Development

development@lists.ipfire.org

4 participants
6293 discussions

[PATCH] suricata.yaml: Fix bug13646 - Adjust the include syntax to use array format
by Adolf Belka 10 Dec '24

10 Dec '24

- Suricata-8.x will only accept include statements in array format and not in multiple single lines. Suricata-7.x still accepts the multiple single lines but flags up that the format is deprecated and will be removed in suricata-8.x - This patch adjusts the address-groups include into the array format. - This change has been tested out on my vm and the IPS started up and from the logs you can see that all the include files were taken on board and the derprecation message is no longer shown. - This change can be implemented with Suricata-7.x and will make sure that IPFire has the include syntax that Suricata-8.x will require. Fixes: Bug13646 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/suricata/suricata.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index faa1aa71d..443b8e19e 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -8,11 +8,11 @@ vars: address-groups: - # Include HOME_NET declaration from external file. - include: /var/ipfire/suricata/suricata-homenet.yaml - - # Include DNS_SERVERS declaration from external file. - include: /var/ipfire/suricata/suricata-dns-servers.yaml + include: + # Include HOME_NET declaration from external file. + - /var/ipfire/suricata/suricata-homenet.yaml + # Include DNS_SERVERS declaration from external file. + - /var/ipfire/suricata/suricata-dns-servers.yaml EXTERNAL_NET: "any" -- 2.47.1

2 1

[PATCH] samba: Update to version 4.21.2
by Adolf Belka 10 Dec '24

10 Dec '24

- Update from version 4.21.0 to 4.21.2 - Update of the rootfiles for x86_64, aarch64 & riscv64 - Version 4.21.0 mentioned that LDB is no longer available to build as a distinct tarball. However version 4.21.0 previously built without any problem so it looks like it was still available. Now with version 4.21.2 the lmdb package needs to be available or you have to disable all ldb options. As these options were uncommented in the previous versions of samba, it looks like they are intended to be present. To make this version support in the same way the lmdb package had to be moved so it was built before samba is built. Hence the shift of lmdb in make.sh - Changelog 4.21.2 * BUG 15732: smbd fails to correctly check sharemode against OVERWRITE dispositions. * BUG 15754: Panic in close_directory. * BUG 15752: winexe no longer works with samba 4.21. * BUG 14356: protocol error - Unclear debug message "pad length mismatch" for invalid bind packet. * BUG 15425: NetrGetLogonCapabilities QueryLevel 2 needs to be implemented. * BUG 15740: gss_accept_sec_context() from Heimdal does not imply GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE. * BUG 15749: winbindd should call process_set_title() for locator child. * BUG 15320: Update CTDB to track all TCP connections to public IP addresses. 4.21.1 * BUG 15624: DH reconnect error handling can lead to stale sharemode entries. * BUG 15695: "inherit permissions = yes" triggers assert() in vfs_default when creating a stream. * BUG 15715: Samba 4.21.0 broke FreeIPA domain member integration. * BUG 15692: Missing conversion for msDS-UserTGTLifetime, msDS- ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-tool domain auth policy modify". * BUG 15280: irpc_destructor may crash during shutdown. * BUG 15624: DH reconnect error handling can lead to stale sharemode entries. * BUG 15649: Durable handle is not granted when a previous OPEN exists with NoOplock. * BUG 15651: Durable handle is granted but reconnect fails. * BUG 15708: Disconnected durable handles with RH lease should not be purged by a new non conflicting open. * BUG 15714: net ads testjoin and other commands use the wrong secrets.tdb in a cluster. * BUG 15726: 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as rfc 8009 etypes are used. * BUG 15730: VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2. * BUG 15643: Samba 4.20.0 DLZ module crashes BIND on startup. * BUG 15721: Cannot build libldb lmdb backend on a build without AD DC. * BUG 15706: Consistent log level for sighup handler. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/aarch64/samba | 3 +++ config/rootfiles/packages/riscv64/samba | 5 ++++- config/rootfiles/packages/x86_64/samba | 3 +++ lfs/samba | 6 +++--- make.sh | 2 +- 5 files changed, 14 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/aarch64/samba b/config/rootfiles/packages/aarch64/samba index cb7407504..c4e585d1d 100644 --- a/config/rootfiles/packages/aarch64/samba +++ b/config/rootfiles/packages/aarch64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-aarch64-linux usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-aarch64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-aarch64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so diff --git a/config/rootfiles/packages/riscv64/samba b/config/rootfiles/packages/riscv64/samba index b530ea2b2..3979501e4 100644 --- a/config/rootfiles/packages/riscv64/samba +++ b/config/rootfiles/packages/riscv64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-riscv64-linux usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-riscv64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-riscv64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so @@ -1024,4 +1027,4 @@ var/log/samba var/spool/samba srv/web/ipfire/cgi-bin/samba.cgi var/ipfire/menu.d/EX-samba.menu -usr/local/bin/sambactrl \ No newline at end of file +usr/local/bin/sambactrl diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index e720457a3..dc169322e 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-x86_64-linux- usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-x86_64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-x86_64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so diff --git a/lfs/samba b/lfs/samba index 8358264a3..1d5789c5e 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.21.0 +VER = 4.21.2 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 105 +PAK_VER = 106 DEPS = avahi cups perl-Parse-Yapp perl-JSON wsdd @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0889f2be3b78affee88250114397de87a77da77d9674815ec5605780a6bb3e2e28dbbae53b66695196408f4aef550acce793e6397045fbea4bb236fdd095ce1a +$(DL_FILE)_BLAKE2 = f9c297f4ed0c00b7887e637beb6ab7f4e17882e0ed5a3d1f1faf1ae1c2d6b064ada53cf65a86f11237813197c043961735e8aad641630baa48ec259482bdab2a install : $(TARGET) diff --git a/make.sh b/make.sh index 35a602f62..031bca80f 100755 --- a/make.sh +++ b/make.sh @@ -1804,6 +1804,7 @@ build_system() { lfsmake2 cifs-utils lfsmake2 krb5 lfsmake2 rpcsvc-proto + lfsmake2 lmdb lfsmake2 samba lfsmake2 netatalk lfsmake2 sudo @@ -2049,7 +2050,6 @@ build_system() { lfsmake2 shairport-sync lfsmake2 libxxhash lfsmake2 borgbackup - lfsmake2 lmdb lfsmake2 knot lfsmake2 spectre-meltdown-checker lfsmake2 zabbix_agentd -- 2.47.1

1 0

Problem with ipfire build system
by Adolf Belka 09 Dec '24

09 Dec '24

Hi Michael, I have experienced a problem yesterday and today with the IPFire build system. Not a major problem but it only seems to have started recently. Today when I tried to run the build command with the standard IPFire-2.x git clone I got the following error message. ./make.sh build ERROR: Not enough temporary space available, need at least 8192MiB, but only have 491 [ FAIL ] Check /home/ahb/sandbox/ipfire-2.x/log_x86_64/_build.preparation.log for errors if applicable [ FAIL ] I was able to overcome it by running the ./make.sh clean command on the openvpn-2.6-meetup-rebased branch git repo that I also have on my system. After running the clean command the normal ipfire-2.x git repo build command is working fine and no longer gives the above message. Yesterday it was the other way around. I tried to run the build command on the openvpn-2.6-meetup-rebased branch and got the same sort of message as above just the amount available was a bit different. Something like 670 instead of 491 today. Yesterday, when I ran the clean command on my normal ipfire-2.x git repo then the openvpn-2.6-meetup-rebased git repo had no problem with the build. Just doing a reboot on my desktop machine that has the git repo's on it made no difference. I have not had this problem in the past. Although not a major problem, I have definitely run a build on one repo when the other still had its build results in place so something has changed. Maybe something in Arch Linux with one of the recent updates I ran. Regards, Adolf.

2 3

[PATCH 1/2] sources: Replacement of Feodo Recommended Tracker list to ipblocklist sources file
by Adolf Belka 09 Dec '24

09 Dec '24

- FEODO_RECOMMENDED list is still being updated but the number of events can be very low. However as it is still active then it has been added back in as discussed in the Dev Conf Call on Nov 4th. - FEODO_IP list covers any IP that has been detected as a botnet in the last 30 days. This could lead to false positives if the botnet has been fixed within one day of being detected. So it was agreed that this list would stay removed. - FEODO_AGGRESSIVE list contains all IP's that havce ever been detected as botnets since the list was started. It is not intended to be used for blocking as it would have a huge false positive effect. This list will also stay removed as it should not have been included originally. - This patch set adds back in the FEODO_RECOMMENDED list into the sources file and in the associated patch for the update.sh file removes the lines that removed the files related to FEODO_RECOMMENDED. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/ipblocklist/sources | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources index c2fc40d5b..158c8bc20 100644 --- a/config/ipblocklist/sources +++ b/config/ipblocklist/sources @@ -61,6 +61,12 @@ our %sources = ( 'EMERGING_FWRULE' => { 'name' => 'Emerging Threats Blocklis 'parser' => 'dshield', 'rate' => '1h', 'category' => 'attacker' }, + 'FEODO_RECOMMENDED'=> {'name' => 'Feodo Trojan IP Blocklist (Recommended)', + 'url' => 'https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt', + 'info' => 'https://feodotracker.abuse.ch/blocklist', + 'parser' => 'ip-or-net-list', + 'rate' => '5m', + 'category' => 'c and c' }, 'CIARMY' => { 'name' => 'The CINS Army List', 'url' => 'https://cinsscore.com/list/ci-badguys.txt', 'info' => 'https://cinsscore.com/#list', -- 2.47.1

1 1

[PATCH 1/2] OpenSSH: No longer try to load the RSA key
by Michael Tremer 09 Dec '24

09 Dec '24

This key has been removed on new installations. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/ssh/sshd_config | 1 - 1 file changed, 1 deletion(-) diff --git a/config/ssh/sshd_config b/config/ssh/sshd_config index e338f8cef..09d771b9a 100644 --- a/config/ssh/sshd_config +++ b/config/ssh/sshd_config @@ -27,7 +27,6 @@ MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@op # Only allow cryptographically safe SSH host keys (adjust paths if needed) HostKey /etc/ssh/ssh_host_ed25519_key HostKey /etc/ssh/ssh_host_ecdsa_key -HostKey /etc/ssh/ssh_host_rsa_key # Only allow login via public key by default PubkeyAuthentication yes -- 2.39.5

1 1

[PATCH 1/2] openssh: Introduce include directory for additional sshd config files
by Stefan Schantl 09 Dec '24

09 Dec '24

This patch adds the prosibility to place additional *.config files in /etc/ssh/sshd_config.d/ which will be included and loaded during the daemon startup process. Because this files will not be overwritten by any update, they can be used to place custom or other persistent settings. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/openssh | 1 + config/ssh/sshd_config | 3 +++ lfs/openssh | 4 ++++ 3 files changed, 8 insertions(+) diff --git a/config/rootfiles/common/openssh b/config/rootfiles/common/openssh index f7b479f55..d25651348 100644 --- a/config/rootfiles/common/openssh +++ b/config/rootfiles/common/openssh @@ -8,6 +8,7 @@ etc/ssh/ssh_config #etc/ssh/ssh_host_rsa_key #etc/ssh/ssh_host_rsa_key.pub etc/ssh/sshd_config +etc/ssh/sshd_config.d usr/bin/scp usr/bin/sftp usr/bin/ssh diff --git a/config/ssh/sshd_config b/config/ssh/sshd_config index e338f8cef..ce74cb851 100644 --- a/config/ssh/sshd_config +++ b/config/ssh/sshd_config @@ -57,4 +57,7 @@ TCPKeepAlive no # Add support for SFTP Subsystem sftp /usr/lib/openssh/sftp-server +# Include additional sshd config files. +Include /etc/ssh/sshd_config.d/*.conf + # EOF diff --git a/lfs/openssh b/lfs/openssh index c14c8267c..b1c9a1635 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -91,5 +91,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) install -v -m 644 $(DIR_SRC)/config/ssh/ssh_config \ /etc/ssh/ssh_config + # Create directory for additional config + # config files. + mkdir -pv /etc/ssh/sshd_config.d/ + @rm -rf $(DIR_APP) @$(POSTBUILD) -- 2.45.2

2 2

[PATCH 1/4] connections.cgi: Fix colour of destination country
by Michael Tremer 09 Dec '24

09 Dec '24

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- html/cgi-bin/connections.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/connections.cgi b/html/cgi-bin/connections.cgi index badc1f395..af375effe 100644 --- a/html/cgi-bin/connections.cgi +++ b/html/cgi-bin/connections.cgi @@ -439,7 +439,7 @@ foreach my $line (<CONNTRACK>) { </a> $dport_extra </td> - <td style='text-align:center; background-color:$sip_colour;'> + <td style='text-align:center; background-color:$dip_colour;'> <a href='country.cgi#$dstccode'><img src='$dst_flag_icon' border='0' align='absmiddle' alt='$dstccode' title='$dstccode' /></a> </td> <td class="text-right"> -- 2.39.5

2 6

[DEV PATCH] openvpn: Update to version 2.6.12
by Adolf Belka 09 Dec '24

09 Dec '24

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/openvpn | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openvpn b/lfs/openvpn index b791f83a2..a5a77d02e 100644 --- a/lfs/openvpn +++ b/lfs/openvpn @@ -24,7 +24,7 @@ include Config -VER = 2.6.9 +VER = 2.6.12 THISAPP = openvpn-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 22289b32f2b9afc2aed59f6fc66dc25b3043b8c82858b7857e4f904a25c6cf0f21a41551ed4f8d8869c0e7248e4e060779f760dd606e99cdc02203fbff886536 +$(DL_FILE)_BLAKE2 = 5e40c61cb4aea3db27eff8ae7f49dafaa6e47c8a19fee5fa8802956fc976be490e9b558397741bc2e4447129f174176f9fbbfce16478d96b27a39ecb08a9da86 install : $(TARGET) -- 2.47.1

2 1

[PATCH] sqlite: Update to version 3470200
by Adolf Belka 09 Dec '24

09 Dec '24

- Update from version 3460100 to 3470200 - Update of rootfile not required - Changelog 3470200 Fix a problem in text-to-floating-point conversion for SQLite that can cause values between '1.8446744073709550592eNNN' and '1.8446744073709551609eNNN' for any exponent NNN to be rendered incorrectly. In other words, some numeric text values where the first 16 significant digits are '1844674407370955' might be converted into the wrong floating-point value. See forum thread 569a7209179a7f5e. This problem only arises on x64 and i386 hardware. The problem was introduced in 3.47.0. Other minor bug fixes. 3470100 Fix the makefiles so that they once again honored DESTDIR for the "install" target. Add the SQLITE_IOCAP_SUBPAGE_READ capability to the VFS, to work around issues on some non-standard VFSes caused by making SQLITE_DIRECT_OVERFLOW_READ the default in version 3.45.0. Fix problems with line endings in the new sqlite3_rsync.exe utility on Windows. Fix incorrect answers to certain obscure IN queries caused by new query optimizations added in the 3.47.0 release. Other minor bug fixes. 3470000 Allow arbitrary expressions in the second argument to the RAISE function. If the RHS of the ->> operator is negative, then access array elements counting from the right. Fix a problem with rolling back hot journal files in the seldom-used unix-dotfile VFS. FTS5 tables can now be dropped even if they use a non-standard tokenizer that has not been registered. Fix the group_concat() aggregate function so that it returns an empty string, not a NULL, if it receives a single input value which is an empty string. Enhance the generate_series() table-valued function so that it is able to recognize and use constraints on its output value. Preupdate hooks now recognize when a column added by ALTER TABLE ADD COLUMN has a non-null default value. Performance optimizations: Improved reuse of subqueries associated with the IN operator, especially when the IN operator has been duplicated due to predicate push-down. Use a Bloom filter on subqueries on the right-hand side of the IN operator, in cases where that seems likely to improve performance. Ensure that queries like "SELECT func(a) FROM tab GROUP BY 1" only invoke the func() function once per row. No attempt is made to create automatic indexes on a column that is known to be non-selective because of its use in other indexes that have been analyzed. Adjustments to the query planner so that it produces better plans for star queries with a large number of dimension tables. Add the "order-by-subquery" optimization, that seeks to disable sort operations in outer queries if the desired order is obtained naturally due to ORDER BY clauses in subqueries. The "indexed-subtype-expr" optimization strives to use expressions that are part of an index rather than recomputing the expression based on table values, as long as the query planner can prove that the subtype of the expression will never be used. Miscellaneous coding tweaks for faster runtimes. Enhancements to SQLite-related command-line programs: Add the experimental sqlite3_rsync program. Add extension functions median(), percentile(), percentile_cont(), and percentile_disc() to the CLI. Add the .www dot-command to the CLI. The sqlite3_analyzer utility now provides a break-out of statistics for WITHOUT ROWID tables. The sqldiff utility avoids creating an empty database if its second argument does not exist. Enhance the sqlite_dbpage table-valued function such that INSERT can be used to increase or decrease the size of the database file. SQLite no longer makes any use of the "long double" data type, as hardware support for long double is becoming less common and long double creates challenges for some compiler tool chains. Instead, SQLite uses Dekker's algorithm when extended precision is needed. The TCL Interface for SQLite supports TCL9. Everything probably still works for TCL 8.5 and later, though this is not guaranteed. Users are encouraged to upgrade to TCL9. JavaScript/WASM: Fix a corruption-causing bug in the JavaScript "opfs" VFS. Correct "mode=ro" handling for the "opfs" VFS. Work around a couple of browser-specific OPFS quirks. FTS5 Changes: Add the fts5_tokenizer_v2 API and the locale=1 option, for creating custom locale-aware tokenizers and fts5 tables that may take advantage of them. Add the contentless_unindexed=1 option, for creating contentless fts5 tables that store the values of any UNINDEXED columns persistently in the database. Allow an FTS5 table to be dropped even if it uses a custom tokenizer whose implementation is not available. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/sqlite | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/sqlite b/lfs/sqlite index 6998ae087..ee7d96033 100644 --- a/lfs/sqlite +++ b/lfs/sqlite @@ -24,7 +24,7 @@ include Config -VER = 3460100 +VER = 3470200 THISAPP = sqlite-autoconf-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b84bc7f6cbe2f1a4894b725d68ebdc58eebc312581fd27e74a75086e834b2b2f4ff09b907e193d8eaf78d9829149de8d9ea587cf650849fe4d3fc84db64ddfad +$(DL_FILE)_BLAKE2 = 3c2ea6cba87f5850a9c2355cc213182d351a9d7b26687f77c07178526b300eec19040804a713e6fa3db704dcb4e0e4921ef849f6bc14496adcfc22875048c640 install : $(TARGET) -- 2.47.1

1 0

Testing of openvpn-2.6-meetup branch
by Adolf Belka 07 Dec '24

07 Dec '24

Hi Michael, So I did a pull of the openvpn-2.6-meetup branch from your repo. I noticed that it was using OpenVPN-2.6.9 and 2.6.12 is available now so I updated the openvpn to 2.6.12 and did a build. Then I installed the created iso and the OpenVPN WUI page came up with an Internal Server Error. The logs indicated that it couldn't find the Compress::Raw::Zlib perl module. That was one of the separate perl modules removed from the system because they were now in the core. I checked the perl rootfile on the openvpn-2.6.meetup branch and it had the usr/lib/perl5/5.36.0/xxxMACHINExxx-linux-thread-multi/Compress/Raw/Zlib.pm line commented out. So I uncommented that line in the rootfile and rebuilt the branch and now the OpenVPN WUI page was shown okay. However when I tried to create a client connection I kept getting an "Oops something went wrong Invalid input" message but it didn't say what was invalid. I then restored a backup with my existing OpenVPN root/host and client settings and using the pencil icon to go into edit mode for one of the known working client connections when I just pressed the Save button without changing anything it again gave me the Invalid input message. The other issue I found was that the OpenVPN Server page was constantly showing Stopped. At this point I did a rebuild of the openvpn-2.6-meetup branch with the previous 2.6.9 OpenVPN but the same as above occurred, again with a fresh client connection creation or with the restored known working client connections. I then tried to start the openvpn from the command line to see what messages it cam up with. I tried first of all using the restart command and got /usr/local/bin/openvpnctrl rw restart Stopping OpenVPN Authenticator... Not running. [ WARN ] Stopping OpenVPN Roadwarrior Server... [ FAIL ] Starting OpenVPN Roadwarrior Server... Unable to continue: /var/run/openvpn-rw.pid exists [ WARN ] Starting OpenVPN Authenticator... [ OK ] so I checked and the openvpn-rw.pid file was present. So I then removed that file and ran the status command /usr/local/bin/openvpnctrl rw status /usr/sbin/openvpn is not running. Then I ran the start command /usr/local/bin/openvpnctrl rw start Starting OpenVPN Roadwarrior Server... [ OK ] Starting OpenVPN Authenticator... [ OK ] So tried the status command again /usr/local/bin/openvpnctrl rw status openvpn is running with Process ID(s) 6883. So good the server is running but when I looked at the OpenVPN WUI page it still showed Stopped, also on the Services page. I then pressed the Save button on the OpenVPN WUI main page and then checked the status again and got /usr/local/bin/openvpnctrl rw status /usr/sbin/openvpn is not running but /var/run/openvpn-rw.pid exists. So doing the save caused the server to stop but leave the pid in place. So I am not sure what has changed between our meetup and what I am building now. As far as I can tell from the branch in the repo, nothing has changed since 23rd Sept. Maybe how I have done the pull of the repo is incorrect in some way and I am ending up in some mixed up situation but as it stands I definitely cannot test anything. I will try creating a complete new copy of that branch on my system to see if anything gets better but I am also open to any suggestions of what I might have done wrong. Regards, Adolf

2 6

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development