version up: HAProxy 1.8.23, including security fixes.

component/haproxy/buildout.cfg

@@ -13,8 +13,8 @@ parts = haproxy
 [haproxy]
 recipe = slapos.recipe.cmmi
 shared = true
-url = http://www.haproxy.org/download/1.8/src/haproxy-1.8.4.tar.gz
-md5sum = 540cd21169e8828d5d11894b2fa74ab4
+url = http://www.haproxy.org/download/1.8/src/haproxy-1.8.23.tar.gz
+md5sum = 6c35b83a9969449c4b79783a2119551e
 configure-command = true
 # If the system is running on Linux 2.6, we use "linux26" as the TARGET,
 # otherwise use "generic".

[Kazuhiko Shiozaki]

@jerome Do you think we can add CPU=native in make-options as well, that will add -march=native in CFLAGS ? (see https://gcc.gnu.org/onlinedocs/gcc/x86-Options.html)

[Jérome Perrin]

let's ask @luke , he did something like this in a development branch

[Jérome Perrin]

It's a bit off topic, but everytime I see "$(uname -m 2>/dev/null|grep -E '^(x86_64|i[3456]86)$')" I wonder why we use https://www.buildout.org/en/latest/topics/variables-extending-and-substitutions.html#conditional-configuration-sections instead

[Jérome Perrin]

but yes ... why don't we use "native" looks also easier. I don't know this haproxy profile, but it looks very complex, probably we can simplify

[Łukasz Nowak]

let's ask @luke , he did something like this in a development branch

Adding haproxy 2 required this change luke/slapos@122f833a, in haproxy 2 the target became linux-glibc.

[Kazuhiko Shiozaki]

If there is no strong reason, just update to haproxy 2 please. :)

[Kazuhiko Shiozaki]

FYI, I checked HAProxy 2 documentation and also checked our existing SR tests. Now I am sure we can safely use haproxy 2 everywhere. I will update soon.

[Kazuhiko Shiozaki]

@luke [haproxy] is now HAProxy 2. 97db2dbe.

[Łukasz Nowak]

Thanks, so I'll pick up it in my branch.