aboutsummaryrefslogtreecommitdiff
path: root/utils
Commit message (Collapse)AuthorAge
...
| * | | docker-ce: add device option to expand interface blockingFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If docker-ce handles the firewall and fw3 is not envolved because the rules get not proceed, then not only docker0 should be handled but also other interfaces and therefore other docker networks. This commit extends the handling and introduces a new uci option `device` in the docker config firewall section. This can be used to specify which device is allowed to access the container. Up to now only docker0 is covert. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | docker-ce: remove not applicable uciupdateFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | As the protocol is set to none, this makes no sense here, as it cannot be controlled and thus processed by the netifd. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | docker-ce: set proto for docker bridge device to noneFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Set proto from `static` to `none`. This makes it clear that this interface is not handled by the netifd. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | docker-ce: make docker-ce firewall handling configurableFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Openwrt has a own firewall service called fw3, that supports firewall zones. Docker can bypass the handling of the zone rules in openwrt via custom tables. These are "always" processed before the openwrt firewall. Which is prone to errors! Since not everyone is aware that the firewall of openwrt will not be passed. And this is a security problem because a mapped port is visible on all interfaces and so also on the WAN side. If the firewall handling in docker is switched off, then the port in fw3 must be explicitly released and it cannot happen that the port is accidentally exported to the outside world via the interfaces on the WAN zone. So all rules for the containers should and so must be made in fw3. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | docker-ce: add arguments call to uciadd and ucidelFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Up to now only the docker0 interface and bridge is created by default. In order to create other interfaces and to integrate them into the openwrt these functions can now be called with arguments. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #13974 from bobafetthotmail/patch-3Rosen Penev2020-11-22
|\ \ \ \ | | | | | | | | | | hwinfo: update to version 21.71
| * | | | hwinfo: update to version 21.71Alberto Bursi2020-11-22
| | | | | | | | | | | | | | | | | | | | | | | | | update to upstream version 21.71 Signed-off-by: Alberto Bursi <bobafetthotmail@gmail.com>
* | | | | runc: remove unneeded MENU:=1Daniel Golle2020-11-22
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now that runc builds according to available kernel features and there is no longer a sub-menu to select them manually, also drop the MENU:=1 statement from the package Makefile. Fixes: 3a06ce559 ("runc: Updated to v1.0.0-rc92 for dockerd") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | runc: remove garbage (fix 3a06ce5595)Hannu Nyman2020-11-22
| | | | | | | | | | | | | | | | | | | | | | | | Remove garbage files introduced with 3a06ce5595 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | hplip: bump to 3.20.9Luiz Angelo Daros de Luca2020-11-22
| | | | | | | | | | | | | | | | Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | | | sabe-backends: update to 1.0.31Luiz Angelo Daros de Luca2020-11-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * adds the canon_lide70 backend * avision: adds support for the KODAK i1120, fixes thread cancellation issues, disables exposure option for non-filmscanners * canon_dr: improves error reporting * dmc: fixes compiler warnings on the scan area options * epsonds: rewrites the network I/O following changes made to the * epson2 backend in 1.0.30 to fix security issues. Network support is still unsupported. * fujitsu: adds support for the fi-800R and a card scanning slot, fixes a bug when reading hardware sensors on the first invocation. Adds USB IDs for fi-7800 and fi-7900. * genesys: adds support for the Canon 5600F, Canon LiDE 90, Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100 and 8200i. Fixes several issues with the Canon 8600F. Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi flatbed support on the Canon 8400F. Adds an option to fill dark calibration with a constant. Adds transparency support for gl847 chipset based devices. Fixes CIS scanner support for gl842 chipset based devices. Removes lineart and image enhancement emulation support. * gphoto: supports the PLANon DocuPen RC800 (with a recent enough version of gphoto2) * gt68xx: modifies scan cancellation behaviour * hp5400: adds button support, fixes a scan cancellation crash issue * pixma: add supports for the i-SENSYS MF440 Series and untested support for the PIXMMA G7000 Series and GM4000 Series as well as the i-SENSYS MF720 Series. * plustek: fixes a potential buffer overrun * test: adds gamma options Patches: - ADD: 102-pixma_Restore_old_behaviour_in_case_XML_support_is_missing.patch: pixma was failing to detect libxml2, even when it exists (https://gitlab.com/sane-project/backends/-/issues/345) - DROP: 100-fix-bigendian.patch: fix in release Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | | | podman: improve packagingDaniel Golle2020-11-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * keep /etc/containers accross sysupgrade * make 'runc' the default run-time for now Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | runc: Updated to v1.0.0-rc92 for dockerdGerard Ryan2020-11-22
| | | | | | | | | | | | | | | | | | | | | | | | SELinux and Seccomp are now enabled via the kernel options themselves Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | | | runc: enable seccomp support by defaultDaniel Golle2020-11-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's nice to have seccomp support which is enabled in OpenWrt on supported platforms on targets which are not marked as SMALL_FLASH. (and it's kinda obvious that you wouldn't want to install runc on a SMALL_FLASH target to begin with) So let's enable seccomp by default. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | whois: add packagePaul Spooren2020-11-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Better a separate package than enabling it via busybox. Special thanks to @neheb for the Makefile patches. Signed-off-by: Paul Spooren <mail@aparcar.org>
* | | | xz: use ALTERNATIVES instead of copying symlinksDaniel Golle2020-11-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Installing the 'xz' package currently leads to file collisions: Collected errors: * check_data_file_clashes: Package xz wants to install file /usr/bin/unxz But that file is already provided by package * busybox * check_data_file_clashes: Package xz wants to install file /usr/bin/xz But that file is already provided by package * busybox * opkg_install_cmd: Cannot install package debootstrap. Fix that by switching to use ALTERNATIVES for all multicall commands instead of copying the symlinks into the package. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | Merge pull request #13762 from neheb/domo4Rosen Penev2020-11-19
|\ \ \ \ | | | | | | | | | | domoticz: fix compilation with python 3.9
| * | | | domoticz: fix compilation with python 3.9Rosen Penev2020-11-02
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added Fedora patch to fix compilation. Added python3 dependency as it seems it's needed now. Replaced custom boost 1.73 patch with upstream one. Removed CFLAG that was supposed to fix this but didn't do anything. Removed nls.mk. telldus-core was fixed to not require iconv. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #13964 from neheb/lxc2Rosen Penev2020-11-19
|\ \ \ \ | | | | | | | | | | lxc: update to 4.0.5
| * | | | lxc: update to 4.0.5Rosen Penev2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refreshed patches. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | gnupg2: package gnupg2-dirmngrDaniel Golle2020-11-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | dirmngr is needed to download keys from keyservers. That being a useful thing, let's package dirmngr. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | canutils: update to 2020.11.0Rosen Penev2020-11-19
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Renamed j* tools to their new versions. Remove upstreamed patches. Add missing time.h header. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | open-plc-utils: update to latest upstream versionMichael Heimpold2020-11-19
| | | | | | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | podman: ship storage.conf and use runc by default for nowDaniel Golle2020-11-19
| |_|/ |/| | | | | | | | | | | | | | | | | Ship podman with defaults more coherent with user expectations and more likely to work out-of-the-box. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | mariadb: Update to 10.4.17Michal Hrusecky2020-11-16
| |/ |/| | | | | | | | | Update to the latest version from 10.4 series Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* | inotify-tools: update to 3.20.11.0Daniel Golle2020-11-15
| | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | Merge pull request #13796 from G-M0N3Y-2503/docker-blocked-interfacesFlorian Eckert2020-11-11
|\ \ | | | | | | docker-ce: Added blocked_interfaces config option
| * | docker-ce: blocked_interfaces releaseGerard Ryan2020-11-11
| | | | | | | | | | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
| * | docker-ce: Added blocked_interfaces config optionGerard Ryan2020-11-11
| | | | | | | | | | | | | | | | | | | | | | | | * blocked_interfaces blocks all packets to docker0 from the given interface. This is needed because all the iptables commands dockerd adds operate before any of the fw3 generated rules. Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
| * | docker-ce: Refactored init scriptGerard Ryan2020-11-11
| | | | | | | | | | | | | | | | | | | | | * Changed iptables commands to use long options * Added `uci_quiet` in missed instances Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
| * | docker-ce: Added mkdir for alt_config_fileGerard Ryan2020-11-11
| | | | | | | | | | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
| * | docker-ce: Made some shellcheck recommendationsGerard Ryan2020-11-11
| | | | | | | | | | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* | | podman: set PKG_USE_MIPS16:=0Daniel Golle2020-11-11
| | | | | | | | | | | | | | | | | | | | | podman fails to compile due to MIPS16 instructions somehow. Disable use of MIPS16. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | cni-plugins: set PKG_USE_MIPS16:=0Daniel Golle2020-11-11
| | | | | | | | | | | | | | | | | | | | | cni-plugins fail to compile due to MIPS16 instructions somehow. Don't use them. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | cni: set PKG_USE_MIPS16:=0Daniel Golle2020-11-11
| | | | | | | | | | | | | | | | | | Compiling cni failes due to MIPS16 somehow. Disable it. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | Merge pull request #13790 from zhanhb/procps-ng-alternativesRosen Penev2020-11-10
|\ \ \ | | | | | | | | procps-ng: update alternatives
| * | | procps-ng: move binaries to /usr/libexecHuangbin Zhan2020-10-27
| | | | | | | | | | | | | | | | Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
| * | | procps-ng: fix alternatives of procps-ng-sysctlHuangbin Zhan2020-10-27
| | | | | | | | | | | | | | | | | | | | | | | | align with busybox sysctl Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
| * | | procps-ng: move procps-ng-w to /usr/binHuangbin Zhan2020-06-14
| | | | | | | | | | | | | | | | | | | | | | | | procps-ng-w was installed to /bin, which should be an accident. Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* | | | Merge pull request #13779 from bobafetthotmail/patch-1Rosen Penev2020-11-10
|\ \ \ \ | | | | | | | | | | docker-compose: move to Utilities in menuconfig
| * | | | docker-compose: move to Utilities in menuconfigAlberto Bursi2020-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | it makes no sense to show docker-compose sit in Languages -> Python submenu in menuconfig, it is a tool and not a library. Move it to Utilities section like docker-ce also is. Signed-off-by: Alberto Bursi <bobafetthotmail@gmail.com>
* | | | | checksec: update to version 2.4.0Jan Pavlinec2020-11-10
| |_|/ / |/| | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | Merge pull request #13873 from 1715173329/new-yqRosen Penev2020-11-09
|\ \ \ \ | | | | | | | | | | yq: add new package
| * | | | yq: add new packageTianling Shen2020-11-10
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
* | | | | Merge pull request #13807 from PolynomialDivision/fix-node-exporterRosen Penev2020-11-09
|\ \ \ \ \ | | | | | | | | | | | | prometheus-node-exporter-lua: fix hostapd exporter
| * | | | | prometheus-node-exporter-lua: fix hostapd exporterNick Hainke2020-10-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix "hostapd_ubus_stations.lua". The bit-lib that is imported and the one specified as the dependency do not match. Use luabitop. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | cgroupfs-mount: fix symbolic link nameCobalt Chang2020-11-09
| |/ / / / |/| | | | | | | | | | | | | | Fix the symbolic link name to /etc/rc.d/S01cgroupfs-mount.
* | | | | podman: add new packageDaniel Golle2020-11-07
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | cni-plugins: add packageDaniel Golle2020-11-07
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | cni: add packageDaniel Golle2020-11-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Thanks to @aparcar for help with porting this. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Powered by cgit, Themed by Ted Yin.