Development February 2020

development@lists.ipfire.org

13 participants
55 discussions

Drop unused/unmaintained packages
by Michael Tremer 15 Feb '20

15 Feb '20

Hello everyone, I would like to propose to drop the following packages. They are either not maintained upstream any more, not used by virtually anyone, or they are already broken and do not build anyways. I see a big danger here when we ship software that is dangerously broken. Of that, we have much more in the distribution and potentially we might drop it, too. If you have previously worked on a package or even submitted that package and want it to remain a part of IPFire, please check if any updates are available from upstream and submit patches. Otherwise there is a higher chance that your package is being dropped, too. We have only limited resources right now and would like to work on things that have a large impact on all users. Maintaining, patching and fixing outdated software where even maintainers have given up is time-consuming and benefits very few people. Please see these patches as a proposal. Feel free to disagree and become a maintainer for those packages. Best, -Michael

2 15

[PATCH] make.sh: Build lua before haproxy.
by Stefan Schantl 15 Feb '20

15 Feb '20

In commit b6ab15eaa2a899944c7edca99769fa4469f215d3 lua support for haproxy has been enabled, so lua now has to be compiled before haproxy. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- make.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/make.sh b/make.sh index 277ac8633..c0137ecc0 100755 --- a/make.sh +++ b/make.sh @@ -1618,9 +1618,9 @@ buildipfire() { lfsmake2 pigz lfsmake2 tmux lfsmake2 perl-Text-CSV_XS + lfsmake2 lua lfsmake2 haproxy lfsmake2 ipset - lfsmake2 lua lfsmake2 dnsdist lfsmake2 bird lfsmake2 frr -- 2.25.0

2 1

[PATCH 1/2] udev: Add more logging to bridge hotplug script
by Michael Tremer 14 Feb '20

14 Feb '20

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/udev/network-hotplug-bridges | 2 ++ 1 file changed, 2 insertions(+) diff --git a/config/udev/network-hotplug-bridges b/config/udev/network-hotplug-bridges index 5144a7712..30a671f04 100644 --- a/config/udev/network-hotplug-bridges +++ b/config/udev/network-hotplug-bridges @@ -72,6 +72,7 @@ ZONE=$(detect_zone) # Cannot proceed if we could not find a zone if [ -z "${ZONE}" ]; then + logger "Could not find a bridged zone for ${INTERFACE}" exit 0 fi @@ -93,6 +94,7 @@ case "${MODE}" in fi # Attach the physical device + logger "Attach ${INTERFACE} to ${BRIDGE}" ip link set dev "${INTERFACE}" master "${BRIDGE}" ip link set dev "${INTERFACE}" up ;; -- 2.20.1

1 1

[PATCH] suricata: Update to 5.0.2
by Stefan Schantl 14 Feb '20

14 Feb '20

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- lfs/suricata | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/suricata b/lfs/suricata index e17eb5e08..fdff36ca6 100644 --- a/lfs/suricata +++ b/lfs/suricata @@ -24,7 +24,7 @@ include Config -VER = 5.0.1 +VER = 5.0.2 THISAPP = suricata-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 8ba12183d5d4b086755e6f510f2149e2 +$(DL_FILE)_MD5 = 28470c05f0f1d3eae2a0c7312c3eabc3 install : $(TARGET) -- 2.25.0

2 1

[PATCH] haproxy: Update to 2.1.3
by Michael Tremer 13 Feb '20

13 Feb '20

This updates haproxy to the latest version. In addition, support for Lua scripts is compiled in. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- lfs/haproxy | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/lfs/haproxy b/lfs/haproxy index 308d96edf..fadb084bd 100644 --- a/lfs/haproxy +++ b/lfs/haproxy @@ -24,7 +24,7 @@ include Config -VER = 2.0.5 +VER = 2.1.3 THISAPP = haproxy-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = haproxy -PAK_VER = 12 +PAK_VER = 13 DEPS = "" @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 497c716adf4b056484601a887f34d152 +$(DL_FILE)_MD5 = bea4726d8c99f5d9bac0e62906a1f2d0 install : $(TARGET) @@ -83,8 +83,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && make $(MAKETUNING) CPU="generic" TARGET="linux-glibc" \ - USE_OPENSSL=1 USE_PCRE=1 USE_PCRE_JIT=1 USE_ZLIB=1 USE_REGPARM=1 \ - ADDINC="$(CFLAGS)" USE_LINUX_TPROXY=1 ADDLIB="$(LDFLAGS)" + USE_LUA=1 USE_OPENSSL=1 USE_PCRE=1 USE_PCRE_JIT=1 USE_ZLIB=1 USE_REGPARM=1 \ + LUA_LIB_NAME="lua" ADDINC="$(CFLAGS)" USE_LINUX_TPROXY=1 ADDLIB="$(LDFLAGS)" cd $(DIR_APP) && make install-bin install-man PREFIX=/usr -- 2.20.1

1 0

Qemu: reduce package size
by Jonatan Schlag 13 Feb '20

13 Feb '20

Hi, the following patch series reduces the package size by 50 MB. The removed files are needed for architectures we do not support. Maybe we should consider removing all other architectures except x86_64 to reduce the size further. Fixes: #12268 Greetings Jonatan

2 9

This week's updates on the web app
by Michael Tremer 13 Feb '20

13 Feb '20

Hi, Some people have asked me to announce whenever something changes on the web app. I would like to start sending regular emails that briefly let you know what changes. The web app is evolving slowly but surely and sometimes features go a little bit unnoticed. Mirrors Today, I briefly redesigned the listing of the mirror servers: https://mirrors.ipfire.org They have been a long list which is now split by country. I think that looks a lot nicer and is easier to navigate. https://git.ipfire.org/?p=ipfire.org.git;a=commitdiff;h=7a9e9176cd989e2fa63… Wiki Additionally, the wiki search has been massively improved. It now supports common search syntax like “quoted strings” and “-excluded terms” and so on. I am sure you know all these. https://git.ipfire.org/?p=ipfire.org.git;a=commitdiff;h=22e56c4a93383a45124… Blog Linked blog articles (and wiki pages, too) will now show a summary on social networks and our own Discourse when they are linked. There is an icon and some more information which makes them look catchier and allows users to decide quicker if they want to click on them or not. https://git.ipfire.org/?p=ipfire.org.git;a=commitdiff;h=4203b8c0eaeb722f0ff… https://git.ipfire.org/?p=ipfire.org.git;a=commitdiff;h=438bab7a482c2462ce9… Best, -Michael

1 0

[PATCH] dnsdist: Update to 1.4.0
by Michael Tremer 12 Feb '20

12 Feb '20

This patch updates dnsdist to the latest release. Additionally it includes /etc/sysconfig/dnsdist in the backup and enables DNS-over-TLS. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/backup/includes/dnsdist | 1 + lfs/dnsdist | 7 ++++--- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/config/backup/includes/dnsdist b/config/backup/includes/dnsdist index 8d9b82584..a88f27202 100644 --- a/config/backup/includes/dnsdist +++ b/config/backup/includes/dnsdist @@ -1 +1,2 @@ /etc/dnsdist.conf +/etc/sysconfig/dnsdist diff --git a/lfs/dnsdist b/lfs/dnsdist index 6a52f0f47..89a14f737 100644 --- a/lfs/dnsdist +++ b/lfs/dnsdist @@ -24,7 +24,7 @@ include Config -VER = 1.3.3 +VER = 1.4.0 THISAPP = dnsdist-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -33,7 +33,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) SUP_ARCH = x86_64 i586 PROG = dnsdist -PAK_VER = 3 +PAK_VER = 4 DEPS = "" @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 6bbcdf5296ac5303e88d779d1d57a4df +$(DL_FILE)_MD5 = 0fecd7d600c1c094b9fffffd27c44369 install : $(TARGET) @@ -85,6 +85,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) --sysconfdir=/etc \ --enable-openssl \ --disable-gnutls \ + --enable-dns-over-tls \ --with-lua \ --without-net-snmp -- 2.20.1

2 1

Making testing easier in IPFire 2
by Michael Tremer 12 Feb '20

12 Feb '20

This patchset makes testing easier in IPFire 2. Since we are now trying to use the nightly builds more, pakfire is now automatically configured to use the packages from the correct tree. That means that testing add-ons will be easier without any manual changes of any configuration files. Yay. Additionally, there is now a dropdown on the pakfire page where users can change from one tree to another one which makes testing core updates easier, too. Please review my changes and let me know if I messed anything up. Best, -Michael

2 9

Changes to nightly builds
by Michael Tremer 11 Feb '20

11 Feb '20

Hello folks, On this week’s telephone conference we have talked about how we can improve our release engineering. We have discovered a couple of problems: * We release fairly slowly. Releases are being held because of small bugs and features that are unrelated to it won’t be released either. * We have very few people taking part in testing. One reason is that updates are large and there are many things that needs to be tested/can break things. * That leads to finding bugs very late and since we release slowly, fixes might take months to show up at users. Although we do not have a bullet-proof solution, we have some ideas that we want to trial: I have added two more nightly builders, so that we have more build resources and nightly builds will be available quicker: * x86-01.haj.ipfire.org building x86_64 * x86-02.haj.ipfire.org building i586 * arm64-01.dub.ipfire.org building aarch64 * arm64-01.lon.ipfire.org building armv5tel So we will be guaranteed to have a build available about 4-5 hours after committing changes. That is awesome, because we can identify problems and fix them on the same day. Those servers are uploading all builds to https://nightly.ipfire.org and will now send a notification about a successful or failed build to nightly-builds(a)lists.ipfire.org. You can all subscribe to that list and see your changes break things or get notified when a new build is available for testing. Subscribe here: https://lists.ipfire.org/mailman/listinfo/nightly-builds Emails look like this: https://lists.ipfire.org/pipermail/nightly-builds/2020-February/000000.html Since packages cannot be installed from testing, we are going to automatically deploy these updates to the Pakfire trees: This has not been fully implemented and tested, yet, but the plan is as follows: Next will automatically be deployed into a new testing branch. That will be highly experimental and we will exclude the core updates here, because they would definitely be half-baked. Master will be automatically deployed to the current testing branch including the core updates. This is probably where most people will be. The stable release will obviously not be automatically deployed. We will modify the ISO images so that people who download and install a nightly build will automatically be part of the correct testing branch and find the right add-ons. This way we hope to achieve the following things: * Make the whole job a lot easier for Arne. He is spending a lot of time building releases, uploading them, etc. That is now almost fully automated. * We make testing easier for users as we will always be able to provide a recent build without putting any extra leg work into it. Please join the mailing list and join us with our testing efforts. Also leave your comments. I am sure there is more we can do to improve. Best, -Michael

1 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development February 2020