webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-12 12:15:52 +02:00
Code Issues Packages Projects Releases Wiki Activity
18,363 Commits 2 Branches 1 Tag
3110d7a98fa4e41edb8eec3c052d8bcc728e677e
Commit Graph

3348 Commits

Author SHA1 Message Date
Peter Müller
4eb92c5ab1 Core Update 166: Delete leftovers from LFS rootfile updates 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-24 19:05:35 +00:00
Peter Müller
729b27da0d Core Update 166: Ship zlib 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-24 18:59:48 +00:00
Peter Müller
e68cfdb140 Core Update 166: Ship bind 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-23 09:42:57 +00:00
Peter Müller
b889a5004a Core Update 166: Ship rrdtool 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-23 09:42:17 +00:00
Peter Müller
b5abd5ccd3 Core Update 166: There is no need for /dev/null in that GPG call 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-22 17:35:11 +00:00
Peter Müller
90f03efea5 Core Update 166: Introduce new 2022 Pakfire key 
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-22 17:34:30 +00:00
Peter Müller
fa0a7c038c Core Update 166: Perform spring clean of orphaned files 
On an IPFire installation that has been around since Core Update 110
(released April 28, 2017), these files have been identified as being
orphaned, comparing to a fresh installation of Core Update 164.

To avoid such a list of files agglomerating, persons responsible for a
Core Update should check whether an updated package contains deleted
files in its rootfile. If so, they should be deleted on existing systems
via update.sh as well.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-22 17:33:51 +00:00
Peter Müller
5a33fd9bc6 Nano: Braindead me overlooked the rootfiles were misplaced 
This was introduced in b1c25d7a84, and
subsequently broke the nightly builds, and I failed to spot this in the
first place. :-/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-22 07:51:17 +00:00
Peter Müller
7751dcccdd Core Update 166: Ship misc-progs 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-21 21:38:37 +00:00
Peter Müller
f1269489e8 Core Update 166: Drop Pakfire metadata for Nano, which is now part of the core system 
Cc: Michael Tremer <michael.tremer@ipfire.org>
Cc: Jon Murphy <jon.murphy@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-21 19:10:06 +00:00
Peter Müller
451cf01677 Core Update 166: Ship and restart strongSwan 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-21 19:04:11 +00:00
Jon Murphy
b1c25d7a84 Nano: Move nano editor from packages to core system 
- this will not change the default editor `vim`

Signed-off-by: Jon Murphy <jon.murphy@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-21 19:01:43 +00:00
Peter Müller
219a998412 Core Update 166: Drop old 2007 Pakfire key, and remove it from existing installations 
It is not necessary to have this key present on IPFire systems anymore,
since it has not been in use for years, and we can expect systems to be
sufficiently up-to-date, so they no longer need to rely on old updates
or add-ons signed with this key.

Also, given the current key was generated in 2018, we should consider a
Pakfire key rollover soon.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-21 11:46:36 +00:00
Michael Tremer
5e5ee28234 core166: Ship /etc/inittab.d 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-21 08:51:51 +00:00
Michael Tremer
bfde1c5af3 core166: Drop openvpn-ccd-convert script from all installations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-21 08:50:56 +00:00
Michael Tremer
0ad14f4d83 core166: Ship psmisc 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-20 15:21:25 +00:00
Michael Tremer
16fa9ed5e5 core166: Ship connections.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-20 15:20:13 +00:00
Michael Tremer
da4ff2f6a9 core166: Ship apache2 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-17 16:45:00 +00:00
Michael Tremer
e49e25ba69 core166: Ship openssl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-15 17:51:59 +00:00
Michael Tremer
b28f36faa5 core166: Rebuild IPS rules 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-14 15:54:04 +00:00
Michael Tremer
f5c9297fd7 core166: Ship changes files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-14 15:25:12 +00:00
Michael Tremer
b45c52760b core166: Ship dracut 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-14 15:24:19 +00:00
Michael Tremer
1b22a95ca8 core166: Ship u-boot for aarch64 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:46:13 +00:00
Michael Tremer
aee009fe23 core166: Ship wget 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:44:50 +00:00
Michael Tremer
d435669f81 core166: Ship perl-CGI 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:42:51 +00:00
Michael Tremer
817d34ecc8 core166: Ship pango 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:42:26 +00:00
Michael Tremer
6a95e9841b core166: Ship NTFS-3G 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:41:09 +00:00
Michael Tremer
13329f16f1 core166: Ship libdnet 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:40:24 +00:00
Michael Tremer
1a32c93bcf core166: Ship harfbuzz 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:39:16 +00:00
Michael Tremer
a6faddb31d core166: Ship wireless-regdb 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:38:39 +00:00
Michael Tremer
b22cec64d9 core166: Ship SQLite 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:38:04 +00:00
Michael Tremer
6410997d2a core166: Ship OpenSSH 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:37:23 +00:00
Michael Tremer
64a2131815 Start Core Update 166 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:34:48 +00:00
Michael Tremer
7f8bb55a60 core165: Ship hyperscan 
This package is being built with a different configuration.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-08 10:42:00 +00:00
Peter Müller
6fe4eb6094 Core Update 165: Rename squid-accounting add-on to proxy-accounting 
https://lists.ipfire.org/pipermail/development/2022-February/012482.html

The second version of this patch omits bogus directives for restarting a
service, which proxy-accounting is not.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Cc: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-07 18:47:23 +00:00
Michael Tremer
ea04468d07 core165: Ship ids.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-07 18:46:34 +00:00
Michael Tremer
7b82d83d7e core165: Ship optionsfw.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-07 18:45:58 +00:00
Peter Müller
ade2424f6b Revert "Core Update 165: Ship update-ids-ruleset" 
update-ids-rulesets is relevant for Core Update 164, not Core Update 165.

This reverts commit 9713023546.
 2022-03-05 14:35:09 +00:00
Peter Müller
9713023546 Core Update 165: Ship update-ids-ruleset 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-05 14:30:10 +00:00
Peter Müller
82674728e3 Core Update 165: Ship vpnmain.cgi 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-23 15:54:13 +00:00
Peter Müller
2598706f23 Core Update 165: Ship dhcpcd-related changes 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-23 15:51:33 +00:00
Arne Fitzenreiter
72718c896c Merge branch 'master' into next 2022-02-22 11:40:44 +00:00
Arne Fitzenreiter
ad9d6bf585 core164: exclude boot/uEnv.txt 
uEnv.txt was destroyed on aarch64 because here a new u-boot was shipped.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2022-02-22 11:38:15 +00:00
Peter Müller
f1180ec2dc Core Update 165: Ship oci-setup initscript 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-21 21:36:18 +00:00
Peter Müller
bef6a4dccf Core Update 165: Ship wirelessclient.cgi 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-21 20:56:38 +00:00
Arne Fitzenreiter
3b45d9561b core164: add unbound initskript 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2022-02-19 15:53:54 +00:00
Peter Müller
926d840fae firewall: Make logging of conntrack INVALIDs configureable 
In theory, logging of dropped packets classified by conntrack as being
INVALID should never be disabled, since one wants to have a paper trail
of what his/her firewall is doing.

However, conntrack seems to drop a lot of (at the first glance
legitimate) packets, hence bloating the logs, making spotting the
important firewall hits more difficult.

This patch therefore adds the option to disable logging of packets being
dropped by conntrack due to INVALID state.

Please note:
- This patch does not add this category to the firewall hits graph.
- The variables in this patch ("LOGDROPCTINVALID") should make it clear
  that it is about toggling _logging_, not the actual _dropping_. Other
  variables are still in need of being renamed to clarify this, which
  will be done in a dedicated patch.
- Also, the changes made to update.sh need to take place in
  config/rootfiles/core/164/update.sh for "master", since this patch has
  been developed against "next". Kindly cherry-pick the necessary
  changes.

Partially fixes: #12778

Reported-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-19 15:37:16 +00:00
Peter Müller
cf21dcaa97 Drop ovpn-collectd-convert 
This script is orphaned: It was only used while upgrading to Core Update
89, sitting around in /usr/sbin/ doing nothing ever since.

Keeping it there won't do any harm. On the other hand, dragging an
unused script around on our installations does not make sense either.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-19 00:01:47 +00:00
Peter Müller
772d3dbd60 Core Update 165: Ship wpa_supplicant 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-18 21:57:28 +00:00
Stefan Schantl
1bd6e152c4 Core 165: Export location DB in new format. 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-02-18 09:28:44 +00:00