Commit Graph

343 Commits

Author SHA1 Message Date
Peter Müller
4d14892646 linux: Update x86_64 rootfile
My fault to provide this ahead of time, again. :-/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-10-30 06:44:50 +00:00
Michael Tremer
7b9a3bb2d1 Merge branch 'master' into next 2023-10-09 08:12:40 +00:00
Arne Fitzenreiter
729fe58b12 boost: update x86_64 rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-10-09 08:12:13 +00:00
Arne Fitzenreiter
14bd32221e kernel: update to 6.1.52
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-09-28 09:29:23 +00:00
Adolf Belka
f97508f4e1 boost: Update to version 1_83_0
- Update from 1_81_0 to 1_83_0
- Update of rootfile for x86_64
- Changelog is a bit long to include here so providing links to the pages with changes
    1_82_0
	https://www.boost.org/users/history/version_1_82_0.html
    1_83_0
	https://www.boost.org/users/history/version_1_83_0.html

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-09-12 16:10:14 +00:00
Michael Tremer
7093206b96 initscripts: Update rootfiles after dropped client175 initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-09-05 15:15:53 +00:00
Michael Tremer
3bca8ae11f glibc: Update to 2.38
This update builds glibc with FORTIFY_SOURCE and disables building nscd
which has been unused in IPFire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-17 14:07:44 +00:00
Michael Tremer
e8bdca4d52 gcc: Update to 13.2.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-17 14:07:43 +00:00
Michael Tremer
fc0f09a833 binutils: Update to 2.41
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-17 14:07:43 +00:00
Arne Fitzenreiter
162a068448 kernel: update to 6.1.45
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 23:25:37 +02:00
Arne Fitzenreiter
20ad6285d6 intel-microcode: update to 20230808
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 16:51:42 +02:00
Arne Fitzenreiter
f6615f3025 kernel: fix rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-21 09:34:09 +00:00
Peter Müller
c084d8f970 linux: Enable Indirect Branch Tracking by default
This became upstream default (see
https://www.phoronix.com/news/Linux-IBT-By-Default-Tip for IT news media
coverage), and given its security-relevance, we should adopt this
setting as well.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-13 14:20:32 +00:00
Arne Fitzenreiter
1a44c7a638 kernel: update to 6.1.37
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-09 14:57:38 +00:00
Adolf Belka
230c81622a util-linux: Update to version 2.39.1
- Update from version 2.38.1 to 2.39.1
- Update of rootfile made for x86_64 but not for aarch64 or riscv64
- Changelog can only be reviewed by looking at the commits in the git repo
   https://github.com/util-linux/util-linux/commits/master

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-07-01 19:19:12 +00:00
Adolf Belka
51e29a797e go: Update to version 1.20.4
- Update from version 1.15.4 to 1.20.4
- Update of x86_64 rootfile
   aarch64 rootfile needs to be created on a aarch64 build system
- Changelog is very large. For details see https://go.dev/doc/devel/release
   50 mentions of security fixes in the changes from 1.15.4 to 1.20.4

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-06-25 13:49:34 +00:00
Michael Tremer
df1a3f56cb gcc: Update to 13.1.0
This patch does not include the rootfile for riscv64 because GCC FTBFS.
Bug #13156 has been opened to address this.

But since we don't officially support IPFire riscv64, yet, this should
not delay this going into next.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-06-24 06:34:18 +00:00
Adolf Belka
6f22b0ac4d intel-microcode: Update to version 20230613
- Updated from version 20230214 to 20230512-rev2 where the source tarball is named version
   20230613
- Update of rootfile
- Changelog details for versions 20230512 and 20230512-rev2 can be found at
   https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-06-16 09:20:06 +00:00
Arne Fitzenreiter
25aa552258 kernel: update to 6.1.30
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-05-30 09:21:34 +00:00
Peter Müller
e8a73cfe94 initscripts: Remove re-added lvmetad initscript from rootfiles
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-05-18 09:46:41 +00:00
Jonatan Schlag
3a96d482f6 initscripts: Sort rootfiles
This simply sorts the rootfiles. Everything should be sorted :-).

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2023-05-18 09:43:23 +00:00
Arne Fitzenreiter
6a005bd9aa kernel: update to 6.1.28
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-05-16 18:53:01 +00:00
Peter Müller
ccd793b360 linux: Update rootfiles
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-05-12 18:29:27 +00:00
Adolf Belka
0921556c85 initscripts: removal of lvmetad initscript
- With the last update of lvm2 lvmetad was removed from lvm2. I did not recognise that
   lvmetad had been setup as an automatic initscript, so it no longer works as the
   binary is no longer provided.
- This patch removes the lvmetad initscript, the reference to lvmetad in the initscript
   lfs file and the lvmetad initscript entries in the rootfile for each architecture.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2023-05-11 20:08:07 +00:00
Peter Müller
6aa0837d24 linux: Update to 6.1.24
Compiling the kernel has automatically introduced
CONFIG_INIT_STACK_ALL_ZERO=y and removed GCC's structleak plugin (not to
be confused with its stackleak counterpart). However, according to
related documentation, this neither introduces a security nor
performance disadvantage.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2023-04-19 09:33:38 +00:00
Peter Müller
cf66a3f133 Revert "grub: Fix for riscv64 rootfile"
This reverts commit 6d3e6cfc16.

Arne informed me via the phone that this patch has to be reverted, since
his changes for riscv64 already made it redundant. Keeping it would
cause rootfile quirks to the riscv64 builds.

Reported-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-05 15:56:28 +00:00
Matthias Fischer
6d3e6cfc16 grub: Fix for riscv64 rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
2023-03-05 15:04:52 +00:00
Adolf Belka
504756d4f5 intel-microcode: Update to version 20230214
- Update from version 20221108 to 20230214
- Update of rootfile
- Changelog - details can be found in the releasenote.md file in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-03-05 14:54:49 +00:00
Peter Müller
d51c4e566b linux: Update x86_64 rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-05 14:14:31 +00:00
Adolf Belka
e2bdd79782 initscripts: Remove rngd from the core package initscripts
- rngd removed from initscripts lfs and rootfiles due to change of rng-tools to addon

Fixes: Bug#12900
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
2023-03-04 13:55:33 +00:00
Matthias Fischer
4b8fef1371 rust: Update to 1.67.0
For details see:
https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1670-2023-01-26

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
2023-03-04 13:54:40 +00:00
Michael Tremer
a6c331a8d6 glibc: Update to 2.37
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-02-10 09:40:05 +00:00
Michael Tremer
444a0f893f boost: Update to 1.81.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-02-10 09:28:01 +00:00
Michael Tremer
32bbae10a0 gcc: Update to 12.2.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-02-10 09:27:56 +00:00
Michael Tremer
63addba3d2 binutils: Update to 2.40
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-02-10 09:27:45 +00:00
Matthias Fischer
c29109f859 grub 2.06: Fix for rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-30 17:00:23 +00:00
Matthias Fischer
68e2844141 rust: Update to 1.65
For details see:
https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1650-2022-11-03

I started updating rust to 1.65 mainly because 'clamav 0.105.1-3' and the
shortly thereafter released version 'clamav 1.0.0' need at least 'rust 1.56':
"Building ClamAV requires, at a minimum, Rust compiler version 1.56, as it
relies on features introduced in the Rust 2021 Edition."

At this point we were still on 'nightly 2022-01-27'. Ok then...

But it was a bit more tricky than I thought, because this update wouldn't build without
patching most of the existing rust-crate-lfs files in a way I didn't expect.
Please note the patch series following this update...

Nevertheless, the update to 1.65 and ALL testbuilds completed without any errors.

Unfortunately, I can only provide the rootfile for x86_64 - I don't have the appropriate hardware
for anything else.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
2023-01-26 23:02:46 +00:00
Peter Müller
dce8d55955 linux: Update x86_64 rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-19 21:34:56 +00:00
Michael Tremer
debf583b42 rootfiles: Remove further spaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-18 23:27:00 +00:00
Arne Fitzenreiter
3e066f550b kernel: update rootfiles and config
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-01-15 09:19:25 +00:00
Arne Fitzenreiter
6535255270 kernel: update to 6.1.3
the kernel-6.1.x series should be the next lts series...
2023-01-08 10:08:33 +00:00
Peter Müller
f46f939827 linux: Update configuration files and x86_64 rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-04 21:26:43 +00:00
Peter Müller
63b3a6edb3 linux: Update to 5.15.85
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-03 16:07:48 +00:00
Peter Müller
ace891f719 intel-microcode: Update rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-19 20:20:28 +00:00
Peter Müller
9826ac9bc2 modules.d: Drop orphaned blacklist statements
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-10-03 10:21:24 +00:00
Peter Müller
ae185d6f9d linux: Update to 5.15.68
Please refer to https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.68
for the changelog of this release. Due to the lack of local build
hardware, ARM rootfile and configuration changes have been omitted.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-09-20 10:33:19 +00:00
Adolf Belka
922747b205 efivar: Update to version 38
- Update from version 37 to 38
- Update of rootfile
- mandoc is now a build dependency for efivar
- Old compile fixes patches are no longer required with version 38
- Details for lfs build of version 38 obtained from Beyond Linux From Scratch
- Changelog
   bug fixes
    Rework some makefile bits to make overriding some options simpler. by @vathpela in #140
    Handle /sys/devices/virtual/{nvme-fabrics,nvme-subsystem} devices by @vathpela in #139
    guids.S: Include <cet.h> when CET is enabled by @hjl-tools in #149
    Fix /sys/block sysfs parsing for eMMC-s by @jwrdegoede in #150
    Properly check mmap return error by @hannob in #152
    Fix s{yt,ty}le typo in efi_get_variable(3) by @nabijaczleweli in #162
    Handle NULL set_variable() by @lcp in #159
    Fix parsing for nvme-subsystem devices by @dannf in #158
    Attempt to fix the identified thread safety bugs by @vathpela in #155
    Make thread-test depend on libefivar.so by @hjl-tools in #176
    Upstream a local patch from rawhide by @frozencemetery in #177
    Fix conversion from UTF8 to UCS2 by @freedge in #171
    efivar: make docs match current code for 'efivar -A' by @vathpela in #178
    Migrate CI to Github actions by @frozencemetery in #179
    Add code of conduct by @frozencemetery in #180
    Misc minor fixes by @vathpela in #182
    Add efi_time_t declarations and helper functions. by @vathpela in #183
    More misc fixes by @vathpela in #185
    Run CI on more targets by @vathpela in #187
    Coverity fixes 20211208 by @vathpela in #189
    CI: run abicheck by @frozencemetery in #190
    Fix linux virtual root device parsing by @vathpela in #188
    efivar.spec.in: fix license to be valid SPDX by @frozencemetery in #192
    Add efisecdb tooling by @vathpela in #184
    Fix linker string comparison for dash by @frozencemetery in #194
   Full changelog diff between version 37 and 38 is available in github repo
    https://github.com/rhboot/efivar/compare/37...38

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-09-12 09:48:04 +00:00
Michael Tremer
2a4ab94d1b glibc: Update to 2.36
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-09-11 08:36:17 +00:00
Michael Tremer
a6098f80c2 binutils: Update to 2.39
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-09-11 08:36:17 +00:00
Peter Müller
4865b7f6b8 Revert "Revert "kernel: update to 5.15.59""
This reverts commit f25f1b55af.
2022-08-08 13:17:30 +00:00