April 4th, 2022

• Link to Conference Room

Agenda

• Core Update 167
  • Who has anything left?
  • https://git.ipfire.org/?p=ddns.git;a=commitdiff;h=de57b2caf44bf10de72e42a20abf690eca50d512
  • Kernel Update ?
• Core Update 168 and beyond

Attendees

• Adolf
• Arne
• Jonatan
• Michael
• Peter
• Stefan

Log

Core Update 166

• Backup Bug was a show stopper => decision to make an extra core update
• Nobody did complain, at least in our "bubble"
• Everything that was scheduled for 166 is now 167

Firmware Compression

• OS is getting bigger and bigger
• 2GB size of the root partition is becoming a problem
• There is a possibility to load the firmware as compressed files
• 900 MB => 300 MB save on disk
• Leads to Core Update of over 150 MB size => You cannot compress files twice in a good manner
• Patch was dropped because of that
• Reinstalling with a bigger root partition is the path. Every recent installation already has a bigger root partition!

Core Update 167

• Michael updated Dracut, which was very old
• Should not create serious problems
• A lot of packages updates (some security relevant)
• Kernel Update should be part (security concerns)
• Peter will take care of the kernel update
• Some firmware will not be shipped any more (space reasons again)
• https://git.ipfire.org/?p=ddns.git;a=commitdiff;h=de57b2caf44bf10de72e42a20abf690eca50d512 needs to be included as well
• Michael has created a Patch for Bug #12760
• Another patchset to fix our unbound lease bridge

High Resolution Command Line

• Triggered by https://community.ipfire.org/t/increase-monitor-resolution/6205/17
• We have no frame buffer anymore => it is a dead camel
• So should we enable drm?
• On some systems it works already without any change
• Michael will try some stuff out

Kernel hardening

• New patchset was send from Peter (https://patchwork.ipfire.org/project/ipfire/list/?series=2666)
• Some patches are ready for primetime some are not
• Ready to go patches should be included in Core Update 167 (are reviewed by Michael)

Core Update 168

• Nothing big is scheduled for this
• Adolf we shortly supply new package updates

Firewall graphs

• Splitting up the graph for firewall https://lists.ipfire.org/pipermail/development/2022-April/013021.html?
• Splitting it up in one Graph per category? => 10 graphs are to much
• Three should be enough

New features

OpenVPN

• Michael think about working on OpenVPN to make a little bit better
  • Fewer VPN solutions would be better
  • WireGuard did not take the spot
  • So we left with OpenVPN

Misc

• Stefan works on the last update for the IPS :-;
• See again at the second of May :-)