Commit Graph

14245 Commits

Author SHA1 Message Date
Arne Fitzenreiter
900652ec6c core142: add pakfire changes to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:17:27 +00:00
Michael Tremer
040160c7ce make.sh: Configure Pakfire to load packages from the correct tree
This will configure Pakfire that people who install a nightly
build will also get the packages for this build, etc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:10:21 +00:00
Michael Tremer
f48643e5b3 make.sh: Cleanup code that builds ${SYSTEM_RELEASE}
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:09:53 +00:00
Michael Tremer
36e2e99285 make.sh: Tidy up Git commands
No functional changes. Just making them shorter.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:09:34 +00:00
Michael Tremer
152378c674 pakfire: Add version suffix when in a certain tree
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:09:02 +00:00
Michael Tremer
f61be862c6 pakfire.cgi: Add UI to select repository
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:08:43 +00:00
Michael Tremer
131f163ce8 pakfire.cgi: Rename %pakfiresettings to %cgiparams
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:08:28 +00:00
Michael Tremer
e63fc18d07 pakfire.cgi: Remove some old settings
These can no longer be modified in the GUI and are used nowhere.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:08:13 +00:00
Michael Tremer
e6f4991be2 pakfire: Automatically compose $version
The tree in which pakfire is looking for packages and Core Updates
has been hardcoded into /opt/pakfire/etc/pakfire.conf.

This patch adds a new function which reads the system release
from /etc/system-release.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:07:55 +00:00
Michael Tremer
d8f7b45f35 dnsdist: Update to 1.4.0
This patch updates dnsdist to the latest release.

Additionally it includes /etc/sysconfig/dnsdist in the backup
and enables DNS-over-TLS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:04:44 +00:00
Michael Tremer
b6ab15eaa2 haproxy: Update to 2.1.3
This updates haproxy to the latest version.

In addition, support for Lua scripts is compiled in.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:04:01 +00:00
Stefan Schantl
8877c587ce suricata: Update to 5.0.2
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:03:24 +00:00
Arne Fitzenreiter
8d6012f0f5 kernel: update to 4.14.171
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 11:59:57 +01:00
Arne Fitzenreiter
dc1362e888 kernel: armv5tel rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-13 17:08:20 +00:00
Arne Fitzenreiter
8438e2e427 qemu: bump pak version
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-13 16:57:36 +00:00
Matthias Fischer
d120fd4a92 clamav: Update to 0.102.2
For details see:
https://blog.clamav.net/2020/02/clamav-01022-security-patch-released.html

"ClamAV 0.102.2 is a security patch release..."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:15:44 +00:00
Jonatan Schlag
a174e5e1f8 Qemu: remove not needed files for aarch64 and PA-RISC
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:14:52 +00:00
Jonatan Schlag
2bc995c836 Qemu: Remove unneeded files
These are needed for s390, riscv and microblaze.

See
https://lists.fedoraproject.org/pipermail/packaging/2012-July/008557.html

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:14:46 +00:00
Jonatan Schlag
ee4e219f5f Qemu: remove files for sparc
This is based on the debian package content (qemu-system-sparc)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:14:42 +00:00
Jonatan Schlag
36cdd4e1f2 Qemu: remove files only needed for Power PC
This is based on the debian package content (qemu-system-pcc)

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:14:37 +00:00
Matthias Fischer
f85c916d7f tmux: Update to 3.0.a
For details see:
https://raw.githubusercontent.com/tmux/tmux/3.0a/CHANGES

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:13:36 +00:00
Arne Fitzenreiter
af4370b4a8 core142: add squid to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:12:29 +00:00
Matthias Fischer
1dc4f86e68 squid: Update to 4.10
For details see:
http://www.squid-cache.org/Versions/v4/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:09:50 +00:00
Matthias Fischer
be5ed5d01e mc: Update to 4.8.24
For details see:
http://midnight-commander.org/wiki/NEWS-4.8.24

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:09:14 +00:00
Arne Fitzenreiter
05948d0805 core142: add suricata changes to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 20:07:56 +00:00
Stefan Schantl
2acc41c04c suricata: Enable RDP protocol parser.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 13:28:35 +00:00
Stefan Schantl
d5957c5cd2 ruleset-sources: Update snort dl urls.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 13:28:06 +00:00
Stefan Schantl
d6cc871067 suricata: Enable new and rust-depended protocol parsers.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 13:28:04 +00:00
Stefan Schantl
1a65ea1b72 Suricata: Update to 5.0.1
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-12 13:28:02 +00:00
Arne Fitzenreiter
ee9bc7c477 kernel: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-08 15:21:16 +01:00
Arne Fitzenreiter
7d7f6104cd core142: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-08 11:51:43 +01:00
Arne Fitzenreiter
975f78f710 core142: move 140/141 file to oldcore
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-08 10:13:33 +01:00
Arne Fitzenreiter
03d651483b core142: start updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-08 10:11:40 +01:00
Arne Fitzenreiter
831ff05d89 kernel: enable and enforce signed kernel modules
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-06 15:09:52 +01:00
Arne Fitzenreiter
198c956bb7 kernel: update to 4.14.170
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-05 18:25:54 +01:00
Arne Fitzenreiter
57b17167eb kernel: drop kirkwood kernel
perl 5.30 will not work on kirkwood platform and firewinfo reports less than 10 users so we will drop the support for the platform.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-03 17:44:49 +00:00
Arne Fitzenreiter
f23b046318 unbound: try resolve twice before time sync with ipfire server
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-03 17:40:55 +00:00
Arne Fitzenreiter
f5fe5f47a1 unbound: add returncode to resolve function
this is used for time fix check.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-02 13:40:32 +00:00
Michael Tremer
c3ae88cab9 PPP: Always fetch DNS servers from provider
We will later decide whether we want to use them or not

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-31 10:06:34 +00:00
Michael Tremer
d74d6844fd pppsetup.cgi: Drop DNS setting
This has already been dropped and should not be added again
to the configuration file.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-31 10:04:14 +00:00
Arne Fitzenreiter
f2d2c69787 dns.cgi: increase timeout to 5s
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-30 12:24:24 +00:00
Arne Fitzenreiter
c75fd8c8c5 convert-dns-settings: add ppp/settings to list of converted files
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-30 12:22:37 +00:00
Arne Fitzenreiter
ccf83df93c Merge branch 'core141' 2020-01-30 12:20:46 +00:00
Arne Fitzenreiter
e8adbea97b general-functions.pl: Return unique list of nameservers
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-30 13:13:46 +01:00
Arne Fitzenreiter
99cadb743a ids-functions.pl: Fall back to $EXTERNAL_NET for DNS servers
When no DNS servers are configured (aka recursor mode), the
DNS servers that unbound will try to contact can be anywhere.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-30 13:07:01 +01:00
Arne Fitzenreiter
b76118c32c ids-functions.pl: Fix generating DNS_SERVERS
The configuration file has an invalid syntax which causes
suricata to fail to start.

There was no comma inserted between DNS servers when there
was more than two of them. This is now fixed in this patch..

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-30 12:51:31 +01:00
Arne Fitzenreiter
83165259b1 core141: run pakfire update after db cleanup
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-29 12:54:00 +00:00
Michael Tremer
e2338aa7ef make.sh: Modify update-contributors so that it will run with older version of awk
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-29 11:59:21 +01:00
Michael Tremer
8729316513 convert-dns-settings: Explicitely enable using ISP name servers
The unbound initscript checks if this parameter is on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-29 11:52:02 +01:00
Michael Tremer
38f51465c9 dns.cgi: Shorten time when checking if DNS is alive
For localhost, one second should be plenty

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-29 11:47:35 +01:00