Development October 2024

development@lists.ipfire.org

10 participants
35 discussions

Packaging different Zabbix agent versions
by Robin Roevens 02 Nov '24

02 Nov '24

Hi all I would like to start releasing packages for Zabbix Agent 7.0 (new LTS) as it offers some added value when used with Zabbix server 7.0 (heartbeat, item-level custom timeouts, ...). However, the agent is not backwards compatible. Hence, if I would update the zabbix_agentd package to contain v7.0, people still running Zabbix 6.0 LTS (still supported until feb. 2027) or even 6.2 or 6.4 would then no longer be able to monitor IPFire. So it would be nice if we could provide both zabbix_agentd 6.0 and 7.0 packages so users can choose depending on their Zabbix server version. I think offering different versions of the same software is not yet done before? How should I do this? Just add a new package zabbix_agentd7 next to the current zabbix_agentd package? But if so: - Can we then rename the zabbix_agentd pak to zabbix_agentd6 (I don't immediately see how that should be handeled during upgrade?). If not possible or feasable, that's not that big of a deal as in time (feb 2027) that package can be removed and that "problem" then has solved itself. So this is maybe just some unneeded hassle. - Can we prevent users from installing both packages as they will conflict? (both file-wise and used port-wise) - And what should I do with the IPFire specific customizations as they will be identical for both packages.: - Just duplicate them to both packages, (probably the easiest) - or move them to yet another package "zabbix_agentd_ipfire_extension".. And then let both agent packages depend on that one. But that may be confusing to the user as that package would require one of the then 2 zabbix_agentd packages to be of any use, but we can't do a zabbix_agentd OR zabbix_agentd7 dependency, I think? ... Or should we just refrain from adding v7.0 for now.. and then probably until 2027 or until ipfire3, (if pakfire there supports such packages conflict/dependency mechanisms?).. but by then there probably is already an 8.0 and possibly a 9.0.. So... I would like your thoughts about this ? Robin

2 3

Fwd: [intel/Intel-Linux-Processor-Microcode-Data-Files] Release microcode-20241029 - microcode-20241029 Release
by Michael Tremer 30 Oct '24

30 Oct '24

Is anyone up for grabbing this one? > Begin forwarded message: > > From: MCU Administrator <notifications(a)github.com> > Subject: [intel/Intel-Linux-Processor-Microcode-Data-Files] Release microcode-20241029 - microcode-20241029 Release > Date: 29 October 2024 at 23:50:48 GMT > To: intel/Intel-Linux-Processor-Microcode-Data-Files <Intel-Linux-Processor-Microcode-Data-Files(a)noreply.github.com> > Cc: Subscribed <subscribed(a)noreply.github.com> > Reply-To: intel/Intel-Linux-Processor-Microcode-Data-Files <noreply(a)github.com> > > > microcode-20241029 Release <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/release…> > Repository: intel/Intel-Linux-Processor-Microcode-Data-Files <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files> · Tag: microcode-20241029 <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/tree/mi…> · Commit: 129f82f <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/commit/…> · Released by: mcu-administrator <https://github.com/mcu-administrator> > Release Notes > > microcode-20241029 <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/release…> > Purpose > > Update for functional issues. Refer to 14th/13th Generation Intel® Core™ Processor Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/740518> for details. > New Platforms > > Processor Stepping F-M-S/PI Old Ver New Ver Products > Updated Platforms > > Processor Stepping F-M-S/PI Old Ver New Ver Products > RPL-E/HX/S B0 06-b7-01/32 00000129 0000012b Core Gen13/Gen14 > — > This release has 2 assets: > > Source code (zip) > Source code (tar.gz) > Visit the release page <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/release…> to download them. > > — > You are receiving this because you are watching this repository. > View it on GitHub <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/release…> or unsubscribe <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/unsubsc…> from all notifications for this repository. >

2 3

[PATCH] intel-microcode: Update to version 20241029
by Adolf Belka 30 Oct '24

30 Oct '24

- Update from version 20240910 to 20241029 - Update of rootfile not required - Changelog 20241029 Update for functional issues. Refer to 14th/13th Generation Intel® Core™ Processor Specification Update for details at https://cdrdv2.intel.com/v1/dl/getContent/740518 Updated Platforms Processor Stepping F-M-S/PI Old Ver New Ver Products RPL-E/HX/S B0 06-b7-01/32 00000129 0000012b Core Gen13/Gen14 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/intel-microcode | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/intel-microcode b/lfs/intel-microcode index 7b77c2543..1d14b0524 100644 --- a/lfs/intel-microcode +++ b/lfs/intel-microcode @@ -24,7 +24,7 @@ include Config -VER = 20240910 +VER = 20241029 THISAPP = Intel-Linux-Processor-Microcode-Data-Files-microcode-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -41,7 +41,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b4c353dd340ef8004e5be2e596de0ebaf8366684a3371207e14d3d8c0e4bbdc5a9c75d8279d280d1029452368556a0c2e7bf85f3fe75f1b1560e16c953f223b7 +$(DL_FILE)_BLAKE2 = 22b6b4a4a667e972da6663195bd22facb2473fb6204936f1f548529f2fb03eb4d8c8ec7c87cb3fa51f9845a26e738df245da97e3459127c7352d16bffb9482b2 install : $(TARGET) -- 2.47.0

1 0

Re: [PATCH] Makes entries in dnsforward.cgi visible
by waynetsun＠ucpix.de 25 Oct '24

25 Oct '24

FYI… This patch is the answer to BZ#13783.

1 0

Re: [PATCH] BZ#13783 dnsforward.cgi: make entries visible
by waynetsun＠ucpix.de 25 Oct '24

25 Oct '24

Hi there! Please disregard this patch and if possible delete it. It was a mistake. Sorry for the inconveniences! Greetings, Wayne

1 0

[PATCH] Makes entries in dnsforward.cgi visible
by Wayne 24 Oct '24

24 Oct '24

--- html/cgi-bin/dnsforward.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/dnsforward.cgi b/html/cgi-bin/dnsforward.cgi index 4af5ed200..d5a46b675 100644 --- a/html/cgi-bin/dnsforward.cgi +++ b/html/cgi-bin/dnsforward.cgi @@ -325,7 +325,7 @@ foreach my $line (@current) $col="bgcolor='${Header::colouryellow}'"; } elsif ($disable_dnssec eq 'on') { print "<tr>"; - $col="bgcolor='${Header::colourred}' style='color: white'"; } + $col="bgcolor='${Header::colourred}' style='color: black'"; } elsif ($id % 2) { print "<tr>"; $col="bgcolor='$color{'color22'}'"; } -- 2.39.5 (Apple Git-154)

1 0

[PATCH] BZ#13783 dnsforward.cgi: make entries visible
by Wayne 24 Oct '24

24 Oct '24

From: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- lfs/hostapd | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/lfs/hostapd b/lfs/hostapd index 3f8bc1be7..306b32641 100644 --- a/lfs/hostapd +++ b/lfs/hostapd @@ -25,15 +25,15 @@ include Config SUMMARY = Daemon for running a WPA capable Access Point -VER = 2_11 +VER = 64d60bb4 -THISAPP = hostap_$(VER) -DL_FILE = $(THISAPP).tar.bz2 +THISAPP = hostap-$(VER) +DL_FILE = $(THISAPP).tar.xz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = hostapd -PAK_VER = 65 +PAK_VER = 66 DEPS = @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = de98a3634ff937b0068329219e4fa5dece34c9eeb27fa81a9e7de689d5dd2936ceb0ea43923a0e994e0a7bfcd71709b5f739df2f3efdd7c6ec5c765171711a19 +$(DL_FILE)_BLAKE2 = a377efb1f173a8622ca7ba2073161a64ea3a041c2c662ef35615e74b61e29da2d1f7dccba68a8f2ae1a80c7d3fbde08cd9d72a0babf85324efa9b3b11b1cb3ac install : $(TARGET) -- 2.39.5 (Apple Git-154)

1 0

[PATCH 1/4] unbound-dhcp-leases-bridge: Don't export expired leases to Unbound
by Michael Tremer 21 Oct '24

21 Oct '24

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/unbound/unbound-dhcp-leases-bridge | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/unbound/unbound-dhcp-leases-bridge b/config/unbound/unbound-dhcp-leases-bridge index 986fae2d2..bc944a073 100644 --- a/config/unbound/unbound-dhcp-leases-bridge +++ b/config/unbound/unbound-dhcp-leases-bridge @@ -276,7 +276,7 @@ class UnboundDHCPLeasesBridge(object): if lease.has_expired(): log.debug(" Expired") - self.unbound.update_dhcp_leases(self.leases) + self.unbound.update_dhcp_leases([l for l in self.leases if not l.has_expired()]) def _add_lease(self, lease): # Skip leases without an FQDN -- 2.39.5

5 11

[PATCH] suricata: Explicitly ignore IPsec traffic unless enabled
by Michael Tremer 21 Oct '24

21 Oct '24

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- src/initscripts/system/suricata | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/src/initscripts/system/suricata b/src/initscripts/system/suricata index a753e32e6..a0f607971 100644 --- a/src/initscripts/system/suricata +++ b/src/initscripts/system/suricata @@ -111,6 +111,18 @@ generate_fw_rules() { if [ "${!status}" = "on" ]; then # Handle IPsec packets case "${zone}" in + RED) + # If IPsec is not enabled, skip everything that is IPsec traffic + if [ "${ENABLE_IDS_IPSEC}" != "on" ]; then + for intf in $(network_get_intfs "${zone}"); do + iptables -w -t mangle -A IPS_SCAN_IN \ + -i "${intf}" -m policy --pol ipsec --dir in -j RETURN + iptables -w -t mangle -A IPS_SCAN_OUT \ + -o "${intf}" -m policy --pol ipsec --dir out -j RETURN + done + fi + ;; + IPSEC) iptables -w -t mangle -A IPS_SCAN_IN \ -m policy --pol ipsec --dir in -j MARK --set-mark "$(( IPS_SCAN_MARK ))/$(( IPS_SCAN_MASK ))" -- 2.39.5

1 0

[PATCH] bind: Update to 9.20.3
by Matthias Fischer 18 Oct '24

18 Oct '24

For details see: https://downloads.isc.org/isc/bind9/9.20.3/doc/arm/html/notes.html#notes-fo… Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/bind | 12 +++++++----- lfs/bind | 4 ++-- 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index 74d3b93e5..73d4a842d 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -83,6 +83,7 @@ usr/bin/nsupdate #usr/include/dns/sdlz.h #usr/include/dns/secalg.h #usr/include/dns/secproto.h +#usr/include/dns/skr.h #usr/include/dns/soa.h #usr/include/dns/ssu.h #usr/include/dns/stats.h @@ -135,6 +136,7 @@ usr/bin/nsupdate #usr/include/isc/hash.h #usr/include/isc/hashmap.h #usr/include/isc/heap.h +#usr/include/isc/helper.h #usr/include/isc/hex.h #usr/include/isc/histo.h #usr/include/isc/hmac.h @@ -237,18 +239,18 @@ usr/bin/nsupdate #usr/include/ns/types.h #usr/include/ns/update.h #usr/include/ns/xfrout.h -usr/lib/libdns-9.20.1.so +usr/lib/libdns-9.20.3.so #usr/lib/libdns.la #usr/lib/libdns.so -usr/lib/libisc-9.20.1.so +usr/lib/libisc-9.20.3.so #usr/lib/libisc.la #usr/lib/libisc.so -usr/lib/libisccc-9.20.1.so +usr/lib/libisccc-9.20.3.so #usr/lib/libisccc.la #usr/lib/libisccc.so -usr/lib/libisccfg-9.20.1.so +usr/lib/libisccfg-9.20.3.so #usr/lib/libisccfg.la #usr/lib/libisccfg.so -usr/lib/libns-9.20.1.so +usr/lib/libns-9.20.3.so #usr/lib/libns.la #usr/lib/libns.so diff --git a/lfs/bind b/lfs/bind index 5833b9005..2d52157c9 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.20.1 +VER = 9.20.3 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0607a2753bcda828cff0f01a7929c3192286050813243a0733d4cf29313c9d9532285d049864b67f3ce352b71cbb878bc22785a73fe186bf244ca807934fefdf +$(DL_FILE)_BLAKE2 = b6a5298bbed613e9d257675e3a7fd1a8fb82b4f68891517935c8383bb85b2f976cae504feece750a274b2b1344a1221e04956930a34bdcba08d5f2d4a5255bc1 install : $(TARGET) -- 2.43.0

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development October 2024