Commit Graph

10238 Commits

Author SHA1 Message Date
Michael Tremer
077ea717e0 unbound+DHCP: Set TTL for local leases to 1m
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 21:14:44 +01:00
Michael Tremer
811f3d3050 unbound: Start service after network has been brought up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 21:13:25 +01:00
Michael Tremer
cc53e7ef23 unbound: Restart after local hosts have been modified
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 20:52:51 +01:00
Michael Tremer
36792be6ce DNS: Import local hosts into unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 20:46:02 +01:00
Michael Tremer
6f5d8f0cce Start unbound+DHCP bridge only when DHCP server is running
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 20:36:51 +01:00
Michael Tremer
a66c4880d9 unbound: Start service at system boot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 20:11:47 +01:00
Michael Tremer
266735a12f Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:07:44 +01:00
Matthias Fischer
4e63727d2d next: rootfile updates for 'unbound' and 'initscripts'
These two came to my view during the last builds. I hope they're ok now.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:06:50 +01:00
Matthias Fischer
a80606ecb5 squid: Update to 3.5.21
For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID_3_5_21.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:06:48 +01:00
Michael Tremer
69f8d8ee6c Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-09 14:57:07 +01:00
Michael Tremer
5fba8a0b1e Merge branch 'unbound' into next 2016-09-08 19:50:45 +01:00
Michael Tremer
b658a451fb unbound: Automatically scale configuration to system
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-08 19:46:43 +01:00
Alexander Marx
3364c93e37 BUG11177: pppoe password not required anymore
fixes: #11177

There are providers which do not use passwords anymore.
For this reason the password field is no longer mandatory.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-08 12:58:47 +01:00
Jonatan Schlag
3943a54036 Libvirt: Fix update.sh script
The virtlogd could only be restarted when the daemons run. The update.sh
script tried to restart the daemon no matter if the daemons run or not.
This behaviour produce problems.

An If statement now checks if the daemon runs or not and execute the
command that is suitable for the situation.

Fixes: #11172

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-05 17:05:32 +01:00
Jonatan Schlag
d996e17ab8 Update libvirt to 2.1
This is the update of libvirt to the latest version 2.1.
The most important change from a packager view is the new virtlogd
daemon.
This daemon handles the qemu output and wrote it to log files.

The require some changes:
- A new init script to start, stop restart the daemon called virtlogd.
The daemon is restart with SIGUSR1 (this is important because the daemon
keeps all pipelines etc. open).

This introduces a problem with the uninstall.sh install.sh script.
It is not possible to stop the daemon while virtual machines are
running, so the script update.sh execute from now not uninstall.sh and
install.sh instead it contains all steps from uninstall.sh install.sh
expect the start / stop routine for virtlogd. The daemon is just
restarted after the update, which makes sure that all changes take
effect.

- new symlinks in the uninstall.sh and install.sh script and some root
file changes because of the new virtlogd init script.
- the archive format changes from tar.gz to tar.xz

For Changelogs see:

https://libvirt.org/news-2015.html
https://libvirt.org/news.html (2017 and later:
https://libvirt.org/news-2016.html )

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-31 22:40:35 +01:00
Michael Tremer
457367e13d Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-08-31 22:40:16 +01:00
Matthias Fischer
5e358816c5 dnsmasq 2.76: latest patches (015-016)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-23 13:05:42 -04:00
Matthias Fischer
bfce482806 gnupg: Update to 1.4.21
Second try:

Update from 1.4.18 to 1.4.21, based on current 'next'.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-23 13:04:47 -04:00
Matthias Fischer
0542a94570 nano: Update to 2.6.3
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-23 13:04:02 -04:00
Arne Fitzenreiter
71434e5b4a Merge branch 'core104' into next 2016-08-22 07:26:37 +02:00
Matthias Fischer
53aad60d6f smartmontools: Update to 6.5
For details, see:
https://www.smartmontools.org/browser/tags/RELEASE_6_5/smartmontools/NEWS

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:50:42 -04:00
Matthias Fischer
d8e31f4311 libgpg-error: Update to 1.24
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:46:03 -04:00
Matthias Fischer
a59e2e1c65 libgcrypt: Update to 1.7.3
Fixes CVE-2016-6313

For details, see:
https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html
https://bugzilla.redhat.com/show_bug.cgi?id=1366105

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:45:58 -04:00
Matthias Fischer
616edca2ba libassuan: Update to 2.4.3
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:45:57 -04:00
Matthias Fischer
d8efad249a squid: Update to 3.5.20 with latest patches (14067-14075)
For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Since there were problems with "trailing white spaces" I started a new 'squid_3'
branch from scratch, based on current 'next'.
I hope this is what is needed and that it helps.

This one was built without errors and is running here without seen problems.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:45:17 -04:00
Arne Fitzenreiter
69f3684cf5 kernel: fix grsecurity patch.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-21 22:40:12 +02:00
Arne Fitzenreiter
66cb9ec42b kernel: update to 3.14.77
fix performance issue with tcp ack security fix.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-21 17:56:47 +02:00
Arne Fitzenreiter
2a78041a3f kernel: update arm-multi grsec compile fix patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-18 22:35:43 +02:00
Arne Fitzenreiter
0c29a8ab58 kernel: add hyper-v: mark tsc unstable patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-17 20:37:07 +02:00
Arne Fitzenreiter
3bf2f1822d kernel: update to 3.14.76
this kernel has important tcp and ext4 fixes.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-17 19:52:09 +02:00
Arne Fitzenreiter
d1d60e001a Merge branch 'core104' into next 2016-08-17 19:51:01 +02:00
Jonatan Schlag
6bc2225a5d Libvirt: load vhost_net before libvirtd start.
If the  kernel module vhot_net is loaded, the performance of virtio
networking is better then without vhost_net.
So the module is loaded before libvirtd ist started to get the benefit
of vhost_net.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-15 11:01:34 +01:00
Jonatan Schlag
62be0cda19 Libvirt: fix configuration options
Adds a missed - to -without-dbus and -with-interface.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-15 11:01:31 +01:00
Jonatan Schlag
0296bbea84 Libvirt: enable storage-fs
Fixes: 11154

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-15 11:01:29 +01:00
Jonatan Schlag
a07b8a2d55 Libvirt: load vhost_net before libvirtd start.
If the  kernel module vhot_net is loaded, the performance of virtio
networking is better then without vhost_net.
So the module is loaded before libvirtd ist started to get the benefit
of vhost_net.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-14 15:43:00 +01:00
Jonatan Schlag
cf5c7c9f2b Libvirt: fix configuration options
Adds a missed - to -without-dbus and -with-interface.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-14 15:42:59 +01:00
Jonatan Schlag
ae2919a502 Libvirt: enable storage-fs
Fixes: 11154

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-14 15:42:30 +01:00
Arne Fitzenreiter
40607f8126 core104: revert adding customservices.
simply adding may use id's twice if the user has
added other services so we don't update this files.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-07 17:08:44 +02:00
Matthias Fischer
bf8378e4b7 dnsmasq 2.76: latest patches (013-014)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 15:05:26 +01:00
Jonatan Schlag
678a797077 Add new package libusbredir
This package adds support for the use redirection of spice.
It is now possible to attach USB devices of the host where the spice
client run to the virtual machine.

The binary is not needed for this functionality and that's why they is
not shipped with the package

This feature is also enabled in qemu.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 15:03:57 +01:00
Michael Tremer
b4255d757f Rootfile update
Forgot to commit this one

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 15:02:08 +01:00
Michael Tremer
47c3e83253 unbound is not supposed to be a package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 12:45:11 +01:00
Michael Tremer
6302a24890 make.sh: Unbound depends on libevent
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 20:58:50 +01:00
Michael Tremer
1b4f2493a5 unbound: Update dynamically configured DNS servers after connecting RED
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:41:27 +01:00
Michael Tremer
df7340d2f3 Add unboundctrl
Control binary to relaunch unbound from the web user interface

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:34:39 +01:00
Michael Tremer
9625be6f24 webinterface: Replace dnsmasq with unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:30:14 +01:00
Michael Tremer
61b4250af5 Drop dnsmasq
This will be replaced by unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:25:48 +01:00
Michael Tremer
b8f5eda86b unbound: Rewrite configuration and initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:20:27 +01:00
Michael Tremer
0fbd7c3c81 Import Unbound DHCP Lease Bridge
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 16:48:39 +01:00
Michael Tremer
cb21683968 unbound: Ship ICANN's certificates for trust anchor validation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 15:24:00 +01:00