people/pmueller/ipfire-3.x.git
11 days agobinutils: Update to 2.32 master
Michael Tremer [Tue, 9 Apr 2019 19:59:21 +0000 (20:59 +0100)]
binutils: Update to 2.32

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agoscreen: Update to 4.6.2
Michael Tremer [Tue, 9 Apr 2019 01:42:04 +0000 (02:42 +0100)]
screen: Update to 4.6.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agotmux: Update to 2.8
Michael Tremer [Tue, 9 Apr 2019 01:38:53 +0000 (02:38 +0100)]
tmux: Update to 2.8

The project has also moved to GitHub.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agoncurses: Install in base system
Michael Tremer [Tue, 9 Apr 2019 01:33:10 +0000 (02:33 +0100)]
ncurses: Install in base system

This package has tools like reset in it that I use often
and therefore I think it should be installed in the base system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agohyperscan: Drop cmake parameters that are passed anyways
Michael Tremer [Tue, 9 Apr 2019 01:32:45 +0000 (02:32 +0100)]
hyperscan: Drop cmake parameters that are passed anyways

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agocmake: Update to 3.14.1
Michael Tremer [Tue, 9 Apr 2019 01:32:13 +0000 (02:32 +0100)]
cmake: Update to 3.14.1

The testsuite does not run through any more and has
therefore been disabled.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agooinkmaster: Drop package
Michael Tremer [Mon, 8 Apr 2019 22:27:42 +0000 (23:27 +0100)]
oinkmaster: Drop package

This will be replaced by suricata-update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agoclamav: Update to 0.101.2
Michael Tremer [Mon, 8 Apr 2019 22:25:17 +0000 (23:25 +0100)]
clamav: Update to 0.101.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agocurl: Update to 7.64.1
Michael Tremer [Mon, 8 Apr 2019 22:21:12 +0000 (23:21 +0100)]
curl: Update to 7.64.1

Also fixes linking issues with the library. Development packages
that libcurl was linking against were not pulled in.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agoiperf3: New package
Michael Tremer [Mon, 8 Apr 2019 21:29:52 +0000 (22:29 +0100)]
iperf3: New package

iPerf3 is a tool for active measurements of the maximum achievable
bandwidth on IP networks. It supports tuning of various parameters
related to timing, buffers and protocols (TCP, UDP, SCTP with IPv4
and IPv6). For each test it reports the bandwidth, loss, and other
parameters.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agoiperf: Update to 2.0.13
Michael Tremer [Mon, 8 Apr 2019 21:18:13 +0000 (22:18 +0100)]
iperf: Update to 2.0.13

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agolibuv: New package
Michael Tremer [Mon, 8 Apr 2019 21:11:59 +0000 (22:11 +0100)]
libuv: New package

libuv is a multi-platform support library with a focus on
asynchronous I/O.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
12 days agorhash: New package
Michael Tremer [Mon, 8 Apr 2019 21:10:46 +0000 (22:10 +0100)]
rhash: New package

RHash (Recursive Hasher) is a console utility for calculation and
verification of magnet links and various hash sums, including CRC32,
CRC32C, MD4, MD5, SHA1, SHA256, SHA512, SHA3, AICH, ED2K, DC++ TTH,
BitTorrent BTIH, Tiger, GOST R 34.11-94, GOST R 34.11-2012, RIPEMD-160,
HAS-160, EDON-R, and Whirlpool.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agohyperscan: Build only on x86
Michael Tremer [Sat, 6 Apr 2019 14:51:34 +0000 (15:51 +0100)]
hyperscan: Build only on x86

This package does not compile on ARM

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agosuricata: Enable hyperscan
Michael Tremer [Sat, 6 Apr 2019 12:03:45 +0000 (13:03 +0100)]
suricata: Enable hyperscan

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agohyperscan: New package
Michael Tremer [Sat, 6 Apr 2019 11:55:30 +0000 (12:55 +0100)]
hyperscan: New package

Hyperscan is a high-performance multiple regex matching library. It
follows the regular expression syntax of the commonly-used libpcre
library, but is a standalone library with its own C API.

Hyperscan uses hybrid automata techniques to allow simultaneous
matching of large numbers (up to tens of thousands) of regular
expressions and for the matching of regular expressions across
streams of data.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agoragel: New package
Michael Tremer [Sat, 6 Apr 2019 11:54:28 +0000 (12:54 +0100)]
ragel: New package

Ragel compiles executable finite state machines from regular languages.

Ragel targets C, C++ and ASM. Ragel state machines can not only
recognize byte sequences as regular expression machines do, but can
also execute code at arbitrary points in the recognition of a regular
language. Code embedding is done using inline operators that do not
disrupt the regular language syntax.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agognutls: Update to 3.6.7
Michael Tremer [Thu, 4 Apr 2019 13:46:13 +0000 (14:46 +0100)]
gnutls: Update to 3.6.7

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 weeks agowget: Update to 1.20.1
Michael Tremer [Thu, 4 Apr 2019 13:25:01 +0000 (14:25 +0100)]
wget: Update to 1.20.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agoDrop radvd package
Michael Tremer [Sun, 31 Mar 2019 12:30:06 +0000 (14:30 +0200)]
Drop radvd package

This is being replaced by bird

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agohostapd: Enable 802.11ax and SAE (aka WPA3)
Michael Tremer [Sat, 30 Mar 2019 16:54:41 +0000 (17:54 +0100)]
hostapd: Enable 802.11ax and SAE (aka WPA3)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agokernel: Ensure that we compile the kernel with GCC >= 8
Michael Tremer [Wed, 27 Mar 2019 09:46:45 +0000 (10:46 +0100)]
kernel: Ensure that we compile the kernel with GCC >= 8

The kernel cannot be compiled with a compiler that does
not support retpoline.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agopcengines-apu-firmware: New package
Michael Tremer [Fri, 29 Mar 2019 11:42:28 +0000 (11:42 +0000)]
pcengines-apu-firmware: New package

This is the latest firmware for PC Engines APU boards

This can now be updated with firmware-update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agofirmware-update: New package
Michael Tremer [Fri, 29 Mar 2019 11:42:01 +0000 (11:42 +0000)]
firmware-update: New package

This tools makes it easy to update the firmware on various
boards.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agokernel: Drop ld.so placeholder files
Michael Tremer [Fri, 29 Mar 2019 03:58:56 +0000 (03:58 +0000)]
kernel: Drop ld.so placeholder files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agospectre-meltdown-checker: New package
Michael Tremer [Fri, 29 Mar 2019 03:54:30 +0000 (03:54 +0000)]
spectre-meltdown-checker: New package

Handy to have this available to check how well a system is protected
against Spectre & Meltdown

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks ago.gitignore: Ignore any files edited by vim
Michael Tremer [Fri, 29 Mar 2019 03:38:48 +0000 (03:38 +0000)]
.gitignore: Ignore any files edited by vim

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agoflashrom: New package
Michael Tremer [Fri, 29 Mar 2019 03:37:59 +0000 (03:37 +0000)]
flashrom: New package

This tool can flash firmware on various chipsets and BIOSes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agokernel: Enable /dev/mem
Michael Tremer [Fri, 29 Mar 2019 03:37:27 +0000 (03:37 +0000)]
kernel: Enable /dev/mem

This is required to be able to flash any firmware.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agotzdata: Update to 2019a
Michael Tremer [Tue, 26 Mar 2019 11:53:22 +0000 (11:53 +0000)]
tzdata: Update to 2019a

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agolua: Update to 5.3
Michael Tremer [Tue, 26 Mar 2019 11:52:44 +0000 (11:52 +0000)]
lua: Update to 5.3

This drops the autotool patch which is unnecessary and hard
to carry around.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agontp: Drop package
Michael Tremer [Mon, 25 Mar 2019 22:47:52 +0000 (22:47 +0000)]
ntp: Drop package

ntp is not really fit for purpose any more.

It fails to sync time on my systems all the time, is full
of (security) bugs and offers loads of features that we
potentially do not need.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agorrdtool: Update to 1.7.1
Michael Tremer [Mon, 25 Mar 2019 22:34:23 +0000 (22:34 +0000)]
rrdtool: Update to 1.7.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agoca-certificates: Update to version from Jan 23, 2019
Michael Tremer [Mon, 25 Mar 2019 22:28:39 +0000 (22:28 +0000)]
ca-certificates: Update to version from Jan 23, 2019

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 weeks agochrony: Update to 3.4
Michael Tremer [Mon, 25 Mar 2019 22:01:17 +0000 (22:01 +0000)]
chrony: Update to 3.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agoiw: Update to 5.0.1
Michael Tremer [Fri, 22 Mar 2019 08:06:03 +0000 (08:06 +0000)]
iw: Update to 5.0.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
4 weeks agohostapd: Update to 2.7
Michael Tremer [Fri, 22 Mar 2019 10:45:39 +0000 (11:45 +0100)]
hostapd: Update to 2.7

Enable to get randomness from getrandom() syscall instead
of opening /dev/random directly

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agoless: update to 530
Peter Müller [Mon, 11 Mar 2019 20:25:00 +0000 (20:25 +0000)]
less: update to 530

Backporting package updates to IPFire 3.x, too...

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
5 weeks agoguile: Update to 2.2.4
Stefan Schantl [Sun, 10 Mar 2019 14:41:17 +0000 (15:41 +0100)]
guile: Update to 2.2.4

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agolibgcrypt: Make sure that we are building with libgpg-error >= 1.25
Michael Tremer [Sat, 9 Mar 2019 15:40:15 +0000 (15:40 +0000)]
libgcrypt: Make sure that we are building with libgpg-error >= 1.25

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
6 weeks agogpgme: Update to 1.12.0
Michael Tremer [Sat, 9 Mar 2019 15:39:58 +0000 (15:39 +0000)]
gpgme: Update to 1.12.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agolibcap-ng: Update to 0.7.9
Stefan Schantl [Sun, 3 Mar 2019 09:47:17 +0000 (10:47 +0100)]
libcap-ng: Update to 0.7.9

* Re-enabled testsuite

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agogcc: Update to 8.3.0
Michael Tremer [Wed, 27 Feb 2019 22:01:11 +0000 (22:01 +0000)]
gcc: Update to 8.3.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
8 weeks agosuricata: Update to 4.0.6
Stefan Schantl [Sat, 23 Feb 2019 09:32:32 +0000 (10:32 +0100)]
suricata: Update to 4.0.6

This is a major update to the latest 4.0 series which does not require rust.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
8 weeks agolibhtp: Update to 0.5.29
Stefan Schantl [Sat, 23 Feb 2019 09:22:46 +0000 (10:22 +0100)]
libhtp: Update to 0.5.29

This is a minor release to the latest stable version of libhtp

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
8 weeks agopython: Update to 2.7.15
Michael Tremer [Fri, 22 Feb 2019 22:04:48 +0000 (22:04 +0000)]
python: Update to 2.7.15

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agonasm: Update to 2.14.02
Michael Tremer [Sun, 17 Feb 2019 11:06:57 +0000 (11:06 +0000)]
nasm: Update to 2.14.02

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agognutls: Update to 3.6.6
Michael Tremer [Sat, 16 Feb 2019 20:36:58 +0000 (20:36 +0000)]
gnutls: Update to 3.6.6

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agolibtasn1: Update to 4.13
Michael Tremer [Sat, 16 Feb 2019 20:36:29 +0000 (20:36 +0000)]
libtasn1: Update to 4.13

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agolibunistring: Update to 0.9.10
Michael Tremer [Sat, 16 Feb 2019 20:35:12 +0000 (20:35 +0000)]
libunistring: Update to 0.9.10

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agonettle: Update to 3.4.1
Michael Tremer [Sat, 16 Feb 2019 20:34:37 +0000 (20:34 +0000)]
nettle: Update to 3.4.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoxz: Update to 5.2.4
Michael Tremer [Sat, 16 Feb 2019 17:53:23 +0000 (17:53 +0000)]
xz: Update to 5.2.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agogrep: Update to 3.3
Michael Tremer [Sat, 16 Feb 2019 17:42:28 +0000 (17:42 +0000)]
grep: Update to 3.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agotcpdump: Update to 4.9.2
Michael Tremer [Thu, 14 Feb 2019 21:33:26 +0000 (21:33 +0000)]
tcpdump: Update to 4.9.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agotransifex-client: Drop package
Michael Tremer [Thu, 14 Feb 2019 21:21:22 +0000 (21:21 +0000)]
transifex-client: Drop package

We no longer use this

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agompfr: Update to 4.0.2
Michael Tremer [Thu, 14 Feb 2019 21:15:38 +0000 (21:15 +0000)]
mpfr: Update to 4.0.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agomtr: Update to 0.92
Michael Tremer [Thu, 14 Feb 2019 21:02:16 +0000 (21:02 +0000)]
mtr: Update to 0.92

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agocurl: Update to 7.64.0
Michael Tremer [Thu, 14 Feb 2019 20:59:47 +0000 (20:59 +0000)]
curl: Update to 7.64.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoflex: Update to 2.6.4
Michael Tremer [Thu, 14 Feb 2019 20:56:40 +0000 (20:56 +0000)]
flex: Update to 2.6.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agoglibc: Update to 2.29
Michael Tremer [Thu, 14 Feb 2019 20:08:21 +0000 (20:08 +0000)]
glibc: Update to 2.29

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agobison: Update to 3.3.2
Michael Tremer [Thu, 14 Feb 2019 20:05:38 +0000 (20:05 +0000)]
bison: Update to 3.3.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agocoreutils: Update to 8.30
Michael Tremer [Thu, 14 Feb 2019 18:03:31 +0000 (18:03 +0000)]
coreutils: Update to 8.30

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agounbound: Update to 1.9.0
Michael Tremer [Thu, 14 Feb 2019 16:33:43 +0000 (16:33 +0000)]
unbound: Update to 1.9.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agopcre: Enable JIT
Michael Tremer [Thu, 14 Feb 2019 16:27:11 +0000 (16:27 +0000)]
pcre: Enable JIT

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agohtop: Update to 2.2.0
Michael Tremer [Thu, 14 Feb 2019 16:26:58 +0000 (16:26 +0000)]
htop: Update to 2.2.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agostrongswan: Update to 5.7.2
Michael Tremer [Tue, 22 Jan 2019 03:48:34 +0000 (03:48 +0000)]
strongswan: Update to 5.7.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 months agohide kernel addresses in /proc against privileged users
Peter Müller [Mon, 21 Jan 2019 20:43:26 +0000 (21:43 +0100)]
hide kernel addresses in /proc against privileged users

In order to make local privilege escalation more harder, hide
kernel addresses in various /proc files against users with
root (or similar) permissions, too.

Common system hardening tools such as lynis recommend this.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoreadline: Update to 8.0
Michael Tremer [Sun, 6 Jan 2019 07:50:27 +0000 (07:50 +0000)]
readline: Update to 8.0

This also bumps the compat package to 7.0 so that other applications
continue to function.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agodmidecode: update to 3.2
Peter Müller [Mon, 7 Jan 2019 17:24:29 +0000 (18:24 +0100)]
dmidecode: update to 3.2

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agotzdata: update to 2018i
Peter Müller [Sat, 5 Jan 2019 10:30:40 +0000 (11:30 +0100)]
tzdata: update to 2018i

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: enable IWLWIFI module.
Arne Fitzenreiter [Sun, 6 Jan 2019 13:17:32 +0000 (13:17 +0000)]
kernel: enable IWLWIFI module.

IWLWIFI seems disabled by a mistake. Enable it.

fixes #11867

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agotar: Update to 1.31
Michael Tremer [Fri, 4 Jan 2019 02:41:54 +0000 (02:41 +0000)]
tar: Update to 1.31

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoed: Update to 1.15
Michael Tremer [Thu, 3 Jan 2019 23:02:09 +0000 (23:02 +0000)]
ed: Update to 1.15

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoprevent kernel address space leak via dmesg or /proc files
Peter Müller [Thu, 3 Jan 2019 17:05:40 +0000 (18:05 +0100)]
prevent kernel address space leak via dmesg or /proc files

Enable runtime sysctl hardening in order to avoid kernel
addresses being disclosed via dmesg (in case it was built
in without restrictions) or various /proc files.

See https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
for further information.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agodracut: update to 048
Arne Fitzenreiter [Thu, 3 Jan 2019 13:49:25 +0000 (13:49 +0000)]
dracut: update to 048

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agoccache: Update to version 3.5.1
Michael Tremer [Thu, 3 Jan 2019 14:04:24 +0000 (14:04 +0000)]
ccache: Update to version 3.5.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Fix compiled-in version number
Michael Tremer [Thu, 3 Jan 2019 14:02:56 +0000 (14:02 +0000)]
kernel: Fix compiled-in version number

When we have a .0 release of the kernel, the internal kernel
versioning is 4.20.0, but the tarball is called 4.20 only.

This causes the kernel to look for its modules in the wrong place.

This patch overwrites the compiled-in version number so that
it is in sync with the directory of the installed modules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokmod: update to 25
Arne Fitzenreiter [Thu, 3 Jan 2019 12:28:26 +0000 (12:28 +0000)]
kmod: update to 25

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Build in AT keyboard support
Michael Tremer [Thu, 3 Jan 2019 10:56:30 +0000 (10:56 +0000)]
kernel: Build in AT keyboard support

This is the default PS/2 keyboard on virtual machines, some laptops
and so on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Enable MSR module
Michael Tremer [Sun, 30 Dec 2018 18:34:03 +0000 (18:34 +0000)]
kernel: Enable MSR module

This is required for cpupower

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Configure cpufreq governor to performance
Michael Tremer [Sun, 30 Dec 2018 14:28:53 +0000 (14:28 +0000)]
kernel: Configure cpufreq governor to performance

This patch also enabled all cpufreq drivers as modules

Fixes: #11373
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Change ASPM policy to default
Michael Tremer [Sun, 30 Dec 2018 14:23:52 +0000 (14:23 +0000)]
kernel: Change ASPM policy to default

Fixes: #11372
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Disable support for 6RD
Michael Tremer [Sun, 30 Dec 2018 14:22:13 +0000 (14:22 +0000)]
kernel: Disable support for 6RD

Fixes: #11370
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: configure: Pass arch as an extra argument
Michael Tremer [Sun, 30 Dec 2018 14:20:51 +0000 (14:20 +0000)]
kernel: configure: Pass arch as an extra argument

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Align ARM configuration with remaining architectures
Michael Tremer [Sun, 30 Dec 2018 00:20:09 +0000 (00:20 +0000)]
kernel: Align ARM configuration with remaining architectures

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Use host's spinlocks when running in PV mode
Michael Tremer [Sun, 30 Dec 2018 00:09:41 +0000 (00:09 +0000)]
kernel: Use host's spinlocks when running in PV mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: configure: Allow passing --arch= to edit a certain configuration
Michael Tremer [Sun, 30 Dec 2018 00:06:39 +0000 (00:06 +0000)]
kernel: configure: Allow passing --arch= to edit a certain configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Make all crypto acceleration a module
Michael Tremer [Sat, 29 Dec 2018 23:52:27 +0000 (23:52 +0000)]
kernel: Make all crypto acceleration a module

This will allow a slightly smaller kernel on many systems that
do not have any support for any crypto acceleration.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Disable some unused network protocols
Michael Tremer [Sat, 29 Dec 2018 23:45:56 +0000 (23:45 +0000)]
kernel: Disable some unused network protocols

This disables BATMAN (which has been dropped some time ago
from userspace), L2TP and ebtables.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Drop pcspkr patch
Michael Tremer [Sat, 29 Dec 2018 14:23:18 +0000 (14:23 +0000)]
kernel: Drop pcspkr patch

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Update to 4.20
Michael Tremer [Sat, 29 Dec 2018 14:22:33 +0000 (14:22 +0000)]
kernel: Update to 4.20

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Add README for guidance on how to use the configure script
Michael Tremer [Sat, 29 Dec 2018 13:53:13 +0000 (13:53 +0000)]
kernel: Add README for guidance on how to use the configure script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Enable DFS support for ath*k drivers
Michael Tremer [Sat, 29 Dec 2018 13:23:58 +0000 (13:23 +0000)]
kernel: Enable DFS support for ath*k drivers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Add support to run as a guest in Hyper-V
Michael Tremer [Sat, 29 Dec 2018 13:15:22 +0000 (13:15 +0000)]
kernel: Add support to run as a guest in Hyper-V

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Disable drivers for loads of proprietary devices
Michael Tremer [Sat, 29 Dec 2018 13:10:32 +0000 (13:10 +0000)]
kernel: Disable drivers for loads of proprietary devices

Those include pressure and chemical sensors and other hardware
that nobody will use for IPFire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Disable drivers for obscure I/O devices
Michael Tremer [Sat, 29 Dec 2018 12:58:37 +0000 (12:58 +0000)]
kernel: Disable drivers for obscure I/O devices

This also disables support for parallel ports.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Disable Bluetooth
Michael Tremer [Sat, 29 Dec 2018 12:51:44 +0000 (12:51 +0000)]
kernel: Disable Bluetooth

We don't have any userspace tools for this and I think
that a firewall is unlikely to have any of those devices.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Compress modules with XZ
Michael Tremer [Sat, 29 Dec 2018 12:48:57 +0000 (12:48 +0000)]
kernel: Compress modules with XZ

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Update power management settings
Michael Tremer [Sat, 29 Dec 2018 12:45:52 +0000 (12:45 +0000)]
kernel: Update power management settings

Build as many things as a module as possible and disable CONFIG_SUSPEND

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
3 months agokernel: Enable CPU quirks for Intel/AMD processors
Michael Tremer [Sat, 29 Dec 2018 12:35:42 +0000 (12:35 +0000)]
kernel: Enable CPU quirks for Intel/AMD processors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>