miska
August 15, 2018, 2:12pm
1
Dear Turris users,
we just released Turris OS 3.10.4! It contains mainly bugfixes, security fixes and few updates. Full release notes are as follows:
owfs, ustream-ssl, nextcloud, nginx: update
knot-resolver, kernel, hostapd: security updates
haas-proxy: update, more logging options and limit for resources
storage: small fixes and enhancements
transmission: update and option for custom webui
pakon: fix new device notification and use IDS by default
Enjoy and if you encounter any issues, let us know.
the above full release notes appear shy of all that actaully is being updated, e.g. dnsmasq, wireguard, busybox, netfilter
Summary
ca-certificates/turris/20180409
INFO:Running post-install and post-rm scripts
Output from pakon.postinst:
Output from dnsmasq-full.postinst:
INFO:Running post-install and post-rm scripts
In absence of ca-bundle in the TO repo had created tls-ca-bundle.pem and placed in /etc/ssl/certs. Not clear how it is considered a duplicate (of what)?
jklaas
August 15, 2018, 6:41pm
5
Is there any way to get more information on the IDS part?
lampra
August 16, 2018, 12:27am
6
anon50890781:
wireguard
Don’t think so, this seems to be stall at 20171017
Maybe it just got recompiled then but shows in the update
kmod-wireguard/turris/4.4.147+0.0.20171017-1-0a333a8e606ab056173befac424900d2-1
miska
August 17, 2018, 11:24am
8
It is kernel module, so it has to be recompiled and reinstalled everytime we update kernel.
miska
August 17, 2018, 11:26am
9
Not yet. You can enable alerts manually in suricata, but as of now, you would have to read them manually. Till now we were running Suricata in IPS mode, so every packet had to go through Suricata which sometimes caused some troubles. IDS more is much less intrusive, you still get all the information, but it can’t alter your traffic.
Why is this necessary (specific with OpwnWRT)? Have got a couple of other linux boxes and updating the kernel there does not require such (recompile/reinstall) for kernel modules, e.g. netfilter or wireguard
I rolled back to working 3.10.3 snapshot and tried updating again to 3.10.4
I got:Output from ucollect-config.preinst:
and
INFO:Running post-install and post-rm scripts
and
+ /etc/kresd/convert_config.sh
After that it hangs at:Output from foris-controller-storage-module.postinst:
In foris I do get notification with updates but the updater running constantly (hangs)
Noticed the same - that the update appeared to be hanging at that point for some time (and I was close to initiate a reboot/rollback) but it cleared after a few minutes. Though it is rather strange that it took such a long time to complete that step.
Noticed the same and seems likely being a bug
TO updated properly without issue… Then when I try to go to pakon, it just wont load (show spinning wheel)…
Update: ssh to TO and then run pakon-show and pakon on the web browser completed… WTH!!!
p4p4
August 18, 2018, 1:57pm
14
update to 3.10.4 worked fine. OpenVPN client with policy based routing (by stangri) working.
Updated to 3.10.4. No problems sofar.
vcunat
August 20, 2018, 5:32pm
18
Not happening in my case.
Strange.
It doesn’t do this on the other Luci pages.
