IPFire-SCM March 2020

ipfire-scm@lists.ipfire.org

1 participants
44 discussions

[git.ipfire.org] IPFire 2.x development tree branch, core142, created. 57fda8c8adc66acf92c24d33ccf37636e0e165bc
by Arne Fitzenreiter 09 Mar '20

09 Mar '20

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core142 has been created at 57fda8c8adc66acf92c24d33ccf37636e0e165bc (commit) - Log ----------------------------------------------------------------- commit 57fda8c8adc66acf92c24d33ccf37636e0e165bc Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Mar 9 06:41:32 2020 +0000 suricata: use KILL is suricata not shut down normal. sometimes suricata hung and lock the pidfile at suricata stop. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit b3bc092dad71cf4034d6f0d59708cfa47e8a3404 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Mar 5 05:54:09 2020 +0000 core142: start suricata before unbound after update Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 233141c6c9983b39a2d385f781e0d787b8f315de Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Mar 4 21:49:05 2020 +0000 core142: add unbound.conf to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 9700617aeb4051f845e3f261da2829201a2b6fe9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 4 21:11:53 2020 +0000 unbound: Disable using mixed case for DNS queries This seems to cause that some resolvers do not respond to queries any more until unbound falls back. To ensure better DNS performance, we disabled this. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 0f0f3ae7dc5da502c1aaf4bb295778d7657a0af5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 4 21:11:52 2020 +0000 unbound: Only launch one process When unbound is running multiple threads, we have observed that queries where sent for each thread. Since no user should have so much DNS traffic that more than one processor core is being saturated, this is a safe change. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit e737776db5edaca90a22c7aaeb11e8fbb7c0d9fa Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Jan 20 19:36:00 2020 +0000 unbound.conf: Do not set defaults explicitly In order to keep configuration files small and easy to review/audit, omitting defaults makes more sense than configure them explicitly (have changed my mind here). Unbound comes with a good default confiuration, and we should only make changes when they are necessary. In addition, this patch updates the documentation's URL to the current one. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Cc: Michael Tremer <michael.tremer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 80bed5817d176e728cca6077dcefa7821f5c16ef Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Mar 4 21:38:24 2020 +0000 dns.cgi: restart suricata before unbound reload if unbound is reloaded it start a bunch of dns queries so suricata needs to now which servers should used. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 0bdb63924b13d4e47db7cd03c6714cdfdd9280a9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 4 10:44:50 2020 +0000 backup: Fix saving DNS settings There was a typo in /var/ipfire/dns/servers and the settings file was not explicitely included in the backup. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit a344d3c902417a21b619c6e4f2a1aaf38e3044fe Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Mar 4 08:52:56 2020 +0100 unbound/red.up: run unbound update-forwarders after suricata init. The old suricata instance blocks dns requests if the red ip has changed. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit e53c38aea14132da0fff15655735f673aab33c4a Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Mar 3 13:25:17 2020 +0100 core142: fix typo's at remove/update dns forwareders changes Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1773544d025591d4096ee91bcc598dac19fa0f24 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Mar 3 13:23:29 2020 +0100 kernel: update to 4.14.172 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit b5afe1e8d55525462b27e6147182f2bd0623fc56 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Mar 2 22:25:41 2020 +0000 backup: add /var/ipfire/dns/server to include Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 3b5131c1a3416c9c9aef1365d3787abea197d37d Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Mar 2 17:54:48 2020 +0000 unbound: drop remove-dns-fowarders at red.down this functions has only reloaded unbound config which is useless at shutting down the red interface. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit e1c6cd05e3a1f08b28f8d0eea4736c829f12b06f Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Mar 2 08:15:00 2020 +0000 udev: build after kmod eudev depends on kmod to install all needed rules Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit c8b574c3078b35c272960ac0b26de6dded845467 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 21:54:28 2020 +0000 core142: stop squid and suricata while update Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 770a1507dd750fe98f327919c9da576d6b996469 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 20:41:13 2020 +0100 unbound: speed-up remove forwarders Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit b3ab7916e0102fa7e6f53fbf593072ea3dc30f89 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:41:16 2020 +0100 core142: ship unbound initskript Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 47864e8f3d8050b7a681b4bcbafe33a836013af4 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:41:15 2020 +0100 unbound: fix typo at safesearch for googe Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d98bbcc8494d4037df2572098fa9ea77f932ce1a Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:41:14 2020 +0100 unbound: run "time-fix" before savesearch resolves Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 605575033c58c59c9f8673c50ee2f0a61988a0ee Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:41:13 2020 +0100 unbound: update savesearch after reload configfiles Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 89440b2d0a8ad6cf1f58b2588e7e8538657fbbd9 Author: Stéphane Pautrel <stephane.pautrel(a)gmail.com> Date: Fri Feb 28 15:32:21 2020 +0000 lang: Improvements to French translation This patch adds translations for the new DNS part as well as various improvements. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 9acb792b8f4ef315d921207f7f872651b072299e Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:45:30 2020 +0000 core142: add kmod to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1ece41ec51680390ba895130e7aeab6a1cd3a458 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Feb 27 14:53:48 2020 +0000 kmod: Update to 26 This patch links kmod against OpenSSL which is required to decode the kernel modules' PKCS#7 signatures. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 9ff65bfac3f7de2bc1dc88e82b8315c4ef4c48cc Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Feb 26 18:16:00 2020 +0000 make.sh: add core to version string this make it easier to find the unstable and testing build for a core update in fireinfo. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 5ad31551cd8e22b9dcf19739e4369969514bdca8 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Feb 25 20:38:19 2020 +0000 dnsdist: a compile thread needs two gigabyte of ram Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit f0e61c20b15ff13f90b4f776c9db90a28edd7107 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Feb 25 20:35:57 2020 +0000 core142: replace "pakfire remove" i have cut and paste this from older core but its not working Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 46ac0498640767683dc8d6dee791e7426f4e6f2b Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Feb 25 06:55:30 2020 +0000 core142: remove dropped packages Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1b68fc29b4df4880ca4761cdb036d1b6aac8ab65 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Feb 25 06:41:14 2020 +0000 core142: fix typo Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 712425ff0bbe96700de5a1b865d58730ba9c6b90 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Feb 24 18:51:24 2020 +0000 pakfire: Re-install previous core update when in testing mode Fixes: #12302 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Tested-by: Michael Tremer <michael.tremer(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 6cd35da57ecf795a51d61cd848df77e6dd5fbd97 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Feb 24 19:20:12 2020 +0000 core142: ship updated fireinfo.cgi Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit fd90cadc97559b1d78c202d5560a93a3ecabef5a Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Sun Feb 23 16:13:46 2020 +0100 fireinfo.cgi: Use pakfire lib to gather the pakfire version. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 5cbcd514def1b63606d2139634a4f7a31af89205 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Sat Feb 22 15:02:24 2020 +0100 ppp: Add upstream patch to fix bounds check in EAP code. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 8d43248794b1abadf6e1c519b79a05bd5e64467c Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Fri Feb 21 22:33:23 2020 +0100 w_scan: fix country and satalite selection menu Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 91b4ba6d6e3add4d29cfb85109dd6b739d3450c9 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Fri Feb 21 09:26:36 2020 +0100 u-boot: split rpi aarch64 quirk into parts on of the changed variables was used before the old quirk. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1eef496d47de2136929254b491f9b60fe6f8d5fc Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Feb 1 21:38:00 2020 +0000 Tor: update to 0.4.2.6 Please refer to https://blog.torproject.org/new-releases-tor-0426-0418 for release notes. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit c7dd86b323fa3cdc030b0278bba233b69562d072 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Feb 20 11:32:43 2020 +0000 core142: add changed u-boot files to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit a62be8a2d9fecc59a7592f1a8347b0087148a896 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Feb 20 12:24:36 2020 +0100 u-boot: add quirk for rpi on aarch64 the current rpi u-boot will not load the ramdisk correctly so the kernel will crash with loaded ramdisk. Remove ramdisk and replace root UUID by /dev/mmcblk0p3 if boot was on armv8 and rpi. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 777ba8192ccda88d0fb66cb42b28ec2fd209db87 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Feb 20 12:21:28 2020 +0100 u-boot: remove kirkwood kernel detection from bootscript Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 8569b3e11be974db7d11da779ce8c66b4dadfa81 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Feb 19 14:51:48 2020 +0000 red.up: move update-dns-forwareders behind the firewall Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 2b6b6df32af111e54ec71678e4424bc729c85efc Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Feb 19 08:49:21 2020 +0000 flash-images: update the uENV root UUID also on arch64 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 068747163af47bffc8d34e312a90d2472d5f2367 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Feb 18 17:13:48 2020 +0000 core142: add ppp to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 8f60b4ff30a70a50d859cc5b486b53ab7ca6e07d Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Tue Feb 18 11:18:13 2020 +0100 ppp: Update to 2.4.8 Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit c2b6c29a0d77b7d55494b8ab9f1d0cf9b7cfdd2e Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Feb 17 21:47:25 2020 +0000 elinks: suppress welcome dialog Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 31ba6f6fc99bd124bcc87e04d6087fdc2c401ddb Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Feb 17 11:59:32 2020 +0000 dehydrated: Fix various syntax errors * The backup include file was missing a leading slash which caused no files to be backed up. * The shell escaping was broken so a new configuration file was useless. Fixes: #12297 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d875a2b157987307180ef0e578c4912ca5c388de Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Feb 17 21:38:42 2020 +0000 paks: remove scripts for elinks and phpSANE phpSANE is dropped long ago and elinks in core now. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 4105d223d759e421a9277e1532534c438cda5aba Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Feb 17 21:34:14 2020 +0000 paks: add/move extract_backup_includes to pak update scripts this function allow to update the backup filelist before the backup was done in uninstall.sh at packet updates. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 4979531dac5c7d929dfc7f4ac8ff0281c195a526 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Feb 17 08:53:31 2020 +0000 core142: remove old ddns python-2.7 version Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 24fd2e0b900fdbc1d9c8ba173c936c2b374842ee Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Feb 17 08:50:46 2020 +0000 ddns: rootfile update Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit aef3c56c6536474dc861e256f4816d54f9776833 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 5 11:44:17 2020 +0000 cyrus-imapd: Drop package This package is outdated and unmaintained for many many years. I am not sure if this even works and if there are any users. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit b1a6c9f6243c3ae687fd18297848cc8e7510fbc2 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Feb 16 16:02:56 2020 +0000 core142: add cloudinit helper to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 88cb5eb18744911513c08e851f945a548b324efc Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 5 14:27:08 2020 +0000 cloud-init: Disable using ISP nameservers This is mostly aesthetic because there are no ISP nameservers anyways that we could use here. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit a8df6e7807528a475a958f0d8aa66494e59b1a8e Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 5 14:27:07 2020 +0000 aws-setup: Remove some excessive whitespace Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1466ab70c7bbbf477fbdef69117ada4251ff3a1a Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Feb 16 15:59:06 2020 +0000 core142: add dns.cgi to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 18e97c76b0e1f691f5c6be8aa7fedc61d8c07469 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 5 14:27:06 2020 +0000 dns.cgi: Do not show table header if no servers are configured Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 56f4f279a5a5bfb2d919f2e603c8551f422e932f Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Tue Feb 4 08:59:33 2020 +0100 guardian: Add upstream patch for HTTP parser. Fixes #12289. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 130babccc8efbdd80a9358e1faf09faba6ee3e43 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Feb 16 15:55:15 2020 +0000 core142: add ddns to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 08cf4d21540c4fe185db1f17ae365f7ab6adae27 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Fri Feb 7 12:32:46 2020 +0100 ddns: Import latest upstream patches for ddns-013 Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit f16ddb5fc74128e6387e736e4c7f66ace6d0b338 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Fri Jan 31 07:13:31 2020 +0100 ddns: Update to 013 This is an update to the first python3-based release of ddns. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d553895700c1d4842cd62cceaea83f2fd0fd5195 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Feb 16 15:49:52 2020 +0000 core142: add proxy.cgi tp updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 77ea7462bcc134b6147dd985abdd4e2311487515 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Fri Feb 7 12:06:39 2020 +0100 proxy.cgi: Switch to MD5 hashed passwords for local user auth. The former used default Crypt algorithmus only supports passwords up to eight signs wheater MD5 does not have any limitation here. Fixes 12290. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 7b7789da2f79bf00c98139c17c18002388d4f0df Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Feb 6 11:34:27 2020 +0000 libpciaccess: Update to 0.16 There are not rootfile changes. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit c2c5bad960f03407b79e7b0afce45157363a55d0 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Feb 16 15:33:35 2020 +0000 core142: add udev network-hotplug-bridges script to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit b53d8ae99b8e2f4164824413b2f771ae54dbe9a7 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Feb 14 13:48:19 2020 +0000 udev: Set wireless interfaces into AP mode before adding to bridge Wireless interfaces cannot be added to the bridge when they are still running in station mode. At boot time, the interface will be created and it is attempted to attach it to a bridge, which fails. This patch now checks whether the wireless interface is going to be an access point, changes the mode accordingly and then attaches the interface to the bridge. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Tested-by: Daniel Weismüller <daniel.weismueller(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 943eab6695bfd0ea20178e44effc97b4b61b0e14 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Feb 14 13:48:18 2020 +0000 udev: Add more logging to bridge hotplug script Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 6f57c5e01f161afca2698003c6e9ca724d452953 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Sun Feb 16 12:05:03 2020 +0100 w_scan: Update to 20170107 Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 96bc01c954ba95b2ca800f62353a8f7eb2f1288b Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Feb 16 16:26:35 2020 +0100 vdradmin: update to 3.6.10 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit eb7066388b9df1db40afec42a3d4a36a14421994 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Feb 16 11:48:22 2020 +0100 vdr: update to 2.4.1 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 06fc566a0aea5c4a5e45c4ddc0233fa008375ff2 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 15 17:11:42 2020 +0000 make.sh remove extra PAKFIRE_CORE version for nightly builds this is useless because the new nightly also copies the core updaters to the unstable and testing pakfire trees. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit ff58943d8ec03f72609c9248b56f549f75baf505 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 15 17:06:24 2020 +0000 kernel: cleanup unused kirkwood patches Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit e0dbe21e095efe06e4649857f52fe674a463db09 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 15 17:01:02 2020 +0000 u-boot-kirkwood: drop package Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 2bafcf22ae0796eee0608ed83ad7e2ab5685317a Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:51 2020 +0000 Drop streamripper Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 28db34f24769e4f01e504b3a2235c1f0813c9308 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:49 2020 +0000 Drop rtpproxy This probably has only been used by me and we do not need it any more. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 3c7d55c55a17e33fd4e21d4d22dfb475ace4b571 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:50 2020 +0000 Drop setserial This package was used internally and we have no script that uses it any more. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit fd1bc1515caa46d7d0540da649de9dec55fb1a1f Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:48 2020 +0000 Drop icegenerator This is only useful with icecast. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 8485b98d6177606ff7725165e36baa2ca76aa307 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:47 2020 +0000 Drop icecast This is unmaintained for a very long time. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 65b08a04dade4c549158da776aedc733a26f0c0f Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:45 2020 +0000 Drop ez-ipupdate We do not use this at all any more, because it has been replaced by ddns. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 7a68b87789e7d857c661ee3ac069fc42f75034f1 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:44 2020 +0000 Drop DirectFB This package is not very useful on its own and nobody seems to pull this as dependency any more. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 962b7f817e2ebb823800e4bc714f68c0b12af3a6 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:43 2020 +0000 Drop check_mk_agent This add-on is unmaintained in IPFire. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d4b31f13d59c9fdc69d367b62c3c28c342940a22 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:42 2020 +0000 Drop multicat & bitstream This reverts commit 0a21ce42e113f6c75f992d4ad1b88812ecc6b150. These packages have never been updated and nodody in the team is willing to support them. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit bad2292034a61b6edc0fcd8a7ab1510a6626218a Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:41 2020 +0000 Drop batctl This package is no longer used. BATMAN is slightly out of fashion and can be disabled in our kernel, too. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 674328ea046162b6293adf46996d6126ff5ae0ed Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Feb 12 09:34:40 2020 +0000 Drop arm This is a CLI tool for Tor which is no longer maintained upstream. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 09b09b859df6ee460acb28a0c7d5d6a0dfa42a60 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Sat Feb 15 16:21:04 2020 +0100 make.sh: Build lua before haproxy. In commit b6ab15eaa2a899944c7edca99769fa4469f215d3 lua support for haproxy has been enabled, so lua now has to be compiled before haproxy. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Acked-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 900652ec6ce9d8d2e58225fa8abbfddbfdcbc05f Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 15 11:17:27 2020 +0000 core142: add pakfire changes to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 040160c7ce19dcc34d97a74d371e9dbd3f0983e5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Feb 11 14:28:53 2020 +0000 make.sh: Configure Pakfire to load packages from the correct tree This will configure Pakfire that people who install a nightly build will also get the packages for this build, etc. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit f48643e5b3a86c25a7387cf6c14e2807fdd8a482 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Feb 11 14:28:52 2020 +0000 make.sh: Cleanup code that builds ${SYSTEM_RELEASE} Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 36e2e99285e86e46df33933a2783911118a504ce Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Feb 11 14:28:51 2020 +0000 make.sh: Tidy up Git commands No functional changes. Just making them shorter. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 152378c67419a1cbce57302490cf0c98263fbdf2 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Feb 11 14:28:50 2020 +0000 pakfire: Add version suffix when in a certain tree Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit f61be862c6404df0692341d446ba031af3f18e54 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Feb 11 14:28:49 2020 +0000 pakfire.cgi: Add UI to select repository Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 131f163ce8b12f2b9aefde91d203441257e2642a Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Feb 11 14:28:48 2020 +0000 pakfire.cgi: Rename %pakfiresettings to %cgiparams Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit e63fc18d07266f87bfa606b7ae47ed1a6a28f051 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Feb 11 14:28:47 2020 +0000 pakfire.cgi: Remove some old settings These can no longer be modified in the GUI and are used nowhere. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit e6f4991be209040f436d9be23b414a6dda1e7fa5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Feb 11 14:28:46 2020 +0000 pakfire: Automatically compose $version The tree in which pakfire is looking for packages and Core Updates has been hardcoded into /opt/pakfire/etc/pakfire.conf. This patch adds a new function which reads the system release from /etc/system-release. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d8f7b45f3501edbac6101f79df5f80266b503cb5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Feb 11 16:27:49 2020 +0000 dnsdist: Update to 1.4.0 This patch updates dnsdist to the latest release. Additionally it includes /etc/sysconfig/dnsdist in the backup and enables DNS-over-TLS. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit b6ab15eaa2a899944c7edca99769fa4469f215d3 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Feb 13 15:20:55 2020 +0000 haproxy: Update to 2.1.3 This updates haproxy to the latest version. In addition, support for Lua scripts is compiled in. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 8877c587cea024210a24c8212221d72209f9f2f0 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Fri Feb 14 13:10:11 2020 +0100 suricata: Update to 5.0.2 Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 8d6012f0f54455f0b693f9d8f711ddc731e9051c Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 15 11:59:57 2020 +0100 kernel: update to 4.14.171 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit dc1362e8884106ce71cba9ece1ddde9bc2424ac7 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Feb 13 17:08:20 2020 +0000 kernel: armv5tel rootfile update Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 8438e2e427e346b3609b1f752d874e40dc1d19f4 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Feb 13 16:57:36 2020 +0000 qemu: bump pak version Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d120fd4a92338af978dc6d53a803a4d34e8fb99e Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Thu Feb 6 17:26:38 2020 +0100 clamav: Update to 0.102.2 For details see: https://blog.clamav.net/2020/02/clamav-01022-security-patch-released.html "ClamAV 0.102.2 is a security patch release..." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit a174e5e1f84e750e30c24824e20d87d0a98b7850 Author: Jonatan Schlag <jonatan.schlag(a)ipfire.org> Date: Sat Feb 1 14:15:40 2020 +0000 Qemu: remove not needed files for aarch64 and PA-RISC Signed-off-by: Jonatan Schlag <jonatan.schlag(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 2bc995c836acc63103df15e9da76ff5b97549184 Author: Jonatan Schlag <jonatan.schlag(a)ipfire.org> Date: Sat Feb 1 14:15:39 2020 +0000 Qemu: Remove unneeded files These are needed for s390, riscv and microblaze. See https://lists.fedoraproject.org/pipermail/packaging/2012-July/008557.html Signed-off-by: Jonatan Schlag <jonatan.schlag(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit ee4e219f5fa62ed8e6a4a7968b811479d57e8b9b Author: Jonatan Schlag <jonatan.schlag(a)ipfire.org> Date: Sat Feb 1 14:15:38 2020 +0000 Qemu: remove files for sparc This is based on the debian package content (qemu-system-sparc) Signed-off-by: Jonatan Schlag <jonatan.schlag(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 36cdd4e1f211edc870870826fa7e168bac1363d1 Author: Jonatan Schlag <jonatan.schlag(a)ipfire.org> Date: Sat Feb 1 14:15:37 2020 +0000 Qemu: remove files only needed for Power PC This is based on the debian package content (qemu-system-pcc) Signed-off-by: Jonatan Schlag <jonatan.schlag(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit f85c916d7fdac9e8afea8a8bb75a51f62ec52ff0 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Tue Jan 28 18:27:36 2020 +0100 tmux: Update to 3.0.a For details see: https://raw.githubusercontent.com/tmux/tmux/3.0a/CHANGES Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit af4370b4a80d46b2b042542be570cea54229b2c5 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Feb 12 20:12:29 2020 +0000 core142: add squid to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1dc4f86e68910f05f6163d33b06d493c9f05892e Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Sat Jan 25 19:51:28 2020 +0100 squid: Update to 4.10 For details see: http://www.squid-cache.org/Versions/v4/changesets/ Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit be5ed5d01e45c6f467ad2e1350fcad968353ee67 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Sat Jan 25 19:48:45 2020 +0100 mc: Update to 4.8.24 For details see: http://midnight-commander.org/wiki/NEWS-4.8.24 Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 05948d0805342faa5d2516c120b0ac30e732172d Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Feb 12 20:07:56 2020 +0000 core142: add suricata changes to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 2acc41c04c3a62ed215c35ca0a47907f82122891 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Thu Jan 23 12:24:48 2020 +0100 suricata: Enable RDP protocol parser. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d5957c5cd28c33c4a5220ab1a61a679ae47c340a Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Thu Jan 23 10:44:28 2020 +0100 ruleset-sources: Update snort dl urls. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d6cc871067ef7f6cf69e261a84579b7403ffcee3 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Thu Jan 23 10:44:27 2020 +0100 suricata: Enable new and rust-depended protocol parsers. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1a65ea1b7291337e6de44a2d4696a00bbf23f7db Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Thu Jan 23 10:44:26 2020 +0100 Suricata: Update to 5.0.1 Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit ee9bc7c477408e6cabe79e56549355712caae97a Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 8 15:21:16 2020 +0100 kernel: rootfile update Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 7d7f6104cdba2f52e71a83ed1372c5742304f3f4 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 8 11:51:43 2020 +0100 core142: add kernel to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 975f78f7108aa558932a2d9c8c4015ac33be484e Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 8 10:12:38 2020 +0100 core142: move 140/141 file to oldcore Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 03d651483ba6f329f1fc09b351b145f310d23fd6 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat Feb 8 10:11:40 2020 +0100 core142: start updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 831ff05d898cbf3484922d33573ee067782eb663 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Feb 6 15:09:52 2020 +0100 kernel: enable and enforce signed kernel modules Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 198c956bb74be7eeaa919c7de3fc3ada4ca52856 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Feb 5 18:25:54 2020 +0100 kernel: update to 4.14.170 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 57fda8c8adc66acf92c24d33ccf37636e0e165bc
by Arne Fitzenreiter 09 Mar '20

09 Mar '20

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 57fda8c8adc66acf92c24d33ccf37636e0e165bc
by Arne Fitzenreiter 09 Mar '20

09 Mar '20

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. b3bc092dad71cf4034d6f0d59708cfa47e8a3404
by Arne Fitzenreiter 05 Mar '20

05 Mar '20

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via b3bc092dad71cf4034d6f0d59708cfa47e8a3404 (commit) via 233141c6c9983b39a2d385f781e0d787b8f315de (commit) via 9700617aeb4051f845e3f261da2829201a2b6fe9 (commit) via 0f0f3ae7dc5da502c1aaf4bb295778d7657a0af5 (commit) via e737776db5edaca90a22c7aaeb11e8fbb7c0d9fa (commit) via 80bed5817d176e728cca6077dcefa7821f5c16ef (commit) via 0bdb63924b13d4e47db7cd03c6714cdfdd9280a9 (commit) via a344d3c902417a21b619c6e4f2a1aaf38e3044fe (commit) from e53c38aea14132da0fff15655735f673aab33c4a (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit b3bc092dad71cf4034d6f0d59708cfa47e8a3404 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Mar 5 05:54:09 2020 +0000 core142: start suricata before unbound after update Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 233141c6c9983b39a2d385f781e0d787b8f315de Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Mar 4 21:49:05 2020 +0000 core142: add unbound.conf to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 9700617aeb4051f845e3f261da2829201a2b6fe9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 4 21:11:53 2020 +0000 unbound: Disable using mixed case for DNS queries This seems to cause that some resolvers do not respond to queries any more until unbound falls back. To ensure better DNS performance, we disabled this. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 0f0f3ae7dc5da502c1aaf4bb295778d7657a0af5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 4 21:11:52 2020 +0000 unbound: Only launch one process When unbound is running multiple threads, we have observed that queries where sent for each thread. Since no user should have so much DNS traffic that more than one processor core is being saturated, this is a safe change. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit e737776db5edaca90a22c7aaeb11e8fbb7c0d9fa Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Jan 20 19:36:00 2020 +0000 unbound.conf: Do not set defaults explicitly In order to keep configuration files small and easy to review/audit, omitting defaults makes more sense than configure them explicitly (have changed my mind here). Unbound comes with a good default confiuration, and we should only make changes when they are necessary. In addition, this patch updates the documentation's URL to the current one. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Cc: Michael Tremer <michael.tremer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 80bed5817d176e728cca6077dcefa7821f5c16ef Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Mar 4 21:38:24 2020 +0000 dns.cgi: restart suricata before unbound reload if unbound is reloaded it start a bunch of dns queries so suricata needs to now which servers should used. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 0bdb63924b13d4e47db7cd03c6714cdfdd9280a9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 4 10:44:50 2020 +0000 backup: Fix saving DNS settings There was a typo in /var/ipfire/dns/servers and the settings file was not explicitely included in the backup. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit a344d3c902417a21b619c6e4f2a1aaf38e3044fe Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Mar 4 08:52:56 2020 +0100 unbound/red.up: run unbound update-forwarders after suricata init. The old suricata instance blocks dns requests if the red ip has changed. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/backup/include | 2 +- config/rootfiles/common/aarch64/initscripts | 2 +- config/rootfiles/common/armv5tel/initscripts | 2 +- config/rootfiles/common/i586/initscripts | 2 +- config/rootfiles/common/x86_64/initscripts | 2 +- config/rootfiles/core/142/filelists/files | 1 + config/rootfiles/core/142/update.sh | 8 ++++---- config/unbound/unbound.conf | 23 ++-------------------- html/cgi-bin/dns.cgi | 5 ++--- ...ate-dns-forwarders => 25-update-dns-forwarders} | 0 src/initscripts/system/unbound | 19 ------------------ 11 files changed, 14 insertions(+), 52 deletions(-) rename src/initscripts/networking/red.up/{22-update-dns-forwarders => 25-update-dns-forwarders} (100%) Difference in files: diff --git a/config/backup/include b/config/backup/include index d33dcf099..0153272f7 100644 --- a/config/backup/include +++ b/config/backup/include @@ -31,7 +31,7 @@ /var/ipfire/*/*.conf /var/ipfire/*/config /var/ipfire/dhcp/* -/var/ipfire/dns/server +/var/ipfire/dns /var/ipfire/dnsforward/* /var/ipfire/*/enable /var/ipfire/*/*enable* diff --git a/config/rootfiles/common/aarch64/initscripts b/config/rootfiles/common/aarch64/initscripts index 3c8dfc70a..4f7465791 100644 --- a/config/rootfiles/common/aarch64/initscripts +++ b/config/rootfiles/common/aarch64/initscripts @@ -54,9 +54,9 @@ etc/rc.d/init.d/networking/red.up/10-miniupnpd etc/rc.d/init.d/networking/red.up/10-multicast etc/rc.d/init.d/networking/red.up/10-static-routes etc/rc.d/init.d/networking/red.up/20-firewall -etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders etc/rc.d/init.d/networking/red.up/23-suricata etc/rc.d/init.d/networking/red.up/24-RS-qos +etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders etc/rc.d/init.d/networking/red.up/27-RS-squid etc/rc.d/init.d/networking/red.up/30-ddns #etc/rc.d/init.d/networking/red.up/35-guardian diff --git a/config/rootfiles/common/armv5tel/initscripts b/config/rootfiles/common/armv5tel/initscripts index 3c8dfc70a..4f7465791 100644 --- a/config/rootfiles/common/armv5tel/initscripts +++ b/config/rootfiles/common/armv5tel/initscripts @@ -54,9 +54,9 @@ etc/rc.d/init.d/networking/red.up/10-miniupnpd etc/rc.d/init.d/networking/red.up/10-multicast etc/rc.d/init.d/networking/red.up/10-static-routes etc/rc.d/init.d/networking/red.up/20-firewall -etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders etc/rc.d/init.d/networking/red.up/23-suricata etc/rc.d/init.d/networking/red.up/24-RS-qos +etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders etc/rc.d/init.d/networking/red.up/27-RS-squid etc/rc.d/init.d/networking/red.up/30-ddns #etc/rc.d/init.d/networking/red.up/35-guardian diff --git a/config/rootfiles/common/i586/initscripts b/config/rootfiles/common/i586/initscripts index 3f56c49cc..9db445a69 100644 --- a/config/rootfiles/common/i586/initscripts +++ b/config/rootfiles/common/i586/initscripts @@ -54,9 +54,9 @@ etc/rc.d/init.d/networking/red.up/10-miniupnpd etc/rc.d/init.d/networking/red.up/10-multicast etc/rc.d/init.d/networking/red.up/10-static-routes etc/rc.d/init.d/networking/red.up/20-firewall -etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders etc/rc.d/init.d/networking/red.up/23-suricata etc/rc.d/init.d/networking/red.up/24-RS-qos +etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders etc/rc.d/init.d/networking/red.up/27-RS-squid etc/rc.d/init.d/networking/red.up/30-ddns #etc/rc.d/init.d/networking/red.up/35-guardian diff --git a/config/rootfiles/common/x86_64/initscripts b/config/rootfiles/common/x86_64/initscripts index 3f56c49cc..9db445a69 100644 --- a/config/rootfiles/common/x86_64/initscripts +++ b/config/rootfiles/common/x86_64/initscripts @@ -54,9 +54,9 @@ etc/rc.d/init.d/networking/red.up/10-miniupnpd etc/rc.d/init.d/networking/red.up/10-multicast etc/rc.d/init.d/networking/red.up/10-static-routes etc/rc.d/init.d/networking/red.up/20-firewall -etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders etc/rc.d/init.d/networking/red.up/23-suricata etc/rc.d/init.d/networking/red.up/24-RS-qos +etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders etc/rc.d/init.d/networking/red.up/27-RS-squid etc/rc.d/init.d/networking/red.up/30-ddns #etc/rc.d/init.d/networking/red.up/35-guardian diff --git a/config/rootfiles/core/142/filelists/files b/config/rootfiles/core/142/filelists/files index 0ac4861cd..11daea4b5 100644 --- a/config/rootfiles/core/142/filelists/files +++ b/config/rootfiles/core/142/filelists/files @@ -2,6 +2,7 @@ etc/system-release etc/issue srv/web/ipfire/cgi-bin/credits.cgi var/ipfire/langs +etc/unbound/unbound.conf etc/rc.d/helper/aws-setup etc/rc.d/helper/azure-setup etc/rc.d/init.d/unbound diff --git a/config/rootfiles/core/142/update.sh b/config/rootfiles/core/142/update.sh index dd1377c1c..e46bdf2ea 100644 --- a/config/rootfiles/core/142/update.sh +++ b/config/rootfiles/core/142/update.sh @@ -97,9 +97,9 @@ rm -f /etc/rc.d/init.d/networking/red.down/05-*-dns-forwarders # Extract files extract_files -# move update forwarders below firewall -mv -f /etc/rc.d/init.d/networking/red.up/05-update-dns-forwarders \ - /etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders +# move update forwarders below suricata +mv -f /etc/rc.d/init.d/networking/red.up/*-update-dns-forwarders \ + /etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders # update linker config ldconfig @@ -126,8 +126,8 @@ done /usr/local/bin/filesystem-cleanup # Start services -/etc/init.d/unbound restart /etc/init.d/suricata start +/etc/init.d/unbound restart /etc/init.d/squid start # remove lm_sensor config after collectd was started diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf index 24822ee67..3aab6ea46 100644 --- a/config/unbound/unbound.conf +++ b/config/unbound/unbound.conf @@ -2,7 +2,7 @@ # Unbound configuration file for IPFire # # The full documentation is available at: -# https://www.unbound.net/documentation/unbound.conf.html +# https://nlnetlabs.nl/documentation/unbound/unbound.conf/ # server: @@ -10,26 +10,17 @@ server: chroot: "" directory: "/etc/unbound" username: "nobody" - port: 53 - do-ip4: yes do-ip6: no - do-udp: yes - do-tcp: yes - so-reuseport: yes - do-not-query-localhost: yes # System Tuning include: "/etc/unbound/tuning.conf" # Logging Options - verbosity: 1 use-syslog: yes log-time-ascii: yes - log-queries: no # Unbound Statistics statistics-interval: 86400 - statistics-cumulative: yes extended-statistics: yes # Prefetching @@ -42,26 +33,16 @@ server: # Privacy Options hide-identity: yes hide-version: yes - qname-minimisation: yes - minimal-responses: yes # DNSSEC auto-trust-anchor-file: "/var/lib/unbound/root.key" - val-permissive-mode: no - val-clean-additional: yes val-log-level: 1 + log-servfail: yes # Hardening Options - harden-glue: yes - harden-short-bufsize: no harden-large-queries: yes - harden-dnssec-stripped: yes - harden-below-nxdomain: yes harden-referral-path: yes - harden-algo-downgrade: no - use-caps-for-id: yes aggressive-nsec: yes - qname-minimisation: yes # TLS tls-cert-bundle: /etc/ssl/certs/ca-bundle.crt diff --git a/html/cgi-bin/dns.cgi b/html/cgi-bin/dns.cgi index 09fd50206..676d95f8a 100755 --- a/html/cgi-bin/dns.cgi +++ b/html/cgi-bin/dns.cgi @@ -815,9 +815,6 @@ END # Private function to handle the restart of unbound and more. sub _handle_unbound_and_more () { - # Restart unbound - system('/usr/local/bin/unboundctrl reload >/dev/null'); - # Check if the IDS is running. if(&IDS::ids_is_running()) { # Re-generate the file which contains the DNS Server @@ -827,6 +824,8 @@ sub _handle_unbound_and_more () { # Call suricatactrl to perform a reload. &IDS::call_suricatactrl("restart"); } + # Restart unbound + system('/usr/local/bin/unboundctrl reload >/dev/null'); } # Check if the system is online (RED is connected). diff --git a/src/initscripts/networking/red.up/22-update-dns-forwarders b/src/initscripts/networking/red.up/25-update-dns-forwarders similarity index 100% rename from src/initscripts/networking/red.up/22-update-dns-forwarders rename to src/initscripts/networking/red.up/25-update-dns-forwarders diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound index c845c436f..1cf26ec0e 100644 --- a/src/initscripts/system/unbound +++ b/src/initscripts/system/unbound @@ -191,15 +191,6 @@ write_forward_conf() { write_tuning_conf() { # https://www.unbound.net/documentation/howto_optimise.html - # Determine number of online processors - local processors=$(getconf _NPROCESSORS_ONLN) - - # Determine number of slabs - local slabs=1 - while [ ${slabs} -lt ${processors} ]; do - slabs=$(( ${slabs} * 2 )) - done - # Determine amount of system memory local mem=$(get_memory_amount) @@ -234,16 +225,6 @@ write_tuning_conf() { ( config_header - # We run one thread per processor - echo "num-threads: ${processors}" - echo "so-reuseport: yes" - - # Adjust number of slabs - echo "infra-cache-slabs: ${slabs}" - echo "key-cache-slabs: ${slabs}" - echo "msg-cache-slabs: ${slabs}" - echo "rrset-cache-slabs: ${slabs}" - # Slice up the cache echo "rrset-cache-size: $(( ${mem} / 2 ))m" echo "msg-cache-size: $(( ${mem} / 4 ))m" hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. b3bc092dad71cf4034d6f0d59708cfa47e8a3404
by Arne Fitzenreiter 05 Mar '20

05 Mar '20

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via b3bc092dad71cf4034d6f0d59708cfa47e8a3404 (commit) from 233141c6c9983b39a2d385f781e0d787b8f315de (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit b3bc092dad71cf4034d6f0d59708cfa47e8a3404 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Mar 5 05:54:09 2020 +0000 core142: start suricata before unbound after update Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/142/update.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Difference in files: diff --git a/config/rootfiles/core/142/update.sh b/config/rootfiles/core/142/update.sh index 686e9ae89..e46bdf2ea 100644 --- a/config/rootfiles/core/142/update.sh +++ b/config/rootfiles/core/142/update.sh @@ -126,8 +126,8 @@ done /usr/local/bin/filesystem-cleanup # Start services -/etc/init.d/unbound restart /etc/init.d/suricata start +/etc/init.d/unbound restart /etc/init.d/squid start # remove lm_sensor config after collectd was started hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 233141c6c9983b39a2d385f781e0d787b8f315de
by Arne Fitzenreiter 04 Mar '20

04 Mar '20

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 233141c6c9983b39a2d385f781e0d787b8f315de (commit) via 9700617aeb4051f845e3f261da2829201a2b6fe9 (commit) via 0f0f3ae7dc5da502c1aaf4bb295778d7657a0af5 (commit) via e737776db5edaca90a22c7aaeb11e8fbb7c0d9fa (commit) via 80bed5817d176e728cca6077dcefa7821f5c16ef (commit) from 0bdb63924b13d4e47db7cd03c6714cdfdd9280a9 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 233141c6c9983b39a2d385f781e0d787b8f315de Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Mar 4 21:49:05 2020 +0000 core142: add unbound.conf to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 9700617aeb4051f845e3f261da2829201a2b6fe9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 4 21:11:53 2020 +0000 unbound: Disable using mixed case for DNS queries This seems to cause that some resolvers do not respond to queries any more until unbound falls back. To ensure better DNS performance, we disabled this. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 0f0f3ae7dc5da502c1aaf4bb295778d7657a0af5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 4 21:11:52 2020 +0000 unbound: Only launch one process When unbound is running multiple threads, we have observed that queries where sent for each thread. Since no user should have so much DNS traffic that more than one processor core is being saturated, this is a safe change. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit e737776db5edaca90a22c7aaeb11e8fbb7c0d9fa Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Jan 20 19:36:00 2020 +0000 unbound.conf: Do not set defaults explicitly In order to keep configuration files small and easy to review/audit, omitting defaults makes more sense than configure them explicitly (have changed my mind here). Unbound comes with a good default confiuration, and we should only make changes when they are necessary. In addition, this patch updates the documentation's URL to the current one. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Cc: Michael Tremer <michael.tremer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 80bed5817d176e728cca6077dcefa7821f5c16ef Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Mar 4 21:38:24 2020 +0000 dns.cgi: restart suricata before unbound reload if unbound is reloaded it start a bunch of dns queries so suricata needs to now which servers should used. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/142/filelists/files | 1 + config/unbound/unbound.conf | 23 ++--------------------- html/cgi-bin/dns.cgi | 5 ++--- src/initscripts/system/unbound | 19 ------------------- 4 files changed, 5 insertions(+), 43 deletions(-) Difference in files: diff --git a/config/rootfiles/core/142/filelists/files b/config/rootfiles/core/142/filelists/files index 0ac4861cd..11daea4b5 100644 --- a/config/rootfiles/core/142/filelists/files +++ b/config/rootfiles/core/142/filelists/files @@ -2,6 +2,7 @@ etc/system-release etc/issue srv/web/ipfire/cgi-bin/credits.cgi var/ipfire/langs +etc/unbound/unbound.conf etc/rc.d/helper/aws-setup etc/rc.d/helper/azure-setup etc/rc.d/init.d/unbound diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf index 24822ee67..3aab6ea46 100644 --- a/config/unbound/unbound.conf +++ b/config/unbound/unbound.conf @@ -2,7 +2,7 @@ # Unbound configuration file for IPFire # # The full documentation is available at: -# https://www.unbound.net/documentation/unbound.conf.html +# https://nlnetlabs.nl/documentation/unbound/unbound.conf/ # server: @@ -10,26 +10,17 @@ server: chroot: "" directory: "/etc/unbound" username: "nobody" - port: 53 - do-ip4: yes do-ip6: no - do-udp: yes - do-tcp: yes - so-reuseport: yes - do-not-query-localhost: yes # System Tuning include: "/etc/unbound/tuning.conf" # Logging Options - verbosity: 1 use-syslog: yes log-time-ascii: yes - log-queries: no # Unbound Statistics statistics-interval: 86400 - statistics-cumulative: yes extended-statistics: yes # Prefetching @@ -42,26 +33,16 @@ server: # Privacy Options hide-identity: yes hide-version: yes - qname-minimisation: yes - minimal-responses: yes # DNSSEC auto-trust-anchor-file: "/var/lib/unbound/root.key" - val-permissive-mode: no - val-clean-additional: yes val-log-level: 1 + log-servfail: yes # Hardening Options - harden-glue: yes - harden-short-bufsize: no harden-large-queries: yes - harden-dnssec-stripped: yes - harden-below-nxdomain: yes harden-referral-path: yes - harden-algo-downgrade: no - use-caps-for-id: yes aggressive-nsec: yes - qname-minimisation: yes # TLS tls-cert-bundle: /etc/ssl/certs/ca-bundle.crt diff --git a/html/cgi-bin/dns.cgi b/html/cgi-bin/dns.cgi index 09fd50206..676d95f8a 100755 --- a/html/cgi-bin/dns.cgi +++ b/html/cgi-bin/dns.cgi @@ -815,9 +815,6 @@ END # Private function to handle the restart of unbound and more. sub _handle_unbound_and_more () { - # Restart unbound - system('/usr/local/bin/unboundctrl reload >/dev/null'); - # Check if the IDS is running. if(&IDS::ids_is_running()) { # Re-generate the file which contains the DNS Server @@ -827,6 +824,8 @@ sub _handle_unbound_and_more () { # Call suricatactrl to perform a reload. &IDS::call_suricatactrl("restart"); } + # Restart unbound + system('/usr/local/bin/unboundctrl reload >/dev/null'); } # Check if the system is online (RED is connected). diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound index c845c436f..1cf26ec0e 100644 --- a/src/initscripts/system/unbound +++ b/src/initscripts/system/unbound @@ -191,15 +191,6 @@ write_forward_conf() { write_tuning_conf() { # https://www.unbound.net/documentation/howto_optimise.html - # Determine number of online processors - local processors=$(getconf _NPROCESSORS_ONLN) - - # Determine number of slabs - local slabs=1 - while [ ${slabs} -lt ${processors} ]; do - slabs=$(( ${slabs} * 2 )) - done - # Determine amount of system memory local mem=$(get_memory_amount) @@ -234,16 +225,6 @@ write_tuning_conf() { ( config_header - # We run one thread per processor - echo "num-threads: ${processors}" - echo "so-reuseport: yes" - - # Adjust number of slabs - echo "infra-cache-slabs: ${slabs}" - echo "key-cache-slabs: ${slabs}" - echo "msg-cache-slabs: ${slabs}" - echo "rrset-cache-slabs: ${slabs}" - # Slice up the cache echo "rrset-cache-size: $(( ${mem} / 2 ))m" echo "msg-cache-size: $(( ${mem} / 4 ))m" hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 0bdb63924b13d4e47db7cd03c6714cdfdd9280a9
by Arne Fitzenreiter 04 Mar '20

04 Mar '20

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 0bdb63924b13d4e47db7cd03c6714cdfdd9280a9 (commit) from a344d3c902417a21b619c6e4f2a1aaf38e3044fe (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 0bdb63924b13d4e47db7cd03c6714cdfdd9280a9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 4 10:44:50 2020 +0000 backup: Fix saving DNS settings There was a typo in /var/ipfire/dns/servers and the settings file was not explicitely included in the backup. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/backup/include | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Difference in files: diff --git a/config/backup/include b/config/backup/include index d33dcf099..0153272f7 100644 --- a/config/backup/include +++ b/config/backup/include @@ -31,7 +31,7 @@ /var/ipfire/*/*.conf /var/ipfire/*/config /var/ipfire/dhcp/* -/var/ipfire/dns/server +/var/ipfire/dns /var/ipfire/dnsforward/* /var/ipfire/*/enable /var/ipfire/*/*enable* hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. a344d3c902417a21b619c6e4f2a1aaf38e3044fe
by Arne Fitzenreiter 04 Mar '20

04 Mar '20

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via a344d3c902417a21b619c6e4f2a1aaf38e3044fe (commit) from e53c38aea14132da0fff15655735f673aab33c4a (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit a344d3c902417a21b619c6e4f2a1aaf38e3044fe Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Wed Mar 4 08:52:56 2020 +0100 unbound/red.up: run unbound update-forwarders after suricata init. The old suricata instance blocks dns requests if the red ip has changed. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/aarch64/initscripts | 2 +- config/rootfiles/common/armv5tel/initscripts | 2 +- config/rootfiles/common/i586/initscripts | 2 +- config/rootfiles/common/x86_64/initscripts | 2 +- config/rootfiles/core/142/update.sh | 6 +++--- .../red.up/{22-update-dns-forwarders => 25-update-dns-forwarders} | 0 6 files changed, 7 insertions(+), 7 deletions(-) rename src/initscripts/networking/red.up/{22-update-dns-forwarders => 25-update-dns-forwarders} (100%) Difference in files: diff --git a/config/rootfiles/common/aarch64/initscripts b/config/rootfiles/common/aarch64/initscripts index 3c8dfc70a..4f7465791 100644 --- a/config/rootfiles/common/aarch64/initscripts +++ b/config/rootfiles/common/aarch64/initscripts @@ -54,9 +54,9 @@ etc/rc.d/init.d/networking/red.up/10-miniupnpd etc/rc.d/init.d/networking/red.up/10-multicast etc/rc.d/init.d/networking/red.up/10-static-routes etc/rc.d/init.d/networking/red.up/20-firewall -etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders etc/rc.d/init.d/networking/red.up/23-suricata etc/rc.d/init.d/networking/red.up/24-RS-qos +etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders etc/rc.d/init.d/networking/red.up/27-RS-squid etc/rc.d/init.d/networking/red.up/30-ddns #etc/rc.d/init.d/networking/red.up/35-guardian diff --git a/config/rootfiles/common/armv5tel/initscripts b/config/rootfiles/common/armv5tel/initscripts index 3c8dfc70a..4f7465791 100644 --- a/config/rootfiles/common/armv5tel/initscripts +++ b/config/rootfiles/common/armv5tel/initscripts @@ -54,9 +54,9 @@ etc/rc.d/init.d/networking/red.up/10-miniupnpd etc/rc.d/init.d/networking/red.up/10-multicast etc/rc.d/init.d/networking/red.up/10-static-routes etc/rc.d/init.d/networking/red.up/20-firewall -etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders etc/rc.d/init.d/networking/red.up/23-suricata etc/rc.d/init.d/networking/red.up/24-RS-qos +etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders etc/rc.d/init.d/networking/red.up/27-RS-squid etc/rc.d/init.d/networking/red.up/30-ddns #etc/rc.d/init.d/networking/red.up/35-guardian diff --git a/config/rootfiles/common/i586/initscripts b/config/rootfiles/common/i586/initscripts index 3f56c49cc..9db445a69 100644 --- a/config/rootfiles/common/i586/initscripts +++ b/config/rootfiles/common/i586/initscripts @@ -54,9 +54,9 @@ etc/rc.d/init.d/networking/red.up/10-miniupnpd etc/rc.d/init.d/networking/red.up/10-multicast etc/rc.d/init.d/networking/red.up/10-static-routes etc/rc.d/init.d/networking/red.up/20-firewall -etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders etc/rc.d/init.d/networking/red.up/23-suricata etc/rc.d/init.d/networking/red.up/24-RS-qos +etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders etc/rc.d/init.d/networking/red.up/27-RS-squid etc/rc.d/init.d/networking/red.up/30-ddns #etc/rc.d/init.d/networking/red.up/35-guardian diff --git a/config/rootfiles/common/x86_64/initscripts b/config/rootfiles/common/x86_64/initscripts index 3f56c49cc..9db445a69 100644 --- a/config/rootfiles/common/x86_64/initscripts +++ b/config/rootfiles/common/x86_64/initscripts @@ -54,9 +54,9 @@ etc/rc.d/init.d/networking/red.up/10-miniupnpd etc/rc.d/init.d/networking/red.up/10-multicast etc/rc.d/init.d/networking/red.up/10-static-routes etc/rc.d/init.d/networking/red.up/20-firewall -etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders etc/rc.d/init.d/networking/red.up/23-suricata etc/rc.d/init.d/networking/red.up/24-RS-qos +etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders etc/rc.d/init.d/networking/red.up/27-RS-squid etc/rc.d/init.d/networking/red.up/30-ddns #etc/rc.d/init.d/networking/red.up/35-guardian diff --git a/config/rootfiles/core/142/update.sh b/config/rootfiles/core/142/update.sh index dd1377c1c..686e9ae89 100644 --- a/config/rootfiles/core/142/update.sh +++ b/config/rootfiles/core/142/update.sh @@ -97,9 +97,9 @@ rm -f /etc/rc.d/init.d/networking/red.down/05-*-dns-forwarders # Extract files extract_files -# move update forwarders below firewall -mv -f /etc/rc.d/init.d/networking/red.up/05-update-dns-forwarders \ - /etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders +# move update forwarders below suricata +mv -f /etc/rc.d/init.d/networking/red.up/*-update-dns-forwarders \ + /etc/rc.d/init.d/networking/red.up/25-update-dns-forwarders # update linker config ldconfig diff --git a/src/initscripts/networking/red.up/22-update-dns-forwarders b/src/initscripts/networking/red.up/25-update-dns-forwarders similarity index 100% rename from src/initscripts/networking/red.up/22-update-dns-forwarders rename to src/initscripts/networking/red.up/25-update-dns-forwarders hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. e53c38aea14132da0fff15655735f673aab33c4a
by Arne Fitzenreiter 03 Mar '20

03 Mar '20

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via e53c38aea14132da0fff15655735f673aab33c4a (commit) via 1773544d025591d4096ee91bcc598dac19fa0f24 (commit) via b5afe1e8d55525462b27e6147182f2bd0623fc56 (commit) via 3b5131c1a3416c9c9aef1365d3787abea197d37d (commit) via e1c6cd05e3a1f08b28f8d0eea4736c829f12b06f (commit) via c8b574c3078b35c272960ac0b26de6dded845467 (commit) via 770a1507dd750fe98f327919c9da576d6b996469 (commit) via b3ab7916e0102fa7e6f53fbf593072ea3dc30f89 (commit) via 47864e8f3d8050b7a681b4bcbafe33a836013af4 (commit) via d98bbcc8494d4037df2572098fa9ea77f932ce1a (commit) via 605575033c58c59c9f8673c50ee2f0a61988a0ee (commit) via 89440b2d0a8ad6cf1f58b2588e7e8538657fbbd9 (commit) via 9acb792b8f4ef315d921207f7f872651b072299e (commit) via 1ece41ec51680390ba895130e7aeab6a1cd3a458 (commit) from 9ff65bfac3f7de2bc1dc88e82b8315c4ef4c48cc (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit e53c38aea14132da0fff15655735f673aab33c4a Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Mar 3 13:25:17 2020 +0100 core142: fix typo's at remove/update dns forwareders changes Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1773544d025591d4096ee91bcc598dac19fa0f24 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Mar 3 13:23:29 2020 +0100 kernel: update to 4.14.172 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit b5afe1e8d55525462b27e6147182f2bd0623fc56 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Mar 2 22:25:41 2020 +0000 backup: add /var/ipfire/dns/server to include Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 3b5131c1a3416c9c9aef1365d3787abea197d37d Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Mar 2 17:54:48 2020 +0000 unbound: drop remove-dns-fowarders at red.down this functions has only reloaded unbound config which is useless at shutting down the red interface. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit e1c6cd05e3a1f08b28f8d0eea4736c829f12b06f Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon Mar 2 08:15:00 2020 +0000 udev: build after kmod eudev depends on kmod to install all needed rules Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit c8b574c3078b35c272960ac0b26de6dded845467 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 21:54:28 2020 +0000 core142: stop squid and suricata while update Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 770a1507dd750fe98f327919c9da576d6b996469 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 20:41:13 2020 +0100 unbound: speed-up remove forwarders Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit b3ab7916e0102fa7e6f53fbf593072ea3dc30f89 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:41:16 2020 +0100 core142: ship unbound initskript Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 47864e8f3d8050b7a681b4bcbafe33a836013af4 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:41:15 2020 +0100 unbound: fix typo at safesearch for googe Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d98bbcc8494d4037df2572098fa9ea77f932ce1a Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:41:14 2020 +0100 unbound: run "time-fix" before savesearch resolves Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 605575033c58c59c9f8673c50ee2f0a61988a0ee Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:41:13 2020 +0100 unbound: update savesearch after reload configfiles Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 89440b2d0a8ad6cf1f58b2588e7e8538657fbbd9 Author: Stéphane Pautrel <stephane.pautrel(a)gmail.com> Date: Fri Feb 28 15:32:21 2020 +0000 lang: Improvements to French translation This patch adds translations for the new DNS part as well as various improvements. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 9acb792b8f4ef315d921207f7f872651b072299e Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 1 19:45:30 2020 +0000 core142: add kmod to updater Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1ece41ec51680390ba895130e7aeab6a1cd3a458 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Feb 27 14:53:48 2020 +0000 kmod: Update to 26 This patch links kmod against OpenSSL which is required to decode the kernel modules' PKCS#7 signatures. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/backup/include | 1 + config/rootfiles/common/aarch64/initscripts | 1 - config/rootfiles/common/armv5tel/initscripts | 1 - config/rootfiles/common/i586/initscripts | 1 - config/rootfiles/common/kmod | 2 +- config/rootfiles/common/x86_64/initscripts | 1 - config/rootfiles/core/142/filelists/files | 2 + .../{oldcore/125 => core/142}/filelists/kmod | 0 config/rootfiles/core/142/update.sh | 12 +++- doc/language_issues.fr | 19 +----- doc/language_missings | 19 ------ langs/fr/cgi-bin/fr.pl | 75 ++++++++++++++-------- lfs/kmod | 5 +- lfs/linux | 10 +-- make.sh | 4 +- .../networking/red.down/05-remove-dns-forwarders | 4 -- src/initscripts/system/unbound | 29 ++++----- 17 files changed, 87 insertions(+), 99 deletions(-) copy config/rootfiles/{oldcore/125 => core/142}/filelists/kmod (100%) delete mode 100644 src/initscripts/networking/red.down/05-remove-dns-forwarders Difference in files: diff --git a/config/backup/include b/config/backup/include index 1190eda81..d33dcf099 100644 --- a/config/backup/include +++ b/config/backup/include @@ -31,6 +31,7 @@ /var/ipfire/*/*.conf /var/ipfire/*/config /var/ipfire/dhcp/* +/var/ipfire/dns/server /var/ipfire/dnsforward/* /var/ipfire/*/enable /var/ipfire/*/*enable* diff --git a/config/rootfiles/common/aarch64/initscripts b/config/rootfiles/common/aarch64/initscripts index 34ea1433f..3c8dfc70a 100644 --- a/config/rootfiles/common/aarch64/initscripts +++ b/config/rootfiles/common/aarch64/initscripts @@ -42,7 +42,6 @@ etc/rc.d/init.d/networking/green etc/rc.d/init.d/networking/orange etc/rc.d/init.d/networking/red #etc/rc.d/init.d/networking/red.down -etc/rc.d/init.d/networking/red.down/05-remove-dns-forwarders etc/rc.d/init.d/networking/red.down/10-ipsec etc/rc.d/init.d/networking/red.down/10-miniupnpd etc/rc.d/init.d/networking/red.down/10-ovpn diff --git a/config/rootfiles/common/armv5tel/initscripts b/config/rootfiles/common/armv5tel/initscripts index 34ea1433f..3c8dfc70a 100644 --- a/config/rootfiles/common/armv5tel/initscripts +++ b/config/rootfiles/common/armv5tel/initscripts @@ -42,7 +42,6 @@ etc/rc.d/init.d/networking/green etc/rc.d/init.d/networking/orange etc/rc.d/init.d/networking/red #etc/rc.d/init.d/networking/red.down -etc/rc.d/init.d/networking/red.down/05-remove-dns-forwarders etc/rc.d/init.d/networking/red.down/10-ipsec etc/rc.d/init.d/networking/red.down/10-miniupnpd etc/rc.d/init.d/networking/red.down/10-ovpn diff --git a/config/rootfiles/common/i586/initscripts b/config/rootfiles/common/i586/initscripts index 9350b0e90..3f56c49cc 100644 --- a/config/rootfiles/common/i586/initscripts +++ b/config/rootfiles/common/i586/initscripts @@ -42,7 +42,6 @@ etc/rc.d/init.d/networking/green etc/rc.d/init.d/networking/orange etc/rc.d/init.d/networking/red #etc/rc.d/init.d/networking/red.down -etc/rc.d/init.d/networking/red.down/05-remove-dns-forwarders etc/rc.d/init.d/networking/red.down/10-ipsec etc/rc.d/init.d/networking/red.down/10-miniupnpd etc/rc.d/init.d/networking/red.down/10-ovpn diff --git a/config/rootfiles/common/kmod b/config/rootfiles/common/kmod index 4c9b448f7..ff9cda26d 100644 --- a/config/rootfiles/common/kmod +++ b/config/rootfiles/common/kmod @@ -9,6 +9,6 @@ sbin/rmmod #usr/lib/libkmod.la #usr/lib/libkmod.so usr/lib/libkmod.so.2 -usr/lib/libkmod.so.2.3.3 +usr/lib/libkmod.so.2.3.4 #usr/lib/pkgconfig/libkmod.pc #usr/share/bash-completion/completions/kmod diff --git a/config/rootfiles/common/x86_64/initscripts b/config/rootfiles/common/x86_64/initscripts index 9350b0e90..3f56c49cc 100644 --- a/config/rootfiles/common/x86_64/initscripts +++ b/config/rootfiles/common/x86_64/initscripts @@ -42,7 +42,6 @@ etc/rc.d/init.d/networking/green etc/rc.d/init.d/networking/orange etc/rc.d/init.d/networking/red #etc/rc.d/init.d/networking/red.down -etc/rc.d/init.d/networking/red.down/05-remove-dns-forwarders etc/rc.d/init.d/networking/red.down/10-ipsec etc/rc.d/init.d/networking/red.down/10-miniupnpd etc/rc.d/init.d/networking/red.down/10-ovpn diff --git a/config/rootfiles/core/142/filelists/files b/config/rootfiles/core/142/filelists/files index 4d6c69adb..0ac4861cd 100644 --- a/config/rootfiles/core/142/filelists/files +++ b/config/rootfiles/core/142/filelists/files @@ -4,6 +4,7 @@ srv/web/ipfire/cgi-bin/credits.cgi var/ipfire/langs etc/rc.d/helper/aws-setup etc/rc.d/helper/azure-setup +etc/rc.d/init.d/unbound etc/suricata/suricata.yaml lib/udev/network-hotplug-bridges opt/pakfire/etc/pakfire.conf @@ -12,4 +13,5 @@ srv/web/ipfire/cgi-bin/dns.cgi srv/web/ipfire/cgi-bin/fireinfo.cgi srv/web/ipfire/cgi-bin/pakfire.cgi srv/web/ipfire/cgi-bin/proxy.cgi +var/ipfire/backup/include var/ipfire/suricata/ruleset-sources diff --git a/config/rootfiles/core/142/filelists/kmod b/config/rootfiles/core/142/filelists/kmod new file mode 120000 index 000000000..0020e197e --- /dev/null +++ b/config/rootfiles/core/142/filelists/kmod @@ -0,0 +1 @@ +../../../common/kmod \ No newline at end of file diff --git a/config/rootfiles/core/142/update.sh b/config/rootfiles/core/142/update.sh index 581e8fd19..dd1377c1c 100644 --- a/config/rootfiles/core/142/update.sh +++ b/config/rootfiles/core/142/update.sh @@ -88,13 +88,18 @@ rm -rf /usr/lib/python2.7/site-packages/ddns rm -rf /usr/lib/pppd/2.4.7 # Stop services +/etc/init.d/squid stop +/etc/init.d/suricata stop + +# drop unbound remove and update forwarders +rm -f /etc/rc.d/init.d/networking/red.down/05-*-dns-forwarders # Extract files extract_files # move update forwarders below firewall -mv -f /etc/rc.d/init.d/netowrking/red.up/05-update-dns-forwarders \ - /etc/rc.d/init.d/netowrking/red.up/22-update-dns-forwarders +mv -f /etc/rc.d/init.d/networking/red.up/05-update-dns-forwarders \ + /etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders # update linker config ldconfig @@ -121,6 +126,9 @@ done /usr/local/bin/filesystem-cleanup # Start services +/etc/init.d/unbound restart +/etc/init.d/suricata start +/etc/init.d/squid start # remove lm_sensor config after collectd was started # to reserch sensors at next boot with updated kernel diff --git a/doc/language_issues.fr b/doc/language_issues.fr index 928c37a46..3edee88df 100644 --- a/doc/language_issues.fr +++ b/doc/language_issues.fr @@ -231,6 +231,7 @@ WARNING: translation string unused: dns address deleted WARNING: translation string unused: dns address deleted txt WARNING: translation string unused: dns address done WARNING: translation string unused: dns address recon +WARNING: translation string unused: dns could not add server WARNING: translation string unused: dns desc WARNING: translation string unused: dns error 0 WARNING: translation string unused: dns error 01 @@ -511,6 +512,7 @@ WARNING: translation string unused: noservicename WARNING: translation string unused: notes WARNING: translation string unused: o-no WARNING: translation string unused: o-yes +WARNING: translation string unused: okay WARNING: translation string unused: online help en WARNING: translation string unused: only red WARNING: translation string unused: open to all @@ -810,21 +812,8 @@ WARNING: translation string unused: zoneconf val zoneslave amount error WARNING: untranslated string: Captive ACTIVATE = unknown string WARNING: untranslated string: Captive clients = unknown string WARNING: untranslated string: Scan for Songs = unknown string -WARNING: untranslated string: broken = Broken WARNING: untranslated string: bytes = unknown string WARNING: untranslated string: dns = unknown string -WARNING: untranslated string: dns check servers = Check DNS Servers -WARNING: untranslated string: dns configuration = DNS Configuration -WARNING: untranslated string: dns enable safe-search = Enable Safe Search -WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS server -WARNING: untranslated string: dns isp nameservers and tls not allowed = ISP-assigned DNS servers and TLS cannot be used at the same time. -WARNING: untranslated string: dns mode for qname minimisation = QNAME Minimisation -WARNING: untranslated string: dns no address given = No IP Address given. -WARNING: untranslated string: dns no tls hostname given = No TLS hostname given. -WARNING: untranslated string: dns recursor mode = Recursor Mode -WARNING: untranslated string: dns tls hostname = TLS Hostname -WARNING: untranslated string: dns use isp assigned nameservers = Use ISP-assigned DNS servers -WARNING: untranslated string: dns use protocol for dns queries = Protocol for DNS queries WARNING: untranslated string: fwhost cust geoipgrp = unknown string WARNING: untranslated string: fwhost err hostip = unknown string WARNING: untranslated string: guardian block a host = unknown string @@ -859,7 +848,6 @@ WARNING: untranslated string: guardian service = unknown string WARNING: untranslated string: ike lifetime should be between 1 and 8 hours = unknown string WARNING: untranslated string: info messages = unknown string WARNING: untranslated string: no data = unknown string -WARNING: untranslated string: not validating = Not validating WARNING: untranslated string: pakfire ago = ago. WARNING: untranslated string: pakfire invalid tree = Invalid repository selected WARNING: untranslated string: pakfire tree = Repository @@ -870,7 +858,4 @@ WARNING: untranslated string: route config changed = unknown string WARNING: untranslated string: routing config added = unknown string WARNING: untranslated string: routing config changed = unknown string WARNING: untranslated string: routing table = unknown string -WARNING: untranslated string: standard = Standard -WARNING: untranslated string: strict = Strict WARNING: untranslated string: vpn statistics n2n = unknown string -WARNING: untranslated string: working = Working diff --git a/doc/language_missings b/doc/language_missings index a427f5706..31ea82788 100644 --- a/doc/language_missings +++ b/doc/language_missings @@ -936,30 +936,11 @@ ############################################################################ # Checking cgi-bin translations for language: fr # ############################################################################ -< broken -< dns check servers -< dns configuration -< dns could not add server -< dns enable safe-search -< dns isp assigned nameserver -< dns isp nameservers and tls not allowed -< dns mode for qname minimisation -< dns no address given -< dns no tls hostname given -< dns recursor mode -< dns tls hostname -< dns use isp assigned nameservers -< dns use protocol for dns queries -< not validating -< okay < pakfire invalid tree < pakfire tree < pakfire tree stable < pakfire tree testing < pakfire tree unstable -< standard -< strict -< working ############################################################################ # Checking cgi-bin translations for language: it # ############################################################################ diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index 6729cd6c5..ec81e3e36 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -256,7 +256,7 @@ 'advproxy banned mac clients' => 'Adresses MAC interdites (une par ligne) ', 'advproxy basic authentication' => 'Autoriser l\'authentification HTTP basique', 'advproxy cache management' => 'Gestion du cache', -'advproxy cache replacement policy' => 'Politique du cache de remplacement ', +'advproxy cache replacement policy' => 'Politique cache de remplacement ', 'advproxy cache-digest' => 'Activer la génération de Cache-Digest ', 'advproxy chgwebpwd ERROR' => 'E R R E U R :', 'advproxy chgwebpwd SUCCESS' => 'S U C C E S :', @@ -320,7 +320,7 @@ 'advproxy errmsg radius server' => 'Adresse IP du serveur RADIUS non valide', 'advproxy errmsg time restriction' => 'Restriction horaire non valide', 'advproxy errmsg wpad invalid ip or mask' => 'WPAD : IP ou sous-réseau invalide pour le sous-réseau IP exclu', -'advproxy error design' => 'Construction des messages erronés ', +'advproxy error design' => 'Construction messages erronés ', 'advproxy error language' => 'Langage des messages erronés ', 'advproxy fake referer' => 'Fausses références soumises aux sites externes ', 'advproxy fake useragent' => 'Faux useragent soumis aux sites externes ', @@ -508,6 +508,7 @@ 'blue access use hint' => 'Vous devez saisir l\'adresse IP ou MAC de votre périphérique. Vous pouvez également saisir les deux', 'blue interface' => 'Interface BLEUE', 'broadcast' => 'Diffusion', +'broken' => 'Rompu', 'broken pipe' => 'Lien rompu', 'buffered memory' => 'Mémoire tampon', 'buffers' => 'tampons', @@ -840,23 +841,36 @@ 'dns address done' => 'Les adresses du serveur DNS vont être sauvegardées.', 'dns address recon' => 'Tentative de reconnexion !', 'dns check failed' => 'La vérification DNS a échouée', +'dns check servers' => 'Vérif. serveurs DNS', +'dns configuration' => 'DNS Configuration DNS', +'dns could not add server' => 'Ne peut ajouter le serveur - Motif :', 'dns desc' => 'Si l\'interface ROUGE0 obtient ses informations d\'adresse IP via le DHCP du fournisseur d\'accès, les adresses du serveur DNS seront définies automatiquement. Sinon, vous pouvez également remplacer les adresses IP du serveur DNS par celles de votre choix.', +'dns enable safe-search' => 'Activer recherche sécurisée', 'dns error 0' => 'L\'adresse IP du premier serveur DNS n\'est pas valide, veuillez revoir votre saisie La saisie de l\'adresse du second serveur DNS est valide.', 'dns error 01' => 'Les adresses IP du premier et du second serveur DNS ne sont pas valides, veuillez revoir vos saisies', 'dns error 1' => 'L\'adresse IP du second serveur DNS n\'est pas valide, veuillez revoir votre saisie La saisie de l\'adresse du premier serveur DNS est valide.', 'dns forward disable dnssec' => 'Désactiver DNSSEC (dangereux)', 'dns forwarding dnssec disabled notice' => '(DNSSEC désactivé)', 'dns header' => 'Assigner les adresses du serveur DNS seulement pour le DHCP sur ROUGE0', +'dns isp assigned nameserver' => 'Serveur DNS attribué par le FAI', +'dns isp nameservers and tls not allowed' => 'Les serveurs DNS et TLS attribués par le FAI ne peuvent pas être utilisés en même temps.', 'dns list' => 'Liste de serveurs DNS publiques gratuits', 'dns menu' => 'Assigner un serveur DNS', +'dns mode for qname minimisation' => 'Minimisation de QNAME', 'dns new 0' => 'Nouvelle adresse IP du premier serveur DNS :', 'dns new 1' => 'Nouvelle adresse IP du second serveur DNS :', +'dns no address given' => 'Aucune adresse IP donnée.', +'dns no tls hostname given' => 'Aucun nom d\'hôte TLS donné.', 'dns proxy server' => 'Serveur proxy DNS', +'dns recursor mode' => 'Exécution en mode récursif.', 'dns saved' => 'Sauvegarde effectuée !', 'dns saved txt' => 'La sauvegarde des deux adresses saisies du serveur DNS a été effectée correctement. Vous devez redémarrer ou vous reconnecter pour que les changements prennent effets !', 'dns server' => 'Serveur DNS', 'dns servers' => 'Serveurs DNS', 'dns title' => 'Nom du domaine système', +'dns tls hostname' => 'Nom d\'hôte TLS', +'dns use isp assigned nameservers' => 'Utiliser des serveurs DNS attribués par le FAI', +'dns use protocol for dns queries' => 'Protocole pour les requêtes DNS', 'dnsforward' => 'Transfert DNS', 'dnsforward add a new entry' => 'Ajouter une nouvelle entrée', 'dnsforward configuration' => 'Configuration de transfert DNS', @@ -865,11 +879,11 @@ 'dnsforward entries' => 'Entrées actuelles', 'dnsforward forward_servers' => 'Nom des serveurs ', 'dnsforward zone' => 'Zone ', -'dnssec aware' => 'DNSSEC avisé', +'dnssec aware' => 'DNSSEC notifié', 'dnssec disabled warning' => 'AVERTISSEMENT : DNSSEC a été désactivé', 'dnssec information' => 'Informations DNSSEC', 'dnssec not supported' => 'DNSSEC non supporté', -'dnssec validating' => 'Validation DNSSEC', +'dnssec validating' => 'DNSSEC validé', 'do not log this port list' => 'Ne pas inscrire cette liste de ports dans le journal (réduit la taille du journal)', 'dod' => 'Connexion à la demande', 'dod for dns' => 'Connexion à la demande pour le DNS :', @@ -1121,7 +1135,7 @@ 'fwdfw change' => 'Mettre à jour', 'fwdfw copy' => 'Copie', 'fwdfw delete' => 'Supprime', -'fwdfw dnat' => 'Destination NAT (Port forwarding)', +'fwdfw dnat' => 'Destination NAT (redirection de port)', 'fwdfw dnat error' => 'Vous devez choisir un seul hôte pour DNAT. Les groupes ou réseaux ne sont pas autorisés.', 'fwdfw dnat extport' => 'Le port externe doit être vide lors de l\'utilisation de règles NAT source.', 'fwdfw dnat nochoice' => 'Veuillez choisir un NAT source ou un NAT de destination dans la section NAT.', @@ -1399,7 +1413,7 @@ 'ids show' => 'Afficher', 'ids working' => 'Les modifications sont en cours d\'application. Veuillez patienter jusqu\'à ce que toutes les opérations soient terminées avec succès...', 'iface' => 'Iface', -'ignore filter' => 'Filtre d\'exclusion ', +'ignore filter' => 'Filtre exclusion ', 'ike encryption' => 'Chiffrement IKE :', 'ike grouptype' => 'Type de groupe IKE :', 'ike integrity' => 'Intégrité IKE :', @@ -1415,7 +1429,7 @@ 'incoming' => 'entrant', 'incoming compression in bytes per second' => 'Compression entrante', 'incoming firewall access' => 'Accès entrant du pare-feu', -'incoming overhead in bytes per second' => 'Incoming Overhead', +'incoming overhead in bytes per second' => 'Surcharge entrante (octets/s)', 'incoming traffic in bytes per second' => 'Trafic entrant', 'incorrect password' => 'Mot de passe incorrect', 'info' => 'Info', @@ -1538,10 +1552,10 @@ 'iptmangles' => 'Table IP Mangle ', 'iptnats' => 'Traduction d\'adresses réseaux table IP ', 'ipts' => 'Tables IP ', -'isdn' => 'ISDN', -'isdn settings' => 'Réglages ISDN supplémentaires :', -'isdn1' => 'ISDN unique', -'isdn2' => 'Double ISDN', +'isdn' => 'RNIS', +'isdn settings' => 'Réglages RNIS supplémentaires :', +'isdn1' => 'RNIS unique', +'isdn2' => 'RNIS double', 'itlb multihit' => 'MultiHit iTLB', 'january' => 'Janvier', 'javascript menu error1' => 'Si les menus déroulants ne fonctionnent pas, désactivez le Javascript sur la', @@ -1561,7 +1575,7 @@ 'last activity' => 'Dernière activité', 'lateprompting' => 'Dernière action', 'lease expires' => 'Bail expiré', -'least preferred' => 'le moins apprécié', +'least preferred' => 'le moins souhaité', 'legend' => 'Légende ', 'length' => 'Longueur', 'lifetime' => 'Durée de vie :', @@ -1729,7 +1743,7 @@ 'monthly volume start day short' => 'Premier jour', 'months' => 'mois', 'more' => 'plus', -'most preferred' => 'le davantage préféré', +'most preferred' => 'le préféré', 'mount' => 'Monter', 'mounted on' => 'Monté en tant que', 'mpfire' => 'Lecteur de médias pour IPFire', @@ -1805,6 +1819,7 @@ 'not present' => 'Absent', 'not running' => 'ne fonctionne pas', 'not set' => 'non fixé', +'not validating' => 'Pas de validation', 'notes' => 'Notes', 'notice' => 'Remarque ', 'november' => 'Novembre', @@ -1822,6 +1837,7 @@ 'october' => 'Octobre', 'off' => 'off', 'ok' => 'Ok', +'okay' => 'Okay', 'older' => 'Plus anciens', 'on' => 'sur', 'one hour' => 'Une heure', @@ -1893,9 +1909,9 @@ 'outgoing firewall reset' => 'Tout réinitialiser', 'outgoing firewall view group' => 'Voir le groupe', 'outgoing firewall warning' => 'Ne pas choisir IP source ou Mac ignore les', -'outgoing overhead in bytes per second' => 'Outgoing Overhead', -'outgoing traffic in bytes per second' => 'Trafic sortant', -'override mtu' => 'Outrepasser le MTU par défaut', +'outgoing overhead in bytes per second' => 'Surcharge en sortie (octets/s)', +'outgoing traffic in bytes per second' => 'Trafic sortant (octets/s)', +'override mtu' => 'Remplacer le MTU par défaut', 'ovpn' => 'OpenVPN', 'ovpn add conf' => 'Configuration additionnelle', 'ovpn con stat' => 'Statistiques de connexions OpenVPN', @@ -2045,7 +2061,7 @@ 'proxy admin password' => 'Mot de passe admnistrateur du cache ', 'proxy cachemgr' => 'Activer le gestionnaire de cache ', 'proxy errmsg filedescriptors' => 'Mauvais montant de fichier descripteurs', -'proxy filedescriptors' => 'Nombre de descripteurs de fichier ', +'proxy filedescriptors' => 'Nombre de descripteurs fichier ', 'proxy log viewer' => 'Rapports de proxy', 'proxy logs' => 'Rapports de proxy', 'proxy no proxy extend' => 'Où spécifier une liste de destination sans transit par le proxy', @@ -2286,6 +2302,7 @@ 'sssystem status' => 'Statut système', 'sstraffic' => 'Trafic réseau', 'sstraffic graphs' => 'Graphiques du trafic', +'standard' => 'Standard', 'standard login script' => 'Script de connexion standard', 'start' => 'Démarrer', 'start address' => 'Adresse de début :', @@ -2300,6 +2317,7 @@ 'stop' => 'Arrêter', 'stop ovpn server' => 'Arrêter serveur OpenVPN', 'stopped' => 'ARRETE', +'strict' => 'Strict', 'subject' => 'Sujet', 'subject test' => 'Email de test', 'subject warn' => 'Attention - Le niveau d\'alerte a été atteint', @@ -2534,7 +2552,7 @@ 'updxlrtr save and restart' => 'Sauvegarder et redémarrer', 'updxlrtr source' => 'Source', 'updxlrtr source checkup' => 'Vérifications des sources', -'updxlrtr source checkup schedule' => 'Fréquence de vérification des sources ', +'updxlrtr source checkup schedule' => 'Fréquence vérification des sources ', 'updxlrtr sources' => 'Sources', 'updxlrtr standard view' => 'Vue standard', 'updxlrtr statistics' => 'Statistiques', @@ -2817,7 +2835,7 @@ 'vpn force mobike' => 'Force utilisation MOBIKE (seulement IKEv2)', 'vpn inactivity timeout' => 'Délai dépassé inactivité', 'vpn incompatible use of defaultroute' => 'hostname=%defaultroute non admis', -'vpn keyexchange' => 'Keyexchange', +'vpn keyexchange' => 'Échange de clés', 'vpn local id' => 'ID Local', 'vpn missing remote id' => 'Vous devez spécifier un nom unique correct (DN) pour cette authentification.', 'vpn mtu invalid' => 'MTU doit être une valeur numérique !', @@ -2866,13 +2884,13 @@ 'wireless configuration' => 'Configuration réseau sans fil', 'wireless network' => 'Réseau wifi', 'wlan client' => 'Client réseau sans fil', -'wlan client advanced settings' => 'Paramètres avancés', +'wlan client advanced settings' => 'Paramètres avancés ', 'wlan client and' => 'et', -'wlan client anonymous identity' => 'Identité anonyme', +'wlan client anonymous identity' => 'Identité anonyme ', 'wlan client auth auto' => 'Auto', 'wlan client auth peap' => 'PEAP', 'wlan client auth ttls' => 'TTLS', -'wlan client authentication settings' => 'Paramètres d\'authentification', +'wlan client authentication settings' => 'Paramètres d\'authentification ', 'wlan client bssid' => 'BSSID', 'wlan client ccmp' => 'CCMP', 'wlan client configuration' => 'Configuration client sans fil', @@ -2882,7 +2900,7 @@ 'wlan client eap phase2 method' => 'Méthode phase 2 EAP', 'wlan client eap state' => 'Statut EAP', 'wlan client edit entry' => 'Modifier la configuration du client sans fil', -'wlan client encryption' => 'Chiffrement', +'wlan client encryption' => 'Chiffrement ', 'wlan client encryption eap' => 'EAP', 'wlan client encryption none' => 'Aucun', 'wlan client encryption wep' => 'WEP', @@ -2890,7 +2908,7 @@ 'wlan client encryption wpa2' => 'WPA2', 'wlan client group cipher' => 'Chiffrer groupe', 'wlan client group key algorithm' => 'GKA', -'wlan client identity' => 'Identité', +'wlan client identity' => 'Identité ', 'wlan client invalid key length' => 'Longueur de clé invalide.', 'wlan client method' => 'Méthode', 'wlan client new entry' => 'Créer une nouvelle configuration de client sans fil', @@ -2898,13 +2916,13 @@ 'wlan client pairwise cipher' => 'Chiffrer par paire', 'wlan client pairwise key algorithm' => 'PKA', 'wlan client pairwise key group key' => 'Clé par paire / clé de groupe', -'wlan client password' => 'Mot de passe', -'wlan client psk' => 'Clé pré-partagée', -'wlan client ssid' => 'SSID', +'wlan client password' => 'Mot de passe ', +'wlan client psk' => 'Clé pré-partagée ', +'wlan client ssid' => 'SSID ', 'wlan client tkip' => 'TKIP', 'wlan client tls cipher' => 'Chiffrer TLS', 'wlan client tls version' => 'Version TLS', -'wlan client wpa mode' => 'Mode WPA', +'wlan client wpa mode' => 'Mode WPA ', 'wlan client wpa mode all' => 'Auto', 'wlan client wpa mode ccmp ccmp' => 'CCMP-CCMP', 'wlan client wpa mode ccmp tkip' => 'CCMP-TKIP', @@ -2941,6 +2959,7 @@ 'wlanap wlan status' => 'Statut WLan', 'wol wakeup' => 'Réveil', 'workgroup' => 'Groupe de travail', +'working' => 'Working', 'written bytes' => 'Octets écrits', 'xtaccess all error' => 'Vous ne pouvez pas donner l\'accès externe à tout ce qui se fait dans le dossier de redirection de port.', 'xtaccess bad transfert' => 'Si vous spécifiez une plage de ports de destination, la plage source doit être identique !', diff --git a/lfs/kmod b/lfs/kmod index 4ef2088fd..39e350c02 100644 --- a/lfs/kmod +++ b/lfs/kmod @@ -24,7 +24,7 @@ include Config -VER = 25 +VER = 26 THISAPP = kmod-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 34f325cab568f842fdde4f8b2182f220 +$(DL_FILE)_MD5 = 1129c243199bdd7db01b55a61aa19601 install : $(TARGET) @@ -75,6 +75,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) --bindir=/bin \ --sysconfdir=/etc \ --disable-manpages \ + --with-openssl \ --with-xz \ --with-zlib diff --git a/lfs/linux b/lfs/linux index 4914f7ea2..7f44702d0 100644 --- a/lfs/linux +++ b/lfs/linux @@ -24,8 +24,8 @@ include Config -VER = 4.14.171 -ARM_PATCHES = 4.14.171-ipfire0 +VER = 4.14.172 +ARM_PATCHES = 4.14.172-ipfire0 THISAPP = linux-$(VER) DL_FILE = linux-$(VER).tar.xz @@ -34,7 +34,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) CFLAGS = CXXFLAGS = -PAK_VER = 91 +PAK_VER = 92 DEPS = "" HEADERS_ARCH = $(BUILD_PLATFORM) @@ -82,8 +82,8 @@ objects =$(DL_FILE) \ $(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE) arm-multi-patches-$(ARM_PATCHES).patch.xz = $(URL_IPFIRE)/arm-multi-patches-$(ARM_PATCHES).patch.xz -$(DL_FILE)_MD5 = b9b2c64eb3ae7fa6023d2b8c981b5ac4 -arm-multi-patches-$(ARM_PATCHES).patch.xz_MD5 = f1d5d1dcb1d60c6f8476938070a65112 +$(DL_FILE)_MD5 = 782746859c7f365aeba49c08705c4c30 +arm-multi-patches-$(ARM_PATCHES).patch.xz_MD5 = 3072dd813363b20361f80ecc748a1084 install : $(TARGET) diff --git a/make.sh b/make.sh index 07c0f52c2..984fc95b2 100755 --- a/make.sh +++ b/make.sh @@ -1111,7 +1111,6 @@ buildbase() { lfsmake2 pkg-config lfsmake2 make lfsmake2 man - lfsmake2 kmod lfsmake2 net-tools lfsmake2 patch lfsmake2 psmisc @@ -1121,7 +1120,6 @@ buildbase() { lfsmake2 tar lfsmake2 texinfo lfsmake2 util-linux - lfsmake2 udev lfsmake2 vim } @@ -1133,6 +1131,8 @@ buildipfire() { lfsmake2 backup lfsmake2 openssl [ "${BUILD_ARCH}" = "i586" ] && lfsmake2 openssl KCFG='-sse2' + lfsmake2 kmod + lfsmake2 udev lfsmake2 popt lfsmake2 libedit lfsmake2 libusb diff --git a/src/initscripts/networking/red.down/05-remove-dns-forwarders b/src/initscripts/networking/red.down/05-remove-dns-forwarders deleted file mode 100644 index 671cca9df..000000000 --- a/src/initscripts/networking/red.down/05-remove-dns-forwarders +++ /dev/null @@ -1,4 +0,0 @@ -#!/bin/bash - -# Remove DNS forwarders for unbound -exec /etc/init.d/unbound remove-forwarders diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound index b6b57f1c1..c845c436f 100644 --- a/src/initscripts/system/unbound +++ b/src/initscripts/system/unbound @@ -274,8 +274,6 @@ get_memory_amount() { } fix_time_if_dns_fails() { - # Sometimes the first try fails so do it twice - resolve "ping.ipfire.org" &>/dev/null # If DNS is working, everything is fine if resolve "ping.ipfire.org" &>/dev/null; then return 0 @@ -534,7 +532,7 @@ update_safe_search() { for domain in ${google_tlds[@]}; do unbound-control local_zone "${domain}" transparent >/dev/null for address in ${addresses}; do - unbound-control local_data: "www.${domain} ${LOCAL_TTL} IN A ${address}" + unbound-control local_data "www.${domain} ${LOCAL_TTL} IN A ${address}" done >/dev/null done @@ -587,37 +585,38 @@ case "$1" in sleep 1 $0 start ;; - reload|remove-forwarders) + reload|update-forwarders) # Update configuration files write_forward_conf write_hosts_conf + # Call unbound-control and perform the reload + /usr/sbin/unbound-control -q reload + + # Dummy Resolve to wait for unbound + resolve "ping.ipfire.org" &>/dev/null + + if [ "$1" = "update-forwarders" ]; then + # Make sure DNS works at this point + fix_time_if_dns_fails + fi + # Update Safe Search rules if the system is online. if [ -e "/var/ipfire/red/active" ]; then update_safe_search fi - - # Call unbound-control and perform the reload - /usr/sbin/unbound-control -q reload ;; status) statusproc /usr/sbin/unbound ;; - update-forwarders) - $0 reload - - # Make sure DNS works at this point - fix_time_if_dns_fails - ;; - resolve) resolve "${2}" || exit $? ;; *) - echo "Usage: $0 {start|stop|restart|reload|status|resolve|update-forwarders|remove-forwarders}" + echo "Usage: $0 {start|stop|restart|reload|status|resolve|update-forwarders}" exit 1 ;; esac hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. e53c38aea14132da0fff15655735f673aab33c4a
by Arne Fitzenreiter 03 Mar '20

03 Mar '20

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via e53c38aea14132da0fff15655735f673aab33c4a (commit) via 1773544d025591d4096ee91bcc598dac19fa0f24 (commit) from b5afe1e8d55525462b27e6147182f2bd0623fc56 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit e53c38aea14132da0fff15655735f673aab33c4a Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Mar 3 13:25:17 2020 +0100 core142: fix typo's at remove/update dns forwareders changes Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1773544d025591d4096ee91bcc598dac19fa0f24 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Mar 3 13:23:29 2020 +0100 kernel: update to 4.14.172 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/142/update.sh | 8 ++++---- lfs/linux | 10 +++++----- 2 files changed, 9 insertions(+), 9 deletions(-) Difference in files: diff --git a/config/rootfiles/core/142/update.sh b/config/rootfiles/core/142/update.sh index 9a5829152..dd1377c1c 100644 --- a/config/rootfiles/core/142/update.sh +++ b/config/rootfiles/core/142/update.sh @@ -91,15 +91,15 @@ rm -rf /usr/lib/pppd/2.4.7 /etc/init.d/squid stop /etc/init.d/suricata stop -# drop unbound remove-forwarders -rm -f /etc/rc.d/init.d/netowrking/red.down/05-remove-dns-forwarders +# drop unbound remove and update forwarders +rm -f /etc/rc.d/init.d/networking/red.down/05-*-dns-forwarders # Extract files extract_files # move update forwarders below firewall -mv -f /etc/rc.d/init.d/netowrking/red.up/05-update-dns-forwarders \ - /etc/rc.d/init.d/netowrking/red.up/22-update-dns-forwarders +mv -f /etc/rc.d/init.d/networking/red.up/05-update-dns-forwarders \ + /etc/rc.d/init.d/networking/red.up/22-update-dns-forwarders # update linker config ldconfig diff --git a/lfs/linux b/lfs/linux index 4914f7ea2..7f44702d0 100644 --- a/lfs/linux +++ b/lfs/linux @@ -24,8 +24,8 @@ include Config -VER = 4.14.171 -ARM_PATCHES = 4.14.171-ipfire0 +VER = 4.14.172 +ARM_PATCHES = 4.14.172-ipfire0 THISAPP = linux-$(VER) DL_FILE = linux-$(VER).tar.xz @@ -34,7 +34,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) CFLAGS = CXXFLAGS = -PAK_VER = 91 +PAK_VER = 92 DEPS = "" HEADERS_ARCH = $(BUILD_PLATFORM) @@ -82,8 +82,8 @@ objects =$(DL_FILE) \ $(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE) arm-multi-patches-$(ARM_PATCHES).patch.xz = $(URL_IPFIRE)/arm-multi-patches-$(ARM_PATCHES).patch.xz -$(DL_FILE)_MD5 = b9b2c64eb3ae7fa6023d2b8c981b5ac4 -arm-multi-patches-$(ARM_PATCHES).patch.xz_MD5 = f1d5d1dcb1d60c6f8476938070a65112 +$(DL_FILE)_MD5 = 782746859c7f365aeba49c08705c4c30 +arm-multi-patches-$(ARM_PATCHES).patch.xz_MD5 = 3072dd813363b20361f80ecc748a1084 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM March 2020