Message ID | 20231130075617.3961868-2-erik.kapfer@ipfire.org |
---|---|
State | Superseded |
Headers |
Return-Path: <development-bounces@lists.ipfire.org> Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4SgpRv6gS0z3wtp for <patchwork@web04.haj.ipfire.org>; Thu, 30 Nov 2023 07:56:43 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4SgpRp3MHnz1P4; Thu, 30 Nov 2023 07:56:38 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4SgpRp0D6hz30RT; Thu, 30 Nov 2023 07:56:38 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4SgpRf3P5fz30Cv for <development@lists.ipfire.org>; Thu, 30 Nov 2023 07:56:30 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4SgpRf297Yz84; Thu, 30 Nov 2023 07:56:30 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1701330990; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=R6VAyEA9svwhcO6ARkpV20Vxr4k0PRzwbaVDk4YcI94=; b=/ZmNuAcAM+xN9ODZrK7Z5+ZkASEux3a62aAug/94WvvC1PyCP/tAgkWVb97bEZE7IsrCgL vBfjXzCO4grR/nBQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1701330990; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=R6VAyEA9svwhcO6ARkpV20Vxr4k0PRzwbaVDk4YcI94=; b=Tkw484MylYU8/aJnBLNX8oBUXnlBz8VLC2IWM1SsXjIDEHxFgej5XZmdk3/M0IiztaM55v rVAgypUjrpCN+x9wlLwk05fUv+kwPiWgoFEpz6SVAtZ4s297w2OSHmHImijZ8Fn1XNPcum tD8CxdXJrkLPsq17gwE3nMZnSg0TBkseA6QFfBGe0nHLVvamJPw1jW5O0qyeVjC3W/LSza zFQ3ezUcKd8t3WWkrW5cIhxmTzxeAtMNgAHCUxqXWe3K2+YEV8ekjHyH/Wt6Jd0xZouhUD Z/IX1cGS/09WcmC16GB2+VPMjanVBXI42qI3li74BAcicQu2PggqQxfp6QHL9Q== From: Erik Kapfer <erik.kapfer@ipfire.org> To: development@lists.ipfire.org Subject: [PATCH 2/2] update.sh: If 'ExitNode' is in usage, it will be changed to 'ExitNodes' Date: Thu, 30 Nov 2023 08:56:05 +0100 Message-ID: <20231130075617.3961868-2-erik.kapfer@ipfire.org> In-Reply-To: <20231130075617.3961868-1-erik.kapfer@ipfire.org> References: <20231130075617.3961868-1-erik.kapfer@ipfire.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-ID-Hash: JJO2UKPTG4TGNJ5RSUX4THQ2JS5PRBTQ X-Message-ID-Hash: JJO2UKPTG4TGNJ5RSUX4THQ2JS5PRBTQ X-MailFrom: erik.kapfer@ipfire.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.8 Precedence: list List-Id: IPFire development talk <development.lists.ipfire.org> Archived-At: <https://lists.ipfire.org/hyperkitty/list/development@lists.ipfire.org/message/JJO2UKPTG4TGNJ5RSUX4THQ2JS5PRBTQ/> List-Archive: <https://lists.ipfire.org/hyperkitty/list/development@lists.ipfire.org/> List-Help: <mailto:development-request@lists.ipfire.org?subject=help> List-Owner: <mailto:development-owner@lists.ipfire.org> List-Post: <mailto:development@lists.ipfire.org> List-Subscribe: <mailto:development-join@lists.ipfire.org> List-Unsubscribe: <mailto:development-leave@lists.ipfire.org> |
Series |
[1/2] tor.cgi: Fixes deprecated tor option 'ExitNode' to 'ExitNodes'
|
|
Commit Message
Erik Kapfer
Nov. 30, 2023, 7:56 a.m. UTC
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
---
config/rootfiles/core/182/update.sh | 11 +++++++++++
1 file changed, 11 insertions(+)
Comments
Hello Erik, Thanks for the patch, but doesn’t it look a little bit over-engineered? > On 30 Nov 2023, at 07:56, Erik Kapfer <erik.kapfer@ipfire.org> wrote: > > Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org> > --- > config/rootfiles/core/182/update.sh | 11 +++++++++++ > 1 file changed, 11 insertions(+) > > diff --git a/config/rootfiles/core/182/update.sh b/config/rootfiles/core/182/update.sh > index 4416e73f4..cb7d853ec 100644 > --- a/config/rootfiles/core/182/update.sh > +++ b/config/rootfiles/core/182/update.sh > @@ -91,6 +91,17 @@ if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then > /etc/rc.d/init.d/ipsec start > fi > > +# Change deprecated option in tor configuration file if in usage > +if grep -q 'ExitNode ' /var/ipfire/tor/torrc; then > + if pgrep tor >/dev/null; then > + /usr/local/bin/torctrl stop >/dev/null > + sed -i 's/ExitNode /ExitNodes /g' /var/ipfire/tor/torrc > + /usr/local/bin/torctrl restart >/dev/null > + fi > +else > + sed -i 's/ExitNode /ExitNodes /g' /var/ipfire/tor/torrc You can always run this command without checking for “ExitNode “ because, because it wouldn’t break anything. And I think that stopping Tor feels a little bit complicated, or does it actually overwrite its own configuration file? -Michael > +fi > + > # Rebuild initial ramdisks > dracut --regenerate-all --force > KVER="xxxKVERxxx" > -- > 2.42.0 >
Good morning Michael, Am Donnerstag, dem 30.11.2023 um 09:36 +0000 schrieb Michael Tremer: > Hello Erik, > > Thanks for the patch, but doesn’t it look a little bit over- > engineered? Probably :-) . > > > On 30 Nov 2023, at 07:56, Erik Kapfer <erik.kapfer@ipfire.org> > > wrote: > > > > Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org> > > --- > > config/rootfiles/core/182/update.sh | 11 +++++++++++ > > 1 file changed, 11 insertions(+) > > > > diff --git a/config/rootfiles/core/182/update.sh > > b/config/rootfiles/core/182/update.sh > > index 4416e73f4..cb7d853ec 100644 > > --- a/config/rootfiles/core/182/update.sh > > +++ b/config/rootfiles/core/182/update.sh > > @@ -91,6 +91,17 @@ if grep -q "ENABLED=on" > > /var/ipfire/vpn/settings; then > > /etc/rc.d/init.d/ipsec start > > fi > > > > +# Change deprecated option in tor configuration file if in usage > > +if grep -q 'ExitNode ' /var/ipfire/tor/torrc; then > > + if pgrep tor >/dev/null; then > > + /usr/local/bin/torctrl stop >/dev/null > > + sed -i 's/ExitNode /ExitNodes /g' /var/ipfire/tor/torrc > > + /usr/local/bin/torctrl restart >/dev/null > > + fi > > +else > > + sed -i 's/ExitNode /ExitNodes /g' /var/ipfire/tor/torrc > > You can always run this command without checking for “ExitNode “ > because, because it wouldn’t break anything. Mainly therefor to spare a tor restart if nothing have to be changed but if this fix goes into the next update, a reboot is needed anyway. > > And I think that stopping Tor feels a little bit complicated, or does > it actually overwrite its own configuration file? No i don´t think so, mainly business a usual. Will send a v2. > > -Michael Best, Erik > > > +fi > > + > > # Rebuild initial ramdisks > > dracut --regenerate-all --force > > KVER="xxxKVERxxx" > > -- > > 2.42.0 > > >
diff --git a/config/rootfiles/core/182/update.sh b/config/rootfiles/core/182/update.sh index 4416e73f4..cb7d853ec 100644 --- a/config/rootfiles/core/182/update.sh +++ b/config/rootfiles/core/182/update.sh @@ -91,6 +91,17 @@ if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then /etc/rc.d/init.d/ipsec start fi +# Change deprecated option in tor configuration file if in usage +if grep -q 'ExitNode ' /var/ipfire/tor/torrc; then + if pgrep tor >/dev/null; then + /usr/local/bin/torctrl stop >/dev/null + sed -i 's/ExitNode /ExitNodes /g' /var/ipfire/tor/torrc + /usr/local/bin/torctrl restart >/dev/null + fi +else + sed -i 's/ExitNode /ExitNodes /g' /var/ipfire/tor/torrc +fi + # Rebuild initial ramdisks dracut --regenerate-all --force KVER="xxxKVERxxx"