Start Core Update 173

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2026-04-27 19:23:24 +02:00 · 2022-12-17 17:19:13 +00:00
parent 9ea8de7c39
commit a8dcce1aad
61 changed files with 108 additions and 1 deletions
--- a/config/rootfiles/oldcore/172/core-files
+++ b/config/rootfiles/oldcore/172/core-files
@@ -0,0 +1,5 @@
+etc/system-release
+etc/issue
+etc/os-release
+srv/web/ipfire/cgi-bin/credits.cgi
+var/ipfire/langs
--- a/config/rootfiles/oldcore/172/exclude
+++ b/config/rootfiles/oldcore/172/exclude
@@ -0,0 +1,34 @@
+boot/config.txt
+boot/grub/grub.cfg
+boot/grub/grubenv
+boot/uEnv.txt
+etc/alternatives
+etc/collectd.custom
+etc/default/grub
+etc/ipsec.conf
+etc/ipsec.secrets
+etc/ipsec.user.conf
+etc/ipsec.user.secrets
+etc/localtime
+etc/shadow
+etc/snort/snort.conf
+etc/ssl/openssl.cnf
+etc/sudoers
+etc/sysconfig/firewall.local
+etc/sysconfig/rc.local
+etc/udev/rules.d/30-persistent-network.rules
+srv/web/ipfire/html/proxy.pac
+var/ipfire/dma
+var/ipfire/time
+var/ipfire/firewall/locationblock
+var/ipfire/fwhosts/customlocationgrp
+var/ipfire/ovpn
+var/ipfire/urlfilter/blacklist
+var/ipfire/urlfilter/settings
+var/lib/alternatives
+var/lib/location/database.db
+var/log/cache
+var/log/dhcpcd.log
+var/log/messages
+var/state/dhcp/dhcpd.leases
+var/updatecache
--- a/config/rootfiles/oldcore/172/filelists/aarch64/u-boot
+++ b/config/rootfiles/oldcore/172/filelists/aarch64/u-boot
@@ -0,0 +1 @@
+../../../../common/aarch64/u-boot
--- a/config/rootfiles/oldcore/172/filelists/apache2
+++ b/config/rootfiles/oldcore/172/filelists/apache2
@@ -0,0 +1 @@
+../../../common/apache2
--- a/config/rootfiles/oldcore/172/filelists/armv6l/python3
+++ b/config/rootfiles/oldcore/172/filelists/armv6l/python3
@@ -0,0 +1 @@
+../../../../common/armv6l/python3
--- a/config/rootfiles/oldcore/172/filelists/armv6l/u-boot
+++ b/config/rootfiles/oldcore/172/filelists/armv6l/u-boot
@@ -0,0 +1 @@
+../../../../common/armv6l/u-boot
--- a/config/rootfiles/oldcore/172/filelists/bash
+++ b/config/rootfiles/oldcore/172/filelists/bash
@@ -0,0 +1 @@
+../../../common/bash
--- a/config/rootfiles/oldcore/172/filelists/bind
+++ b/config/rootfiles/oldcore/172/filelists/bind
@@ -0,0 +1 @@
+../../../common/bind
--- a/config/rootfiles/oldcore/172/filelists/ca-certificates
+++ b/config/rootfiles/oldcore/172/filelists/ca-certificates
@@ -0,0 +1 @@
+../../../common/ca-certificates
--- a/config/rootfiles/oldcore/172/filelists/conntrack-tools
+++ b/config/rootfiles/oldcore/172/filelists/conntrack-tools
@@ -0,0 +1 @@
+../../../common/conntrack-tools
--- a/config/rootfiles/oldcore/172/filelists/core-files
+++ b/config/rootfiles/oldcore/172/filelists/core-files
@@ -0,0 +1 @@
+../core-files
--- a/config/rootfiles/oldcore/172/filelists/curl
+++ b/config/rootfiles/oldcore/172/filelists/curl
@@ -0,0 +1 @@
+../../../common/curl
--- a/config/rootfiles/oldcore/172/filelists/elinks
+++ b/config/rootfiles/oldcore/172/filelists/elinks
@@ -0,0 +1 @@
+../../../common/elinks
--- a/config/rootfiles/oldcore/172/filelists/ethtool
+++ b/config/rootfiles/oldcore/172/filelists/ethtool
@@ -0,0 +1 @@
+../../../common/ethtool
--- a/config/rootfiles/oldcore/172/filelists/expat
+++ b/config/rootfiles/oldcore/172/filelists/expat
@@ -0,0 +1 @@
+../../../common/expat
--- a/config/rootfiles/oldcore/172/filelists/files
+++ b/config/rootfiles/oldcore/172/filelists/files
@@ -0,0 +1,96 @@
+etc/ssl/ffdhe4096.pem
+lib/firmware/amdgpu/beige_goby_rlc.bin
+lib/firmware/amdgpu/dcn_3_1_6_dmcub.bin
+lib/firmware/amdgpu/dimgrey_cavefish_rlc.bin
+lib/firmware/amdgpu/gc_10_3_6_rlc.bin
+lib/firmware/amdgpu/gc_10_3_7_rlc.bin
+lib/firmware/amdgpu/navy_flounder_rlc.bin
+lib/firmware/amdgpu/sienna_cichlid_rlc.bin
+lib/firmware/amdgpu/yellow_carp_rlc.bin
+lib/firmware/amd-ucode/microcode_amd_fam19h.bin
+lib/firmware/brcm/brcmfmac43430-sdio.raspberrypi,model-zero-2-w.txt
+lib/firmware/cxgb4/t4fw-1.27.0.0.bin
+lib/firmware/cxgb4/t5fw-1.27.0.0.bin
+lib/firmware/cxgb4/t6fw-1.27.0.0.bin
+lib/firmware/i915/adlp_guc_70.bin
+lib/firmware/i915/dg1_guc_70.bin
+lib/firmware/i915/dg1_huc.bin
+lib/firmware/i915/dg2_guc_70.bin
+lib/firmware/i915/dg2_huc_gsc.bin
+lib/firmware/i915/tgl_guc_70.bin
+lib/firmware/i915/tgl_huc.bin
+lib/firmware/iwlwifi-9000-pu-b0-jf-b0-46.ucode
+lib/firmware/iwlwifi-9260-th-b0-jf-b0-46.ucode
+lib/firmware/iwlwifi-cc-a0-72.ucode
+lib/firmware/iwlwifi-cc-a0-74.ucode
+lib/firmware/iwlwifi-cc-a0-77.ucode
+lib/firmware/iwlwifi-Qu-b0-hr-b0-72.ucode
+lib/firmware/iwlwifi-Qu-b0-hr-b0-74.ucode
+lib/firmware/iwlwifi-Qu-b0-hr-b0-77.ucode
+lib/firmware/iwlwifi-Qu-b0-jf-b0-72.ucode
+lib/firmware/iwlwifi-Qu-b0-jf-b0-74.ucode
+lib/firmware/iwlwifi-Qu-b0-jf-b0-77.ucode
+lib/firmware/iwlwifi-Qu-c0-hr-b0-72.ucode
+lib/firmware/iwlwifi-Qu-c0-hr-b0-74.ucode
+lib/firmware/iwlwifi-Qu-c0-hr-b0-77.ucode
+lib/firmware/iwlwifi-Qu-c0-jf-b0-72.ucode
+lib/firmware/iwlwifi-Qu-c0-jf-b0-74.ucode
+lib/firmware/iwlwifi-Qu-c0-jf-b0-77.ucode
+lib/firmware/iwlwifi-QuZ-a0-hr-b0-72.ucode
+lib/firmware/iwlwifi-QuZ-a0-hr-b0-74.ucode
+lib/firmware/iwlwifi-QuZ-a0-hr-b0-77.ucode
+lib/firmware/iwlwifi-QuZ-a0-jf-b0-72.ucode
+lib/firmware/iwlwifi-QuZ-a0-jf-b0-74.ucode
+lib/firmware/iwlwifi-QuZ-a0-jf-b0-77.ucode
+lib/firmware/iwlwifi-so-a0-gf4-a0-72.ucode
+lib/firmware/iwlwifi-so-a0-gf4-a0-74.ucode
+lib/firmware/iwlwifi-so-a0-gf4-a0-77.ucode
+lib/firmware/iwlwifi-so-a0-gf4-a0.pnvm
+lib/firmware/iwlwifi-so-a0-gf-a0-72.ucode
+lib/firmware/iwlwifi-so-a0-gf-a0-74.ucode
+lib/firmware/iwlwifi-so-a0-gf-a0-77.ucode
+lib/firmware/iwlwifi-so-a0-gf-a0.pnvm
+lib/firmware/iwlwifi-so-a0-hr-b0-72.ucode
+lib/firmware/iwlwifi-so-a0-hr-b0-74.ucode
+lib/firmware/iwlwifi-so-a0-hr-b0-77.ucode
+lib/firmware/iwlwifi-so-a0-jf-b0-72.ucode
+lib/firmware/iwlwifi-so-a0-jf-b0-74.ucode
+lib/firmware/iwlwifi-so-a0-jf-b0-77.ucode
+lib/firmware/iwlwifi-ty-a0-gf-a0-72.ucode
+lib/firmware/iwlwifi-ty-a0-gf-a0-74.ucode
+lib/firmware/iwlwifi-ty-a0-gf-a0-77.ucode
+lib/firmware/iwlwifi-ty-a0-gf-a0.pnvm
+lib/firmware/mediatek/mt8186/scp.img
+lib/firmware/mediatek/mt8195/scp.img
+lib/firmware/mediatek/sof/sof-mt8186.ldc
+lib/firmware/mediatek/sof/sof-mt8186.ri
+lib/firmware/mediatek/sof/sof-mt8195.ldc
+lib/firmware/mediatek/sof/sof-mt8195.ri
+lib/firmware/mediatek/sof-tplg/sof-mt8186.tplg
+lib/firmware/mediatek/sof-tplg/sof-mt8195-mt6359-rt1019-rt5682-dts.tplg
+lib/firmware/mediatek/sof-tplg/sof-mt8195-mt6359-rt1019-rt5682.tplg
+lib/firmware/mediatek/WIFI_MT7922_patch_mcu_1_1_hdr.bin
+lib/firmware/mediatek/WIFI_MT7961_patch_mcu_1_2_hdr.bin
+lib/firmware/mediatek/WIFI_RAM_CODE_MT7922_1.bin
+lib/firmware/mediatek/WIFI_RAM_CODE_MT7961_1.bin
+lib/firmware/qca/crbtfw32.tlv
+lib/firmware/qcom/apq8096/a530_zap.mbn
+lib/firmware/qcom/venus-1.8/venus.mbn
+lib/firmware/qcom/venus-4.2/venus.mbn
+lib/firmware/qcom/venus-5.4/venus.mbn
+lib/firmware/qcom/vpu-2.0/venus.mbn
+lib/firmware/rtlwifi/rtl8188fufw.bin
+lib/firmware/rtlwifi/rtl8192eu_nic.bin
+lib/firmware/rtlwifi/rtl8192eu_wowlan.bin
+lib/firmware/rtw89/rtw8852b_fw.bin
+lib/firmware/rtw89/rtw8852c_fw.bin
+srv/web/ipfire/cgi-bin/ovpnmain.cgi
+srv/web/ipfire/cgi-bin/services.cgi
+srv/web/ipfire/cgi-bin/vpnmain.cgi
+usr/lib/firewall/rules.pl
+usr/local/bin/addonctrl
+usr/local/bin/openvpnctrl
+usr/local/bin/wirelessctrl
+var/ipfire/backup/bin/backup.pl
+var/ipfire/connscheduler/lib.pl
+var/ipfire/updatexlrator/updxlrator-lib.pl
--- a/config/rootfiles/oldcore/172/filelists/iana-etc
+++ b/config/rootfiles/oldcore/172/filelists/iana-etc
@@ -0,0 +1 @@
+../../../common/iana-etc
--- a/config/rootfiles/oldcore/172/filelists/iproute2
+++ b/config/rootfiles/oldcore/172/filelists/iproute2
@@ -0,0 +1 @@
+../../../common/iproute2
--- a/config/rootfiles/oldcore/172/filelists/kmod
+++ b/config/rootfiles/oldcore/172/filelists/kmod
@@ -0,0 +1 @@
+../../../common/kmod
--- a/config/rootfiles/oldcore/172/filelists/libedit
+++ b/config/rootfiles/oldcore/172/filelists/libedit
@@ -0,0 +1 @@
+../../../common/libedit
--- a/config/rootfiles/oldcore/172/filelists/libhtp
+++ b/config/rootfiles/oldcore/172/filelists/libhtp
@@ -0,0 +1 @@
+../../../common/libhtp
--- a/config/rootfiles/oldcore/172/filelists/libloc
+++ b/config/rootfiles/oldcore/172/filelists/libloc
@@ -0,0 +1 @@
+../../../common/libloc
--- a/config/rootfiles/oldcore/172/filelists/libnetfilter_conntrack
+++ b/config/rootfiles/oldcore/172/filelists/libnetfilter_conntrack
@@ -0,0 +1 @@
+../../../common/libnetfilter_conntrack
--- a/config/rootfiles/oldcore/172/filelists/libpng
+++ b/config/rootfiles/oldcore/172/filelists/libpng
@@ -0,0 +1 @@
+../../../common/libpng
--- a/config/rootfiles/oldcore/172/filelists/libtasn1
+++ b/config/rootfiles/oldcore/172/filelists/libtasn1
@@ -0,0 +1 @@
+../../../common/libtasn1
--- a/config/rootfiles/oldcore/172/filelists/libtiff
+++ b/config/rootfiles/oldcore/172/filelists/libtiff
@@ -0,0 +1 @@
+../../../common/libtiff
--- a/config/rootfiles/oldcore/172/filelists/libuv
+++ b/config/rootfiles/oldcore/172/filelists/libuv
@@ -0,0 +1 @@
+../../../common/libuv
--- a/config/rootfiles/oldcore/172/filelists/libxcrypt
+++ b/config/rootfiles/oldcore/172/filelists/libxcrypt
@@ -0,0 +1 @@
+../../../common/libxcrypt
--- a/config/rootfiles/oldcore/172/filelists/libxml2
+++ b/config/rootfiles/oldcore/172/filelists/libxml2
@@ -0,0 +1 @@
+../../../common/libxml2
--- a/config/rootfiles/oldcore/172/filelists/lsof
+++ b/config/rootfiles/oldcore/172/filelists/lsof
@@ -0,0 +1 @@
+../../../common/lsof
--- a/config/rootfiles/oldcore/172/filelists/nano
+++ b/config/rootfiles/oldcore/172/filelists/nano
@@ -0,0 +1 @@
+../../../common/nano
--- a/config/rootfiles/oldcore/172/filelists/openssh
+++ b/config/rootfiles/oldcore/172/filelists/openssh
@@ -0,0 +1 @@
+../../../common/openssh
--- a/config/rootfiles/oldcore/172/filelists/openssl
+++ b/config/rootfiles/oldcore/172/filelists/openssl
@@ -0,0 +1 @@
+../../../common/openssl
--- a/config/rootfiles/oldcore/172/filelists/openvpn
+++ b/config/rootfiles/oldcore/172/filelists/openvpn
@@ -0,0 +1 @@
+../../../common/openvpn
--- a/config/rootfiles/oldcore/172/filelists/pciutils
+++ b/config/rootfiles/oldcore/172/filelists/pciutils
@@ -0,0 +1 @@
+../../../common/pciutils
--- a/config/rootfiles/oldcore/172/filelists/poppler
+++ b/config/rootfiles/oldcore/172/filelists/poppler
@@ -0,0 +1 @@
+../../../common/poppler
--- a/config/rootfiles/oldcore/172/filelists/python3
+++ b/config/rootfiles/oldcore/172/filelists/python3
@@ -0,0 +1 @@
+../../../common/python3
--- a/config/rootfiles/oldcore/172/filelists/python3-daemon
+++ b/config/rootfiles/oldcore/172/filelists/python3-daemon
@@ -0,0 +1 @@
+../../../common/python3-daemon
--- a/config/rootfiles/oldcore/172/filelists/python3-setuptools-rust
+++ b/config/rootfiles/oldcore/172/filelists/python3-setuptools-rust
@@ -0,0 +1 @@
+../../../common/python3-setuptools-rust
--- a/config/rootfiles/oldcore/172/filelists/readline
+++ b/config/rootfiles/oldcore/172/filelists/readline
@@ -0,0 +1 @@
+../../../common/readline
--- a/config/rootfiles/oldcore/172/filelists/sed
+++ b/config/rootfiles/oldcore/172/filelists/sed
@@ -0,0 +1 @@
+../../../common/sed
--- a/config/rootfiles/oldcore/172/filelists/sqlite
+++ b/config/rootfiles/oldcore/172/filelists/sqlite
@@ -0,0 +1 @@
+../../../common/sqlite
--- a/config/rootfiles/oldcore/172/filelists/strongswan
+++ b/config/rootfiles/oldcore/172/filelists/strongswan
@@ -0,0 +1 @@
+../../../common/strongswan
--- a/config/rootfiles/oldcore/172/filelists/sudo
+++ b/config/rootfiles/oldcore/172/filelists/sudo
@@ -0,0 +1 @@
+../../../common/sudo
--- a/config/rootfiles/oldcore/172/filelists/suricata
+++ b/config/rootfiles/oldcore/172/filelists/suricata
@@ -0,0 +1 @@
+../../../common/suricata
--- a/config/rootfiles/oldcore/172/filelists/sysstat
+++ b/config/rootfiles/oldcore/172/filelists/sysstat
@@ -0,0 +1 @@
+../../../common/sysstat
--- a/config/rootfiles/oldcore/172/filelists/tzdata
+++ b/config/rootfiles/oldcore/172/filelists/tzdata
@@ -0,0 +1 @@
+../../../common/tzdata
--- a/config/rootfiles/oldcore/172/filelists/udev
+++ b/config/rootfiles/oldcore/172/filelists/udev
@@ -0,0 +1 @@
+../../../common/udev
--- a/config/rootfiles/oldcore/172/filelists/unbound
+++ b/config/rootfiles/oldcore/172/filelists/unbound
@@ -0,0 +1 @@
+../../../common/unbound
--- a/config/rootfiles/oldcore/172/filelists/usbutils
+++ b/config/rootfiles/oldcore/172/filelists/usbutils
@@ -0,0 +1 @@
+../../../common/usbutils
--- a/config/rootfiles/oldcore/172/filelists/vnstat
+++ b/config/rootfiles/oldcore/172/filelists/vnstat
@@ -0,0 +1 @@
+../../../common/vnstat
--- a/config/rootfiles/oldcore/172/filelists/x86_64/intel-microcode
+++ b/config/rootfiles/oldcore/172/filelists/x86_64/intel-microcode
@@ -0,0 +1 @@
+../../../../common/x86_64/intel-microcode
--- a/config/rootfiles/oldcore/172/filelists/xz
+++ b/config/rootfiles/oldcore/172/filelists/xz
@@ -0,0 +1 @@
+../../../common/xz
--- a/config/rootfiles/oldcore/172/filelists/zlib
+++ b/config/rootfiles/oldcore/172/filelists/zlib
@@ -0,0 +1 @@
+../../../common/zlib
--- a/config/rootfiles/oldcore/172/update.sh
+++ b/config/rootfiles/oldcore/172/update.sh
@@ -0,0 +1,209 @@
+#!/bin/bash
+############################################################################
+#                                                                          #
+# This file is part of the IPFire Firewall.                                #
+#                                                                          #
+# IPFire is free software; you can redistribute it and/or modify           #
+# it under the terms of the GNU General Public License as published by     #
+# the Free Software Foundation; either version 3 of the License, or        #
+# (at your option) any later version.                                      #
+#                                                                          #
+# IPFire is distributed in the hope that it will be useful,                #
+# but WITHOUT ANY WARRANTY; without even the implied warranty of           #
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
+# GNU General Public License for more details.                             #
+#                                                                          #
+# You should have received a copy of the GNU General Public License        #
+# along with IPFire; if not, write to the Free Software                    #
+# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
+#                                                                          #
+# Copyright (C) 2022 IPFire-Team <info@ipfire.org>.                        #
+#                                                                          #
+############################################################################
+#
+. /opt/pakfire/lib/functions.sh
+/usr/local/bin/backupctrl exclude >/dev/null 2>&1
+
+core=172
+
+# Remove old core updates from pakfire cache to save space...
+for (( i=1; i<=$core; i++ )); do
+	rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
+done
+
+# Stop services
+/etc/rc.d/init.d/ipsec stop
+/usr/local/bin/openvpnctrl -k
+/usr/local/bin/openvpnctrl -kn2n
+/etc/rc.d/init.d/sshd stop
+/etc/rc.d/init.d/unbound stop
+/etc/rc.d/init.d/suricata stop
+
+KVER="xxxKVERxxx"
+
+# Backup uEnv.txt if exist
+if [ -e /boot/uEnv.txt ]; then
+    cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
+fi
+
+# Extract files
+extract_files
+
+# update linker config
+ldconfig
+
+# Remove files
+rm -rvf \
+	/etc/pcmcia \
+	/etc/strongswan.d/scepclient.conf \
+	/etc/udev/rules.d/60-pcmcia.rules \
+	/lib/firmware/cnm/wave521c_j721s2_codec_fw.bin \
+	/lib/firmware/cxgb4/t4fw-1.26.6.0.bin \
+	/lib/firmware/cxgb4/t5fw-1.26.6.0.bin \
+	/lib/firmware/cxgb4/t6fw-1.26.6.0.bin \
+	/lib/firmware/mediatek/sof/sof-mt8186-mt6366-da7219-max98357.tplg \
+	/lib/firmware/mediatek/sof/sof-mt8186-mt6366-rt1019-rt5682s.tplg \
+	/lib/firmware/qcom/a530_zap.b00 \
+	/lib/firmware/qcom/a530_zap.b01 \
+	/lib/firmware/qcom/a530_zap.b02 \
+	/lib/firmware/qcom/venus-1.8/venus.b* \
+	/lib/firmware/qcom/venus-4.2/venus.b* \
+	/lib/firmware/qcom/venus-5.2/venus.b* \
+	/lib/firmware/qcom/venus-5.4/venus.b* \
+	/lib/firmware/qcom/vpu-1.0/venus.b* \
+	/lib/firmware/qcom/vpu-2.0/venus.b* \
+	/lib/firmware/qcom/vpu-2.0/venus.mdt \
+	/lib/firmware/rtl_bt \
+	/lib/libz.so.1.2.12 \
+	/sbin/lspcmcia \
+	/sbin/pccardctl \
+	/sbin/pcmcia-check-broken-cis \
+	/sbin/pcmcia-socket-startup \
+	/usr/lib/libbind9-9.16.33.so \
+	/usr/lib/libdns-9.16.33.so \
+	/usr/lib/libedit.so.0.0.6* \
+	/usr/lib/libexpat.so.1.8.9 \
+	/usr/lib/libirs-9.16.33.so \
+	/usr/lib/libisc-9.16.33.so \
+	/usr/lib/libisccc-9.16.33.so \
+	/usr/lib/libisccfg-9.16.33.so \
+	/usr/lib/libnetfilter_conntrack.so.3.7.0 \
+	/usr/lib/libns-9.16.33.so \
+	/usr/lib/libpng16.so.16.37.0 \
+	/usr/lib/libpoppler-cpp.so.0.9* \
+	/usr/lib/libpoppler-glib.so.8.23.0 \
+	/usr/lib/libpoppler.so.120* \
+	/usr/lib/libtasn1.so.6.6.2 \
+	/usr/lib/libtiff.so.5.7* \
+	/usr/lib/libtiffxx.so.5.7* \
+	/usr/lib/libunbound.so.8.1.1* \
+	/usr/lib/libxml2.so.2.9.* \
+	/usr/lib/python3.10/ensurepip/_bundled/pip-21* \
+	/usr/lib/python3.10/ensurepip/_bundled/setuptools-5* \
+	/usr/lib/python3.10/lib2to3/Grammar3.10.* \
+	/usr/lib/python3.10/lib2to3/PatternGrammar3.10.* \
+	/usr/lib/python3.10/site-packages/pip-21.* \
+	/usr/lib/python3.10/site-packages/pip/_internal/utils/parallel.py \
+	/usr/lib/python3.10/site-packages/pip/_internal/utils/pkg_resources.py \
+	/usr/lib/python3.10/site-packages/pip/_vendor/appdirs.py \
+	/usr/lib/python3.10/site-packages/pip/_vendor/chardet/compat.py \
+	/usr/lib/python3.10/site-packages/pip/_vendor/distlib/_backport \
+	/usr/lib/python3.10/site-packages/pip/_vendor/distro.py \
+	/usr/lib/python3.10/site-packages/pip/_vendor/html5lib \
+	/usr/lib/python3.10/site-packages/pip/_vendor/msgpack/_version.py \
+	/usr/lib/python3.10/site-packages/pip/_vendor/progress \
+	/usr/lib/python3.10/site-packages/pip/_vendor/pyparsing.py \
+	/usr/lib/python3.10/site-packages/pip/_vendor/urllib3/packages/ssl_match_hostname \
+	/usr/lib/python3.10/site-packages/pkg_resources/_vendor/packaging/_compat.py \
+	/usr/lib/python3.10/site-packages/pkg_resources/_vendor/packaging/_typing.py \
+	/usr/lib/python3.10/site-packages/pkg_resources/_vendor/pyparsing.py \
+	/usr/lib/python3.10/site-packages/pkg_resources/tests/data \
+	/usr/lib/python3.10/site-packages/setuptools-5* \
+	/usr/lib/python3.10/site-packages/setuptools/_distutils/py35compat.py \
+	/usr/lib/python3.10/site-packages/setuptools/_vendor/packaging/_compat.py \
+	/usr/lib/python3.10/site-packages/setuptools/_vendor/packaging/_typing.py \
+	/usr/lib/python3.10/site-packages/setuptools/_vendor/pyparsing.py \
+	/usr/lib/python3.10/site-packages/setuptools/config.py \
+	/usr/lib/python3.10/site-packages/setuptools_rust/utils.py \
+	/usr/lib/sudo/sample_approval.so \
+	/usr/libexec/ipsec/scepclient \
+	/var/ipfire/ca/dh1024.pem
+
+# Remove gnu-netcat add-on, if installed
+for addon in gnu-netcat; do
+	if [ -e "/opt/pakfire/db/installed/meta-${addon}" ]; then
+		for i in $(</opt/pakfire/db/rootfiles/${addon}); do
+			rm -rfv "/${i}"
+		done
+	fi
+	rm -vf \
+		/opt/pakfire/db/installed/meta-${addon} \
+		/opt/pakfire/db/meta/meta-${addon} \
+		/opt/pakfire/db/rootfiles/${addon}
+done
+
+# Update Language cache
+/usr/local/bin/update-lang-cache
+
+# Filesytem cleanup
+/usr/local/bin/filesystem-cleanup
+
+# Apply local configuration to sshd_config
+/usr/local/bin/sshctrl
+
+# Correct permissions of some library files
+chown -Rv root:root /var/ipfire/connscheduler/lib.pl /var/ipfire/updatexlrator/updxlrator-lib.pl /var/ipfire/menu.d/*
+
+# Replace existing OpenVPN Diffie-Hellman parameter by ffdhe4096, as specified in RFC 7919
+sed -i 's|/var/ipfire/ovpn/ca/dh1024.pem|/etc/ssl/ffdhe4096.pem|' /var/ipfire/ovpn/server.conf /var/ipfire/ovpn/n2nconf/*/*.conf
+
+# Start services
+if grep -q "ENABLE_IDS=on" /var/ipfire/suricata/settings; then
+	/etc/rc.d/init.d/suricata start
+fi
+/etc/init.d/unbound start
+if grep -q "ENABLE_SSH=on" /var/ipfire/remote/settings; then
+	/etc/init.d/sshd start
+fi
+if grep -q "ENABLED=on" /var/ipfire/ovpn/settings; then
+	/usr/local/bin/openvpnctrl -s
+	/usr/local/bin/openvpnctrl -sn2n
+fi
+if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then
+	/etc/init.d/ipsec start
+fi
+
+# Regenerate all initrds
+dracut --regenerate-all --force
+case "$(uname -m)" in
+	armv*)
+		mkimage -A arm -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire
+		rm /boot/initramfs-${KVER}-ipfire.img
+		;;
+	aarch64)
+		mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire
+		# dont remove initramfs because grub need this to boot.
+		;;
+esac
+
+# Call user update script (needed for some ARM boards)
+if [ -e /boot/pakfire-kernel-update ]; then
+    /boot/pakfire-kernel-update ${KVER}
+fi
+
+# This update needs a reboot...
+touch /var/run/need_reboot
+
+# Finish
+/etc/init.d/fireinfo start
+sendprofile
+
+# Update grub config to display new core version
+if [ -e /boot/grub/grub.cfg ]; then
+	grub-mkconfig -o /boot/grub/grub.cfg
+fi
+
+sync
+
+# Don't report the exitcode last command
+exit 0