miska
December 17, 2018, 6:26pm
1
Dear Turris users,
we just released Turris OS 3.11.1 into RC. It contains mainly bugfixes and few updates that didn’t made it into 3.11, full release notes are bellow:
netdata: update for Omnia
subversion, unbound, git, ath10k-ct, miniupnpd, mwan3: updates
samba4, bzip2, openssl, tiff, apache, sqlite3: security updates
pakon: further improvements of archivation
majordomo: removed from the list of applications on updater page, still available for manual installation
mdadm, webapps, nextcloud: minor fixes
tvheadend: fix first time setup
As always we welcome any feedback and testing.
3 Likes
It solves the unbound issues that were introduced with 3.11
Running a local NTP server instance seems not possible.
Else observed during update process
Summary
WARN:Collision with existing path. Moving /etc/init.d/unbound to /usr/share/updater/collided/etc/init.d
Output from turris-version.postinst:
Output from foris-netmetr-plugin.postinst:
‘[’ -n ]
/etc/init.d/lighttpd restart
lxc container cannot be started, either from cli or LuCI perhaps due to
-ash: lxc-start: not found
Pepe
December 18, 2018, 10:50am
5
Did you have installed lxc-start package? I see, it’s compiled in RC branch and it’s working for me. Just tested it.https://repo.turris.cz/omnia-rc/packages/packages/lxc-start_1.1.5-15_mvebu.ipk
Maybe you’re not using our prepared user list for LXC containers? It can be selected in Updater tab in Foris.
1 Like
Umpf, no. Installed luci-app-lxc and would have expected that the basic minimum dependencies for operating (start/stop/attach) a container are installed as well. However, it appears that only these were installed along:
Summary
liblxc
lxc
lxc-common
lxc-configs
lxc-create
lxc-hooks
lxc-templates
rpcd-mod-lxc
and that there is whole bunch of other related packages still available for installation:
Summary
lxc-attach
lxc-auto
lxc-autostart
lxc-cgroup
lxc-checkconfig
lxc-clone
lxc-config
lxc-console
lxc-destroy
lxc-device
lxc-execute
lxc-freeze
lxc-info
lxc-init
lxc-ls
lxc-lua
lxc-monitor
lxc-monitord
lxc-snapshot
lxc-start
lxc-stop
lxc-unfreeze
lxc-unshare
lxc-user-nic
lxc-usernsexec
lxc-wait
Another dependency for basic operations absent from luci-app-lxc is kmod-veth
The incremental update went fine, there are those DoT/OpenSSL related but inconsequential errors when resolver/unbound is restarted
unbound-checkconf[25787:0] error: no name verification functionality in ssl library, ignored name for
unbound works anyway (with opportunistic DoT).
there is something going awry with the lxc namespace however.
Having lxc.utsname = test produces
then there is a hostname file inside the container with alarm in it. That is with a ArchLinux container.
With a OpenSUSE container the hostname then turned out to be linux
The hostname files should be passed the lxc.utsname = argument to match the lxc namespace.
It works for me. Also I could still start my lxc containers.
peci1
December 18, 2018, 9:54pm
10
Everything works for me after update from 3.11 (samba4, minidlna, tor, pptp vpn server, pptp vpn client, lxc, bigclown gateway).
It only seems tor wasn’t rebuilt with the new openssl:
2018-12-18 22:32:44 warning Tor[6640]: OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 1000210f: OpenSSL 1.0.2p 14 Aug 2018; running with 1000211f: OpenSSL 1.0.2q 20 Nov 2018).
Started to experience network lags/outage particularly with wireguard tunnel and then with /etc/init.d/network restart the router crashed . From a first glance at the log it seems that the firewall module caused it.
Summary
01:17 notice firewall#1 #1 #1 #1
lxc container not automatically starting on router boot with the container conf
lxc.start.auto = 1
lxc.group = onboot
lxc.start.delay = 10
lxc.start.order = 100
Installed lxc components
Summary
liblxc 1.1.5-15
since I wanted to give sentinel a run I thought of a TOS container being a good idea except the TOS container does not provide any iface on boot and only a cli busybox, basically an empty shell. Is this by design?
In comparison unbuntu cosmic, debian stretch, archlinux and alpinelinux are all booting with with ifaces up and provision of connectivity.
peci1
December 19, 2018, 8:38am
14
My LXC container set up by https://doc.turris.cz/doc/en/howto/lxc#starting_the_container_at_boot started automatically even after the upgrade.
1 Like
vcunat
December 19, 2018, 10:38am
15
I think the bugfix updates (e.g. p → q in this case) are designed as ABI-compatible , so I wouldn’t expect problems from that.
I think it’s common that distros don’t rebuild all transitive reverse dependencies. For security updates it’s quite desirable, as rebuilding a whole distro takes quite some time unless you have a very powerful farm.
I see now. How about the order of starting containers (lxc.start.order =) and the delay (lxc.start.delay =) in between the container starts?
[
Is this a growing trend now with busybox castrating userland apps?
lxc-ls -f
ls: unrecognized option: f
Usage: ls [-1AaCxdLHRFplinshrSXvctu] [-w WIDTH] [FILE]…
Summary
List directory contents
-1 One column output
-a Include entries which start with .
-A Like -a, but exclude . and ..
-x List by lines
-d List directory entries instead of contents
-L Follow symlinks
-H Follow symlinks on command line
-R Recurse
-p Append / to dir entries
-F Append indicator (one of */=@|) to entries
-l Long listing format
-i List inode numbers
-n List numeric UIDs and GIDs instead of names
-s List allocated blocks
-lc List ctime
-lu List atime
--full-time List full date and time
-h Human readable sizes (1K 243M 2G)
--group-directories-first
-S Sort by size
-X Sort by extension
-v Sort by version
-t Sort by mtime
-tc Sort by ctime
-tu Sort by atime
-r Reverse sort order
-w N Format N columns wide
--color[={always,never,auto}] Control coloring
Curiously those log entries are not present here. Not sure whether it would make a difference, though it should not, this setup started out vanilla from medkit 3.11
vcunat
December 19, 2018, 1:06pm
19
AFAIK that’s how busybox always was. OpenWRT defaults (and busybox) might be a bit too size-focused if you have a powerful device like Turris. You can install coreutils-ls in this case, for example (I haven’t tried but I expect it to be full).
1 Like
It looks like that lxc version development has ceased at OpenWRT. Wondering about bug fixes and security patches missing since LXC master LTS development is currently at v3.0.03]