kernel: update to 5.10.26

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.25

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.24

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update i586 and x86_64 rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: i586 and x86_64 rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.23

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: fix messed up armv5tel rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kerneltest: add dhcpcd to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Revert "Revert "dhcpcd: Update to 9.4.0""

This reverts commit c1b356d20da2ebb162072787927b5babbafebfa4.

Revert "Revert "dhcpcd: Update to 9.3.4""

This reverts commit 7c6a4babf851a13292f0cfa90ca9e3fbfc42525c.

initskripts: networking: fix dhcpcd shutdown

with kernel 5.10 dhcpcd hung at shutdown if red was a wireless client
becuase there was two running instances. This change repeat the
dcpcd -k call.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.22

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: arm* disable alg modules

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: arm* oldconfig

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: arm* enable UAS for USB storage

this is needed for newer USB enclosures to support trim
and get better speed. (already enabled on x86*)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: x86* disable alg modules

the application layer gateway modules can used to bypass the nat
via nat slipstreaming. I had disabled all of them. If one is really needed
we can reenable it later.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.21

kernel: update to 5.10.20

kernel: fix leds on geos and alix

the platform driver cannot register the leds if GPIO_CS5535 is compiled as module

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.19

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.18

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.17

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kerneltest: add leds initskript.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

initskripts: leds: remove obsolete kirkwood devices

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

initskripts: leds: add new pcengines apu1 led name.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: add pc engines apu1 led detection with new bios.

bios 4.x change the dmi device name from APU to apu1

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

initskripts: leds: update for new upstream netdev-trigger

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.16

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.15

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.14

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kerneltest: add xtabkes-addons, linux-atm, u-boot and firewall initskript

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update aarch64 config and rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kerneltest: remove intel microcode and update ssh settings

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update i586 and x86_64 rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.13

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: x86_64 rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.12

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.11

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Revert "Revert "make: update to 4.3""

This reverts commit 85f5656aca91992d8cf135da603d729cc8ac8e0d.

u-boot-friendlyarm: disable build

this does not built with kernel-5.10 (headers?)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

u-boot: update to 2021.01

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update armv5tel config and rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.10

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

add kerneltest core update to build installable package for testing

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: i586 and x86_64 rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: enable PREEMPT_VOLUNTARY and set timer to 100HZ

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.9

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: Enable BBR as default TCP congestion algorithm

This will increase throughput since BBR is more modern and adjusted to
the nowadays version of the Internet whereas Cubic is more conservative
and might not always fully saturate the downlink.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Enable DMA engines on x86_64

Those are already enabled as modules in i586.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Trust the randomness from the CPU

This will allow the kernel to seed its CRNG using RDSEED or RDRAND.

During the boot process, it is required that the CRNG is being
initialised, but it may take some long time on systems that do not have
a random number generator.

This is the default for various other distributions like Debian.

Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Compile RNG drivers into the kernel

The kernel will try to gather entropy really early in the boot process
where those device drivers might not have been loaded yet. They are
small and can therefore be compiled into the kernel like we already do
on ARM.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: update to 5.10.6

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

kernel: update to 5.10.5

todo: add armv5tel and aarch64 config and rootfiles.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

xtables-addons: update to 3.13

this is needed for kernel 5.10.x

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

linux-atm: fix build with kernel >= 5.2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core158: Ship ppp

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "ppp: update to 2.4.9"

This reverts commit 0cd9215b565e7c3ef34699b695aaab7eba1dc510.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

aws-cli: Depend on python3-six

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "python-six: Removal of python2 & 3 addon versions of six"

This reverts commit 3a61ae73fa179adb24f9feeb8ee486c1900609bf.

This module is required by awscli.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core158: Fully terminate apache before restarting it

Asking apache to restart itself fails when the binary is changed and
some symbols cannot be resolved. We therefore terminate all processes
and start them again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core158: Fix name of vnstat initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core158: Actually drop motion instead of monit

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core158: Uninstall all dropped add-ons

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update French translation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "OpenSSH: restrict file permissions for sshd_config to 0600"

This reverts commit a9fb87809eccdc7ea7736659ceec929a028761d4.

This prevents the SSH configuration being parsed by the web user
interface.

Reported-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "ncat: Update to 7.91"

This reverts commit ee3b6ba0c7d3cc88667922f96db2ac0bd5630625.

ncat segfaults straight away (#12647)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Fix typos.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Call correct system_output() function.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'core157'

core157: Ship lua

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ovpnmain.cgi: Fix detection of used DH key lenght.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

vpnmain.cgi: Fix typo.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pppsetup.cgi: Fix typos.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'origin/next'

nano: Update to 5.8

For details see:
https://www.nano-editor.org/news.php

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

knot: Update to 3.0.7

For details see:
https://www.knot-dns.cz/2021-06-16-version-307.html

Features:

        knotd: new configuration policy option for CDS digest algorithm setting #738
        keymgr: new command for primary SOA serial manipulation in on-secondary signing mode

Improvements:

        knotd: improved algorithm rollover to shorten the last step of old RRSIG publication

Bugfixes:

        knotd: zone is flushed upon server start, despite DNSSEC signing is up-to-date
        knotd: wildcard nonexistence is proved on empty-non-terminal query
        knotd: redundant wildcard proof for non-authoritative data in a reply
        knotd: missing wildcard proofs in a wildcard-cname loop reply
        knotd: incorrectly synthesized CNAME owner from a wildcard record #715
        knotd: zone-in-journal changeset ignores journal-max-usage limit #736
        knotd: incorrect processing of zone-in-journal changeset with SOA serial 0
        knotd: broken initialization of processing workers if SO_REUSEPORT(_LB) not available
        kjournalprint: reported journal usage is incorrect #736
        keymgr: cannot parse algorithm name ed448 #739
        keymgr: default key size not set properly
        kdig: failed to process huge DoH responses
        libknot/probe: some corner-case bugs

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Tor: update to 0.4.6.5

Please refer to the .tar.gz's ReleaseNote file for the full changelog
since version 0.4.5.8; it is too large to include it here.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

speed.cgi: Add requirement for general-functions.pl.

The CGI now requires the general-functions library, because the
get_red_interface() function is used.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

memory.cgi: Fix missing qoutes.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Drop obsolete files from bluetooth package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

general-functions.pl: Explicitely call new system function

Perl seems to just "guess" that someone no longer wants to use the
builtin "system" command when there is a function with the same name.

I have no idea what kind of liquid they are drinking, but because of the
side effects of that stuff, we explicitely call our system() function.

Not that that would be necessary, but why not waste a couple more CPU
cycles?

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Bump release of all packages with CGI files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

proxy.cgi: Suppress Squid version by default

While hiding version information does not come with any _actual_
security improvements, it is generally a good thing to do so by default:
Attackers will still be able to reasonably guess or enumerate the
software version running, but need to conduct additional effort to do
so, hence more likely raising alerts and drawing attention on their
operation.

In addition, we suppress version details somewhere else in IPFire 2.x by
default, too (e. g. Unbound and Apache), so we can justify this patch by
aiming to stay consistent, I guess. :-)

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core158: Ship web-user-interface

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'perl-system' into next

hardwaregraphs.cgi: Perform all sensor lookups in pure perl.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

services.cgi: Redesign isautorun() because shell globbing cannot used anymore.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

remote.cgi: Fix splitting output from ssh-keygen.

The split function requires an string as input.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

dhcp.cgi: Fix typo and displaying advanced options syntax.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

fireinfo.cgi: Fix read-in profile data.

To read-in the whole file content the data type needs to be an array.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

time.cgi: Get and manipuate date and time in pure perl

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

netexternal.cgi: Grab DNS servers in pure perl

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

ids-functions.pl: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

network-functions.pl: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

mdstat.cgi: Print mdstat status in pure perl

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

fireinfo.cgi: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

vpnmain.cgi: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

pppsetup.cgi: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

wireless.cgi: Use new system methods

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

core158: Ship xfsprogs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>