aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | privoxy: fix preinst/postinst script indentationAlois Klink2022-12-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix the indentation of the preinst/postinst scripts for the privoxy package. Because these scripts didn't start with `#!/bin/sh` (they instead started with the TAB character), `/bin/sh` was not used to start them. On x86_64 and i386_pentium-mmx, this seems to be fine, but on arm_cortex-a15_neon-vfpv4 and aarch64_cortex-a53, running these scripts fails with a: ``` Installing privoxy (3.0.33-3) to root... Collected errors: * pkg_run_script: package "privoxy" preinst script returned status 1. * preinst_configure: Aborting installation of privoxy. * opkg_install_cmd: Cannot install package privoxy. ``` Reported-by: Marius Dinu <m95d+git@psihoexpert.ro> Signed-off-by: Alois Klink <alois@aloisklink.com>
* | | | Merge pull request #20032 from peter-stadler/djangoAlexandru Ardelean2022-12-08
|\ \ \ \ | | | | | | | | | | django: bump version 4.1.3
| * | | | django: bump version 4.1.3Peter Stadler2022-12-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fix CVE-2022-41323 Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | | Merge pull request #19933 from stintel/vallumdStijn Tintel2022-12-08
|\ \ \ \ \ | |_|_|/ / |/| | | | vallumd: updates
| * | | | vallumd: bump to 0.2.2Stijn Tintel2022-11-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add upstream patch to fix building from source tarballs. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
| * | | | vallumd: bump to 0.2.1Stijn Tintel2022-11-18
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
| * | | | vallumd: point PKG_SOURCE_URL to CodebergStijn Tintel2022-11-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The github repository has been archived; the project is now hosted on Codeberg. Update the PKG_SOURCE_URL accordingly. Gitea doesn't seem to add a version suffix to the directory in the tarball, so use a custom PKG_BUILD_DIR. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | snort3: unified configs: local.lua and homenet.luaJohn Audia2022-12-08
| |_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit adds /etc/snort/local.lua and /etc/snort/homenet.lua for user defined config options which is more simplistic than modifying upstream files directly. That can be tedious and decisive to maintain in sync with upstream changes. The init script has been adjusted accordingly. Acknowledgment to amish who maintains the Arch Linux snort-nfqueue package[1] for these ideas and initial code. Another modification is dropping the following args in the call to /usr/bin/snort by the init system as these options are provided in /etc/snort/local.lua: * --daq-dir /usr/lib/daq/ * -A "$alert_module" Instructions to configure snort3: 1. Edit /etc/snort/homenet.lua and redefine HOME_NET and EXTERNAL_NET, for example: HOME_NET = [[ 10.9.8.0/24 192.168.1.0/24 ]] EXTERNAL_NET = "!$HOME_NET" 2. Edit /etc/snort/local.lua to setup options unique to your use case of snort. The default ones I included should be sane for the role of IDS (alert only), but users may easily uncomment some options therein to use IPS (drop) mode. 3. Install or symlink rules to /etc/snort/rules/snort.rules and optionally edit /etc/snort/local.lua to define extra rules files if not using a unified 'snort.rules' References: 1. https://aur.archlinux.org/packages/snort-nfqueue Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | Merge pull request #20036 from ysc3839/natmap-fixTianling Shen2022-12-07
|\ \ \ \ | | | | | | | | | | natmap: merge "ipv4" and "ipv6" options into single "family" option
| * | | | natmap: merge "ipv4" and "ipv6" options into single "family" optionRichard Yu2022-12-07
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Richard Yu <yurichard3839@gmail.com>
* | | | | bpfcountd: remove incomplete/broken namespace featureLinus Lüssing2022-12-07
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The original idea of the extra namespace variable was to set up bpfcountd from other daemons etc. independent of what a user configured in /etc/config/bpfcountd for instance. Like: $ UCI_CONFIG_DIR=/var/run/bpfcountd/gluon-config \ /etc/init.d/bpfcountd start "" gluon However there are still issues with this approach: 1) Instance specific stop calls like: $ /etc/init.d/bpfcountd stop <instance-name> <namespace>" will not stop the according namespaced instance, as the stop() in /etc/rc.common will call procd_kill() without the namespace prefix. And we can't overwrite that behaviour. And asking a user to use "... start <in> <ns>" and "... stop <ns>.<in>" is confusing. (and currently "... stop <ns>.<in>" would not remove the correct unix socket). 2) A stop call without an instance/config name would always stop all instances. So the namespace variable would be ignored. While start without an instance "works", but: 3) It would stop any process that is not in the currently selected UCI_CONFIG_DIR. As all this is not easily fixable without changing OpenWrt internals, just remove the whole namespace idea for now. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
* | | | dnsproxy: Update to 0.46.4Tianling Shen2022-12-07
| | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | cloudflared: Update to 2022.11.1Tianling Shen2022-12-07
| |/ / |/| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #19613 from wormi4ok/tailscale-version-bumpJosef Schlehofer2022-12-05
|\ \ \ | | | | | | | | tailscale: update to v1.32.0
| * | | tailscale: Update to version 1.32.3Stanislav Petrashov2022-12-03
| | | | | | | | | | | | | | | | Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
| * | | tailscale: update to v1.32.0Stanislav Petrashov2022-12-03
| | | | | | | | | | | | | | | | Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
* | | | snort3: update to 3.1.48.0-1John Audia2022-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Had to add a patch to allow builds of targets containing '+' in their dir name Build system: x86_64 Build-tested: bcm2711/RPi4B Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | Merge pull request #19998 from ysc3839/natmapTianling Shen2022-12-06
|\ \ \ \ | | | | | | | | | | natmap: add new package
| * | | | natmap: add new packageRichard Yu2022-12-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NATMap is a program for opening port behind full cone NAT (NAT-1), without the need for using UPnP or another port forward settings. More details can be found at original repo: https://github.com/heiher/natmap Signed-off-by: Richard Yu <yurichard3839@gmail.com>
* | | | | snowflake: update to version 2.4.1Daniel Golle2022-12-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in version v2.4.1 - 2022-12-01 - Issue 40224: Bug fix in utls roundtripper Changes in version v2.4.0 - 2022-11-29 - Fix proxy command line help output - Issue 40123: Reduce multicast DNS candidates - Add ICE ephemeral ports range setting - Reformat using Go 1.19 - Update CI tests to include latest and minimum Go versions - Issue 40184: Use fixed unit for bandwidth logging - Update gorilla/websocket to v1.5.0 - Issue 40175: Server performance improvements - Issue 40183: Change snowflake proxy log verbosity - Issue 40117: Display proxy NAT type in logs - Issue 40198: Add a `orport-srcaddr` server transport option - Add gofmt output to CI test - Issue 40185: Change bandwidth type from int to int64 to prevent overflow - Add version output support to snowflake - Issue 40229: Change regexes for ipv6 addresses to catch url-encoded addresses - Issue 40220: Close stale connections in standalone proxy Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | Merge pull request #19763 from stangri/master-pbrStan Grishin2022-12-04
|\ \ \ \ \ | | | | | | | | | | | | pbr: initial commit
| * | | | | pbr: initial commitStan Grishin2022-12-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * The makefile produces the nft and iptables capable `pbr` package and the `pbr-iptables` package for legacy setups * This replaces `vpnbypass` and `vpn-policy-routing` packages * I'm soliciting feedback on this package and my intention is to update the version to 1.0.0 before this is merged, but I need the feedback on this and luci-app-pbr before then. Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | docker-compose: Update to version 2.14.0Javier Marcet2022-12-04
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | | | | xz: update to 5.2.9Hannu Nyman2022-12-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update xz to version 5.2.9. Switch back to .bz2 sources, as we already download .bz2 for tools/ No sense to re-download sources as a .xz file. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | | tvheadend: Fix github warning about AUTORELEASEMarius Dinu2022-12-03
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
* | | | | | tvheadend: add conditions for -O3 and LTO optimizationsMarius Dinu2022-12-03
| |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Building for arc, mips and powerpc platforms fails if -O3 and LTO optimizations are enabled. This patch removes that option for everything other than arm and x86_64. These are known to work. Fixes issue #19923. Also fixes a typo in the description. Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
* | | | | bpfcountd: add initial packageLinus Lüssing2022-12-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bpfcountd was created to obtain packet statistics in larger networks without stressing the cpu resources. bpfcountd will count the amount of packages and bytes over time (for each defined rule). The rules are defined using the tcpdump filter syntax (bpf). The collected data is provided on a unix socket in plaintext. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
* | | | | Merge pull request #19993 from stangri/master-simple-adblockStan Grishin2022-12-02
|\ \ \ \ \ | | | | | | | | | | | | simple-adblock: localizable error/warning messages
| * | | | | simple-adblock: localizable error/warning messagesStan Grishin2022-11-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * store all error/warning messages with the error text id so that they can be made localizable for the luci app Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | ci: only comment AUTORELEASE deprecation if existsPaul Spooren2022-12-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If it doesn't exists, don't confuse the contributors. Signed-off-by: Paul Spooren <mail@aparcar.org>
* | | | | | stubby: bump to latest 0.4.2Rudy Andram2022-12-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: @neheb (find it by checking history of the package Makefile) Compile tested: aarch64/ipq8074 Run tested: aarch64/ipq8074 Description: stubby: bump to latest 0.4.2 Signed-off-by: Rudy Andram <rmandrad@gmail.com>
* | | | | | frr: update to 8.4.1Lucian Cristian2022-12-02
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | nss: update to 3.85Lucian Cristian2022-12-02
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | lighttpd: add lighttpd-mod-rrdtool dep on rrdtool1Glenn Strauss2022-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | add lighttpd-mod-rrdtool dependency on rrdtool1 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | | | | lighttpd: lighttpd-1.4.67-4Glenn Strauss2022-12-01
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | | | | lighttpd: lighttpd.conf vars, comments, guidanceGlenn Strauss2022-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | lighttpd.conf variables, documentation comments, configuration guidance Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | | | | lighttpd: print stderr trace if validation failsGlenn Strauss2022-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | lighttpd.init validate_conf(): print stderr trace if validation fails Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* | | | | | microsocks: add low resource SOCKS5 TCP/IP only proxy serverMateusz Korniak2022-12-02
| |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | Initial version 1.0.3 Signed-off-by: Mateusz Korniak <matkorgithubcom@ant.gliwice.pl>
* | | | | Merge pull request #19992 from hnyman/wgetHannu Nyman2022-11-30
|\ \ \ \ \ | |/ / / / |/| | | | wget: update to 1.21.3
| * | | | wget: update to 1.21.3Hannu Nyman2022-11-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update wget to 1.21.3 * Remove patch 100-fix-hsts-time.patch as upstream has issued its own version on the fixes * Add a hack (and fixup autoreconf) to fix an upstream bug that forces the nettle library into nossl even if NTLM is disabled. Upstream bug filed: https://savannah.gnu.org/bugs/?63431 * Remove old maintainer who has not been active Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | Merge pull request #19987 from stangri/master-simple-adblockStan Grishin2022-11-29
|\ \ \ \ \ | | | | | | | | | | | | simple-adblock: bugfix: detect dnsmasq ipset support
| * | | | | simple-adblock: bugfix: detect dnsmasq ipset supportStan Grishin2022-11-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Fixes https://github.com/openwrt/packages/issues/19978, thank you @parona-source for the report/patch! Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | Merge pull request #19985 from stangri/master-https-dns-proxyStan Grishin2022-11-29
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | https-dns-proxy: improve performance on restart
| * | | | | https-dns-proxy: improve performance on restartStan Grishin2022-11-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * instead of doing stop/start which involves restarting dnsmasq twice, kill the existing service instances on restart instead Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | Merge pull request #19973 from julienmalik/borgHannu Nyman2022-11-29
|\ \ \ \ \ \ | | | | | | | | | | | | | | borgbackup: initial commit
| * | | | | | borgbackup: add package for 1.2.2Julien Malik2022-11-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Julien Malik <julien.malik@paraiso.me>
| * | | | | | python-pyfuse3: add package for 3.2.2Julien Malik2022-11-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Julien Malik <julien.malik@paraiso.me>
| * | | | | | python-trio: add package for 0.22.0Julien Malik2022-11-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Julien Malik <julien.malik@paraiso.me>
| * | | | | | python-sniffio: add package for 1.3.0Julien Malik2022-11-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Julien Malik <julien.malik@paraiso.me>
| * | | | | | python-outcome: add package for 1.2.0Julien Malik2022-11-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Julien Malik <julien.malik@paraiso.me>
Powered by cgit, Themed by Ted Yin.