Commit Graph

3702 Commits

Author SHA1 Message Date
Erik Kapfer
c1b2c0cc6d xinetd: Delete symlinks with uninstallation .
Fixes #12303

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 16:00:48 +00:00
Michael Tremer
50a04f785d cairo: Update to 1.16.0
This updates the package and adds a patch so that it compiles
with binutils 2.34.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-21 15:44:08 +00:00
Arne Fitzenreiter
70af65df41 kernel: update to 4.14.173
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-11 22:59:38 +01:00
Arne Fitzenreiter
57fda8c8ad suricata: use KILL is suricata not shut down normal.
sometimes suricata hung and lock the pidfile at
suricata stop.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-09 06:41:32 +00:00
Michael Tremer
0f0f3ae7dc unbound: Only launch one process
When unbound is running multiple threads, we have observed
that queries where sent for each thread.

Since no user should have so much DNS traffic that more than
one processor core is being saturated, this is a safe change.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-04 21:47:23 +00:00
Arne Fitzenreiter
a344d3c902 unbound/red.up: run unbound update-forwarders after suricata init.
The old suricata instance blocks dns requests if the red ip has changed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-04 08:52:56 +01:00
Arne Fitzenreiter
3b5131c1a3 unbound: drop remove-dns-fowarders at red.down
this functions has only reloaded unbound config
which is useless at shutting down the red interface.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-02 17:54:48 +00:00
Arne Fitzenreiter
770a1507dd unbound: speed-up remove forwarders
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-01 19:46:36 +00:00
Arne Fitzenreiter
47864e8f3d unbound: fix typo at safesearch for googe
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-01 19:46:31 +00:00
Arne Fitzenreiter
d98bbcc849 unbound: run "time-fix" before savesearch resolves
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-01 19:46:26 +00:00
Arne Fitzenreiter
605575033c unbound: update savesearch after reload configfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-01 19:46:24 +00:00
Arne Fitzenreiter
712425ff0b pakfire: Re-install previous core update when in testing mode
Fixes: #12302
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Tested-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-24 19:21:01 +00:00
Stefan Schantl
5cbcd514de ppp: Add upstream patch to fix bounds check in EAP code.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-22 15:37:06 +00:00
Arne Fitzenreiter
8569b3e11b red.up: move update-dns-forwareders behind the firewall
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-19 14:51:48 +00:00
Stefan Schantl
8f60b4ff30 ppp: Update to 2.4.8
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-18 17:10:50 +00:00
Arne Fitzenreiter
d875a2b157 paks: remove scripts for elinks and phpSANE
phpSANE is dropped long ago and elinks in core now.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-17 21:38:42 +00:00
Arne Fitzenreiter
4105d223d7 paks: add/move extract_backup_includes to pak update scripts
this function allow to update the backup filelist before the backup was done in uninstall.sh at packet updates.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-17 21:34:14 +00:00
Michael Tremer
aef3c56c65 cyrus-imapd: Drop package
This package is outdated and unmaintained for many many years.
I am not sure if this even works and if there are any users.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-16 16:04:46 +00:00
Michael Tremer
88cb5eb187 cloud-init: Disable using ISP nameservers
This is mostly aesthetic because there are no ISP nameservers
anyways that we could use here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-16 16:01:10 +00:00
Michael Tremer
a8df6e7807 aws-setup: Remove some excessive whitespace
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-16 16:00:43 +00:00
Stefan Schantl
56f4f279a5 guardian: Add upstream patch for HTTP parser.
Fixes #12289.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-16 15:56:35 +00:00
Stefan Schantl
08cf4d2154 ddns: Import latest upstream patches for ddns-013
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-16 15:53:21 +00:00
Stefan Schantl
f16ddb5fc7 ddns: Update to 013
This is an update to the first python3-based release of ddns.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-16 15:53:06 +00:00
Arne Fitzenreiter
eb7066388b vdr: update to 2.4.1
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-16 11:48:22 +01:00
Arne Fitzenreiter
ff58943d8e kernel: cleanup unused kirkwood patches
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 17:06:24 +00:00
Michael Tremer
28db34f247 Drop rtpproxy
This probably has only been used by me and we do not need
it any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:56:26 +00:00
Michael Tremer
65b08a04da Drop ez-ipupdate
We do not use this at all any more, because it has been replaced
by ddns.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:55:39 +00:00
Michael Tremer
7a68b87789 Drop DirectFB
This package is not very useful on its own and nobody
seems to pull this as dependency any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:55:24 +00:00
Michael Tremer
962b7f817e Drop check_mk_agent
This add-on is unmaintained in IPFire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:55:11 +00:00
Michael Tremer
d4b31f13d5 Drop multicat & bitstream
This reverts commit 0a21ce42e1.

These packages have never been updated and nodody in the team
is willing to support them.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 16:55:00 +00:00
Michael Tremer
152378c674 pakfire: Add version suffix when in a certain tree
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:09:02 +00:00
Michael Tremer
e6f4991be2 pakfire: Automatically compose $version
The tree in which pakfire is looking for packages and Core Updates
has been hardcoded into /opt/pakfire/etc/pakfire.conf.

This patch adds a new function which reads the system release
from /etc/system-release.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:07:55 +00:00
Stefan Schantl
1a65ea1b72 Suricata: Update to 5.0.1
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 13:28:02 +00:00
Arne Fitzenreiter
f23b046318 unbound: try resolve twice before time sync with ipfire server
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-03 17:40:55 +00:00
Arne Fitzenreiter
f5fe5f47a1 unbound: add returncode to resolve function
this is used for time fix check.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-02 13:40:32 +00:00
Michael Tremer
c3ae88cab9 PPP: Always fetch DNS servers from provider
We will later decide whether we want to use them or not

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-31 10:06:34 +00:00
Arne Fitzenreiter
c75fd8c8c5 convert-dns-settings: add ppp/settings to list of converted files
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-30 12:22:37 +00:00
Michael Tremer
8729316513 convert-dns-settings: Explicitely enable using ISP name servers
The unbound initscript checks if this parameter is on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-29 11:52:02 +01:00
Arne Fitzenreiter
15e3419434 convert-dns-settings: remove DNS settings also if no server config is generated
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 20:31:22 +00:00
Arne Fitzenreiter
3ee6ac9dad convert-dns-settings: Remove DNS variable from PPP profiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 19:38:16 +00:00
Arne Fitzenreiter
5d6ccc7a43 convert-dns-settings: Refactor reading old configuration
This patch makes the code a lot shorter by removing special
cases for all sorts of files when they can all be treaded
equally.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 19:34:56 +00:00
Arne Fitzenreiter
d3236de23a convert-dns-settings: Fix call for chmod
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 19:19:06 +00:00
Stefan Schantl
358bcfdb29 convert-dns-settings: Fix check to prevent doubble-adding the same server
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 15:38:36 +00:00
Arne Fitzenreiter
a83bcf914c networking/red: wait only for carrier if device exists
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-25 22:22:26 +01:00
Arne Fitzenreiter
8c0ab3d471 filesystem-cleanup: fix "fixed space" type
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-25 15:05:38 +00:00
Arne Fitzenreiter
45e1202d27 filesystem-cleanup: add /usr/lib/sse2 folder
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-24 19:18:15 +01:00
Stefan Schantl
ab4ef40f2b unbound: Use recursor mode if no nameservers are configured
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-21 19:32:34 +00:00
Michael Tremer
26eab1fe3e azure: Abort script when no instance ID can be retrieved
We cannot reliably determine if a system is running on Hyper-V
on a private server or on the Azure Cloud.

Therefore, we will have to try to retrieve an IP address
with DHCP and try to connect to the metadata service. If either
of those things is not successful, we will just continue with
the setup process as usual.

So cloud instances should be automatically configured now and
all other systems will continue to boot and call the setup
wizard as usual.

Fixes: #12272
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-21 19:32:07 +00:00
Michael Tremer
f770492902 cloud-init: Remove importing DNS settings
Those scripts used to import settings from the meta-data services
and wrote them to the local configuration files.

For the DNS settings and Amazon, this is no longer possible because
their DNS servers do not support DNSSEC at all. Therefore we default
to recursor mode.

To be consistent across cloud providers, we are doing the same for
Azure.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-19 16:37:03 +00:00
Michael Tremer
c07c3e47f1 modules: Cleanup file
This file has an unsed line for the "fusion" module which
is no longer needed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-19 16:36:59 +00:00