Commit Graph

1444 Commits

Author SHA1 Message Date
Michael Tremer
d8c4aaddc3 Revert "aws-setup: Fixes bug12763"
This reverts commit eb0de6531c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 10:00:45 +02:00
Michael Tremer
d258c7a47a Revert "red: Fixes bug12763"
This reverts commit 9c28cd59c1.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 10:00:23 +02:00
Michael Tremer
bafa45ed84 Revert "static-routes: Fixes bug12763"
This reverts commit e33ee46e62.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 10:00:11 +02:00
Michael Tremer
1724e5ac0a initscripts: Correctly wait for Apache2 to terminate
This is achieved by telling killproc which PIDs to wait for.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Adolf Belka
238a47874f oci-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:41:33 +00:00
Adolf Belka
2841a67548 gcp-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:41:17 +00:00
Adolf Belka
3162b6ccfa exoscale-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:41:05 +00:00
Adolf Belka
1db5f96c5e azure-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:40:54 +00:00
Adolf Belka
eb0de6531c aws-setup: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:40:41 +00:00
Adolf Belka
9c28cd59c1 red: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot if an empty table is accessed.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:40:15 +00:00
Adolf Belka
e33ee46e62 static-routes: Fixes bug12763
- This ensures that all ip route and ip rule commands are redirected to null if the output
   is not used to feed into a variable.
- This will prevent any error messages related to empty iproute tables being displayed
   during boot.
- Tested on my vm system and confirmed that the fix in ipsec-interfaces stops the "FIB
   table does not exist" and "RTNETLINK answers: no such file or directory" messages during
   boot.

Fixes: Bug#12763
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 18:39:56 +00:00
Adolf Belka
4ed125ae66 sslh: Removal of sslh addon
- As discussed in the Dev conf call on 2024-Apr-08
- sslh has not been functioning since last update ion Sep 2021. Configuration syntax
   was radically changed somewhere in the update from 1.7a(2013) to 1.22c in Sep 2021
- removal of sslh from make file
- removal of lfs file
- removal of rootfile
- removal of paks files
- removal of initscript

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-19 06:06:37 +00:00
Stefan Schantl
b25236acf7 grub-btrfsd: Drop redundant used PIDFILE mechanism
This case is already covered by the PID mechanism of the used functions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-02 19:25:47 +00:00
Stefan Schantl
e348f67fa6 grub-btrfsd: Adjust displayed starting message
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-02 19:25:35 +00:00
Stefan Schantl
6da6f5dbe2 grub-btrfsd: Use generic volume_fs_type function for FS detection
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-02 19:25:15 +00:00
Stefan Schantl
ed91103e22 initscripts: Add generic function to get the filesystem type of a volume
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-02 19:25:00 +00:00
Arne Fitzenreiter
2d4f4ebfa2 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-31 13:36:08 +02:00
Michael Tremer
56d32cbe91 frr: Update reloading all services
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:14:37 +00:00
Michael Tremer
7c6b05dfb8 frr: Start the management daemon, too
This daemon is running the configuration validation and required to run
at all times.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-30 12:14:37 +00:00
Stefan Schantl
a6d5b71f2c grub-btrfs: New package
This kind of grub addon will extend the grub boot menu by a additional
submenu where a BTRFS snapshot can be selected to directly use as root
volume and boot into it.

The grub-btrfsd daemon is using inotify(tools) to watch the snapshot directory for
new or deleted snapshots and calls grub-mkconfig to adjust the snapshot grub submenu

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:36:17 +00:00
Arne Fitzenreiter
77bae935e6 cpufrequtils: remove cpufrequtils
the only file in the package is now the initskript to configre powersave mode using cpupower
which is shipped with the kernel.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-20 17:49:27 +01:00
Adolf Belka
cfb0ced3c4 wsdd: remove wsdd initscript as now covered by samba - fixes bug#13445
Fixes: bug#13445
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-19 11:13:59 +00:00
Adolf Belka
b1e521c8f1 samba: Integrate wsdd initscript into samba initscript - bug#13445
- This integrates the wsdd initscript functions into the samba initscript. When samba is
   started or stopped or the status requested then wsdd is part of that process.
- Tested in my vm testbed and confirmed to work for start, stop and status. Confirmed
   pid's shown with status command are in the appropriate pid files.

Fixes: bug#13445
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-19 11:13:59 +00:00
Michael Tremer
1c9dcaf976 Merge remote-tracking branch 'ms/initscripts' into next 2024-03-01 16:13:45 +00:00
Michael Tremer
bed265cc5a Merge remote-tracking branch 'ms/wsdd' into next 2024-02-28 16:44:06 +00:00
Arne Fitzenreiter
e56646a748 mpd: fix database path in initskript
i had forgotten this path after moving the database from
/var/ipfire/mpfire to /var/ipfire/mpd

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-02-25 09:49:10 +01:00
Arne Fitzenreiter
7275d72be3 cpufrequtils: hide output on disabled cores.
We disable cores if the are affected by some cpu vulnerabilities
this cores report errors if you try to change the settings.
So only print the output for core0 and hide it for all cores.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-02-18 11:38:29 +01:00
Arne Fitzenreiter
d36a58ef6b cpufrequtils: fix initskript for amd-pstate
the initskript loads a test-modul for amd-pstate (which traces on intel)
and off course reports errors if firmware settings are missing.

this also fix the error at start because also amd-pstate doesn't support
ondemand mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-02-16 16:17:47 +01:00
Michael Tremer
935da8b7a2 The IPFire time service has moved to time.ipfire.org
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-14 11:52:36 +00:00
Adolf Belka
37c5b4b62e firewall: Fixes bug12981 - add if loop to log or not log dropped hostile traffic
- This v3 version now has two if loops allowing logging of incoming drop hostile or
   outgoing drop hostile or both or neither.
- Dependent on the choice in optionsfw.cgi this loop will either log or not log the
   dropped hostile traffic.

Fixes: bug12981
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-07 11:02:17 +00:00
Michael Tremer
500b6311b4 collectd: Do not sync
Calling a global sync operation manually is generally a bad idea as it
can block for forever. If people have storage that does not retain
anything that is being written to it, they need to fix their hardware.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-01-31 10:30:27 +00:00
Arne Fitzenreiter
9786225a9b mympd: new addon to control mpd via WebGUI
myMPD is written in C and has a nice WebGUI to play
local music and also a WebRadio browser.
This is to replace the removec client175.

After install it can reached via
https://IP_OF_THE_IPFIRE:8800

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-01-29 16:02:42 +00:00
Erik Kapfer
e5a77641f3 Firewall initscript: Restore Tor IPTable rules by manual firewall restart
If the firewall will be manually restart via '/etc/init.d/firewall restart',
the IPTable rules for the Tor relay will be deleted since 'iptables_init' only
flushes and creates inbound and unbound chains for Tor but does not restore the
ruleset from Tor initscript.

For reference and tests please see -->
https://community.ipfire.org/t/tor-stop-working-without-stop-the-process-or-give-an-error-message/10697

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-01-19 16:37:44 +00:00
Michael Tremer
b87cd867f7 network: Only try to restart collectd if it is running
This updated version of this script avoids any errors if collectd is not
running (yet) which might happen during the boot process.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-01-19 16:37:24 +00:00
Michael Tremer
f2d7d4ec16 collectd: Restart is required after reconnect
The "ping" plugin does not re-resolve the gateway IP address after
pinging it for the first time. For most people this won't be a big
problem, but if the default gateway changes, the latency graph won't
work any more.

In order to do re-resolve "gateway", the only way is to restart
collectd.

Fixes: #13522
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
2024-01-14 16:04:03 +00:00
Michael Tremer
2ee8edb81a wsdd: Call it by its full name
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:18:46 +01:00
Michael Tremer
c082a0cc9a wsdd: Add a restart command
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:17:09 +01:00
Michael Tremer
bf3f602e05 wsdd: Create the chroot directory only on start
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:15:43 +01:00
Michael Tremer
06c2bfa3c4 wsdd: Compose the ARGS array only when we need it
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:15:13 +01:00
Michael Tremer
749b93c6e9 wsdd: Append --interface switches to the arguments array
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:14:11 +01:00
Michael Tremer
43c2dc9318 wsdd: Securely parse the workgroup name
Because of a single variable being passwd with the workgroup, it would
have been possible to inject shell commands here. Passing it in the
array prevents that.

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:11:53 +01:00
Michael Tremer
bb88fd1b69 wsdd: Collect static command line arguments in an array
This is easier to handle than a large number of variables.

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:10:04 +01:00
Michael Tremer
cf70bd231a wsdd: Use long options for clarity
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:07:04 +01:00
Michael Tremer
b95afd6aca wsdd: Reindent initscript
No spaces. Just tabs.

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:05:29 +01:00
Michael Tremer
5cf3bc3507 wsdd: Simplify starting/stopping and checking wsdd
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 16:02:29 +01:00
Adolf Belka
605217e96f wsdd: Install wsdd - fixes bug13445
- lfs and toorfile created for wsdd
- wsdd added to make.sh script
- created install/update/uninstall scripts for wsdd that create an unpriveleged user and
   group.
- initscript created for wsdd. As wsdd is a python3 script, when it is run as a daemon the
   pidof command does not find any pid for wsdd. So a directory/file for a pid file was
   created. This is then passed to the loadproc and killproc commands. After the loadproc
   command has been created the pid is extracted from the ps aux command and put into the
   pid file. This then works when running the killproc command for it to know what to go
   and stop. The statusproc command does not have the ability to feed in the pid from a
   pid file and so it fails to find a running wsdd as it uses the pidof command. Code was
   added to the status section of the initscript to check if the pid file exists and if so
   to print the same command as used with the statusproc command, and also the same
   wording if the pid file does not exist because wsdd is not running.
- info from the ethernet/settings file is used to identify if only green0 is available or
   if blue0 is also used and based on this the appropriate interface commands are added to
   the wsdd command.
- wsdd is also set up to run in a chroot
- Has been tested on my vm testbed, initially by editing the files on the vm clone. After
   everything confiremd to be working, the build was successfully carried out and the
   .ipfire package was copied to a new vm clone installed and shown to perform as expected.
   This test only confirms that wsdd is correctly installed and started. Shutsdown and
   restarts on reboot successfully. Confirmed from the ps aux info that wsdd has been
   started with the correct options. Thge testing can not evaluate if wsdd enables windows
   systems newer than version 7 top be able to detect the samba shares as I have no
   windows systems.

Fixes: Bug13445
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2024-01-11 16:00:58 +01:00
Michael Tremer
c3019331df initscripts: Implement storing PIDs in loadproc
Some programs do not write their own PID files any more, but since our
initscripts heavily rely on those, this extension allows to store it
easily.

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 15:59:34 +01:00
Michael Tremer
dd8ef8cc10 initscripts: Fix wrong variable check for $PIDFILE in getpids
getpids() checked whether it needed to pass a pid file to pidofproc, but
the check was inverted.

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
2024-01-11 15:57:50 +01:00
Arne Fitzenreiter
cb58d049e0 alsa: don't report failed module loads
this will stop pakfire if the kernel was updated before the alsa update.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-12-19 11:35:53 +01:00
Michael Tremer
ece94c7edf apache2: Properly re-execute Apache on restart
Previously, we sent Apache a signal to relaunch itself which caused
Apache to kill all child processes, and re-execute them.

However, when updating glibc, any newly compiled modules could not be
loaded as Apache was running with the previous version of glibc until
the next reboot.

This change will now properly stop Apache and restart it which solves
this problem.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-11-27 11:26:00 +00:00