Commit Graph

21673 Commits

Author SHA1 Message Date
Arne Fitzenreiter
340f11ccbc kernel: update to 6.6.25
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-05 22:27:55 +02:00
Arne Fitzenreiter
2fc167d93b kernel: update to 6.6.24
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-04 23:33:01 +02:00
Arne Fitzenreiter
05c31f4f14 core186: add collectd to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-04 18:26:55 +02:00
Arne Fitzenreiter
7fdafdfbce collectd: fix cpufreq graph if virtual cores are offline
the kernel doesn't allow to read the frequency of a offline virtual core
if smt is disabled so now no error is reported in this case and NaN submited to the
database.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-04 18:23:29 +02:00
Arne Fitzenreiter
62db0b5320 core186: add grub-btrfs initskript changes to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-02 19:36:46 +00:00
Stefan Schantl
b25236acf7 grub-btrfsd: Drop redundant used PIDFILE mechanism
This case is already covered by the PID mechanism of the used functions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-02 19:25:47 +00:00
Stefan Schantl
e348f67fa6 grub-btrfsd: Adjust displayed starting message
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-02 19:25:35 +00:00
Stefan Schantl
6da6f5dbe2 grub-btrfsd: Use generic volume_fs_type function for FS detection
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-02 19:25:15 +00:00
Stefan Schantl
ed91103e22 initscripts: Add generic function to get the filesystem type of a volume
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-02 19:25:00 +00:00
Arne Fitzenreiter
5f04e70f74 grub-btrfs: fix grub-btrfs build and remove bugtracker url
grub-btrfs try to reconfigure grub in the buildsystem and print always the bugtracker url on every error even when its not a bug

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-31 16:30:50 +02:00
Arne Fitzenreiter
2d4f4ebfa2 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-31 13:36:08 +02:00
Arne Fitzenreiter
bb46f3bef8 core185: excplicit erase liblzma.so.5.6.*
because if this file exist the cleanap script will remove the older version after downgrade
and the system still use the malewared version.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-31 13:27:46 +02:00
Arne Fitzenreiter
ce30d74893 kernel: update to 6.6.23
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-31 10:49:46 +02:00
Michael Tremer
ee08f7aea1 frr: Bump release version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:14:51 +00:00
Michael Tremer
56d32cbe91 frr: Update reloading all services
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:14:37 +00:00
Michael Tremer
7c6b05dfb8 frr: Start the management daemon, too
This daemon is running the configuration validation and required to run
at all times.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:14:37 +00:00
Michael Tremer
0972da95bf protobuf-c: Ship libraries
FRR links against this and fails to start without.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:14:37 +00:00
Michael Tremer
bd49143228 make.sh: Update contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:13:08 +00:00
Rico Hoppe
417182c49b README.md: fix minor typo
Signed-off-by: Rico Hoppe <rico.hoppe@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:12:42 +00:00
Rico Hoppe
64d6bbe5a3 README.md: update text & adjust links to new URLs
- links for: about, documentation, help
- wording: wiki to documentation

Signed-off-by: Rico Hoppe <rico.hoppe@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:12:42 +00:00
Michael Tremer
21f467d65a core185: Ship new perl modules for libarchive
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:11:42 +00:00
Stefan Schantl
ee16b227a5 ids-functions.pl: Use libarchive to extract archives
This gives us a lot of benefits:

* Speed up the extraction process
* More supported archive types due the power of libarchive
* Support of passphrase protected archives

It also fixes a problem with non extracted files next to a zero sized
file inside an archive.

Fixes #13632.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:09:14 +00:00
Stefan Schantl
2ef62acc01 perl-Archive-Peek-Libarchive: New package
As very simple XS based perl binding for libarchive
to get header data and extract files.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:09:14 +00:00
Stefan Schantl
d33b29e2b1 perl-Object-Tiny: New package
This is a runtime dependency of perl-Archive-Peek-Libarchive

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:09:14 +00:00
Stefan Schantl
c854076155 perl-Config-AutoConf: New package
This is only a build dependency for perl-Arhive-Peek-Libarchive and
will not be installed on a system

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:09:14 +00:00
Stefan Schantl
cf94463c4c perl-Capture-Tiny: New package
This is only a build dependency for perl-Config-AutoConf and
will not be installed on a system

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:09:14 +00:00
Michael Tremer
c283a6f615 core185: Ship everything that is linked against XZ
This is a precautionary step to avoid that we have any issues to face
because of a downgrade as new symbols have been added to liblzma 5.6.0.

Furthermore, this should avoid shipping any traces of any other
potential malware in XZ that has been added in 5.6.0 or after.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:08:39 +00:00
Michael Tremer
16901fee6a xz: Remove excess whitespace
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 11:58:24 +00:00
Adolf Belka
1b8437340b xz: Revert back to version 5.4.5 due to backdoor issue
- xz version 5.6.0 and 5.6.1 discovered to have been backdoored by what looks to have
   been one of the xz devs.
- IPFire looks not to be affected by the problem as we don't patch openssh to be linked
   with liblzma
- However due to question marks about what else might be in these 5.6.x versions it is
   better to revert back to a version that did not have the build-to-host.m4 file with the
   code that modifies the build if it meets certain criteria.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 11:52:42 +00:00
Arne Fitzenreiter
0a201087fc Merge remote-tracking branch 'origin/master' into next 2024-03-27 18:27:30 +01:00
Arne Fitzenreiter
0239c266d5 grub-btrfs: remove boot/grub/grubenv
this file should created by grub-install at installation.
Also it is not present on aarch64 builds of grub.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-27 02:59:07 +01:00
Michael Tremer
9dd2a4635f IPS: Fix how we show EOL providers
There is no need to add a legend as I find it confusing. The change that
people are using an EOL is rather slim and so I don't to waste space.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-26 15:23:08 +00:00
Michael Tremer
c2df627c8c core185: Fix update.sh syntax issues
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-26 14:43:39 +00:00
Adolf Belka
3d947e6e6b CU185-update.sh: Add drop hostile in & out logging entries if not already present
- This v2 patch corrects that the previous script was looking for =on. If a user had
   modified the preferences to change it to =off then the script would have resulted in
   both =on and =off versions being in the settings file.
- This patch ensures that those people who updated to CU184 before the CU184-update.sh
   patch fix to add the logging entries was added will get their optionsfw settings file
   correctly updated with CU185
- This only adds the LOGDROPHOSTILEIN & LOGDROPHOSTILEOUT entries if they do not already
   exist in the optionsfw settings file.
- This change also does the check for LOGDROPHOSTILEIN and LOGDROPHOSTILEOUT as two
   separate checks and then runs the firewall update command

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-26 10:55:32 +00:00
Arne Fitzenreiter
e22ff3c71b core186: add brtfs related changes to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:40:56 +00:00
Stefan Schantl
a6d5b71f2c grub-btrfs: New package
This kind of grub addon will extend the grub boot menu by a additional
submenu where a BTRFS snapshot can be selected to directly use as root
volume and boot into it.

The grub-btrfsd daemon is using inotify(tools) to watch the snapshot directory for
new or deleted snapshots and calls grub-mkconfig to adjust the snapshot grub submenu

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:36:17 +00:00
Stefan Schantl
32d81fdc2e inotify-tools: New package
This package is required for the grub-btrfs daemon

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:36:02 +00:00
Stefan Schantl
ad73749dab installer: Pass choosen filesystem to hw_make_destination
This is required to proper choose if a seperate boot partition should be
created or must not created (BTRFS)

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:35:43 +00:00
Stefan Schantl
15be1e1b9f installer: Add code to correctly write the fstab when installing on BTRFS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:35:15 +00:00
Stefan Schantl
2a98139628 installer: Add code to proper unmount the BTRFS layout
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:35:03 +00:00
Stefan Schantl
a9963bf035 installer: Define common mount options for BTRFS volumes
As default we are using zstd for compression with level 1

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:49 +00:00
Stefan Schantl
e7740eaf94 installer: Mount BTRFS layout before installing the system
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:37 +00:00
Stefan Schantl
8e3b022a83 installer: Allow writing to the debug console from anywhere
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:27 +00:00
Stefan Schantl
e0a7cdd86f installer: Add recurisve mkdir function
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:16 +00:00
Stefan Schantl
0465449e42 installer: Add code to create a BTRFS subvolume layout
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:07 +00:00
Stefan Schantl
58a46f0bc2 installer: Disable own boot partition when using BTRFS
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:58 +00:00
Stefan Schantl
fbeac0960a installer: Ensure to always create the /boot directory.
Ensure to always create the /boot directory during the mounting
of the various created file systems. If the /boot directory does not
exist some following mount operations could not be performed correctly
and the installation/mounting will fail.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:49 +00:00
Stefan Schantl
4305e02d79 dracut: Ship BTRFS related modules
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:40 +00:00
Stefan Schantl
130815d3f1 installer: Allow to install IPFire on BTRFS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:30 +00:00
Stefan Schantl
09bb459edb btrfs-progs: New package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:12 +00:00