Signed-off-by: Adam Wujek <dev_public@wujek.eu>

Disable web interface in the default config due to security
vulnerabilities described in CVE-2023-22577.

Please note that web interface can still be enabled manually in the
config file in runtime.

Signed-off-by: Adam Wujek <dev_public@wujek.eu>

Signed-off-by: Adam Wujek <dev_public@wujek.eu>

Signed-off-by: Alessandro Rubini <rubini@gnudd.com>

Maciej Lipinski authored 4 years ago and Grzegorz Daniluk committed 4 years ago

changed from daemon.info to a new option default_syslog that
uses daemon.info as default and additionally parses syslog
messages for info about facility,priority and uses this info
if available.

Adam Wujek authored 5 years ago and Maciej Lipinski committed 5 years ago

This reduces the size of a firmware by 5MB.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Adam Wujek authored 5 years ago and Maciej Lipinski committed 5 years ago

Uplift util-linux to a version 2.28.2

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Revert part of a commit:
f14e28c9

 Setup default config for the switch (WR profile by default)

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

dropbear was replaced, because it does not support correctly LDAP+kerberos.

It was almost working. With LDAP+Kerberos over PAM dropbear was prompting once
more for a password when the correct was given.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

add:
--glibc
--libkrb5
--nss-pam-ldapd
--openldap
--linux-pam

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

DONE: Kconfig, assembly_ppsi_conf.sh
TODO: SNMP, DOCs, HAL?

Redefine options CONFIG_PORTXX_PARAMS in dot-config
--role={master,slave,auto,none}, keep non-wr for compatibility
--ext={WR}:{HR}, HR for future, if no ext defined use WR as default
--add extra option to disable/enable triggering errors in SNMP
--add option for delay mechanism (dm)
  p2p or e2e
  e2e default

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

VLANs require some extra configuration.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Cesar Prados authored 7 years ago and Adam Wujek committed 6 years ago

in order to expose the lldp information using
snmp, lldp must be compile with snmp support and
started with the proper switch. Besides snmp needs
the agentx MIB and configure the daemon to enable
a mater agent.

Signed-off-by: C.Prados <c.prados@gsi.de>

Cesar Prados authored 7 years ago and Adam Wujek committed 6 years ago

The Link Layer Discovery Protocol, lldp, is a vendor-neutral link layer
protocol in the Internet Protocol Suite used by network devices for
advertising their identity and capabilities.

Signed-off-by: C.Prados <c.prados@gsi.de>

Alessandro Rubini authored 8 years ago and Adam Wujek committed 8 years ago

Signed-off-by: Alessandro Rubini <rubini@gnudd.com>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Fixed by uplift of a kernel from 3.16.37 to 3.16.38.
Even it is a local privilege escalation bug, which does not impact us,
it is worth to have it fixed.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

add:
--CONFIG_NO_HZ_COMMON
--CONFIG_NO_HZ_IDLE
--emulation of floating-point
--VLANs (for management port)
--bridge (for management port)
--scheduler debug and stats

removed:
--IPv6
--wireless
--SCSI
--HID
--parts of USB
--RTC
--ext2
--fat

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Federico Vaga authored 8 years ago and Adam Wujek committed 8 years ago

Signed-off-by: Federico Vaga <federico.vaga@cern.ch>

Federico Vaga authored 8 years ago and Adam Wujek committed 8 years ago

The configuration was installing the kernel headers from version 4.4
but we were using 2.6.39 and now we are using 3.16.37. Fix this
by configuring the 3.16.37 as Linux versin to use to get headers

Signed-off-by: Federico Vaga <federico.vaga@cern.ch>

wrs_watchdog will use WRS_LOG_OTHER instead of WRS_LOG_WRSWATCHDOG as a
destination for logs.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

These two libraries will be used by nconf/nconfig on target

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Add psmics for killall, pstree and fuser.
Since fuser comes from psmisc, it is not needed anymore to compile it in
the busybox.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

We don't use ifplugd since Feb 2014. See the commit:
162fb24e

 userspace: run dhcpc in background forever, not through auto means

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

There is no need to create cpio, tar and bzip2 images, since we don't use them
anyway. We assemble images on our own in build/scripts/wrs_build_wraprootfs.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Change done due to uplift of the buildroot to the 2016.02
Please note that some of the options just changed their position.

Some changes:

remove:
--DOS2UNIX
--UNIX2DOS
--FDFORMAT (we don't have floppy)
--EJECT (we don't have CD/DVD)
--HDPARM (we don't have ATA drives)
--ETHER_WAKE (to send wake-on-lan magic packet)
--DNSD (we don't need DNS server)
--NAMEIF (we don't want to change names of interfaces)

remove the following, since they're provided by prosps_ng:
--pidof
--top
--uptime
--free
--kill*
--ps
--sysctl
--watch

add:
--LFS (large file support)
--MD5_SMALL=0 (We don't care so much about the size, more about
  the performance. Use the fastest. Difference in the size is very
  small anyway.)
--SHA3_SMALL=0 (like above)
--CONFIG_GZIP_FAST=2 (like above, use the fastest)
--FEATURE_LESS_WINCH and FEATURE_LESS_ASK_TERMINAL allow to display i.e.
  "less" command via serial terminal with non standard terminal sizes.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Remove binaries/usr/lib/libbfd-2.21.1.so and /usr/bin/nm from the repo.
Instead use the compiled versions in buildroot.

Patch the installation rule to install only "nm", when
PACKAGE_BINUTILS_TARGET is not used(!).
libbfd-2.21.1.so is installed by default by the installation rule of
PACKAGE_BINUTILS.

Binary nm was added in the commit:
d2a486cc

 rootfs_override: add /usr/bin/nm and its libbfd

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

make 3.82 splits the work differently. When using buildroot with
the make > 3.81 buildroot uses BR2_JLEVEL= (preferably 0 for automatic number
of jobs setting).
For make =< 3.81 BR2_JLEVEL= is ignored and build is done using only one job.
Passing -j allows to build with many jobs, but many warning messages are
printed:
make[2]: warning: -jN forced in submake: disabling jobserver mode.

Use BR_JLEVEL=0, this allows buildroot to pick automatically number of jobs.

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

--Part of changing names of interfaces in WRS from wrX (wr0-17) to
  wriX (wri1-wri18).
--Rename wr0 to wri1 in help

Signed-off-by: Adam Wujek <adam.wujek@cern.ch>