Development September 2019

development@lists.ipfire.org

13 participants
80 discussions

Core Update 136 (testing) report
by peter.mueller＠ipfire.org 19 Sep '19

19 Sep '19

Hello list, Core Update 136 (testing, https://blog.ipfire.org/post/ipfire-2-23-core-update-136-is-available-for-t…) is running here for ~ 20 hours without any known issues so far. The following parts of IPFire seem to work correctly: - DDNS - OpenVPN (RW connections only) - IPsec (N2N connections only) - Squid proxy (including authentication and upstream proxy) - Guardian Because of several issues, I have not tested Suricata so far, but will do with Stefans ISO later. Tor starts up correctly and is able to establish its circuits - there is a strange behaviour related to some operation mode, which I will investigate further and report back if it is a bug. I can confirm the WebUI now shows the correct country for IP addresses again. Thanks for this, it makes debugging much easier. However, I still think we need libloc some day... :-) Thanks, and best regards, Peter Müller

2 1

Improving build performance (on slow storage)
by Michael Tremer 18 Sep '19

18 Sep '19

Hello, I just wanted to post you an update about the build system which we have recently merged. The whole build process is primarily CPU bound and secondarily IO bound. Some builders have by definition slow storage (the ARM SBCs for example), but also for other reason it does not make sense to run the build on persistent storage. We can keep it in RAM instead which makes accessing files a lot faster and saves write cycles on the media. Therefore, the make.sh build script is mounting /usr/src in the build environment as a ramdisk. All source will be extracted there and the build will be performed. After the build is done, the whole ramdisk will be destroyed again. This feature is automatically enabled on all build systems which have 4GB of RAM or more. You can manually disable it with the ENABLE_RAMDISK=off switch in .config. I hope this brief email makes sense. If you have any questions, feel free to ask. Best, -Michael

3 8

[PATCH] IO-Socket-SSL: Update to version 2.066
by Erik Kapfer 18 Sep '19

18 Sep '19

Fix for "Undefined subroutine &IO::Socket::SSL::set_client_defaults called at /usr/libexec/git-core/git-send-email" problem. Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org> --- config/rootfiles/common/IO-Socket-SSL | 12 ++++++++++-- lfs/IO-Socket-SSL | 25 ++++++++++++++++++++----- 2 files changed, 30 insertions(+), 7 deletions(-) diff --git a/config/rootfiles/common/IO-Socket-SSL b/config/rootfiles/common/IO-Socket-SSL index 9780d6c2d..2cfcd22ca 100644 --- a/config/rootfiles/common/IO-Socket-SSL +++ b/config/rootfiles/common/IO-Socket-SSL @@ -1,6 +1,14 @@ -usr/lib/perl5/site_perl/5.30.0/IO/Socket +#usr/lib/perl5/site_perl/5.30.0/IO/Socket +#usr/lib/perl5/site_perl/5.30.0/IO/Socket/SSL usr/lib/perl5/site_perl/5.30.0/IO/Socket/SSL.pm -usr/lib/perl5/site_perl/5.30.0/MACHINE-linux-thread-multi/auto/IO/Socket +#usr/lib/perl5/site_perl/5.30.0/IO/Socket/SSL.pod +usr/lib/perl5/site_perl/5.30.0/IO/Socket/SSL/Intercept.pm +usr/lib/perl5/site_perl/5.30.0/IO/Socket/SSL/PublicSuffix.pm +usr/lib/perl5/site_perl/5.30.0/IO/Socket/SSL/Utils.pm +#usr/lib/perl5/site_perl/5.30.0/MACHINE-linux-thread-multi/auto/IO/Socket #usr/lib/perl5/site_perl/5.30.0/MACHINE-linux-thread-multi/auto/IO/Socket/SSL #usr/lib/perl5/site_perl/5.30.0/MACHINE-linux-thread-multi/auto/IO/Socket/SSL/.packlist #usr/share/man/man3/IO::Socket::SSL.3 +#usr/share/man/man3/IO::Socket::SSL::Intercept.3 +#usr/share/man/man3/IO::Socket::SSL::PublicSuffix.3 +#usr/share/man/man3/IO::Socket::SSL::Utils.3 diff --git a/lfs/IO-Socket-SSL b/lfs/IO-Socket-SSL index f328fd811..750f3e9ca 100644 --- a/lfs/IO-Socket-SSL +++ b/lfs/IO-Socket-SSL @@ -1,6 +1,21 @@ ############################################################################### -# IPFire.org - An Open Source Firewall Solution # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2007-2019 IPFire Team <info(a)ipfire.org> # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see <http://www.gnu.org/licenses/>. # +# # ############################################################################### ############################################################################### @@ -9,11 +24,11 @@ include Config -VER = 1.78 +VER = 2.066 THISAPP = IO-Socket-SSL-$(VER) DL_FILE = $(THISAPP).tar.gz -DL_FROM = http://cpan.noris.de/authors/id/S/SU/SULLR/ +DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -25,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 172201f3ebc400dc3733a0577ac29095 +$(DL_FILE)_MD5 = ecf96ce2ff9e04a03a2d101c76ce1020 install : $(TARGET) -- 2.12.2

2 1

[PATCH] Tor: update to 0.4.1.5
by peter.mueller＠ipfire.org 17 Sep '19

17 Sep '19

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/tor | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tor b/lfs/tor index 1e234e0ab..9fb607ef6 100644 --- a/lfs/tor +++ b/lfs/tor @@ -24,7 +24,7 @@ include Config -VER = 0.4.0.5 +VER = 0.4.1.5 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 41 +PAK_VER = 42 DEPS = "libseccomp" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 23278fc58d0014db22b428cdae3ea966 +$(DL_FILE)_MD5 = 4a7ee49500d536d6c301a73bac0d0393 install : $(TARGET) -- 2.16.4

1 0

[PATCH] pcre: Update to 8.43
by Matthias Fischer 15 Sep '19

15 Sep '19

For details see: http://www.pcre.org/original/changelog.txt Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/pcre | 138 +++++++++++++++++------------------ lfs/pcre | 6 +- 2 files changed, 72 insertions(+), 72 deletions(-) diff --git a/config/rootfiles/common/pcre b/config/rootfiles/common/pcre index 8e9f22ac4..6db5724fa 100644 --- a/config/rootfiles/common/pcre +++ b/config/rootfiles/common/pcre @@ -10,15 +10,15 @@ #usr/lib/libpcre.la usr/lib/libpcre.so usr/lib/libpcre.so.1 -usr/lib/libpcre.so.1.2.10 +usr/lib/libpcre.so.1.2.11 #usr/lib/libpcre16.la usr/lib/libpcre16.so usr/lib/libpcre16.so.0 -usr/lib/libpcre16.so.0.2.10 +usr/lib/libpcre16.so.0.2.11 #usr/lib/libpcre32.la usr/lib/libpcre32.so usr/lib/libpcre32.so.0 -usr/lib/libpcre32.so.0.0.10 +usr/lib/libpcre32.so.0.0.11 #usr/lib/libpcrecpp.la usr/lib/libpcrecpp.so usr/lib/libpcrecpp.so.0 @@ -32,72 +32,72 @@ usr/lib/libpcreposix.so.0.0.6 #usr/lib/pkgconfig/libpcre32.pc #usr/lib/pkgconfig/libpcrecpp.pc #usr/lib/pkgconfig/libpcreposix.pc -#usr/share/doc/pcre-pcre-8.42 -#usr/share/doc/pcre-pcre-8.42/AUTHORS -#usr/share/doc/pcre-pcre-8.42/COPYING -#usr/share/doc/pcre-pcre-8.42/ChangeLog -#usr/share/doc/pcre-pcre-8.42/LICENCE -#usr/share/doc/pcre-pcre-8.42/NEWS -#usr/share/doc/pcre-pcre-8.42/README -#usr/share/doc/pcre-pcre-8.42/html -#usr/share/doc/pcre-pcre-8.42/html/NON-AUTOTOOLS-BUILD.txt -#usr/share/doc/pcre-pcre-8.42/html/README.txt -#usr/share/doc/pcre-pcre-8.42/html/index.html -#usr/share/doc/pcre-pcre-8.42/html/pcre-config.html -#usr/share/doc/pcre-pcre-8.42/html/pcre.html -#usr/share/doc/pcre-pcre-8.42/html/pcre16.html -#usr/share/doc/pcre-pcre-8.42/html/pcre32.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_assign_jit_stack.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_compile.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_compile2.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_config.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_copy_named_substring.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_copy_substring.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_dfa_exec.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_exec.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_free_study.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_free_substring.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_free_substring_list.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_fullinfo.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_get_named_substring.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_get_stringnumber.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_get_stringtable_entries.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_get_substring.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_get_substring_list.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_jit_exec.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_jit_stack_alloc.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_jit_stack_free.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_maketables.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_pattern_to_host_byte_order.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_refcount.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_study.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_utf16_to_host_byte_order.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_utf32_to_host_byte_order.html -#usr/share/doc/pcre-pcre-8.42/html/pcre_version.html -#usr/share/doc/pcre-pcre-8.42/html/pcreapi.html -#usr/share/doc/pcre-pcre-8.42/html/pcrebuild.html -#usr/share/doc/pcre-pcre-8.42/html/pcrecallout.html -#usr/share/doc/pcre-pcre-8.42/html/pcrecompat.html -#usr/share/doc/pcre-pcre-8.42/html/pcrecpp.html -#usr/share/doc/pcre-pcre-8.42/html/pcredemo.html -#usr/share/doc/pcre-pcre-8.42/html/pcregrep.html -#usr/share/doc/pcre-pcre-8.42/html/pcrejit.html -#usr/share/doc/pcre-pcre-8.42/html/pcrelimits.html -#usr/share/doc/pcre-pcre-8.42/html/pcrematching.html -#usr/share/doc/pcre-pcre-8.42/html/pcrepartial.html -#usr/share/doc/pcre-pcre-8.42/html/pcrepattern.html -#usr/share/doc/pcre-pcre-8.42/html/pcreperform.html -#usr/share/doc/pcre-pcre-8.42/html/pcreposix.html -#usr/share/doc/pcre-pcre-8.42/html/pcreprecompile.html -#usr/share/doc/pcre-pcre-8.42/html/pcresample.html -#usr/share/doc/pcre-pcre-8.42/html/pcrestack.html -#usr/share/doc/pcre-pcre-8.42/html/pcresyntax.html -#usr/share/doc/pcre-pcre-8.42/html/pcretest.html -#usr/share/doc/pcre-pcre-8.42/html/pcreunicode.html -#usr/share/doc/pcre-pcre-8.42/pcre-config.txt -#usr/share/doc/pcre-pcre-8.42/pcre.txt -#usr/share/doc/pcre-pcre-8.42/pcregrep.txt -#usr/share/doc/pcre-pcre-8.42/pcretest.txt +#usr/share/doc/pcre-pcre-8.43 +#usr/share/doc/pcre-pcre-8.43/AUTHORS +#usr/share/doc/pcre-pcre-8.43/COPYING +#usr/share/doc/pcre-pcre-8.43/ChangeLog +#usr/share/doc/pcre-pcre-8.43/LICENCE +#usr/share/doc/pcre-pcre-8.43/NEWS +#usr/share/doc/pcre-pcre-8.43/README +#usr/share/doc/pcre-pcre-8.43/html +#usr/share/doc/pcre-pcre-8.43/html/NON-AUTOTOOLS-BUILD.txt +#usr/share/doc/pcre-pcre-8.43/html/README.txt +#usr/share/doc/pcre-pcre-8.43/html/index.html +#usr/share/doc/pcre-pcre-8.43/html/pcre-config.html +#usr/share/doc/pcre-pcre-8.43/html/pcre.html +#usr/share/doc/pcre-pcre-8.43/html/pcre16.html +#usr/share/doc/pcre-pcre-8.43/html/pcre32.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_assign_jit_stack.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_compile.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_compile2.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_config.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_copy_named_substring.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_copy_substring.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_dfa_exec.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_exec.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_free_study.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_free_substring.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_free_substring_list.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_fullinfo.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_get_named_substring.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_get_stringnumber.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_get_stringtable_entries.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_get_substring.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_get_substring_list.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_jit_exec.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_jit_stack_alloc.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_jit_stack_free.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_maketables.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_pattern_to_host_byte_order.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_refcount.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_study.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_utf16_to_host_byte_order.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_utf32_to_host_byte_order.html +#usr/share/doc/pcre-pcre-8.43/html/pcre_version.html +#usr/share/doc/pcre-pcre-8.43/html/pcreapi.html +#usr/share/doc/pcre-pcre-8.43/html/pcrebuild.html +#usr/share/doc/pcre-pcre-8.43/html/pcrecallout.html +#usr/share/doc/pcre-pcre-8.43/html/pcrecompat.html +#usr/share/doc/pcre-pcre-8.43/html/pcrecpp.html +#usr/share/doc/pcre-pcre-8.43/html/pcredemo.html +#usr/share/doc/pcre-pcre-8.43/html/pcregrep.html +#usr/share/doc/pcre-pcre-8.43/html/pcrejit.html +#usr/share/doc/pcre-pcre-8.43/html/pcrelimits.html +#usr/share/doc/pcre-pcre-8.43/html/pcrematching.html +#usr/share/doc/pcre-pcre-8.43/html/pcrepartial.html +#usr/share/doc/pcre-pcre-8.43/html/pcrepattern.html +#usr/share/doc/pcre-pcre-8.43/html/pcreperform.html +#usr/share/doc/pcre-pcre-8.43/html/pcreposix.html +#usr/share/doc/pcre-pcre-8.43/html/pcreprecompile.html +#usr/share/doc/pcre-pcre-8.43/html/pcresample.html +#usr/share/doc/pcre-pcre-8.43/html/pcrestack.html +#usr/share/doc/pcre-pcre-8.43/html/pcresyntax.html +#usr/share/doc/pcre-pcre-8.43/html/pcretest.html +#usr/share/doc/pcre-pcre-8.43/html/pcreunicode.html +#usr/share/doc/pcre-pcre-8.43/pcre-config.txt +#usr/share/doc/pcre-pcre-8.43/pcre.txt +#usr/share/doc/pcre-pcre-8.43/pcregrep.txt +#usr/share/doc/pcre-pcre-8.43/pcretest.txt #usr/share/man/man1/pcre-config.1 #usr/share/man/man1/pcregrep.1 #usr/share/man/man1/pcretest.1 diff --git a/lfs/pcre b/lfs/pcre index dc6621f1c..85dc1bc8d 100644 --- a/lfs/pcre +++ b/lfs/pcre @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2019 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 8.42 +VER = 8.43 THISAPP = pcre-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 085b6aa253e0f91cae70b3cdbe8c1ac2 +$(DL_FILE)_MD5 = 636222e79e392c3d95dcc545f24f98c4 install : $(TARGET) -- 2.18.0

1 0

Confusing error message
by Tapani Tarvainen 14 Sep '19

14 Sep '19

I just spent a stupid amount of time trying to figure out why IpFire insisted a fixed lease had "invalid fixed ip address" when I could see nothing wrong with the address. I had to read the source before I realized where the problem was: the same error message is also used when the *next-server* address is bad, and it doesn't accept server name there but wants an IP. I guess this would not be the most critical thing to fix but at least changing the error message would be nice. -- Tapani Tarvainen

4 5

[PATCH] dhcpcd: Update to 8.0.6
by Matthias Fischer 14 Sep '19

14 Sep '19

For details see: https://roy.marples.name/blog/dhcpcd-8-0-6-released "inet6: Fix default route not being installed DHCP: If root fs is network mounted, enable last lease extend man: Fix lint errors. BSD: avoid RTF_WASCLONED routes DHCP: Give a better message when packet validation fails DHCP: Ensure we have enough data to checksum IP and UDP The last change fixes a potential DoS attack introduced in dhcpcd-8.0.3 when the checksuming code was changed to accomodate variable length IP headers. The commit says since 7.2.0, but I've now decided that's not the case." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/dhcpcd | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/dhcpcd b/lfs/dhcpcd index 18d8ee4b7..d37cd67d3 100644 --- a/lfs/dhcpcd +++ b/lfs/dhcpcd @@ -24,7 +24,7 @@ include Config -VER = 8.0.3 +VER = 8.0.6 THISAPP = dhcpcd-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 182d506dd88773aec017d93a22d0f025 +$(DL_FILE)_MD5 = 5d3edd06595130f2b24609aade342488 install : $(TARGET) -- 2.18.0

1 0

[PATCH 0/2] zonconf: replace the nic-names with eth... and wlan... or not?
by Alex Koch 12 Sep '19

12 Sep '19

Hi, I stumbled into this when I was searching for an error in my vlan and bridge-config and want to start a discussion about if this should be changed or not. The zoneconf.cgi contains the following code-snippet: > # Name the physical NICs > # Even though they may not be really named like this, we will name them ethX or wlanX > my $ethcount = 0; > my $wlancount = 0; > > foreach (@nics) { > my $nic = $_->[1]; > > if (-e "/sys/class/net/$nic/wireless") { > $_->[1] = "wlan$wlancount"; > $_->[2] = 1; > $wlancount++; > } else { > $_->[1] = "eth$ethcount"; > $ethcount++; > } > } This renames all the nics to ethX or wlanX for the WUI. When you use any commandline tool (e.g ip addr or brctl show) the names of the NICs will mismatch with the ones shown in the WUI. Same for the assigened VLAN-IDs. For example, one of my setups: - WUI name --> real name - eth0 --> red0 - eth1 --> eth1 - eth2 --> orange0 - wlan0 --> blue0 - wlan1 --> wlan1 What is the goal of doing this? I personally think this is more confusing than useful. I would prefer to not rename the NICs. What do you think? I attached a patch to change the naming back to the real names. Please decide to merge it or not, depending on where the discussion ends. Secondly I created a patch to add the current output of "brctl show" and "ip addr" to the zoneconfig page. It's quite useful to have this by the hand without having to open a shell sometimes. Regards, Alex Alex Koch (2): zoneconf: Show real names of NICs in the WUI zoneconf: Add status output of "brctl show" and "ip addr" html/cgi-bin/zoneconf.cgi | 34 ++++++++++++++++++++++++---------- langs/de/cgi-bin/de.pl | 5 ++++- langs/en/cgi-bin/en.pl | 5 ++++- 3 files changed, 32 insertions(+), 12 deletions(-) -- 2.17.1

4 8

'iptables 1.8.3' => 'collectd' needs updated lib
by Matthias Fischer 11 Sep '19

11 Sep '19

Hi, during testing of 'iptables 1.8.3' - see https://patchwork.ipfire.org/patch/2401/ I found that the graphs for "firewallhits" in "Network (other)" stayed emtpy with "-nan Bps". During restart 'makegraphs' complained about a missing lib for 'iptables': root@ipfire: /var # /etc/init.d/collectd restart Stopping Collection daemon... [ OK ] Mounting RRD ramdisk... [ OK ] Starting Collection daemon... lt_dlopen ("/usr/lib/collectd/iptables.so") failed: file not found. The most common cause for this problem are missing dependencies. Use ldd(1) to check the dependencies of the plugin / shared object. Unable to load plugin iptables. [ OK ] 'ldd' showed 'not found', because during updating 'iptables' the 'libip4tc' and 'libip6tc'-symlinks were changed, but '/usr/lib/collectd/iptables.so' wasn't updated: root@ipfire: /usr/lib/collectd # ldd /usr/lib/collectd/iptables.so linux-gate.so.1 (0xb7f42000) libiptc.so.0 => /lib/libiptc.so.0 (0xb7f2b000) libip4tc.so.0 => not found libip6tc.so.0 => not found libc.so.6 => /lib/libc.so.6 (0xb7d61000) libip4tc.so.2 => /lib/libip4tc.so.2 (0xb7d58000) libip6tc.so.2 => /lib/libip6tc.so.2 (0xb7d4f000) /lib/ld-linux.so.2 (0xb7f44000) After updating '/usr/lib/collectd/iptables.so' to the current build it didn't complain anymore: root@ipfire: /usr/lib/collectd # ldd iptables.so linux-gate.so.1 (0xb7f8a000) libiptc.so.0 => /lib/libiptc.so.0 (0xb7f72000) libip4tc.so.2 => /lib/libip4tc.so.2 (0xb7f69000) libip6tc.so.2 => /lib/libip6tc.so.2 (0xb7f60000) libc.so.6 => /lib/libc.so.6 (0xb7d96000) /lib/ld-linux.so.2 (0xb7f8c000) 'makegraphs' restarted without errors and "firewallhits graph" are showing numbers again. So far, so good. But: how do we ship this update for 'collectd' the best way? Should we update ALL libs for 'collectd'? I checked the other libs, and besides 'iptables.so', 'ldd' showed no more 'not found'-errors. Any hints? Best, Matthias

2 4

[PATCH] iproute2: Update to 5.2.0
by Matthias Fischer 11 Sep '19

11 Sep '19

For details see: https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/ Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/iproute2 | 8 ++++++-- lfs/iproute2 | 6 +++--- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/common/iproute2 b/config/rootfiles/common/iproute2 index cf9a5c456..0de39e781 100644 --- a/config/rootfiles/common/iproute2 +++ b/config/rootfiles/common/iproute2 @@ -40,9 +40,7 @@ usr/share/bash-completion/completions/tc #usr/share/doc/iproute2/examples/README.cbq #usr/share/doc/iproute2/examples/README.iproute2+tc #usr/share/doc/iproute2/examples/SYN-DoS.rate.limit -#usr/share/doc/iproute2/examples/cbq.init-v0.7.3 #usr/share/doc/iproute2/examples/cbqinit.eth1 -#usr/share/doc/iproute2/examples/dhcp-client-script #usr/share/doc/iproute2/examples/diffserv #usr/share/doc/iproute2/examples/diffserv/Edge1 #usr/share/doc/iproute2/examples/diffserv/Edge2 @@ -63,8 +61,10 @@ usr/share/bash-completion/completions/tc #usr/share/man/man8/bridge.8 #usr/share/man/man8/ctstat.8 #usr/share/man/man8/devlink-dev.8 +#usr/share/man/man8/devlink-health.8 #usr/share/man/man8/devlink-monitor.8 #usr/share/man/man8/devlink-port.8 +#usr/share/man/man8/devlink-region.8 #usr/share/man/man8/devlink-resource.8 #usr/share/man/man8/devlink-sb.8 #usr/share/man/man8/devlink.8 @@ -111,6 +111,7 @@ usr/share/bash-completion/completions/tc #usr/share/man/man8/tc-basic.8 #usr/share/man/man8/tc-bfifo.8 #usr/share/man/man8/tc-bpf.8 +#usr/share/man/man8/tc-cake.8 #usr/share/man/man8/tc-cbq-details.8 #usr/share/man/man8/tc-cbq.8 #usr/share/man/man8/tc-cbs.8 @@ -121,6 +122,7 @@ usr/share/bash-completion/completions/tc #usr/share/man/man8/tc-csum.8 #usr/share/man/man8/tc-drr.8 #usr/share/man/man8/tc-ematch.8 +#usr/share/man/man8/tc-etf.8 #usr/share/man/man8/tc-flow.8 #usr/share/man/man8/tc-flower.8 #usr/share/man/man8/tc-fq.8 @@ -148,7 +150,9 @@ usr/share/bash-completion/completions/tc #usr/share/man/man8/tc-simple.8 #usr/share/man/man8/tc-skbedit.8 #usr/share/man/man8/tc-skbmod.8 +#usr/share/man/man8/tc-skbprio.8 #usr/share/man/man8/tc-stab.8 +#usr/share/man/man8/tc-taprio.8 #usr/share/man/man8/tc-tbf.8 #usr/share/man/man8/tc-tcindex.8 #usr/share/man/man8/tc-tunnel_key.8 diff --git a/lfs/iproute2 b/lfs/iproute2 index 4d2a6f4d7..27e0744d1 100644 --- a/lfs/iproute2 +++ b/lfs/iproute2 @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2019 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 4.18.0 +VER = 5.2.0 THISAPP = iproute2-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 8b8680e91390c57cab788fbf8e929479 +$(DL_FILE)_MD5 = 0cb2736e7bc2f56254a363d3d23703b7 install : $(TARGET) -- 2.18.0

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development September 2019