Development October 2023

development@lists.ipfire.org

11 participants
36 discussions

Results from latest test of pakfire-builder
by Adolf Belka 30 Nov '23

30 Nov '23

Hi All, I updated my pakfire branch by doing a git pull with all the latest changes and built everything again. Then tested out by running sudo pakfire-builder build beep/beep.nm Result was again just going to the prompt with nothing happening. Ran the commands with gdb and got following result. sudo gdb pakfire-builder GNU gdb (GDB) 13.2 Copyright (C) 2023 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-pc-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <https://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from pakfire-builder... (gdb) run build beep/beep.nm Starting program: /usr/bin/pakfire-builder build beep/beep.nm [Thread debugging using libthread_db enabled] Using host libthread_db library "/usr/lib/libthread_db.so.1". [New Thread 0x7ffff57dd6c0 (LWP 12756)] [Thread 0x7ffff57dd6c0 (LWP 12756) exited] [Inferior 1 (process 12752) exited with code 0377] (gdb) Regards, Adolf. -- Sent from my laptop

2 8

Status update on openvpn work
by Adolf Belka 17 Nov '23

17 Nov '23

Hi All, Over the last week I have been working on the openvpn update using Erik's previous patches as my starting point. My first attempt to try and be able to understand the changes from each patch to figure out what I needed to do proved difficult for me to work with. What I then did was take the current ovpnmain.cgi and apply all of Erik's patches to it. Then I have gone through that new version of ovpnmain.cgi and made the changes based on previous discussions with Michael. So I have removed the b2sum options that were present for the Data and Channel Authentication. I also moved all the cryptographic options from an additional advanced cryptographic options button into the Advanced Server options button. I was successful in doing all the above and then tested the ovpnmain.cgi out with a vm using the existing openvpn-2.5.9 version for openvpn. My old profile for my laptop which had a ciphers entry worked without any problem. My laptop was working withy openvpn-2.6.6 I then created a new profile using the new ovpnmain.cgi using the negotiation option which ended up with a data-ciphers line. That also worked in making a successful openvpn tunnel with my laptop without any issues. I then downgraded my laptop to openvpn-2.4.8 and had to install openvpn-1.1.1 to make that work. With that client version on my laptop both the old and new profiles connected with a tunnel with no problems. I then tried downgrading my laptop to openvpn-2.3.14 but to make this work I would have had to downgrade the laptop to openssl-1.0.0 which I was not willing to do as that is very old and very insecure. The oldest openvpn version working with openssl-1.1.1 is 2.4.0 which is nearly 7 years old. That version also worked with both the old and new laptop profiles. I then tested out the openvpn server on my IPFire vm with a 2.6.0 and 2.6.6 version of openvpn. Both these openvpn versions worked with both the old and new laptop connection profiles with my laptop on version 2.4.0 and on 2.6.6 All the above was using network manager with its openvpn plugin option on the laptop for making the openvpn tunnel connections. As far as I can tell everything is working fine when negotiation is specified on the server. Old profiles that just use the cipher option also work fine. Therefore my plan is to only use the negotiation option and not make it selectable for older clients. The data-ciphers-fallback option in the server seems to be doing its job. The negotiation option on the server was able to connect to a 2.4.0 client on my laptop. According to the OpenVPN wiki on cipher negotiation the data-ciphers-fallback option will work with 2.4.x and 2.3.x clients. As the 2.3.x clients need to be using openssl-1.0.0 then I think if those clients work then fine but nothing further back. Overall, I am very happy with what I have succeeded in doing so far. I achieved things much quicker than I had expected. I will now try and see about creating a profile on a CU 179 based system that uses one of the old insecure ciphers such as Blow Fish and restore that into my evaluation vm and see how that works with my laptop when I have it downgraded to openvpn-2.4.0 I already know that if the laptop is at openvpn-2.6.6 then it will not accept a blowfish cipher (or another weak cipher such as DES) as that is something I tested in the past. If that also works then my plan will be to take the updated ovpnmain.cgi and split the changes into a new range of patches and then submit them for consideration. That will probably end up later in November as I will be busy with personal things at the end of October / beginning of November. Regards, Adolf.

3 42

pakfire-builder problems after git pull
by Adolf Belka 02 Nov '23

02 Nov '23

Hi Michael, I just ran git pull which took me to commit build: Add implicit dist() when a makefile is passed -- followed by make and make install. Running pakfire-builder build beep/beep.nm gave the error message "Segmentation fault" Rolling back to cli: pakfire-builder: Implement "image create" then worked with beep fine. Then tried git pull, make, make install again and this time beep built without any problems. Then I tried sqlite and I got the segmentation fault again. Then I rolled back and sqlite built okay. Then ran sqlite again and this time part way through building my laptop logged out from my session. Logged back in and ran sqlite again and this after a short while everything froze and I had to reset the laptop. So rolling back to cli: pakfire-builder: Implement "image create" Does not stop the problem happening it just seems to show itself in different forms. I have now rolled back to cli: pakfire: Implement --yes which I think is where my last git pull had placed me. Running pakfire-builder on beep twice and sqlite four times has given no problems so that commit stage is confirmed good. Let me know if there is anything else I should try to narrow the problem down. Regards, Adolf. -- Sent from my laptop

3 16

October 2023 Archives
by Charles Brown 30 Oct '23

30 Oct '23

Is it just me? I see no updates to "October 2023 Archives" past Oct 1st. https://lists.ipfire.org/pipermail/development/2023-October/date.html .

4 5

[PATCH 1/2] zabbix_agentd: Update to 6.0.22 (LTS)
by Robin Roevens 30 Oct '23

30 Oct '23

- Update from version 6.0.21 to 6.0.22 - Update of rootfile not required Bugs fixed: - ZBX-23417: Fixed possible memory leak when checking modbus.get[] item New Features and Improvements: - ZBXNEXT-6554: Increased remote command execution limits to 16MB Full changelogs since 6.0.21: - https://www.zabbix.com/rn/rn6.0.22 --- lfs/zabbix_agentd | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/zabbix_agentd b/lfs/zabbix_agentd index 7c0d01150..0033d9a2c 100644 --- a/lfs/zabbix_agentd +++ b/lfs/zabbix_agentd @@ -26,7 +26,7 @@ include Config SUMMARY = Zabbix Agent -VER = 6.0.21 +VER = 6.0.22 THISAPP = zabbix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = zabbix_agentd -PAK_VER = 10 +PAK_VER = 11 DEPS = fping @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0928695a5f2729765a5b1fa31df410d585b50ef40a9d8379d6243c256c88234ac916bfaf13f62a8e28bb8fb4be48e83c1aecfd01f66dc45d4e25a20761d8ef82 +$(DL_FILE)_BLAKE2 = bba7911a24b00827c58d84938b5786d07f1eb44cbcad94cddf68b484ac9a2f514beb60225d006b8cefc5bbf92e51da27f26d9f6681e10f6322ed0841394e8d9d install : $(TARGET) -- 2.41.0 -- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud door MailScanner en lijkt schoon te zijn.

2 3

IPFire 2.x - Switching to udev from systemd
by Stefan Schantl 30 Oct '23

30 Oct '23

Hello devopment folks, the eudev project got abandoned by the main development team some time ago. See: https://gitweb.gentoo.org/proj/eudev.git/commit/?id=f559dc96f4105f605272def… Currently this old code base works very well on our systems, but we are getting troubles to compile some newer sort of software with it. The second very important point is we need a maintainded udev code base again. Sadly the only remaining udev code base is the officiall one, which got part of systemd and as a result of the pointed issues above the following patch series aims to bring a maintained udev back to IPFire. The first two patches will add some additional packages which are required by the build system. The third patch will adjust the LFS file to build udev from the systemd source code as minimal as possible (all systemd stuff is stripped). The last patch will adjust the build order of some packages to get udev and depending packages build. The new version of udev successfully has been compiled and tested in a virtual environment (KVM) which worked well. Because udev is a very critical part of the boot process, this changes have to be tested very well until we can merge this patchset. Please help testing and share your feedback. Best regards, -Stefan

2 8

[PATCHv2 1/4] python3-MarkupSafe: New package
by Stefan Schantl 29 Oct '23

29 Oct '23

This is a build dependency for udev (systemd) Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/python3-MarkupSafe | 16 +++++ lfs/python3-MarkupSafe | 79 ++++++++++++++++++++++ make.sh | 1 + 3 files changed, 96 insertions(+) create mode 100644 config/rootfiles/common/python3-MarkupSafe create mode 100644 lfs/python3-MarkupSafe diff --git a/config/rootfiles/common/python3-MarkupSafe b/config/rootfiles/common/python3-MarkupSafe new file mode 100644 index 000000000..452ae293b --- /dev/null +++ b/config/rootfiles/common/python3-MarkupSafe @@ -0,0 +1,16 @@ +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/PKG-INFO +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/SOURCES.txt +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/dependency_links.txt +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/native_libs.txt +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/not-zip-safe +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/top_level.txt +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/__init__.py +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_native.py +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_speedups.c +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_speedups.cpython-310-xxxMACHINExxx-linux-gnu.so +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_speedups.py +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_speedups.pyi +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/py.typed diff --git a/lfs/python3-MarkupSafe b/lfs/python3-MarkupSafe new file mode 100644 index 000000000..e76d6afca --- /dev/null +++ b/lfs/python3-MarkupSafe @@ -0,0 +1,79 @@ +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see <http://www.gnu.org/licenses/>. # +# # +############################################################################### + +############################################################################### +# Definitions +############################################################################### + +include Config + +VER = 2.1.3 + +THISAPP = MarkupSafe-$(VER) +DL_FILE = $(THISAPP).tar.gz +DL_FROM = $(URL_IPFIRE) +DIR_APP = $(DIR_SRC)/$(THISAPP) +TARGET = $(DIR_INFO)/$(THISAPP) + +############################################################################### +# Top-level Rules +############################################################################### + +objects = $(DL_FILE) + +$(DL_FILE) = $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_BLAKE2 = 1edca84c47c93fddfd22ee2fef2ba3907921ecb2d807c0e105c403d235e5abacba929be94970ad693f4c7d019653ece8255238d825bfc84d1a4a604fb476a783 + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +b2 : $(subst %,%_BLAKE2,$(objects)) + +dist: + @$(PAK) + +############################################################################### +# Downloading, checking, b2sum +############################################################################### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_BLAKE2,$(objects)) : + @$(B2SUM) + +############################################################################### +# Installation Details +############################################################################### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && python3 setup.py build + cd $(DIR_APP) && python3 setup.py install + @rm -rf $(DIR_APP) + @$(POSTBUILD) diff --git a/make.sh b/make.sh index e8aae4cf0..e5540c0f4 100755 --- a/make.sh +++ b/make.sh @@ -1144,6 +1144,7 @@ buildipfire() { lfsmake2 sqlite lfsmake2 python3 lfsmake2 python3-setuptools + lfsmake2 python3-MarkupSafe lfsmake2 ninja lfsmake2 meson lfsmake2 glib -- 2.39.2

1 3

Let's skip Novembers call
by Michael Tremer 27 Oct '23

27 Oct '23

Hello everyone, We already briefly talked about this at the end of this months call, that a lot of people are unavailable for next month’s call. It also happens that our usual strategy of moving it to the following Monday does not work, because a couple of people have said that that date does not work for them either. So, in order to not complicate things any further, let’s skip the November call and either move anything that cannot wait until the next one to the list, or have people arrange a call for an individual topic. Let me know if this all works for you. All the best, -Michael

2 1

[PATCH] kernel: update aarch64 rootfile
by Arne Fitzenreiter 27 Oct '23

27 Oct '23

Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> --- config/rootfiles/common/aarch64/linux | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/aarch64/linux index 7c96e2b8d..40eeb0260 100644 --- a/config/rootfiles/common/aarch64/linux +++ b/config/rootfiles/common/aarch64/linux @@ -8505,7 +8505,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/INTEL_XWAY_PHY #lib/modules/KVER-ipfire/build/include/config/INTERVAL_TREE #lib/modules/KVER-ipfire/build/include/config/IOMMU_API -#lib/modules/KVER-ipfire/build/include/config/IOMMU_DEFAULT_PASSTHROUGH +#lib/modules/KVER-ipfire/build/include/config/IOMMU_DEFAULT_DMA_STRICT #lib/modules/KVER-ipfire/build/include/config/IOMMU_DMA #lib/modules/KVER-ipfire/build/include/config/IOMMU_IOVA #lib/modules/KVER-ipfire/build/include/config/IOMMU_IO_PGTABLE @@ -8514,8 +8514,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/IONIC #lib/modules/KVER-ipfire/build/include/config/IOSCHED_BFQ #lib/modules/KVER-ipfire/build/include/config/IO_STRICT_DEVMEM -#lib/modules/KVER-ipfire/build/include/config/IO_URING -#lib/modules/KVER-ipfire/build/include/config/IO_WQ #lib/modules/KVER-ipfire/build/include/config/IP6_NF_FILTER #lib/modules/KVER-ipfire/build/include/config/IP6_NF_IPTABLES #lib/modules/KVER-ipfire/build/include/config/IP6_NF_MANGLE -- 2.34.1

1 0

[PATCH] kernel: update to 6.1.60
by Arne Fitzenreiter 27 Oct '23

27 Oct '23

Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> --- config/kernel/kernel.config.aarch64-ipfire | 2 +- config/kernel/kernel.config.riscv64-ipfire | 2 +- config/kernel/kernel.config.x86_64-ipfire | 2 +- lfs/linux | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire index aeffce154..76655eabf 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 6.1.59-ipfire Kernel Configuration +# Linux/arm64 6.1.60-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/config/kernel/kernel.config.riscv64-ipfire b/config/kernel/kernel.config.riscv64-ipfire index 6562bbd8f..07c6aa008 100644 --- a/config/kernel/kernel.config.riscv64-ipfire +++ b/config/kernel/kernel.config.riscv64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/riscv 6.1.59-ipfire Kernel Configuration +# Linux/riscv 6.1.60-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index 40f66849c..6d646c618 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.1.59-ipfire Kernel Configuration +# Linux/x86 6.1.60-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/lfs/linux b/lfs/linux index 5743ebf9d..ca82b6522 100644 --- a/lfs/linux +++ b/lfs/linux @@ -24,7 +24,7 @@ include Config -VER = 6.1.59 +VER = 6.1.60 ARM_PATCHES = 6.1.y-ipfire2 THISAPP = linux-$(VER) @@ -75,7 +75,7 @@ objects = \ $(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE) arm-multi-patches-$(ARM_PATCHES).patch.xz = $(URL_IPFIRE)/arm-multi-patches-$(ARM_PATCHES).patch.xz -$(DL_FILE)_BLAKE2 = 8b805f75f745e6fff9d7628fb1702475ad4c94010f764d733e1c1b4d860f6e593a79ccb8aa3a8c6c0de2ffdc2c192aaa661966549a7383ceb026a59e0d949e49 +$(DL_FILE)_BLAKE2 = 6d6723dd839b9003ea2a46be849e36516a97497ba3743860c8081795b372c70536465c46defd6ab4f97e81127b1bf40d78270b1a3a721a7331a935d1ef8417c4 arm-multi-patches-$(ARM_PATCHES).patch.xz_BLAKE2 = 7afc460562fb24bcd75784fc79de768f9b60780aedd88d1a847927169e31920bbb475b1ac1466c4a224a7876d16bd8d465b96202de12b74f6e2ccbfcec731ad3 install : $(TARGET) -- 2.34.1

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development October 2023