Development January 2022

development@lists.ipfire.org

14 participants
58 discussions

Keep trying DHCP on red0 if unavailable at boot
by Brad Spencer 14 Jan '22

14 Jan '22

I had a failure today on my new ipfire installation that didn't survive the same kind of outage that my hand-made Debian-based firewall box had survived many times in the past: a power failure and restoration. In the community pages, I picked up an existing discussion and discussed the scenario in detail. I won't repeat that discussion here, but it was suggested that I post to this list and work towards an upstream change. https://community.ipfire.org/t/dhcp-client-on-red0-wont-reassign-ip-upon-re… I won't repeat all the details of how I discovered this, but allow me to summarize the small changes I made. (See the community post and followups there for full details.) Basically, when ipfire boots and DHCP on red doesn't provide an address, dhcpcd times out after 60 seconds and then stops trying and nothing makes it try again. This leaves the green network up (good!) but the red network completely dead until someone reboots ipfire (or takes some other steps that re-trigger a start of dhcpcd). My simple repair so far has been: 1. Edit /etc/init.d/networking/functions.network to start dhcpcd in the background with no timeout. --- /root/functions.network.orig 2022-01-08 16:26:02.956856033 -0400 +++ functions.network 2022-01-08 21:07:28.617170885 -0400 @@ -56,7 +56,7 @@ # This function will start a dhcpcd on a speciefied device. local device="$1" - local dhcp_start="" + local dhcp_start="--timeout 0 --background " boot_mesg -n "Starting dhcpcd on the ${device} interface..." (Be sure to include that last space inside the quotes!) 2. For my testing, I also set ntp's ENABLESETONBOOT in /var/ipfire/time/settings to off (aka “Force setting the system clock on boot”) because it sits in a loop waiting for red0 to come up otherwise! At the time, I didn't notice that the loop in /etc/init.d/ntp stops after a minute, but nonetheless, it was handy to turn it off while testing :) So, I _think_ only the first change is necessary. All of the testing I did so far seems to indicate that, provided I don't have rules that explicitly mention the red0 IP address, all works well when the lease is acquired, or even when the lease changes the IP unexpectedly. Is a change like this something that could become part of ipfire? Thanks for making ipfire! I'm impressed so far. -- Brad Spencer

5 5

[PATCH] URL Filter: Remove Shalla Secure Services and MESD
by Michael Tremer 13 Jan '22

13 Jan '22

Shallalist is no longer available because of personal reasons. MESD is unreachable and I am just assuming that it is dead, too. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/urlfilter/autoupdate.urls | 2 -- 1 file changed, 2 deletions(-) diff --git a/config/urlfilter/autoupdate.urls b/config/urlfilter/autoupdate.urls index fbf0d29be..db99501f8 100644 --- a/config/urlfilter/autoupdate.urls +++ b/config/urlfilter/autoupdate.urls @@ -1,3 +1 @@ -Shalla Secure Services,http://www.shallalist.de/Downloads/shallalist.tar.gz -MESD,http://squidguard.mesd.k12.or.us/blacklists.tgz Univ. Toulouse,ftp://ftp.univ-tlse1.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz -- 2.30.2

1 0

[PATCH] libvirt: Update to version 7.10.0
by Adolf Belka 13 Jan '22

13 Jan '22

- Update from 6.5.0 to 7.10.0 (17 releases between these versions) - Update of rootfile - Update of patch as source file contents changed enough that old patch failed to work - Build changed to meson/ninja as autotools option has been removed - Most of the existing options were available as meson options - look in meson_options.txt file in the source tarball. Three options were not available with meson --with-virtualport --with-macvtap --without-dbus - Changelog is too large to include here (~1200 lines) but the detail can be seen in the NEWS.rst file in the source tarball. Many bug fixes identified in the changelog Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/libvirt | 359 ++++-------------- lfs/libvirt | 72 ++-- ...ehavior-of-libvirt-guests.sh-for-IPF.patch | 33 +- 3 files changed, 110 insertions(+), 354 deletions(-) diff --git a/config/rootfiles/packages/libvirt b/config/rootfiles/packages/libvirt index 1c531b820..b6f639901 100644 --- a/config/rootfiles/packages/libvirt +++ b/config/rootfiles/packages/libvirt @@ -6,8 +6,12 @@ etc/libvirt/libvirtd.conf #etc/libvirt/nwfilter/allow-arp.xml #etc/libvirt/nwfilter/allow-dhcp-server.xml #etc/libvirt/nwfilter/allow-dhcp.xml +#etc/libvirt/nwfilter/allow-dhcpv6-server.xml +#etc/libvirt/nwfilter/allow-dhcpv6.xml #etc/libvirt/nwfilter/allow-incoming-ipv4.xml +#etc/libvirt/nwfilter/allow-incoming-ipv6.xml #etc/libvirt/nwfilter/allow-ipv4.xml +#etc/libvirt/nwfilter/allow-ipv6.xml #etc/libvirt/nwfilter/clean-traffic-gateway.xml #etc/libvirt/nwfilter/clean-traffic.xml #etc/libvirt/nwfilter/no-arp-ip-spoofing.xml @@ -15,6 +19,8 @@ etc/libvirt/libvirtd.conf #etc/libvirt/nwfilter/no-arp-spoofing.xml #etc/libvirt/nwfilter/no-ip-multicast.xml #etc/libvirt/nwfilter/no-ip-spoofing.xml +#etc/libvirt/nwfilter/no-ipv6-multicast.xml +#etc/libvirt/nwfilter/no-ipv6-spoofing.xml #etc/libvirt/nwfilter/no-mac-broadcast.xml #etc/libvirt/nwfilter/no-mac-spoofing.xml #etc/libvirt/nwfilter/no-other-l2-traffic.xml @@ -24,6 +30,7 @@ etc/libvirt/libvirtd.conf etc/libvirt/qemu-lockd.conf etc/libvirt/qemu.conf etc/libvirt/virt-login-shell.conf +etc/libvirt/virtchd.conf etc/libvirt/virtinterfaced.conf etc/libvirt/virtlockd.conf etc/libvirt/virtlogd.conf @@ -44,8 +51,10 @@ usr/bin/virsh usr/bin/virt-admin usr/bin/virt-host-validate usr/bin/virt-login-shell +usr/bin/virt-pki-query-dn usr/bin/virt-pki-validate usr/bin/virt-qemu-run +usr/bin/virt-ssh-helper usr/bin/virt-xml-validate #usr/include/libvirt #usr/include/libvirt/libvirt-admin.h @@ -67,45 +76,33 @@ usr/bin/virt-xml-validate #usr/include/libvirt/libvirt.h #usr/include/libvirt/virterror.h #usr/lib/libvirt -#usr/lib/libvirt-admin.la #usr/lib/libvirt-admin.so usr/lib/libvirt-admin.so.0 -usr/lib/libvirt-admin.so.0.6005.0 -#usr/lib/libvirt-lxc.la +usr/lib/libvirt-admin.so.0.7010.0 #usr/lib/libvirt-lxc.so usr/lib/libvirt-lxc.so.0 -usr/lib/libvirt-lxc.so.0.6005.0 -#usr/lib/libvirt-qemu.la +usr/lib/libvirt-lxc.so.0.7010.0 #usr/lib/libvirt-qemu.so usr/lib/libvirt-qemu.so.0 -usr/lib/libvirt-qemu.so.0.6005.0 -#usr/lib/libvirt.la +usr/lib/libvirt-qemu.so.0.7010.0 #usr/lib/libvirt.so usr/lib/libvirt.so.0 -usr/lib/libvirt.so.0.6005.0 +usr/lib/libvirt.so.0.7010.0 #usr/lib/libvirt/connection-driver -#usr/lib/libvirt/connection-driver/libvirt_driver_interface.la +usr/lib/libvirt/connection-driver/libvirt_driver_ch.so usr/lib/libvirt/connection-driver/libvirt_driver_interface.so -#usr/lib/libvirt/connection-driver/libvirt_driver_nodedev.la usr/lib/libvirt/connection-driver/libvirt_driver_nodedev.so -#usr/lib/libvirt/connection-driver/libvirt_driver_nwfilter.la usr/lib/libvirt/connection-driver/libvirt_driver_nwfilter.so -#usr/lib/libvirt/connection-driver/libvirt_driver_qemu.la usr/lib/libvirt/connection-driver/libvirt_driver_qemu.so -#usr/lib/libvirt/connection-driver/libvirt_driver_secret.la usr/lib/libvirt/connection-driver/libvirt_driver_secret.so -#usr/lib/libvirt/connection-driver/libvirt_driver_storage.la usr/lib/libvirt/connection-driver/libvirt_driver_storage.so #usr/lib/libvirt/lock-driver -#usr/lib/libvirt/lock-driver/lockd.la usr/lib/libvirt/lock-driver/lockd.so #usr/lib/libvirt/storage-backend -#usr/lib/libvirt/storage-backend/libvirt_storage_backend_fs.la usr/lib/libvirt/storage-backend/libvirt_storage_backend_fs.so -#usr/lib/libvirt/storage-backend/libvirt_storage_backend_logical.la usr/lib/libvirt/storage-backend/libvirt_storage_backend_logical.so +usr/lib/libvirt/storage-backend/libvirt_storage_backend_vstorage.so #usr/lib/libvirt/storage-file -#usr/lib/libvirt/storage-file/libvirt_storage_file_fs.la usr/lib/libvirt/storage-file/libvirt_storage_file_fs.so #usr/lib/pkgconfig/libvirt-admin.pc #usr/lib/pkgconfig/libvirt-lxc.pc @@ -116,6 +113,7 @@ usr/lib/sysctl.d/60-libvirtd.conf usr/libexec/libvirt_iohelper usr/libexec/virt-login-shell-helper usr/sbin/libvirtd +usr/sbin/virtchd usr/sbin/virtinterfaced usr/sbin/virtlockd usr/sbin/virtlogd @@ -134,6 +132,7 @@ usr/sbin/virtstoraged #usr/share/augeas/lenses/tests/test_libvirt_lockd.aug #usr/share/augeas/lenses/tests/test_libvirtd.aug #usr/share/augeas/lenses/tests/test_libvirtd_qemu.aug +#usr/share/augeas/lenses/tests/test_virtchd.aug #usr/share/augeas/lenses/tests/test_virtinterfaced.aug #usr/share/augeas/lenses/tests/test_virtlockd.aug #usr/share/augeas/lenses/tests/test_virtlogd.aug @@ -143,6 +142,7 @@ usr/sbin/virtstoraged #usr/share/augeas/lenses/tests/test_virtqemud.aug #usr/share/augeas/lenses/tests/test_virtsecretd.aug #usr/share/augeas/lenses/tests/test_virtstoraged.aug +#usr/share/augeas/lenses/virtchd.aug #usr/share/augeas/lenses/virtinterfaced.aug #usr/share/augeas/lenses/virtlockd.aug #usr/share/augeas/lenses/virtlogd.aug @@ -204,238 +204,12 @@ usr/sbin/virtstoraged #usr/share/doc/libvirt/examples/xml/test/testnodeinline.xml #usr/share/doc/libvirt/examples/xml/test/testpool.xml #usr/share/doc/libvirt/examples/xml/test/testvol.xml -#usr/share/doc/libvirt/html -#usr/share/doc/libvirt/html/404.html -#usr/share/doc/libvirt/html/acl.html -#usr/share/doc/libvirt/html/aclpolkit.html -#usr/share/doc/libvirt/html/advanced-tests.html -#usr/share/doc/libvirt/html/android-chrome-192x192.png -#usr/share/doc/libvirt/html/android-chrome-256x256.png -#usr/share/doc/libvirt/html/api.html -#usr/share/doc/libvirt/html/api_extension.html -#usr/share/doc/libvirt/html/apple-touch-icon.png -#usr/share/doc/libvirt/html/apps.html -#usr/share/doc/libvirt/html/architecture.gif -#usr/share/doc/libvirt/html/architecture.html -#usr/share/doc/libvirt/html/auditlog.html -#usr/share/doc/libvirt/html/auth.html -#usr/share/doc/libvirt/html/best-practices.html -#usr/share/doc/libvirt/html/bindings.html -#usr/share/doc/libvirt/html/browserconfig.xml -#usr/share/doc/libvirt/html/bugs.html -#usr/share/doc/libvirt/html/cgroups.html -#usr/share/doc/libvirt/html/ci.html -#usr/share/doc/libvirt/html/coding-style.html -#usr/share/doc/libvirt/html/committer-guidelines.html -#usr/share/doc/libvirt/html/compiling.html -#usr/share/doc/libvirt/html/contact.html -#usr/share/doc/libvirt/html/contribute.html -#usr/share/doc/libvirt/html/csharp.html -#usr/share/doc/libvirt/html/daemons.html -#usr/share/doc/libvirt/html/dbus.html -#usr/share/doc/libvirt/html/developer-tooling.html -#usr/share/doc/libvirt/html/devguide.html -#usr/share/doc/libvirt/html/docs.html -#usr/share/doc/libvirt/html/downloads.html -#usr/share/doc/libvirt/html/drivers.html -#usr/share/doc/libvirt/html/drvbhyve.html -#usr/share/doc/libvirt/html/drvesx.html -#usr/share/doc/libvirt/html/drvhyperv.html -#usr/share/doc/libvirt/html/drvlxc.html -#usr/share/doc/libvirt/html/drvnodedev.html -#usr/share/doc/libvirt/html/drvopenvz.html -#usr/share/doc/libvirt/html/drvqemu.html -#usr/share/doc/libvirt/html/drvremote.html -#usr/share/doc/libvirt/html/drvsecret.html -#usr/share/doc/libvirt/html/drvtest.html -#usr/share/doc/libvirt/html/drvvbox.html -#usr/share/doc/libvirt/html/drvvirtuozzo.html -#usr/share/doc/libvirt/html/drvvmware.html -#usr/share/doc/libvirt/html/drvxen.html -#usr/share/doc/libvirt/html/errors.html -#usr/share/doc/libvirt/html/favicon-16x16.png -#usr/share/doc/libvirt/html/favicon-32x32.png -#usr/share/doc/libvirt/html/favicon.ico -#usr/share/doc/libvirt/html/firewall.html -#usr/share/doc/libvirt/html/fonts -#usr/share/doc/libvirt/html/fonts/LICENSE.rst -#usr/share/doc/libvirt/html/fonts/overpass-bold-italic.woff -#usr/share/doc/libvirt/html/fonts/overpass-bold.woff -#usr/share/doc/libvirt/html/fonts/overpass-italic.woff -#usr/share/doc/libvirt/html/fonts/overpass-light-italic.woff -#usr/share/doc/libvirt/html/fonts/overpass-light.woff -#usr/share/doc/libvirt/html/fonts/overpass-mono-bold.woff -#usr/share/doc/libvirt/html/fonts/overpass-mono-light.woff -#usr/share/doc/libvirt/html/fonts/overpass-mono-regular.woff -#usr/share/doc/libvirt/html/fonts/overpass-mono-semibold.woff -#usr/share/doc/libvirt/html/fonts/overpass-regular.woff -#usr/share/doc/libvirt/html/fonts/stylesheet.css -#usr/share/doc/libvirt/html/format.html -#usr/share/doc/libvirt/html/formatbackup.html -#usr/share/doc/libvirt/html/formatcaps.html -#usr/share/doc/libvirt/html/formatcheckpoint.html -#usr/share/doc/libvirt/html/formatdomain.html -#usr/share/doc/libvirt/html/formatdomaincaps.html -#usr/share/doc/libvirt/html/formatnetwork.html -#usr/share/doc/libvirt/html/formatnetworkport.html -#usr/share/doc/libvirt/html/formatnode.html -#usr/share/doc/libvirt/html/formatnwfilter.html -#usr/share/doc/libvirt/html/formatsecret.html -#usr/share/doc/libvirt/html/formatsnapshot.html -#usr/share/doc/libvirt/html/formatstorage.html -#usr/share/doc/libvirt/html/formatstoragecaps.html -#usr/share/doc/libvirt/html/formatstorageencryption.html -#usr/share/doc/libvirt/html/generic.css -#usr/share/doc/libvirt/html/goals.html -#usr/share/doc/libvirt/html/governance.html -#usr/share/doc/libvirt/html/hacking.html -#usr/share/doc/libvirt/html/hooks.html -#usr/share/doc/libvirt/html/html -#usr/share/doc/libvirt/html/html/home.png -#usr/share/doc/libvirt/html/html/index-admin.html -#usr/share/doc/libvirt/html/html/index-lxc.html -#usr/share/doc/libvirt/html/html/index-qemu.html -#usr/share/doc/libvirt/html/html/index.html -#usr/share/doc/libvirt/html/html/left.png -#usr/share/doc/libvirt/html/html/libvirt-libvirt-admin.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-common.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-domain-checkpoint.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-domain-snapshot.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-domain.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-event.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-host.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-interface.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-lxc.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-network.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-nodedev.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-nwfilter.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-qemu.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-secret.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-storage.html -#usr/share/doc/libvirt/html/html/libvirt-libvirt-stream.html -#usr/share/doc/libvirt/html/html/libvirt-virterror.html -#usr/share/doc/libvirt/html/html/right.png -#usr/share/doc/libvirt/html/html/up.png -#usr/share/doc/libvirt/html/hvsupport.html -#usr/share/doc/libvirt/html/index.html -#usr/share/doc/libvirt/html/internals -#usr/share/doc/libvirt/html/internals.html -#usr/share/doc/libvirt/html/internals/command.html -#usr/share/doc/libvirt/html/internals/eventloop.html -#usr/share/doc/libvirt/html/internals/locking.html -#usr/share/doc/libvirt/html/internals/rpc.html -#usr/share/doc/libvirt/html/java.html -#usr/share/doc/libvirt/html/js -#usr/share/doc/libvirt/html/js/main.js -#usr/share/doc/libvirt/html/kbase -#usr/share/doc/libvirt/html/kbase.html -#usr/share/doc/libvirt/html/kbase/backing_chains.html -#usr/share/doc/libvirt/html/kbase/domainstatecapture.html -#usr/share/doc/libvirt/html/kbase/incrementalbackupinternals.html -#usr/share/doc/libvirt/html/kbase/kvm-realtime.html -#usr/share/doc/libvirt/html/kbase/launch_security_sev.html -#usr/share/doc/libvirt/html/kbase/locking-lockd.html -#usr/share/doc/libvirt/html/kbase/locking-sanlock.html -#usr/share/doc/libvirt/html/kbase/locking.html -#usr/share/doc/libvirt/html/kbase/qemu-passthrough-security.html -#usr/share/doc/libvirt/html/kbase/rpm-deployment.html -#usr/share/doc/libvirt/html/kbase/s390_protected_virt.html -#usr/share/doc/libvirt/html/kbase/secureusage.html -#usr/share/doc/libvirt/html/kbase/virtiofs.html -#usr/share/doc/libvirt/html/libvirt-daemon-arch.png -#usr/share/doc/libvirt/html/libvirt-driver-arch.png -#usr/share/doc/libvirt/html/libvirt-go-xml.html -#usr/share/doc/libvirt/html/libvirt-go.html -#usr/share/doc/libvirt/html/libvirt-object-model.png -#usr/share/doc/libvirt/html/libvirt-virConnect-example.png -#usr/share/doc/libvirt/html/libvirt.css -#usr/share/doc/libvirt/html/logging.html -#usr/share/doc/libvirt/html/logos -#usr/share/doc/libvirt/html/logos/logo-banner-dark-256.png -#usr/share/doc/libvirt/html/logos/logo-banner-dark-800.png -#usr/share/doc/libvirt/html/logos/logo-banner-dark.svg -#usr/share/doc/libvirt/html/logos/logo-banner-light-256.png -#usr/share/doc/libvirt/html/logos/logo-banner-light-800.png -#usr/share/doc/libvirt/html/logos/logo-banner-light.svg -#usr/share/doc/libvirt/html/logos/logo-base.svg -#usr/share/doc/libvirt/html/logos/logo-square-128.png -#usr/share/doc/libvirt/html/logos/logo-square-192.png -#usr/share/doc/libvirt/html/logos/logo-square-256.png -#usr/share/doc/libvirt/html/logos/logo-square-96.png -#usr/share/doc/libvirt/html/logos/logo-square-powered-128.png -#usr/share/doc/libvirt/html/logos/logo-square-powered-192.png -#usr/share/doc/libvirt/html/logos/logo-square-powered-256.png -#usr/share/doc/libvirt/html/logos/logo-square-powered-96.png -#usr/share/doc/libvirt/html/logos/logo-square-powered.svg -#usr/share/doc/libvirt/html/logos/logo-square.svg -#usr/share/doc/libvirt/html/main.css -#usr/share/doc/libvirt/html/manifest.json -#usr/share/doc/libvirt/html/manpages -#usr/share/doc/libvirt/html/manpages/index.html -#usr/share/doc/libvirt/html/manpages/libvirtd.html -#usr/share/doc/libvirt/html/manpages/virkeycode-atset1.html -#usr/share/doc/libvirt/html/manpages/virkeycode-atset2.html -#usr/share/doc/libvirt/html/manpages/virkeycode-atset3.html -#usr/share/doc/libvirt/html/manpages/virkeycode-linux.html -#usr/share/doc/libvirt/html/manpages/virkeycode-osx.html -#usr/share/doc/libvirt/html/manpages/virkeycode-qnum.html -#usr/share/doc/libvirt/html/manpages/virkeycode-usb.html -#usr/share/doc/libvirt/html/manpages/virkeycode-win32.html -#usr/share/doc/libvirt/html/manpages/virkeycode-xtkbd.html -#usr/share/doc/libvirt/html/manpages/virkeyname-linux.html -#usr/share/doc/libvirt/html/manpages/virkeyname-osx.html -#usr/share/doc/libvirt/html/manpages/virkeyname-win32.html -#usr/share/doc/libvirt/html/manpages/virsh.html -#usr/share/doc/libvirt/html/manpages/virt-admin.html -#usr/share/doc/libvirt/html/manpages/virt-host-validate.html -#usr/share/doc/libvirt/html/manpages/virt-login-shell.html -#usr/share/doc/libvirt/html/manpages/virt-pki-validate.html -#usr/share/doc/libvirt/html/manpages/virt-qemu-run.html -#usr/share/doc/libvirt/html/manpages/virt-sanlock-cleanup.html -#usr/share/doc/libvirt/html/manpages/virt-xml-validate.html -#usr/share/doc/libvirt/html/manpages/virtlockd.html -#usr/share/doc/libvirt/html/manpages/virtlogd.html -#usr/share/doc/libvirt/html/migration-managed-direct.png -#usr/share/doc/libvirt/html/migration-managed-p2p.png -#usr/share/doc/libvirt/html/migration-native.png -#usr/share/doc/libvirt/html/migration-tunnel.png -#usr/share/doc/libvirt/html/migration-unmanaged-direct.png -#usr/share/doc/libvirt/html/migration.html -#usr/share/doc/libvirt/html/mobile.css -#usr/share/doc/libvirt/html/mstile-150x150.png -#usr/share/doc/libvirt/html/newreposetup.html -#usr/share/doc/libvirt/html/news.html -#usr/share/doc/libvirt/html/node.gif -#usr/share/doc/libvirt/html/nss.html -#usr/share/doc/libvirt/html/pci-addresses.html -#usr/share/doc/libvirt/html/pci-hotplug.html -#usr/share/doc/libvirt/html/php.html -#usr/share/doc/libvirt/html/platforms.html -#usr/share/doc/libvirt/html/programming-languages.html -#usr/share/doc/libvirt/html/python.html -#usr/share/doc/libvirt/html/remote.html -#usr/share/doc/libvirt/html/securityprocess.html -#usr/share/doc/libvirt/html/storage.html -#usr/share/doc/libvirt/html/strategy.html -#usr/share/doc/libvirt/html/styleguide.html -#usr/share/doc/libvirt/html/submitting-patches.html -#usr/share/doc/libvirt/html/support.html -#usr/share/doc/libvirt/html/testapi.html -#usr/share/doc/libvirt/html/testsuites.html -#usr/share/doc/libvirt/html/testtck.html -#usr/share/doc/libvirt/html/tlscerts.html -#usr/share/doc/libvirt/html/uri.html -#usr/share/doc/libvirt/html/virshcmdref.html -#usr/share/doc/libvirt/html/windows.html #usr/share/libvirt -#usr/share/libvirt/api -usr/share/libvirt/api/libvirt-admin-api.xml -usr/share/libvirt/api/libvirt-api.xml -usr/share/libvirt/api/libvirt-lxc-api.xml -usr/share/libvirt/api/libvirt-qemu-api.xml #usr/share/libvirt/cpu_map +#usr/share/libvirt/cpu_map/arm_FT-2000plus.xml #usr/share/libvirt/cpu_map/arm_Falkor.xml #usr/share/libvirt/cpu_map/arm_Kunpeng-920.xml +#usr/share/libvirt/cpu_map/arm_Tengyun-S2500.xml #usr/share/libvirt/cpu_map/arm_ThunderX299xx.xml #usr/share/libvirt/cpu_map/arm_cortex-a53.xml #usr/share/libvirt/cpu_map/arm_cortex-a57.xml @@ -461,6 +235,8 @@ usr/share/libvirt/cpu_map/x86_Conroe.xml usr/share/libvirt/cpu_map/x86_Cooperlake.xml usr/share/libvirt/cpu_map/x86_Dhyana.xml usr/share/libvirt/cpu_map/x86_EPYC-IBPB.xml +usr/share/libvirt/cpu_map/x86_EPYC-Milan.xml +usr/share/libvirt/cpu_map/x86_EPYC-Rome.xml usr/share/libvirt/cpu_map/x86_EPYC.xml usr/share/libvirt/cpu_map/x86_Haswell-IBRS.xml usr/share/libvirt/cpu_map/x86_Haswell-noTSX-IBRS.xml @@ -488,6 +264,7 @@ usr/share/libvirt/cpu_map/x86_Skylake-Client.xml usr/share/libvirt/cpu_map/x86_Skylake-Server-IBRS.xml usr/share/libvirt/cpu_map/x86_Skylake-Server-noTSX-IBRS.xml usr/share/libvirt/cpu_map/x86_Skylake-Server.xml +usr/share/libvirt/cpu_map/x86_Snowridge.xml usr/share/libvirt/cpu_map/x86_Westmere-IBRS.xml usr/share/libvirt/cpu_map/x86_Westmere.xml usr/share/libvirt/cpu_map/x86_athlon.xml @@ -507,57 +284,57 @@ usr/share/libvirt/cpu_map/x86_phenom.xml usr/share/libvirt/cpu_map/x86_qemu32.xml usr/share/libvirt/cpu_map/x86_qemu64.xml usr/share/libvirt/cpu_map/x86_vendors.xml -#usr/share/libvirt/schemas -usr/share/libvirt/schemas/basictypes.rng -usr/share/libvirt/schemas/capability.rng -usr/share/libvirt/schemas/cputypes.rng -usr/share/libvirt/schemas/domain.rng -#usr/share/libvirt/schemas/domainbackup.rng -usr/share/libvirt/schemas/domaincaps.rng -usr/share/libvirt/schemas/domaincheckpoint.rng -usr/share/libvirt/schemas/domaincommon.rng -usr/share/libvirt/schemas/domainsnapshot.rng -usr/share/libvirt/schemas/interface.rng -usr/share/libvirt/schemas/network.rng -usr/share/libvirt/schemas/networkcommon.rng -usr/share/libvirt/schemas/networkport.rng -usr/share/libvirt/schemas/nodedev.rng -usr/share/libvirt/schemas/nwfilter.rng -usr/share/libvirt/schemas/nwfilter_params.rng -usr/share/libvirt/schemas/nwfilterbinding.rng -usr/share/libvirt/schemas/secret.rng -usr/share/libvirt/schemas/storagecommon.rng -usr/share/libvirt/schemas/storagepool.rng -usr/share/libvirt/schemas/storagepoolcaps.rng -usr/share/libvirt/schemas/storagevol.rng #usr/share/libvirt/test-screenshot.png -#usr/share/man/man1/virsh.1 -#usr/share/man/man1/virt-admin.1 -#usr/share/man/man1/virt-host-validate.1 -#usr/share/man/man1/virt-login-shell.1 -#usr/share/man/man1/virt-pki-validate.1 -#usr/share/man/man1/virt-qemu-run.1 -#usr/share/man/man1/virt-xml-validate.1 -#usr/share/man/man7/virkeycode-atset1.7 -#usr/share/man/man7/virkeycode-atset2.7 -#usr/share/man/man7/virkeycode-atset3.7 -#usr/share/man/man7/virkeycode-linux.7 -#usr/share/man/man7/virkeycode-osx.7 -#usr/share/man/man7/virkeycode-qnum.7 -#usr/share/man/man7/virkeycode-usb.7 -#usr/share/man/man7/virkeycode-win32.7 -#usr/share/man/man7/virkeycode-xtkbd.7 -#usr/share/man/man7/virkeyname-linux.7 -#usr/share/man/man7/virkeyname-osx.7 -#usr/share/man/man7/virkeyname-win32.7 -#usr/share/man/man8/libvirtd.8 -#usr/share/man/man8/virtlockd.8 -#usr/share/man/man8/virtlogd.8 +#usr/share/locale/as/LC_MESSAGES/libvirt.mo +#usr/share/locale/bg/LC_MESSAGES/libvirt.mo +#usr/share/locale/bn_IN/LC_MESSAGES/libvirt.mo +#usr/share/locale/bs/LC_MESSAGES/libvirt.mo +#usr/share/locale/ca/LC_MESSAGES/libvirt.mo +#usr/share/locale/cs/LC_MESSAGES/libvirt.mo +#usr/share/locale/da/LC_MESSAGES/libvirt.mo +#usr/share/locale/de/LC_MESSAGES/libvirt.mo +#usr/share/locale/el/LC_MESSAGES/libvirt.mo +#usr/share/locale/en_GB/LC_MESSAGES/libvirt.mo +#usr/share/locale/es/LC_MESSAGES/libvirt.mo +#usr/share/locale/fi/LC_MESSAGES/libvirt.mo +#usr/share/locale/fr/LC_MESSAGES/libvirt.mo +#usr/share/locale/gu/LC_MESSAGES/libvirt.mo +#usr/share/locale/hi/LC_MESSAGES/libvirt.mo +#usr/share/locale/hu/LC_MESSAGES/libvirt.mo +#usr/share/locale/id/LC_MESSAGES/libvirt.mo +#usr/share/locale/it/LC_MESSAGES/libvirt.mo +#usr/share/locale/ja/LC_MESSAGES/libvirt.mo +#usr/share/locale/kn/LC_MESSAGES/libvirt.mo +#usr/share/locale/ko/LC_MESSAGES/libvirt.mo +#usr/share/locale/mk/LC_MESSAGES/libvirt.mo +#usr/share/locale/ml/LC_MESSAGES/libvirt.mo +#usr/share/locale/mr/LC_MESSAGES/libvirt.mo +#usr/share/locale/ms/LC_MESSAGES/libvirt.mo +#usr/share/locale/nb/LC_MESSAGES/libvirt.mo +#usr/share/locale/nl/LC_MESSAGES/libvirt.mo +#usr/share/locale/or/LC_MESSAGES/libvirt.mo +#usr/share/locale/pa/LC_MESSAGES/libvirt.mo +#usr/share/locale/pl/LC_MESSAGES/libvirt.mo +#usr/share/locale/pt/LC_MESSAGES/libvirt.mo +#usr/share/locale/pt_BR/LC_MESSAGES/libvirt.mo +#usr/share/locale/ru/LC_MESSAGES/libvirt.mo +#usr/share/locale/si/LC_MESSAGES/libvirt.mo +#usr/share/locale/sr/LC_MESSAGES/libvirt.mo +#usr/share/locale/sr(a)latin/LC_MESSAGES/libvirt.mo +#usr/share/locale/sv/LC_MESSAGES/libvirt.mo +#usr/share/locale/ta/LC_MESSAGES/libvirt.mo +#usr/share/locale/te/LC_MESSAGES/libvirt.mo +#usr/share/locale/tr/LC_MESSAGES/libvirt.mo +#usr/share/locale/uk/LC_MESSAGES/libvirt.mo +#usr/share/locale/vi/LC_MESSAGES/libvirt.mo +#usr/share/locale/zh_CN/LC_MESSAGES/libvirt.mo +#usr/share/locale/zh_TW/LC_MESSAGES/libvirt.mo #var/cache/libvirt #var/cache/libvirt/qemu var/ipfire/backup/addons/includes/libvirt #var/lib/libvirt #var/lib/libvirt/boot +#var/lib/libvirt/ch #var/lib/libvirt/filesystems #var/lib/libvirt/images #var/lib/libvirt/lockd diff --git a/lfs/libvirt b/lfs/libvirt index 701528c1d..a8fb0af1b 100644 --- a/lfs/libvirt +++ b/lfs/libvirt @@ -24,7 +24,7 @@ include Config -VER = 6.5.0 +VER = 7.10.0 THISAPP = libvirt-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -33,7 +33,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) SUP_ARCH = x86_64 PROG = libvirt -PAK_VER = 26 +PAK_VER = 27 DEPS = ebtables libpciaccess libtirpc libyajl ncat qemu @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 19ea5c0d18bed1515c23a9e9c7427dc0 +$(DL_FILE)_MD5 = 435d27a73b25c936e0451cc4397ab986 install : $(TARGET) check : $(patsubst %,$(DIR_CHK)/%,$(objects)) @@ -80,45 +80,39 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/libvirt/0001-Change-default-behavior-of-libvirt-guests.sh-for-IPF.patch - mkdir -p -v $(DIR_APP)/build_libvirt && cd $(DIR_APP)/build_libvirt - - cd $(DIR_APP)/build_libvirt && ../autogen.sh --no-git - - cd $(DIR_APP)/build_libvirt && ../configure \ + cd $(DIR_APP) && meson \ --prefix=/usr \ --localstatedir=/var \ --sysconfdir=/etc \ - --without-sasl \ - --without-vbox \ - --without-lxc \ - --without-esx \ - --without-vmware \ - --without-openvz \ - --without-firewalld \ - --without-network \ - --with-interface \ - --with-virtualport \ - --with-macvtap \ - --without-wireshark-dissector \ - --disable-nls \ - --without-test-suite \ - --without-dbus \ - --with-qemu-user=nobody \ - --with-qemu-group=kvm \ - --with-storage-dir \ - --with-storage-fs \ - --with-storage-lvm \ - --without-storage-iscsi \ - --without-storage-scsi \ - --without-storage-mpath \ - --without-storage-disk \ - --without-storage-rbd \ - --without-storage-sheepdog \ - --without-storage-gluster \ - --without-storage-zfs - - cd $(DIR_APP)/build_libvirt && make $(MAKETUNING) $(EXTRA_MAKE) - cd $(DIR_APP)/build_libvirt && make install + -D docs=disabled \ + -D sasl=disabled \ + -D driver_vbox=disabled \ + -D driver_lxc=disabled \ + -D driver_esx=disabled \ + -D driver_vmware=disabled \ + -D driver_openvz=disabled \ + -D firewalld=disabled \ + -D driver_network=disabled \ + -D driver_interface=enabled \ + -D wireshark_dissector=disabled \ + -D nls=disabled \ + -D tests=disabled \ + -D qemu_user=nobody \ + -D qemu_group=kvm \ + -D storage_dir=enabled \ + -D storage_fs=enabled \ + -D storage_lvm=enabled \ + -D storage_iscsi=disabled \ + -D storage_scsi=disabled \ + -D storage_mpath=disabled \ + -D storage_disk=disabled \ + -D storage_rbd=disabled \ + -D storage_sheepdog=disabled \ + -D storage_gluster=disabled \ + -D storage_zfs=disabled \ + builddir/ + cd $(DIR_APP) && ninja -C builddir/ $(MAKETUNING) $(EXTRA_MAKE) + cd $(DIR_APP) && ninja -C builddir/ install #install initscripts $(call INSTALL_INITSCRIPT,libvirtd) diff --git a/src/patches/libvirt/0001-Change-default-behavior-of-libvirt-guests.sh-for-IPF.patch b/src/patches/libvirt/0001-Change-default-behavior-of-libvirt-guests.sh-for-IPF.patch index 12af9a5f3..774f52e04 100644 --- a/src/patches/libvirt/0001-Change-default-behavior-of-libvirt-guests.sh-for-IPF.patch +++ b/src/patches/libvirt/0001-Change-default-behavior-of-libvirt-guests.sh-for-IPF.patch @@ -1,30 +1,15 @@ -From a50fa0195e36773d57593006152828ce2c0523fd Mon Sep 17 00:00:00 2001 -From: Jonatan Schlag <jonatan.schlag(a)ipfire.org> -Date: Fri, 6 May 2016 11:38:08 +0200 -Subject: [PATCH] Change default behavior of libvirt-guests.sh for IPFire - -Signed-off-by: Jonatan Schlag <jonatan.schlag(a)ipfire.org> ---- - tools/libvirt-guests.sh.in | 6 +++--- - 1 file changed, 3 insertions(+), 3 deletions(-) - -diff --git a/tools/libvirt-guests.sh.in b/tools/libvirt-guests.sh.in -index 7f74b85..87aceb7 100644 ---- a/tools/libvirt-guests.sh.in -+++ b/tools/libvirt-guests.sh.in -@@ -30,9 +30,9 @@ test ! -r "$sysconfdir"/rc.d/init.d/functions || +--- libvirt-7.10.0/tools/libvirt-guests.sh.in.orig 2021-12-01 10:51:11.942943000 +0100 ++++ libvirt-7.10.0/tools/libvirt-guests.sh.in 2022-01-11 12:32:37.765715377 +0100 +@@ -30,9 +30,9 @@ export TEXTDOMAIN="@PACKAGE@" TEXTDOMAINDIR="@localedir@" --URIS=default --ON_BOOT=start --ON_SHUTDOWN=suspend -+URIS=qemu:///system -+ON_BOOT=ignore -+ON_SHUTDOWN=shutdown +-URIS="default" +-ON_BOOT="start" +-ON_SHUTDOWN="suspend" ++URIS="qemu:///system" ++ON_BOOT="ignore" ++ON_SHUTDOWN="shutdown" SHUTDOWN_TIMEOUT=300 PARALLEL_SHUTDOWN=0 START_DELAY=0 --- -2.1.4 - -- 2.34.1

1 0

Cross-compiling for aarch64 and armv6l on x86_64 does not seem to work
by Peter Müller 12 Jan '22

12 Jan '22

Hello *, currently having a bunch of kernel-related changes in the queue, I need to update the kernel configuration files and LFS rootfiles on all architectures we support. Only having an x86_64 system at hand, I thought "./make.sh shell --target=aarch64" would do the trick (qemu is installed), but apparently isn't: # ./make.sh build --target=aarch64 [lots of output logs omitted] *** Build finished in 2:11:20 [ DONE ] # ls build ccache doc .gitignore ipfire-2.27.2gb-ext4.x86_64-full-core163.img.xz ipfire-2.27.x86_64-full-core163.iso langs log make.sh src cache config .git html ipfire-2.27.2gb-ext4.x86_64-full-core163.img.xz.md5 ipfire-2.27.x86_64-full-core163.iso.md5 lfs .mailmap packages tools If you could give me a hint on what I'm doing wrong, I would be frightfully grateful. :-) Thanks, and best regards, Peter Müller

3 4

[PATCH] Collectd: Stop tracking rtorrent, asterisk, java, and spamd processes
by Peter Müller 10 Jan '22

10 Jan '22

These are all not present on current IPFire versions, so there is no sense in letting collectd keeping track of them. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/collectd/collectd.conf | 4 ---- 1 file changed, 4 deletions(-) diff --git a/config/collectd/collectd.conf b/config/collectd/collectd.conf index 941c631c9..9270b01ae 100644 --- a/config/collectd/collectd.conf +++ b/config/collectd/collectd.conf @@ -73,11 +73,7 @@ include "/etc/collectd.precache" Process "charon" Process "openvpn" Process "qemu" - Process "rtorrent" Process "mpd" - Process "asterisk" - Process "java" - Process "spamd" </Plugin> <Plugin rrdtool> -- 2.26.2

3 2

kernel error from CU 162, PC Engines apu4
by Jon Murphy 09 Jan '22

09 Jan '22

I found this kernel error from last night. Do you want to know about these? Should I be adding these to bugzilla? Or post in the Community? Best regards, Jon ======== System versions IPFire version IPFire 2.27 (x86_64) - core162 Pakfire version 2.27-x86_64 Kernel version Linux ipfire.localdomain 5.15.6-ipfire #1 SMP Sun Dec 19 10:54:26 GMT 2021 x86_64 AMD GX-412TC SOC AuthenticAMD GNU/Linux ============== Jan 7 22:09:40 ipfire kernel: ------------[ cut here ]------------ Jan 7 22:09:40 ipfire kernel: refcount_t: underflow; use-after-free. Jan 7 22:09:40 ipfire kernel: WARNING: CPU: 1 PID: 17992 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110 Jan 7 22:09:40 ipfire kernel: Modules linked in: ledtrig_netdev ledtrig_heartbeat tun nfnetlink_queue xt_NFQUEUE xt_MASQUERADE cfg80211 rfkill 8021q garp xt_ipp2p(O) compat_xtables(O) xt_geoip(O) xt_multiport xt_mac xt_REDIRECT xt_hashlimit xt_policy xt_TCPMSS xt_conntrack xt_comment ipt_REJECT nf_reject_ipv4 xt_LOG xt_limit xt_mark xt_connmark nf_log_syslog iptable_raw iptable_mangle iptable_filter vfat fat amd64_edac edac_mce_amd kvm_amd sch_fq_codel kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcspkr sp5100_tco fam15h_power k10temp i2c_piix4 igb ptp pps_core dca ccp i2c_algo_bit i2c_core leds_gpio pinctrl_amd gpio_keys acpi_cpufreq lp parport_pc parport video sdhci_pci cqhci sdhci mmc_core Jan 7 22:09:40 ipfire kernel: CPU: 1 PID: 17992 Comm: W-NFQ#1 Tainted: G O 5.15.6-ipfire #1 Jan 7 22:09:40 ipfire kernel: Hardware name: PC Engines apu4/apu4, BIOS v4.15.0.1 11/23/2021 Jan 7 22:09:40 ipfire kernel: RIP: 0010:refcount_warn_saturate+0xba/0x110 Jan 7 22:09:40 ipfire kernel: Code: 01 01 e8 32 91 59 00 0f 0b 31 f6 89 f7 c3 80 3d 14 8d 39 01 00 75 85 48 c7 c7 98 f6 f3 8b c6 05 04 8d 39 01 01 e8 0f 91 59 00 <0f> 0b 31 f6 89 f7 c3 80 3d ef 8c 39 01 00 0f 85 5e ff ff ff 48 c7 Jan 7 22:09:40 ipfire kernel: RSP: 0018:ffffb583c8c4f868 EFLAGS: 00010246 Jan 7 22:09:40 ipfire kernel: RAX: 0000000000000000 RBX: ffffa0f9c1bf8200 RCX: 0000000000000000 Jan 7 22:09:40 ipfire kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 Jan 7 22:09:40 ipfire kernel: RBP: ffffa0f9c1bf8200 R08: 0000000000000000 R09: 0000000000000000 Jan 7 22:09:40 ipfire kernel: R10: 0000000000000000 R11: 0000000000000000 R12: ffffa0f9c1bf8200 Jan 7 22:09:40 ipfire kernel: R13: 0000000000000000 R14: 0000000000000005 R15: ffffa0f9c3b12100 Jan 7 22:09:40 ipfire kernel: FS: 000079dc0ba4e640(0000) GS:ffffa0f9eac80000(0000) knlGS:0000000000000000 Jan 7 22:09:40 ipfire kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Jan 7 22:09:40 ipfire kernel: CR2: 0000716fa42b7bc8 CR3: 0000000103486000 CR4: 00000000000406e0 Jan 7 22:09:40 ipfire kernel: Call Trace: Jan 7 22:09:40 ipfire kernel: <TASK> Jan 7 22:09:40 ipfire kernel: nf_queue_entry_release_refs+0x8b/0xa0 Jan 7 22:09:40 ipfire kernel: nf_reinject+0x7a/0x1e0 Jan 7 22:09:40 ipfire kernel: nfqnl_recv_verdict+0x303/0x4f0 [nfnetlink_queue] Jan 7 22:09:40 ipfire kernel: nfnetlink_rcv_msg+0x251/0x310 Jan 7 22:09:40 ipfire kernel: ? nfnetlink_net_init+0xa0/0xa0 Jan 7 22:09:40 ipfire kernel: netlink_rcv_skb+0x5b/0x110 Jan 7 22:09:40 ipfire kernel: netlink_unicast+0x215/0x2e0 Jan 7 22:09:40 ipfire kernel: netlink_sendmsg+0x233/0x480 Jan 7 22:09:40 ipfire kernel: ? netlink_unicast+0x2e0/0x2e0 Jan 7 22:09:40 ipfire kernel: ____sys_sendmsg+0x2a6/0x2e0 Jan 7 22:09:40 ipfire kernel: ___sys_sendmsg+0xa3/0x100 Jan 7 22:09:40 ipfire kernel: __sys_sendmsg+0x81/0xe0 Jan 7 22:09:40 ipfire kernel: do_syscall_64+0x5c/0x90 Jan 7 22:09:40 ipfire kernel: ? syscall_exit_to_user_mode+0x23/0x50 Jan 7 22:09:40 ipfire kernel: ? __x64_sys_recvfrom+0x20/0x40 Jan 7 22:09:40 ipfire kernel: ? do_syscall_64+0x69/0x90 Jan 7 22:09:40 ipfire kernel: entry_SYSCALL_64_after_hwframe+0x44/0xae Jan 7 22:09:40 ipfire kernel: RIP: 0033:0x79dc0e2eb62d Jan 7 22:09:40 ipfire kernel: Code: 28 89 54 24 1c 48 89 74 24 10 89 7c 24 08 e8 fa ee ff ff 8b 54 24 1c 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 33 44 89 c7 48 89 44 24 08 e8 4e ef ff ff 48 Jan 7 22:09:40 ipfire kernel: RSP: 002b:000079dc0ba4bf40 EFLAGS: 00000293 ORIG_RAX: 000000000000002e Jan 7 22:09:40 ipfire kernel: RAX: ffffffffffffffda RBX: 000079dbfc268dd0 RCX: 000079dc0e2eb62d Jan 7 22:09:40 ipfire kernel: RDX: 0000000000000000 RSI: 000079dc0ba4bf80 RDI: 0000000000000006 Jan 7 22:09:40 ipfire kernel: RBP: 000079dc0ba4bfe0 R08: 0000000000000000 R09: 000079dc0d9c9de0 Jan 7 22:09:40 ipfire kernel: R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 Jan 7 22:09:40 ipfire kernel: R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000080 Jan 7 22:09:40 ipfire kernel: </TASK> Jan 7 22:09:40 ipfire kernel: ---[ end trace 9676210543ac4447 ]---

2 1

[PATCH] make.sh: Clarify options need to come before the actual command
by Peter Müller 09 Jan '22

09 Jan '22

This might prevent some misunderstandings, as the help of make.sh does not precisely state where the options (target architecture) needs to be specified. See: https://lists.ipfire.org/pipermail/development/2022-January/011911.html Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- make.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/make.sh b/make.sh index 7568ee232..3f45e1953 100755 --- a/make.sh +++ b/make.sh @@ -1957,7 +1957,7 @@ check-manualpages) fi ;; *) - echo "Usage: $0 {build|changelog|clean|gettoolchain|downloadsrc|shell|sync|toolchain|update-contributors|find-dependencies|check-manualpages}" + echo "Usage: $0 [OPTIONS] {build|changelog|clean|gettoolchain|downloadsrc|shell|sync|toolchain|update-contributors|find-dependencies|check-manualpages}" cat doc/make.sh-usage ;; esac -- 2.26.2

2 1

Feedback regarding version 8 of the "IDS multiple provider" feature
by Peter Müller 09 Jan '22

09 Jan '22

Hello Stefan, as discussed on Monday (https://wiki.ipfire.org/devel/telco/2022-01-03), I tested version 8 of the "IDS multiple provider" feature you developed. First of all, thank you very much for all the efforts you have put into this! As you told me on the phone the other day, I downloaded the .tar.gz file, and extracted it directly into / : [root@maverick ~]# sha256sum ids-multiple-providers-008.tar.gz 8fc42820a833f4a096c311d3e21a28f4a8dac7d772ca9b72ec0fbbbaad65be82 ids-multiple-providers-008.tar.gz [root@maverick ~]# tar xvzf ids-multiple-providers-008.tar.gz -C / usr/share/suricata/rules/app-layer-events.rules var/ipfire/langs/ etc/ var/ipfire/backup/ usr/share/suricata/rules/stream-events.rules usr/share/suricata/rules/files.rules usr/share/suricata/rules/http-events.rules usr/share/ usr/share/suricata/classification.config var/ipfire/suricata/oinkmaster.conf usr/share/suricata/rules/decoder-events.rules srv/ usr/share/suricata/rules/nfs-events.rules usr/ usr/local/bin/update-ids-ruleset etc/suricata/suricata.yaml usr/share/suricata/threshold.config var/ipfire/langs/de.pl var/ipfire/backup/bin/backup.pl usr/local/ usr/share/suricata/rules/smb-events.rules var/ipfire/backup/bin/ usr/share/suricata/rules/dhcp-events.rules usr/local/bin/ usr/share/suricata/rules/modbus-events.rules var/ipfire/ids-functions.pl usr/share/suricata/rules/ntp-events.rules var/ipfire/langs/en.pl var/ipfire/suricata/ usr/share/suricata/rules/dnp3-events.rules usr/share/suricata/reference.config usr/share/suricata/rules/smtp-events.rules usr/share/suricata/rules/ var/ipfire/backup/include srv/web/ipfire/ usr/share/suricata/rules/kerberos-events.rules usr/sbin/convert-ids-multiple-providers usr/share/suricata/ srv/web/ usr/share/suricata/rules/ipsec-events.rules srv/web/ipfire/cgi-bin/ids.cgi usr/sbin/convert-snort srv/web/ipfire/cgi-bin/ var/ipfire/ usr/sbin/ usr/share/suricata/rules/tls-events.rules var/ etc/suricata/ usr/share/suricata/rules/dns-events.rules var/ipfire/suricata/ruleset-sources Afterwards, I updated the language cache and ran the convert script: [root@maverick ~]# update-lang-cache [root@maverick ~]# /usr/sbin/convert-ids-multiple-providers The does not exist. Cannot change the ownership! Aside from the message emitted by /usr/sbin/convert-ids-multiple-providers (bug #12758 has been filed for investigating on this one), I came across a file permission error while writing /var/ipfire/suricata/suricata-default-rules.yaml (see bug #12759 for details). Apart from these, the CGI looks good, is sufficiently translated (sometimes, "zurück" is spelled in capital letters, sometimes, it is not - but that's merely an aesthetic issue), and behaves like expected. So, I'd treat it al almost being ready for production. :-) Please take a look at bug #12758 and #12759, and reply to me there if I shall provide further information. Thank you in advance for your efforts. Thanks, and best regards, Peter Müller

2 2

Collectd needs to be updated
by Peter Müller 08 Jan '22

08 Jan '22

Hello development folks, by coincidence, I stumbled across Collectd today. Currently, we ship version 4.10.9 of it, released 2013-04-08. The latest release, however, is 5.12.0 (2020-09-03, as displayed in https://collectd.org/files/), while https://collectd.org/news.shtml still mentions 5.8.0 (2017-11-21) as the latest one. Either way, we are lacking updates here. :-) Does anyone have some spare time for Collectd left, and is willing to work on this? Thanks in advance, and best regards, Peter Müller

2 1

[PATCH] kmod: Update to 29
by Peter Müller 04 Jan '22

04 Jan '22

Full changelog as given in the NEWS file: kmod 29 ======= - Improvements - Add support to use /usr/local as a place for configuration files. This makes it easier to install locally without overriding distro files. - Bug fixes - Fix `modinfo -F` when module is builtin: when we asked by a specific field from modinfo, it was not working correctly if the module was builtin - Documentation fixes on precedence order of /etc and /run: the correct order is /etc/modprobe.d, /run/modprobe.d, /lib/modprobe.d - Fix the priority order that we use for searching configuration files. The correct one is /etc, /run, /usr/local/lib, /lib, for both modprobe.d and depmo.d - Fix kernel command line parsing when there are quotes present. Grub mangles the command line and changes it from 'module.option="val with spaces"' to '"module.option=val with spaces"'. Although this is weird behavior and grub could have been fixed, the kernel understands it correctly for builtin modules. So change libkmod to also parse it correctly. This also brings another hidden behavior from the kernel: newline in the kernel command line is also allowed and can be used to separate options. - Fix a memory leak, overflow and double free on error path - Fix documentation for return value from kmod_module_get_info(): we return the number of entries we added to the list - Fix output of modules.builtin.alias.bin index: we were writing an empty file due to the misuse of kmod_module_get_info() - Infra/internal - Retire integration with semaphoreci - Declare the github mirror also as an official upstream source: now besides accepting patches via mailing list, PRs on github are also acceptable - Misc improvements to testsuite, so we can use it reliably regardless of the configuration used: now tests will skip if we don't have the build dependencies) Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/rootfiles/common/kmod | 2 +- lfs/kmod | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/kmod b/config/rootfiles/common/kmod index 56806fd1f..f46db860b 100644 --- a/config/rootfiles/common/kmod +++ b/config/rootfiles/common/kmod @@ -9,6 +9,6 @@ sbin/rmmod #usr/lib/libkmod.la #usr/lib/libkmod.so usr/lib/libkmod.so.2 -usr/lib/libkmod.so.2.3.6 +usr/lib/libkmod.so.2.3.7 #usr/lib/pkgconfig/libkmod.pc #usr/share/bash-completion/completions/kmod diff --git a/lfs/kmod b/lfs/kmod index 3d9acd899..5499002b6 100644 --- a/lfs/kmod +++ b/lfs/kmod @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 28 +VER = 29 THISAPP = kmod-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 0a2b887b1b3dfb8c0b3f41f598203e56 +$(DL_FILE)_MD5 = e81e63acd80697d001c8d85c1acb38a0 install : $(TARGET) -- 2.26.2

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development January 2022