Bering-uClibc 4.x - Changelog

Changes between 4.1.1 and 4.2-beta1

(released 20 Dec 2011)

shorewall 

updated to version 4.4.26.1

kernel (all flavours) 

added IPV6 Privacy Extension (RFC 3041)

added IPv6 Router Preference (RFC 4191

IPv6 support multiple routing tables with source based address routing

build IPSEC modules (IPCOMP transformation, IPSEC transport mode,IPSEC tunnel mode, IPSEC BEET mode) also for IPv4

change preemption model from "Desktop" oriented to "Server/traditional" (from kernel help: "Select this option if you are building a kernel for a server or scientific/computation system, or if you want to maximize the raw processing power")

added more modules for powersaving and moved others from "builtin" to "modules", removed debugging support

added physdev and xt_policy match in netfilter modules

remove igb from kernel build (built separately)

kernel (i686) 

build optimized for speed

used slub memory allocator instead of generic slab (it has better scalability)

kernel (geode)

remove AMD, Intel and Cyrix microcode support (unavailable for geode cpu's, reduces kernel size)

enable and package all geode hardware modules (geode watchdog, cs55* chipset, geode-aes)

remove advantechwdt from kernel and build as module

remove unneccesary drivers (reduces size of initrd-geode approx. 60kb)

used slob memory allocator instead of generic slab (it is simplier and has smaller memory consumption; also it has worse scalability on SMP - but we are building non-SMP kernel)

kernel (i486) 

used slob memory allocator instead of generic slab

privoxy 

updated to new upstream version 3.0.18

initrd 

update busybox to 1.19.3

fixed hwdetect

Changes between 4.1.1-rc1 and 4.1.1

(released 7 Dec 2011)

busybox 

add watch applet

Changes between 4.1.1-beta1 and 4.1.1-rc1

(released 26 Nov 2011)

openswan 

fix version and revision number

asterisk 

reinstate asterisk.lrp and related Packages (closes TRAC ticket #5)

curl 

updated to version 7.22.0

shorewall 

updated to version 4.4.25.3

sshblack 

new Package to blacklist source IP address based on repeated login failures (closes TRAC ticket #65)
Initially configured to check for dropbear login failures but can be modified to run any "block" script based on any regex pattern in any logfile

dropbear 

updated to new upstream version 2011.54

radvd 

updated to new upstream version 1.8.3

dmidecode 

updated to new upstream version 2.11

busybox 

added nohup applet

etc 

fixed mdev.conf syntax and added /dev/vcs entries

run procps after iptables has been started

initrd 

load modules by wrapper script, speeds up boot-time

Changes between 4.1 and 4.1.1-beta1

(released 1 Nov 2011)

initrd 

updated busybox to 1.19.2

openssl 

updated to 1.0.0e (closes TRAC ticket #61)

radvd 

updated to 1.8.2 with a lot of security fixes, (also closes TRAC ticket #62)

shorewall 

updated to new upstream version 4.4.24.1

radius 

updated to new upstream version 2.1.12 and other changes to close TRAC ticket #63

dsnmasq 

updated to new upstream version 2.59

lm-sensors 

updated to version 3.3.1

rsync 

updated to new upstream version 3.0.9

ebtables 

updated to new upstream version 2.0.10-2

tor 

updated to new upstream version 0.2.2.33

squid 

updated to new upstream version 3.20.12 with ipv6 support

lzo 

updated to new upstream version 2.06

wget 

updated to new upstream version 1.13.4

dropbear 

updated to new upstream version 0.53.1

clamav 

new package, version 0.9.73 of the virus scanner

Based on the buildtool setup contributed by Alejandro Dguez for the Bering-uClibc 3.

havp 

new package, version 0.92a of the http anti virus proxy

Based on the buildtool setup contributed by Alejandro Dguez for the Bering-uClibc 3.

See also the new chapter Setting up a HTTP Anti Virus Proxy of the Bering-uClibc 4.x User Guide.

quagga 

new upstream version 0.99.20

Changes between 4.1-rc1 and 4.1

(released 8 Oct 2011)

initrd 

update version

add hotplug.sh (script for auto-probing modules for hotplugged device - mdev hasn't this function) to package, missing in 4.1-rc1

Changes between 4.1-beta2 and 4.1-rc1

(released 1 Oct 2011)

general 

open source license text (Package license.lrp) added to all disk images

tor 

updated to new upstream version 0.2.2.32

shorewall 

updated to new upstream version 4.4.23.3

etc 

start procps.sh after the network is up

initrd 

added mdev wrapper for module auto-loading on hotplug

wpa_supplicant 

updated to new upstream version 0.7.3

dhcpd 

updated from 2.0pl5-19.1 to latest upstream version 4.2.2, adding DHCPv6 support

Changes between 4.1-beta1 and 4.1-beta2

(released 1 Sept 2011)

kernel 

updated to 2.6.35.14

systat 

create log directory at start

mbusd 

update to 0.1.3 plus patches to make it finally working

webconf 

fix leafcfg.cgi and path to syslog-ng in lrcfg.cgi

busybox 

updated to new upstream version 1.19.0

increased history size from 15 to 500; enabled history_save and reverse search in history

tinyproxy 

updated to to new upstream version 1.8.3

fixed tinyproxy.conf, which was still an older version

dnsmasq 

updated to new upstream version 2.58

nut 

fixes for nut environment and scripts

added user/group nut to passwd/group

run nut with user "nut"

add powercom patch

ppp-hsh 

small improvements to ppp-mod script

fix-up for working with IXSPEED filter on NAS w/o IX iface

buildenv 

update binutils to 2.21.1a (2.21 is no longer available at ftp.gnu.org)

Changes between 4.0 and 4.1-beta1

(released 30 July 2011)

general 

replace old mail script with busybox sendmail. It allows user authentication, provding a FQDN and connecting via SSL/TLS (untested)and is a lot smaller. (fixes Trac ticket #53)

moved arc4 and ecb kernel modules from geode-only list to common list, added sha1_generic to common list, added modprobing of modules that listed in /etc/modules during hwdetect (to pull all dependencies)

kernel 

updated to version 2.6.35.13

including a kernel review to remove useless options/modules from different kernels/images (still under construction)

Fixed link state flood in syslog for r6040 (kernel bug #29122)

shorewall 

updated to version 4.4.20.3, closes also Trac ticket #44

openssh 

updated to version 5.8p1

openvpn 

updated to version 2.2.0

zlib 

updated to version 1.2.5

binutils 

updated to version 2.21 for gcc 4.6.0 (e.g. on Fedora 15), closes also Trac ticket #49

keepalived 

updated to version 1.2.2

nttcp 

the binary has been long around for tcp performance tests - now packaged. Closes Trac ticket #28

at 

compiles without the need of (/usr/bin/)sendmail on build host.

igb 

updated Intel Gigabit drivers to 3.0.22

bind 

add new package bind

openswan

updated to version 2.6.33

haserl 

updated to version 0.9.29

uclibc 

enabled WCHAR (wide character) support

mysql 

added _r (reeentrant) library to libmysql.lrp

openldap 

added OpenLDAP 2.4.25 client library, libldap.lrp

radius 

replaced Cistron RADIUS 1.6.8 with FreeRADIUS 2.1.10. Closes Trac ticket #43

dibbler-server 

new Package dibbler-server.lrp which implements a DHCPv6 server

webconf 

updated webconf to version 1.2, which accommodates changes for haserl-0.9.x, a GUI for ping, traceroute and reboot and a javascript framework for tooltips.

netsnmp 

add support for lmsensors

busybox 

enabled 'nice' command (required for Asterisk) and also 'cpio' command (fixes Trac ticket #26)

radvd 

updated to latest upstream version 1.8

etc 

fix inetd start/stop

mbusd 

new package for Modbus/TCP to Modbus/RTU proxy seeMODBUS/TCP to MODBUS/RTU gateway server

sysstat 

new package - The sysstat package contains the sar, sadf, iostat, nfsiostat, cifsiostat, mpstat, and pidstat commands for Linux. See sysstat

Changes between 4.0 and 4.0.1

(released 9 July 2011)

general 

added auto-loading of ata_legacy.ko if no other ATA drivers are loaded. That supports some (more) legacy boards out-of-the-box. (Can be disabled by adding "NOLEGACY" on the kernel command line.)

avoid loading packages twice.

webconf 

fixing various issues - thanks to ijabott, closes Trac tickets #50, #51 and #52

hdsupp 

added file /usr/share/syslinux/mbr.bin

tor 

updated to version 0.2.1.30

hash shaper 

fixed bug crash on initialization more than 9 networks up to /24 width

kernel 

added modules for some USB-to-Ethernet adaptors: asix.ko, kaweth.ko, pegasus.ko, rtl8150.ko

isolinux 

now forcibly loads floppy & i2c-core Modules in case floppy drive is not auto-detected (fixes Trac ticket #48)

Changes between 4.0-rc1 and 4.0

(released 15 May 2011)

buildimage 

remove verbose=1 from kernel commandline - while it is useful during testing, it shouldn't be necesssary in a stable version. Removing debug output is another (small) step to minimize the boot time of a LEAF box. Fixes Trac ticket #12

openswan 

added RCDLINKS to /etc/init.d/ipsec - fixes Trac ticket #42

kernel 

added lp and ppdev Modules to restore 3.x functionality for p9100 print server - fixes Trac ticket #45

Fixed booting i486 kernel on Advantech ARK-1310 (+ possible other EVA-X4150 based) boards.

Changed config for the i486 platform to cover the SCx200 architecture.

Changes between 4.0-beta3 and 4.0-rc1

(released 4 April 2011)

initrd 

added usbhid Module to all initrd variants for USB keyboard support at first boot

kernel 

(re)add parallel port support

kernel-i486 

add support for ISA bus

busybox 

add route applet, adds -r option to netstat, fixes Trac ticket #40

dnsmasq 

updated to version 2.57

vsftpd 

updated to version 2.3.4

pmacctd 

updated to version 0.12.5

moddb 

add bitrev.ko, prerequisite for via-rhine.ko, fixes Trac ticket #38

devtools 

add missing libraries, fixes Trac ticket #37

openswan 

fix ipsec.ko for geode and i486 architecture

yate 

updated to version 3.2.0-1, fixes Trac ticket #35

dhcpcd 

updated to version 5.2.11 and added /etc/resolv.conf.head & /etc/resolv.conf.tail files to lrcfg menu

p9100 

updated to version 0.95

shorewall-lite, shorewall6-lite, shorewall, shorewall6 

change Options -f to Options -q in /etc/default/shorewall*. Fixes the problem, that changes are not detected by /etc/init.d/shorewall restart. "-q" reduces verbosity to warnings only. You may change it by setting Options="" in /etc/default/shorewall*

lmsensors 

updated to version 3.3.0

config 

enhanced hwdetect script (lrcfg menu "f"), fixes Trac ticket #13

beep 

updated to version 1.3, fixes Trac ticket #39.

disk images 

added ip6tables to default LRP list in leaf.cfg for all disk images, fixes Trac ticket #41

Changes between 4.0-beta2 and 4.0-beta3

(released 9 March 2011)

kernel 

updated to version 2.6.35.11

busybox 

enabled ifconfig applet as workaround for openswan et al

libpcap, tcpdump 

patch to the makefile for libpcap to fix a tcpdump bug (Trac ticket #25)

hdparm (part of hdsupp) 

updated to latest upstream version (6.9 -> 9.37)

pcre 

updated to the latest upstream version ( 6.7 -> 8.12)

ebtables 

updated to the latest upstream version 2.0.9-2

lzo 

updated to the latest upstream version 2.04

irqbalance 

fix description and homepage

shorewall, shorewall6, shorewall-lite, shorewall6-lite 

fix date format in logs

config 

fix apkg.mergefile (Trac ticket #29)

libssh2 

new Package, required by curl

curl 

new Package which is expected to be used by asterisk and might help with PXE booting

kmodules 

fix wrong permission of /lib/modules in moddb-geode.lrp

dropbear 

updated to latest upstream version 0.53

openssl 

updated to latest upstream version 0.9.8r

daemontools 

fix svscan error (Trac ticket #18)

Changes between 4.0-beta1 and 4.0-beta2

(released 23 January 2011)

general 

update syslinux to version 4.03

new image Bering-uClibc_i486_syslinux_ser (e.g for WRAP boards)

add UCLIBC_HAS_FULL_RPC and UCLIBC_HAS_REENTRANT_RPC in uClibc config (for NFS server)

changed syslog-ng.conf to reduce the appearance of log messages in various log files

bootstrapping into tmpfs for rootfs - enables df -h and spacecheck for rootfs and prevents out-of-memory errors for rootfs (like in Bering-uClibc 3.x)

busybox 

enable mktemp

enable less

new upstream version 1.18.2

initrd 

move busybox ntpd configuration files to a seperate package (bbntpd.lrp)

images 

add mawk.lrp to leaf.cfg LRP list (required by iptables)

add the lwp files for webconf to the images

buildtool 

fix kernel version

kernel 

kernel updated to 2.6.35.10

enabled kernel panic (& reboot if specified in sysctl.conf) on soft-lockup

added warnings about hung tasks

added ESFQ support

added pata_sc1200 Module for PC Engines WRAP IDE controller

shorewall 

new upstream version 4.4.15.3

add missing tcrules config skeleton

change macro syntax in LEAF default settings to current shorewall layout

added new packages shorewall-lite and shorewall6-lite for review and testing

openssl 

new upstream version 0.9.8q

quagga,zebra,ripd, ospfd, etc. 

remove requirement of librt.lrp (lib's already included in initrd)

ipset 

fix requires and help section

iptables 

add mawk.lrp as requirement

hdsupp 

fix /sbin/fdisk

fix segfault in mke2fs

new upstream version 1.41.14

ppp-hsh 

modified to work with 2 upstream interfaces (for ex., one - for Internet and one - for local traffic-exchange point or LAN), now incoming traffic is sorted by iptables and then classified by fwmarks (mark 1 - high-priority, mark 2 - IX traffic); outgoing traffic is redirected to IFB (if there is no need of speed differentiation) or shaped on 2 outgoing interfaces separately.

libevent 

upgrade to latest stable upstream version (1.1a -> 1.4.14b) for development of nfs server code (libevent is currently only used by tor package)

devtools 

new Package devtools.lrp containing /bin/ldd and /usr/bin/strace (probably only of interest to LEAF developers)

moddb 

add libraries for xt_string.ko

add act_police.ko, cls_flow.ko and sch_tbf.ko required for shorewall traffic shaping

iproute 

add ESFQ support

pppoesrv 

update to new upstream version rp-pppoe 3.10

add new package for pppoe relay daemon

portmap 

new Package portmap.lrp containing an ONCRPC Port Mapper daemon required for an NFS Server

libnfsidmap 

new Package libnfsidmap.lrp containing ID mapping code required for rpc.idmapd (part of NFS Server)

nfs-utils 

new Package nfs-utils.lrp containing the user-space utilities for the kernel's NFS Server capability. In conjunction with portmap, libnfsidmap and the relevant kernel Modules (included in modules.tgz) this enables Bering-uClibc to act as an NFS v2, v3 or v4 file server

ethtool 

update to new upstream version 2.6.37

rsync 

update to new upstream version 3.0.7

tor 

update to new upstream version 0.2.1.29

privoxy 

update to new upstream version 3.0.17 (adds ipv6 support)

radvd 

update to new upstream version 1.7

module-init-tools 

update to new upstream version 3.12 for compatibility with make 3.82

dmidecode 

update to new upstream version 2.10

drivers 

Linux driver for Intel® 82575/6 and 82580-based network connections using kernel version 2.4.21 through 2.6.x.

Changes between 3.1 and 4.0-beta1

(released 28 November 2010)

general 

updated kernel to 2.6.35.8

updated uClibc to 0.9.30.3

updated busybox to 1.17.1

added busybox patch to change default modprobe behavior if there are two or more modules that corresponds to one modalias (it'll load module that have longest 'prefix' before first asterisk in it's modalias)

updated iproute2 to 2.6.35

used syslog-ng as logger

updated gcc in build environement to 4.4.5

updated automake to 1.9.6

updated autoconf to 2.68

provides different images optimised for i486, geode and i686

provides images with vga or serial support

core scripts/kernel options changes 

removed support of paging file

disk subsystem moved from old ATA/MFM/RLL drivers to new ATA/SATA (SCSI-like)

root FS migrated from initrd to initramfs; so syst_size option becomes obsolete (initramfs uses up to half of physical memory)

included automatic module loading by modaliases in init script and in boot-time modprobe script

added kernel variable KMODULES that specify modules from initrd that must be loaded before autoprobing for modaliases

added mdev for automatic creation of device nodes in /dev

added firmware for NICs in firmware.tgz

save firmware in moddb.lrp

other packages changes 

included full-weight perl 5.12.1

included accel-pptpd 0.8.5 (kernel-mode PPTP client/server)

included packages for automatically backup system partition and update .lrp packages if fresh ones are present on update server

replaced 6wall with (perl-based) Shorewall6

added igmpproxy.lrp, libnl.lrp

ppp 

included ifb-based shaper for PPP connections (for outgoing traffic)

added patch for pppd for enabling mppe-128 encryption (allow-mppe-128 instead of require-mppe-128) - that will help to accept both pap/chap/mschap and mschapv2 authentication

pppoe-discovery added

busybox 

added ntpd and traceroute applet, replacing openntpd.lrp and traceroute.lrp

package updates 

iptables to 1.4.9.1

quagga to 0.99.17

hostapd to 0.7.3

net-snmp to 5.4.3

shorewall to (perl-based) 4.4.14

ipvsadmin to 1.25

kismet to 2010-07-R1

mysql to 5.0.91

elvis to 1.4-22

bash to 3.2.48

tcpdump to 4.1.1

libpcap to 1.1.1

keepalived to 1.1.20

dhcpcd to 4.0.15

linux-atm to 2.5.1

vsftpd to 2.2.2

wpa_supplicant to 0.5.11

e2fsprogs to 1.41.12

openvpn to 2.1.3

lmsensors to 3.2.0 (plus improved auto-detection)

tinyproxy to 1.8.2

libtool to 2.4

e3 to 2.8