Commit Graph

369 Commits

Author SHA1 Message Date
Arne Fitzenreiter
5a7f7dd587 issue/motd: add architecture warning also to console and ssh logins.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:35:19 +01:00
Michael Tremer
eab7754d1e suricata: Drop extra rootfiles
These are all the same and not different from what is in
config/rootfiles/common/suricata.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:07:29 +00:00
Arne Fitzenreiter
6f6d66105a kernel: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-21 19:31:49 +01:00
Arne Fitzenreiter
24ff52a2e4 kernel: i586 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-06 10:01:32 +01:00
Arne Fitzenreiter
d6f982720f util-linux: rootfile update i586
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-06 08:00:58 +01:00
Arne Fitzenreiter
66bc17dcc1 iproute2: build after iptables to get ipt filters for tc
to proper filter IPSec im QoS without using mark or connmark i need ipt filters
for tc which are only build if iptables are build prior iproute2.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-24 17:06:34 +02:00
Arne Fitzenreiter
97ac4778bb core161: now use 2to3 of python3
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-13 16:33:43 +00:00
Adolf Belka
d5bb33744a python: removal of python2 from IPFire
- Final patch for removal of python2 from IPFire. This can be implemented in an
   appropriate Core Update after all other python2 related patches have been implemented
   and confirmed working.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-13 12:28:12 +00:00
Michael Tremer
45124fbbc2 util-linux: Ship hexdump
This is a handy tool which can help debugging any problems and should be
part of the distribution.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-13 12:09:27 +00:00
Arne Fitzenreiter
58f6264fa4 kernel: update to 5.10.71
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-10 06:46:25 +00:00
Arne Fitzenreiter
6d8cc5a74e kernel: x86 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-20 23:46:14 +02:00
Michael Tremer
1e848ad3d4 grub: Add file with cloud helping stuff
This file will detect whether to do certain actions depending on the
environment it is running on.

Currently this detects whether IPFire is booting up on AWS EC2 and
selects the serial console boot entry.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-01 13:24:22 +00:00
Arne Fitzenreiter
bdfaa3ed3a gcc: fix i586 rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:40 +02:00
Arne Fitzenreiter
f696f419ad kernel: update to 5.10.46
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:40 +02:00
Arne Fitzenreiter
5d7b9519f5 i586: toolchain rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:39 +02:00
Arne Fitzenreiter
26553bec8a grub: update to 2.06
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:39 +02:00
Arne Fitzenreiter
663ab267ba kernel: update to 5.10.42
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
5235ab4817 kernel: update to 5.10.38
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
03b7752c80 kernel: update to 5.10.29
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
6154e32369 kernel: update i586 and x86_64 rootfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
23cf15d6b5 kernel: i586 and x86_64 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
82b0e0f13d kernel: x86* disable alg modules
the application layer gateway modules can used to bypass the nat
via nat slipstreaming. I had disabled all of them. If one is really needed
we can reenable it later.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
f721328ce2 kernel: update i586 and x86_64 rootfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
551756d35d kernel: i586 and x86_64 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Michael Tremer
904386624c kernel: Compile RNG drivers into the kernel
The kernel will try to gather entropy really early in the boot process
where those device drivers might not have been loaded yet. They are
small and can therefore be compiled into the kernel like we already do
on ARM.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-05 07:42:36 +02:00
Arne Fitzenreiter
c062c7700f kernel: update to 5.10.5
todo: add armv5tel and aarch64 config and rootfiles.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Michael Tremer
de6fd0881f Drop obsolete files from bluetooth package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-18 16:17:27 +00:00
Michael Tremer
65171dc956 intel-microcode: Update to 20210608
Fixes various security vulnerabilities:

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-09 17:02:11 +00:00
Peter Müller
740549d85a dmidecode: update to 3.3
Notable changes as per https://git.savannah.gnu.org/cgit/dmidecode.git/plain/NEWS:

Version 3.3 (Wed Oct 14 2020)
  - [BUILD] Allow overriding build settings from the environment.
  - [COMPATIBILITY] Document how the UUID fields are interpreted.
  - [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  - [PORTABILITY] Only scan /dev/mem for entry point on x86.
  - Support for SMBIOS 3.3.0. This includes new processor names, new port
    connector types, and new memory device form factors, types and
    technologies.
  - Add bios-revision, firmware-revision and system-sku-number to -s option.
  - Use the most appropriate unit for cache size.
  - Decode system slot base bus width and peers.
  - Important bug fixes:
    Fix Redfish Hostname print length
    Fix formatting of TPM table output
    Fix System Slot Information for PCIe SSD
    Don't choke on invalid processor voltage
  - Use the most appropriate unit for cache size.

Version 3.2 (Wed Sep 14 2018)
  - [COMPATIBILITY] The UUID is now displayed using lowercase letters, per
    RFC 4122 (#53569). You must ensure that any code parsing it is
    case-insensitive.
  - Support for SMBIOS 3.2.0. This includes new processor names, new socket
    and port connector types, new system slot state and property, and support
    for non-volatile memory (NVDIMM).
  - Support for Redfish management controllers.
  - A new command line option to query a specific structure by its handle.
  - A new command line option to query the system family string.
  - Support for 3 ThinkPad-specific structures (patch #9642).
  - Support for HPE's new company name.
  - Support UEFI on FreeBSD.
  - Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  - (biosdecode) A new command line option to fully decode PIR information
    (support request #109339).

This patch also features two new patches recommended by upstream, whose
online version can be retrieved at
https://git.savannah.gnu.org/cgit/dmidecode.git/commit/?id=1117390ccd9cea139638db6f460bb6de70e28f94
https://git.savannah.gnu.org/cgit/dmidecode.git/commit/?id=11e134e54d15e67a64c39a623f492a28df922517.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-03 09:14:21 +00:00
Peter Müller
9d0b7c1a78 Delete the remainings of libupnp and upnpd
These include rootfiles, firewall menue entries that have been
unmaintained for a long time, and firewall chains which were never used
in recent time.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:42:55 +00:00
Michael Tremer
cb69bf13ca Drop miniupnpd stuff from rootfiles and all systems
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:38:02 +00:00
Arne Fitzenreiter
10ce44b0c6 kernel: update to 4.14.232
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 11:58:42 +00:00
Adolf Belka
bbe2799bae boost: Update to 1_76_0 and using python3
- Update from 1_71_0 to 1_76_0
- Update rootfile for x86_64 and copy for other architectures by replacing
    x64 with x32 for i586, a32 for armv5tel and a64 for aarch64
- Make build use python3
- add link=shared to build to only have shared libraries created, except for
    libboost_exception and libboost_test_exec_monitor which are only
    created as static versions
- Changelog
    Fixes
      algorithm::reduce with crop now does not remove the counts in flow
        bins anymore if the selected range actually overlaps with the flow
        bins, making the treatment of flow bins consistent with inner bins
      accumulators::mean and accumulators::weighted_mean now compute the
        correct variance when operator+= was called, for example, when
        histograms with accumulators are added; this was wrong before
        leading to too small variances
      detection of weight support in user-defined accumulators was broken
        at compile-time if accumulator used operator+= instead of
        operator(); tests only accidentally passed for builtin weighted_sum

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-10 19:27:27 +00:00
Adolf Belka
c85b97ed5a lm_sensors: Update to 3-6-0
- Update from 3-4-0 to 3-6-0
- Update of rootfilers in each architecture
   Only the library version changed in each rootfile
- Installed updated lm_sensors. Confirmed updated version was installed.
   sensors-detect ran successfully but could not confirm successful sensor
   detection as installation was run on vm testbed and this has no sesnors
   Testing on real hardware to confirm that sensors are detected and
   sensor-* directories correctly created in IPFire.
- Changelog
   3.6.0 (2019-10-18)
     configs: Added a number of new configuration files
     fancontrol: AVERAGE env variable can be used to set the number of previ>
     Makefile: The MACHINE variable has been renamed to ARCH
     sensord: Add an option -1/--oneline to print chip and adapter on the sa>
     sensors: Fixed a stray comma bug in the JSON output
              Fixed Fahrenheit conversion with raw and JSON output
              Scale voltage and current values in the default output format
     sensors-detect: Add detection of AMD Family 17h, models 30h, 70h
                     Add detection of some AMD Family 15h models
                     Add detection of AMD Family 16h model 30h power sensors
                     Add detection of Hygon Family 18h thermal sensors
                     Add detection of Nuvoton NCT6797D
                     Add detection of Nuvoton NCT6798D
                     Add detection of Nuvoton NCT6112D/NCT6114D/NCT6116D
                     Fix printing CPU info on non-x86 arches
                     Fix printing lm_sensors version
                     Mark Fintek F75387SG/RG as supported by the f75375s dri>
   3.5.0 (2018-11-23)
     Fixed disappearance of certain hwmon chips with 4.19+ kernels
     Add the find-driver script for debugging
     Various documentation and man page improvements
     Fix various issues found by Coverity Scan
     Fix compilation with the musl C library
     Development version string now contains "+git" instead of "+SVN"
     Updated links in documentation to reflect the new home of lm_sensors
     sensors.1: Add reference to sensors-detect
                Document -j option (json output)
     sensors: Add support for json output
              Add support for power min, lcrit, min_alarm, lcrit_alarm
     sensors-detect: Fix systemd paths
                     Add detection of Fintek F81768
                     Only probe I/O ports on x86
                     Add detection of Nuvoton NCT6793D
                     Add detection of Microchip MCP9808
                     Mark F71868A as supported by the f71882fg driver
                     Mark F81768D as supported by the f71882fg driver
                     Mark F81866D as supported by the f71882fg driver
                     Add detection of various ITE chips
                     Add detection of Nuvoton NCT6795D
                     Add detection of DDR4 SPD
                     Add detection of ITE IT8987D
                     Add detection of AMD Family 17h temperature sensors
                     Add detection of AMD KERNCZ SMBus controller
                     Add detection of various Intel SMBus controllers
                     Add detection of Giantec GT30TS00
                     Add detection of ONS CAT34TS02C and CAT34TS04
                     Add detection of AMD Family 15h Model 60+ temperature s>
                     Add detection of Nuvoton NCT6796D
                     Add detection of AMD Family 15h Model 70+ temperature s>
     configs: Add sample configuration files.
     sensors.conf.default: Add hardwired inputs of NCT6795D
                           Add hardwired inputs of F71868A
                           Add hardwired NCT6796D inputs
     vt1211_pwm: replaced deprecated sub shell syntax
                 run with bash instead of sh
     pwmconfig: replaced deprecated sub shell syntax
     fancontrol: replaced deprecated sub shell syntax
                 save original pwm values
     fancontrol.8: replaced deprecated sub shell syntax
     libsensors: Add support for SENSORS_BUS_TYPE_SCSI
                 Add support for power min, lcrit, min_alarm, lcrit_alarm

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:27:11 +00:00
Michael Tremer
8460cfee52 linux: Remove old code for generating initramfs
These kernels are no longer supported or have been merged into the main
kernel.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:47:39 +00:00
Matthias Fischer
395513f525 rust: Update to 1.51
For details see:
https://github.com/rust-lang/rust/blob/master/RELEASES.md

Please note: I can only build on Intel 32bit and 64bit, rootfiles for 'aarch64'
and 'armv5tel' are still missing.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-29 10:30:46 +00:00
Michael Tremer
103950e0a5 More rootfile updates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-12 14:46:18 +00:00
Michael Tremer
a82e1eabc9 Update rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-11 14:57:21 +00:00
Michael Tremer
198443e60c suricata: Disable build on riscv64 for lack of Rust
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-06 11:14:51 +00:00
Michael Tremer
ee7f87807b python3: I didn't realise that i586 had a separate rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-04 10:49:18 +00:00
Michael Tremer
69b3d63b82 e2fsprogs: Disable libraries provided by util-linux
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-02 17:40:34 +00:00
Michael Tremer
d7005ce842 rust: Remove LLVM tools
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-25 13:55:16 +00:00
Matthias Fischer
a471762fb0 rust: Update to 1.50
For details see:
https://github.com/rust-lang/rust/blob/master/RELEASES.md

Unfortunately I can only build with 32bit and 64bit, this is why I
couldn't upload the rootfiles for 'aarch64' and 'armv5tel'.

Tested here with 'suricata 5.0.5' - running without seen problems.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-24 17:27:36 +00:00
Michael Tremer
44558ee19c openssl: Drop SSE2-optimized version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-16 17:55:29 +00:00
Michael Tremer
a810c2ae8f gmp: Drop SSE2-optimized version on i586
The next version of glibc has removed support for this and this patch
removes it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-16 17:43:12 +00:00
Michael Tremer
cf6c8e67fb glibc: Disable libcrypt and ship libxcrypt instead
libcrypt is deprecated in glibc, and is now explicitely disabled.

Instead we ship libxcrypt which is an alternative implemenation and can be used as a drop-in replacement.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 18:43:05 +00:00
Michael Tremer
710b6ef1e8 Update the kernel's rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 11:13:24 +00:00
Peter Müller
b815ec45d5 hyperscan: update to 5.4.0
Please refer to https://github.com/intel/hyperscan/releases/tag/v5.4.0
for the (rather length) release announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:36 +00:00
Arne Fitzenreiter
a11783096e intel-microcode: update to 20201118
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-12-02 23:42:29 +01:00
Arne Fitzenreiter
1c217406f2 intel-microcode: update to 20201110
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:50:14 +00:00