Stefan Schantl
8117fff863
IDS: Call helper script when red interface gets up
...
The helper script will be automatically called when the red interface gets up
and will re-generate the HOME_NET file, to take care if the IP-address of this
interface has changed.
Fixes #11989
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-06 15:40:19 +01:00
Stefan Schantl
c1a3401235
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata
2019-01-21 13:04:13 +01:00
Michael Tremer
7d5caee6bd
Add initscript for conntrackd
...
The daemon will be started by default when a configuration
file exists.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-01-06 08:59:25 +00:00
Arne Fitzenreiter
5e6f343b7d
python: update to 2.7.15
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-01-06 15:51:53 +01:00
Stefan Schantl
a13ddf04d9
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2018-12-12 09:27:59 +01:00
Michael Tremer
f354601bbe
initscripts: Import pakfire keys before importing AWS configuration
...
This is useful when the user-data script is installing
packages. For that it will need valid keys for course.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-12-07 11:38:55 +00:00
Arne Fitzenreiter
67640833a2
kernel: arm32 bit fix config and update rootfile
...
Some drivers was disabled by oldconfig because i had
arm multiarch patchsed. This commit reenable it.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-11-18 20:24:43 +01:00
Arne Fitzenreiter
16c18024bb
kernel: compress kernel modules with xz
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-11-18 14:30:14 +01:00
Arne Fitzenreiter
966b92a83b
glibc: rootfile update armv5tel
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-11-03 12:09:47 +01:00
Stefan Schantl
2d475a3c6c
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata
2018-09-26 14:49:34 +02:00
Arne Fitzenreiter
06131f41e4
kernel: arm32-bit: update rootfiles
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-09-17 07:44:55 +02:00
Stefan Schantl
cb52183c6a
Fix merge conflicts during merge of next and the suricata branch
2018-08-23 10:34:17 +02:00
Michael Tremer
84cd9b9162
Drop the network-trigger script
...
This is done at boot time and doesn't normally need to be done again.
On AWS or in the setup, renaming any network interfaces is being
handled automatically.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-08-22 14:05:43 +01:00
Stefan Schantl
843a8c570c
snort: Drop package
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2018-08-03 10:19:35 +02:00
Stefan Schantl
914cca3d8e
initscripts: Link against suricata initscript in runlevels and red.up hook
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2018-08-03 10:02:34 +02:00
Stefan Schantl
d72b3e64c2
suricata: Introduce basic initscript
...
Add a very basic initscript, which currently allows to start/stop/restart suricata and
check if the daemon is running.
The script will detect when starting suricata how many CPU cores are present on the system and
will launch suricata in inline mode (NFQUEUE) and listen to as much queues as CPU cores are
detected.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2018-08-02 19:54:22 +02:00
Arne Fitzenreiter
1ac0d5c598
Merge branch 'aarch64' into next
...
Conflicts:
config/rootfiles/core/121/filelists/acpid
config/rootfiles/core/121/filelists/apache2
config/rootfiles/core/121/filelists/apr
config/rootfiles/core/121/filelists/aprutil
config/rootfiles/core/121/filelists/armv5tel/files
config/rootfiles/core/121/filelists/armv5tel/linux-initrd-kirkwood
config/rootfiles/core/121/filelists/armv5tel/linux-initrd-multi
config/rootfiles/core/121/filelists/armv5tel/linux-kirkwood
config/rootfiles/core/121/filelists/armv5tel/linux-multi
config/rootfiles/core/121/filelists/armv5tel/rpi-firmware
config/rootfiles/core/121/filelists/armv5tel/u-boot
config/rootfiles/core/121/filelists/armv5tel/u-boot-kirkwood
config/rootfiles/core/121/filelists/armv5tel/u-boot-mkimage
config/rootfiles/core/121/filelists/beep
config/rootfiles/core/121/filelists/cmake
config/rootfiles/core/121/filelists/crda
config/rootfiles/core/121/filelists/dhcp
config/rootfiles/core/121/filelists/flex
config/rootfiles/core/121/filelists/i586/grub
config/rootfiles/core/121/filelists/i586/intel-microcode
config/rootfiles/core/121/filelists/i586/linux
config/rootfiles/core/121/filelists/i586/linux-initrd
config/rootfiles/core/121/filelists/iw
config/rootfiles/core/121/filelists/jwhois
config/rootfiles/core/121/filelists/libidn
config/rootfiles/core/121/filelists/multipath-tools
config/rootfiles/core/121/filelists/pcre
config/rootfiles/core/121/filelists/tar
config/rootfiles/core/121/filelists/unbound
config/rootfiles/core/121/filelists/wget
config/rootfiles/core/121/filelists/x86_64/grub
config/rootfiles/core/121/filelists/x86_64/intel-microcode
config/rootfiles/core/121/filelists/x86_64/linux
config/rootfiles/core/121/filelists/x86_64/linux-initrd
config/rootfiles/core/122/filelists/aarch64/files
config/rootfiles/core/122/filelists/acpid
config/rootfiles/core/122/filelists/apache2
config/rootfiles/core/122/filelists/apr
config/rootfiles/core/122/filelists/aprutil
config/rootfiles/core/122/filelists/armv5tel/linux-initrd-kirkwood
config/rootfiles/core/122/filelists/armv5tel/linux-initrd-multi
config/rootfiles/core/122/filelists/armv5tel/linux-kirkwood
config/rootfiles/core/122/filelists/armv5tel/linux-multi
config/rootfiles/core/122/filelists/armv5tel/rpi-firmware
config/rootfiles/core/122/filelists/armv5tel/u-boot
config/rootfiles/core/122/filelists/armv5tel/u-boot-kirkwood
config/rootfiles/core/122/filelists/armv5tel/u-boot-mkimage
config/rootfiles/core/122/filelists/beep
config/rootfiles/core/122/filelists/cmake
config/rootfiles/core/122/filelists/crda
config/rootfiles/core/122/filelists/dhcp
config/rootfiles/core/122/filelists/flex
config/rootfiles/core/122/filelists/i586/grub
config/rootfiles/core/122/filelists/i586/intel-microcode
config/rootfiles/core/122/filelists/i586/linux
config/rootfiles/core/122/filelists/i586/linux-initrd
config/rootfiles/core/122/filelists/iw
config/rootfiles/core/122/filelists/jwhois
config/rootfiles/core/122/filelists/libidn
config/rootfiles/core/122/filelists/multipath-tools
config/rootfiles/core/122/filelists/pcre
config/rootfiles/core/122/filelists/tar
config/rootfiles/core/122/filelists/unbound
config/rootfiles/core/122/filelists/wget
config/rootfiles/core/122/filelists/x86_64/grub
config/rootfiles/core/122/filelists/x86_64/intel-microcode
config/rootfiles/core/122/filelists/x86_64/linux
config/rootfiles/core/122/filelists/x86_64/linux-initrd
config/rootfiles/core/123/filelists/unbound
config/rootfiles/oldcore/121/filelists/acpid
config/rootfiles/oldcore/121/filelists/apache2
config/rootfiles/oldcore/121/filelists/apr
config/rootfiles/oldcore/121/filelists/aprutil
config/rootfiles/oldcore/121/filelists/armv5tel/files
config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-kirkwood
config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-multi
config/rootfiles/oldcore/121/filelists/armv5tel/linux-initrd-rpi
config/rootfiles/oldcore/121/filelists/armv5tel/linux-kirkwood
config/rootfiles/oldcore/121/filelists/armv5tel/linux-multi
config/rootfiles/oldcore/121/filelists/armv5tel/linux-rpi
config/rootfiles/oldcore/121/filelists/armv5tel/rpi-firmware
config/rootfiles/oldcore/121/filelists/armv5tel/u-boot
config/rootfiles/oldcore/121/filelists/armv5tel/u-boot-kirkwood
config/rootfiles/oldcore/121/filelists/armv5tel/u-boot-mkimage
config/rootfiles/oldcore/121/filelists/beep
config/rootfiles/oldcore/121/filelists/cmake
config/rootfiles/oldcore/121/filelists/crda
config/rootfiles/oldcore/121/filelists/dhcp
config/rootfiles/oldcore/121/filelists/flex
config/rootfiles/oldcore/121/filelists/i586/grub
config/rootfiles/oldcore/121/filelists/i586/intel-microcode
config/rootfiles/oldcore/121/filelists/i586/linux
config/rootfiles/oldcore/121/filelists/i586/linux-initrd
config/rootfiles/oldcore/121/filelists/iw
config/rootfiles/oldcore/121/filelists/jwhois
config/rootfiles/oldcore/121/filelists/libidn
config/rootfiles/oldcore/121/filelists/multipath-tools
config/rootfiles/oldcore/121/filelists/pcre
config/rootfiles/oldcore/121/filelists/tar
config/rootfiles/oldcore/121/filelists/wget
config/rootfiles/oldcore/121/filelists/x86_64/grub
config/rootfiles/oldcore/121/filelists/x86_64/intel-microcode
config/rootfiles/oldcore/121/filelists/x86_64/linux
config/rootfiles/oldcore/121/filelists/x86_64/linux-initrd
make.sh
2018-07-03 11:52:05 +01:00
Arne Fitzenreiter
4838034131
random: update initskript for machines with low entropy
...
the script wait until crng is correct initialized before restore the
random seed and make some disc io to work around low entropy at boot
on some machines. Not really a fix but it should be better than reverting
CVE-2018-1108 fixes from kernel.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-06-28 20:48:58 +02:00
Michael Tremer
bd3bcb45d6
AWS: Import aws setup script
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-06-25 10:55:39 +01:00
Michael Tremer
1c21ebf8d5
Add initscript that automatically configures IPFire on AWS EC2
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-06-21 16:45:40 +01:00
Arne Fitzenreiter
b7a4672497
kernel: update to 4.14.41
...
Signen-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-05-17 07:45:06 +02:00
Arne Fitzenreiter
83a618fdcc
kernel: arm-multi: enable AXP20x power regulator
...
this is needed for bananapi usb support
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-05-13 08:12:13 +00:00
Arne Fitzenreiter
d8d20375b3
u-boot: update rootfile
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-29 23:09:08 +02:00
Arne Fitzenreiter
bf1e75985f
u-boot-kirkwood: add u-boot build for kirkwood
...
This file build IPFire (dtb, bootz) compatible versions for:
Marvell DreamPlug
Iomega iConnect Wireless
Raidsonic ICY-Box 62x0
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-28 10:24:16 +02:00
Arne Fitzenreiter
69acde2ecd
acpid: build also on arm
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-14 18:42:00 +02:00
Arne Fitzenreiter
96a2ff029e
kernel: update config
...
disable isdn
disable audit
disable profiling on arm
disable scsi driver on arm
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-11 18:36:57 +02:00
Arne Fitzenreiter
f46d604de2
kernel: fix kirkwood config
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-04-09 07:52:46 +00:00
Arne Fitzenreiter
302dba205b
Merge remote-tracking branch 'origin/master' into kernel-4.14
2018-03-30 10:26:01 +02:00
Arne Fitzenreiter
50bee0291d
xr819-firmware: move rootfile to common
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-26 07:29:51 +02:00
Arne Fitzenreiter
66b5b4d12c
kernel: update to 4.14.30
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-25 20:26:47 +02:00
Arne Fitzenreiter
37b86fa99b
xr819-firmware: add firmware for xradio xr-819 wlan
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-25 13:27:03 +02:00
Arne Fitzenreiter
0a21d63f26
kernel: updated arm config and image build
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-25 11:41:20 +02:00
Arne Fitzenreiter
5bc33236ca
swconfig: remove old swconfig utility
...
this is not compatible with kernel 4.14
todo: replace swconfig calls in initskript
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-24 12:49:10 +01:00
Arne Fitzenreiter
4df5cc2f75
rpi-firmware: update to 2018-03-16
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-24 12:41:57 +01:00
Arne Fitzenreiter
2a0947f2e3
u-boot: update to 2018.03
...
todo: check wandboard version. there are internal changes to merge
the different wandboard images to one and u-boot.imx is not build
anymore. Which file is needed to boot on wandboard?
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-24 11:14:24 +01:00
Michael Tremer
eb68e27dd2
pakfire: Import key when system boots up
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-19 19:44:50 +00:00
Michael Tremer
35cdaa194a
Fix python-m2crypto rootfile
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-03-19 11:52:44 +00:00
Arne Fitzenreiter
bf19f5c6a0
kernel: drop rpi kernel
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-03-14 19:39:23 +01:00
Michael Tremer
61fcd32f15
Rootfile update
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-26 13:06:34 +00:00
Michael Tremer
bbe8e248fe
Rootfile update
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-20 20:10:30 +00:00
Michael Tremer
2ec7a53b3e
Rootfile update for armv5tel
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-17 18:55:38 +00:00
Michael Tremer
a350ea6dea
Drop mISDN userspace tools
...
This is unsupported for quite a while and nobody should be using this.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-02-12 11:41:50 +00:00
Arne Fitzenreiter
11b5e5cb8e
toolchain: update to gcc-7.3.0 and enable retpolines on x86_64 and i586
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-02-11 20:56:12 +00:00
Michael Tremer
fbcb5b749a
Drop mediatomb
...
This didn't build and run in ages and has been removed from
the repositories quite a while ago.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2018-01-05 13:26:33 +00:00
Arne Fitzenreiter
b587a27e6d
util-linux: update rootfile (armv5tel)
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-07-11 05:59:18 +02:00
Michael Tremer
703820855e
Rootfile update
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-07-03 19:08:40 +01:00
Michael Tremer
d78aa64957
Rootfile update for armv5tel toolchain
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-07-01 12:34:00 +01:00
Marcel Lorenz
4a3940a15f
gcc: update to 4.9.4
...
This is only a bugfix release
https://gcc.gnu.org/gcc-4.9/changes.html
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-04-06 10:18:41 +01:00
Marcel Lorenz
fcab4e5f18
gmp: update to 6.1.2
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-04-06 10:15:29 +01:00
Jonatan Schlag
17f7f41e41
Merge branch 'next' into initscripts-cleanup
2017-03-03 14:56:35 +01:00