Commit Graph

21639 Commits

Author SHA1 Message Date
Arne Fitzenreiter
e22ff3c71b core186: add brtfs related changes to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:40:56 +00:00
Stefan Schantl
a6d5b71f2c grub-btrfs: New package
This kind of grub addon will extend the grub boot menu by a additional
submenu where a BTRFS snapshot can be selected to directly use as root
volume and boot into it.

The grub-btrfsd daemon is using inotify(tools) to watch the snapshot directory for
new or deleted snapshots and calls grub-mkconfig to adjust the snapshot grub submenu

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:36:17 +00:00
Stefan Schantl
32d81fdc2e inotify-tools: New package
This package is required for the grub-btrfs daemon

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:36:02 +00:00
Stefan Schantl
ad73749dab installer: Pass choosen filesystem to hw_make_destination
This is required to proper choose if a seperate boot partition should be
created or must not created (BTRFS)

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:35:43 +00:00
Stefan Schantl
15be1e1b9f installer: Add code to correctly write the fstab when installing on BTRFS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:35:15 +00:00
Stefan Schantl
2a98139628 installer: Add code to proper unmount the BTRFS layout
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:35:03 +00:00
Stefan Schantl
a9963bf035 installer: Define common mount options for BTRFS volumes
As default we are using zstd for compression with level 1

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:49 +00:00
Stefan Schantl
e7740eaf94 installer: Mount BTRFS layout before installing the system
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:37 +00:00
Stefan Schantl
8e3b022a83 installer: Allow writing to the debug console from anywhere
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:27 +00:00
Stefan Schantl
e0a7cdd86f installer: Add recurisve mkdir function
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:16 +00:00
Stefan Schantl
0465449e42 installer: Add code to create a BTRFS subvolume layout
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:34:07 +00:00
Stefan Schantl
58a46f0bc2 installer: Disable own boot partition when using BTRFS
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:58 +00:00
Stefan Schantl
fbeac0960a installer: Ensure to always create the /boot directory.
Ensure to always create the /boot directory during the mounting
of the various created file systems. If the /boot directory does not
exist some following mount operations could not be performed correctly
and the installation/mounting will fail.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:49 +00:00
Stefan Schantl
4305e02d79 dracut: Ship BTRFS related modules
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:40 +00:00
Stefan Schantl
130815d3f1 installer: Allow to install IPFire on BTRFS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:30 +00:00
Stefan Schantl
09bb459edb btrfs-progs: New package
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-26 07:33:12 +00:00
Arne Fitzenreiter
4f6f5e6844 Merge remote-tracking branch 'origin/master' into next 2024-03-26 07:28:20 +00:00
Adolf Belka
2e94953dd4 shadow: Update login.defs to remove reference to cracklib
- From shadow-15.0.0 all references to cracklib were removed from shadow. Apparently
   some functions were no longer accessible and the shadow team decided to remove cracklib
   references completely. This was not mentioned in the changelkog for 15.0.0
- This resulkts in gettinbg the message configuration error - unknown item
   'CRACKKLIB_DICTPATH' ( notify administrator ) when logging in to the console.
- The login to the console occurs successfully so the message is only a warning that
   cracklib is no longer used.
- IPfire does not use cracklkib anyway so this patch removes the section referring to
   cracklib from the login.defs configuration file.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-25 15:59:56 +00:00
Adolf Belka
cb0488997b samba: Add wsdd as a dependency to samba
- Add wsdd as a dependency to samba so it will be installed together with samba

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-25 11:27:52 +00:00
Arne Fitzenreiter
46a9e7a0a4 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-24 08:48:51 +01:00
Adolf Belka
08b7500b26 CU185-update.sh: Add drop hostile in & out logging entries if not already present
- This patch ensures that those people who updated to CU184 before the CU184-update.sh
   patch fix to add the logging entries was added will get their optionsfw settings file
   correctly updated with CU185
- This only adds the LOGDROPHOSTILEIN & LOGDROPHOSTILEOUT entries if they do noit already
   exist in the optionsfw settings file.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-22 16:17:50 +00:00
Stefan Schantl
ad0d064a48 ids.cgi: Improve add provider logic
Do not longer add unsupported/removed providers as an option
when adding a new/first ruleset provider.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-22 15:30:22 +00:00
Michael Tremer
4e8225a778 core185: Ship IPS files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-22 15:29:22 +00:00
Stefan Schantl
cf6eaba833 ids.cgi: Adjust code for marking unsupported providers
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-22 15:18:41 +00:00
Stefan Schantl
563e4a4298 ruleset-sources: Restore generic details about recently dropped providers
At least these informations are required to display something usefull
on the webgui, even if a provider has been dropped.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-22 15:18:41 +00:00
Stefan Schantl
0842e694a6 update-ids-ruleset: Disable provider if not dl_url can be obtained
Unsupported/Removed provides does not longer have these information

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-22 15:18:41 +00:00
Stefan Schantl
df7977fde7 ids.cgi: Change check if a provider is not longer supported
This check is now based on a download URL instead of checking if
an entry in the ruleset sources is present.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-22 15:18:41 +00:00
Stefan Schantl
738ee72027 ids-functions.pl: Improve logic to get the cached rulesfile of a provider
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-22 15:18:41 +00:00
Arne Fitzenreiter
6581c6e3a6 kernel: update aarch64 rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-22 11:58:49 +01:00
Arne Fitzenreiter
790c04a6ea core186: start update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-22 06:39:34 +01:00
Arne Fitzenreiter
24d23a7053 vulnerabilities.cgi: add RFDS (CVE-2ß23-28746) to list
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-21 19:13:45 +01:00
Arne Fitzenreiter
28796e09e5 kernel: update to 6.6.22
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-21 19:10:10 +01:00
Michael Tremer
0564584a58 core185: Ship IPS ruleset sources
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-21 14:56:41 +00:00
Arne Fitzenreiter
77bae935e6 cpufrequtils: remove cpufrequtils
the only file in the package is now the initskript to configre powersave mode using cpupower
which is shipped with the kernel.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-20 17:49:27 +01:00
Arne Fitzenreiter
81986d40a9 kernel: build cpupower
cpupower replace the function of cpufrequtils which is not updated since years.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-20 17:49:27 +01:00
Michael Tremer
08d869d54f suricata: Update to 7.0.4
https://suricata.io/2024/03/19/suricata-7-0-4-and-6-0-17-released/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-20 10:03:51 +00:00
Michael Tremer
5e9fd833e6 core185: Ship libhtp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-20 10:01:13 +00:00
Michael Tremer
d4f66c22a8 libhtp: Update to 0.5.47
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-20 10:00:51 +00:00
Michael Tremer
3396c74303 Config: Update source upload URL
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-20 09:56:14 +00:00
Michael Tremer
5552f51de0 wsdd: Remove dropped initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-19 11:14:42 +00:00
Adolf Belka
4913c14477 wsdd: Update install and uninstall pak files
- As wsdd is now started by samba when it is started then the wsdd install and uninstall
   paks no longer need to create the symlinks for starting and stopping wsdd and no longer
   need the start_service and stop_service commands in the paks.

Fixes: bug#13445
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-19 11:13:59 +00:00
Adolf Belka
6e600296bb wsdd: Update of lfs file - fixes bug#13445
- Removal of services line as wsdd will now be started by the samba option in the addon
   services wui page
- Removal of installing separate wsdd initscript as it is nowe integrated into the samba
   initscript.

Fixes: bug#13445
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-19 11:13:59 +00:00
Adolf Belka
cfb0ced3c4 wsdd: remove wsdd initscript as now covered by samba - fixes bug#13445
Fixes: bug#13445
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-19 11:13:59 +00:00
Adolf Belka
b1e521c8f1 samba: Integrate wsdd initscript into samba initscript - bug#13445
- This integrates the wsdd initscript functions into the samba initscript. When samba is
   started or stopped or the status requested then wsdd is part of that process.
- Tested in my vm testbed and confirmed to work for start, stop and status. Confirmed
   pid's shown with status command are in the appropriate pid files.

Fixes: bug#13445
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-19 11:13:59 +00:00
Michael Tremer
896ae6eaac core185: Ship ppp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-19 11:10:19 +00:00
Adolf Belka
c11817a12d ppp: Update to include bug fixes that should be in 2.5.1 but not yet released
- Update from version 2.5.0 to commit e1266c7
- Update of rootfile
- When ppp-2.5.0 was released it had a bug bin it that the lock and run directories
   had non standard defaults but also that if the directory did not exist ppp just
   ignored it and continued to start but would then have error messages in the logs about
   not being able to cretae the lock file
- This issue was raised in the ppp github issues and a set of patches merged into ppp.
- The plan was written in Nov 2023 that this would be released as 2.5.1, however nearly
   three months later there is no sight of 2.5.1 being released and people continue to
   flag up the lock directory issues and have to apply a workaround to create the directory
   in local.rc
- This patch has taken the zip source tarball of master at the commit e1266c7. The zip
   tarball was then extracted and then tar'd back up as a tar.gz file with the version set
   at e1266c7 rather than master. I could not find any other way to get a source tarball\
   created at a certain commit stage.
- The patch ppp-2.5.0-2-everywhere-O_CLOEXEC-harder.patch had to be updated due to some
   changes in the source files.
- The patch ppp-2.5.0-7-add-configure-check-to-see-if-we-have-struct-sockaddr_ll.patch
   was removed as the changes are now built into the source tarball.
- This will need to be tested thoroughly by people with ppp to confirm that the lock
   directory is created if it doesn't exist on the system. I can't test that as I have
   no access to a ppp connection system.
- For a view of the changelog between 2.5.0 and e1266c7 the github commits list needs to
   be reviewed. https://github.com/ppp-project/ppp/commits/master/?before=e1266c76d1ad39f98f11676e34f180f78c5a510c+35

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-19 11:09:15 +00:00
Michael Tremer
bd8cc16ffd make.sh: Update contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-18 16:17:53 +00:00
Matthias Fischer
4e57a4f31a unbound: Update to 1.19.3
For details see:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-19-3

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-18 10:15:49 +00:00
Michael Tremer
2182e2d7f7 Merge branch 'master' into next 2024-03-18 10:14:50 +00:00
Adolf Belka
68c3cfd0be CU184-update.sh: Add drop hostile in & out logging entries
- My drop hostile patch set updated the WUI entries to include in and out logging options
   but the values need to be added to the optionsfw entries for existing systems being
   upgraded.
- After the existing CU184 update the LOGDROPHOSTILEIN and LOGDROPHO)STILEOUT entries
   are not in the settings file which trewats them as being set to off, even though they
   are enabled in the WUI update.
- This patch adds the LOGDROPHOSTILEIN and LOGDROPHOSTILEOUT entries into the settings
   file and then runs the firewallctrl command to apply to the firewall.
- Ran a CU184 update on a CU183 vm system and then ran the comands added into the update.sh
   script and then did a reboot. Entries include and DROP_HOSTILE entries start to be
   logged again.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-18 10:14:24 +00:00