Stefan Schantl
8117fff863
IDS: Call helper script when red interface gets up
...
The helper script will be automatically called when the red interface gets up
and will re-generate the HOME_NET file, to take care if the IP-address of this
interface has changed.
Fixes #11989
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-06 15:40:19 +01:00
Stefan Schantl
c1a3401235
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata
2019-01-21 13:04:13 +01:00
Arne Fitzenreiter
f622fd8ed0
linux-initrd: fix build of uInit on aarch64
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-01-12 20:01:00 +01:00
Michael Tremer
7d5caee6bd
Add initscript for conntrackd
...
The daemon will be started by default when a configuration
file exists.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-01-06 08:59:25 +00:00
Arne Fitzenreiter
5e6f343b7d
python: update to 2.7.15
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-01-06 15:51:53 +01:00
Stefan Schantl
ed809cf07a
Ship update-ids-ruleset script also on x86_64 and aarch64
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2018-12-28 07:36:19 +01:00
Stefan Schantl
a13ddf04d9
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2018-12-12 09:27:59 +01:00
Michael Tremer
f354601bbe
initscripts: Import pakfire keys before importing AWS configuration
...
This is useful when the user-data script is installing
packages. For that it will need valid keys for course.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-12-07 11:38:55 +00:00
Arne Fitzenreiter
16c18024bb
kernel: compress kernel modules with xz
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-11-18 14:30:14 +01:00
Michael Tremer
f4027e9b41
Remove removed files from rootfiles
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-10-29 10:47:10 +00:00
Michael Tremer
9af7531136
glibc: Update to 2.28
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-10-24 11:16:38 +01:00
Stefan Schantl
2d475a3c6c
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata
2018-09-26 14:49:34 +02:00
Arne Fitzenreiter
a834285d1b
kernel: arm: enable chacha poly
...
fixes : #11855
todo: add rootfiles for arm 32-bit
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-09-15 15:58:13 +02:00
Stefan Schantl
cb52183c6a
Fix merge conflicts during merge of next and the suricata branch
2018-08-23 10:34:17 +02:00
Michael Tremer
84cd9b9162
Drop the network-trigger script
...
This is done at boot time and doesn't normally need to be done again.
On AWS or in the setup, renaming any network interfaces is being
handled automatically.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-08-22 14:05:43 +01:00
Stefan Schantl
843a8c570c
snort: Drop package
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2018-08-03 10:19:35 +02:00
Stefan Schantl
914cca3d8e
initscripts: Link against suricata initscript in runlevels and red.up hook
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2018-08-03 10:02:34 +02:00
Michael Tremer
befc040497
Move update-bootloader script into installer
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-07-20 12:03:09 +00:00
Arne Fitzenreiter
f8f4ef0795
Merge branch 'next' into efi
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
Conflicts:
config/kernel/kernel.config.aarch64-ipfire
2018-07-20 12:24:31 +01:00
Arne Fitzenreiter
413149f80d
kernel: aarch64: enable virtio drivers
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-07-19 13:26:06 +01:00
Michael Tremer
701c891b40
Build efibootmgr and efivars only for x86_64 and aarch64
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-07-14 13:43:53 +01:00
Michael Tremer
b62f71f7f2
Build GRUB on aarch64
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-07-14 13:43:52 +01:00
Michael Tremer
0927eadc52
Rootfile update for aarch64 kernel
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-07-14 13:43:13 +01:00
Arne Fitzenreiter
1ac0d5c598
Merge branch 'aarch64' into next
...
Conflicts:
config/rootfiles/core/121/filelists/acpid
config/rootfiles/core/121/filelists/apache2
config/rootfiles/core/121/filelists/apr
config/rootfiles/core/121/filelists/aprutil
config/rootfiles/core/121/filelists/armv5tel/files
config/rootfiles/core/121/filelists/armv5tel/linux-initrd-kirkwood
config/rootfiles/core/121/filelists/armv5tel/linux-initrd-multi
config/rootfiles/core/121/filelists/armv5tel/linux-kirkwood
config/rootfiles/core/121/filelists/armv5tel/linux-multi
config/rootfiles/core/121/filelists/armv5tel/rpi-firmware
config/rootfiles/core/121/filelists/armv5tel/u-boot
config/rootfiles/core/121/filelists/armv5tel/u-boot-kirkwood
config/rootfiles/core/121/filelists/armv5tel/u-boot-mkimage
config/rootfiles/core/121/filelists/beep
config/rootfiles/core/121/filelists/cmake
config/rootfiles/core/121/filelists/crda
config/rootfiles/core/121/filelists/dhcp
config/rootfiles/core/121/filelists/flex
config/rootfiles/core/121/filelists/i586/grub
config/rootfiles/core/121/filelists/i586/intel-microcode
config/rootfiles/core/121/filelists/i586/linux
config/rootfiles/core/121/filelists/i586/linux-initrd
config/rootfiles/core/121/filelists/iw
config/rootfiles/core/121/filelists/jwhois
config/rootfiles/core/121/filelists/libidn
config/rootfiles/core/121/filelists/multipath-tools
config/rootfiles/core/121/filelists/pcre
config/rootfiles/core/121/filelists/tar
config/rootfiles/core/121/filelists/unbound
config/rootfiles/core/121/filelists/wget
config/rootfiles/core/121/filelists/x86_64/grub
config/rootfiles/core/121/filelists/x86_64/intel-microcode
config/rootfiles/core/121/filelists/x86_64/linux
config/rootfiles/core/121/filelists/x86_64/linux-initrd
config/rootfiles/core/122/filelists/aarch64/files
config/rootfiles/core/122/filelists/acpid
config/rootfiles/core/122/filelists/apache2
config/rootfiles/core/122/filelists/apr
config/rootfiles/core/122/filelists/aprutil
config/rootfiles/core/122/filelists/armv5tel/linux-initrd-kirkwood
config/rootfiles/core/122/filelists/armv5tel/linux-initrd-multi
config/rootfiles/core/122/filelists/armv5tel/linux-kirkwood
config/rootfiles/core/122/filelists/armv5tel/linux-multi
config/rootfiles/core/122/filelists/armv5tel/rpi-firmware
config/rootfiles/core/122/filelists/armv5tel/u-boot
config/rootfiles/core/122/filelists/armv5tel/u-boot-kirkwood
config/rootfiles/core/122/filelists/armv5tel/u-boot-mkimage
config/rootfiles/core/122/filelists/beep
config/rootfiles/core/122/filelists/cmake
config/rootfiles/core/122/filelists/crda
config/rootfiles/core/122/filelists/dhcp
config/rootfiles/core/122/filelists/flex
config/rootfiles/core/122/filelists/i586/grub
config/rootfiles/core/122/filelists/i586/intel-microcode
config/rootfiles/core/122/filelists/i586/linux
config/rootfiles/core/122/filelists/i586/linux-initrd
config/rootfiles/core/122/filelists/iw
config/rootfiles/core/122/filelists/jwhois
config/rootfiles/core/122/filelists/libidn
config/rootfiles/core/122/filelists/multipath-tools
config/rootfiles/core/122/filelists/pcre
config/rootfiles/core/122/filelists/tar
config/rootfiles/core/122/filelists/unbound
config/rootfiles/core/122/filelists/wget
config/rootfiles/core/122/filelists/x86_64/grub
config/rootfiles/core/122/filelists/x86_64/intel-microcode
config/rootfiles/core/122/filelists/x86_64/linux
config/rootfiles/core/122/filelists/x86_64/linux-initrd
config/rootfiles/core/123/filelists/unbound
config/rootfiles/oldcore/121/filelists/acpid
config/rootfiles/oldcore/121/filelists/apache2
config/rootfiles/oldcore/121/filelists/apr
config/rootfiles/oldcore/121/filelists/aprutil
config/rootfiles/oldcore/121/filelists/armv5tel/files
config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-kirkwood
config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-multi
config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-rpi
config/rootfiles/oldcore/121/filelists/armv5tel/linux-kirkwood
config/rootfiles/oldcore/121/filelists/armv5tel/linux-multi
config/rootfiles/oldcore/121/filelists/armv5tel/linux-rpi
config/rootfiles/oldcore/121/filelists/armv5tel/rpi-firmware
config/rootfiles/oldcore/121/filelists/armv5tel/u-boot
config/rootfiles/oldcore/121/filelists/armv5tel/u-boot-kirkwood
config/rootfiles/oldcore/121/filelists/armv5tel/u-boot-mkimage
config/rootfiles/oldcore/121/filelists/beep
config/rootfiles/oldcore/121/filelists/cmake
config/rootfiles/oldcore/121/filelists/crda
config/rootfiles/oldcore/121/filelists/dhcp
config/rootfiles/oldcore/121/filelists/flex
config/rootfiles/oldcore/121/filelists/i586/grub
config/rootfiles/oldcore/121/filelists/i586/intel-microcode
config/rootfiles/oldcore/121/filelists/i586/linux
config/rootfiles/oldcore/121/filelists/i586/linux-initrd
config/rootfiles/oldcore/121/filelists/iw
config/rootfiles/oldcore/121/filelists/jwhois
config/rootfiles/oldcore/121/filelists/libidn
config/rootfiles/oldcore/121/filelists/multipath-tools
config/rootfiles/oldcore/121/filelists/pcre
config/rootfiles/oldcore/121/filelists/tar
config/rootfiles/oldcore/121/filelists/wget
config/rootfiles/oldcore/121/filelists/x86_64/grub
config/rootfiles/oldcore/121/filelists/x86_64/intel-microcode
config/rootfiles/oldcore/121/filelists/x86_64/linux
config/rootfiles/oldcore/121/filelists/x86_64/linux-initrd
make.sh
2018-07-03 11:52:05 +01:00
Arne Fitzenreiter
cf7a7a874f
Merge remote-tracking branch 'origin/master' into aarch64
2018-07-02 19:07:22 +01:00
Arne Fitzenreiter
4838034131
random: update initskript for machines with low entropy
...
the script wait until crng is correct initialized before restore the
random seed and make some disc io to work around low entropy at boot
on some machines. Not really a fix but it should be better than reverting
CVE-2018-1108 fixes from kernel.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-06-28 20:48:58 +02:00
Michael Tremer
bd3bcb45d6
AWS: Import aws setup script
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-06-25 10:55:39 +01:00
Michael Tremer
1c21ebf8d5
Add initscript that automatically configures IPFire on AWS EC2
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-06-21 16:45:40 +01:00
Arne Fitzenreiter
5b17da41c1
kernel: add config for aarch64
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-06-21 06:20:35 +01:00
Arne Fitzenreiter
2bd9316d9d
rpi-firmware: build for aarch64
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-06-21 06:17:49 +01:00
Arne Fitzenreiter
963f6e973a
u-boot: add config for aarch64
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-06-21 06:12:59 +01:00
Michael Tremer
d7ce23e5de
aarch64: Fix rootfile for Python
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-06-04 12:15:26 +01:00
Michael Tremer
e91d99c8eb
Import rootfiles for aarch64
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-05-31 12:10:23 +01:00