git.ipfire.org Git - ipfire-3.x.git/log

Michael Tremer [Fri, 16 Dec 2022 16:24:25 +0000 (16:24 +0000)]

audit: Drop package

This package is not very useful as we do not have any sources
configured, nor do we have the audit subsystem enabled in the kernel.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:23:24 +0000 (16:23 +0000)]

Drop epoch from all files

We are having a fresh start, so let's use it for better version numbers.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:20:08 +0000 (16:20 +0000)]

ipfire-release: Install pakfire by default and try to install vim

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:19:10 +0000 (16:19 +0000)]

ipfire-release: No longer install pakfire-build into the build environment

Pakfire does not need any internal components any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:16:49 +0000 (16:16 +0000)]

newt: Fix build against Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:08:21 +0000 (16:08 +0000)]

python3-gobject3: Update to 3.42.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:06:37 +0000 (16:06 +0000)]

gobject-introspection: Update to 1.74.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:04:57 +0000 (16:04 +0000)]

python3-cairo: Update to 1.23.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:03:05 +0000 (16:03 +0000)]

avahi: Update to 0.8

Drop dependency to Python 2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 15:40:26 +0000 (15:40 +0000)]

rrdtool: Update to 1.8.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 15:27:11 +0000 (15:27 +0000)]

cairo: Update to 1.16.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 15:04:40 +0000 (15:04 +0000)]

python3-dbus: Update to 1.3.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 17:35:29 +0000 (17:35 +0000)]

kernel: Disable all sorts of useless Device Mapper targets

This patch also compiles all sorts of device mapper stuff as modules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 17:29:37 +0000 (17:29 +0000)]

kernel: Disable support for floppy drives and block ramdisks

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 17:25:35 +0000 (17:25 +0000)]

kernel: Enable modern features of the block layer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 16:57:38 +0000 (16:57 +0000)]

kernel: Disable the Distributed Lock Manager

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 16:53:26 +0000 (16:53 +0000)]

kernel: Enable support for ExFAT & NTFS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 16:48:45 +0000 (16:48 +0000)]

kernel: Enable support for Hyper-V across the board

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 15:50:02 +0000 (15:50 +0000)]

kernel: Disable I3C

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 20:02:45 +0000 (20:02 +0000)]

kernel: Update Ethernet driver configuration

Enable what hasn't been enabled before, and disable PIO mode where
possible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 18:32:33 +0000 (18:32 +0000)]

kernel: Merge aarch64 & x86_64

This only sync configuration that seems to have been different between
those two architectures for no reason.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 18:12:08 +0000 (18:12 +0000)]

kernel: Compile EHCI/OHCI/UHCI support as modules

The USB core will always be compiled into the kernel (because I believe
that we have virtually no systems which won't have a USB bus).

The others will only be loaded when necessary.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 18:04:39 +0000 (18:04 +0000)]

kernel: Compile the entire SCSI subsystem as modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 17:40:35 +0000 (17:40 +0000)]

kernel: Compile the ATA subsystem as a module

It probably was a good assumption to compile this in, but since more
hardware is using NVMe, I think this might not be used on all systems
any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 17:39:12 +0000 (17:39 +0000)]

kernel: Compile the MMC subsystem as a module

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 17:37:30 +0000 (17:37 +0000)]

kernel: Disable the multimedia subsystem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 17:32:56 +0000 (17:32 +0000)]

kernel: Enable all supported platforms for ARM

These are the platforms that are currently supported in IPFire 2 and
their depending drivers.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:23:57 +0000 (16:23 +0000)]

kernel: Disable overloading ACPI methods

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:21:04 +0000 (16:21 +0000)]

kernel: Wipe all memory when rebooting on EFI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:18:39 +0000 (16:18 +0000)]

kernel: Wipe all caller-used registers on exit from the function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:14:18 +0000 (16:14 +0000)]

kernel: Make the scheduler aware of SMT

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:12:13 +0000 (16:12 +0000)]

kernel: Trust the CPU's RNG

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:10:21 +0000 (16:10 +0000)]

kernel: Enable all TPM devices

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:08:09 +0000 (16:08 +0000)]

kernel: Enable IOMMU and set it to strict mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:04:03 +0000 (16:04 +0000)]

kernel: Improve memory hardening with KFENCE

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:53:51 +0000 (15:53 +0000)]

kernel: Enable Kernel Lockdown in Confidentiality Mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:50:37 +0000 (15:50 +0000)]

kernel: Set HZ=100

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:43:57 +0000 (15:43 +0000)]

kernel: Enable cpufreq support for AMD processors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:40:33 +0000 (15:40 +0000)]

kernel: Enable support for all sorts of ACPI components

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:32:32 +0000 (15:32 +0000)]

kernel: Disable some character devices that do not make sense

Like vibrators.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:27:22 +0000 (15:27 +0000)]

kernel: Make graphics configruation sane

This patch disables lots of legacy hardware that should not be found in
the IPFire context and enables any modern GPUs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:19:38 +0000 (15:19 +0000)]

kernel: Disable syscalls that allows processes to r/w other processes' memory

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:14:14 +0000 (15:14 +0000)]

kernel: Mount devtmpfs with noexec, etc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:11:06 +0000 (15:11 +0000)]

kernel: Enable/disable (mainly wireless) network hardware

This patch enables modules for various modern WiFi/WWAN devices, and
disables support for devices that are not supported by us any more (i.e.
802.11b only cards).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 14:22:52 +0000 (14:22 +0000)]

kernel: Enable WireGuard

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:34:55 +0000 (11:34 +0000)]

kernel: Enable SLS on x86

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:29:43 +0000 (11:29 +0000)]

kernel: Disable option to execute 32 bit binaries

Since we are a 64 bit only distribution, there is no need to compile in
any support for 32 bit binaries.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:09:11 +0000 (11:09 +0000)]

kernel: Compile binfmt_misc as a module

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:07:04 +0000 (11:07 +0000)]

kernel: Disable /dev/mem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:04:36 +0000 (11:04 +0000)]

kernel: Build all HWRNGs as modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:59:29 +0000 (10:59 +0000)]

kernel: Do not automatically load TTY line disciplines

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:58:04 +0000 (10:58 +0000)]

kernel: Enable Yama

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:54:15 +0000 (10:54 +0000)]

kernel: Enable Landlock

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:34:58 +0000 (10:34 +0000)]

kernel: Build all library routines as modules and disable self-tests

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:31:14 +0000 (10:31 +0000)]

kernel: Build BTRFS as a module

I am not sure why I built it into the kernel as it pulls in lots of
other stuff which will probably make the kernel image really large.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:27:18 +0000 (10:27 +0000)]

kernel: Enable various modern ciphers/hashes/etc. and acceleration

Most of them have been added in recent kernel releases, but since we
have not been running "make oldconfig" for each of them, they have not
been enabled by default.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:20:23 +0000 (10:20 +0000)]

kernel: Enable parallel crypto by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 18:13:34 +0000 (18:13 +0000)]

kernel: Disable the entire framebuffer subsystem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 18:05:17 +0000 (18:05 +0000)]

kernel: Disable bcache

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 18:03:32 +0000 (18:03 +0000)]

kernel: Disable the entire PCMCIA/CardBus subsystem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:56:40 +0000 (17:56 +0000)]

kernel: Disable all connection tracking helper modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:53:47 +0000 (17:53 +0000)]

kernel: Drop the entire xtables subsystem

This is being replaced by nf_tables.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:44:42 +0000 (17:44 +0000)]

kernel: Enable RANDSTRUCT plugin

This is currently configured to performance mode in order to avoid too
much performance impact.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:40:28 +0000 (17:40 +0000)]

kernel: Disable the latent entropy plugin

It does not generate cryptographically secure entropy.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:32:37 +0000 (17:32 +0000)]

kernel: Compress the kernel, modules and firmware using Zstandard

Zstandard is an ideal compression algorithm with great performance for
this purpose. The kernel is still able to load firmware compressed using
XZ and ramdisks compressed with various other algorirthms.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:27:27 +0000 (17:27 +0000)]

kernel: Cryptographically sign all kernel modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:21:46 +0000 (17:21 +0000)]

kernel: Enabel zswap by default using LZ4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:04:32 +0000 (17:04 +0000)]

kernel: Enable support for SquashFS

We require this for our installer live system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 16:44:12 +0000 (16:44 +0000)]

kernel: Refactor configure script

This patch removes support for "platforms" and "sub-platforms" which we
won't need any more.

Instead, configuration files are now called by their architecture name
and flavour. The "generic" flavour is the default flavour and any other
flavours for the same architecture will be based on it.

There are no changes to the configuration files in this patch.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 12 Dec 2022 17:21:04 +0000 (17:21 +0000)]

Replace ":=" with "=" as Pakfire doesn't support this any more

Fixes: #13001
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libjpeg: Update to 2.1.4

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libtiff: Update to 4.4.0.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

shared-mime-info: New package.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

New packages: libburn, libisoburn, libisofs

Required by bricklayer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squashfs-tools: New package

Required by bricklayer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire: Update to 0.9.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

htop: Update to 3.2.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libarchive: Fix build with newer glibc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

git: Update to 2.38.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dracut: Add some more runtime dependencies

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ca-certificates: Blacklist TrustCor Systems root CAs

See: https://lists.ipfire.org/pipermail/development/2022-November/014681.html

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ca-certificates: Sync with Mozilla's current trust store

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lvm2: Update to 2.03.16

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

harfbuzz: Update to 5.3.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gpgme: Update to 1.18.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libthai: Depend on libdatrie

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fribidi: New package

Required by pango.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libsolv: Remove XZ as dependency and package man pages with tools

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

krb5: Update to 1.20.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3-kerberos: New package

Required by pakfire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3-tornado: Migrate package to Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3-systemd: Update to 235

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3-psutil: New package

Required by pakfire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3-setproctitle: New package

Required by pakfire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3-cpuinfo: New package

Required by pakfire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hyperscan: Update to 5.4.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

boost: Update to 1.80.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Drop 32 bit ARM configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Run olddefconfig on previous configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

kernel: Port scripts to Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>