Start Core Update 178

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2023-07-26 13:22:45 +00:00
parent 84a3246be9
commit 46e91ccc33
20 changed files with 108 additions and 1 deletions

View File

@@ -0,0 +1,35 @@
boot/config.txt
boot/grub/grub.cfg
boot/grub/grubenv
boot/uEnv.txt
etc/alternatives
etc/collectd.custom
etc/default/grub
etc/ipsec.conf
etc/ipsec.secrets
etc/ipsec.user.conf
etc/ipsec.user.secrets
etc/localtime
etc/shadow
etc/snort/snort.conf
etc/ssl/openssl.cnf
etc/sudoers
etc/sysconfig/firewall.local
etc/sysconfig/rc.local
etc/udev/rules.d/30-persistent-network.rules
srv/web/ipfire/html/proxy.pac
var/ipfire/dma
var/ipfire/time
var/ipfire/firewall/locationblock
var/ipfire/fwhosts/customlocationgrp
var/ipfire/ovpn
var/ipfire/urlfilter/blacklist
var/ipfire/urlfilter/settings
var/lib/alternatives
var/lib/location/database.db
var/lib/location/ipset
var/log/cache
var/log/dhcpcd.log
var/log/messages
var/state/dhcp/dhcpd.leases
var/updatecache

View File

@@ -0,0 +1 @@
../../../../common/aarch64/linux

View File

@@ -0,0 +1 @@
../../../../common/aarch64/util-linux

View File

@@ -0,0 +1,5 @@
etc/system-release
etc/issue
etc/os-release
srv/web/ipfire/cgi-bin/credits.cgi
var/ipfire/langs

View File

@@ -0,0 +1,238 @@
lib/firmware/amd-ucode/microcode_amd_fam17h.bin
lib/firmware/amd-ucode/microcode_amd_fam19h.bin
lib/firmware/amdgpu/aldebaran_mec2.bin
lib/firmware/amdgpu/aldebaran_mec.bin
lib/firmware/amdgpu/aldebaran_sjt_mec2.bin
lib/firmware/amdgpu/aldebaran_sjt_mec.bin
lib/firmware/amdgpu/aldebaran_smc.bin
lib/firmware/amdgpu/aldebaran_sos.bin
lib/firmware/amdgpu/aldebaran_ta.bin
lib/firmware/amdgpu/arcturus_mec2.bin
lib/firmware/amdgpu/arcturus_mec.bin
lib/firmware/amdgpu/beige_goby_ce.bin
lib/firmware/amdgpu/beige_goby_me.bin
lib/firmware/amdgpu/beige_goby_mec2.bin
lib/firmware/amdgpu/beige_goby_mec.bin
lib/firmware/amdgpu/beige_goby_pfp.bin
lib/firmware/amdgpu/beige_goby_smc.bin
lib/firmware/amdgpu/beige_goby_ta.bin
lib/firmware/amdgpu/beige_goby_vcn.bin
lib/firmware/amdgpu/dcn_3_1_4_dmcub.bin
lib/firmware/amdgpu/dcn_3_1_5_dmcub.bin
lib/firmware/amdgpu/dcn_3_1_6_dmcub.bin
lib/firmware/amdgpu/dcn_3_2_0_dmcub.bin
lib/firmware/amdgpu/dcn_3_2_1_dmcub.bin
lib/firmware/amdgpu/dimgrey_cavefish_ce.bin
lib/firmware/amdgpu/dimgrey_cavefish_dmcub.bin
lib/firmware/amdgpu/dimgrey_cavefish_me.bin
lib/firmware/amdgpu/dimgrey_cavefish_mec2.bin
lib/firmware/amdgpu/dimgrey_cavefish_mec.bin
lib/firmware/amdgpu/dimgrey_cavefish_pfp.bin
lib/firmware/amdgpu/dimgrey_cavefish_smc.bin
lib/firmware/amdgpu/dimgrey_cavefish_ta.bin
lib/firmware/amdgpu/dimgrey_cavefish_vcn.bin
lib/firmware/amdgpu/gc_10_3_6_ce.bin
lib/firmware/amdgpu/gc_10_3_6_me.bin
lib/firmware/amdgpu/gc_10_3_6_mec2.bin
lib/firmware/amdgpu/gc_10_3_6_mec.bin
lib/firmware/amdgpu/gc_10_3_6_pfp.bin
lib/firmware/amdgpu/gc_10_3_7_ce.bin
lib/firmware/amdgpu/gc_10_3_7_me.bin
lib/firmware/amdgpu/gc_10_3_7_mec2.bin
lib/firmware/amdgpu/gc_10_3_7_mec.bin
lib/firmware/amdgpu/gc_10_3_7_pfp.bin
lib/firmware/amdgpu/gc_11_0_0_imu.bin
lib/firmware/amdgpu/gc_11_0_0_me.bin
lib/firmware/amdgpu/gc_11_0_0_mec.bin
lib/firmware/amdgpu/gc_11_0_0_mes1.bin
lib/firmware/amdgpu/gc_11_0_0_mes_2.bin
lib/firmware/amdgpu/gc_11_0_0_pfp.bin
lib/firmware/amdgpu/gc_11_0_0_rlc.bin
lib/firmware/amdgpu/gc_11_0_1_imu.bin
lib/firmware/amdgpu/gc_11_0_1_me.bin
lib/firmware/amdgpu/gc_11_0_1_mec.bin
lib/firmware/amdgpu/gc_11_0_1_mes1.bin
lib/firmware/amdgpu/gc_11_0_1_mes_2.bin
lib/firmware/amdgpu/gc_11_0_1_pfp.bin
lib/firmware/amdgpu/gc_11_0_1_rlc.bin
lib/firmware/amdgpu/gc_11_0_2_imu.bin
lib/firmware/amdgpu/gc_11_0_2_me.bin
lib/firmware/amdgpu/gc_11_0_2_mec.bin
lib/firmware/amdgpu/gc_11_0_2_mes1.bin
lib/firmware/amdgpu/gc_11_0_2_mes_2.bin
lib/firmware/amdgpu/gc_11_0_2_pfp.bin
lib/firmware/amdgpu/gc_11_0_2_rlc.bin
lib/firmware/amdgpu/gc_11_0_4_imu.bin
lib/firmware/amdgpu/gc_11_0_4_me.bin
lib/firmware/amdgpu/gc_11_0_4_mec.bin
lib/firmware/amdgpu/gc_11_0_4_mes1.bin
lib/firmware/amdgpu/gc_11_0_4_mes_2.bin
lib/firmware/amdgpu/gc_11_0_4_mes.bin
lib/firmware/amdgpu/gc_11_0_4_pfp.bin
lib/firmware/amdgpu/gc_11_0_4_rlc.bin
lib/firmware/amdgpu/green_sardine_asd.bin
lib/firmware/amdgpu/green_sardine_dmcub.bin
lib/firmware/amdgpu/green_sardine_ta.bin
lib/firmware/amdgpu/green_sardine_vcn.bin
lib/firmware/amdgpu/navi10_asd.bin
lib/firmware/amdgpu/navi10_ta.bin
lib/firmware/amdgpu/navi12_asd.bin
lib/firmware/amdgpu/navi12_sos.bin
lib/firmware/amdgpu/navi12_ta.bin
lib/firmware/amdgpu/navi14_asd.bin
lib/firmware/amdgpu/navi14_ta.bin
lib/firmware/amdgpu/navy_flounder_ce.bin
lib/firmware/amdgpu/navy_flounder_dmcub.bin
lib/firmware/amdgpu/navy_flounder_me.bin
lib/firmware/amdgpu/navy_flounder_mec2.bin
lib/firmware/amdgpu/navy_flounder_mec.bin
lib/firmware/amdgpu/navy_flounder_pfp.bin
lib/firmware/amdgpu/navy_flounder_smc.bin
lib/firmware/amdgpu/navy_flounder_ta.bin
lib/firmware/amdgpu/navy_flounder_vcn.bin
lib/firmware/amdgpu/psp_13_0_0_sos.bin
lib/firmware/amdgpu/psp_13_0_0_ta.bin
lib/firmware/amdgpu/psp_13_0_11_ta.bin
lib/firmware/amdgpu/psp_13_0_4_ta.bin
lib/firmware/amdgpu/psp_13_0_5_asd.bin
lib/firmware/amdgpu/psp_13_0_5_ta.bin
lib/firmware/amdgpu/psp_13_0_7_sos.bin
lib/firmware/amdgpu/psp_13_0_7_ta.bin
lib/firmware/amdgpu/psp_13_0_8_ta.bin
lib/firmware/amdgpu/renoir_asd.bin
lib/firmware/amdgpu/renoir_dmcub.bin
lib/firmware/amdgpu/renoir_vcn.bin
lib/firmware/amdgpu/sdma_6_0_1.bin
lib/firmware/amdgpu/sienna_cichlid_ce.bin
lib/firmware/amdgpu/sienna_cichlid_dmcub.bin
lib/firmware/amdgpu/sienna_cichlid_me.bin
lib/firmware/amdgpu/sienna_cichlid_mec2.bin
lib/firmware/amdgpu/sienna_cichlid_mec.bin
lib/firmware/amdgpu/sienna_cichlid_pfp.bin
lib/firmware/amdgpu/sienna_cichlid_sdma.bin
lib/firmware/amdgpu/sienna_cichlid_smc.bin
lib/firmware/amdgpu/sienna_cichlid_ta.bin
lib/firmware/amdgpu/sienna_cichlid_vcn.bin
lib/firmware/amdgpu/smu_13_0_0.bin
lib/firmware/amdgpu/smu_13_0_7.bin
lib/firmware/amdgpu/vangogh_asd.bin
lib/firmware/amdgpu/vangogh_ce.bin
lib/firmware/amdgpu/vangogh_me.bin
lib/firmware/amdgpu/vangogh_mec2.bin
lib/firmware/amdgpu/vangogh_mec.bin
lib/firmware/amdgpu/vangogh_pfp.bin
lib/firmware/amdgpu/vcn_3_1_2.bin
lib/firmware/amdgpu/vcn_4_0_0.bin
lib/firmware/amdgpu/vcn_4_0_4.bin
lib/firmware/amdgpu/vega10_asd.bin
lib/firmware/amdgpu/vega12_asd.bin
lib/firmware/amdgpu/vega12_ce.bin
lib/firmware/amdgpu/vega12_me.bin
lib/firmware/amdgpu/vega12_mec2.bin
lib/firmware/amdgpu/vega12_mec.bin
lib/firmware/amdgpu/vega12_pfp.bin
lib/firmware/amdgpu/vega20_asd.bin
lib/firmware/amdgpu/yellow_carp_ce.bin
lib/firmware/amdgpu/yellow_carp_dmcub.bin
lib/firmware/amdgpu/yellow_carp_me.bin
lib/firmware/amdgpu/yellow_carp_mec2.bin
lib/firmware/amdgpu/yellow_carp_mec.bin
lib/firmware/amdgpu/yellow_carp_pfp.bin
lib/firmware/amdgpu/yellow_carp_ta.bin
lib/firmware/amdgpu/yellow_carp_vcn.bin
lib/firmware/amd-ucode/microcode_amd_fam17h.bin
lib/firmware/ath10k/QCA4019/hw1.0/board-2.bin
lib/firmware/ath10k/QCA6174/hw3.0/board-2.bin
lib/firmware/ath10k/QCA9888/hw2.0/board-2.bin
lib/firmware/ath10k/QCA9984/hw1.0/board-2.bin
lib/firmware/ath10k/QCA99X0/hw2.0/board-2.bin
lib/firmware/ath11k/IPQ6018/hw1.0/board-2.bin
lib/firmware/ath11k/IPQ6018/hw1.0/m3_fw.b01
lib/firmware/ath11k/IPQ6018/hw1.0/m3_fw.b02
lib/firmware/ath11k/IPQ6018/hw1.0/m3_fw.mdt
lib/firmware/ath11k/IPQ6018/hw1.0/q6_fw.b00
lib/firmware/ath11k/IPQ6018/hw1.0/q6_fw.b01
lib/firmware/ath11k/IPQ6018/hw1.0/q6_fw.b02
lib/firmware/ath11k/IPQ6018/hw1.0/q6_fw.b03
lib/firmware/ath11k/IPQ6018/hw1.0/q6_fw.b04
lib/firmware/ath11k/IPQ6018/hw1.0/q6_fw.b05
lib/firmware/ath11k/IPQ6018/hw1.0/q6_fw.b07
lib/firmware/ath11k/IPQ6018/hw1.0/q6_fw.b08
lib/firmware/ath11k/IPQ6018/hw1.0/q6_fw.mdt
lib/firmware/ath11k/IPQ8074/hw2.0/board-2.bin
lib/firmware/ath11k/IPQ8074/hw2.0/m3_fw.b01
lib/firmware/ath11k/IPQ8074/hw2.0/m3_fw.b02
lib/firmware/ath11k/IPQ8074/hw2.0/m3_fw.mdt
lib/firmware/ath11k/IPQ8074/hw2.0/q6_fw.b00
lib/firmware/ath11k/IPQ8074/hw2.0/q6_fw.b01
lib/firmware/ath11k/IPQ8074/hw2.0/q6_fw.b02
lib/firmware/ath11k/IPQ8074/hw2.0/q6_fw.b03
lib/firmware/ath11k/IPQ8074/hw2.0/q6_fw.b04
lib/firmware/ath11k/IPQ8074/hw2.0/q6_fw.b05
lib/firmware/ath11k/IPQ8074/hw2.0/q6_fw.b07
lib/firmware/ath11k/IPQ8074/hw2.0/q6_fw.b08
lib/firmware/ath11k/IPQ8074/hw2.0/q6_fw.mdt
lib/firmware/ath11k/QCN9074/hw1.0/amss.bin
lib/firmware/ath11k/QCN9074/hw1.0/m3.bin
lib/firmware/ath11k/WCN6750/hw1.0/Notice.txt
lib/firmware/ath11k/WCN6750/hw1.0/wpss.b00
lib/firmware/ath11k/WCN6750/hw1.0/wpss.b01
lib/firmware/ath11k/WCN6750/hw1.0/wpss.b02
lib/firmware/ath11k/WCN6750/hw1.0/wpss.b03
lib/firmware/ath11k/WCN6750/hw1.0/wpss.b04
lib/firmware/ath11k/WCN6750/hw1.0/wpss.b05
lib/firmware/ath11k/WCN6750/hw1.0/wpss.b06
lib/firmware/ath11k/WCN6750/hw1.0/wpss.b07
lib/firmware/ath11k/WCN6750/hw1.0/wpss.mdt
lib/firmware/ath11k/WCN6855/hw2.0/board-2.bin
lib/firmware/atmel/wilc1000_wifi_firmware-1.bin
lib/firmware/brcm/brcmfmac43455-sdio.pine64,pinenote-v1.1.txt
lib/firmware/brcm/brcmfmac43455-sdio.pine64,pinenote-v1.2.txt
lib/firmware/brcm/brcmfmac43455-sdio.pine64,quartz64-a.txt
lib/firmware/brcm/brcmfmac43455-sdio.pine64,rockpro64-v2.0.txt
lib/firmware/brcm/brcmfmac43455-sdio.pine64,rockpro64-v2.1.txt
lib/firmware/brcm/brcmfmac43455-sdio.pine64,soquartz-blade.txt
lib/firmware/brcm/brcmfmac43455-sdio.pine64,soquartz-cm4io.txt
lib/firmware/brcm/brcmfmac43455-sdio.pine64,soquartz-model-a.txt
lib/firmware/cxgb4/t4fw-1.27.3.0.bin
lib/firmware/cxgb4/t5fw-1.27.3.0.bin
lib/firmware/cxgb4/t6fw-1.27.3.0.bin
lib/firmware/i915/mtl_guc_70.bin
lib/firmware/i915/mtl_huc_gsc.bin
lib/firmware/intel/ice/ddp-comms/ice_comms-1.3.40.0.pkg
lib/firmware/intel/ice/ddp-wireless_edge/ice_wireless_edge-1.3.10.0.pkg
lib/firmware/mediatek/mt7650.bin
lib/firmware/mediatek/mt7662.bin
lib/firmware/mediatek/mt7662_rom_patch.bin
lib/firmware/mediatek/mt7916_rom_patch.bin
lib/firmware/mediatek/mt7916_wa.bin
lib/firmware/mediatek/mt7916_wm.bin
lib/firmware/mediatek/mt7981_rom_patch.bin
lib/firmware/mediatek/mt7981_wa.bin
lib/firmware/mediatek/mt7981_wm.bin
lib/firmware/mediatek/mt7981_wo.bin
lib/firmware/mediatek/mt8195/scp.img
lib/firmware/mediatek/WIFI_MT7922_patch_mcu_1_1_hdr.bin
lib/firmware/mediatek/WIFI_MT7961_patch_mcu_1_2_hdr.bin
lib/firmware/mediatek/WIFI_RAM_CODE_MT7922_1.bin
lib/firmware/mediatek/WIFI_RAM_CODE_MT7961_1.bin
lib/firmware/qat_895xcc.bin
lib/firmware/qat_895xcc_mmp.bin
lib/firmware/qat_c3xxx.bin
lib/firmware/qat_c3xxx_mmp.bin
lib/firmware/qat_c62x.bin
lib/firmware/qat_c62x_mmp.bin
lib/firmware/qcom/a630_sqe.fw
lib/firmware/qcom/apq8016/mba.mbn
lib/firmware/qcom/apq8016/modem.mbn
lib/firmware/qcom/apq8016/wcnss.mbn
lib/firmware/qcom/apq8016/WCNSS_qcom_wlan_nv_sbc.bin
lib/firmware/rtl_nic/rtl8153b-2.fw
lib/firmware/rtl_nic/rtl8156a-2.fw
lib/firmware/rtl_nic/rtl8156b-2.fw
lib/firmware/rtlwifi/rtl8188eufw.bin
lib/firmware/rtlwifi/rtl8192fufw.bin
lib/firmware/rtw89/rtw8851b_fw.bin
lib/firmware/rtw89/rtw8852b_fw-1.bin
lib/firmware/rtw89/rtw8852c_fw.bin
usr/sbin/unbound-dhcp-leases-bridge

View File

@@ -0,0 +1 @@
../../../common/fireinfo

View File

@@ -0,0 +1 @@
../../../common/iproute2

View File

@@ -0,0 +1 @@
../../../common/ntp

View File

@@ -0,0 +1 @@
../../../common/openssh

View File

@@ -0,0 +1 @@
../../../common/squid

View File

@@ -0,0 +1 @@
../../../common/squid-asnbl

View File

@@ -0,0 +1 @@
../../../common/sudo

View File

@@ -0,0 +1 @@
../../../../common/x86_64/linux

View File

@@ -0,0 +1 @@
../../../../common/x86_64/util-linux

View File

@@ -0,0 +1,170 @@
#!/bin/bash
############################################################################
# #
# This file is part of the IPFire Firewall. #
# #
# IPFire is free software; you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation; either version 3 of the License, or #
# (at your option) any later version. #
# #
# IPFire is distributed in the hope that it will be useful, #
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
# GNU General Public License for more details. #
# #
# You should have received a copy of the GNU General Public License #
# along with IPFire; if not, write to the Free Software #
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
# #
# Copyright (C) 2023 IPFire-Team <info@ipfire.org>. #
# #
############################################################################
#
. /opt/pakfire/lib/functions.sh
/usr/local/bin/backupctrl exclude >/dev/null 2>&1
core=177
exit_with_error() {
# Set last succesfull installed core.
echo $(($core-1)) > /opt/pakfire/db/core/mine
# force fsck at next boot, this may fix free space on xfs
touch /forcefsck
# don't start pakfire again at error
killall -KILL pak_update
/usr/bin/logger -p syslog.emerg -t ipfire \
"core-update-${core}: $1"
exit $2
}
# Remove old core updates from pakfire cache to save space...
for (( i=1; i<=$core; i++ )); do
rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
done
# Stop services
/etc/rc.d/init.d/squid stop
KVER="xxxKVERxxx"
# Backup uEnv.txt if exist
if [ -e /boot/uEnv.txt ]; then
cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
fi
# Do some sanity checks prior to the kernel update
case $(uname -r) in
*-ipfire*)
# Ok.
;;
*)
exit_with_error "ERROR cannot update. No IPFire Kernel." 1
;;
esac
# Check diskspace on root
ROOTSPACE=$( df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1 )
if [ $ROOTSPACE -lt 100000 ]; then
exit_with_error "ERROR cannot update because not enough free space on root." 2
exit 2
fi
# Remove the old kernel
rm -rvf \
/boot/System.map-* \
/boot/config-* \
/boot/ipfirerd-* \
/boot/initramfs-* \
/boot/vmlinuz-* \
/boot/uImage-* \
/boot/zImage-* \
/boot/uInit-* \
/boot/dtb-* \
/lib/modules
# Remove dropped squidclamav add-on, if installed
if [ -e "/opt/pakfire/db/installed/meta-squidclamav" ]; then
stop_service "squidclamav"
for i in $(</opt/pakfire/db/rootfiles/squidclamav); do
rm -rfv "/${i}"
done
fi
rm -f \
/opt/pakfire/db/installed/meta-squidclamav \
/opt/pakfire/db/meta/meta-squidclamav \
/opt/pakfire/db/rootfiles/squidclamav
# Extract files
extract_files
# Remove files
rm -rvf \
/lib/firmware/cxgb4/t4fw-1.27.1* \
/lib/firmware/cxgb4/t5fw-1.27.1* \
/lib/firmware/cxgb4/t6fw-1.27.1* \
/lib/firmware/intel/ice/ddp-comms/ice_comms-1.3.3* \
/lib/firmware/intel/ice/ddp-wireless_edge/ice_wireless_edge-1.3.7* \
/usr/lib/engines-1* \
/usr/lib/libcrypto.so.1* \
/usr/lib/libssl.so.1*
# update linker config
ldconfig
# Update Language cache
/usr/local/bin/update-lang-cache
# Filesytem cleanup
/usr/local/bin/filesystem-cleanup
# Start services
/etc/init.d/sshd restart
/etc/init.d/unbound reload
/etc/init.d/ntp restart
if [ -f /var/ipfire/proxy/enable ]; then
/etc/init.d/squid start
fi
# Rebuild initial ramdisks
dracut --regenerate-all --force
KVER="xxxKVERxxx"
case "$(uname -m)" in
aarch64)
mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire
# dont remove initramfs because grub need this to boot.
;;
esac
# remove lm_sensor config after collectd was started
# to re-search sensors at next boot with updated kernel
rm -f /etc/sysconfig/lm_sensors
# Upadate Kernel version in uEnv.txt
if [ -e /boot/uEnv.txt ]; then
sed -i -e "s/KVER=.*/KVER=${KVER}/g" /boot/uEnv.txt
fi
# Call user update script (needed for some ARM boards)
if [ -e /boot/pakfire-kernel-update ]; then
/boot/pakfire-kernel-update ${KVER}
fi
# This update needs a reboot...
touch /var/run/need_reboot
# Finish
/etc/init.d/fireinfo start
sendprofile
# Update grub config to display new core version
if [ -e /boot/grub/grub.cfg ]; then
grub-mkconfig -o /boot/grub/grub.cfg
fi
sync
# Don't report the exitcode last command
exit 0