bitcoind on Linux firewall 'ipfire'?

[Ente]

I am setting up a Linux firewall on a small box, which will be running 24/7.
So I'd like to run bitcoind on it. Ipfire has its own packetmanager and repository though, with almost no packets available.

Did anyone, by chance, manage to install somewhat larger third party software on an ipfire box?

Ente

[RedDiamond]

IPFire is based on Linux From Scratch: "Linux From Scratch is a project that provides you with step-by-step instructions for building your own custom Linux system, entirely from source code". So it is very likely that you also need to compile bitcoind by yourself.

[Ente]

IPFire is based on Linux From Scratch: "Linux From Scratch is a project that provides you with step-by-step instructions for building your own custom Linux system, entirely from source code". So it is very likely that you also need to compile bitcoind by yourself.

I surely will have to compile from the sources. The question is, will all dependencies be able to compile there as well? Nothing (except git) is in those repos..
Well, I'll either find out, or will run bitcoind elsewhere. But 24/7 fullnode is a must! :-)

Ente

[grue]

why can't you use the precomplied linux binaries?

[RedDiamond]

IPFire is based on Linux From Scratch: "Linux From Scratch is a project that provides you with step-by-step instructions for building your own custom Linux system, entirely from source code". So it is very likely that you also need to compile bitcoind by yourself.

I surely will have to compile from the sources. The question is, will all dependencies be able to compile there as well? Nothing (except git) is in those repos..
Well, I'll either find out, or will run bitcoind elsewhere. But 24/7 fullnode is a must! :-)

Ente

I am almost sure that they compile. The question is how long time it will take to compile them all (the dependencies have their own dependencies which must compiled too...).  And you need be carfull to too choose correct versions of the dependencies, for example Berkeley DB must be version 4.8 or otherwise you end up with incompatible wallet.dat.

[deepceleron]

A firewall distro should only be a firewall, it is not a good idea to install server software or services on it, even for internal use. They are hardened specifically to not present any attack surface of the firewall box to the outside network. If you want to use the machine for multiple things, you should virtualize the firewall and run other services as appliances. It's not even a bad idea to have a third network adapter so the server VMs have to go through an internal network switch instead of a virtualized one.

[RedDiamond]

why can't you use the precomplied linux binaries?

If you can find statically linked binaries they may actually work. Otherwise most likely there would be errors with missing/incomptabile libraries. And installing more or less unknown binaries into firewall machine is always a security risk.

[Ente]

Thanks for the input, guys!
I'll install that bitcoind on a server behind the firewall then. Easier, more secure, better hardwarespecs, win! :-)

Ente