mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-21 20:46:10 +03:00
Code Issues Projects Releases Wiki Activity

Update Alpine scripts

Browse Source 
- Install nss, nss-tools and nss-dev from 3.14/3.15 repository.
  It is not necessary to install from edge because the latest
  3.14/3.15 nss related packages are already patched to fix
  CVE-2021-43527.
  Ref: https://git.alpinelinux.org/aports/tree/community/nss?h=3.15-stable
       https://git.alpinelinux.org/aports/tree/community/nss?h=3.14-stable
       603b198
This commit is contained in:
hwdsl2 2022-01-05 19:33:08 -06:00
parent 431af04385
commit 4403c9c241
2 changed files with 4 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
extras/vpnupgrade_alpine.sh
View File

@ -149,16 +149,10 @@ install_pkgs() {
(
set -x
apk add -U -q bash bind-tools coreutils openssl wget iproute2 sed grep \
libcap-ng libcurl libevent linux-pam musl nspr \
bison flex gcc make libc-dev bsd-compat-headers linux-pam-dev \
libcap-ng libcurl libevent linux-pam musl nspr nss nss-tools \
bison flex gcc make libc-dev bsd-compat-headers linux-pam-dev nss-dev \
libcap-ng-dev libevent-dev curl-dev nspr-dev uuidgen openrc
) || exiterr2
(
set -x
apk add -q --no-cache \
--repository=https://dl-cdn.alpinelinux.org/alpine/edge/community \
nss nss-tools nss-dev
) || exiterr2
}
get_libreswan() {

10
vpnsetup_alpine.sh
View File

@ -160,16 +160,10 @@ install_vpn_pkgs() {
bigecho "Installing packages required for the VPN..."
(
set -x
apk add -U -q libcap-ng libcurl libevent linux-pam musl nspr \
bison flex gcc make libc-dev bsd-compat-headers linux-pam-dev \
apk add -U -q libcap-ng libcurl libevent linux-pam musl nspr nss nss-tools \
bison flex gcc make libc-dev bsd-compat-headers linux-pam-dev nss-dev \
libcap-ng-dev libevent-dev curl-dev nspr-dev uuidgen openrc xl2tpd
) || exiterr2
(
set -x
apk add -q --no-cache \
--repository=https://dl-cdn.alpinelinux.org/alpine/edge/community \
nss nss-tools nss-dev
) || exiterr2
}
install_fail2ban() {