Commit Graph

6616 Commits

Author SHA1 Message Date
Erik Kapfer
351567966d nginx: Update to version 1.15.1
Deleted last slash in --prefix configure option to prevent such -->
https://forum.ipfire.org/viewtopic.php?t=19213#p109787 problems.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-05 11:10:28 +01:00
Matthias Fischer
b856ad695a rng-tools: Update to 6.3.1
Bugfix release, for details see:
https://github.com/nhorman/rng-tools/releases

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-05 11:10:28 +01:00
Stefan Schantl
06b569a442 oinkmaster: Install config file to /var/ipfire/suricata
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 13:48:46 +02:00
Stefan Schantl
d33874f496 daq: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:20:18 +02:00
Stefan Schantl
843a8c570c snort: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:19:35 +02:00
Stefan Schantl
914cca3d8e initscripts: Link against suricata initscript in runlevels and red.up hook
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:02:34 +02:00
Arne Fitzenreiter
b5a1294c98 linux-firmware: update to 30.7.2018
include new amd microcodes for Spectre updates

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-02 21:15:11 +02:00
Stefan Schantl
1d9b879140 ids-ruleset-sources: New package
Move the file which contains the download URL's for the IDS rulesets
into an own common package. This will allow us in future to easily ship
a changed file with a core update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 19:29:36 +02:00
Stefan Schantl
72b2109c72 configroot: Move from snort to suricata
Create /var/ipfire/suricata and /var/ipfire/suricata/settings instead of
/var/ipfire/snort and /var/ipfire/snort/settings.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 15:47:31 +02:00
Stefan Schantl
4c6d6c1ee3 suricata: Install very basic config file
This config file is mostly based on the example configuration shipped
by the suricata project and needs to be enhanched.

See #11808.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 09:10:25 +02:00
Stefan Schantl
a8b8c9e5b2 Merge branch 'next-new-ids.cgi' into next-suricata-and-cgi 2018-07-30 21:33:25 +02:00
Stefan Schantl
67752a9510 suricata: New package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-30 21:31:15 +02:00
Stefan Schantl
3498300d87 libhtp: New package
This is build and runtime dependency for suricata.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-29 09:45:05 +02:00
Stefan Schantl
91cc908f84 yaml: New package
This is a build and runtime dependency for suricata.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-29 09:44:52 +02:00
Matthias Fischer
51099ddfd7 squid: Update to 3.5.28
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-26 14:38:57 +01:00
Wolfgang Apolinarski
64add19dfe Apache: Update to 2.4.34
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-26 14:38:54 +01:00
Stefan Schantl
8dcebe5342 IDS: Introduce ids-functions.pl.
This library will contain a set of functions used by the IDS CGI script
and the planned update script for auto-updating the snort ruleset.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-26 11:54:25 +02:00
Stefan Schantl
c6bcdda1af snort: Introduce ruleset-sources.list
This file contains the ruleset vendors and download urls and
will be used by the ids.cgi.

If an url or filename changes, we easily can adjust this file. In most
cases this will be needed when performing a snort update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-26 11:50:11 +02:00
Michael Tremer
de7c8df83e cdrom: Move list of EFI modules to lfs/cdrom
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-25 10:54:35 +01:00
Michael Tremer
0efda7ac67 cdrom: Re-order arguments again
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-23 23:10:36 +01:00
Michael Tremer
5d657243cf cdrom: The order of arguments for mkisofs seems to be relevant
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-22 22:31:30 +01:00
Arne Fitzenreiter
5dd9140a44 grub: apply vga fallback disable patch again
on some systems (e.g. J1900 based) grub detects a too low resolution
and use it. This is no problem in grub itself but the kernel not render
the consoles in this mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-07-22 13:41:38 +02:00
Arne Fitzenreiter
9023689d73 flash-images: fix partition layout on i586
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-07-21 16:33:29 +02:00
Michael Tremer
04441d8a3c asterisk: Don't optimise for builder
Asterisk enables -march=native which renders the code
incompatible to most systems.

Fixes: #11793

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 14:22:59 +00:00
Michael Tremer
a570226765 Merge branch 'next' into efi 2018-07-20 12:47:20 +00:00
Michael Tremer
011204d963 fireinfo: Import latest patches
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 12:06:11 +00:00
Arne Fitzenreiter
46a4581db6 flash-image: use FAT for /boot partition on aarch64
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-07-20 12:24:49 +01:00
Arne Fitzenreiter
f8f4ef0795 Merge branch 'next' into efi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Conflicts:
	config/kernel/kernel.config.aarch64-ipfire
2018-07-20 12:24:31 +01:00
Arne Fitzenreiter
66a29eaa02 kernel: apply multi arch patchset for aarch64
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-07-19 09:28:27 +01:00
Michael Tremer
3deac294f5 cdrom: mkisofs seems to not like the order of the arguments
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-16 22:35:21 +01:00
Michael Tremer
a5c92f50bf flash-images: Only install grub for EFI on aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:54 +01:00
Michael Tremer
092bc105e4 cdrom: Run isohybrid only when we have syslinux
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:54 +01:00
Michael Tremer
a1eb776199 cdrom: Fix building GRUB image for aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:53 +01:00
Michael Tremer
4790db5f95 cdrom: Install ISOLINUX only on some architectures
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:53 +01:00
Michael Tremer
0ce1e4906e cdrom: Install iPXE only on x86
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:53 +01:00
Michael Tremer
b7407ccad5 cdrom: Install memtest only on x86
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:53 +01:00
Michael Tremer
701c891b40 Build efibootmgr and efivars only for x86_64 and aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:53 +01:00
Michael Tremer
7c80f8c5cc syslinux: Update to 6.04-pre1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:53 +01:00
Michael Tremer
f096a2ea98 flash-image+cdrom: Execute ARMv5-specific code on ARMv5
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:52 +01:00
Michael Tremer
b62f71f7f2 Build GRUB on aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:52 +01:00
Michael Tremer
4c2343931c parted: Update to 3.2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:52 +01:00
Michael Tremer
b89c7379f9 flash-images: Make EFI partition 32MB
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:52 +01:00
Michael Tremer
89e79c50c7 flash-images: Cleanup partitioning code
No functional changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:52 +01:00
Michael Tremer
8662e98173 flash-images: Mark the /boot partition as bootable
Before, the ESP was marked as bootable which isn't necessary

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:52 +01:00
Michael Tremer
7d456c3971 flash-image: Use grub-install to install GRUB in EFI mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:51 +01:00
Michael Tremer
2f329aab27 flash-image: Mark the EFI system partition as such
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:51 +01:00
Michael Tremer
dfb0084e35 flash-image: Remove any other GRUB configuration files in EFI mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:51 +01:00
Michael Tremer
24e811b03a grub: Don't install an empty EFI configuration file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:51 +01:00
Michael Tremer
fd80e500df Add efibootmgr and efivar
These packages are required to manage EFI boot options

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:51 +01:00
Michael Tremer
6b44fee76f cdrom: Keep the EFI image on the ISO9660 file system as well
This allows systems to boot the EFI bootloader from the CDROM
file system instead of using the FAT filesystem which is for USB keys.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:51 +01:00