Commit Graph

2924 Commits

Author SHA1 Message Date
Matthias Fischer
11073720a2 squid: Update to 3.5.22
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-12 22:40:42 +01:00
Michael Tremer
1b4d5ad9af unbound: Move "listen on all" to main configuration file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-12 22:37:26 +01:00
Arne Fitzenreiter
d221f41fbe unbound: bind to all interfaces
this allow to add interfaces without restart unbound.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-12 22:43:21 +02:00
Arne Fitzenreiter
3a6752d928 setup: restart unbound after network config change
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-12 22:39:41 +02:00
Arne Fitzenreiter
f824cd285b setclock: accept also empty logfile timestamp
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-09 12:10:15 +02:00
Arne Fitzenreiter
0807ce69ee setclock: prevent time bacjump by empty rtc batteries
This is a work around to prevent not working dns
resolution if the time jumps before the DNSSec signing key.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-08 15:43:54 +02:00
Arne Fitzenreiter
0d7ca700bd unbound: skip green interface if ip was set to 1.1.1.1
this is a reserved marker for unused green ip.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-07 11:27:33 +02:00
Michael Tremer
eef9b2529c setup: Store passwords in SHA format
htpasswd doesn't protect passwords very well. MD5 was used
before and now any newly created passwords will use the
SHA format.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-04 22:41:48 +01:00
Arne Fitzenreiter
a48a2034f5 unbound: fix update forwarders if unbound was not running
psgrep has no "-q" switch so i use pidof.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-04 19:24:26 +02:00
Arne Fitzenreiter
f75c279b97 unbound: fix reverse lockup of webif defined hosts
and make the own host resolveable.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-03 17:53:13 +02:00
Arne Fitzenreiter
642b831b72 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-10-02 16:36:57 +02:00
Arne Fitzenreiter
e24d6112bb index.cgi: display unbound dns servers
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-02 16:35:50 +02:00
Michael Tremer
5edc06b701 Remove IPAC stuff
This is unused for a very very very long time and serves
no purpose any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-02 15:13:55 +01:00
Arne Fitzenreiter
cc60329d88 Add search domain to /etc/resolv.conf at boot time
unbound does not append the local domain to the request
any more (like dnsmasq did). Therefore, the client needs
to do that if desired.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-02 15:32:14 +02:00
Arne Fitzenreiter
b29c97b168 unbound: Test upstream name servers before using
unbound has some trouble with validating DNSSEC-enabled
domains when the upstream name server is stripping signatures
from the authoritative responses.

This script now checks that, removes any broken upstream
name servers from the list and prints a warning.

If all name servers fail the test, unbound falls back
into recursor mode.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-02 15:25:23 +02:00
Michael Tremer
80bc60228b unbound: Print nicer error message when already running
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-01 18:55:23 +01:00
Michael Tremer
46d8d50f45 unbound: Start unbound when invoked by DHCP scripts
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-01 18:52:07 +01:00
Michael Tremer
da31472505 shadow-utils: Create standard set of configuration files
Previously we copied the default configuration from the upstream
package and modified that. Unfortunately a patch and a sed command
changed the file which resulted in unwanted changes.

This patch removes the patch and sed command and adds a new set
of configuration files that just need to be copied to the system.

Fixes #11195

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-01 18:42:18 +01:00
Arne Fitzenreiter
829435bea3 ntp: fix wait for red if dhcp or wpasupplicant is running.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-09-27 20:15:53 +02:00
Jonatan Schlag
4141e0aad1 Update krb5 to 1.14.4
This commit updates krb5 to version 1.14.4
The patch is removed, because he is upstream since 1.12.2.
The samba version is incremented, to link samba against the new krb5
version. Otherwise samba for example is linked against
/usr/lib/libkdb5.so.7 but the current version is /usr/lib/libkdb5.so.8

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-26 14:42:08 +01:00
Marcel Lorenz
1031bcee20 iproute2: update to 4.7.0
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-24 13:11:30 +01:00
Michael Tremer
8029c2a899 strongswan: Update to 5.5.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-22 14:47:47 +01:00
Michael Tremer
36792be6ce DNS: Import local hosts into unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 20:46:02 +01:00
Michael Tremer
6f5d8f0cce Start unbound+DHCP bridge only when DHCP server is running
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 20:36:51 +01:00
Matthias Fischer
a80606ecb5 squid: Update to 3.5.21
For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID_3_5_21.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-12 11:06:48 +01:00
Michael Tremer
5fba8a0b1e Merge branch 'unbound' into next 2016-09-08 19:50:45 +01:00
Michael Tremer
b658a451fb unbound: Automatically scale configuration to system
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-08 19:46:43 +01:00
Jonatan Schlag
3943a54036 Libvirt: Fix update.sh script
The virtlogd could only be restarted when the daemons run. The update.sh
script tried to restart the daemon no matter if the daemons run or not.
This behaviour produce problems.

An If statement now checks if the daemon runs or not and execute the
command that is suitable for the situation.

Fixes: #11172

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-05 17:05:32 +01:00
Jonatan Schlag
d996e17ab8 Update libvirt to 2.1
This is the update of libvirt to the latest version 2.1.
The most important change from a packager view is the new virtlogd
daemon.
This daemon handles the qemu output and wrote it to log files.

The require some changes:
- A new init script to start, stop restart the daemon called virtlogd.
The daemon is restart with SIGUSR1 (this is important because the daemon
keeps all pipelines etc. open).

This introduces a problem with the uninstall.sh install.sh script.
It is not possible to stop the daemon while virtual machines are
running, so the script update.sh execute from now not uninstall.sh and
install.sh instead it contains all steps from uninstall.sh install.sh
expect the start / stop routine for virtlogd. The daemon is just
restarted after the update, which makes sure that all changes take
effect.

- new symlinks in the uninstall.sh and install.sh script and some root
file changes because of the new virtlogd init script.
- the archive format changes from tar.gz to tar.xz

For Changelogs see:

https://libvirt.org/news-2015.html
https://libvirt.org/news.html (2017 and later:
https://libvirt.org/news-2016.html )

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-31 22:40:35 +01:00
Matthias Fischer
5e358816c5 dnsmasq 2.76: latest patches (015-016)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-23 13:05:42 -04:00
Arne Fitzenreiter
71434e5b4a Merge branch 'core104' into next 2016-08-22 07:26:37 +02:00
Matthias Fischer
53aad60d6f smartmontools: Update to 6.5
For details, see:
https://www.smartmontools.org/browser/tags/RELEASE_6_5/smartmontools/NEWS

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:50:42 -04:00
Matthias Fischer
d8efad249a squid: Update to 3.5.20 with latest patches (14067-14075)
For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Since there were problems with "trailing white spaces" I started a new 'squid_3'
branch from scratch, based on current 'next'.
I hope this is what is needed and that it helps.

This one was built without errors and is running here without seen problems.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-21 21:45:17 -04:00
Arne Fitzenreiter
69f3684cf5 kernel: fix grsecurity patch.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-21 22:40:12 +02:00
Arne Fitzenreiter
2a78041a3f kernel: update arm-multi grsec compile fix patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-18 22:35:43 +02:00
Arne Fitzenreiter
0c29a8ab58 kernel: add hyper-v: mark tsc unstable patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-08-17 20:37:07 +02:00
Jonatan Schlag
6bc2225a5d Libvirt: load vhost_net before libvirtd start.
If the  kernel module vhot_net is loaded, the performance of virtio
networking is better then without vhost_net.
So the module is loaded before libvirtd ist started to get the benefit
of vhost_net.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-15 11:01:34 +01:00
Matthias Fischer
bf8378e4b7 dnsmasq 2.76: latest patches (013-014)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-07 15:05:26 +01:00
Michael Tremer
1b4f2493a5 unbound: Update dynamically configured DNS servers after connecting RED
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:41:27 +01:00
Michael Tremer
df7340d2f3 Add unboundctrl
Control binary to relaunch unbound from the web user interface

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:34:39 +01:00
Michael Tremer
61b4250af5 Drop dnsmasq
This will be replaced by unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:25:48 +01:00
Michael Tremer
b8f5eda86b unbound: Rewrite configuration and initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:20:27 +01:00
Marcel Lorenz
d0e5f71f77 New package: unbound 1.5.9
Unbound is a validating, recursive, and caching DNS resolver.

https://www.unbound.net

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-05 13:29:09 +01:00
Jonatan Schlag
1cd62a8d3d Libvirt: Remove delay from start command in install.sh
Fixes: #11152

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-03 11:42:24 +01:00
Matthias Fischer
c3afb9c65d dnsmasq 2.76: latest patches from upstream (010-012)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-02 16:07:42 +01:00
Jonatan Schlag
3a4a8b055b Libvirt: Add backup
The directory /etc/libvirt is backed up on uninstallation  and is
restored on installation.

Alle Files in  /var are commented in the rootfile so they are not
removed on uninstallation.
Because of the fact that the directories are not shipped with the
package they were created at installation time.
The permissions of 3 directories are changed because the qemu user is
nobody and the qemu group is kvm, so the permissions must be nobody:kvm

Fixes: #11151

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-02 16:07:33 +01:00
Stefan Schantl
dcb6493a0c initscripts: Drop guardian related code from snort initscript.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:29:13 +02:00
Stefan Schantl
a11aaa91b3 guardian: Update to 2.0.
Update guardian to the re-written version.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Michael Tremer
0c265f5717 nginx: Update to 1.8.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-29 09:04:04 +01:00
Arne Fitzenreiter
de2ee80d4f kernel: update arm buildfix patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-29 07:18:37 +02:00