webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-12 20:16:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
12,523 Commits 2 Branches 1 Tag
c9ae511ecf3caea0836b06211ca49d3fec4bf6b8
Commit Graph

12523 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Tremer
c9ae511ecf unbound: Allow forwarding to multiple servers at the same time 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 20:23:59 +01:00
Michael Tremer
086bb132ec ipvsadm: Update to 1.29 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 18:55:23 +00:00
Michael Tremer
4af8d6964b pcre: Enable JIT 
This is now possible because we no longer run grsecurity-enabled
kernels. The performance of PCRE increases dramatically and applications
like the IDS benefit hugely:

  https://blog.inliniac.net/2011/10/12/suricata-and-pcre-performance/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 15:44:32 +00:00
Jonatan Schlag
909549b1d6 Update libvirt to version 4.10 
This partially fixes #11941 as libvirt now states clearly that seccomp
needs to be disabled

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:33:07 +00:00
Michael Tremer
452e537092 core127: Ship updated squid 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:32:07 +00:00
Matthias Fischer
a2bcb4135b squid: Update to 4.4 (stable) 
For details see:
http://www.squid-cache.org/Versions/v4/changesets/

In July 2018, 'squid 4' was "released for production use", see:
https://wiki.squid-cache.org/Squid-4

"The features have been set and large code changes are reserved for later versions."

I've tested almost all 4.x-versions and patch series before with good results.
Right now, 4.4 is running here with no seen problems together with
'squidclamav', 'squidguard' and 'privoxy'.

I too would declare this version stable.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:30:51 +00:00
erik.kapfer
27801da089 unbound: Add TFO support for unbound 
For further informations, see https://tools.ietf.org/html/rfc7413

Signed-off-by: erik.kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:30:39 +00:00
Matthias Fischer
cab2314ac4 bind: Update to 9.11.5-P1 
For details see:
http://ftp.isc.org/isc/bind9/9.11.5-P1/RELEASE-NOTES-bind-9.11.5-P1.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:29:39 +00:00
Michael Tremer
a38eb040bf sqlite: Update to 3.26.0 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:28:59 +00:00
Michael Tremer
57c04aa49d Revert "make.sh: Build in ramdisk" 
This reverts commit 6174b7b1c7.

This had absolutely no effect on build time or rather made it
slower. So this is being reverted to save ourselves the RAM.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-16 22:23:50 +00:00
Michael Tremer
6174b7b1c7 make.sh: Build in ramdisk 
This is an experimental change that I want to trial to speed up
the nightly builds. The build environment will be mounted in a
ramdisk and the build will be performed in there.

This will hopefully reduce IO on the (slow) replicated disks.

If there is no significant performance gain from this, this
commit will be reverted.

To enable this, USE_RAMDISK must be set to 1 in .config.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-16 16:50:13 +00:00
Matthias Fischer
53ac9dd222 unbound: Update to 1.8.3 
For details see:
https://nlnetlabs.nl/svn/unbound/tags/release-1.8.3/doc/Changelog

"Fix dns64 allocation in wrong region for returned internal queries."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-13 13:14:35 +00:00
Michael Tremer
edff2bb851 core127: Ship updated grub 
It doesn't need to be re-installed because no system with
that configuration should exist right now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-13 13:11:01 +00:00
Stefan Schantl
848ac69009 grub: xfs: Accept filesystem with sparse inodes 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Tested-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-13 13:07:53 +00:00
Michael Tremer
81e1e80e38 AWS: Prefer red* or eth* when importing configuration 
This change is necessary to make sure that the script prefers
are link with internet access. That would usually be red (after
the second boot) or eth* (on the first boot).

That allows (and ensures) that we can install packages in
the user-data script.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-12 11:36:44 +00:00
Michael Tremer
58e840bd96 installer: Intialize part_boot_efi_idx 
This variable was not initialized on systems where EFI was not
in use. Therefore the generated parted command line was not
valid and caused the installation to abort.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-11 20:43:24 +00:00
Michael Tremer
de4f303186 core127: Ship updated unbound 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-11 19:46:10 +00:00
Matthias Fischer
707846392e unbound: Update to 1.8.2 
For details see:
https://nlnetlabs.nl/projects/unbound/download/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-11 19:45:28 +00:00
Matthias Fischer
5df66de303 clamav: Update to 0.101.0 
For details see:
https://blog.clamav.net/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-11 19:42:22 +00:00
Michael Tremer
8b02a92fe7 core127: Ship updated fireinfo 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-11 19:41:31 +00:00
Michael Tremer
66f7b646cd Start Core Update 127 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-11 19:41:09 +00:00
Michael Tremer
7e17de5f86 fireinfo: Add authentication for upstream proxies 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-11 19:38:21 +00:00
Arne Fitzenreiter
adde1ca8ce Merge branch 'master' into next 2018-12-11 08:01:59 +01:00
Arne Fitzenreiter
ed4bbe44d1 kernel: fix dwc2 (usb) dma crashes on RPi1-3 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-10 20:45:54 +01:00
Michael Tremer
c519be4226 haproxy: Create/restore backup when package is installed/uninstalled 
Fixes: #11946
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-10 00:36:04 +00:00
Arne Fitzenreiter
ede4314397 core126: finish core126 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-08 17:47:16 +01:00
Arne Fitzenreiter
c030bfba2e core126: fix "need reboot display" 
The display should displayed always except the linux-pae
packages is planned to be installed after this update.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-07 21:16:43 +01:00
Arne Fitzenreiter
d05fe8e3e5 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2018-12-07 21:06:45 +01:00
Arne Fitzenreiter
23a3aec100 cpufrequtils: update initskript for xz compressed modules 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-07 21:05:50 +01:00
Michael Tremer
f354601bbe initscripts: Import pakfire keys before importing AWS configuration 
This is useful when the user-data script is installing
packages. For that it will need valid keys for course.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-07 11:38:55 +00:00
Arne Fitzenreiter
56726ed954 rngd: update initskript and add hwrngtty support 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-06 22:33:05 +01:00
Arne Fitzenreiter
8d638b63f8 core126: add kernel files to update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-06 16:05:31 +01:00
Arne Fitzenreiter
19f37f2493 core126: add kernel to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-06 11:27:46 +01:00
Arne Fitzenreiter
827dd0faa4 kernel: update to 4.14.86 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-06 11:18:37 +01:00
Michael Tremer
93363446e4 AWS: Add a timestamp to user-data.log 
This way, multiple (failed) runs of the script won't
overwrite the log file.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-05 14:42:54 +00:00
Michael Tremer
1022b203ad AWS: Write user-data.log to /var/log 
This should not be in /root at all.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-05 14:38:28 +00:00
Michael Tremer
87487585c0 make.sh: Build for x86_64 by default 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-02 10:23:15 +00:00
Arne Fitzenreiter
91e08f20ff kernel: update to 4.14.85 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-02 00:01:37 +01:00
Michael Tremer
e0986954d4 bird: Launch service on install and add symlinks to start at boot time 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-01 16:13:25 +00:00
Michael Tremer
a4e3a76af9 bird: Add initscript 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-01 16:13:25 +00:00
Michael Tremer
b5b8920cf0 bird: Add forgotten file 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-01 16:13:25 +00:00
Michael Tremer
e122256d8f core126: Ship recently updated packages 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-01 16:13:25 +00:00
Matthias Fischer
9a12784047 BUG 11929: Build 'bind'-binaries dynamically and install needed libraries (V2) 
Hi,

To save space linking the 'bind 9.11.5'-binaries was changed from statically to dynamically.

Changes to V2:
Removed unnecessary '*.so'-links.

Complete file sizes shrinked from ~4800K to ~1700K. Needs testing and confirmation!

I'm running this version right now under Core 124 - no seen problems so far.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-01 16:13:25 +00:00
Michael Tremer
046b436c76 bird: Update to 2.0.2 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-01 16:13:25 +00:00
Michael Tremer
be7f989249 bird: Backup configuration file on update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-01 16:13:25 +00:00
Michael Tremer
4fc73ace76 docker: Always agree to install all updates 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-11-30 20:16:08 +00:00
Arne Fitzenreiter
ef9cc2e5d5 kernel: update arm-multi patchset 
now patches for Raspberry Pi 3B+
LAN and WLAN included to patchset.

https://git.ipfire.org/?p=people/arne_f/kernel.git;a=shortlog;h=refs/tags/v4.14.84-multi

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-11-30 07:35:07 +01:00
Michael Tremer
cd022294d9 nfs: Fix build 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-11-29 13:17:30 +00:00
Arne Fitzenreiter
9743182472 kernel: update to 4.14.84 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-11-29 07:02:25 +01:00
Michael Tremer
3eea5c6f3a nfs: Add backup include file 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-11-28 19:08:17 +00:00