Commit Graph

3669 Commits

Author SHA1 Message Date
Arne Fitzenreiter
f23b046318 unbound: try resolve twice before time sync with ipfire server
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-03 17:40:55 +00:00
Arne Fitzenreiter
f5fe5f47a1 unbound: add returncode to resolve function
this is used for time fix check.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-02 13:40:32 +00:00
Michael Tremer
c3ae88cab9 PPP: Always fetch DNS servers from provider
We will later decide whether we want to use them or not

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-31 10:06:34 +00:00
Arne Fitzenreiter
c75fd8c8c5 convert-dns-settings: add ppp/settings to list of converted files
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-30 12:22:37 +00:00
Michael Tremer
8729316513 convert-dns-settings: Explicitely enable using ISP name servers
The unbound initscript checks if this parameter is on.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-29 11:52:02 +01:00
Arne Fitzenreiter
15e3419434 convert-dns-settings: remove DNS settings also if no server config is generated
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 20:31:22 +00:00
Arne Fitzenreiter
3ee6ac9dad convert-dns-settings: Remove DNS variable from PPP profiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 19:38:16 +00:00
Arne Fitzenreiter
5d6ccc7a43 convert-dns-settings: Refactor reading old configuration
This patch makes the code a lot shorter by removing special
cases for all sorts of files when they can all be treaded
equally.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 19:34:56 +00:00
Arne Fitzenreiter
d3236de23a convert-dns-settings: Fix call for chmod
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 19:19:06 +00:00
Stefan Schantl
358bcfdb29 convert-dns-settings: Fix check to prevent doubble-adding the same server
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-28 15:38:36 +00:00
Arne Fitzenreiter
a83bcf914c networking/red: wait only for carrier if device exists
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-25 22:22:26 +01:00
Arne Fitzenreiter
8c0ab3d471 filesystem-cleanup: fix "fixed space" type
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-25 15:05:38 +00:00
Arne Fitzenreiter
45e1202d27 filesystem-cleanup: add /usr/lib/sse2 folder
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-24 19:18:15 +01:00
Stefan Schantl
ab4ef40f2b unbound: Use recursor mode if no nameservers are configured
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-21 19:32:34 +00:00
Michael Tremer
26eab1fe3e azure: Abort script when no instance ID can be retrieved
We cannot reliably determine if a system is running on Hyper-V
on a private server or on the Azure Cloud.

Therefore, we will have to try to retrieve an IP address
with DHCP and try to connect to the metadata service. If either
of those things is not successful, we will just continue with
the setup process as usual.

So cloud instances should be automatically configured now and
all other systems will continue to boot and call the setup
wizard as usual.

Fixes: #12272
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-21 19:32:07 +00:00
Michael Tremer
f770492902 cloud-init: Remove importing DNS settings
Those scripts used to import settings from the meta-data services
and wrote them to the local configuration files.

For the DNS settings and Amazon, this is no longer possible because
their DNS servers do not support DNSSEC at all. Therefore we default
to recursor mode.

To be consistent across cloud providers, we are doing the same for
Azure.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-19 16:37:03 +00:00
Michael Tremer
c07c3e47f1 modules: Cleanup file
This file has an unsed line for the "fusion" module which
is no longer needed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-19 16:36:59 +00:00
Michael Tremer
a8d1621299 modules: No longer load parallel port modules
These modules are loaded by default on all systems.

They are simply a waste of space since not many systems
have parallel ports any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-19 16:36:54 +00:00
Michael Tremer
e403fa6ad9 setup: Do not check DNS settings any more
It has been removed that DNS servers could be configured in
setup, but I forgot to remove a check which leads to new
installations not being able to complete the setup wizard.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-19 15:34:45 +00:00
Stefan Schantl
dcc655efb8 convert-dns-settings: Import all possible PPP dialin profiles.
* Avoid from adding the same imported DNS server multiple times.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-19 12:24:23 +00:00
Arne Fitzenreiter
97f4b51474 partresize: NanoPi R1: copy also a0 config of Ampac AP6212
there is a second hardware version of the AP6212 in some NanoPi R1
boards.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-17 11:26:10 +01:00
Michael Tremer
8893881160 lvm2: Add initscript for lvmetad
This daemon needs to be launched in order to use LVM
devices in IPFire.

It will run on all installations after this patch has been
merged but only consumes very little memory.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-16 18:23:30 +00:00
Arne Fitzenreiter
3a380f87c7 Revert "Introduce update-location-database script."
This reverts commit 93a985cc05.
2020-01-15 17:15:25 +00:00
Arne Fitzenreiter
cb1c8f108f set version in backupiso and also pakfire core to 140
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-14 21:10:15 +00:00
Arne Fitzenreiter
61cc563558 Merge remote-tracking branch 'ms/next-dns-ng' into next 2020-01-13 21:42:49 +00:00
Daniel Weismüller
1475bc53a4 filesystem-cleanup: Add parameter to show changes
Use --dry-run to only show files that would be deleted, but do
not actually delete them.

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-13 21:36:06 +00:00
Michael Tremer
97756e2124 filesystem-cleanup: Automatically remove old libraries
This script runs through /usr/lib and /lib and tries to find
all libraries which are no longer being used and more and
deletes them.

This will help us to free space on root partitions that
are limited to 2GB.

However, the script does not cover 100% of the cases, so that
some files still need to be deleted manually (e.g. boost with
their weird versioning schema).

This script should be executed after a Core Update has been
installed.

Fixes: #12270
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-13 21:35:37 +00:00
Michael Tremer
7be4822f3d unbound: Make dhcp-leases.conf readable for everyone
unbound runs as nobody and cannot reload its configuration
when this file is only readable for root.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-13 21:43:27 +01:00
Michael Tremer
04b7a78140 unbound: Do not reset safe search again
This is now done in the reload stage and we do not need to
take care about it again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-13 21:25:10 +01:00
Michael Tremer
ebc14e8db2 unbound: Drop some unused variables
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-13 21:20:32 +01:00
Michael Tremer
24a694d425 unbound: Drop function to reload forwarders on the fly
This is now being done by updating and re-reading forward.conf.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-13 21:19:22 +01:00
Michael Tremer
6137797cb3 unbound: Write hosts to unbound configuration file
This will allow us to read more hosts in a shorter time.

Fixes: #11743
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-13 21:10:18 +01:00
Michael Tremer
903247fef8 unbound: There is no need to rewrite tuning.conf
The number of CPU cores and memory normally does not change

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-13 20:55:59 +01:00
Michael Tremer
f59bc0c55d unbound: Reload own hostname, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-13 20:55:32 +01:00
Michael Tremer
6e61f357fb setup: Remove DNS settings
This is no longer required since we have a new CGI script
that takes care of all DNS settings and stores things in
another format.

Fixes: #12235
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2020-01-13 17:29:27 +01:00
Michael Tremer
44cc9a3d57 amazon-ssm-agent: New package
AWS Systems Manager Agent (SSM Agent) is Amazon software that can be
installed and configured on an Amazon EC2 instance, an on-premises
server, or a virtual machine (VM). SSM Agent makes it possible for
Systems Manager to update, manage, and configure these resources. The
agent processes requests from the Systems Manager service in the AWS
Cloud, and then runs them as specified in the request. SSM Agent then
sends status and execution information back to the Systems Manager
service by using the Amazon Message Delivery Service.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-01-11 20:33:36 +00:00
Stefan Schantl
0c1094770a initscripts/unbound: Add support for reload the service
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2020-01-11 19:36:29 +01:00
Stefan Schantl
bdb1f38a07 unboundctrl: Add support for calling reload.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2020-01-11 19:35:24 +01:00
Stefan Schantl
c73baee1f0 convert-dns-settings: Set correct ownership after convert is done.
Otherwise it may happen, that the created config files have wrong
permissions and the WUI will break.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2020-01-10 09:29:47 +01:00
Michael Tremer
beebf925c3 unbound: Implement setting qname minimisation into strict mode
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 16:32:35 +00:00
Michael Tremer
a33489a7aa unbound: Try to set time when DNS is not working
Since DNSSEC relies on time to validate its signatures,
a common problem is that some systems (usually those without
a working RTC) are not being able to reach their time server.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 16:24:35 +00:00
Michael Tremer
a32fd634ce unbound: Do not update the forwarders when we are running in TLS mode
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 16:02:14 +00:00
Michael Tremer
4b26aac625 unbound: Read configuration globally
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 15:28:21 +00:00
Michael Tremer
2654c66945 unbound: Update forwarders when system connects/disconnects
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 15:21:59 +00:00
Michael Tremer
54898bc6c1 unbound: Update setting Safe Search redirects
When the system comes online, we must update entries
in the unbound cache to point to the "safe" IP addresses.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 15:03:56 +00:00
Michael Tremer
1434fa0df5 DNS: Write name servers received from ISP to /var/run/dns{1,2}
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 13:35:45 +00:00
Michael Tremer
4e2d3325af unbound: Drop live checks
Those checks have caused us a lot of trouble and are now being dropped.

Users must make sure to choose servers that support DNSSEC or enable
any of the tunneling mechanisms to be able to reach them.

Fixes: #12239
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 13:11:38 +00:00
Michael Tremer
ee90aa9858 unbound: No longer read old configuration file
The old configuration file in /etc/sysconfig/unbound is no
longer being used and all settings should be in
/var/ipfire/dns/settings.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 12:58:28 +00:00
Michael Tremer
50005ad1d4 unbound: Write upstream name servers to forward.conf
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 12:55:35 +00:00
Michael Tremer
94a51c64bb unbound: Remove test-name-server command
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-01-07 11:18:41 +00:00