aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | pbr: update to 1.1.1-1Stan Grishin2023-05-01
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | *** MAKEFILE *** * remove libubus dependency as it was causing issues https://forum.openwrt.org/t/policy-based-routing-pbr-package-discussion/140639/318 * move firewall hotplug directory/file creation out of default section into pbr and pbr-iptables packages sections in preparation for dropping it from pbr * fix no new line after output when uninstalling packages *** UCI-DEFAULTS *** * only add firewall include to firewall config if the include file exists * add shellcheck exception to netifd uci-defaults file *** SCRIPTS *** * more informative logging for firewall and iface hotplug scripts * more informative logging for firewall include script *** SERVICE *** * introduce lock-file to prevent package starting on external events if it hasn't been auto- or manually started before * use the `ip`, not `ip-full` command to prevent errors on OpenWrt 21.02 * parse firewall WAN zone to append list of interfaces * append error and warning "arrays" with new messages * used shared memory to store the service output/logging messages * improve is_ovpn function to filter out false positives when interface names started with `tun` * introduce is_valid_ovpn to find OpenVPN tunnels where the device name in OpenVPN config matches the device name in network config * introduce opkg_get_version to compare versions of principal and luci packages * better code to obtain AdGuardHome version with betas installed * optimize code and add better logging for errors when inserting policies with iptables * optimize code and add better logging for errors when inserting policies with nft * bugfix: insert policies in all specified protocols * bugfix: support using physical devices in policies in nft mode * bugfix: use iptPrefix, not nftPrefix in iptables commands * implement Tor support in nft mode * bugfix: fix spelling for User File Syntax error * restart service fully (instead of quick reload) for OpenVPN interface events, as the order/number of supported interfaces * more verbose output (showing handles) of status in nft mode * improve `icmp_interface`, `ignored_interface`, `supported_interface` validation regexes * improve `interface`, validation regex Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | banip: update 0.8.4-5Dirk Brenken2023-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix remaining small issues * standardize log wording * polished up for branch 23.x Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | banip: update 0.8.4-4Dirk Brenken2023-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add housekeeping to the autoallow function, only the current uplink will be held * fix small issues * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | mwan3: bump PKG_VERSION to 2.11.6Anna Tikhomirova2023-05-04
| | | | | | | | | | | | | | | | Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* | | | mwan3: fix addition of routes to mwan3_connected ipsetAnna Tikhomirova2023-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Addition of routes to mwan3_connected ipset is broken. The ipset name was changed from mwan3_connected_v4/6 to mwan3_connected_ipv4/6, but this change was not reflected in mwan3rtmon. Signed-off-by: Anna Tikhomirova <vamp@vampik.ru> * Update commit message Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | mwan3: bump PKG_VERSION to 2.11.5Anna Tikhomirova2023-05-04
| | | | | | | | | | | | | | | | Signed-off-by: Anna Tikhomirova <vamp@vampik.ru>
* | | | mwan3: fix addition of iptables rules for mwan3 sticky rulesAnna Tikhomirova2023-05-04
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Addition of iptables rules for mwan3 sticky rules is broken, resulting in non-working sticky rules. The required parameters for the function 'mwan3_set_sticky_iptables' were passed in the wrong order. Signed-off-by: Anna Tikhomirova <vamp@vampik.ru> * Update commit message * Quoting function arguments Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | tailscale: update to 1.40.0Zephyr Lykos2023-05-03
| | | | | | | | | | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | banip: update 0.8.4-3Dirk Brenken2023-05-02
| | | | | | | | | | | | | | | | | | * add the option 'ban_autoallowuplink' to limit the uplink autoallow function: 'subnet' (default), 'ip' or 'disable' Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | sqlite3: Update to 3.41.2Tianling Shen2023-05-02
| | | | | | | | | | | | | | | | | | Fixes: CVE-2021-20227 Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #20768 from stangri/master-simple-adblockStan Grishin2023-05-01
|\ \ \ | | | | | | | | simple-adblock: implement curl_additional_param compressed_cache_dir
| * | | simple-adblock: implement curl_additional_param compressed_cache_dirStan Grishin2023-04-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * curl_additional_param: to pass additional parameters (like proxy) to curl * compressed_cache_dir: where to store compressed cache in non-volitile memory Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | sing-box: update to 1.2.6Van Waholtz2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | | CI: Enable runtime_test for mips_24kcVan Waholtz2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | | sedutil: Add new packageJavier Marcet2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | The Drive Trust Alliance Self Encrypting Drive Utility Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | cache-domains: added pre-test.sh CI stepGerard Ryan2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some packages variants have conflicting dependencies with the base packages and the CI test will fail to install before anything can be done by the packages to setup the system for install. This change adds a pre-test.sh that runs before the install so things like the default libustream variant can be swapped out as shown in the updated cache-domains. Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | | | kea: procd_close_instance doesn't take a parameterPhilip Prindeville2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | kea: Update to 2.2.0Philip Prindeville2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | getdns: fix compilation with OPENSSL_NO_DEPRECATEDAndre Heider2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SSL_get_peer_certificate() is deprecated, OpenSSL v3.0 added SSL_get0_peer_certificate() and SSL_get1_peer_certificate(). Use the latter since the return value is explicitely X509_free()ed here, see [0]. [0] https://www.openssl.org/docs/manmaster/man3/SSL_get_peer_certificate.html Signed-off-by: Andre Heider <a.heider@gmail.com>
* | | | python-hatchling: Update to 1.14.0Jeffery To2023-05-01
| | | | | | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | python-trove-classifiers: Add new host-only packageJeffery To2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the README: Canonical source for classifiers on PyPI. Classifiers categorize projects per PEP 301. Use this package to validate classifiers in packages for PyPI upload or download. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | python-calver: Add new host-only packageJeffery To2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the README: The calver package is a setuptools extension for automatically defining your Python package version as a calendar version. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | openssh: add respawn and reloading via signalErik Karlsson2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | Configure the openssh server to respawn. Reload by sending SIGHUP Signed-off-by: Erik Karlsson <erik.karlsson@genexis.eu>
* | | | zoneinfo: adjust to current timezone data file structureHannu Nyman2023-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tweak the package to better match the current file structure in the upstream time zone database. Add missing aliases. Make some clarifications * Combine -northmerica and -southamerica into -america, as all current official America/xxx definitions were already in -northamerica and only the unofficial/deprecated Brazil/xxx, Chile and Argentina were in -southamerica. (Confusingly America/Sao_Paulo was in northamerica, while Brazil was in southamerica.) * Add PROVIDES for the old package names * Add missing top-level dir country/nation alias links. * Define Eire in -europe instead of -core. * Rename -india to -indian, as it contains the Indian ocean islands instead of the actual Asia/Kolkata zone for the mainland India. * Add PROVIDES for the old package name * Add 'Ocean' to all ocean zone titles. * Make all zoneinfo-packages depend on zoneinfo-core, so that zone.tab, the UTC based definitions and the still existing short zone codes are always available. * Clarify menuconfig menu as "Time Zone info" Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | lighttpd: build fixesGlenn Strauss2023-05-01
| |/ / |/| | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | samba4: decouple quotas from vfs optionJavier Marcet2023-04-29
| | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | python-eventlet: bump to version 0.33.3Stepan Henek2023-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | old eventlet is not working well with python3.10 ``` root@turris:~# python3 Python 3.10.9 (main, Feb 9 2023, 10:37:45) [GCC 11.2.0] on linux Type "help", "copyright", "credits" or "license" for more information. >>> import eventlet Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib/python3.10/site-packages/eventlet/__init__.py", line 17, in <module> File "/usr/lib/python3.10/site-packages/eventlet/convenience.py", line 7, in <module> File "/usr/lib/python3.10/site-packages/eventlet/green/socket.py", line 4, in <module> File "/usr/lib/python3.10/site-packages/eventlet/green/_socket_nodns.py", line 11, in <module> File "/usr/lib/python3.10/site-packages/eventlet/greenio/__init__.py", line 3, in <module> File "/usr/lib/python3.10/site-packages/eventlet/greenio/base.py", line 32, in <module> File "/usr/lib/python3.10/site-packages/eventlet/timeout.py", line 166, in wrap_is_timeout TypeError: cannot set 'is_timeout' attribute of immutable type 'TimeoutError' ``` see 0.33.3 release notes for details - https://eventlet.net/doc/changelog.html#id1 Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
* | | restic: update to 0.15.2Tom Stöveken2023-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Tom Stöveken <tom@naaa.de> Compile tested: SDK for OpenWrt 22.03.4 Run tested: x86/64 @ Intel(R) Celeron(R) CPU N3160 @ 1.60GHz, OpenWrt 22.03.4 Description: Updated to version 0.15.2 Signed-off-by: Tom Stöveken <tom@naaa.de>
* | | banip: update 0.8.4-2Dirk Brenken2023-04-28
| | | | | | | | | | | | | | | | | | | | | * fix domain lookup function (parse banIP config vars) * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | libreswan: update to 4.10Nick Hainke2023-04-27
| | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://github.com/libreswan/libreswan/releases/tag/v4.10 Fixes: CVE-2023-23009 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | nginx: rename nginx-all-module to nginx-fullChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | Rename nginx-all-module to nginx-full to follow pattern used by other package and other projects. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: update to 1.24.0 and update headers-more moduleChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | Update nginx to 1.24.0 and update headers-more module to fix compilation error. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: update lua module to latest openresty versionChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update lua module to latest openrestry version. Additional config are required to correctly use it. Switch it to luajit from liblua as this is what is currently supported for the module since plain lua support was dropped from the module. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: introduce support for dynamic modulesChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Start building sub package that provide dynamic modules. Each module needs to be loaded using load_modules. Refer to nginx documentation on how to use this. This should result in lower memory usage as only used module are loaded. Also fix the uci-default scripts to add the required ubus module for luci module. -fvisibility=hidden is needed to be dropped to correctly support loading dynamic modules. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx-util: add support for loading dynamic module in uci templateChristian Marangi2023-04-27
| | | | | | | | | | | | | | | | | | | | | Add support for loading dynamic module in uci template by adding .module file in module.d directory. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | acme: remove redundant postinstGlen Huang2023-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | opkg runs uci-defaults if a package installs one, in acme-common's case that's identical to postinst. prerm shouldn't be run a image builder, so it's unnecessary to check IPKG_INSTROOT Signed-off-by: Glen Huang <me@glenhuang.com>
* | | iperf3: update to 3.13Nick Hainke2023-04-26
| | | | | | | | | | | | | | | | | | | | | Release Notes: https://software.es.net/iperf/news.html#iperf-3-13-released Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | pcre2: only build static library for hostTianling Shen2023-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix potential linking issue: ``` /mnt/snapshot/staging_dir/hostpkg/bin/swig: error while loading shared libraries: libpcre2-8.so.0: cannot open shared object file: No such file or directory error: command '/mnt/snapshot/staging_dir/hostpkg/bin/swig' failed with exit code 127 ``` Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | librespeed-go: update file permissions for ujailTianling Shen2023-04-26
| | | | | | | | | | | | | | | | | | | | | This fixes "permission denied" error when access files as a normal user. Reported-by: Anya Lin <hukk1996@gmail.com> Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | iperf: update to 2.1.9Nick Hainke2023-04-26
| | | | | | | | | | | | | | | | | | | | | Changelog can be found here: https://sourceforge.net/projects/iperf2/files/ Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | gzip: update to 1.12Nick Hainke2023-04-26
| | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://lists.gnu.org/archive/html/info-gnu/2022-04/msg00003.html Fixes: CVE-2022-1271 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | kmod: update to 30Nick Hainke2023-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes: - https://github.com/kmod-project/kmod/releases/tag/v28 - https://github.com/kmod-project/kmod/releases/tag/v29 - https://github.com/kmod-project/kmod/releases/tag/v30 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | yaml: only build static libraryLuiz Angelo Daros de Luca2023-04-25
| | | | | | | | | | | | | | | | | | | | | Do not build shared libraries to avoid host programs to dynamic link libraries at non-standard paths. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | | ruby: statically link extensions into host rubyLuiz Angelo Daros de Luca2023-04-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ruby uses extensions (.so files) that might also depend on other libraries. When the linker builds an executable, it will refer to the path it found the library, including those in the stagging dir. However, when it links a shared library (like ruby exts), it will let that dependency to be resolved at runtime. During host and target build, ruby build script runs ruby scripts. When it loads a ext that depends on another library, it will, by default, look for the system libraries to satisfy that, breaking the build when it fails. Setting LD_LIBRARY_PATH to the stagging lib dir is a valid workaround. Ruby can also be built statically linking all exts into ruby executable. That will make the linker point to the stagging library path, fixing the issue. It was used in the past but, at some point, ruby broke it. Now it is working as expected. Closes #20839 While at it, clean up excluded extensions not used by host ruby. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | | python: Update find stdlib scriptJeffery To2023-04-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This updates the python3-find-stdlib-depends.sh script for these changes: * The gdbm (dbm.gnu) package was merged into the dbm package in 78f6c2c5ad2fd3de8a33a1cddb02204177cf60ad. * The uuid module was split into a separate package in 4e05541782edeb06b51d691dadf52648df24c940. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | python-idna: Update to 3.4Jeffery To2023-04-25
| | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | python-zope-interface: Update to 6.0, refresh patchJeffery To2023-04-25
| | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | python-pyasn1: Update to 0.5.0Jeffery To2023-04-25
| | | | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | openssh: preserve authorized_keysGlen Huang2023-04-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | The root user is usually the user that clients ssh into with, so in most cases its authorized_keys determines what clients are allowed to ssh into this device. Without preserving this file, they could potentially be locked out after upgrading. Signed-off-by: Glen Huang <me@glenhuang.com>
* | | Merge pull request #20836 from hgl/strongswan-depsPhilip Prindeville2023-04-24
|\ \ \ | | | | | | | | strongswan: add missing PKG_MOD_AVAILABLE
Powered by cgit, Themed by Ted Yin.