Commit Graph

320 Commits

Author SHA1 Message Date
genofire 37f5aaf97c feat(gluon): update to 2023.2.4 2024-11-15 21:21:35 +01:00
Oliver Gerlich 89696f512e remove explicit "firewall" and "urngd" packages
... as recommended at
https://forum.freifunk.net/t/fehler-file-system-partition-too-big/24139/3 .

I am not aware that we explicitly want these packages; so they should only
be pulled in as dependencies from other packages, if necessary.
2024-07-13 11:01:05 +02:00
Oliver Gerlich 59159a7f39 specify gluon-* packages in "features" section
... as recommended at
https://forum.freifunk.net/t/fehler-file-system-partition-too-big/24139/3 .
2024-07-11 21:35:20 +02:00
Oliver Gerlich 98d99af039 replace explicit SSL package lists by "tls" feature
This fixes the build failures ("file-system partition too big") for Archer
C6 v2 and C60 v1. Apparently Gluon now just uses the already-installed
mbedtls SSL implementation, so we save the space of libustream-openssl.
The "tls" feature had been added in Gluon 2023.2.
2024-07-11 21:30:17 +02:00
Oliver Gerlich f774cab019 feat(gluon): update to 2023.2.3 2024-07-07 12:21:03 +02:00
Oliver Gerlich 7bbed5c0ee Empty commit to force another Jenkins build 2024-04-19 20:59:50 +02:00
genofire aabed694d3 fix(image-customization.lua): move away from site.mk (required by v2023.2) + add tls packages
solves #54
2024-01-23 23:25:35 +01:00
genofire 88e9091e1e feat(gluon): update to 2023.2.1 2024-01-23 23:25:31 +01:00
genofire 4725fed5ea feat(gluon): update to 2023.1.1 2023-10-13 22:34:43 +02:00
genofire d2eaed3a16 fix(dns): add cacheing again 2023-08-20 10:23:28 +02:00
genofire 0262e7bb9e feat(gluon): update to 2023.1 2023-08-20 10:23:24 +02:00
genofire b7532791b3 feat(gluon): update to 2022.1.4 2023-05-14 16:32:54 +02:00
genofire 4917fb3ad8 feat(gluon): update to 2022.1.3 2023-03-30 12:40:18 +02:00
genofire e276e64521 feat(gluon): update to 2022.1.1 2022-12-11 02:14:53 +01:00
genofire eb9e6de0bf feat(gluon): update to 2021.1.2 2022-07-23 14:27:24 +02:00
genofire 12140d73e3 fix(site): set correct default_domain 2022-07-21 02:11:23 +02:00
Oliver Gerlich f11c2c599b generate new key for vpn10
Previously I had accidentally added the private key instead of the public
key to the config file.
2022-06-19 11:09:19 +02:00
Oliver Gerlich 949c2a44f2 enable automatic domain switch to ffhb_batv15, on Fr 1. Jul 02:00:00 CEST 2022 2022-06-19 10:23:36 +02:00
Oliver Gerlich 92b13d4754 add comment 2022-06-19 10:23:01 +02:00
Oliver Gerlich 34df7a9e30 improve descriptions of available domains 2022-06-19 10:19:28 +02:00
Oliver Gerlich 5f955254f8 also add vpn09/10 to DNS and NTP servers 2022-06-19 10:17:07 +02:00
Oliver Gerlich 8f69120799 Empty commit to force another Jenkins build 2022-06-09 21:18:08 +02:00
Oliver Gerlich 9fd440d68f Empty commit to force another Jenkins build 2022-06-08 08:43:58 +02:00
genofire afb21e4bc0 ffhb_batv15: show this domain 2022-06-06 22:29:26 +02:00
Oliver Gerlich baf1151020 Empty commit to force another Jenkins build 2022-06-06 17:46:16 +02:00
Oliver Gerlich c8188a4774 ffhb_11s.conf: disable domain_switch for now
The next release should become a Testing version that does not perform an
automatic switchover yet.
2022-06-06 17:12:57 +02:00
Oliver Gerlich 960e6102a0 ffhb_11s.conf: increase domain_switch.switch_after_offline_mins to 1 day
We think it is more likely that nodes accidentally are offline for two
hours and then would switch prematurely, than that they have incorrect
system time during switchover and then switch one day too late.
2022-06-06 17:10:15 +02:00
Oliver Gerlich 7a5cdb2d83 ffhb_11s.conf: add more test servers to domain_switch.connection_check_targets
- add some of our own VPN servers, so that the check also works for nodes
  that may only connect to the VPN servers
- remove one of the Google servers, to keep the number of servers low (the
  ping check is executed every minute and sends one ping packet to each IP,
  with a wait time of 10 seconds; so let's keep the total check time under
  60 seconds)
2022-06-06 16:01:32 +02:00
Oliver Gerlich 1288c3c75c site.mk: fix indentation 2022-06-06 15:52:44 +02:00
Oliver Gerlich cf1c273eff add vpn09 and vpn10 to ffhb_batv15.conf
These servers don't exist yet but are supposed to be set up once the Batman
v15 migration is done.

I have generated the fastd keypairs locally and will add the secret keys to
the servers once they are set up.
2022-06-06 13:40:26 +02:00
Oliver Gerlich 7e9d6799d9 Merge pull request #51 from FreifunkBremen/fix/modules-url
fix(modules): use https for git protocol
2022-05-22 16:22:58 +02:00
genofire a27a49b444 fix(modules): use https for git protocol 2022-05-22 16:14:35 +02:00
Oliver Gerlich 3ab9e9d4f6 Merge pull request #50 from FreifunkBremen/fix/dns-sites
fix(sites): dns and ntp per site
2022-05-22 15:27:16 +02:00
genofire ee2e3d4d6b fix(sites): dns and ntp per site 2022-05-22 15:16:17 +02:00
Oliver Gerlich 52b7d94f70 remove vpn04 from batv15 domain
For the test we only want to use the future production servers.
2022-05-21 21:47:45 +02:00
Oliver Gerlich 67ff725ee8 add new vpn08 server for batv15 domain 2022-05-21 21:46:32 +02:00
Oliver Gerlich 5aa7804399 add new vpn07 server for batv15 domain 2022-05-21 21:46:28 +02:00
Oliver Gerlich 9bb5f36599 use vxlan in batv15 domain
Since the ffhb_batv15 nodes will not be able to mesh with the ffhb_11s
nodes anyway, the v15 switch is a good opportunity to also switch to VXLAN.
2022-05-21 21:46:28 +02:00
Oliver Gerlich 2f09fb1112 add domain_switch section for testing the switch to Batman v15, on 2022-05-22
This is just for a quick local test.
2022-05-21 21:46:05 +02:00
Oliver Gerlich 34f6db7f45 hide Batmanv15 domain again
This prevents showing the (mandatory) domain selection field in config mode
of the stable firmware. The domain can still be activated via SSH, so that
it can be tested.
2022-05-18 07:07:50 +02:00
Oliver Gerlich 503df2dc7b improve descriptions of our network domains
Make the descriptions more suitable for end-users, so that (hopefully) they
can determine which domain they should pick.
2022-05-17 06:55:14 +02:00
Oliver Gerlich f16f4d6c7a Merge 'stable' branch to get fix for CVE-2022-24884 into master 2022-05-08 20:15:06 +02:00
Jan-Philipp Litza 5de2bd16d4 Empty commit to fix version tag 2022-05-05 20:47:50 +02:00
Jan-Philipp Litza 776953b256 gluon: Update for CVE-2022-24884 2022-05-05 20:10:10 +02:00
Oliver Gerlich 2b0b30f204 Empty commit for version bump to v2019.1.3+bremen2 2021-02-23 22:24:12 +01:00
Oliver Gerlich e5e27d50a1 add vpn servers 1,2,3,5,6 to batman v15 domain, with port 50001
These servers will accept VPN connections for batman v15 on a different
port than used so far, to prevent batman v13 nodes from connecting to the
v15 mesh.
2021-02-18 21:02:22 +01:00
Oliver Gerlich 6f200d0192 use port 50000 for batman v15 on vpn04
This is supposed to be the only server to support VPN connections for
batman v15 on port 50000, as fallback for nodes that cannot use the new
VPN port 50001 due to restrictive firewall settings.

Since this server has not been used in any stable or testing firmware so
far, there is no risk that batman v13 nodes will try to connect to this
port.
2021-02-18 20:57:32 +01:00
Geno f29f81ef31 update gluon to v2019.1.3 2020-11-05 23:15:54 +01:00
Geno 6aeb29f904 use batman v15 stable 2020-10-17 20:50:21 +02:00
Geno 9aaad70f5a publish batv15 as test network 2020-10-17 19:49:34 +02:00