Commit Graph

268 Commits

Author SHA1 Message Date
Michael Tremer
046ef135e6 Merge remote-tracking branch 'origin/efi' into next 2018-08-16 12:49:13 +01:00
Arne Fitzenreiter
b403b04a13 initrd: add early microcode load
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-05 13:32:36 +02:00
Michael Tremer
f32cbd89d9 backup: Bump release number in ISO download script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-08-03 13:07:31 +01:00
Michael Tremer
87589bce00 backup: Make backup ISO bootable on EFI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-31 16:36:09 +01:00
Michael Tremer
befc040497 Move update-bootloader script into installer
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 12:03:09 +00:00
Michael Tremer
eadde44b05 update-bootloader: Allow passing device to install GRUB on
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 12:03:09 +00:00
Michael Tremer
c1397b7ab3 update-bootloader: Extend script to support EFI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-20 12:03:09 +00:00
Michael Tremer
3ed1c621cf Revert "Add Intel microcode updates from Jan 2018"
This reverts commit d404b1dba2.

Intel has pulled these microcode updates because of
random system reboots and systems becoming unstable.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-24 16:08:22 +00:00
Jonatan Schlag
d404b1dba2 Add Intel microcode updates from Jan 2018
Add intel microcode to the distribution and configure dracut in a way
that the microcode is loaded early in the boot process.

Fixes #11590

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Acknowledged-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-01-14 15:25:08 +00:00
Arne Fitzenreiter
9064ba72fe drop httpscert and merge to apache initskript
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-10-22 15:50:38 +02:00
Peter Müller
5760f93a74 generate ECDSA key on existing installations
Generate ECDSA key (and sign it) in case it does not exist. That way,
httpscert can be ran on existing installations without breaking already
generated (RSA) keys.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-11 20:05:34 +01:00
Michael Tremer
6772cc8035 Download ISO images from https://downloads.ipfire.org
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-06 13:03:40 +01:00
Michael Tremer
cb40ff6027 captive portal: Reload firewall rules after cleanup
This is not necessary to stop any clients from accessing the
Internet, but if we know that we don't need a line for certain
any more, we can as well remove the firewall rule straight away.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-05 12:09:58 +02:00
Michael Tremer
b1773d1a37 captive portal: Don't remove unlimited access after one hour
Reported-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-10-05 12:04:29 +02:00
Alexander Marx
07d56062a9 Captive-Portal: fix cleanup script
The cleanup-script did not write back the hash after the expired voucher
was delted

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
2017-09-22 18:54:45 +01:00
Alexander Marx
e01c5ab71a Captive-Portal: redesign Webinterface
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
2017-09-22 18:54:03 +01:00
Alexander Marx
4d9002279f Captive-Portal: add crontab and cleanup scripts
The cleanup script is called every hour and deletes expired clients from
the clients file.
every night the captivectrl warpper runs once to flush the chains and
reload rules for active clients

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
2017-09-22 18:54:03 +01:00
Michael Tremer
3ddd5b66a9 Fix environment variables when building file list for core updates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-24 12:20:12 +01:00
Michael Tremer
dc7d6b204d make.sh: Cleanup of polluted environment
The build environment is using a number of variables which
occasionally conflicted with some other build systems.

This patch cleans that up by renaming some variables and
later unexporting them in the lfs files.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-18 12:02:03 +01:00
Matthias Fischer
a0a33a8f10 BUG11271 / GeoIP: Download GeoIP database via HTTPS
For details see:
https://bugzilla.ipfire.org/show_bug.cgi?id=11271

Download GEoIP database per HTTPS download.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-02-04 13:31:35 +00:00
Jonatan Schlag
b1b6e9f396 Fix the backup iso script once again.
In commit 391560854f was an error in the
case statement. On i?586 the check fails. Removing the "" fixes the
error.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-04 11:21:28 +00:00
Jonatan Schlag
391560854f Improvement of backup iso script
The backup iso script did not check the arch of the host. On x86_64 host
the wrong iso was downloaded.

Furthermore, there were some if clauses which could cause trouble which
I also tried to improve.
(For example: -e is valid if we have a directory or a file, but we want
to check for a file only )

Fixes: 11258

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-02 19:12:14 +00:00
Arne Fitzenreiter
33513817fa set version to IPFire 2.19 core100
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-03-20 09:36:33 +01:00
Alexander Marx
1d47c971e6 BUG10834: fixes ovpn-ccd-convert
When restoring an old backup, all OpenVPN RW's get the dynamic network.
2015-05-06 16:18:00 +02:00
Stefan Schantl
e6c4f090b6 Merge branch 'next-geoip' into core-90-geoip 2015-04-15 17:10:49 +02:00
Alexander Marx
831a5ef6ad core89: Update OpenVPN configuration during the update 2015-04-10 13:16:33 +02:00
Stefan Schantl
d9f47d9b9e xt_geoip_update: Add support for upstream proxy. 2015-03-19 22:09:24 +01:00
Stefan Schantl
663221a256 xt_geoip_update: Fix script path. 2015-03-15 11:40:13 +01:00
Stefan Schantl
93bfe63d55 Merge branch 'seventeen-geoip' into next-geoip 2015-03-15 11:38:45 +01:00
Arne Fitzenreiter
2fb7787f35 set version to IPFire 2.17 core87. 2015-02-20 16:50:32 +01:00
Stefan Schantl
6897c329b5 xt_geoip_update: Fix mktemp calls. 2015-02-17 08:41:16 +01:00
Stefan Schantl
bc9446c65f Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x into seventeen-geoip
Conflicts:
	make.sh
2015-02-14 12:34:31 +01:00
Stefan Schantl
2285f9da22 Add xt_geoip_update script.
This script will download the latest available geoip database, convert
it into a compatible binary format and move it to the correct destination.
2015-01-04 00:55:17 +01:00
Stefan Schantl
ca842e1822 xt_geoip_build: Script to convert GeoIP CSV into compatible binary databases.
This is a cleaned up version of the original build script shipped by the
xtables-addons source code.

The following abilities have been removed:
* IPv6 support
* Big Endian
2015-01-04 00:54:46 +01:00
Michael Tremer
5946f1f9d0 update-bootloader: Search for /boot first and then /
The bootloader is usually installed on the /boot partition
if that exists. Some installations may mount / from a different
device, so we make sure to update the bootloader on the
right device.
2015-01-01 16:36:51 +01:00
Michael Tremer
ff3bae7b89 Add script that automatically updates/installs GRUB2
This script also handles RAID devices
2014-12-18 17:27:47 +01:00
Timmothy Wilson
851fba0e8d httpscert: Create certificate with SHA256 hash 2014-11-05 22:08:02 +01:00
Michael Tremer
38c6822d3c installer: Make restoring the backup interactive 2014-10-15 23:38:05 +02:00
Michael Tremer
0d273ebb0d Remove setddns.pl script. 2014-07-06 13:01:17 +02:00
Stefan Ferstl
7eb25cb302 DDNS: Fix API call for the "Dynu" DDNS service
This affects the DDNS service "dynu.ca dyn.ee dynserv.(ca|org|net|com)".
DNS updates using this service were made using the URL http://dynserv.ca/ . However,
the domain dynserv.ca does not exist anymore. The Dynu service is now only reachable
via the dynu.com domain. This commit changes the API call according to Dynu's
specification on http://www.dynu.com/Default.aspx?page=dnsapi .
2014-06-17 11:22:21 +02:00
Stefan Schantl
022438b50b setddns.pl: Fix function call of udmedia and twodns. 2014-05-24 15:05:56 +02:00
Michael Tremer
53ac77f610 Merge remote-tracking branch 'stevee/ddns-providers' into next 2014-05-17 15:27:53 +02:00
Stefan Schantl
5a9f40613e setddns.pl: Switch off debuging output.
Switch off accidently enabled debugging output from commit
dc98645fd4
2014-05-15 18:47:13 +02:00
Stefan Schantl
f353972f3f Change update url for spDNS.de. 2014-05-14 19:52:06 +02:00
Arne Fitzenreiter
aab13a8d9d backupiso: change to hybrid image. 2014-05-14 18:59:22 +02:00
Bernhard Bitsch
9cf34ad1ed DDNS: Add support for spdns.de.
This commit adds support for the dynamic dns service provider spdns.de.

Fixes #10533.
2014-05-12 19:53:51 +02:00
Stefan Ernst
b1ab4a4dd0 DDNS: Add support for variomedia.de.
This commit adds support for the dynamic dns service provider variomedia.de.

Fixes #10485.
2014-05-11 20:06:20 +02:00
Stefan Schantl
02c542d173 DDNS: Add support for twodns.de.
This commit adds support for the dynamic dns service provider twodns.de.

Fixes #10418.
2014-05-11 19:58:31 +02:00
Arne Fitzenreiter
59209622e3 backupiso: set version to 2.15. 2014-05-03 15:08:54 +02:00
Michael Tremer
2a07aa9d9c dialctrl: Remove defunct script. 2014-03-17 14:17:44 +01:00