Commit Graph

22343 Commits

Author SHA1 Message Date
Michael Tremer
d10fa6e64b Revert "exoscale-setup: Fixes bug12763"
This reverts commit 3162b6ccfa.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 10:01:11 +02:00
Michael Tremer
3bacd534a9 Revert "azure-setup: Fixes bug12763"
This reverts commit 1db5f96c5e.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 10:01:00 +02:00
Michael Tremer
d8c4aaddc3 Revert "aws-setup: Fixes bug12763"
This reverts commit eb0de6531c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 10:00:45 +02:00
Michael Tremer
b46314bf7a Revert "ip-up: Fixes bug12763"
This reverts commit 4f455c488e.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 10:00:34 +02:00
Michael Tremer
d258c7a47a Revert "red: Fixes bug12763"
This reverts commit 9c28cd59c1.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 10:00:23 +02:00
Michael Tremer
bafa45ed84 Revert "static-routes: Fixes bug12763"
This reverts commit e33ee46e62.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 10:00:11 +02:00
Michael Tremer
c522d8109d ipsec-interfaces: Don't throw away errors when creating routes
This partly reverts 87a97a4319.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-19 09:59:59 +02:00
Michael Tremer
adf8a243af dhcp: Explicitely compile with support for execute()
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-13 14:42:26 +00:00
Michael Tremer
c2a389e9d4 unbound-dhcp-leases-bridge: Remove unused functions and module imports
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:53:22 +01:00
Michael Tremer
1908e3d070 unbound-dhcp-leases-bridge: Make expiry check work for stub leases
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:51:41 +01:00
Michael Tremer
ae49f55359 unbound-dhcp-leases-bridge: Remove unused code
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:51:26 +01:00
Michael Tremer
dac4464e91 unbound-dhcp-leases-bridge: Don't parse any inactive leases
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:47:44 +01:00
Michael Tremer
b79c0fc4ff unbound-dhcp-leases-bridge: Drop parsing MAC addresses
We will represent the current state in DNS and we won't filter out
anything that we think might be no longer valid.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:46:45 +01:00
Michael Tremer
8628d3e8d0 unbound-dhcp-leases-bridge: Remove fixed leases cache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:40:27 +01:00
Michael Tremer
2e4432a8f5 unbound-dhcp-leases-bridge: Include traceback if the worker callback fails
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:36:40 +01:00
Michael Tremer
c2761068cc unbound-dhcp-leases-bridge: Log if a lease is not being added
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:31:25 +01:00
Michael Tremer
9ff53d5786 unbound-dhcp-leases-bridge: Remove leases to keep the store up to date
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:28:58 +01:00
Michael Tremer
8733b313de unbound-dhcp-leases-bridge: Skip updates if not necessary
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:25:13 +01:00
Michael Tremer
92e8358d46 unbound-dhcp-leases-bridge: Find existing leases to remove all data
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:20:30 +01:00
Michael Tremer
0e1ae247e7 unbound-dhcp-leases-bridge: Store leases in a globally accessible set()
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:16:13 +01:00
Michael Tremer
edcea3e1c9 unbound-dhcp-leases-bridge: Make Leases hashable and equal by IP address
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:07:23 +01:00
Michael Tremer
038c9db2bd unbound-dhcp-leases-bridge: Use IPv4Address to store IP addresses
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:04:43 +01:00
Michael Tremer
084795163e unbound-dhcp-leases-bridge: Implement a worker thread to handle all events
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 17:01:50 +01:00
Michael Tremer
d9348a16f1 unbound-dhcp-leases-bridge: Store all messages in a queue
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 16:32:07 +01:00
Michael Tremer
e4cc1eefd5 dhcp.cgi: Call the unbound-dhcp-leases-client for all events
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 16:07:05 +01:00
Michael Tremer
7397809eb4 unbound-dhcp-leases-client: A new script to send events to the bridge
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 16:06:23 +01:00
Michael Tremer
43f001cb5b unbound-dhcp-leases-bridge: Decode any incoming messages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 14:50:30 +01:00
Michael Tremer
bf352bbbcb unbound-dhcp-leases-bridge: Remove running indicator
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 14:31:53 +01:00
Michael Tremer
193638f078 unbound-dhcp-leases-bridge: Reload on SIGHUP
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 14:29:31 +01:00
Michael Tremer
716c69eee4 unbound-dhcp-leases-bridge: No longer listen to any changed files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 14:27:10 +01:00
Michael Tremer
b2787f168b unbound-dhcp-leases-bridge: Initialize at startup
When the process starts, we will now load all static hosts and leases
and reload Unbound to have a defined state to start with.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 14:25:53 +01:00
Michael Tremer
130606f039 unbound-dhcp-leases-bridge: Open a socket to listen for events
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 14:19:05 +01:00
Michael Tremer
72f4fccbe4 unbound-dhcp-leases-bridge: Terminate on SIGINT
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-05-10 14:18:12 +01:00
Arne Fitzenreiter
6158761b2f mympd: remove create config start
this now resets an existing option like the port to
default.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-10 12:42:29 +02:00
Arne Fitzenreiter
1330e280de kernel: update x86_64 rootfile
now the correct file

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-08 13:28:38 +02:00
Arne Fitzenreiter
b712270fb3 Revert "kernel: update x86_64 rootfile"
This reverts commit 7b68ef8515.

I have copied the rootfile over the config...
2024-05-08 13:27:24 +02:00
Arne Fitzenreiter
7b68ef8515 kernel: update x86_64 rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-08 06:19:30 +00:00
Adolf Belka
d3ea3e932f bacula: Update to version 13.0.4
- Update from version 11.0.6 to 13.0.4
- Update of rootfile
- Version 13.x has now been released for 12 months so updating the File Daemon to 13.x
   should be good.
- Version 11.x was released 40 months ago.
- Changelog
    The changes are all related to the Director and the Storage Daemon. The changelog states
    that older file daemons "should" be compatible with 13.x DIR & SD. This change ensures
    IPfire "is" compatible with the 13.x DIR & SD.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-07 05:51:18 +00:00
Adolf Belka
7cb0220f4a update.sh: Add SPAMHAUS_DROP if SPAMHAUS_EDROP was previously used
- I realised that the previous patch for update.sh related to the ipblocklist removal
   of ALIENVAULT and SPAMHAUS_EDROP only removed the SPAMHAUS_EDROP setting. It makes sense
   to add SPAMHAUS_DROP to the settings file if SPAMHAUS_EDROP was previously used and
   SPAMHAUS_DROP was not selected.
- This patch adds the above change.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-07 05:51:05 +00:00
Arne Fitzenreiter
0bb5687fb7 update contributors
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-07 07:04:41 +02:00
Arne Fitzenreiter
ae77ce8707 kernel: update aarch64 config and rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-07 07:03:38 +02:00
Arne Fitzenreiter
2eda35a51e kernel: update to 6.6.30
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-06 19:59:11 +02:00
Michael Tremer
69dde418f1 kernel: Enable XDP
https://lists.ipfire.org/hyperkitty/list/development@lists.ipfire.org/thread/S4GPL3OBFZ6LMA52JNLHIOPMNA5C3V6R/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-04 06:43:57 +00:00
Arne Fitzenreiter
8c6dd630eb kernel: update to 6.6.29
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-05-02 12:35:08 +02:00
Arne Fitzenreiter
c63ca5232f mympd: update to 14.1.2
This is a small bugfix release.
Changelog:

    Fix: Output enabled state is bool type
    Fix: Add missing sort parameters to home icon for search
    Fix: Set default stream port if stream uri is defined

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-30 07:00:25 +00:00
Peter Müller
464b2117ea suricata.yaml: Fix Landlock path settings
Suricata will complain if it cannot read its own configuration file,
hence read-only access to /etc/suricata must be allowed. Since the list
applies to directories, rather than files, restricting read access to
only /usr/share/misc/magic.mgc is not possible; reading /usr/share/misc
must be allowed instead.

Fixes: #13645
Tested-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-29 12:45:19 +00:00
Peter Müller
3358151c85 Revert "suricata: Disable Landlock support"
This reverts commit b7da97fd59.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-29 12:45:05 +00:00
Peter Müller
5fea15ef76 linux: Properly load Landlock module
Fixes: #13645
Tested-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-29 12:44:31 +00:00
Arne Fitzenreiter
eebce7d9a3 kmod: update rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 21:04:28 +00:00
Arne Fitzenreiter
1ce6219703 lynis: update rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 21:04:02 +00:00