Pending package updates

Pending package updates

[Peter Müller]

[-- Attachment #1: Type: text/plain, Size: 754 bytes --]

Hello *,

some rather important packages within IPFire 2.x are in need of being updated:
- Strongswan 5.9.0
- Postfix 3.5.7
- libnetfilter_queue 1.0.5
- iptables 1.8.5
- libnetfilter_conntrack 1.0.8
- conntrack-tools 1.4.6

Since IPFire 2.x currently refuses to build on my workstation ("kernel too old", running
OpenSuSE Leap 15.1), I cannot take care of those until I found some spare time to undergo
a distribution upgrade, which probably does not happen before mid-September.

Is somebody else currently in luxury of being capable to build IPFire 2.x? If yes,
might I ask that person to have a look at those packages, so we can ship them in
Core Update 150? :-)

1001 thanks in advance.

Thanks, and best regards,
Peter Müller

Re: Pending package updates

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 1134 bytes --]

Hi Peter,

I am running Arch Linux based systems and it looks like I can build IPFire 2.x so I will have a go at those updates. As long as they are just version updates I should be able to manage that. If I come across any problems I will get back to the list.

All the best,

Adolf Belka

On 01/09/2020 20:22, Peter Müller wrote:
> Hello *,
>
> some rather important packages within IPFire 2.x are in need of being updated:
> - Strongswan 5.9.0
> - Postfix 3.5.7
> - libnetfilter_queue 1.0.5
> - iptables 1.8.5
> - libnetfilter_conntrack 1.0.8
> - conntrack-tools 1.4.6
>
> Since IPFire 2.x currently refuses to build on my workstation ("kernel too old", running
> OpenSuSE Leap 15.1), I cannot take care of those until I found some spare time to undergo
> a distribution upgrade, which probably does not happen before mid-September.
>
> Is somebody else currently in luxury of being capable to build IPFire 2.x? If yes,
> might I ask that person to have a look at those packages, so we can ship them in
> Core Update 150? :-)
>
> 1001 thanks in advance.
>
> Thanks, and best regards,
> Peter Müller

Re: Pending package updates

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1674 bytes --]

Hello Adolf,

Great that you raised your hand here. Looks like most of us are busy with loads of other tasks at the moment and we can need any help we can get :)

Please make sure you briefly say on the list what you are going to work on, so that we can potentially split the work between multiple people.

If you have any problems building any of the packages, just ask us here for help.

Best,
-Michael

> On 1 Sep 2020, at 22:01, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
> 
> Hi Peter,
> 
> I am running Arch Linux based systems and it looks like I can build IPFire 2.x so I will have a go at those updates. As long as they are just version updates I should be able to manage that. If I come across any problems I will get back to the list.
> 
> All the best,
> 
> Adolf Belka
> 
> On 01/09/2020 20:22, Peter Müller wrote:
>> Hello *,
>> 
>> some rather important packages within IPFire 2.x are in need of being updated:
>> - Strongswan 5.9.0
>> - Postfix 3.5.7
>> - libnetfilter_queue 1.0.5
>> - iptables 1.8.5
>> - libnetfilter_conntrack 1.0.8
>> - conntrack-tools 1.4.6
>> 
>> Since IPFire 2.x currently refuses to build on my workstation ("kernel too old", running
>> OpenSuSE Leap 15.1), I cannot take care of those until I found some spare time to undergo
>> a distribution upgrade, which probably does not happen before mid-September.
>> 
>> Is somebody else currently in luxury of being capable to build IPFire 2.x? If yes,
>> might I ask that person to have a look at those packages, so we can ship them in
>> Core Update 150? :-)
>> 
>> 1001 thanks in advance.
>> 
>> Thanks, and best regards,
>> Peter Müller

Re: Pending package updates

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 2103 bytes --]

Hallo Michael,

I recognised that you are all quite busy and I have only taken on the bacula add-on so far so when Peter asked for support I thought that was a good opportunity for me to help.

I am working my way through all the programs that Peter highlighted. So far I have been able to solve anything that came up.

Regards,

Adolf

On 02/09/2020 15:26, Michael Tremer wrote:
> Hello Adolf,
>
> Great that you raised your hand here. Looks like most of us are busy with loads of other tasks at the moment and we can need any help we can get :)
>
> Please make sure you briefly say on the list what you are going to work on, so that we can potentially split the work between multiple people.
>
> If you have any problems building any of the packages, just ask us here for help.
>
> Best,
> -Michael
>
>> On 1 Sep 2020, at 22:01, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
>>
>> Hi Peter,
>>
>> I am running Arch Linux based systems and it looks like I can build IPFire 2.x so I will have a go at those updates. As long as they are just version updates I should be able to manage that. If I come across any problems I will get back to the list.
>>
>> All the best,
>>
>> Adolf Belka
>>
>> On 01/09/2020 20:22, Peter Müller wrote:
>>> Hello *,
>>>
>>> some rather important packages within IPFire 2.x are in need of being updated:
>>> - Strongswan 5.9.0
>>> - Postfix 3.5.7
>>> - libnetfilter_queue 1.0.5
>>> - iptables 1.8.5
>>> - libnetfilter_conntrack 1.0.8
>>> - conntrack-tools 1.4.6
>>>
>>> Since IPFire 2.x currently refuses to build on my workstation ("kernel too old", running
>>> OpenSuSE Leap 15.1), I cannot take care of those until I found some spare time to undergo
>>> a distribution upgrade, which probably does not happen before mid-September.
>>>
>>> Is somebody else currently in luxury of being capable to build IPFire 2.x? If yes,
>>> might I ask that person to have a look at those packages, so we can ship them in
>>> Core Update 150? :-)
>>>
>>> 1001 thanks in advance.
>>>
>>> Thanks, and best regards,
>>> Peter Müller

Re: Pending package updates

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 8854 bytes --]

Hi All,

I have just had a problem when building iptables-1.8.5

iptables-1.8.5 itself built without a problem but I then had the following failure with the building of collectd. The only change I made was to the iptables lfs file with the version upgrade and md5 change.

I have repeated the clean and build and the same message occurs. I have not been able to find anything by googling for the failure messages. Can anyone help me with what I am doing wrong?

collectd (4.10.9) [       50 ][ FAIL ]

     libtool: link: gcc -shared  -fPIC -DPIC  .libs/hddtemp.o -O2 -m64 -mtune=generic -fstack-protector-strong   -Wl,-soname -Wl,hddtemp.so -o .libs/hddtemp.so
     libtool: link: ar cru .libs/hddtemp.a  hddtemp.o
     libtool: link: ranlib .libs/hddtemp.a
     libtool: link: ( cd ".libs" && rm -f "hddtemp.la" && ln -s "../hddtemp.la" "hddtemp.la" )
     /bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I.  -DPREFIX='"/usr"' -DCONFIGFILE='"/usr/etc/collectd.conf"' -DLOCALSTATEDIR='"/var"' -DPKGLOCALSTATEDIR='"/var/lib/collectd"' -DPIDFILE='"/var/run/collectd.pid"' -DPLUGINDIR='"/usr/lib/collectd"' -DPKGDATADIR='"/usr/share/collectd"'  -Wall   -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT interface_la-interface.lo -MD -MP -MF .deps/interface_la-interface.Tpo -c -o interface_la-interface.lo `test -f 'interface.c' || echo './'`interface.c
     libtool: compile:  gcc -DHAVE_CONFIG_H -I. -DPREFIX=\"/usr\" -DCONFIGFILE=\"/usr/etc/collectd.conf\" -DLOCALSTATEDIR=\"/var\" -DPKGLOCALSTATEDIR=\"/var/lib/collectd\" -DPIDFILE=\"/var/run/collectd.pid\" -DPLUGINDIR=\"/usr/lib/collectd\" -DPKGDATADIR=\"/usr/share/collectd\" -Wall -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT interface_la-interface.lo -MD -MP -MF .deps/interface_la-interface.Tpo -c interface.c  -fPIC -DPIC -o .libs/interface_la-interface.o
     libtool: compile:  gcc -DHAVE_CONFIG_H -I. -DPREFIX=\"/usr\" -DCONFIGFILE=\"/usr/etc/collectd.conf\" -DLOCALSTATEDIR=\"/var\" -DPKGLOCALSTATEDIR=\"/var/lib/collectd\" -DPIDFILE=\"/var/run/collectd.pid\" -DPLUGINDIR=\"/usr/lib/collectd\" -DPKGDATADIR=\"/usr/share/collectd\" -Wall -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT interface_la-interface.lo -MD -MP -MF .deps/interface_la-interface.Tpo -c interface.c -o interface_la-interface.o >/dev/null 2>&1
     mv -f .deps/interface_la-interface.Tpo .deps/interface_la-interface.Plo
     /bin/sh ../libtool  --tag=CC   --mode=link gcc -Wall   -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -module -avoid-version  -o interface.la -rpath /usr/lib/collectd interface_la-interface.lo
     libtool: link: gcc -shared  -fPIC -DPIC .libs/interface_la-interface.o    -O2 -m64 -mtune=generic -fstack-protector-strong   -Wl,-soname -Wl,interface.so -o .libs/interface.so
     libtool: link: ar cru .libs/interface.a interface_la-interface.o
     libtool: link: ranlib .libs/interface.a
     libtool: link: ( cd ".libs" && rm -f "interface.la" && ln -s "../interface.la" "interface.la" )
     /bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I.  -DPREFIX='"/usr"' -DCONFIGFILE='"/usr/etc/collectd.conf"' -DLOCALSTATEDIR='"/var"' -DPKGLOCALSTATEDIR='"/var/lib/collectd"' -DPIDFILE='"/var/run/collectd.pid"' -DPLUGINDIR='"/usr/lib/collectd"' -DPKGDATADIR='"/usr/share/collectd"'   -Wall  -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT iptables_la-iptables.lo -MD -MP -MF .deps/iptables_la-iptables.Tpo -c -o iptables_la-iptables.lo `test -f 'iptables.c' || echo './'`iptables.c
     libtool: compile:  gcc -DHAVE_CONFIG_H -I. -DPREFIX=\"/usr\" -DCONFIGFILE=\"/usr/etc/collectd.conf\" -DLOCALSTATEDIR=\"/var\" -DPKGLOCALSTATEDIR=\"/var/lib/collectd\" -DPIDFILE=\"/var/run/collectd.pid\" -DPLUGINDIR=\"/usr/lib/collectd\" -DPKGDATADIR=\"/usr/share/collectd\" -Wall -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT iptables_la-iptables.lo -MD -MP -MF .deps/iptables_la-iptables.Tpo -c iptables.c  -fPIC -DPIC -o .libs/iptables_la-iptables.o
     libtool: compile:  gcc -DHAVE_CONFIG_H -I. -DPREFIX=\"/usr\" -DCONFIGFILE=\"/usr/etc/collectd.conf\" -DLOCALSTATEDIR=\"/var\" -DPKGLOCALSTATEDIR=\"/var/lib/collectd\" -DPIDFILE=\"/var/run/collectd.pid\" -DPLUGINDIR=\"/usr/lib/collectd\" -DPKGDATADIR=\"/usr/share/collectd\" -Wall -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT iptables_la-iptables.lo -MD -MP -MF .deps/iptables_la-iptables.Tpo -c iptables.c -o iptables_la-iptables.o >/dev/null 2>&1
     mv -f .deps/iptables_la-iptables.Tpo .deps/iptables_la-iptables.Plo
     /bin/sh ../libtool  --tag=CC   --mode=link gcc -Wall  -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -module -avoid-version -lip4tc -lip6tc  -o iptables.la -rpath /usr/lib/collectd iptables_la-iptables.lo -liptc
     libtool: link: gcc -shared  -fPIC -DPIC .libs/iptables_la-iptables.o   /lib/libip4tc.so /lib/libip6tc.so -liptc  -O2 -m64 -mtune=generic -fstack-protector-strong -Wl,-soname -Wl,iptables.so -o .libs/iptables.so
     /usr/bin/ld: cannot find -liptc
     collect2: error: ld returned 1 exit status
     make[4]: *** [Makefile:2880: iptables.la] Error 1
     make[4]: Leaving directory '/usr/src/collectd-4.10.9/src'
     make[3]: *** [Makefile:4045: install-recursive] Error 1
     make[3]: Leaving directory '/usr/src/collectd-4.10.9/src'
     make[2]: *** [Makefile:4205: install] Error 2
     make[2]: Leaving directory '/usr/src/collectd-4.10.9/src'
     make[1]: *** [Makefile:512: install-recursive] Error 1
     make[1]: Leaving directory '/usr/src/collectd-4.10.9'
     make: *** [collectd:111: /usr/src/log/collectd-4.10.9] Error 2


Regards,

Adolf.


On 02/09/2020 15:26, Michael Tremer wrote:
> Hello Adolf,
>
> Great that you raised your hand here. Looks like most of us are busy with loads of other tasks at the moment and we can need any help we can get :)
>
> Please make sure you briefly say on the list what you are going to work on, so that we can potentially split the work between multiple people.
>
> If you have any problems building any of the packages, just ask us here for help.
>
> Best,
> -Michael
>
>> On 1 Sep 2020, at 22:01, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
>>
>> Hi Peter,
>>
>> I am running Arch Linux based systems and it looks like I can build IPFire 2.x so I will have a go at those updates. As long as they are just version updates I should be able to manage that. If I come across any problems I will get back to the list.
>>
>> All the best,
>>
>> Adolf Belka
>>
>> On 01/09/2020 20:22, Peter Müller wrote:
>>> Hello *,
>>>
>>> some rather important packages within IPFire 2.x are in need of being updated:
>>> - Strongswan 5.9.0
>>> - Postfix 3.5.7
>>> - libnetfilter_queue 1.0.5
>>> - iptables 1.8.5
>>> - libnetfilter_conntrack 1.0.8
>>> - conntrack-tools 1.4.6
>>>
>>> Since IPFire 2.x currently refuses to build on my workstation ("kernel too old", running
>>> OpenSuSE Leap 15.1), I cannot take care of those until I found some spare time to undergo
>>> a distribution upgrade, which probably does not happen before mid-September.
>>>
>>> Is somebody else currently in luxury of being capable to build IPFire 2.x? If yes,
>>> might I ask that person to have a look at those packages, so we can ship them in
>>> Core Update 150? :-)
>>>
>>> 1001 thanks in advance.
>>>
>>> Thanks, and best regards,
>>> Peter Müller

Re: Pending package updates

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 8976 bytes --]

Hi,

> On 2 Sep 2020, at 15:24, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
> 
> Hi All,
> 
> I have just had a problem when building iptables-1.8.5
> 
> iptables-1.8.5 itself built without a problem but I then had the following failure with the building of collectd. The only change I made was to the iptables lfs file with the version upgrade and md5 change.
> 
> I have repeated the clean and build and the same message occurs. I have not been able to find anything by googling for the failure messages. Can anyone help me with what I am doing wrong?

Did the iptables build by any chance remove libiptc?

> collectd (4.10.9) [       50 ][ FAIL ]
> 
>     libtool: link: gcc -shared  -fPIC -DPIC  .libs/hddtemp.o -O2 -m64 -mtune=generic -fstack-protector-strong   -Wl,-soname -Wl,hddtemp.so -o .libs/hddtemp.so
>     libtool: link: ar cru .libs/hddtemp.a  hddtemp.o
>     libtool: link: ranlib .libs/hddtemp.a
>     libtool: link: ( cd ".libs" && rm -f "hddtemp.la" && ln -s "../hddtemp.la" "hddtemp.la" )
>     /bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I.  -DPREFIX='"/usr"' -DCONFIGFILE='"/usr/etc/collectd.conf"' -DLOCALSTATEDIR='"/var"' -DPKGLOCALSTATEDIR='"/var/lib/collectd"' -DPIDFILE='"/var/run/collectd.pid"' -DPLUGINDIR='"/usr/lib/collectd"' -DPKGDATADIR='"/usr/share/collectd"'  -Wall   -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT interface_la-interface.lo -MD -MP -MF .deps/interface_la-interface.Tpo -c -o interface_la-interface.lo `test -f 'interface.c' || echo './'`interface.c
>     libtool: compile:  gcc -DHAVE_CONFIG_H -I. -DPREFIX=\"/usr\" -DCONFIGFILE=\"/usr/etc/collectd.conf\" -DLOCALSTATEDIR=\"/var\" -DPKGLOCALSTATEDIR=\"/var/lib/collectd\" -DPIDFILE=\"/var/run/collectd.pid\" -DPLUGINDIR=\"/usr/lib/collectd\" -DPKGDATADIR=\"/usr/share/collectd\" -Wall -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT interface_la-interface.lo -MD -MP -MF .deps/interface_la-interface.Tpo -c interface.c  -fPIC -DPIC -o .libs/interface_la-interface.o
>     libtool: compile:  gcc -DHAVE_CONFIG_H -I. -DPREFIX=\"/usr\" -DCONFIGFILE=\"/usr/etc/collectd.conf\" -DLOCALSTATEDIR=\"/var\" -DPKGLOCALSTATEDIR=\"/var/lib/collectd\" -DPIDFILE=\"/var/run/collectd.pid\" -DPLUGINDIR=\"/usr/lib/collectd\" -DPKGDATADIR=\"/usr/share/collectd\" -Wall -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT interface_la-interface.lo -MD -MP -MF .deps/interface_la-interface.Tpo -c interface.c -o interface_la-interface.o >/dev/null 2>&1
>     mv -f .deps/interface_la-interface.Tpo .deps/interface_la-interface.Plo
>     /bin/sh ../libtool  --tag=CC   --mode=link gcc -Wall   -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -module -avoid-version  -o interface.la -rpath /usr/lib/collectd interface_la-interface.lo
>     libtool: link: gcc -shared  -fPIC -DPIC .libs/interface_la-interface.o    -O2 -m64 -mtune=generic -fstack-protector-strong   -Wl,-soname -Wl,interface.so -o .libs/interface.so
>     libtool: link: ar cru .libs/interface.a interface_la-interface.o
>     libtool: link: ranlib .libs/interface.a
>     libtool: link: ( cd ".libs" && rm -f "interface.la" && ln -s "../interface.la" "interface.la" )
>     /bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I.  -DPREFIX='"/usr"' -DCONFIGFILE='"/usr/etc/collectd.conf"' -DLOCALSTATEDIR='"/var"' -DPKGLOCALSTATEDIR='"/var/lib/collectd"' -DPIDFILE='"/var/run/collectd.pid"' -DPLUGINDIR='"/usr/lib/collectd"' -DPKGDATADIR='"/usr/share/collectd"'   -Wall  -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT iptables_la-iptables.lo -MD -MP -MF .deps/iptables_la-iptables.Tpo -c -o iptables_la-iptables.lo `test -f 'iptables.c' || echo './'`iptables.c
>     libtool: compile:  gcc -DHAVE_CONFIG_H -I. -DPREFIX=\"/usr\" -DCONFIGFILE=\"/usr/etc/collectd.conf\" -DLOCALSTATEDIR=\"/var\" -DPKGLOCALSTATEDIR=\"/var/lib/collectd\" -DPIDFILE=\"/var/run/collectd.pid\" -DPLUGINDIR=\"/usr/lib/collectd\" -DPKGDATADIR=\"/usr/share/collectd\" -Wall -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT iptables_la-iptables.lo -MD -MP -MF .deps/iptables_la-iptables.Tpo -c iptables.c  -fPIC -DPIC -o .libs/iptables_la-iptables.o
>     libtool: compile:  gcc -DHAVE_CONFIG_H -I. -DPREFIX=\"/usr\" -DCONFIGFILE=\"/usr/etc/collectd.conf\" -DLOCALSTATEDIR=\"/var\" -DPKGLOCALSTATEDIR=\"/var/lib/collectd\" -DPIDFILE=\"/var/run/collectd.pid\" -DPLUGINDIR=\"/usr/lib/collectd\" -DPKGDATADIR=\"/usr/share/collectd\" -Wall -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -MT iptables_la-iptables.lo -MD -MP -MF .deps/iptables_la-iptables.Tpo -c iptables.c -o iptables_la-iptables.o >/dev/null 2>&1
>     mv -f .deps/iptables_la-iptables.Tpo .deps/iptables_la-iptables.Plo
>     /bin/sh ../libtool  --tag=CC   --mode=link gcc -Wall  -O2 -pipe -Wall -fexceptions -fPIC -m64 -mtune=generic -fstack-clash-protection -fcf-protection -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fcommon -Wno-error=deprecated-declarations -module -avoid-version -lip4tc -lip6tc  -o iptables.la -rpath /usr/lib/collectd iptables_la-iptables.lo -liptc
>     libtool: link: gcc -shared  -fPIC -DPIC .libs/iptables_la-iptables.o   /lib/libip4tc.so /lib/libip6tc.so -liptc  -O2 -m64 -mtune=generic -fstack-protector-strong -Wl,-soname -Wl,iptables.so -o .libs/iptables.so
>     /usr/bin/ld: cannot find -liptc
>     collect2: error: ld returned 1 exit status
>     make[4]: *** [Makefile:2880: iptables.la] Error 1
>     make[4]: Leaving directory '/usr/src/collectd-4.10.9/src'
>     make[3]: *** [Makefile:4045: install-recursive] Error 1
>     make[3]: Leaving directory '/usr/src/collectd-4.10.9/src'
>     make[2]: *** [Makefile:4205: install] Error 2
>     make[2]: Leaving directory '/usr/src/collectd-4.10.9/src'
>     make[1]: *** [Makefile:512: install-recursive] Error 1
>     make[1]: Leaving directory '/usr/src/collectd-4.10.9'
>     make: *** [collectd:111: /usr/src/log/collectd-4.10.9] Error 2
> 
> 
> Regards,
> 
> Adolf.
> 
> 
> On 02/09/2020 15:26, Michael Tremer wrote:
>> Hello Adolf,
>> 
>> Great that you raised your hand here. Looks like most of us are busy with loads of other tasks at the moment and we can need any help we can get :)
>> 
>> Please make sure you briefly say on the list what you are going to work on, so that we can potentially split the work between multiple people.
>> 
>> If you have any problems building any of the packages, just ask us here for help.
>> 
>> Best,
>> -Michael
>> 
>>> On 1 Sep 2020, at 22:01, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
>>> 
>>> Hi Peter,
>>> 
>>> I am running Arch Linux based systems and it looks like I can build IPFire 2.x so I will have a go at those updates. As long as they are just version updates I should be able to manage that. If I come across any problems I will get back to the list.
>>> 
>>> All the best,
>>> 
>>> Adolf Belka
>>> 
>>> On 01/09/2020 20:22, Peter Müller wrote:
>>>> Hello *,
>>>> 
>>>> some rather important packages within IPFire 2.x are in need of being updated:
>>>> - Strongswan 5.9.0
>>>> - Postfix 3.5.7
>>>> - libnetfilter_queue 1.0.5
>>>> - iptables 1.8.5
>>>> - libnetfilter_conntrack 1.0.8
>>>> - conntrack-tools 1.4.6
>>>> 
>>>> Since IPFire 2.x currently refuses to build on my workstation ("kernel too old", running
>>>> OpenSuSE Leap 15.1), I cannot take care of those until I found some spare time to undergo
>>>> a distribution upgrade, which probably does not happen before mid-September.
>>>> 
>>>> Is somebody else currently in luxury of being capable to build IPFire 2.x? If yes,
>>>> might I ask that person to have a look at those packages, so we can ship them in
>>>> Core Update 150? :-)
>>>> 
>>>> 1001 thanks in advance.
>>>> 
>>>> Thanks, and best regards,
>>>> Peter Müller

Re: Pending package updates

[Matthias Fischer]

[-- Attachment #1: Type: text/plain, Size: 513 bytes --]

Hi,

On 02.09.2020 17:36, Michael Tremer wrote:
> ...
>> I have repeated the clean and build and the same message occurs. I have not been able to find anything by googling for the failure messages. Can anyone help me with what I am doing wrong?
> Did the iptables build by any chance remove libiptc?
> 

Yes.

First test (log file):

...
-lib/libiptc.so
-lib/libiptc.so.0
-lib/libiptc.so.0.0.0
-lib/libxtables.so.12.2.0
...

Just testing a clean 64bit-build, still running.

Best,
Matthias

Re: Pending package updates

[Matthias Fischer]

[-- Attachment #1: Type: text/plain, Size: 186 bytes --]

Hi,

On 02.09.2020 17:36, Michael Tremer wrote:
> Did the iptables build by any chance remove libiptc?

Yes. Confirmed with a clean build.

No idea how to fix this, yet.

Best,
Matthias

Re: Pending package updates

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 737 bytes --]

Hi all,

I ran the build of iptables 1.8.3 and 1.8.5 and compared the logs for the two of them. The problem seems to be that 1.8.5 never creates the libiptc.so libraries. It only creates the libip4tc.so and libip6tc.so libraries.

iptables-1.8.3 creates libip4tc.so, libip6tc.so and libiptc.so libraries.


I have checked the changelogs for the 1.8.4 and 1.8.5 releases of iptables and it doesn't mention anything about this, as far as I can see.


Regards,

Adolf

On 02/09/2020 20:27, Matthias Fischer wrote:
> Hi,
>
> On 02.09.2020 17:36, Michael Tremer wrote:
>> Did the iptables build by any chance remove libiptc?
> Yes. Confirmed with a clean build.
>
> No idea how to fix this, yet.
>
> Best,
> Matthias

Re: Pending package updates

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 1318 bytes --]

Hi all,

Just had a look through the netfilter mailing list archive and found the announcement for iptables-1.8.4 and it mentions the following:-

"libiptc: - Generic libiptc.so shared object is no longer built, likely all users link to libip4tc.so or libip6tc.so directly"

So that explains the problem we are having. So it looks like collectd needs to be rewritten to use libip4tc.so or libip6tc.so shared libraries.  Until then I presume we have to stay on iptables-1.8.3

Regards,

Adolf


On 03/09/2020 10:14, Adolf Belka wrote:
> Hi all,
>
> I ran the build of iptables 1.8.3 and 1.8.5 and compared the logs for the two of them. The problem seems to be that 1.8.5 never creates the libiptc.so libraries. It only creates the libip4tc.so and libip6tc.so libraries.
>
> iptables-1.8.3 creates libip4tc.so, libip6tc.so and libiptc.so libraries.
>
>
> I have checked the changelogs for the 1.8.4 and 1.8.5 releases of iptables and it doesn't mention anything about this, as far as I can see.
>
>
> Regards,
>
> Adolf
>
> On 02/09/2020 20:27, Matthias Fischer wrote:
>> Hi,
>>
>> On 02.09.2020 17:36, Michael Tremer wrote:
>>> Did the iptables build by any chance remove libiptc?
>> Yes. Confirmed with a clean build.
>>
>> No idea how to fix this, yet.
>>
>> Best,
>> Matthias

Re: Pending package updates

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1838 bytes --]

Hello,

> On 3 Sep 2020, at 09:23, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
> 
> Hi all,
> 
> Just had a look through the netfilter mailing list archive and found the announcement for iptables-1.8.4 and it mentions the following:-
> 
> "libiptc: - Generic libiptc.so shared object is no longer built, likely all users link to libip4tc.so or libip6tc.so directly"
> 
> So that explains the problem we are having. So it looks like collectd needs to be rewritten to use libip4tc.so or libip6tc.so shared libraries.  Until then I presume we have to stay on iptables-1.8.3

For the time being, yes. There are some other packages to work on first.

However, this would be an easy fix we can simply patch into our version of collectd and therefore we should be fine.

Could someone please submit a patch for iptables which we are not going to merge, yet, and create a ticket for fixing collectd and assigning that to me?

Best,
-Michael

> Regards,
> 
> Adolf
> 
> 
> On 03/09/2020 10:14, Adolf Belka wrote:
>> Hi all,
>> 
>> I ran the build of iptables 1.8.3 and 1.8.5 and compared the logs for the two of them. The problem seems to be that 1.8.5 never creates the libiptc.so libraries. It only creates the libip4tc.so and libip6tc.so libraries.
>> 
>> iptables-1.8.3 creates libip4tc.so, libip6tc.so and libiptc.so libraries.
>> 
>> 
>> I have checked the changelogs for the 1.8.4 and 1.8.5 releases of iptables and it doesn't mention anything about this, as far as I can see.
>> 
>> 
>> Regards,
>> 
>> Adolf
>> 
>> On 02/09/2020 20:27, Matthias Fischer wrote:
>>> Hi,
>>> 
>>> On 02.09.2020 17:36, Michael Tremer wrote:
>>>> Did the iptables build by any chance remove libiptc?
>>> Yes. Confirmed with a clean build.
>>> 
>>> No idea how to fix this, yet.
>>> 
>>> Best,
>>> Matthias

Re: Pending package updates

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 2204 bytes --]

Hallo Michael,

I have created patch files for libnetfilter-queue-1.0.5, libnetfilter-conntrack-1.0.6 and conntrack-tools-1.4.6

Should I email these in or wait till the situation with iptable-1.8.5 is resolved. All three packages built without any problems.

Regards,

Adolf

On 04/09/2020 17:46, Michael Tremer wrote:
> Hello,
>
>> On 3 Sep 2020, at 09:23, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
>>
>> Hi all,
>>
>> Just had a look through the netfilter mailing list archive and found the announcement for iptables-1.8.4 and it mentions the following:-
>>
>> "libiptc: - Generic libiptc.so shared object is no longer built, likely all users link to libip4tc.so or libip6tc.so directly"
>>
>> So that explains the problem we are having. So it looks like collectd needs to be rewritten to use libip4tc.so or libip6tc.so shared libraries.  Until then I presume we have to stay on iptables-1.8.3
> For the time being, yes. There are some other packages to work on first.
>
> However, this would be an easy fix we can simply patch into our version of collectd and therefore we should be fine.
>
> Could someone please submit a patch for iptables which we are not going to merge, yet, and create a ticket for fixing collectd and assigning that to me?
>
> Best,
> -Michael
>
>> Regards,
>>
>> Adolf
>>
>>
>> On 03/09/2020 10:14, Adolf Belka wrote:
>>> Hi all,
>>>
>>> I ran the build of iptables 1.8.3 and 1.8.5 and compared the logs for the two of them. The problem seems to be that 1.8.5 never creates the libiptc.so libraries. It only creates the libip4tc.so and libip6tc.so libraries.
>>>
>>> iptables-1.8.3 creates libip4tc.so, libip6tc.so and libiptc.so libraries.
>>>
>>>
>>> I have checked the changelogs for the 1.8.4 and 1.8.5 releases of iptables and it doesn't mention anything about this, as far as I can see.
>>>
>>>
>>> Regards,
>>>
>>> Adolf
>>>
>>> On 02/09/2020 20:27, Matthias Fischer wrote:
>>>> Hi,
>>>>
>>>> On 02.09.2020 17:36, Michael Tremer wrote:
>>>>> Did the iptables build by any chance remove libiptc?
>>>> Yes. Confirmed with a clean build.
>>>>
>>>> No idea how to fix this, yet.
>>>>
>>>> Best,
>>>> Matthias

Re: Pending package updates

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 2547 bytes --]

Hi Michael,

I was going to raise a ticket for fixing collectd in bugzilla but I need an account to do that and I couldn't find any registration option to create an account. Can you help me with getting an account on Bugzilla for IPFire.

I need this anyway as I want to have a look at some of the bugs listed in there to see if there is anything that I can help with.


For the iptables patch, I will send that shortly and also the patches for libnetfilter-queue, libnetfilter-conntrack and conntrack-tools. Then you have them all available and can then decide which ones you will merge and when.

Regards,

Adolf.

On 04/09/2020 17:46, Michael Tremer wrote:
> Hello,
>
>> On 3 Sep 2020, at 09:23, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
>>
>> Hi all,
>>
>> Just had a look through the netfilter mailing list archive and found the announcement for iptables-1.8.4 and it mentions the following:-
>>
>> "libiptc: - Generic libiptc.so shared object is no longer built, likely all users link to libip4tc.so or libip6tc.so directly"
>>
>> So that explains the problem we are having. So it looks like collectd needs to be rewritten to use libip4tc.so or libip6tc.so shared libraries.  Until then I presume we have to stay on iptables-1.8.3
> For the time being, yes. There are some other packages to work on first.
>
> However, this would be an easy fix we can simply patch into our version of collectd and therefore we should be fine.
>
> Could someone please submit a patch for iptables which we are not going to merge, yet, and create a ticket for fixing collectd and assigning that to me?
>
> Best,
> -Michael
>
>> Regards,
>>
>> Adolf
>>
>>
>> On 03/09/2020 10:14, Adolf Belka wrote:
>>> Hi all,
>>>
>>> I ran the build of iptables 1.8.3 and 1.8.5 and compared the logs for the two of them. The problem seems to be that 1.8.5 never creates the libiptc.so libraries. It only creates the libip4tc.so and libip6tc.so libraries.
>>>
>>> iptables-1.8.3 creates libip4tc.so, libip6tc.so and libiptc.so libraries.
>>>
>>>
>>> I have checked the changelogs for the 1.8.4 and 1.8.5 releases of iptables and it doesn't mention anything about this, as far as I can see.
>>>
>>>
>>> Regards,
>>>
>>> Adolf
>>>
>>> On 02/09/2020 20:27, Matthias Fischer wrote:
>>>> Hi,
>>>>
>>>> On 02.09.2020 17:36, Michael Tremer wrote:
>>>>> Did the iptables build by any chance remove libiptc?
>>>> Yes. Confirmed with a clean build.
>>>>
>>>> No idea how to fix this, yet.
>>>>
>>>> Best,
>>>> Matthias

Re: Pending package updates

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 2856 bytes --]

Hi Michael,

Ignore my earlier question about logging in to the IPFire Bugzilla. I was using the wrong email address for logging in. I have successfully logged in now.

Regards,

Adolf.

On 07/09/2020 13:33, Adolf Belka wrote:
> Hi Michael,
>
> I was going to raise a ticket for fixing collectd in bugzilla but I need an account to do that and I couldn't find any registration option to create an account. Can you help me with getting an account on Bugzilla for IPFire.
>
> I need this anyway as I want to have a look at some of the bugs listed in there to see if there is anything that I can help with.
>
>
> For the iptables patch, I will send that shortly and also the patches for libnetfilter-queue, libnetfilter-conntrack and conntrack-tools. Then you have them all available and can then decide which ones you will merge and when.
>
> Regards,
>
> Adolf.
>
> On 04/09/2020 17:46, Michael Tremer wrote:
>> Hello,
>>
>>> On 3 Sep 2020, at 09:23, Adolf Belka <ahb.ipfire(a)gmail.com> wrote:
>>>
>>> Hi all,
>>>
>>> Just had a look through the netfilter mailing list archive and found the announcement for iptables-1.8.4 and it mentions the following:-
>>>
>>> "libiptc: - Generic libiptc.so shared object is no longer built, likely all users link to libip4tc.so or libip6tc.so directly"
>>>
>>> So that explains the problem we are having. So it looks like collectd needs to be rewritten to use libip4tc.so or libip6tc.so shared libraries.  Until then I presume we have to stay on iptables-1.8.3
>> For the time being, yes. There are some other packages to work on first.
>>
>> However, this would be an easy fix we can simply patch into our version of collectd and therefore we should be fine.
>>
>> Could someone please submit a patch for iptables which we are not going to merge, yet, and create a ticket for fixing collectd and assigning that to me?
>>
>> Best,
>> -Michael
>>
>>> Regards,
>>>
>>> Adolf
>>>
>>>
>>> On 03/09/2020 10:14, Adolf Belka wrote:
>>>> Hi all,
>>>>
>>>> I ran the build of iptables 1.8.3 and 1.8.5 and compared the logs for the two of them. The problem seems to be that 1.8.5 never creates the libiptc.so libraries. It only creates the libip4tc.so and libip6tc.so libraries.
>>>>
>>>> iptables-1.8.3 creates libip4tc.so, libip6tc.so and libiptc.so libraries.
>>>>
>>>>
>>>> I have checked the changelogs for the 1.8.4 and 1.8.5 releases of iptables and it doesn't mention anything about this, as far as I can see.
>>>>
>>>>
>>>> Regards,
>>>>
>>>> Adolf
>>>>
>>>> On 02/09/2020 20:27, Matthias Fischer wrote:
>>>>> Hi,
>>>>>
>>>>> On 02.09.2020 17:36, Michael Tremer wrote:
>>>>>> Did the iptables build by any chance remove libiptc?
>>>>> Yes. Confirmed with a clean build.
>>>>>
>>>>> No idea how to fix this, yet.
>>>>>
>>>>> Best,
>>>>> Matthias

Re: Pending package updates

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1700 bytes --]

Hello,

> On 1 Sep 2020, at 19:22, Peter Müller <peter.mueller(a)ipfire.org> wrote:
> 
> Hello *,
> 
> some rather important packages within IPFire 2.x are in need of being updated:
> - Strongswan 5.9.0
> - Postfix 3.5.7
> - libnetfilter_queue 1.0.5
> - iptables 1.8.5
> - libnetfilter_conntrack 1.0.8
> - conntrack-tools 1.4.6

Why are all these urgent updates?

I could not find any security-related issues in those packages and we are mostly one version behind. Strongswan was just released days ago and interesting features for us have been added.

> Since IPFire 2.x currently refuses to build on my workstation ("kernel too old", running
> OpenSuSE Leap 15.1), I cannot take care of those until I found some spare time to undergo
> a distribution upgrade, which probably does not happen before mid-September.

Yes, since we rebased the toolchain we require kernel 4.14:

  https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=lfs/glibc;h=802c372a904bf283fe2d3bd26b220d058b7fa2fe;hb=HEAD#l67

I changed it so that our version of glibc does not ship any old compatibility stuff that we do not need because IPFire itself is on 4.14 for years and as far as I knew any major distribution is on a more recent release.

Is this a common thing now and we need to downgrade? Any reason why you are not on the latest release of OpenSUSE Leap? 15.2 is out for some now.

> Is somebody else currently in luxury of being capable to build IPFire 2.x?

LOL Luxury

> If yes,
> might I ask that person to have a look at those packages, so we can ship them in
> Core Update 150? :-)
> 
> 1001 thanks in advance.
> 
> Thanks, and best regards,
> Peter Müller

-Michael