configuration file.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dns.cgi: increase timeout to 5s

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

convert-dns-settings: add ppp/settings to list of converted files

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'core141'

general-functions.pl: Return unique list of nameservers

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ids-functions.pl: Fall back to $EXTERNAL_NET for DNS servers

When no DNS servers are configured (aka recursor mode), the
DNS servers that unbound will try to contact can be anywhere.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ids-functions.pl: Fix generating DNS_SERVERS

The configuration file has an invalid syntax which causes
suricata to fail to start.

There was no comma inserted between DNS servers when there
was more than two of them. This is now fixed in this patch..

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: run pakfire update after db cleanup

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: Modify update-contributors so that it will run with older version of awk

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

convert-dns-settings: Explicitely enable using ISP name servers

The unbound initscript checks if this parameter is on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dns.cgi: Shorten time when checking if DNS is alive

For localhost, one second should be plenty

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dns.cgi: Show recursor mode message even when we have some servers to show

The message was not shown when we have received DNS servers from the
provider.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

convert-dns-settings: remove DNS settings also if no server config is generated

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

convert-dns-settings: Remove DNS variable from PPP profiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

convert-dns-settings: Refactor reading old configuration

This patch makes the code a lot shorter by removing special
cases for all sorts of files when they can all be treaded
equally.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

convert-dns-settings: Fix call for chmod

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

convert-dns-settings: Fix check to prevent doubble-adding the same server

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: manually delete pakfire lists

pakfire update --force
fail sometimes fail and use the old version of the serverlist
and get the old addon list. With removed list it cannot
use the wrong addonlist after update to IPFire 2.25.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: use full path to pakfire

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: fix remove of go8.3.0 directory

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: remove elinks and python3 from pakfire db

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: force packet list update after version change

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

set version and pakfire version to core141

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: correct move of nobeeps flag

in core139 there was a syntax error, and it was missed in
backup converter also.

fixes #12273

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

networking/red: wait only for carrier if device exists

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

rust: rootfiles updates

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: run convert-dns-settings at update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: check free space on root

also force fsck at next boot to free the journal on xfs partitions.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core140: don't system-release and co

This files contain version 141 because there is no extra build
so don't pak it into the updater to prevent wrong display in webgui
if core141 fails because there is not enough diskspace.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core141: cleanup go-8.3.0 and run filesystem-cleanup

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

filesystem-cleanup: fix "fixed space" type

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ids-functions.pl: Introduce file for local rules.

This file is to be used, to store customized IDS rules.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core140: remove /usr/lib/libboost*1.55.0 at cleanup

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

filesystem-cleanup: add /usr/lib/sse2 folder

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core140: insert a core upgrade that only cleans the rootfs

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

rename core140 to core141

we need to insert a core that cleanup root to free some diskspace.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core140: ship glibc built with new gcc

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core140: add gui.cgi

this cgi was forgotten in core139

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

dns.cgi: Display when unbound is running in recursor mode.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

unbound: Use recursor mode if no nameservers are configured

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

azure: Abort script when no instance ID can be retrieved

We cannot reliably determine if a system is running on Hyper-V
on a private server or on the Azure Cloud.

Therefore, we will have to try to retrieve an IP address
with DHCP and try to connect to the metadata service. If either
of those things is not successful, we will just continue with
the setup process as usual.

So cloud instances should be automatically configured now and
all other systems will continue to boot and call the setup
wizard as usual.

Fixes: #12272
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core140: add changed cloudsetup helper tu updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

cloud-init: Remove importing DNS settings

Those scripts used to import settings from the meta-data services
and wrote them to the local configuration files.

For the DNS settings and Amazon, this is no longer possible because
their DNS servers do not support DNSSEC at all. Therefore we default
to recursor mode.

To be consistent across cloud providers, we are doing the same for
Azure.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

modules: Cleanup file

This file has an unsed line for the "fusion" module which
is no longer needed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

modules: No longer load parallel port modules

These modules are loaded by default on all systems.

They are simply a waste of space since not many systems
have parallel ports any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

setup: Do not check DNS settings any more

It has been removed that DNS servers could be configured in
setup, but I forgot to remove a check which leads to new
installations not being able to complete the setup wizard.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

convert-dns-settings: Import all possible PPP dialin profiles.

* Avoid from adding the same imported DNS server multiple times.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core140: fix typo

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

partresize: NanoPi R1: copy also a0 config of Ampac AP6212

there is a second hardware version of the AP6212 in some NanoPi R1
boards.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core140: add lvm2 to core updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

lvm2: Add initscript for lvmetad

This daemon needs to be launched in order to use LVM
devices in IPFire.

It will run on all installations after this patch has been
merged but only consumes very little memory.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

lvm2: Create lock files in /run/lvm

The default is /var/lock which is not mounted at the time
when udev is initialising the volumes. Therefore after a
reboot, LVM devices won't show up unless pvscan is executed
manually.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

lvm2: Enable lvmetad

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

lvm2: Build with support for udev

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>