Commit Graph

5003 Commits

Author SHA1 Message Date
Michael Tremer
4ab80c5daf python3-botocore: Required by aws-cli
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 12:54:23 +01:00
Michael Tremer
280ee7e767 aws-cli: New package
Needed to communicate with AWS services like EC2, S3, etc...

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 12:45:38 +01:00
Michael Tremer
89f634ff9e Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-14 08:36:19 +01:00
Michael Tremer
9d0601917f Revert "core123: Ship updated usbutils"
This reverts commit a65d07ec6d.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 19:49:58 +01:00
Michael Tremer
d179a9d0a7 Revert "usbutils: Update rootfile"
This reverts commit 9aefd1ed07.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 19:49:48 +01:00
Michael Tremer
397d627eab Revert "avahi: Build without dbus"
This reverts commit 5221a852e8.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-13 18:59:10 +01:00
Arne Fitzenreiter
3d0e252e35 intel-microcode: update to 20180807
fixes #11590

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-11 20:52:45 +02:00
Stefan Schantl
f7d76eecc6 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-08-11 19:50:20 +02:00
Michael Tremer
5221a852e8 avahi: Build without dbus
We don't have any services connected to dbus, so what is the
point of avahi trying to connect to it?

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 12:20:06 +01:00
Michael Tremer
467581b8ab avahi: Update to 0.7
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 11:19:25 +01:00
Michael Tremer
6064cd87cc Revert "avahi: Drop package"
This reverts commit aa6ee515c5.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-10 11:11:48 +01:00
Arne Fitzenreiter
b403b04a13 initrd: add early microcode load
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-05 13:32:36 +02:00
Michael Tremer
f32cbd89d9 backup: Bump release number in ISO download script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-03 13:07:31 +01:00
Stefan Schantl
06b569a442 oinkmaster: Install config file to /var/ipfire/suricata
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 13:48:46 +02:00
Stefan Schantl
d33874f496 daq: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:20:18 +02:00
Stefan Schantl
843a8c570c snort: Drop package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:19:35 +02:00
Stefan Schantl
914cca3d8e initscripts: Link against suricata initscript in runlevels and red.up hook
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 10:02:34 +02:00
Stefan Schantl
74b7d695c6 misc-progs: Rename snortctrl to suricatactrl
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-03 09:50:31 +02:00
Arne Fitzenreiter
b5a1294c98 linux-firmware: update to 30.7.2018
include new amd microcodes for Spectre updates

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-02 21:15:11 +02:00
Stefan Schantl
d72b3e64c2 suricata: Introduce basic initscript
Add a very basic initscript, which currently allows to start/stop/restart suricata and
check if the daemon is running.

The script will detect when starting suricata how many CPU cores are present on the system and
will launch suricata in inline mode (NFQUEUE) and listen to as much queues as CPU cores are
detected.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 19:54:22 +02:00
Stefan Schantl
1d9b879140 ids-ruleset-sources: New package
Move the file which contains the download URL's for the IDS rulesets
into an own common package. This will allow us in future to easily ship
a changed file with a core update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 19:29:36 +02:00
Stefan Schantl
72b2109c72 configroot: Move from snort to suricata
Create /var/ipfire/suricata and /var/ipfire/suricata/settings instead of
/var/ipfire/snort and /var/ipfire/snort/settings.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 15:47:31 +02:00
Stefan Schantl
4c6d6c1ee3 suricata: Install very basic config file
This config file is mostly based on the example configuration shipped
by the suricata project and needs to be enhanched.

See #11808.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 09:10:25 +02:00
Stefan Schantl
a8b8c9e5b2 Merge branch 'next-new-ids.cgi' into next-suricata-and-cgi 2018-07-30 21:33:25 +02:00
Stefan Schantl
67752a9510 suricata: New package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-30 21:31:15 +02:00
Stefan Schantl
3498300d87 libhtp: New package
This is build and runtime dependency for suricata.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-29 09:45:05 +02:00
Stefan Schantl
91cc908f84 yaml: New package
This is a build and runtime dependency for suricata.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-29 09:44:52 +02:00
Michael Tremer
a580a31c0f core123: Ship and restart squid and apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-26 14:46:53 +01:00
Stefan Schantl
8dcebe5342 IDS: Introduce ids-functions.pl.
This library will contain a set of functions used by the IDS CGI script
and the planned update script for auto-updating the snort ruleset.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-26 11:54:25 +02:00
Stefan Schantl
c6bcdda1af snort: Introduce ruleset-sources.list
This file contains the ruleset vendors and download urls and
will be used by the ids.cgi.

If an url or filename changes, we easily can adjust this file. In most
cases this will be needed when performing a snort update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-26 11:50:11 +02:00
Arne Fitzenreiter
948d660c10 syslinux: update i586 rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-07-21 16:39:46 +02:00
Stefan Schantl
ca745a2978 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-07-21 14:14:53 +02:00
Michael Tremer
befc040497 Move update-bootloader script into installer
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 12:03:09 +00:00
Arne Fitzenreiter
f8f4ef0795 Merge branch 'next' into efi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Conflicts:
	config/kernel/kernel.config.aarch64-ipfire
2018-07-20 12:24:31 +01:00
Stefan Schantl
b5ea63f85c Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-07-19 18:10:23 +02:00
Arne Fitzenreiter
413149f80d kernel: aarch64: enable virtio drivers
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-07-19 13:26:06 +01:00
Michael Tremer
479d82d1b8 Rootfile update
We don't have EFI on i586

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-16 22:31:11 +01:00
Michael Tremer
701c891b40 Build efibootmgr and efivars only for x86_64 and aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:53 +01:00
Michael Tremer
7c80f8c5cc syslinux: Update to 6.04-pre1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:53 +01:00
Michael Tremer
2c49856ead Rootfile update for parted
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:52 +01:00
Michael Tremer
b62f71f7f2 Build GRUB on aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:52 +01:00
Michael Tremer
24e811b03a grub: Don't install an empty EFI configuration file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:51 +01:00
Michael Tremer
fd80e500df Add efibootmgr and efivar
These packages are required to manage EFI boot options

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:51 +01:00
Michael Tremer
308af080f6 grub: Build new version in EFI mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:50 +01:00
Michael Tremer
df26133793 syslinux: Update to 6.03
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:50 +01:00
Michael Tremer
8a9605840c Remove dvdrtools for cdrkit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:49 +01:00
Michael Tremer
0268380764 ipfire-netboot: Ship EFI image
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:49 +01:00
Michael Tremer
7fbbd2aebc Enable EFI on x86_64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:49 +01:00
Michael Tremer
784cd5cbd7 Enhance the flash image to support EFI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:49 +01:00
Michael Tremer
0927eadc52 Rootfile update for aarch64 kernel
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-14 13:43:13 +01:00