core159: add makegraphs and hddshutdown cronjob

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

crontab: dont run makegraphs and hddshutdown to the same time

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

makegraphs: fix status collection for hddshutdown

with kernel 5.10.x also the reading of s.m.a.r.t. data to update
the temperatur graphs is countet as disk read so update the stored
value after reading.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

dnsdist: build only for x86_64

32bit archs fail because time_t is only 4 bytes and
aarch64 not build on builders with 2GB ram.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/master' into next

stripper: Handle capabilities

During the build process, we set capabilities to elevate privileges of
certain progrems (e.g. ping). These have been removed during the build
process because of strip.

This patch collects any capabilities from all files that are being
stripped and restores them after calling strip.

Fixes: #12652
Reported-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core158: Run sshctrl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Pakfire: call "sync" in function.sh after having extracted archives

After upgrading to Core Update 157, a few number of users reported their
systems to be unworkable after a reboot. Most of them (the systems, not
the users) were apparently missing the new Linux kernel in their Grub
configuration, causing a non-functional bootloader written to disk.

While we seem to be able to rule out issues related to poor storage
(SDDs, flash cards, etc.) or very high I/O load, it occurred to me we
are not calling "sync" after having extracted a Core Update's .tar.gz
file.

This patch therefore proposes to do so. It is a somewhat homeopathic
approach, though, but might ensure all parts of the system to have
properly processed the contents of an extracted archive. While we cannot
even reasonably guess it will solve the problem(s) mentioned initially,
doing so cannot hurt either.

See also:
https://community.ipfire.org/t/after-update-ipfire-to-157-no-boot/5641/45

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core158: Ship pakfire functions.sh

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire: Do not delay directory restore

https://www.gnu.org/software/tar/manual/tar.html#Directory-Modification-Times-and-Permissions

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire: Put tar options into an array

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire.cgi: Sleep after running a pakfire command

This is required to have better chances in the race of showing the log
output afterwards.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire.cgi: Remove confusing dots in install message

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire.cgi: Pass packages to install/uninstall as array

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fireinfo.cgi: Fix kernel version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

clamav: Update to 0.103.3

For details see:
https://blog.clamav.net/2021/06/clamav-01033-patch-release.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

dnsdist: Fix FTBFS with GCC 11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core159: add collect and libstatgrab

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

collectd: Use libstatgrab to read disk stats

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: Build libstatgrab before collectd

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

libstatgrab: Make it part of the core system

collectd will be using this

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

u-boot: uppdate to 2021.07

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ddns.cgi: Fix sanity check logic.

The input validation did not work in the proper way. It allways
reported "No password" when using a provider which supports token and
the token has been given.

This of course is wrong and leaded to unuseable providers.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strace: enable on aarch64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

openvmtools: update to stable-11.3.0

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

glibc: fix for older i?86 cpu's

with such cpu the libc fails with CPU ISA level is lower than required. So this disable
ISA support.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core159: started

this update is based on core-kerneltest in arne_f/kernel-5.10

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core-kerneltest: add pafire functions.pl

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

pakfire: switch 32bit arm to armv6l

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: armv6l rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

armv6l: update toolchain rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core-kerneltest: add python3 32bit symlinks

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

gcc: fix i586 rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: fix toolchain extension at md5 check

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core-kerneltest: break on armv5tel

Armv5tel is not supported anymore.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

firewall: remove conntrack_gre helper

this is not exist in kernel-5.10

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core-kerneltest: add libxcrypt

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

disable paks that not compile with gcc-11

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.47

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

libxcrypt: update to 4.4.23

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh bump toolchain version

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core-kerneltest: add toolchain upates to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.46

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

i586: toolchain rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

aarch64: toolchain rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

armv6: switch march to armv6zk+fp to use the FPU.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

gcc: remove CCFLAGS only in pass1 of the toolchain

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: fix CCACHE path at toolchain build

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

zlib: use correct gcc at toolchain build

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

zstd: update to 1.5.0 and fix toolchain gcc use.

1.5.0 also fix armv6 bus errors.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

ccache: update to 4.3 and patch armv6 bus errors

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: fix gcc plugin build with gcc-11

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

make.sh: fix toolchain compression

the compression parameters was not accepted by zstd.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

nut: Fix build with GCC 11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

vdr-epgsearch: Fix FTBFS with GCC 11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

vdr-streamdev: Fix FTBFS with GCC 11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

vdr: Fix build with GCC 11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Disable build with -Werror

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

GCC: Update to 11.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fuse: Disable building examples

These won't build with GCC 11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Fix build with GCC 11

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3: Fix build when endianess detection fails

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ccache: Remove CCACHE_COMPRESS=1

This is the default now

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ccache: Update to 4.2.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

binutils: Update rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

GCC: Update to 10.3.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strace: Pass --enable-mpers=check to configure

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

qemu: Remove -no-pie

There is a bug in binutils 2.36 which makes the linker not recognize
-no-pie.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cpufrequtils: Build with -fPIC

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Build zlib + zstd before binutils

binutils is using to compress LTO? debugging data. Since binutils linked
against zstd from stage2 is expecting data being compressed, we need to
have zstd available at the toolchain stage.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Set parallelism to number of CPU cores

Setting it to something higher than the number of physical CPU cores was
a good idea when we used to have slow magnetic storage. That way, at
least there was always one process waiting for IO.

With modern fast flash-based storage, this does not hold any more since
it is fast enough that we don't need to have a couple of processes ready
to wait.

It will probably have made work for the scheduler more challenging since
more processes were ready and processes were moved around processors.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Compress toolchain using ZSTD

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gettext: Fix toolchain build

Instead of attempting to build the parts we need, we will build the
whole package and only install the files we want.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hyperscan: Fix FTBFS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Keep a separate ccache for each toolchain

Because we are deactivating the compiler checksumming, we need to keep a
distinct cache between different versions of the toolchain.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

binutils: Update to 2.36.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glibc: Update to 2.33

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Bump toolchain version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ccache: Update to version 4.1

This version has changed its build system to cmake and
can use zstd. We build zstd just before this package, but
depend on cmake from the host system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

toolchain: Add zstd

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 5.10.45

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

grub: remove unused boothole patchset

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

grub: remove os_probes_disabled warning

the os_prober is disabled by default because it opens an attack vector.
u

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core-kerneltest: add u-boot-mkimage

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

u-boot: update to 2021.07-rc4

fix crashed on RPi boards and maybee others if a usb-keyboard is
connected.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

grub: update to 2.06

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.44

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: armv6l: rootfile: ship module configuration

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core-kerneltest: new rpi firmware has different config.txt

this file also contain overclocking settings so it is normal excluded
now it must shipped.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: armv6l: rootfile remove build files

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

switch arm 32 bit arch from armv5tel to armv6l

we have no supported armv5tel board left so we can switch to the higher
arch. This now can use the vpu (still in softfp calling convention to
not break existing installations.)
this fix many compile problems, also boost is now working again.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

libxcrypt: fix toolchain build

was built with gcc from host instead of gcc pass1.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: fix toolchain header install

the header was built with hostcompiler instead of the pass1 gcc.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.43

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core-kerneltest: remove renamed/obsolete u-boot files

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core-kerneltest: add rpi-firmware

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: armv5tel remove "-multi" config

we have only this kernel left so remove the extension

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: aarch64: enable pcie-brcmstb and brcm2711-thermal for RPi4

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

u-boot: remove rpi ramdisk quirk for aarch64

the u-boot bug that destroy the ramdisk on aarch64 is fixed now

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

u-boot: update to 2021.04

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>