Commit Graph

5168 Commits

Author SHA1 Message Date
Michael Tremer
077ea717e0 unbound+DHCP: Set TTL for local leases to 1m
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 21:14:44 +01:00
Michael Tremer
811f3d3050 unbound: Start service after network has been brought up
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 21:13:25 +01:00
Michael Tremer
a66c4880d9 unbound: Start service at system boot
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 20:11:47 +01:00
Michael Tremer
266735a12f Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:07:44 +01:00
Matthias Fischer
4e63727d2d next: rootfile updates for 'unbound' and 'initscripts'
These two came to my view during the last builds. I hope they're ok now.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:06:50 +01:00
Michael Tremer
69f8d8ee6c Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-09 14:57:07 +01:00
Michael Tremer
5fba8a0b1e Merge branch 'unbound' into next 2016-09-08 19:50:45 +01:00
Michael Tremer
b658a451fb unbound: Automatically scale configuration to system
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-08 19:46:43 +01:00
Jonatan Schlag
d996e17ab8 Update libvirt to 2.1
This is the update of libvirt to the latest version 2.1.
The most important change from a packager view is the new virtlogd
daemon.
This daemon handles the qemu output and wrote it to log files.

The require some changes:
- A new init script to start, stop restart the daemon called virtlogd.
The daemon is restart with SIGUSR1 (this is important because the daemon
keeps all pipelines etc. open).

This introduces a problem with the uninstall.sh install.sh script.
It is not possible to stop the daemon while virtual machines are
running, so the script update.sh execute from now not uninstall.sh and
install.sh instead it contains all steps from uninstall.sh install.sh
expect the start / stop routine for virtlogd. The daemon is just
restarted after the update, which makes sure that all changes take
effect.

- new symlinks in the uninstall.sh and install.sh script and some root
file changes because of the new virtlogd init script.
- the archive format changes from tar.gz to tar.xz

For Changelogs see:

https://libvirt.org/news-2015.html
https://libvirt.org/news.html (2017 and later:
https://libvirt.org/news-2016.html )

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-31 22:40:35 +01:00
Matthias Fischer
bfce482806 gnupg: Update to 1.4.21
Second try:

Update from 1.4.18 to 1.4.21, based on current 'next'.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-23 13:04:47 -04:00
Matthias Fischer
d8e31f4311 libgpg-error: Update to 1.24
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:46:03 -04:00
Matthias Fischer
a59e2e1c65 libgcrypt: Update to 1.7.3
Fixes CVE-2016-6313

For details, see:
https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html
https://bugzilla.redhat.com/show_bug.cgi?id=1366105

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:45:58 -04:00
Matthias Fischer
616edca2ba libassuan: Update to 2.4.3
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:45:57 -04:00
Arne Fitzenreiter
d1d60e001a Merge branch 'core104' into next 2016-08-17 19:51:01 +02:00
Arne Fitzenreiter
40607f8126 core104: revert adding customservices.
simply adding may use id's twice if the user has
added other services so we don't update this files.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-07 17:08:44 +02:00
Jonatan Schlag
678a797077 Add new package libusbredir
This package adds support for the use redirection of spice.
It is now possible to attach USB devices of the host where the spice
client run to the virtual machine.

The binary is not needed for this functionality and that's why they is
not shipped with the package

This feature is also enabled in qemu.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 15:03:57 +01:00
Michael Tremer
b4255d757f Rootfile update
Forgot to commit this one

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 15:02:08 +01:00
Michael Tremer
47c3e83253 unbound is not supposed to be a package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 12:45:11 +01:00
Michael Tremer
1b4f2493a5 unbound: Update dynamically configured DNS servers after connecting RED
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:41:27 +01:00
Michael Tremer
df7340d2f3 Add unboundctrl
Control binary to relaunch unbound from the web user interface

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:34:39 +01:00
Michael Tremer
61b4250af5 Drop dnsmasq
This will be replaced by unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:25:48 +01:00
Michael Tremer
b8f5eda86b unbound: Rewrite configuration and initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:20:27 +01:00
Michael Tremer
0fbd7c3c81 Import Unbound DHCP Lease Bridge
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 16:48:39 +01:00
Michael Tremer
cb21683968 unbound: Ship ICANN's certificates for trust anchor validation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 15:24:00 +01:00
Michael Tremer
c648dd88f5 unbound: Update trust anchor once a day
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 15:20:07 +01:00
Michael Tremer
76f5c54236 unbound: Install trust anchor in /var/lib/unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 15:12:01 +01:00
Michael Tremer
89b0810b24 python-daemon: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 14:43:47 +01:00
Arne Fitzenreiter
1159f711c8 core104: add changed files
customservices and openssh.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-06 12:09:44 +02:00
Michael Tremer
08f6cdcf82 New package: python inotify
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-05 13:33:47 +01:00
Marcel Lorenz
d0e5f71f77 New package: unbound 1.5.9
Unbound is a validating, recursive, and caching DNS resolver.

https://www.unbound.net

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-05 13:29:09 +01:00
Jonatan Schlag
3a4a8b055b Libvirt: Add backup
The directory /etc/libvirt is backed up on uninstallation  and is
restored on installation.

Alle Files in  /var are commented in the rootfile so they are not
removed on uninstallation.
Because of the fact that the directories are not shipped with the
package they were created at installation time.
The permissions of 3 directories are changed because the qemu user is
nobody and the qemu group is kvm, so the permissions must be nobody:kvm

Fixes: #11151

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-02 16:07:33 +01:00
Michael Tremer
afc0f6e884 Merge remote-tracking branch 'stevee/guardian-2.0' into next 2016-08-02 12:18:29 +01:00
Arne Fitzenreiter
65a61d88c8 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-07-29 18:58:56 +02:00
Arne Fitzenreiter
9a300ee8b5 core104: ship screen
old binary is linked against libshadow.0*

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-29 18:57:49 +02:00
Stefan Schantl
6a5b83f80d Core 104: Add for guardian changed files to core update.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 15:40:30 +02:00
Stefan Schantl
3b8ad4fde9 guardian-legacy: Drop old guardian related files.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:21:08 +02:00
Stefan Schantl
a11aaa91b3 guardian: Update to 2.0.
Update guardian to the re-written version.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Stefan Schantl
8afd763e70 perl-Net-IP: New package
The perl-Net-IP module provides various methods for validating
and calculating IP-addresses (both IP protocols supported) and
is a runtime dependency of guardian 2.0.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Stefan Schantl
65c61b574f perl-common-sense: New package.
This is a runtime dependency for perl-inotify2.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Stefan Schantl
7f218a58ba perl-inotify2: New package.
This module contains inotify bindings for perl, used by the extendend guardian.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:18:51 +02:00
Michael Tremer
0c265f5717 nginx: Update to 1.8.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-29 09:04:04 +01:00
Arne Fitzenreiter
5a53d5947d core104: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-28 18:12:13 +02:00
Alexander Marx
0eccc8a97c Firewall: Add Services SSMTP and submission
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-26 14:53:06 +01:00
Matthias Fischer
24159f0952 nano 2.6.1: fix in rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-25 17:24:31 +01:00
Michael Tremer
c48a24dc14 core104: Include recent changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-20 16:49:11 +01:00
Alf Høgemark
f00699e8bb Change case of the unit "bit" from "Bit" to "bit" in web UI
The correct case for "kilobit" is "kilobit", not "kiloBit".
And the same applies for Mbit, Gbit etc.
Reference is https://en.wikipedia.org/wiki/Kilobit

This commit changes the texts used in the web UI, so
that it correctly displays as "bit", "kbit", "Mbit" etc.

This fixes bugzilla item 10918.

Signed-off-by: Alf Høgemark <alf@i100.no>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-20 16:46:23 +01:00
Michael Tremer
3b7d73d1d4 Fix potential HTTPoxy vulnerability
https://httpoxy.org/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-19 15:02:16 +01:00
Michael Tremer
71f578bbfc freeradius: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-19 14:54:50 +01:00
Jonatan Schlag
ccb35c191f Update qemu to version 2.6
This patch update qemu to version 2.6
For changelogs see:
http://wiki.qemu.org/ChangeLog/2.5
http://wiki.qemu.org/ChangeLog/2.6

Qemu try to built with bluez, but before version 2.6 bluez was not used
by qemu on IPFire, so I think it is better to disable bluez because
nobody needs it before version 2.6 and our bluez  is not the latest
version so I think this will cause more problems than benefits.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:38:39 +01:00
Jonatan Schlag
d4641215c7 Update spice to version 0.12.8
This is an security update.
Recent were 2 serious security vulnerabilities published.
This patch update spice to a version which is not vulnerable.

Changelog:

Changes in 0.12.8:

==================
* Fixes for CVE-2016-0749 and CVE-2016-2150

Changes in 0.12.7:
==================
* spice-server will now send TCP keepalive probes on the TCP connections
  it
  uses. This can prevent unwanted idle disconnections if proxies are
  used
  between the client and the host.
* Fix important memory usage when the webdav channel is used
* Do not disconnect when the client requests an unsupported compression
  type
* Fix a few race conditions
* Fix display glitch when using XSpice
* Improve help string for 'replay -s'
* Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE
  port
  configured, USB webcam redirection over a slow link)
* Fix various compilation warning when building on 32 bit machines
* Some fixes for big-endian machines, more work is likely to be needed
* Do not build static libraries by default, this can be reenabled with
  --enable-static
* Fix small leak in MJPEG code

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:28:57 +01:00