]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/log
people/pmueller/ipfire-2.x.git
5 years agoslang: revert parallelized build
Matthias Fischer [Sun, 10 Mar 2019 17:04:31 +0000 (18:04 +0100)] 
slang: revert parallelized build

This partially reverts https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=lfs/slang;h=217e74c77317d4c829913f934458779fd278bf29;hb=23164efba5f57b3d8ccb07a166b613f2f951e1b6

'slang 2.3.0' doesn't like "$(MAKETUNING)"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years ago/etc/group: Order groups by ID
Michael Tremer [Fri, 8 Mar 2019 10:11:23 +0000 (10:11 +0000)] 
/etc/group: Order groups by ID

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years ago/etc/passwd: Order users by ID
Michael Tremer [Fri, 8 Mar 2019 10:08:02 +0000 (10:08 +0000)] 
/etc/passwd: Order users by ID

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agozabbix_agent: Create /var/run/zabbix in initscript
Michael Tremer [Fri, 8 Mar 2019 10:04:28 +0000 (10:04 +0000)] 
zabbix_agent: Create /var/run/zabbix in initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agozabbix_agent: Ensure that the user exists on all systems
Michael Tremer [Fri, 8 Mar 2019 09:58:56 +0000 (09:58 +0000)] 
zabbix_agent: Ensure that the user exists on all systems

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agozabbix_agentd: New addon
Alexander Koch [Wed, 13 Feb 2019 23:06:19 +0000 (00:06 +0100)] 
zabbix_agentd: New addon

New addon for monitoring IPFire by Zabbix Monitoring (https://www.zabbix.com/features).
See https://forum.ipfire.org/viewtopic.php?f=52&t=22039 and https://lists.ipfire.org/pipermail/development/2019-February/005324.html for further details.

Best regards,
Alex

Signed-off-by: Alexander Koch <ipfire@starkstromkonsument.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoiptables: Commented legacy ip(6)tables entries from ROOTFILE
Erik Kapfer [Fri, 8 Mar 2019 04:51:55 +0000 (05:51 +0100)] 
iptables: Commented legacy ip(6)tables entries from ROOTFILE

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoinstaller: Download ISO via HTTPS
Michael Tremer [Thu, 7 Mar 2019 11:27:19 +0000 (11:27 +0000)] 
installer: Download ISO via HTTPS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoRevert "boost: Build with -O2 only"
Michael Tremer [Thu, 7 Mar 2019 10:29:31 +0000 (10:29 +0000)] 
Revert "boost: Build with -O2 only"

This reverts commit 9ff5b381eb8a4e129978c34f969e312c302ea7b1.

Boost wants to build with -O3 no matter what

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomake.sh: Fit more processes into memory
Michael Tremer [Mon, 4 Mar 2019 17:21:15 +0000 (17:21 +0000)] 
make.sh: Fit more processes into memory

Because we have a good way to limit processes now, we should
increase the default size a little bit

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoboost: Build with -O2 only
Michael Tremer [Mon, 4 Mar 2019 17:20:52 +0000 (17:20 +0000)] 
boost: Build with -O2 only

This should increase build speed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoConfig: Builds don't seem to like the space
Michael Tremer [Mon, 4 Mar 2019 11:57:22 +0000 (11:57 +0000)] 
Config: Builds don't seem to like the space

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoperl: Limit build to 23 parallel processes
Michael Tremer [Mon, 4 Mar 2019 11:52:34 +0000 (11:52 +0000)] 
perl: Limit build to 23 parallel processes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomake.sh: Introduce MAX_PARALLELISM
Michael Tremer [Mon, 4 Mar 2019 11:51:08 +0000 (11:51 +0000)] 
make.sh: Introduce MAX_PARALLELISM

This will now adjust MAKETUNING to not launch more processes
than MAX_PARALLELISM. Handy to limit builds that use a lot of memory.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomake.sh: Drop MAKETUNING
Michael Tremer [Mon, 4 Mar 2019 11:45:30 +0000 (11:45 +0000)] 
make.sh: Drop MAKETUNING

This is now set in lfs/Config

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomake.sh: Introduce DEFAULT_PARALLELISM
Michael Tremer [Mon, 4 Mar 2019 11:43:47 +0000 (11:43 +0000)] 
make.sh: Introduce DEFAULT_PARALLELISM

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomake.sh: Use variable instead of calling system_processors function again
Michael Tremer [Mon, 4 Mar 2019 11:38:38 +0000 (11:38 +0000)] 
make.sh: Use variable instead of calling system_processors function again

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomake.sh: Rename HOST_MEM to SYSTEM_MEMORY
Michael Tremer [Mon, 4 Mar 2019 11:35:15 +0000 (11:35 +0000)] 
make.sh: Rename HOST_MEM to SYSTEM_MEMORY

We had two variables holding the same data

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agomake.sh: Pass number of processors and total memory so that we can adjust MAKETUNING
Michael Tremer [Mon, 4 Mar 2019 11:33:50 +0000 (11:33 +0000)] 
make.sh: Pass number of processors and total memory so that we can adjust MAKETUNING

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoParallelized build for several packages
Wolfgang Apolinarski [Wed, 20 Feb 2019 19:18:06 +0000 (20:18 +0100)] 
Parallelized build for several packages

Added $(MAKETUNING) to several packages.
Marked packages that do not support parallel build.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship wpa_supplicant
Michael Tremer [Mon, 4 Mar 2019 09:25:13 +0000 (09:25 +0000)] 
core129: Ship wpa_supplicant

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agowpa_supplicant: Update to 2.7
Matthias Fischer [Tue, 5 Mar 2019 18:12:52 +0000 (19:12 +0100)] 
wpa_supplicant: Update to 2.7

For details see:
https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agohostapd: Update to 2.7
Matthias Fischer [Tue, 5 Mar 2019 18:12:51 +0000 (19:12 +0100)] 
hostapd: Update to 2.7

For details see:
https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog

This patch sticks to 'wpa_supplicant: Update to 2.7'.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agonetsnmp: Fix rootfile to build on other architectures
Michael Tremer [Sun, 3 Mar 2019 13:33:52 +0000 (13:33 +0000)] 
netsnmp: Fix rootfile to build on other architectures

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agonetsnmpd: OpenSSL patch is incl. in new version
Erik Kapfer [Wed, 27 Feb 2019 05:03:48 +0000 (06:03 +0100)] 
netsnmpd: OpenSSL patch is incl. in new version

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agonetsnmpd: Update to version 5.8
Erik Kapfer [Wed, 27 Feb 2019 05:03:47 +0000 (06:03 +0100)] 
netsnmpd: Update to version 5.8

Overview of the changes can be found in here https://sourceforge.net/p/net-snmp/mailman/message/36386084/ .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoiptables: Update to 1.8.2
Erik Kapfer [Sun, 3 Mar 2019 08:09:18 +0000 (09:09 +0100)] 
iptables: Update to 1.8.2

netfilter-layer7 has also been updated to v2.23 .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoMerge branch 'ipsec-on-demand' into next
Michael Tremer [Tue, 5 Mar 2019 15:25:36 +0000 (15:25 +0000)] 
Merge branch 'ipsec-on-demand' into next

5 years agovpnmain.cgi: Make on-demand mode default for IPsec VPNs
Michael Tremer [Tue, 5 Mar 2019 15:24:19 +0000 (15:24 +0000)] 
vpnmain.cgi: Make on-demand mode default for IPsec VPNs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agovpnmain.cgi: Carry over START_ACTION attribute correctly
Michael Tremer [Tue, 5 Mar 2019 15:23:33 +0000 (15:23 +0000)] 
vpnmain.cgi: Carry over START_ACTION attribute correctly

This setting was not carried correctly and therefore the default was ignored.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoUnpack intel microcode before initramfs images are being built
Michael Tremer [Sat, 2 Mar 2019 14:55:04 +0000 (14:55 +0000)] 
Unpack intel microcode before initramfs images are being built

Previously, the microcode updates were not packaged in the shipped
initramfs images which causes that Intel processors are still running
on outdated microcode.

This patch moves intel-microcode before we build the initramfs images.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated proxy.cgi
Michael Tremer [Sat, 2 Mar 2019 14:14:14 +0000 (14:14 +0000)] 
core129: Ship updated proxy.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoBug 12008 - Typo in 'proxy.cgi' leads to wrong path for 'basic_ldap_auth'
Matthias Fischer [Sun, 3 Mar 2019 08:37:01 +0000 (09:37 +0100)] 
Bug 12008 - Typo in 'proxy.cgi' leads to wrong path for 'basic_ldap_auth'

Hi,

This should fix https://bugzilla.ipfire.org/show_bug.cgi?id=12008

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated ipset
Michael Tremer [Sat, 2 Mar 2019 14:12:18 +0000 (14:12 +0000)] 
core129: Ship updated ipset

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoipset: Update to version 7.1
Erik Kapfer [Sun, 3 Mar 2019 08:22:50 +0000 (09:22 +0100)] 
ipset: Update to version 7.1

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated tar
Michael Tremer [Sat, 2 Mar 2019 14:11:02 +0000 (14:11 +0000)] 
core129: Ship updated tar

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agotar: Update to 1.32
Matthias Fischer [Sat, 2 Mar 2019 20:24:15 +0000 (21:24 +0100)] 
tar: Update to 1.32

For details see:
http://git.savannah.gnu.org/cgit/tar.git/log/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated bind
Michael Tremer [Sat, 2 Mar 2019 14:10:21 +0000 (14:10 +0000)] 
core129: Ship updated bind

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agobind: Update to 9.11.6
Matthias Fischer [Sat, 2 Mar 2019 20:19:03 +0000 (21:19 +0100)] 
bind: Update to 9.11.6

For details see:
http://ftp.isc.org/isc/bind9/9.11.6/RELEASE-NOTES-bind-9.11.6.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated squid
Michael Tremer [Sat, 2 Mar 2019 14:09:00 +0000 (14:09 +0000)] 
core129: Ship updated squid

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agosquid: Update to 4.6
Matthias Fischer [Sat, 2 Mar 2019 20:08:06 +0000 (21:08 +0100)] 
squid: Update to 4.6

For details see:
http://www.squid-cache.org/Versions/v4/changesets/

The 'configure'-option "--disable-ipv6" was removed, it is no longer necessary.

See:
https://lists.ipfire.org/pipermail/development/2016-April/002046.html

"The --disable-ipv6 build option is now deprecated.
...
Squid-3.5.7 and later will perform IPv6 availability tests on startup in
all builds.

- Where IPv6 is unavailable Squid will continue exactly as it would
have had the build option not been used.

These Squid can have the build option removed now."

The warning message concerning a "BCP 177 violation" while
starting 'squid' can be ignored.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agospectre-meltdown-checker: New package
Michael Tremer [Sat, 2 Mar 2019 13:24:44 +0000 (13:24 +0000)] 
spectre-meltdown-checker: New package

This makes it easy to install the script and check the vulnerability status
of a system IPFire is running on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agobinutils: Ship strings & readelf
Michael Tremer [Sat, 2 Mar 2019 13:01:42 +0000 (13:01 +0000)] 
binutils: Ship strings & readelf

This is needed by the spectre meltdown checker script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoUpdate German translation
Michael Tremer [Sat, 2 Mar 2019 12:01:06 +0000 (12:01 +0000)] 
Update German translation

Mainly adds translation for new IPsec features

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoUpdate of French translation
Stéphane Pautrel [Sat, 2 Mar 2019 11:48:05 +0000 (11:48 +0000)] 
Update of French translation

- Several syntax / vocabulary improvements
- A 2 text missing in the French version
- Improvement of text offering a donation for the users

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agosysctl.conf: Revert enabling busy loop waiting on sockets
Michael Tremer [Thu, 28 Feb 2019 18:53:22 +0000 (18:53 +0000)] 
sysctl.conf: Revert enabling busy loop waiting on sockets

This causes the firmware in my ath10k module to crash.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoUpdate openssl rootfile
Michael Tremer [Wed, 27 Feb 2019 03:52:26 +0000 (03:52 +0000)] 
Update openssl rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated OpenSSL
Michael Tremer [Tue, 26 Feb 2019 17:25:11 +0000 (17:25 +0000)] 
core129: Ship updated OpenSSL

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoopenssl: Update to 1.1.1b
Michael Tremer [Tue, 26 Feb 2019 16:42:49 +0000 (16:42 +0000)] 
openssl: Update to 1.1.1b

This is a bug fix only release

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated credits.cgi
Michael Tremer [Mon, 25 Feb 2019 02:31:23 +0000 (02:31 +0000)] 
core129: Ship updated credits.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoUpdate list of contributors
Michael Tremer [Mon, 25 Feb 2019 02:30:56 +0000 (02:30 +0000)] 
Update list of contributors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated OpenVPN
Michael Tremer [Mon, 25 Feb 2019 02:29:29 +0000 (02:29 +0000)] 
core129: Ship updated OpenVPN

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoOpenVPN: Update to version 2.4.7
Erik Kapfer [Tue, 26 Feb 2019 10:56:47 +0000 (11:56 +0100)] 
OpenVPN: Update to version 2.4.7

Changelog can be found in here https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoupdate Tor to 0.3.5.8
Peter Müller [Sat, 23 Feb 2019 16:54:00 +0000 (16:54 +0000)] 
update Tor to 0.3.5.8

See https://blog.torproject.org/new-releases-tor-0402-alpha-0358-03411-and-03312
for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoupdate metrics links in Tor WebUI
Peter Müller [Sat, 23 Feb 2019 16:54:00 +0000 (16:54 +0000)] 
update metrics links in Tor WebUI

https://atlas.torproject.org/ is deprecated in favour of
https://metrics.torproject.org/ by now.

Fixes #11781.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated libgcrypt
Michael Tremer [Mon, 25 Feb 2019 00:58:04 +0000 (00:58 +0000)] 
core129: Ship updated libgcrypt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agolibgcrypt: update to 1.8.4
Peter Müller [Sat, 23 Feb 2019 16:58:00 +0000 (16:58 +0000)] 
libgcrypt: update to 1.8.4

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship updated unbound
Michael Tremer [Mon, 25 Feb 2019 00:56:49 +0000 (00:56 +0000)] 
core129: Ship updated unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agounbound: Update to 1.9.0
Matthias Fischer [Sat, 9 Feb 2019 09:40:36 +0000 (10:40 +0100)] 
unbound: Update to 1.9.0

For details see:
https://nlnetlabs.nl/svn/unbound/tags/release-1.9.0/doc/Changelog

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore129: Ship changes from ipsec branch
Michael Tremer [Mon, 25 Feb 2019 00:55:31 +0000 (00:55 +0000)] 
core129: Ship changes from ipsec branch

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoMerge branch 'ipsec' into next
Michael Tremer [Mon, 25 Feb 2019 00:48:08 +0000 (00:48 +0000)] 
Merge branch 'ipsec' into next

5 years agoStart Core Update 129
Michael Tremer [Mon, 25 Feb 2019 00:47:28 +0000 (00:47 +0000)] 
Start Core Update 129

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoAdd script to search for missing libraries
Michael Tremer [Sun, 24 Feb 2019 11:45:55 +0000 (11:45 +0000)] 
Add script to search for missing libraries

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore128: Drop old openssl engines
Michael Tremer [Sun, 24 Feb 2019 04:06:52 +0000 (04:06 +0000)] 
core128: Drop old openssl engines

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocups: Depends on bluetooth library
Michael Tremer [Sun, 24 Feb 2019 04:04:51 +0000 (04:04 +0000)] 
cups: Depends on bluetooth library

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore128: add openldap to update
Arne Fitzenreiter [Sun, 24 Feb 2019 19:50:16 +0000 (20:50 +0100)] 
core128: add openldap to update

openldap was linked against old openssl lib

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agocore128: add sse2 openssl libs
Arne Fitzenreiter [Sun, 24 Feb 2019 16:04:44 +0000 (17:04 +0100)] 
core128: add sse2 openssl libs

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agocore128: apply local sshd config
Arne Fitzenreiter [Sun, 24 Feb 2019 09:55:49 +0000 (10:55 +0100)] 
core128: apply local sshd config

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agokernel: update to 4.14.103
Arne Fitzenreiter [Sat, 23 Feb 2019 14:56:21 +0000 (15:56 +0100)] 
kernel: update to 4.14.103

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agocore128: finish core128
Arne Fitzenreiter [Fri, 22 Feb 2019 20:33:45 +0000 (21:33 +0100)] 
core128: finish core128

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agokernel: import cve-2019-8912 patch
Arne Fitzenreiter [Fri, 22 Feb 2019 20:20:57 +0000 (21:20 +0100)] 
kernel: import cve-2019-8912 patch

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agocore128: stop apache before replacing files
Arne Fitzenreiter [Fri, 22 Feb 2019 18:26:08 +0000 (19:26 +0100)] 
core128: stop apache before replacing files

apache will not restart without stopped before
the files was replaced.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agokernel: apu leds: add more id's
Arne Fitzenreiter [Fri, 22 Feb 2019 17:02:45 +0000 (18:02 +0100)] 
kernel: apu leds: add more id's

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agopartresize: add "apu1" for apus with new bios.
Arne Fitzenreiter [Fri, 22 Feb 2019 17:01:18 +0000 (18:01 +0100)] 
partresize: add "apu1" for apus with new bios.

5 years agocore128: add kernel to updater
Arne Fitzenreiter [Thu, 21 Feb 2019 18:23:05 +0000 (19:23 +0100)] 
core128: add kernel to updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agokernel: cleanup unused rpi patch
Arne Fitzenreiter [Thu, 21 Feb 2019 18:13:27 +0000 (19:13 +0100)] 
kernel: cleanup unused rpi patch

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agokernel: update to 4.14.102
Arne Fitzenreiter [Thu, 21 Feb 2019 09:50:15 +0000 (10:50 +0100)] 
kernel: update to 4.14.102

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agopartresize: enable serial console on PC Engines APU
Arne Fitzenreiter [Tue, 19 Feb 2019 12:48:12 +0000 (13:48 +0100)] 
partresize: enable serial console on PC Engines APU

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agokernel: update apu led patch for apu3 and 4
Arne Fitzenreiter [Tue, 19 Feb 2019 00:04:19 +0000 (01:04 +0100)] 
kernel: update apu led patch for apu3 and 4

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agounbound: Drop certificates for local control connection
Michael Tremer [Sun, 17 Feb 2019 13:46:51 +0000 (13:46 +0000)] 
unbound: Drop certificates for local control connection

These are a cause of worry because they are sometimes generated with
an invalid timestamp and therefore render unbound being unusable.

There is no strong reason to use self-signed certificates for extra
security here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoAdded 'CONFIG_X86_MSR=y for 'powertop' to i586 and x86_64 builds for fixing #11997
Matthias Fischer [Sun, 10 Feb 2019 19:21:22 +0000 (20:21 +0100)] 
Added 'CONFIG_X86_MSR=y for 'powertop' to i586 and x86_64 builds for fixing #11997

Triggered by:
https://forum.ipfire.org/viewtopic.php?f=69&t=22274

This - probably - fixes Bug #11997.

Needs testing on 64bit installations!

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoFix ownership of sendEmail script
Rob Brewer [Wed, 13 Feb 2019 22:49:11 +0000 (22:49 +0000)] 
Fix ownership of sendEmail script

The script used to be owned by a non-privileged user and it should
just be owned by root.root like any other binary.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoborgbackup: fix build on armv5tel
Arne Fitzenreiter [Sat, 16 Feb 2019 21:49:47 +0000 (22:49 +0100)] 
borgbackup: fix build on armv5tel

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agokernel: enable PCA953X GPIO extender for ClearFog boards
Arne Fitzenreiter [Sat, 16 Feb 2019 20:40:50 +0000 (21:40 +0100)] 
kernel: enable PCA953X GPIO extender for ClearFog boards

fixes: #12000

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agokernel: update to 4.14.101
Arne Fitzenreiter [Fri, 15 Feb 2019 16:46:54 +0000 (17:46 +0100)] 
kernel: update to 4.14.101

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agocore128: Ship kdig
Michael Tremer [Wed, 13 Feb 2019 11:32:00 +0000 (11:32 +0000)] 
core128: Ship kdig

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoknot: Reduced version of knot with kdig only
Erik Kapfer [Sat, 9 Feb 2019 07:41:15 +0000 (08:41 +0100)] 
knot: Reduced version of knot with kdig only

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore128: Ship libedit
Michael Tremer [Wed, 13 Feb 2019 11:31:24 +0000 (11:31 +0000)] 
core128: Ship libedit

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agolibedit: A command line editor library
Erik Kapfer [Sat, 9 Feb 2019 07:41:14 +0000 (08:41 +0100)] 
libedit: A command line editor library

Dependency for knot (kdig).

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agopowertop: Update to 2.10
Matthias Fischer [Sun, 10 Feb 2019 19:13:17 +0000 (20:13 +0100)] 
powertop: Update to 2.10

Hi,

Triggered by:
https://forum.ipfire.org/viewtopic.php?f=69&t=22274

For details see:
https://01.org/powertop/downloads/powertop-v2.10

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agodhcpcd: Update to 7.1.1
Matthias Fischer [Sat, 9 Feb 2019 09:59:08 +0000 (10:59 +0100)] 
dhcpcd: Update to 7.1.1

For details see:
https://roy.marples.name/blog/dhcpcd-7-1-1-released

"A minor update, highlights include:

 IPv4LL: Fixed build with this disabled
 IPv4LL: Remember last address between carrier resets
 BSD: Fixed initial link infos reported as LINK_STATE_UNKNOWN
 FreeBSD: Avoid panicing kernel when RTA_IFP is set for IPv6 prefix routes"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocurl: Update to 7.64.0
Matthias Fischer [Sat, 9 Feb 2019 09:37:22 +0000 (10:37 +0100)] 
curl: Update to 7.64.0

Hi,

For details see:
https://curl.haxx.se/changes.html

This came rather unexpected - if I'd known, I'd have waited with 7.63.0.

"Changes:
cookies: leave secure cookies alone
hostip: support wildcard hosts
http: Implement trailing headers for chunked transfers
http: added options for allowing HTTP/0.9 responses
timeval: Use high resolution timestamps on Windows

Bugfixes:
CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
CVE-2019-3823: SMTP end-of-response out-of-bounds read
FAQ: remove mention of sourceforge for github
OS400: handle memory error in list conversion
OS400: upgrade ILE/RPG binding.
README: add codacy code quality badge
Revert http_negotiate: do not close connection
THANKS: added several missing names from year <= 2000
build: make 'tidy' target work for metalink builds
cmake: added checks for variadic macros
cmake: updated check for HAVE_POLL_FINE to match autotools
cmake: use lowercase for function name like the rest of the code
configure: detect xlclang separately from clang
configure: fix recv/send/select detection on Android
configure: rewrite --enable-code-coverage
conncache_unlock: avoid indirection by changing input argument type
cookie: fix comment typo
cookies: allow secure override when done over HTTPS
cookies: extend domain checks to non psl builds
cookies: skip custom cookies when redirecting cross-site
curl --xattr: strip credentials from any URL that is stored
curl -J: refuse to append to the destination file
curl/urlapi.h: include "curl.h" first
curl_multi_remove_handle() don't block terminating c-ares requests
darwinssl: accept setting max-tls with default min-tls
disconnect: separate connections and easy handles better
disconnect: set conn->data for protocol disconnect
docs/version.d: mention MultiSSL
docs: fix the --tls-max description
docs: use $(INSTALL_DATA) to install man page
docs: use meaningless port number in CURLOPT_LOCALPORT example
gopher: always include the entire gopher-path in request
http2: clear pause stream id if it gets closed
if2ip: remove unused function Curl_if_is_interface_name
libssh: do not let libssh create socket
libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
libssh: free sftp_canonicalize_path() data correctly
libtest/stub_gssapi: use "real" snprintf
mbedtls: use VERIFYHOST
multi: multiplexing improvements
multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
ntlm: fix NTMLv2 compliance
ntlm_sspi: add support for channel binding
openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
openssl: fix the SSL_get_tlsext_status_ocsp_resp call
openvms: fix OpenSSL discovery on VAX
openvms: fix typos in documentation
os400: add a missing closing bracket
os400: fix extra parameter syntax error
pingpong: change default response timeout to 120 seconds
pingpong: ignore regular timeout in disconnect phase
printf: fix format specifiers
runtests.pl: Fix perl call to include srcdir
schannel: fix compiler warning
schannel: preserve original certificate path parameter
schannel: stop calling it "winssl"
sigpipe: if mbedTLS is used, ignore SIGPIPE
smb: fix incorrect path in request if connection reused
ssh: log the libssh2 error message when ssh session startup fails
test1558: verify CURLINFO_PROTOCOL on file:// transfer
test1561: improve test name
test1653: make it survive torture tests
tests: allow tests to pass by 2037-02-12
tests: move objnames-* from lib into tests
timediff: fix math for unsigned time_t
timeval: Disable MSVC Analyzer GetTickCount warning
tool_cb_prg: avoid integer overflow
travis: added cmake build for osx
urlapi: Fix port parsing of eol colon
urlapi: distinguish possibly empty query
urlapi: fix parsing ipv6 with zone index
urldata: rename easy_conn to just conn
winbuild: conditionally use /DZLIB_WINAPI
wolfssl: fix memory-leak in threaded use
spnego_sspi: add support for channel binding"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agokernel: update to 4.14.98
Arne Fitzenreiter [Fri, 8 Feb 2019 19:50:37 +0000 (20:50 +0100)] 
kernel: update to 4.14.98

todo: check if RPi dwc dma patch still need to reverted before release

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 years agoborgbackup: Fix build on i586
Matthias Fischer [Fri, 8 Feb 2019 11:01:42 +0000 (12:01 +0100)] 
borgbackup: Fix build on i586

Fixes

...
'/usr/src/config/rootfiles/packages//borgbackup' -> '/install/packages/package/ROOTFILES'
tar: usr/lib/python3.6/site-packages/borg/chunker.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: usr/lib/python3.6/site-packages/borg/compress.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: usr/lib/python3.6/site-packages/borg/crypto.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: usr/lib/python3.6/site-packages/borg/hashindex.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: usr/lib/python3.6/site-packages/borg/platform_linux.cpython-36m-i586-linux-gnu.so: Cannot stat: No such file or directory
tar: Exiting with failure status due to previous errors
make: *** [borgbackup:58: dist] Error 2
...

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agopython3-llfuse: Fix build on i586
Matthias Fischer [Fri, 8 Feb 2019 10:57:47 +0000 (11:57 +0100)] 
python3-llfuse: Fix build on i586

Fixes

"tar: usr/lib/python3.6/site-packages/llfuse.cpython-36m-i586-linux-gnu.so:
Cannot stat: No such file or directory"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agocore128: Ship updated firewall initscript
Michael Tremer [Thu, 7 Feb 2019 15:13:50 +0000 (15:13 +0000)] 
core128: Ship updated firewall initscript

Require reboot after the update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoapply default firewall policy for ORANGE, too
Peter Müller [Wed, 6 Feb 2019 21:00:00 +0000 (21:00 +0000)] 
apply default firewall policy for ORANGE, too

If firewall default policy is set to DROP, this setting was not
applied to outgoing ORANGE traffic as well, which was misleading.

Fixes #11973

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Cc: Oliver Fuhrer <oliver.fuhrer@bluewin.ch>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoTor: update to 0.3.5.7
Peter Müller [Wed, 6 Feb 2019 19:21:00 +0000 (19:21 +0000)] 
Tor: update to 0.3.5.7

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agostrongswan: Do not create any NAT rules when using VTI/GRE
Michael Tremer [Mon, 4 Feb 2019 18:38:24 +0000 (18:38 +0000)] 
strongswan: Do not create any NAT rules when using VTI/GRE

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 years agoDrop "OpenVPN" part from VPN N2N stats page
Michael Tremer [Tue, 22 Jan 2019 13:19:00 +0000 (13:19 +0000)] 
Drop "OpenVPN" part from VPN N2N stats page

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>