| Commit message (Collapse) | Author | Age |
|
|
|
|
| |
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
|
|
|
|
|
|
| |
Update nano editor to version 5.4.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
|
|\
| |
| |
| |
| | |
G-M0N3Y-2503/docker-blocked-interface-allow-outbound
docker-ce: Added firewall.extra_iptables_args
|
| |
| |
| |
| |
| |
| |
| |
| | |
This is a convenience argument to primarily facilitate outbound wan
connections from a docker container. However, all docker containers
can't bidirectionally communicate with the internet by default.
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
|
|\ \
| | |
| | | |
open-vm-tools: update to 11.2.0
|
| | |
| | |
| | |
| | |
| | |
| | | |
Refreshed patches.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \
| | | |
| | | | |
tcsh: update to 6.22.03
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Remove upstreamed patch
Refresh others.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \
| | | |
| | | | |
sumo: update to 1.7.0
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Remove CMAKE_INSTALL as there is no need for InstallDev.
Remove unneeded patches.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|/ /
| |
| |
| |
| |
| | |
Add PKG_BUILD_PARALLEL for faster compilation.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \
| | |
| | | |
crelay: backport patch for use gpio >255
|
| | |
| | |
| | |
| | | |
Signed-off-by: Pawel Dembicki <paweldembicki@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
Some commit in base broke compilation. Adding sysroot fixes it.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \
| | | |
| | | | |
hplip: move back to compiling with libusb
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Some change in base broke compilation with libusb and this package.
From looking at it more carefully, it turns out that the libusb patch
needs to be updated so that host paths are not used.
libusb-compat also depends on libusb, which increases the overall
installed size.
Refreshed patches with make package/hplip/refresh .
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
whois: fix noidn patch
|
| |/ / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
If no idn2 but idn is present, it picks it up. Just remove the whole
thing.
Refreshed patches.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
It's useless and it's only used by this package. Just link it
statically.
Remove CMAKE_INSTALL as InstallDev section is gone.
Add PKG_BUILD_PARALLEL for faster compilation.
Put license information up as there are no longer 2 packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
| |/
|/|
| |
| |
| |
| |
| |
| |
| | |
Some change to base broke compilation. From looking at the CFLAGS,
hplip tries to use the host libusb.
libusb-compat seems to work properly. So use that.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Thorsten Glaser <tg@mirbsd.org>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
also
• update description
• drop “-c lto”, this option is gone from Build.sh
• add missing $(TARGET_CPPFLAGS)
Signed-off-by: Thorsten Glaser <tg@mirbsd.org>
|
| |
| |
| |
| |
| |
| | |
This patch allows to build coremark with multithreading support.
Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>
|
|\ \
| | |
| | | |
lsof: update to 4.94.0
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Upstream switched to GitHub and changed their tarball. Adjusted.
Refreshed patches.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \
| | | |
| | | | |
coremark: bump to 2020-09-16
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>
|
|\ \ \ \
| | | | |
| | | | | |
watchcat: add nopingtime option + refactoring
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
nopingtime UCI option rationale:
I want relatively fast reaction(i.e. 1m or 2m) for 'no internet' condition,
but i don't want my router to reboot every 1 minute if there is still no
internet after reboot.
initd_watchcat:
* add: nopingtime uci option support
* add: defaults to all non-critical options
* add: log warnings for non-critical errors(when option is missed and
default is applyed)
* fix: error handling and config_get defaults are somtimes in conflict
because of config_get defaults. They are gone now, error handling improved.
* fix: calling watchcat.sh with 'period' mode instead of 'ping'. Typo?
* fix: pingperiod default changed from period/20 to more reasonable period/5
watchcat.sh:
* add: nopingtime uci option support( sleep if uptime < nopingtime )
* remove: [ "$mode" = "allways" ] && mode="always" - not needed, already
done by initd_watchcat in load_watchcat() func
* add: echo 1 > /proc/sys/kernel/sysrq before sysrq-trigger
* refactor: eliminated once used not needed variables, code size reduced.
* PKG_RELEASE bumped up
Signed-off-by: Vasily Trotzky <trotzky.vas@gmail.com>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
fio: update to 3.24
|
| | |_|/ /
| |/| | |
| | | | |
| | | | | |
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|/ / / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Use PKG_INSTALL and PKG_BUILD_PARALLEL for consistency.
Rebase patch.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
| |/ /
|/| |
| | |
| | | |
Signed-off-by: Bruno Randolf <br1@einfach.org>
|
|\ \ \
| | | |
| | | | |
grep: update to 3.6
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
oath-toolkit: update to 2.6.4
|
| |/ / /
| | | |
| | | |
| | | |
| | | |
| | | | |
remove upstreamed patch.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
sysstat: update to 12.4.1
|
| |/ / /
| | | |
| | | |
| | | | |
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|/ / /
| | |
| | |
| | |
| | |
| | | |
Add license information.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \
| | | |
| | | | |
docker-ce: disable docker iptables changes
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Deleting rules that docker has created is error-prone, because with
every update docker we have to check if anything has changed.
Cleaning up the firewall rules is part of the docker and should and must be
cleaned up and handeled by them when the service is terminated.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
If docker-ce handles the firewall and fw3 is not envolved because the
rules get not proceed, then not only docker0 should be handled but also
other interfaces and therefore other docker networks.
This commit extends the handling and introduces a new uci option
`device` in the docker config firewall section. This can be used to specify
which device is allowed to access the container. Up to now only docker0
is covert.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
As the protocol is set to none, this makes no sense here, as it cannot
be controlled and thus processed by the netifd.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Set proto from `static` to `none`. This makes it clear that this
interface is not handled by the netifd.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Openwrt has a own firewall service called fw3, that supports firewall zones.
Docker can bypass the handling of the zone rules in openwrt via custom
tables. These are "always" processed before the openwrt firewall.
Which is prone to errors!
Since not everyone is aware that the firewall of openwrt will
not be passed. And this is a security problem because a mapped port is
visible on all interfaces and so also on the WAN side.
If the firewall handling in docker is switched off, then the port in
fw3 must be explicitly released and it cannot happen that the
port is accidentally exported to the outside world via the interfaces on
the WAN zone.
So all rules for the containers should and so must be made in fw3.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Up to now only the docker0 interface and bridge is created by default.
In order to create other interfaces and to integrate them into the
openwrt these functions can now be called with arguments.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
|
|\ \ \ \
| | | | |
| | | | | |
hwinfo: update to version 21.71
|