git.proxmox.com Git - dab-pve-appliances.git/log

pmg: optionally verify cvd files with sigtool

sigtool (1) is clamav's utility to manipulate and verify cvd files.
It is shipped in the clamav package, which is not installed inside
pmg (pmg uses the daemonized version - clamav-daemon).

This patch verifies the downloaded cvd-files if sigtool is installed on the
build host and skips the verification if not (in order to not depend on an
installed clamav package).

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Mon, 6 Jan 2020 08:53:33 +0000 (09:53 +0100)]

whitespace followup fix

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Stoiko Ivanov [Thu, 2 Jan 2020 16:53:37 +0000 (17:53 +0100)]

pmg: include clamav cvd files in template

pmg depends on clamav, which does not start upon first boot without the
presence of it's virus database files.

By downloading them on the host and shipping them with the template
clamav-daemon starts up successfully. Since clamav-freshclam will
start downloading any updated files upon booting and notify clamav-daemon
the timeframe where the appliance runs with older virus defifinions is rather
short.

Additionally this follows the way we ship the cvd files in the ISO image.

Downloading happens outside of the container, since it does not have access to
the network. We download with curl, but only if the server files are
newer than the local files, so test for file existence before moving
the temporary file over.

Tested by creating an image, starting a container from that image and
verifying that clamav-daemon starts up upon first boot.

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Fri, 6 Dec 2019 09:46:20 +0000 (10:46 +0100)]

PMG 6.1 template

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Thu, 17 Oct 2019 16:01:12 +0000 (18:01 +0200)]

final Ubuntu 19.10 Eoan release

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Thu, 3 Oct 2019 14:36:33 +0000 (16:36 +0200)]

add preliminary Ubuntu 19.10

note the "-0" version as Ubuntu Eoan is not yet released

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Tue, 10 Sep 2019 10:53:31 +0000 (12:53 +0200)]

pmg 6: bump version to 6.0-2

with current latest Package versions build on top of Debian 10.1

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Fri, 6 Sep 2019 11:52:20 +0000 (13:52 +0200)]

also ship gpg, sa-updates requires it in our use case

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Fri, 6 Sep 2019 05:51:54 +0000 (07:51 +0200)]

add debian 10

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Tue, 27 Aug 2019 10:27:36 +0000 (12:27 +0200)]

add Proxmox Mailgatway 6.0 template

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Fri, 26 Apr 2019 09:03:05 +0000 (09:03 +0000)]

add Ubuntu Disco

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Wed, 20 Mar 2019 14:52:00 +0000 (15:52 +0100)]

add Proxmox Mailgateway appliance

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Thu, 24 Jan 2019 07:52:40 +0000 (08:52 +0100)]

update supported Ubuntu templates

besides a update is nice in general, this update ship fixes for
CVE-2019-3462
https://www.debian.org/security/2019/dsa-4371

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Thu, 24 Jan 2019 06:59:05 +0000 (07:59 +0100)]

update supported Debian templates

besides a update is nice in general, this update ship fixes for
CVE-2019-3462
https://www.debian.org/security/2019/dsa-4371

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Wed, 17 Oct 2018 09:10:20 +0000 (11:10 +0200)]

add Ubuntu 18.10 Cosmic template

based off the Bionic appliance config

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Wed, 17 Oct 2018 08:31:57 +0000 (10:31 +0200)]

update Debian 9 to 9.5 point release

this was moved out to download.proxmox.com 07.09.2018

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Dietmar Maurer [Mon, 23 Apr 2018 08:55:51 +0000 (10:55 +0200)]

add Ubuntu 18.04 template

commit | commitdiff | tree

Thomas Lamprecht [Fri, 16 Feb 2018 14:01:24 +0000 (15:01 +0100)]

devuan 1.0: always install devuan-keyring

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Thomas Lamprecht [Thu, 15 Feb 2018 12:16:32 +0000 (13:16 +0100)]

close #1668: add Devuan Jessie template config

Based on:
https://github.com/siddolo/pve-devuan-appliances/blob/master/devuan-1.0-standard-64/dab.conf

Changed the suite to devuan-jessie, as else we cannot distinguish it
from the Debian Jessie one.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
CC: Pasquale Fiorillo <info@pasqualefiorillo.it>

commit | commitdiff | tree

Dietmar Maurer [Tue, 12 Dec 2017 11:21:26 +0000 (12:21 +0100)]

update to Debian 9.3

commit | commitdiff | tree

Thomas Lamprecht [Tue, 12 Dec 2017 06:55:14 +0000 (07:55 +0100)]

add ubuntu-artful-standard-64

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

commit | commitdiff | tree

Dietmar Maurer [Mon, 19 Jun 2017 04:17:14 +0000 (06:17 +0200)]

debian-9.0: bump version to 9.0-2

Rebuild for final release.

commit | commitdiff | tree

Dietmar Maurer [Tue, 2 May 2017 05:14:30 +0000 (07:14 +0200)]

add ubuntu-zesty-standard-64