pfSense

Move athctrl.sh to /usr/local/sbin

Move our copy of dhclient-script to /usr/local/sbin/pfSense-dhclient-script and change interfaces.inc accordingly

Unlock kernel package to make dry-run output more consistent

Reboot after upgrade when meta package version changed

Reduce values of FETCH_TIMEOUT and FETCH_RETRY to help ticket #6177

Setup HTTP_PROXY environment variable for pkg when it's called from the GUI and also for pfSense-upgrade

Silence /etc/rc.notify_message garbage output

(cherry picked from commit eb3491d99e939ab21d84122ededf9e7e9462ed71)

Fix code used to read config repo path

(cherry picked from commit e429ac7134ac2080af9117c11e2f294d4dd8c5d0)

Do all steps to replace repo package and make sure symlink is in place

(cherry picked from commit 5caee0ba0f8782ea7bf1df54ad0848da1d5084d2)

Force update after reinstall repo pkg

(cherry picked from commit 3e7c1ea74a8c0600c785e9588349afd927719d23)

Simplify logic

Make sure directory exists

(cherry picked from commit cc1b7ddd0ba2d7eee6ee7ec1cae83efda91427d0)

Make sure source file exists

Add a workaround on pfSense-upgrade to make sure repo package is replaced by correct one

(cherry picked from commit a491ec98d8ffc5663cca84df402c2d6274a78a07)

Rework the way repo packages work

- Distribute only a single pfSense-repo package containing all templates
- Create a symlink pointing to selected repo
- Do not limit it only to pfSense-repo and pfSense-repo-devel

(cherry picked from commit a90f1c9b12c4d31ea845fa04188e599ba28dbaf1)

Do not return -1, sh doesn't like it

(cherry picked from commit a35bf546b57558535e3fc1958cf3fb2b4d18ade7)

Ticket #6053

- Do not call ntpdate before start ntpd, ntpd g parameter is enough
Deprecate /usr/local/sbin/ntpdate_sync_once.sh
- Remove system_ntp_configure parameter and always start ntpd

(cherry picked from commit 5a758355ec9a20ff75c9191b6915df64255fb8be)

Set exec bit on gmirror_status_check.php

Make sure repo metadata is updated before any other package when repo conf changes. Fixes #6052

(cherry picked from commit 78aee67a9e8ddb40d10c965ee8ce1ad1389d25f6)

Use route_vpn_gateway for tap-type OpenVPN instances as well where specified. Remove old and wrongly copy/pasted comments while here. Ticket #5981

Check $active

Fix missing check for $active to avoid creating a route to a released lease.

Fix substr mistake

Made a silly mistake and overlooked an important difference between javascript substring() and php substr().
Tightened regex check for octal value.

Use PHP CLI explicitly to run rc.conf_mount_r(w|o) from pfSense-upgrade, it fixes #5875

Make a couple changes to PPP default gateway handling to address issues with default gateway switching. Fixes #1837
Tested with default gateway switching on and off, by rebooting, manually disconnecting the PPP link, and manually disconnecting the NIC link, worked each time, though still possible some issues remain. Feedback appreciated.

Fix #5837

Since the introduction of pkg_with_pb(), direct calls to this function
were added using the following format:

if ! pkg_with_pb ... | tee -a $logfile; then

What happened in this case is if was always getting a successfull
return code from tee call, and pkg_with_pb return was always being...

Fix #5831 using a simpler approach, just setting REPO_AUTOUPDATE=false when it's booting

Revert "Fix #5831"

This reverts commit 93a8ddf7a4c5d43cbeb623c923eb76659e6f49e0.

Save pkg call return code to use on return. The way it is now is always returning 0. It should fix #5837

Make additional packages install/delete operations to respect -n (dry-run)

Reorder pkg_reinstall_all(), no functional changes

Respect ALL_PACKAGES for package removal

Fix #5831

After PKG_AUTOUPDATE=false was removed, operations done during boot,
2nd and 3rd stages of upgrade process, are trying to update repository
metadata. The problem is during this stage we don't have a network
available yet and all needed packages were previously downloaded....

Import David W's patch fixing issues with dhcp6c being launched multiple times in some circumstances. Ticket #5621

Test duplicated slice with fsck after cloning during an upgrade

Fix #4605

After base64 encoding username/password, properly escape characters =,+,/
before submitting auth details

fixes 5818 - Dev Shell - Cmd Tab Completion

Meant to have show_recordings here. Ticket #5657

correct function name. Ticket #5657

A couple more refinements for pfSsh.php while I'm here.

Fix validation of playback file passed to pfSsh.php. Fixes #5657

Make sure LANG = C for pkg calls

Bugfixes & handling $duid and $type, Fixes #4206

This patch addresses:
1. Handling of IA_NA and IA_PD strings (that contain IAID+DUID content) using only the DUID part.
2. Fixing regular expression matching with respect to the IAID+DUID string regarding the legal \" substring (used in ISC DHCPv6 leases)....

Change pfSense-upgrade to return time for reboot so GUI can use it

Reverting accidental change

Merge branch 'bugfix-for-4605' of https://github.com/the-real-ed/pfsense

• 'bugfix-for-4605' of https://github.com/the-real-ed/pfsense:
  Bug fix for #4605. After base64 encoding username/password, properly escape characters =,+,/ before submitting auth details

Do not set PKG_AUTOUPDATE=false anymore and let pkg to update metadata when it's necessary. Some users reported to see issues in cases where update was necessary

Remove all pfSense_MODULE and pfSense_BUILDER_BINARIES definitions, whatever was the reason they were added, it was never finished and it's not being used

Only ask Proceed with upgrade question once

On nanoBSD there is a "Proceed with upgrade?" question warning about the duplicate slice. After answering "y" to that, the system does the duplicate slice, which takes some minutes. Then it asks again "Proceed with upgrade?" after displaying all the packages it will install....

Fix #5598 - Nanobsd upgrade fails on GUI

When -p is used on nanobsd, progres socket must be created on secondary
partition (chroot_dir) otherwise pkg, that runs with -c chroot_dir,
will not be able to find UNIX socket to connect and send events

Track nc PID and kill it on _exit()

pfSense-upgrade script text

Just a few extra words to put in this text, while I am reading it and waiting for the upgrade to complete.

Remove extra )

Implement -n (dry-run) option in pfSense-upgrade

Use _exec() to call gitsync

Teach pfSense-upgrade to run gitsync after upgrade

Define user-agent on pfSense-upgrade

Duplicate slice before upgrade, fixes #5483

Add a workaround on pfSense-upgrade to prevent breaking strongswan port due to the symlinks we create

Improve language

Fix copyright year

Improve language

Fix spell issue spotted by Jim

Add a new option to force upgrade script to don't reboot

Wait 10 seconds before reboot, also notify admin

Do not consider only meta package, but also other pfSense main packages, also change exit code from -1 to 2

Add a new option to pfSense-upgrade, -c, it'll return 0 if system firmware is up2date or -1 if there are updates available

Fix case wildcard of package names for reinstallall

Introduced by https://github.com/pfsense/pfsense/commit/e3b43e4bfe5a3e69028c1ab7e0e4a632ff5ee499
None of the packages were being matched here, none of them would be reinstalled. A "reinstallall" would complete very quickly with "Success" message but actually do nothing.

Ignore kernel-debug package when looking for main kernel package

Make it possible to _exec to get $_cmd exit code instead of tee one

Use _exit()

Fix #5338: Add -4 and -6 options to pfSense-upgrade to select IP protocol version

Use already defined pkg_prefix variable

Use _echo, not echo

Fixed #5291 - Reinstalling pfSense-pkg-openvpn-client-export

Removed debug
Improved package detection

Added "reinstall all packages" functionality (accessed via diag_backup.php)

Use a socket to talk with pkg and write json file to GUI

Move kill tail process to _exit()

pfSense-upgrade revised to kill tail on exit
pkg_mgr_install.php revised to catch json deocde error on partial lines read from file

Remove old logfile before start

Add quotes

Do not accept blank logfile

Change -l parameter to receive a complete path for logfile

_force must be local

Do not stop when package is up to date and force flag was passed

Changes to accommodate new pfSense-upgrade

Add -f option to force package reinstallation

When -p is used, read fifo content and write it to a file used by GUI

Merge pull request #1963 from davidjwood/ppp-ipv6

Multiple changes to clean up the package installaion system by causing the installer to run in the background
whilst monitoring its output via AJAX to provide a better GUI display.
Work in progress !

Respect chroot_dir, ticket #5300

Ticket #5300:

Add a workaround to fix the issue of extensions.ini out of order ending
up breaking PHP. Since the only dependency we have is suhosin that
depends of session, alphabetical sort does the trick for now while a
proper solution is not handled by the ports tree

Move ppp-ipv6 helper script into the correct location

Use named variables for ppp-linkup command line parameters

Make route deletions quiet - it may well be the routes have already disappeared

Make code dealing with the IPv4 default gateway conditional on the IPv4 link going down

Connect ppp-ipv6 helper script to ppp-linkdown and ppp-linkup

Further updates to pfSense-upgrade-GUI.sh

Script to set up pfSense-upgrade when called from web GUI

Preparation for $5279
New wrapper script to be called by web GUI