Agenda
Core Updates
-
Core Update 183 - Feedback on Testing
- Feedback on testing for Linux Kernel 6.6 and OpenSSL 3.2.1.
- Feedback on GRUB 2.12 patch by Arne.
-
Core Update 184 - Planning and Proposed Features
- Consideration of Suricata 7 in light of OPNsense's recent release.
- Preliminary discussion on features and timeline.
- ThreatFox Suricata ruleset and RAM usage (~2 GB). Action: Adam to update the ruleset Wiki page for clarity on system resources needed for this ruleset.
IPFire's New Look
- Discussion on the recent redesign of the IPFire Website, Community Forum & IPFire WUI.
- Feedback gathering and suggestions for further improvements.
Addon Removals
- cpufrequtils addon removal
- Current Version: 008 (last updated in 2015)
- Kernel devs no longer updating this package as capability has been built-in to the kernel
- Users reporting that it tries to run the amd_pstate driver on intel CPU's
- Does this still make sense to keep when it gives errors in operation, is not updated and the functionality is built-in to the kernel
Patch Status
- Bug#12981 - Update and Resolution Status
- Progress review and discussion on any outstanding issues.
IPFire 3 Development
- Update on progress and discussion on new challenges or issues.
Feedback and Suggestions
- Open floor for community and team member feedback.
- Encourage sharing of new concerns or suggestions for future updates.
Attendees
- Michael
- Adolf
- Adam
- Daniel
- Arne
- Jonatan
Meeting Log
Core Update 183
- Kernel seems to work fine
- The new design will be released as is, minor problems have been identified and will be fixed over time
- The RSA key change seems to be flawless, but we should consider to remove it altogether in the future
- GRUB should be fine as there was lots of feedback
- suricata: A security release is pending, will check if its viable for inclusion
Core Update 184
- Adolf is looking at upgrading to Suricata 7 (#13516)
- Threatfox is going to be included with a hint that it has high memory consumption
- There is some pending IPsec changes that need to be reviewed about expiring host certificates (https://patchwork.ipfire.org/project/ipfire/list/?series=4130)
cpufrequtils
- The add-ons is outdated as the kernel is now handling this
- It has been replaced by cpupower
- Maybe its related to #13408
Bug #12981
- In need of review
- Should be included in Core Update 184
- Michael will test and check the graph