aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | | | | | | mosquitto: bump 2.0.5 to 2.0.7Karl Palsson2021-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes: https://mosquitto.org/blog/2021/02/version-2-0-7-released/ and https://mosquitto.org/blog/2021/01/version-2-0-6-released/ Various fixes in broker and clients Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | | | | wg-installer: add babeld hotplug.d scriptNick Hainke2021-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a hotplug.d-extension that automatically configures babeld for meshing via wireguard interfaces. It checks for "add" and "remove" of a wireguard interface with name "wg_*". Depending on the action, it removes it from the babeld config or adds the interface and reloads babeld. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | | | | oci-runtime-tools: add packageDaniel Golle2021-02-08
| |_|_|/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Package oci-runtime-tool itself as well as oci-runtime-tests containing runtime validation test executables as well as rootfs tarballs used by the tests. oci-runtime-tool can be used to generate OCI spec files or validate OCI bundles. To validate the OCI runtime (runc, crun, uxc, maybe others) itself, install the 'oci-runtime-tests' package as well as 'node-npm', use npm to install node-tap and symlink the tap executable to /usr/bin. Then cd /usr/libexec/oci-runtime-tests tap *.t Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | | | Merge pull request #14685 from jefferyto/golang-1.15.8Rosen Penev2021-02-07
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | golang: Update to 1.15.8
| * | | | | | | | golang: Update to 1.15.8Jeffery To2021-02-08
| | |_|/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | Merge pull request #14687 from jefferyto/python-hyperlink-21.0.0Rosen Penev2021-02-07
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | python-hyperlink: Update to 21.0.0, refresh patch
| * | | | | | | | python-hyperlink: Update to 21.0.0, refresh patchJeffery To2021-02-08
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | | Merge pull request #14683 from 1715173329/ttyd-fixRosen Penev2021-02-07
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | ttyd: force enable authentication for login
| * | | | | | | | ttyd: force enable authentication for loginTianling Shen2021-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, we called `/usr/libexec/login.sh` as login command, but unfortunately the auth is disabled by default in it[1], and this is really serious as it could be a free "backdoor" for any spoiler who has conntectd to the router via LAN or wireless. In my option, it shouldn't be exposed to anyone without auth, so I set the default login command to `/bin/login`. And for those who really want that, they can do it themselves. 1. `login.sh` adjusts whether use authentication or not from system config named ttylogin, which is set to disabled by default. See package/base-files/files/bin/config_generate#L243. Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
* | | | | | | | | Merge pull request #14680 from jonathanunderwood/getdns-no-static-linkingRosen Penev2021-02-07
|\ \ \ \ \ \ \ \ \ | |_|/ / / / / / / |/| | | | | | | | getdns: disable static linking of getdns utilities
| * | | | | | | | getdns: disable static linking of getdns utilitiesJonathan G. Underwood2021-02-07
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes issue #13361. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
* | | | | | | | Merge pull request #14682 from dedeckeh/masterHans Dedecker2021-02-07
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | nghttp2: update to 1.43
| * | | | | | | nghttp2: update to 1.43Hans Dedecker2021-02-07
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 3dc6c0af Bump version number to 1.43.0 e8762781 Update AUTHORS 2bf841e2 workflow: Build with UBSAN enabled 7ebab98e Merge pull request #1548 from nghttp2/py3-bindings 23fc6cc9 Bump Linux runner OS to ubuntu 20.04 2e35cdea Update doc 22af8e78 Require python3 for python bindings c88e9100 Update ax_python_devel.m4 43ba3125 Merge pull request #1547 from nghttp2/sphinx-v3.3 3c17299a Update enum references a7ecff65 Make doc generation work with sphinx v3.3 79a4f789 Merge pull request #1546 from nghttp2/py3-scripts 28ba0b37 Update document reference 6b7ade9f Require python3 for python scripts 46536729 Bump clang-format to 10 563c1173 Merge pull request #1544 from nghttp2/nghttpx-clear-mcpool 1c04ca80 Merge pull request #1540 from tavrez/patch-1 d32e20bc nghttpx: Make sure that Pool gets cleared when all buffers are returned 8b8ba6b0 Merge pull request #1542 from nghttp2/nghttpx-check-sigalg 81fb0153 nghttpx: Choose ECDSA cert if compatible signature algorithm available d8c71d5f Added new nghttp2_ksl.c to Windows makefile fb5b5aef Merge pull request #1537 from nghttp2/nghttpx-allow-colon-in-pattern 6787423e nghttpx: Add workaround to include ':' in backend pattern ffcdf5df Merge pull request #1533 from LorenzNickel/patch-1 0cdb1738 Fix typo in security.rst c9d5472f Bump version number to 1.43.0-DEV 15bd71ed Update manual pages Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* | | | | | | haproxy: Update HAProxy to v2.2.9Christian Lachner2021-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | | | Merge pull request #14672 from mhei/php8-quilt-optimizeMichael Heimpold2021-02-07
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | php8: Don't run phpize8 with QUILT
| * | | | | | | php8: Don't run phpize8 with QUILTMichael Heimpold2021-02-06
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allows targets such as prepare, refresh, or update to be run without building dependencies for easier patch maintenance. This is d741a64b7 applied to php8. Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com> Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | | Merge pull request #14678 from dibdot/banipDirk Brenken2021-02-07
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | banip: release 0.7.1
| * | | | | | | banip: release 0.7.1Dirk Brenken2021-02-07
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add 'ban_extrasources' to handle banIP-unrelated sets for reporting and queries * add set timeouts for local sources (maclist, whitelist, blacklist) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | Merge pull request #14562 from ja-pa/clamav-0.103.0Rosen Penev2021-02-06
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | clamav: update to version 0.103.0
| * | | | | | | clamav: update to version 0.103.0Jan Pavlinec2021-01-25
| | |_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | Merge pull request #14663 from mwarning/ztRosen Penev2021-02-06
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | zerotier: update to 1.6.3
| * | | | | | | zerotier: update to 1.6.3Moritz Warning2021-02-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | | | | | | Merge pull request #14673 from zhaojh329/rttyRosen Penev2021-02-06
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | rtty: update to 7.3.2
| * | | | | | | | rtty: update to 7.3.2Jianhui Zhao2021-02-06
| | |_|/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* / | | | | | | wg-installer: add wg-installerNick Hainke2021-02-06
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This tool can be used to automatically create wireguard tunnels. Using rpcd a new wireguard interface is created on the server where the client can connect to. Wiregurad server automatically installs a user and associated ACL to use the wireguard-installer-server features. The user is called wginstaller and so is the password. Get Usage: wg-client-installer get_usage --ip 127.0.0.1 --user wginstaller --password wginstaller Register Interface: wg-client-installer register --ip 127.0.0.1 --user wginstaller --password wginstaller --bandwidth 10 --mtu 1400 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | | Merge pull request #14202 from miska/vpn_userRosen Penev2021-02-05
|\ \ \ \ \ \ \ | |_|_|_|/ / / |/| | | | | | openvpn: Support username and password options
| * | | | | | openvpn: Support username and password optionsMichal Hrusecky2020-12-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some VPN providers require username and password for client to connect. This commit adds an option to specify username, password and cert_password directly in uci config which then gets expanded during start of openpvn client. Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* | | | | | | Merge pull request #14657 from pprindeville/isc-dhcp-gen-A-RRsPhilip Prindeville2021-02-05
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | isc-dhcp: treat 'config host' like superset of 'config domain'
| * | | | | | | isc-dhcp: treat 'config host' like superset of 'config domain'Philip Prindeville2021-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Not including an A record mapping will cause nsupdate to balk at CNAME and MX records (and probably SRV as well) because the target will be unknown at the time of parsing, until the lease gets activated. We need these RR's to be in place well before the servers even come up. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | | | Merge pull request #14659 from mhei/php8-updateMichael Heimpold2021-02-05
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | php8: update to 8.0.2
| * | | | | | | | php8: update to 8.0.2Michael Heimpold2021-02-05
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes: - CVE-2021-21702 Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | | | Merge pull request #14658 from mhei/php8-fix-x86_64-buildMichael Heimpold2021-02-05
|\ \ \ \ \ \ \ \ | |_|_|/ / / / / |/| | | | | | | php8: fix cross-compiling for x86_64
| * | | | | | | php8: fix cross-compiling for x86_64Michael Heimpold2021-02-04
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The build process uses a minilua helper for code generation which must not be compiled with target cross-compiler but the host compiler. This error was spotted by buildbots: ext/opcache/minilua /builder/shared-workdir/build/sdk/build_dir/ target-x86_64_musl/php-8.0.1/ext/opcache/jit/dynasm/dynasm.lua -D X64=1 -o ext/opcache/jit/zend_jit_x86.c /builder/shared-workdir /build/sdk/build_dir/target-x86_64_musl/php-8.0.1/ext/opcache/jit/zend_jit_x86.dasc /bin/bash: ext/opcache/minilua: No such file or directory Makefile:406: recipe for target 'ext/opcache/jit/zend_jit_x86.c' failed make[4]: *** [ext/opcache/jit/zend_jit_x86.c] Error 127 Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | | Merge pull request #14636 from neheb/nRosen Penev2021-02-05
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | netifyd: add reproducibility patch
| * | | | | | | netifyd: add reproducibility patchRosen Penev2021-02-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | Merge pull request #14653 from lucize/libreupRosen Penev2021-02-05
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | libreswan: update to 4.2
| * | | | | | | | libreswan: update to 4.2Lucian Cristian2021-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | | | Merge pull request #14654 from lucize/nssupRosen Penev2021-02-05
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | nss: update to 3.61
| * | | | | | | | | nss: update to 3.61Lucian Cristian2021-02-04
| |/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | | | | Merge pull request #14643 from lipnitsk/php7Michael Heimpold2021-02-05
|\ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / |/| | | | | | | | lang/php7: Don't run phpize7 with QUILT
| * | | | | | | | lang/php7: Don't run phpize7 with QUILTIlya Lipnitskiy2021-02-03
| | |_|_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allows targets such as prepare, refresh, or update to be run without building dependencies for easier patch maintenance. Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
* | | | | | | | Merge pull request #14644 from lipnitsk/nssRosen Penev2021-02-04
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | libs/nss: Don't run nsinstall with QUILT
| * | | | | | | | libs/nss: Don't run nsinstall with QUILTIlya Lipnitskiy2021-02-03
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allows targets such as prepare, refresh, or update to be run without building dependencies for easier patch maintenance. Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
* | | | | | | | Merge pull request #14649 from dibdot/banipDirk Brenken2021-02-04
|\ \ \ \ \ \ \ \ | |_|/ / / / / / |/| | | | | | | banip: release 0.7.0
| * | | | | | | banip: release 0.7.0Dirk Brenken2021-02-04
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * major rewrite * add support for multiple chains * add mac whitelisting * add support for multiple ssh daemons in parallel * add an ipset report engine * add mail notifications * add suspend/resume functions * add a cron wrapper to set an ipset related auto-timer for automatic blocklist updates * add a list wrapper to add/remove blocklist sources * add 19.x and Turris OS 5.x compatibility code * sources stored in an external compressed json file (/etc/banip/banip.sources.gz) * change Country/ASN download sources (faster/more reliable) * fix DHCPv6/icmpv6 issues Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | collectd: add plugin to compare ipv4,ipv6 statsNick Hainke2021-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add "ipstatistics"-plugin. This plugin parses "/proc/net/netstat" and "/proc/net/snmp6" to get the overall ipv4 and ipv6 usage. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | | Merge pull request #14645 from lipnitsk/svoxRosen Penev2021-02-03
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | svox: Don't move files with QUILT
| * | | | | | | svox: Don't move files with QUILTIlya Lipnitskiy2021-02-03
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allows targets such as prepare, refresh, or update to be run without building dependencies for easier patch maintenance. Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
* | | | | | | Merge pull request #14642 from 1715173329/xrayRosen Penev2021-02-03
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | xray-core: fix service start / reload
| * | | | | | xray-core: fix service start / reloadTianling Shen2021-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix starting problem: Starting function should be named 'start_service' instead of 'start_instance'. Fix reloading problem: Register reload tigger for uci config itself. And, xray does not support reload currently, so use legacy restart as reload. Fixes: 6c9b96352fb5e7d6acdf8f14ea4f9251cd09926b ("xray-core: add init script") Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
Powered by cgit, Themed by Ted Yin.