core126: Ship libconfig

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Start Core Update 126

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

shairport-sync: Add install/uninstall scripts

These scripts will install symlinks to start the service
at boot time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

shairport-sync: Add initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

shairport-sync: Explicitely link against soxr

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

shairport-sync: Add backup include file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

shairport-sync: New package

Shairport Sync is an AirPlay audio player - it plays audio streamed
from iTunes, iOS, Apple TV and macOS devices and AirPlay sources
such as Quicktime Player and ForkedDaapd, among others.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libconfig: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

soxr: New package (0.1.3)

The SoX Resampler library `libsoxr' performs one-dimensional sample-rate
conversion -- it may be used, for example, to resample PCM-encoded audio.
For higher-dimensional resampling, such as for visual-image processing, you
should look elsewhere.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpd: Depends on avahi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xen-image: enlarge partitions and remove extra /var partition

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core125: finish update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core125: restart init after glibc uodate

without restart remount of / will fail and may result in
a filesystem corruption at next boot.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

lang: Show the full untranslated string

This will help translators to add missing strings easier

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dehydrated: New package

This is a light client for Let's Encrypt which is implemented
in bash and does not have any other dependencies apart from
openssl and curl.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

update accelerator: Do not attempt to cache IPFire updates any more

We do not deliver anything via HTTP or FTP any more and therefore
nothing can be cached any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

update accelerator: Cache .msp files for Adobe

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update list of contributors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

backupiso: Add support for aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

backupiso: Fix order of variables

Some values in variables were corrected but used before.

Reported-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

observium-agent: Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

udev: Do not try to change kernel hotplug handler any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

udev: Do no try to install any device nodes any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core125: Ship syslog changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Tor: update to 0.3.4.9

For details and release announcement, see:
https://blog.torproject.org/new-release-tor-0349

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bind: Update to 9.11.5

For details see:
http://ftp.isc.org/isc/bind9/9.11.5/RELEASE-NOTES-bind-9.11.5.html

Security fixes:
"named could crash during recursive processing of DNAME records when
deny-answer-aliases was in use. This flaw is disclosed in CVE-2018-5740. [GL #387]

When recursion is enabled but the allow-recursion and allow-query-cache ACLs are
not specified, they should be limited to local networks, but they were
inadvertently set to match the default allow-query, thus allowing
remote queries. This flaw is disclosed in CVE-2018-5738. [GL #309]"

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

observium-agent: New package

This ships the observium agent including a couple of
modules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "haproxy: Make /dev/log available in chroot"

This reverts commit 699f0aa710932736d34dabf5a8c17287af29075c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

syslog: Listen to network and block access from anywhere but localhost

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

backupiso: fix boot on EFI

the grub on EFI serch the config on volume "IPFire 2.21 arch"
so the custom "ipfire backup ..." volume name is not working
anymore.
This is now fixed and a backup-version.media tag will added.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

backup: fix backupiso mastering

fixes: #11916

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

clamav: fix rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

freeradius: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

clamav: rootfile update

glibc: rootfile update armv5tel

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

directfb: fix comile on 32bit arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core125: Ship updated ca-certificates

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

update ca-certificates CA bundle

Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

The second version of this patch superseds the first one and
bumps the LFS version of ca-certificate, too. Me stupid...

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Unbound: output statistics daily instead of just on shutdown

Currently, Unbound only prints statistics if it is being shutdown
(mostly because of a machine reboot). This makes detecting DNS
anomalies hard as no intermediate statistic result is being logged.

This patch changes Unbound's behaviour in order to log statistics
every 86,400 seconds (i.e. 24 hours).

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core125: Ship updated ids.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fix downloading Snort rules if behind upstream proxy

Currently, the wget call only uses proxy information for HTTP.
Since rulesets are downloaded via HTTPS now, the same information
also needs to be applied for HTTPS.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core125: Ship updated squid

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid 3.5.28: latest patches (01-02)

For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

backup: Fix expanding glogging

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

backup: Rewrite backup script

The old script was quite messy and written in perl although
it was only calling shell commands.

This version is now written in shell although keeping the .pl
file suffix and is a drop-in replacement.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core125: Ship updated backup include

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

backup: Include addon backups in main backup

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

backup: Include custom include/exclude files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core125: Ship JSON-C

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'ms/frr' into next

frr: Add backup include file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

frr: Set configuration file permissions correctly

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

frr: Add initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

frr: Install users and make backup when package is installed/uinstalled

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

toolchain: bump version

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

perl: fix toolchain build

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

frr: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "make.sh: Log into subdirectory for each architecture"

This reverts commit 35ce207ff7f94921ddffb23501c28d7095d59a04.

Update translations

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

French translation improvements

- Adding missing syntaxes
- Improved syntax translation
- Minor corrections (spelling, conjugation)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Log into subdirectory for each architecture

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tzdata: Update to 2018g

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Drop paxctl

We do not have grsecurity and more and there is no point
in shipping this tool.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

clamav: Move database directory to /var partition

The clamav database is quite large and occupies valuable
space on the root partition that on older systems is only
2GB large. This change moves the virus definition database
to the /var partition which is larger and supposed to hold
data like this anyway.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kmod: Build with support for XZ compressed modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Build xz earlier in the build process

XZ compression is becoming more popular and being used
by various other libraries and should therefore be available
to be linked.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update to 5.7.1

Fixes security vulnerabilities: CVE-2018-16151, CVE-2018-16152 and
CVE-2018-17540.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

haproxy: Update to 1.8.14

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'haproxy' into next

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

Merge branch 'toolchain' into next

Merge branch 'glibc-2.28' into next

core125: Ship glibc for i586

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Remove removed files from rootfiles

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

graphs: add NVMe disks

Add NVMe disks to media and hardwaregraphs.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

hostapd: add switch to disable neigborhood scan

this may violate regulatory rules because 40Mhz channels should disabled
if there are other networks but nearly every commercial router ignore this.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

json-c: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libaio: Link against standard libraries

This patch fixes a build error when stack smashing protecion
is being enabled and __stack_chk_fail_local needs to be pulled
from libc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

perl: Fix build in toolchain

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

toolchain: Bump version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

coreutils+gzip: Allow building with 32 bit time_t on 32 bit arches

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Config: Set IS_32BIT when running on 32 bit

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update langs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire: Remove option to enable/disable checks for updates

This does not change anything

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

glibc: Update to 2.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libvirt: Update to 4.6.0

Fixes builds against glibc >= 2.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

parted: Fix build with glibc >= 2.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

syslinux: Fix build with glibc >= 2.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

installer: remove set of pmbr_boot on gpt partitions

this fix the efi boot on hdd's larger than 2TB and raid installations.

fixes: #11890

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

collectd: Fix compiling against newer xfsprogs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

haproxy: Log to syslog and install logrotate script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

haproxy: Make /dev/log available in chroot

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nfs: Update to 2.3.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

keyutils: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ntfs-3g: Update to 2017.3.23

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfsprogs: Update to 4.18.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

reiserfsprogs: Update to 3.6.27

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>