Merge pull request #2369 from tempesta-tech/rb-2170-update-tempesta-installer

update tempesta_installer.sh

Author: krizhanovsky

CHANGELOG.md

@@ -1,3 +1,60 @@
+tempesta-fw-dkms (0.8.0) focal; urgency=medium
+
+  * Add `Expect: 100-continue` support
+  * Add `cache_use_stale` directive
+  * Add ja5h and ja5t filtering, configuration. access log
+  * Add tfw_logger for access_Log with Clickhouse
+  * Add server address to warning/debug messages.
+  * Add tls certificate date validation
+  * Add support of Cache-Control: stale-if-error
+  * Add response with 308 status code to heuristically cacheable
+  * Add CRLF filter.
+  * Add reference to a peper about ECDSA nonce attack
+  * add CamelCase type name check
+  * Add check for dublicate options in config
+  * Add global Tempesta FW percentiles statistics.
+  * Remove client from tdb
+  * Remove lower limit of reconnection attempts.
+  * Remove `timeout` option for sticky cookie
+  * Remove redirect mark from Tempesta
+  * Remove `delay_limit` JS challenge option
+  * Rename: connection_rate -> tcp_connection_rate connection_burst -> tcp_connection_burst concurrent_connections -> concurrent_tcp_connections
+  * Properly abort server connection for stale response
+  * Mark proxy-connection header as hop-by-hop in case of segmentation
+  * Drop HEAD and GET requests with body and trailers
+  * Get rid of per-cpu buffer `g_te_buf`
+  * Mark 'Keep-Alive' header as hop-by-hop
+  * Immediately stop processing for closing conection
+  * Use appropriate node for stale response
+  * Do cache PURGE with respect to NUMA mode
+  * Don't cache set-cookie header
+  * Do not add Content-Length header for HTTP2 responses
+  * tdb: Add simple global freelist
+  * Forbid duplicated `stale-if-error` in response
+  * Don't send stale response in case of frang block
+  * Change TDB version to 0.2.0
+  * Store in the cache only single record
+  * Rewrite HEAD method to GET for cache
+  * Clear socket write queue and send RST if connection is dropped
+  * Catch malformed HM response.
+  * Update cpu-node map allocation
+  * Handle HTTPS/1 and HTTP/2 on the same port
+  * Don't cache nonidempotent GET and HEAD requests
+  * Invalidate stored responses.
+  * Cache only methods according RFC 9110.
+  * Restrict range of possible JS challenge response statuses
+  * Drop request sock in case when frang block new connection
+  * http_hdr_len and http_hdr_cnt were made only global because they are checked earlier than vhost is determined.
+  * Use response to a GET request to satisfy HEAD request
+  * Reset closing flags in st_flags field
+  * Close socket after sending TLS_ALERT
+  * Introduce default server response statistics for HTTP code 200.
+  * Introduce 'health_stat', 'health_stat_server' directive.
+  * Cut port from authority when lookup vhost
+  * Block all malformed requests.
+
+ -- Tempesta Technologies, Inc. <info@tempesta-tech.com>  Thu, 13 Mar 2025 16:13:47 +0400
+
 tempesta-fw-dkms (0.7.1) focal; urgency=medium
 
   * Frang: Changed default settings to more strict
@@ -60,7 +117,6 @@ tempesta-fw-dkms (0.7.0) focal; urgency=medium
   * Fix invalid stream processing
   * Make HTTP/2 parser reject upper-case headers
 
-
  -- Tempesta Technologies, Inc. <info@tempesta-tech.com>  Wed, 3 Mar 2022 20:13:43 +0500
 
 tempesta-fw-dkms (0.6.8) focal; urgency=medium

pkg/debian/changelog

@@ -1 +1 @@
-9
+10

pkg/debian/compat

@@ -14,6 +14,8 @@ Depends: dkms (>= 1.95),
  libboost-dev,
  libboost-program-options-dev,
  kdump-tools,
+ libfmt-dev,
+ libspdlog-dev,
  ${misc:Depends}
 Description: Open-source high-speed application delivery controller.
  Tempesta FW is an open-source application delivery controller (ADC) built

pkg/debian/control

@@ -19,6 +19,7 @@ override_dh_auto_install:
 	dh_install Makefile usr/src/$(NAME)-$(VERSION)
 	dh_install etc/* /etc/tempesta
 	dh_install scripts /lib/tempesta
+	dh_install utils /lib/tempesta
 	find "debian/$(DEB_NAME)/usr/src/$(NAME)-$(VERSION)" -name '.git*' -exec rm {} \;
 
 override_dh_dkms:

pkg/debian/rules

@@ -25,8 +25,6 @@ declare -r TFW_NAME=`basename $0`
 declare -r LONG_OPTS="help,install,remove,purge"
 declare -r DOWNLOAD_DIR=tfw_downloads
 
-declare -r GITHUB_USER="tempesta-tech"
-declare -r GITHUB_REPO_TEMPESTA="tempesta"
 declare -r GITHUB_REPO_LINUX="linux-5.10.35-tfw"
 
 #TODO: currently Ubuntu 24 is the only supported distribution, other
@@ -59,7 +57,7 @@ log() {
     shift
     local MESSAGE="$@"
     local TIMESTAMP=$(date "+%Y-%m-%d %H:%M:%S")
-    
+
     if [ -z "$LOGFILE" ]; then
         echo "Error: LOGFILE is not defined."
         return 1
@@ -68,43 +66,16 @@ log() {
     echo "${TIMESTAMP} [${LEVEL}] - ${MESSAGE}" | tee -a $LOGFILE
 }
 
-# Use github API to get information about latest release.
-#
-# `latest` release shows ONLY releases which are not marked as `prereleases`.
-# Github restricts 60 API requests per hour without authorisation. Enough for
-# our needs.
 tfw_download()
 {
 	log "INFO" "Starting download process..."
 
-    release_tag=`curl -s https://api.github.com/repos/$GITHUB_USER/$GITHUB_REPO_TEMPESTA/tags | grep \"$DISTRO/ | cut -d '"' -f 4 | sort -V -r | head -n1`
-	if [[ ! "$release_tag" ]]; then
-		log "ERROR" "Can't find the latest release in repo: https://github.com/$GITHUB_USER/$GITHUB_REPO_TEMPESTA"
-		log "INFO" "Attempting to download using fallback URLs."
-	else
-        log "INFO" "Found the latest release tag: $release_tag"
-        uri="https://api.github.com/repos/$GITHUB_USER/$GITHUB_REPO_LINUX/releases/tags/${release_tag}"
-        links=`curl -s $uri | grep browser_download_url | grep -P "$2" | cut -d '"' -f 4`
-	fi
-	
-	if [[ ! "$links" ]]; then
-		log "INFO" "Can't download file $2 from release ${release_tag} in repo:"
-		log "INFO" "https://github.com/$GITHUB_USER/$GITHUB_REPO_LINUX"
-		#TODO: show next line only if received 403 status code.
-		log "INFO" "Or may be Github API rate limit exceeded. Fallback download from repo instead github.com"
-		fall_links=("http://172.240.91.52:8081/repository/tempesta/pool/l/linux-headers-5.10.35.tfw-4c9ba16/linux-headers-5.10.35.tfw-4c9ba16_5.10.35.tfw-4c9ba16-1_amd64.deb"
-		"http://172.240.91.52:8081/repository/tempesta/pool/l/linux-image-5.10.35.tfw-4c9ba16/linux-image-5.10.35.tfw-4c9ba16_5.10.35.tfw-4c9ba16-1_amd64.deb"
-		"http://172.240.91.52:8081/repository/tempesta/pool/l/linux-libc-dev/linux-libc-dev_5.10.35.tfw-4c9ba16-1_amd64.deb"
-		"http://172.240.91.52:8081/repository/tempesta/pool/t/tempesta-fw-dkms/tempesta-fw-dkms_0.7.1_amd64.deb -O tempesta-fw-dkms.deb")
-
-		for file in ${fall_links[@]}
-		do
-			log "INFO" "Downloading $file using fallback URL"
-			wget -q --show-progress -P $DOWNLOAD_DIR/$repo $file || log "ERROR" "Failed to download $file"
-		done
-	fi
+  links=("http://172.240.91.52:8081/repository/tempesta/pool/l/linux-headers-5.10.35.tfw-83b4909/linux-headers-5.10.35.tfw-83b4909_5.10.35.tfw-83b4909-1_amd64.deb"
+  "http://172.240.91.52:8081/repository/tempesta/pool/l/linux-image-5.10.35.tfw-83b4909/linux-image-5.10.35.tfw-83b4909_5.10.35.tfw-83b4909-1_amd64.deb"
+  "http://172.240.91.52:8081/repository/tempesta/pool/l/linux-libc-dev/linux-libc-dev_5.10.35.tfw-83b4909-1_amd64.deb"
+  "http://172.240.91.52:8081/repository/tempesta/pool/t/tempesta-fw-dkms/tempesta-fw-dkms_0.8.0_amd64.deb -O tempesta-fw-dkms.deb")
 
-	for file in ${links}
+	for file in ${links[@]}
 	do
 		wget -q --show-progress -P $DOWNLOAD_DIR/$repo $file || log "ERROR" "Failed to download $file"
 	done
@@ -119,7 +90,7 @@ tfw_install_packages()
   case $DISTRO in
 	"ubuntu-24")
     repo=""
-    log "INFO" "Downloading latest packages from github.com/$GITHUB_USER/$repo ..."
+    log "INFO" "Downloading packages"
     mkdir -p $DOWNLOAD_DIR/$repo
     ;;
   *)
@@ -148,11 +119,9 @@ tfw_install_deps()
 	"ubuntu-24")
         echo ""
 		log "INFO" "Installation on Ubuntu 24 LTS requires updating system from jessie-backports repository before installing TempestaFW."
-		log "INFO" "Updating system from jammy repository for Ubuntu 24 LTS."
+		log "INFO" "Updating system from noble repository for Ubuntu 24 LTS."
 		tfw_confirm
 
-		echo "deb http://ru.archive.ubuntu.com/ubuntu " \
-		        "jammy main" >> /etc/apt/sources.list
 		apt-get update || log "ERROR" "Failed to update package lists for Ubuntu 24 LTS."
 		apt-get dist-upgrade -y || log "ERROR" "Failed to dist-upgrade on Ubuntu 24 LTS."
     ;;
@@ -170,7 +139,7 @@ tfw_install_deps()
 	read -n 1 -s -p "Press any key to continue..."
 	# curl and wget are required for the script itself.
 	apt-get ${APT_OPTS} install -y dkms libboost-dev libboost-program-options-dev \
-	     kdump-tools curl wget ethtool bc libtemplate-perl
+	     kdump-tools curl wget ethtool bc libtemplate-perl libfmt-dev libspdlog-dev
 	if [ $? -eq 0 ]; then
 		log "INFO" "Dependencies installation completed."
 	else
@@ -191,7 +160,7 @@ tfw_install()
     	log "ERROR" "Failed to install dependencies."
     	exit 2
 	fi
-	
+
 	# TempestaFW is shipped as DKMS module. By default, dkms framework
 	# installs module only for running kernel. Configure dkms to install
 	# module to all kernels. BUILD_EXCLUSIVE variable in TempestaFW's
@@ -208,14 +177,11 @@ tfw_install()
     echo "*************************************************************************"
     read -n 1 -s -p "Press any key to continue..."
     echo ""
-	log "INFO" "Installing packages from $GITHUB_REPO_LINUX."
 	tfw_install_packages $GITHUB_REPO_LINUX "${FILES_LINUX[@]}"
     if [ $? -ne 0 ]; then
         log "ERROR" "Failed to install packages."
         exit 2
     fi
-
-	# tfw_install_packages $GITHUB_REPO_TEMPESTA "${FILES_TEMPESTA[@]}"
 }
 
 # Find all installed packages that suit *_FILES regular expressions and save