aboutsummaryrefslogtreecommitdiff
path: root/package/network
Commit message (Collapse)AuthorAge
* dropbear: use ssh-keygen as an alias for dropbearkeySergey Ponomarev2024-05-06
| | | | | | | | | | | | | | | | The DropBear's dropbearkey supports limited set of arguments of OpenSSH ssh-keygen: -t, -q -N -Y After the change you can generate a key with the same command. Still many features of the original OpenSSH ssh-keygen are absent in the dropbearkey. If it's needed then users should install openssh-keygen package that will replace the /usr/bin/ssh-keygen with the full version. Signed-off-by: Sergey Ponomarev <stokito@gmail.com> Link: https://github.com/openwrt/openwrt/pull/14174 [ wrap commit description to 80 columns ] Link: https://github.com/openwrt/openwrt/pull/14174 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* xdp-tools: fix wrong matching for OPENWRT_VERBOSEChristian Marangi2024-05-03
| | | | | | | | | | | To enable verbose log for xdp-tools compilation, we check for "c" in the OPENWRT_VERBOSE, but verbose.mk supports only "w" and "s" for V=1 and V=99. Fix the wrong matching and correctly enable verbose output matching for "s". Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* xdp-tools: refresh patchesChristian Marangi2024-05-03
| | | | | | Refresh xdp-tools patches with make package/xdp-tools/refresh Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* xdp-tools: fix compilation wrongly using host headerChristian Marangi2024-05-01
| | | | | | | | | | | | | | | | | | | | | | Currently it's needed to have gcc-multilib on the host to correctly compile xdp-tools. This is wrong and means that we are using host header to compile a tool. By some searching in how the makefile works it was discovered that BPF_CFLAGS were not used and required to be appended to config.mk Only one single header was added but we should include each BPF_CFLAGS from bpf.mk. To make this some patching to bpf-header were required and some patches to xdp-tools were required. Also it's needed to pass the correct target to BPF_CFLAGS. With the following changes xdp-tools can correctly compile with each header from bpf-headers and should not use any host header. Co-Developed-by: Andre Heider <a.heider@gmail.com> Signed-off-by: Andre Heider <a.heider@gmail.com> Link: https://github.com/openwrt/openwrt/pull/11825 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* hostapd: fix a null pointer dereference in wpa_supplicant on teardownFelix Fietkau2024-05-01
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* uqmi: set dangling-pointer as errorJean Thomas2024-04-28
| | | | | | | With "ebfe8b4 CMakeLists: set no-dangling-pointer" the compilation option is set in uqmi, and can therefore be removed from no-error. Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>
* uqmi: update to git HEADJean Thomas2024-04-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | e7207be uqmi: print radio interfaces in serving system command 6ef41d6 uqmi: create function to print radio interface string e25d042 uqmi: Add basic 5G NR support 3e782be uqmi: sync data from libqmi project 368d46c uqmi: support C reserved keywords in upstream JSON files 02e42c0 reorganize source code in common and uqmi specific parts 4591f0a .gitignore build/ directories 2b57ee1 uqmi: commands-uim: fix uninitialized use of card_application_state 7c77e77 data/code-gen: add support for indications ddbf864 qmi-struct.h: add missing includes 5320c1d move qmi_get_error_str to into utils.c 1503bc7 dev.c: add missing import strings.h bae945f commands-nas: add missing includes 9ffd0e2 commands: make `struct blob_buf status` public a4fbdcc commands-nas: fix gcc warning 8ff632a dev.c: add comment to qmi_request_wait() a043a74 CMakeLists: refactor SOURCES variable to allow later adding uqmid ebfe8b4 CMakeLists: set no-dangling-pointer c47125d CMakeLists: improve generated files 0f64b69 CMakeLists: update cmake minimum version to 3.5 As the built uqmi binary is now moved to a dedicated directory, update the Makefile accordingly. Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>
* hostapd: Fix compile against mbedtsl 3.6Hauke Mehrtens2024-04-28
| | | | | | Fix compile of the mbedtls extension for hostapd. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* package/network/utils/iptables: fix PKG_CPE_IDFabrice Fontaine2024-04-27
| | | | | | | | | | | cpe:/a:netfilter:iptables is the correct CPE ID for iptables: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:netfilter:iptables Fixes: c61a2395140d92cdd37d3d6ee43a765427e8e318 (add PKG_CPE_ID ids to package and tools) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Link: https://github.com/openwrt/openwrt/pull/15297 Signed-off-by: Robert Marko <robimarko@gmail.com>
* package/network/services/dropbear: fix PKG_CPE_IDFabrice Fontaine2024-04-27
| | | | | | | | | | | cpe:/a:dropbear_ssh_project:dropbear_ssh is the correct CPE ID for dropbear: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:dropbear_ssh_project:dropbear_ssh Fixes: c61a2395140d92cdd37d3d6ee43a765427e8e318 (add PKG_CPE_ID ids to package and tools) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Link: https://github.com/openwrt/openwrt/pull/15290 Signed-off-by: Robert Marko <robimarko@gmail.com>
* netifd: packet_steering: fix shell error on unset steering_flows optionFelix Fietkau2024-04-27
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: fix bogus warnings in packet_steering init scriptFelix Fietkau2024-04-27
| | | | | | Avoids warnings if options are unset Signed-off-by: Felix Fietkau <nbd@nbd.name>
* lldpd: fix reload bug: advertisements shall default to onPaul Donald2024-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | Because these capability advertisements default to on in lldpd, they became absent at reload, and not restart, due to how the reload logic works ( keep daemon running, send unconfigured and then the new config via socket ), and it was not evident unless you happened to be looking for it (e.g. via pcap or tcpdump). It was also not evident from the manpage ( have now sent patches upstream ). At reload time, the unconfigure logic disabled them unless they were explicitly enabled (compare with other settings where 'unconfigure' just resets them). Now they default to on/enabled at init time, and are explicitly 'unconfigure'd at startup if the user disables them via: lldp_mgmt_addr_advertisements=0 lldp_capability_advertisements=0 In other words: explicit is necessary to disable the advertisements. The same applies to 'configure system capabilities enabled'. Technically 'unconfigure'd is the default but now it is explicit at reload. Tested on: 23.05.3 Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* ustp: update to Git HEAD (2023-05-29)Paul Donald2024-04-27
| | | | | | a85a5bc83bde netif_utils: correctly close fd on read error Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* netifd: add flow steering mode to the packet steering scriptFelix Fietkau2024-04-26
| | | | | | | This allows directing processing of locally received packets to the CPUs of the tasks receiving them Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: add a packet steering mode matching the old scriptFelix Fietkau2024-04-26
| | | | | | This spreads packet processing across all cores Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bridger: update to Git HEAD (2024-04-22)Felix Fietkau2024-04-22
| | | | | | | ec8c620fd5f4 split bridge-local disable into rx and tx 40b1c5b6be4e flow: do not attempt to offload bridge-local flows Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ppp: add sourcefilter option supportChen Minqiang2024-04-22
| | | | | | | This make source based IPv6 routing option available for ppp/pptp/pppoe/pppoa Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* lldpd: extended interface(s) parsing to handle patternsPaul Donald2024-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | For interface type parameters, the man page documents patterns: ``` *,!eth*,!!eth1 uses all interfaces, except interfaces starting with "eth", but including "eth1". ``` * Renamed `_ifname` to `_l2dev`. * get the l2dev via network_get_physdev (and not l3dev) * Glob pattern `*` is also valid - use noglob for this The net result is that now interface 'names' including globs '*' and '!' inversions are included in the generated lldpd configs. Temporarily `set -o noglob` and then `set +o noglob` to disable & enable globbing respectively, because when we pass `*` as an interface choice, other file and pathnames get sucked in from where the init script runs, and the `*` never makes it to lldpd. Tested extensively on: 22.03.6, 23.05.3 Signed-off-by: Paul Donald <newtwen+github@gmail.com> [ squash with commit bumping release version ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* qmi: add sourcefilter option supportChen Minqiang2024-04-17
| | | | | | This make source based IPv6 routing option available for qmi Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* mbim: add sourcefilter option supportChen Minqiang2024-04-17
| | | | | | This make source based IPv6 routing option available for mbim Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* ncm: add sourcefilter option supportChen Minqiang2024-04-17
| | | | | | This make source based IPv6 routing option available for ncm Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* ipset: update to 7.21Chuanhong Guo2024-04-17
| | | | | | | | | release notes: 7.21: https://www.spinics.net/lists/netfilter-devel/msg85299.html 7.20: https://www.spinics.net/lists/netfilter-devel/msg85120.html 7.19: https://www.spinics.net/lists/netfilter-devel/msg82985.html Signed-off-by: Chuanhong Guo <gch981213@gmail.com>
* ipset: include libgen.h for basenameChuanhong Guo2024-04-17
| | | | | | | musl dropped the GNU version of basename prototype from string.h in 1.2.5. Signed-off-by: Chuanhong Guo <gch981213@gmail.com>
* netifd: add missing error checks to packet steering scriptFelix Fietkau2024-04-15
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bridger: update to Git HEAD (2024-04-15)Felix Fietkau2024-04-15
| | | | | | | | 3159bbe0a2eb improve isolation when selecting a fixed output port c77a7a1ff74d nl: fix getting flow offload stats a08e51e679dd add support for disabling bridge-local flows via config Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: rewrite packet steering scriptFelix Fietkau2024-04-14
| | | | | | | | | | | The new script uses a different strategy compared to the previous one. Instead of trying to split flows by hash and spread them to all CPUs, use RPS to redirect packets to a single core only. Try to spread NAPI thread and RPS target CPUs across available CPUs and try to ensure that the NAPI thread is on a different CPU than the RPS target. This significantly reduces cycles wasted on the scheduler. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: fix a crash corner caseFelix Fietkau2024-04-13
| | | | | | On some setup failures, iface->bss can be NULL Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bpftool: Update to v7.4.0Tony Ambardar2024-04-13
| | | | | | | | | | Update to the latest upstream release to include recent improvements and bugfixes. Update copyright, fix typo in PKG_NAME, and remove unneeded use of MAKE_VARS definition in Makefile. Drop 001-cflags.patch and simplify 002-includes.patch after refreshing. Also simplify LTO/DCE build flags. Link: https://github.com/libbpf/bpftool/releases/tag/v7.4.0 Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* lldpd: make management address advertisement controllablePaul Donald2024-04-12
| | | | | | | | | | Defaults to off. Available from >= 0.7.15 These are sent in TLV Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* lldpd: make capabilities advertisement controllablePaul Donald2024-04-12
| | | | | | | | | | Defaults to off. Only available from >= 1.0.15 These capabilities are sent in TLV. Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* lldpd: note about capabilitiesPaul Donald2024-04-12
| | | | | | | | | only available from >= 1.0.15 Comments are useful. Apparently this config parameter was committed when openwrt used an older version of lldpd which did not yet support it. Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* lldpd: fix restartPaul Donald2024-04-12
| | | | | | | | | | | | | | | | | | | Redirection broke in 5364fe0f01ca ("lldpd: shellcheck fixes") redirects to /dev/null shall be handled correctly (i.e. last). This fixes these errors on `/etc/init.d/lldpd reload`: 2024-03-16T20:39:00 [WARN/lldpctl] unknown command from argument 1: `/dev/null` 2024-03-16T20:39:00 [WARN/lldpctl] unknown command from argument 1: `/dev/null` 2024-03-16T20:39:00 [WARN/lldpctl] unknown command from argument 1: `/dev/null` 2024-03-16T20:39:00 [WARN/lldpctl] unknown command from argument 1: `/dev/null` Tested-on: 22.03.6 Fixes: 5364fe0f01ca ("lldpd: shellcheck fixes") Signed-off-by: Paul Donald <newtwen+github@gmail.com> [ improve commit description, add fixes tag ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* treewide: package: update missed hashes after switch to ZSTDRobert Marko2024-04-07
| | | | | | | | With the switch to ZSTD for git clone packaging, hashes have changed so fixup remaining package hashes that were missed in the inital update. Fixes: b3c1c57 ("treewide: update PKG_MIRROR_HASH to zst") Signed-off-by: Robert Marko <robimarko@gmail.com>
* wifi-scripts: fix creation of IBSS in legacy (non-HT) modeAlexandru Gagniuc2024-04-07
| | | | | | | | | | | | | | | | | | | | | When an IBBS interface is configured for IBSS legacy mode, wdev.htmode is empty. This is empty string results in an empty positional argument to the "ibbs join" command, for example: iw dev phy0-ibss0 ibss join crymesh 2412 '' fixed-freq beacon-interval 100 This empty argument is interpreted as an invalid HT mode by 'iw', causing the entire command to fail and print a "usage" message: daemon.notice netifd: radio0 (4527): Usage: iw [options] \ dev <devname> ibss join <SSID> <freq in MHz> ... Although nobody will ever need more than 640K of IBSS, explicitly use "NOHT" if an HT mode is not given. This fixes the problem. Fixes: e56c5f7b276a ("hostapd: add ucode support, use ucode for the main ubus object") Signed-off-by: Alexandru Gagniuc <mr.nuke.me@gmail.com> Signed-off-by: Felix Fietkau <nbd@nbd.name> [extend to cover more cases]
* treewide: update PKG_MIRROR_HASH to zstPaul Spooren2024-04-06
| | | | | | | When using zst instead of xz, the hash changes. This commit fixes the hash for packages and tools in core. Signed-off-by: Paul Spooren <mail@aparcar.org>
* hostapd: fix Config.in dependenciesFelix Fietkau2024-04-05
| | | | | | | hostapd packages were accidentally left out. Clean up this mess by changing the dependencies to hostapd-common Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: slightly clean up patchesFelix Fietkau2024-04-04
| | | | | | | | - move build/ifdef related changes together to the 200 patch range - reduce adding/removing include statements across patches - move patches away from the 99x patch range to simplify maintenance Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: replace "argument list too long" fix with a simpler versionFelix Fietkau2024-04-04
| | | | | | Less convoluted and more robust Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: remove workaround for broken WPA IEs in ancient devicesFelix Fietkau2024-04-04
| | | | | | Affected devices were already quite old when this patch was added. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: adjust patches to work with git amEneas U de Queiroz2024-04-04
| | | | | | | | | | | | | | | | | This adds From:, Date: and Subject: to patches, allowing one to run 'git am' to import the patches to a hostapd git repository. From: and Date: fields were taken from the OpenWrt commit where the patches were first introduced. Most of the Subject: also followed suit, except for: - 300-noscan.patch: Took the description from the LuCI web interface - 350-nl80211_del_beacon_bss.patch: Used the file name The order of the files in the patch was changed to match what git format-patch does. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* hostapd: remove unused fixEneas U de Queiroz2024-04-04
| | | | | | | | | | | | Patch 050-build_fix.patch fixes the abscence of sha384-kdf.o from the list of needed objetct files when FILS is selected without any other option that will select the .o file. While it is a bug waiting to be fixes upstream, it is not needed for OpenWrt use case, because OWE already selects sha384-kdf.o, and FILS is selected along with OWE. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* hostapd: bump to 2024-03-09Eneas U de Queiroz2024-04-04
| | | | | | | | | | | | | | | | | This brings many changes, including fixes for a couple of memory leaks, and improved interoperability with 802.11r. There are also many changes related to 802.11be, which is not enabled at this time. Fixed upstream: - 022-hostapd-fix-use-of-uninitialized-stack-variables.patch - 180-driver_nl80211-fix-setting-QoS-map-on-secondary-BSSs.patch - 993-2023-10-28-ACS-Fix-typo-in-bw_40-frequency-array.patch Switch PKG_SOURCE_URL to https, since http is not currently working. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com> Tested-by: Ilya Katsnelson <me@0upti.me> Tested by: Andrew Sim <andrewsimz@gmail.com>
* unetd: fix PKG_MIRROR_HASHPaul Spooren2024-04-03
| | | | | | | | | | | | | | | | | | | | | | | Our CI on GitHub as well as my local machine generates a different PKG_MIRROR_HASH from what Felix uploaded the other day. After receiving Felix file, both have indeed different hashes, however when unpackaged via `xz -d` both have the same tarball content. Below the checksums to compare: a62bef497078c7b825f11fc8358c1a43f5db3e6d4b97812044f7653d60747d5b dl/unetd-2024.03.31~80645766.tar.xz fbdac59581742bf208c18995b1d69d9848c93bfce487e57ba780d959e0d62fc4 dl/unetd-2024.03.31~80645766_felix.tar.xz After unpacking: a7189cae90bc600abf3a3bff3620dc17a9143be8c27d27412de6eb66a1cf1b7d dl/unetd-2024.03.31~80645766.tar a7189cae90bc600abf3a3bff3620dc17a9143be8c27d27412de6eb66a1cf1b7d dl/unetd-2024.03.31~80645766_felix.tar The tarball with the wrong hash was accidentally generated without the xz revert to version 5.4.6 Signed-off-by: Paul Spooren <mail@aparcar.org>
* unetd: update to Git HEAD (2024-03-31)Felix Fietkau2024-03-31
| | | | | | | | | | | | | 52144f723bec pex: after receiving data update req, notify peer of local address/port 29aacb9386e0 pex: track indirect hosts (reachable via gateway) as peers without adding them to wg 48049524d4fc pex: do not send peer notifications for hosts with a gateway 12ac684ee22a pex: do not query for hosts with a gateway 203c88857354 pex: fix endian issues on config transfer a29d45c71bca network: fix endian issue in converting port to network id cbbe9d337a17 unet-cli: emit id by default 806457664ab6 unet-cli: strip initial newline in usage message Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: fix Argument list too long build errorRobert Marko2024-03-25
| | | | | | | | | | | | | | | Currently, both CI and local builds of wpa-supplicant will fail with: /bin/sh: Argument list too long Its happening as the argument list for mkdir in build.rules is too large and over the MAX_ARG_STRLEN limit. It seems that recent introduction of APK compatible version schema has increased the argument size and thus pushed it over the limit uncovering the issue. Fixes: e8725a932e16 ("treewide: use APK compatible version schema") Signed-off-by: Robert Marko <robimarko@gmail.com>
* libiwinfo: update to Git HEAD (2024-03-23)Hauke Mehrtens2024-03-23
| | | | | | | 3aa2b6b devices: add device id for MediaTek MT7601U 79a9615 devices: add device id for Realtek RTL8188CU and RTL8188FTV Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mac80211: add missing config for third 160MHz width for 5GHz radioPaweł Owoc2024-03-23
| | | | | | | Without this configuration it is not possible to run the radio using HE160 on channels 149-177. Fixes: #14906 Signed-off-by: Paweł Owoc <frut3k7@gmail.com>
* treewide: use APK compatible version schemaPaul Spooren2024-03-22
| | | | | | | | | | | | | | | | | Different from OPKG, APK uses a deterministic version schema which chips the version into chunks and compares them individually. This enforces a certain schema which was previously entirely flexible. - Releases are added at the very and end prefixed with an `r` like `1.2.3-r3`. - Hashes are prefixed with a `~` like `1.2.3~abc123`. - Dates become semantic versions, like `2024.04.01` - Extra tags are possible like `_git`, `_alpha` and more. For full details see the APK test list: https://gitlab.alpinelinux.org/alpine/apk-tools/-/blob/master/test/version.data Signed-off-by: Paul Spooren <mail@aparcar.org>
* umdns: fix PKG_MIRROR_HASHDaniel Golle2024-03-20
| | | | | | | | PKG_MIRROR_HASH was accidentally generated with already APK-adapted version string in the filename. That can't work (yet). Regenerate and hash the file with the currently used version scheme to fix that. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Powered by cgit, Themed by Ted Yin.