people/pmueller/ipfire-2.x.git
3 weeks agokernel: drop kirkwood kernel master
Arne Fitzenreiter [Mon, 3 Feb 2020 17:44:49 +0000 (17:44 +0000)] 
kernel: drop kirkwood kernel

perl 5.30 will not work on kirkwood platform and firewinfo reports less than 10 users so we will drop the support for the platform.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 weeks agounbound: try resolve twice before time sync with ipfire server
Arne Fitzenreiter [Mon, 3 Feb 2020 17:40:55 +0000 (17:40 +0000)] 
unbound: try resolve twice before time sync with ipfire server

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
3 weeks agounbound: add returncode to resolve function
Arne Fitzenreiter [Sun, 2 Feb 2020 13:39:51 +0000 (13:39 +0000)] 
unbound: add returncode to resolve function

this is used for time fix check.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoPPP: Always fetch DNS servers from provider
Michael Tremer [Fri, 31 Jan 2020 10:06:34 +0000 (10:06 +0000)] 
PPP: Always fetch DNS servers from provider

We will later decide whether we want to use them or not

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agopppsetup.cgi: Drop DNS setting
Michael Tremer [Fri, 31 Jan 2020 10:04:14 +0000 (10:04 +0000)] 
pppsetup.cgi: Drop DNS setting

This has already been dropped and should not be added again
to the configuration file.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agodns.cgi: increase timeout to 5s
Arne Fitzenreiter [Thu, 30 Jan 2020 12:24:24 +0000 (12:24 +0000)] 
dns.cgi: increase timeout to 5s

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoconvert-dns-settings: add ppp/settings to list of converted files
Arne Fitzenreiter [Thu, 30 Jan 2020 12:22:37 +0000 (12:22 +0000)] 
convert-dns-settings: add ppp/settings to list of converted files

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoMerge branch 'core141'
Arne Fitzenreiter [Thu, 30 Jan 2020 12:20:46 +0000 (12:20 +0000)] 
Merge branch 'core141'

4 weeks agogeneral-functions.pl: Return unique list of nameservers
Arne Fitzenreiter [Thu, 30 Jan 2020 12:13:46 +0000 (13:13 +0100)] 
general-functions.pl: Return unique list of nameservers

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoids-functions.pl: Fall back to $EXTERNAL_NET for DNS servers
Arne Fitzenreiter [Thu, 30 Jan 2020 12:07:01 +0000 (13:07 +0100)] 
ids-functions.pl: Fall back to $EXTERNAL_NET for DNS servers

When no DNS servers are configured (aka recursor mode), the
DNS servers that unbound will try to contact can be anywhere.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoids-functions.pl: Fix generating DNS_SERVERS
Arne Fitzenreiter [Thu, 30 Jan 2020 11:51:31 +0000 (12:51 +0100)] 
ids-functions.pl: Fix generating DNS_SERVERS

The configuration file has an invalid syntax which causes
suricata to fail to start.

There was no comma inserted between DNS servers when there
was more than two of them. This is now fixed in this patch..

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: run pakfire update after db cleanup
Arne Fitzenreiter [Wed, 29 Jan 2020 12:54:00 +0000 (12:54 +0000)] 
core141: run pakfire update after db cleanup

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agomake.sh: Modify update-contributors so that it will run with older version of awk
Michael Tremer [Wed, 29 Jan 2020 10:59:21 +0000 (11:59 +0100)] 
make.sh: Modify update-contributors so that it will run with older version of awk

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agoconvert-dns-settings: Explicitely enable using ISP name servers
Michael Tremer [Wed, 29 Jan 2020 10:52:02 +0000 (11:52 +0100)] 
convert-dns-settings: Explicitely enable using ISP name servers

The unbound initscript checks if this parameter is on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agodns.cgi: Shorten time when checking if DNS is alive
Michael Tremer [Wed, 29 Jan 2020 10:47:35 +0000 (11:47 +0100)] 
dns.cgi: Shorten time when checking if DNS is alive

For localhost, one second should be plenty

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agodns.cgi: Show recursor mode message even when we have some servers to show
Michael Tremer [Wed, 29 Jan 2020 10:40:59 +0000 (11:40 +0100)] 
dns.cgi: Show recursor mode message even when we have some servers to show

The message was not shown when we have received DNS servers from the
provider.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agoconvert-dns-settings: remove DNS settings also if no server config is generated
Arne Fitzenreiter [Tue, 28 Jan 2020 20:31:22 +0000 (20:31 +0000)] 
convert-dns-settings: remove DNS settings also if no server config is generated

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoconvert-dns-settings: Remove DNS variable from PPP profiles
Arne Fitzenreiter [Tue, 28 Jan 2020 19:38:16 +0000 (19:38 +0000)] 
convert-dns-settings: Remove DNS variable from PPP profiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoconvert-dns-settings: Refactor reading old configuration
Arne Fitzenreiter [Tue, 28 Jan 2020 19:34:56 +0000 (19:34 +0000)] 
convert-dns-settings: Refactor reading old configuration

This patch makes the code a lot shorter by removing special
cases for all sorts of files when they can all be treaded
equally.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoconvert-dns-settings: Fix call for chmod
Arne Fitzenreiter [Tue, 28 Jan 2020 19:19:06 +0000 (19:19 +0000)] 
convert-dns-settings: Fix call for chmod

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoconvert-dns-settings: Fix check to prevent doubble-adding the same server
Stefan Schantl [Tue, 28 Jan 2020 15:14:35 +0000 (16:14 +0100)] 
convert-dns-settings: Fix check to prevent doubble-adding the same server

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: manually delete pakfire lists
Arne Fitzenreiter [Mon, 27 Jan 2020 17:56:51 +0000 (17:56 +0000)] 
core141: manually delete pakfire lists

pakfire update --force
fail sometimes fail and use the old version of the serverlist
and get the old addon list. With removed list it cannot
use the wrong addonlist after update to IPFire 2.25.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: use full path to pakfire
Arne Fitzenreiter [Mon, 27 Jan 2020 16:22:17 +0000 (16:22 +0000)] 
core141: use full path to pakfire

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: fix remove of go8.3.0 directory
Arne Fitzenreiter [Mon, 27 Jan 2020 16:20:57 +0000 (16:20 +0000)] 
core141: fix remove of go8.3.0 directory

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: remove elinks and python3 from pakfire db
Arne Fitzenreiter [Sun, 26 Jan 2020 13:22:47 +0000 (13:22 +0000)] 
core141: remove elinks and python3 from pakfire db

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: force packet list update after version change
Arne Fitzenreiter [Sun, 26 Jan 2020 13:14:43 +0000 (13:14 +0000)] 
core141: force packet list update after version change

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoset version and pakfire version to core141
Arne Fitzenreiter [Sun, 26 Jan 2020 12:10:13 +0000 (13:10 +0100)] 
set version and pakfire version to core141

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: correct move of nobeeps flag
Arne Fitzenreiter [Sun, 26 Jan 2020 12:07:08 +0000 (13:07 +0100)] 
core141: correct move of nobeeps flag

in core139 there was a syntax error, and it was missed in
backup converter also.

fixes #12273

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agonetworking/red: wait only for carrier if device exists
Arne Fitzenreiter [Sat, 25 Jan 2020 21:22:26 +0000 (22:22 +0100)] 
networking/red: wait only for carrier if device exists

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agorust: rootfiles updates
Arne Fitzenreiter [Sat, 25 Jan 2020 20:14:54 +0000 (21:14 +0100)] 
rust: rootfiles updates

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: run convert-dns-settings at update
Arne Fitzenreiter [Sat, 25 Jan 2020 19:44:18 +0000 (19:44 +0000)] 
core141: run convert-dns-settings at update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: check free space on root
Arne Fitzenreiter [Sat, 25 Jan 2020 15:28:06 +0000 (15:28 +0000)] 
core141: check free space on root

also force fsck at next boot to free the journal on xfs partitions.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore140: don't system-release and co
Arne Fitzenreiter [Sat, 25 Jan 2020 15:16:12 +0000 (15:16 +0000)] 
core140: don't system-release and co

This files contain version 141 because there is no extra build
so don't pak it into the updater to prevent wrong display in webgui
if core141 fails because there is not enough diskspace.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agocore141: cleanup go-8.3.0 and run filesystem-cleanup
Arne Fitzenreiter [Sat, 25 Jan 2020 15:13:51 +0000 (15:13 +0000)] 
core141: cleanup go-8.3.0 and run filesystem-cleanup

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agofilesystem-cleanup: fix "fixed space" type
Arne Fitzenreiter [Sat, 25 Jan 2020 15:05:38 +0000 (15:05 +0000)] 
filesystem-cleanup: fix "fixed space" type

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
4 weeks agoids-functions.pl: Introduce file for local rules.
Stefan Schantl [Wed, 22 Jan 2020 13:40:34 +0000 (14:40 +0100)] 
ids-functions.pl: Introduce file for local rules.

This file is to be used, to store customized IDS rules.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agocore140: remove /usr/lib/libboost*1.55.0 at cleanup
Arne Fitzenreiter [Fri, 24 Jan 2020 18:20:36 +0000 (19:20 +0100)] 
core140: remove /usr/lib/libboost*1.55.0 at cleanup

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agofilesystem-cleanup: add /usr/lib/sse2 folder
Arne Fitzenreiter [Fri, 24 Jan 2020 18:18:15 +0000 (19:18 +0100)] 
filesystem-cleanup: add /usr/lib/sse2 folder

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agocore140: insert a core upgrade that only cleans the rootfs
Arne Fitzenreiter [Fri, 24 Jan 2020 18:14:02 +0000 (19:14 +0100)] 
core140: insert a core upgrade that only cleans the rootfs

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agorename core140 to core141
Arne Fitzenreiter [Fri, 24 Jan 2020 07:55:40 +0000 (08:55 +0100)] 
rename core140 to core141

we need to insert a core that cleanup root to free some diskspace.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agocore140: ship glibc built with new gcc
Arne Fitzenreiter [Thu, 23 Jan 2020 17:52:14 +0000 (17:52 +0000)] 
core140: ship glibc built with new gcc

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agocore140: add gui.cgi
Arne Fitzenreiter [Thu, 23 Jan 2020 17:47:42 +0000 (17:47 +0000)] 
core140: add gui.cgi

this cgi was forgotten in core139

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agodns.cgi: Display when unbound is running in recursor mode.
Stefan Schantl [Tue, 21 Jan 2020 17:27:13 +0000 (18:27 +0100)] 
dns.cgi: Display when unbound is running in recursor mode.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agounbound: Use recursor mode if no nameservers are configured
Stefan Schantl [Tue, 21 Jan 2020 16:13:06 +0000 (17:13 +0100)] 
unbound: Use recursor mode if no nameservers are configured

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agoazure: Abort script when no instance ID can be retrieved
Michael Tremer [Mon, 20 Jan 2020 17:23:12 +0000 (17:23 +0000)] 
azure: Abort script when no instance ID can be retrieved

We cannot reliably determine if a system is running on Hyper-V
on a private server or on the Azure Cloud.

Therefore, we will have to try to retrieve an IP address
with DHCP and try to connect to the metadata service. If either
of those things is not successful, we will just continue with
the setup process as usual.

So cloud instances should be automatically configured now and
all other systems will continue to boot and call the setup
wizard as usual.

Fixes: #12272
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agocore140: add changed cloudsetup helper tu updater
Arne Fitzenreiter [Sun, 19 Jan 2020 17:28:24 +0000 (17:28 +0000)] 
core140: add changed cloudsetup helper tu updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agocloud-init: Remove importing DNS settings
Michael Tremer [Sun, 19 Jan 2020 16:32:14 +0000 (16:32 +0000)] 
cloud-init: Remove importing DNS settings

Those scripts used to import settings from the meta-data services
and wrote them to the local configuration files.

For the DNS settings and Amazon, this is no longer possible because
their DNS servers do not support DNSSEC at all. Therefore we default
to recursor mode.

To be consistent across cloud providers, we are doing the same for
Azure.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agomodules: Cleanup file
Michael Tremer [Sun, 19 Jan 2020 15:50:21 +0000 (15:50 +0000)] 
modules: Cleanup file

This file has an unsed line for the "fusion" module which
is no longer needed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agomodules: No longer load parallel port modules
Michael Tremer [Sun, 19 Jan 2020 15:50:20 +0000 (15:50 +0000)] 
modules: No longer load parallel port modules

These modules are loaded by default on all systems.

They are simply a waste of space since not many systems
have parallel ports any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agosetup: Do not check DNS settings any more
Michael Tremer [Sun, 19 Jan 2020 15:03:34 +0000 (15:03 +0000)] 
setup: Do not check DNS settings any more

It has been removed that DNS servers could be configured in
setup, but I forgot to remove a check which leads to new
installations not being able to complete the setup wizard.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agoconvert-dns-settings: Import all possible PPP dialin profiles.
Stefan Schantl [Sat, 18 Jan 2020 09:03:06 +0000 (10:03 +0100)] 
convert-dns-settings: Import all possible PPP dialin profiles.

* Avoid from adding the same imported DNS server multiple times.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
5 weeks agocore140: fix typo
Arne Fitzenreiter [Sun, 19 Jan 2020 12:23:54 +0000 (12:23 +0000)] 
core140: fix typo

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agopartresize: NanoPi R1: copy also a0 config of Ampac AP6212
Arne Fitzenreiter [Fri, 17 Jan 2020 10:21:43 +0000 (11:21 +0100)] 
partresize: NanoPi R1: copy also a0 config of Ampac AP6212

there is a second hardware version of the AP6212 in some NanoPi R1
boards.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agocore140: add lvm2 to core updater
Arne Fitzenreiter [Thu, 16 Jan 2020 18:28:26 +0000 (18:28 +0000)] 
core140: add lvm2 to core updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agolvm2: Add initscript for lvmetad
Michael Tremer [Wed, 15 Jan 2020 15:20:12 +0000 (15:20 +0000)] 
lvm2: Add initscript for lvmetad

This daemon needs to be launched in order to use LVM
devices in IPFire.

It will run on all installations after this patch has been
merged but only consumes very little memory.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agolvm2: Create lock files in /run/lvm
Michael Tremer [Wed, 15 Jan 2020 15:20:11 +0000 (15:20 +0000)] 
lvm2: Create lock files in /run/lvm

The default is /var/lock which is not mounted at the time
when udev is initialising the volumes. Therefore after a
reboot, LVM devices won't show up unless pvscan is executed
manually.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agolvm2: Enable lvmetad
Michael Tremer [Wed, 15 Jan 2020 15:20:10 +0000 (15:20 +0000)] 
lvm2: Enable lvmetad

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agolvm2: Build with support for udev
Michael Tremer [Wed, 15 Jan 2020 15:20:09 +0000 (15:20 +0000)] 
lvm2: Build with support for udev

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agolvm2: Ship with core system
Michael Tremer [Wed, 15 Jan 2020 15:20:08 +0000 (15:20 +0000)] 
lvm2: Ship with core system

This was requested by some users to mount devices
with LVM.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoUpdate list of contributors
Michael Tremer [Wed, 15 Jan 2020 11:28:01 +0000 (11:28 +0000)] 
Update list of contributors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoMany improvements for the French translation
Stéphane Pautrel [Wed, 15 Jan 2020 11:26:47 +0000 (11:26 +0000)] 
Many improvements for the French translation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoDNS: Defaults to use the ISP nameservers.
Stefan Schantl [Thu, 16 Jan 2020 16:18:13 +0000 (17:18 +0100)] 
DNS: Defaults to use the ISP nameservers.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoconfigroot: Create /var/ipfire/dns/servers file
Stefan Schantl [Thu, 16 Jan 2020 16:18:12 +0000 (17:18 +0100)] 
configroot: Create /var/ipfire/dns/servers file

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agocore140: add dns changes to updater.
Arne Fitzenreiter [Thu, 16 Jan 2020 14:01:13 +0000 (15:01 +0100)] 
core140: add dns changes to updater.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoRevert "stage2: update rootfile"
Arne Fitzenreiter [Wed, 15 Jan 2020 17:15:48 +0000 (17:15 +0000)] 
Revert "stage2: update rootfile"

This reverts commit a877032915898b07dcacd165c0f89e427bc672a4.

6 weeks agoRevert "Introduce update-location-database script."
Arne Fitzenreiter [Wed, 15 Jan 2020 17:15:25 +0000 (17:15 +0000)] 
Revert "Introduce update-location-database script."

This reverts commit 93a985cc05e6b564ac1e3fc59fd37e94c77000ca.

6 weeks agoRevert "crontab: Adjust crontab to hourly launch the update-location-database"
Arne Fitzenreiter [Wed, 15 Jan 2020 17:14:57 +0000 (17:14 +0000)] 
Revert "crontab: Adjust crontab to hourly launch the update-location-database"

This reverts commit f8e7c1c9d07d348e8c3235c83fd889068269c823.

6 weeks agoset version in backupiso and also pakfire core to 140
Arne Fitzenreiter [Tue, 14 Jan 2020 21:10:15 +0000 (21:10 +0000)] 
set version in backupiso and also pakfire core to 140

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agodns.cgi: Fix ID and greater than checks.
Stefan Schantl [Tue, 14 Jan 2020 12:53:59 +0000 (13:53 +0100)] 
dns.cgi: Fix ID and greater than checks.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agodns.cgi: Set kdig params for timeout and retry back to default.
Stefan Schantl [Tue, 14 Jan 2020 11:14:02 +0000 (12:14 +0100)] 
dns.cgi: Set kdig params for timeout and retry back to default.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agostage2: update rootfile
Arne Fitzenreiter [Tue, 14 Jan 2020 06:54:45 +0000 (06:54 +0000)] 
stage2: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoMerge remote-tracking branch 'ms/next-dns-ng' into next
Arne Fitzenreiter [Mon, 13 Jan 2020 21:42:49 +0000 (21:42 +0000)] 
Merge remote-tracking branch 'ms/next-dns-ng' into next

6 weeks agoMerge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 13 Jan 2020 21:38:16 +0000 (21:38 +0000)] 
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next

6 weeks agofilesystem-cleanup: Add parameter to show changes
Daniel Weismüller [Fri, 10 Jan 2020 15:06:00 +0000 (16:06 +0100)] 
filesystem-cleanup: Add parameter to show changes

Use --dry-run to only show files that would be deleted, but do
not actually delete them.

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agofilesystem-cleanup: Automatically remove old libraries
Michael Tremer [Fri, 10 Jan 2020 11:12:36 +0000 (11:12 +0000)] 
filesystem-cleanup: Automatically remove old libraries

This script runs through /usr/lib and /lib and tries to find
all libraries which are no longer being used and more and
deletes them.

This will help us to free space on root partitions that
are limited to 2GB.

However, the script does not cover 100% of the cases, so that
some files still need to be deleted manually (e.g. boost with
their weird versioning schema).

This script should be executed after a Core Update has been
installed.

Fixes: #12270
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoamazon-ssm-agent: Move source to GOPATH
Michael Tremer [Mon, 13 Jan 2020 21:06:38 +0000 (21:06 +0000)] 
amazon-ssm-agent: Move source to GOPATH

Go won't build when this is only symlinked any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agounbound: Make dhcp-leases.conf readable for everyone
Michael Tremer [Mon, 13 Jan 2020 20:43:27 +0000 (21:43 +0100)] 
unbound: Make dhcp-leases.conf readable for everyone

unbound runs as nobody and cannot reload its configuration
when this file is only readable for root.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agounbound: Do not reset safe search again
Michael Tremer [Mon, 13 Jan 2020 20:25:10 +0000 (21:25 +0100)] 
unbound: Do not reset safe search again

This is now done in the reload stage and we do not need to
take care about it again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agounbound: Drop some unused variables
Michael Tremer [Mon, 13 Jan 2020 20:20:32 +0000 (21:20 +0100)] 
unbound: Drop some unused variables

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agounbound: Drop function to reload forwarders on the fly
Michael Tremer [Mon, 13 Jan 2020 20:19:22 +0000 (21:19 +0100)] 
unbound: Drop function to reload forwarders on the fly

This is now being done by updating and re-reading forward.conf.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agodnsforward.cgi: Reloading unbound is enough to apply changes
Michael Tremer [Mon, 13 Jan 2020 20:13:03 +0000 (21:13 +0100)] 
dnsforward.cgi: Reloading unbound is enough to apply changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agohosts.cgi: Hosts can now be imported when reloading unbound
Michael Tremer [Mon, 13 Jan 2020 20:12:02 +0000 (21:12 +0100)] 
hosts.cgi: Hosts can now be imported when reloading unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agounbound: Write hosts to unbound configuration file
Michael Tremer [Mon, 13 Jan 2020 20:10:18 +0000 (21:10 +0100)] 
unbound: Write hosts to unbound configuration file

This will allow us to read more hosts in a shorter time.

Fixes: #11743
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agounbound: There is no need to rewrite tuning.conf
Michael Tremer [Mon, 13 Jan 2020 19:55:59 +0000 (20:55 +0100)] 
unbound: There is no need to rewrite tuning.conf

The number of CPU cores and memory normally does not change

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agounbound: Reload own hostname, too
Michael Tremer [Mon, 13 Jan 2020 19:55:32 +0000 (20:55 +0100)] 
unbound: Reload own hostname, too

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agodns.cgi: Fix check for undefined variable
Michael Tremer [Mon, 13 Jan 2020 19:44:55 +0000 (20:44 +0100)] 
dns.cgi: Fix check for undefined variable

This was positive when zero was returned.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agodns.cgi: Show error when trying to use ISP nameservers and TLS at the same time.
Stefan Schantl [Mon, 13 Jan 2020 16:40:29 +0000 (17:40 +0100)] 
dns.cgi: Show error when trying to use ISP nameservers and TLS at the same time.

Because the ISP-assigned nameservers do not have any TLS-hostname
information they cannot be used, when TLS is activated.

They only can be used if they will be added as "regular" DNS servers
with a TLS-hostname.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
6 weeks agosetup: Remove DNS settings
Michael Tremer [Mon, 13 Jan 2020 16:05:27 +0000 (16:05 +0000)] 
setup: Remove DNS settings

This is no longer required since we have a new CGI script
that takes care of all DNS settings and stores things in
another format.

Fixes: #12235
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
6 weeks agodns.cgi: Fix id compare when adding a new nameserver.
Stefan Schantl [Mon, 13 Jan 2020 09:42:56 +0000 (10:42 +0100)] 
dns.cgi: Fix id compare when adding a new nameserver.

I do not know why perl when using "le" which means "less-or-equal"
defines a "10" as "1".

This commit fixes the issue that it was not possible to add more than 8
nameservers.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
6 weeks agogeoip: ship database 20191217
Arne Fitzenreiter [Sun, 12 Jan 2020 11:39:25 +0000 (12:39 +0100)] 
geoip: ship database 20191217

Maxmind has disabled the download so we ship the last free (creative commons)
database with the iso and core until we build an alternative.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agocore140: fix build on armv5tel and i586
Arne Fitzenreiter [Sun, 12 Jan 2020 09:48:14 +0000 (10:48 +0100)] 
core140: fix build on armv5tel and i586

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoGo: Move the cache to the ccache directory
Michael Tremer [Tue, 24 Dec 2019 12:58:54 +0000 (12:58 +0000)] 
Go: Move the cache to the ccache directory

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoGo: Cleanup Go Path after build
Michael Tremer [Tue, 24 Dec 2019 12:58:53 +0000 (12:58 +0000)] 
Go: Cleanup Go Path after build

Go leaves temporary build files in the directory
which we do not need and we should clean up after
every build.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoamazon-ssm-agent: New package
Michael Tremer [Tue, 24 Dec 2019 12:58:52 +0000 (12:58 +0000)] 
amazon-ssm-agent: New package

AWS Systems Manager Agent (SSM Agent) is Amazon software that can be
installed and configured on an Amazon EC2 instance, an on-premises
server, or a virtual machine (VM). SSM Agent makes it possible for
Systems Manager to update, manage, and configure these resources. The
agent processes requests from the Systems Manager service in the AWS
Cloud, and then runs them as specified in the request. SSM Agent then
sends status and execution information back to the Systems Manager
service by using the Amazon Message Delivery Service.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agopython3: exclude __pycache__ from iso, core and packages
Arne Fitzenreiter [Sat, 11 Jan 2020 20:22:07 +0000 (21:22 +0100)] 
python3: exclude __pycache__ from iso, core and packages

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
6 weeks agoids.cgi: Do reload instead of restarting unbound
Stefan Schantl [Sat, 11 Jan 2020 18:37:50 +0000 (19:37 +0100)] 
ids.cgi: Do reload instead of restarting unbound

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
6 weeks agoinitscripts/unbound: Add support for reload the service
Stefan Schantl [Sat, 11 Jan 2020 18:36:29 +0000 (19:36 +0100)] 
initscripts/unbound: Add support for reload the service

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
6 weeks agounboundctrl: Add support for calling reload.
Stefan Schantl [Sat, 11 Jan 2020 18:35:24 +0000 (19:35 +0100)] 
unboundctrl: Add support for calling reload.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
6 weeks agodns.cgi: Only perform reverse lookup if DNS is working.
Stefan Schantl [Sat, 11 Jan 2020 18:34:12 +0000 (19:34 +0100)] 
dns.cgi: Only perform reverse lookup if DNS is working.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
6 weeks agounbound: No longer try to include safe-search.conf
Michael Tremer [Fri, 10 Jan 2020 10:57:49 +0000 (10:57 +0000)] 
unbound: No longer try to include safe-search.conf

This file is no longer generated and therefore cannot
be imported any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>