aboutsummaryrefslogtreecommitdiff
path: root/package
Commit message (Collapse)AuthorAge
* uboot-mediatek: update to U-Boot 2024.01 releaseDaniel Golle2024-02-15
| | | | | | | | Rebase local patches on top of quarterly timed release, allowing to drop numerous patches which have been accepted upstream since the release of U-Boot 2023.07.02. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* uboot-mediatek: add build for BPi-R4Daniel Golle2024-02-15
| | | | | | | Add build for the BananaPi R4 board which can boot from micro SD, SPI-NAND or eMMC. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* uboot-mediatek: mt7988: set rootdisk according to boot deviceDaniel Golle2024-02-15
| | | | | | | If nodes /chosen/rootdisk-${bootdevice} exists, set /chosen/rootdisk phandle according to boot device selected by the bootstrap pins. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* uboot-mediatek: fix MMC erase timeoutDaniel Golle2024-02-15
| | | | | | | | When erasing large amounts of blocks at once this can take a long time on slow cards. Instead of a fixed timeout, wait longer if more blocks are being erased. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* uboot-mediatek: add basic build for ZBT-WG3526 (MT7621, 16M SPI-NOR)Daniel Golle2024-02-15
| | | | | | | | | Add basic U-Boot drop-in replacement compatible with the flash layout of the vendor loader of the Zbtlink WG3526 (16M) MT7621 router board. The idea here is a to have a reference build of uboot-mediatek also for a simple MIPS boards more popular than MT7621 RFB. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* package: add fitblk util to release /dev/fit* devicesDaniel Golle2024-02-15
| | | | | | | | | Add minimalistic tool to allow releasing /dev/fit* devices which is needed on sysupgrade when using the fitblk driver. The package is hidden in menuconfig, it should only be selected by adding it to the default package selection of boards using it. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* arm-trusted-firmware-mediatek: use UBI on new NAND targetsDaniel Golle2024-02-15
| | | | | | | | | | Make use of recently added UBI support in MediaTek's ARM TrustedFirmware-A on new MT7988 SoC. Load fip from static UBI volume instead of fixed offset on SPIM-NAND and SNFI. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* arm-trusted-firmware-mediatek: set HIDDEN=yDaniel Golle2024-02-15
| | | | | | | | Hide arm-trusted-firmware-mediatek packages from interactive config. Exposing them only causes confusion and needed variants are anyway selected as dependencies by uboot-mediatek packages. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* ipq807x: add support for CMCC RM2-6Chukun Pan2024-02-15
| | | | | | | | | | | | | | | | | | Hardware specifications: SoC: Qualcomm IPQ8070A RAM: 512MB of DDR3 Flash: 256MB Micron NAND Ethernet: 2x 1G RJ45 port WiFi1: QCN5024 2x2 2.4GHz WiFi2: QCN5054 2x2 5GHz Fan: 1x GPIO controlled Button: Reset, WPS Flash instructions: Upload factory.bin in stock firmware's upgrade page. Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn> Reviewed-by: Robert Marko <robimarko@gmail.com>
* qca-ssdk: drop not used Malibu PHY patchRobert Marko2024-02-15
| | | | | | | Now that Malibu (QCA807x) PHY-s use an upstream driver we dont need support for defining address of the first PHY in the package so drop the patch. Signed-off-by: Robert Marko <robimarko@gmail.com>
* ugps: update to Git HEAD (2024-02-14)Petr Štetiar2024-02-14
| | | | | | 69561a074d6f ugps: add quality measurement parameters Signed-off-by: Petr Štetiar <ynezz@true.cz>
* wifi-scripts: create the wlan object in board_data if not presentFelix Fietkau2024-02-13
| | | | | | Fixes an error in wifi detection Signed-off-by: Felix Fietkau <nbd@nbd.name>
* ucode: update to Git HEAD (2024-02-13)Jo-Philipp Wich2024-02-13
| | | | | | | | | | | | | 7e5830edfb38 nl80211: fix datatype of NL80211_BAND_IFTYPE_ATTR_HE_CAP_{MAC,PHY} attrs 5c8fd34bac42 nl80211: fix parsing of NL80211_BAND_ATTR_VHT_MCS_SET attribute e8d4e4fe967d nl80211: fix decoding of NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET attribute 30a3f7ad0433 rtnl: store callback in listener registry only on success 9cbe8294909f rtnl: optimize reception of rtnl events 534417132e18 rtnl: increase event socket rx buffer size limit to 1 MiB 3f9811d2f7b7 compiler: close upvalues on loop control statements Fixes: https://github.com/jow-/ucode.git/issues/187 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* libxml2: update to 2.12.5Nick Hainke2024-02-13
| | | | | | | | Release Notes: https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.5 Fixes: CVE-2024-25062 Signed-off-by: Nick Hainke <vincent@systemli.org>
* binutils: update to 2.42Nick Hainke2024-02-12
| | | | | | | Refresh patch: - 001-replace-attribute_const.patch Signed-off-by: Nick Hainke <vincent@systemli.org>
* base-files: move uci_set_poe() to uci-defaults.shSander Vanheule2024-02-12
| | | | | | | | | PoE devices in the realtek target have the possibility to add PSE info to the board description via 02_network. Make this available for all targets, by moving the uci_set_poe() function to the globally available uci-default.sh script. Signed-off-by: Sander Vanheule <sander@svanheule.net>
* qca-ssdk: drop deprecated Xiaomi LEDs quirk patchChristian Marangi2024-02-11
| | | | | | | Drop deprecated Xiaomi LEDs quirk patches as they are not needed anymore as LEDs are now supported by the upstream qca807x driver. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* qca-ssdk: add patch to support detection of PSGMII mode for PHYChristian Marangi2024-02-11
| | | | | | | | | | | If a PHY doesn't use the integrated driver, SSDK use poll the phydev to get the real PHY mode. qca807x use PSGMII as PHY mode and this specific mode is not detected in qca SSDK while used in the entire driver. Add support for it in the hsl_port_phydev_interface_mode_status_get function used to translate PHY mode to the internal SSDK value. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* qca-ssdk: disable Malibu PHY in favor of upstream versionChristian Marangi2024-02-11
| | | | | | | | | | Disable Malibu PHY driver in Qca SSDK in favor of the upstream version. The same workaround are applied and the version upstream is just a drop in replacement and is well tested from the ipq40xx target. Also using the upstream version permits further support for LEDs. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* uboot-envtools: backport some usefull patches from v2024.04-rc1Shiji Yang2024-02-11
| | | | | | | | Highlights: - Silence small page read warning. - Autodetect NAND erase size and env sectors. Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* qca-ssdk: add support for ipq60xxRobert Marko2024-02-09
| | | | | | | | | IPQ60xx uses a different codename for SSDK, so lets pass the correct one as otherwise SSDK asumes we are building for the old MIPS SoC-s. Signed-off-by: Robert Marko <robimarko@gmail.com> [ drop outdated commit description info ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* uboot-envtools: update to 2024.01Nick Hainke2024-02-09
| | | | | | | | | Update to latest version. Refresh patches: - 002-Revert-tools-env-use-run-to-store-lockfile.patch Signed-off-by: Nick Hainke <vincent@systemli.org>
* wifi-scripts: fix fullmac phy detectionFelix Fietkau2024-02-09
| | | | | | | | | Checking for AP_VLAN misdetects ath10k-ath12k as fullmac, because of software crypto limitations. Check for monitor mode support instead, which is more reliable. Fixes: https://github.com/openwrt/openwrt/issues/14575 Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dropbear: better handle interfacesKonstantin Demin2024-02-09
| | | | | | | | | | - introduce 'DirectInterface' option to bind exactly to specified interface; fixes #9666 and late IPv4/IPv6 address assignment - option 'DirectInterface' takes precedence over 'Interface' - improve interface/address handling, e.g. verify count of listening endpoints due to dropbear limit (10 for now) Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: better handle receive window sizeKonstantin Demin2024-02-09
| | | | | | | | | | - correct maximum receive window size - adjust receive window size against maximum allowed value - warn about too high receive window size in syslog improves f95eecfb Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: adjust file permissionsKonstantin Demin2024-02-09
| | | | | | | | | | | runtime: - adjust ownership/permissions while starting dropbear build time: - correct file permissions for preseed files in $(TOPDIR)/files/etc/dropbear/ (if any) closes #10849 Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: 'rsakeyfile' -> 'keyfile' transitionKonstantin Demin2024-02-09
| | | | | | | | | end users should have done this since OpenWrt 19.07. if they didn't do this yet - perform auto-transition. schedule 'rsakeyfile' removal for next year release. Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: failsafe: handle all supported key typesKonstantin Demin2024-02-09
| | | | | | dropbear may be configured and compiled with support for different host key types Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: minor config reorderKonstantin Demin2024-02-09
| | | | | | move DROPBEAR_ASKPASS under DROPBEAR_DBCLIENT (in all meanings) Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: split U2F/FIDO supportKonstantin Demin2024-02-09
| | | | | | | | these options allow one to configure U2F/FIDO support in more granular way inspired by upstream commit aa6559db Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: add option to enable modern crypto onlyKonstantin Demin2024-02-09
| | | | | | | | | | reduces binary/package size and increases overall performance also: - adjust 910-signkey-fix-use-of-rsa-sha2-256-pubkeys.patch to build without DROPBEAR_RSA/DROPBEAR_RSA_SHA256 Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: adjust allowed shell listKonstantin Demin2024-02-09
| | | | | | this takes an effect only if getusershell(3) is missing Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: honor CONFIG_TARGET_INIT_PATHKonstantin Demin2024-02-09
| | | | | | fixes 65256aee Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: disable two weak kex/mac algorithmsKonstantin Demin2024-02-09
| | | | | | | | | | | | | | | | hmac-sha1 and diffie-hellman-group14-sha1 are weak algorithms. A future deprecation notice of ssh-rsa (2048-bit) has been issued. [1] It has no place in a potentially internet-facing daemon like dropbear. Upstream has acknowledged this and offered this solution to disable these two until this is made to be the default in the next release of dropbear next year. [2] 1. https://www.openssh.com/txt/release-8.2 2. https://github.com/mkj/dropbear/issues/138 Signed-off-by: John Audia <therealgraysky@proton.me> Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: minor config clarificationKonstantin Demin2024-02-09
| | | | | | | | | | - "default n" is not needed: options are not selected by default - wrap config on 80 characters width (assuming tab is 8 characters long) - add feature cost size and security notes for DROPBEAR_AGENTFORWARD and DROPBEAR_DBCLIENT_AGENTFORWARD: describe why and where it should be disabled Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: better object cleanupKonstantin Demin2024-02-09
| | | | | | improves b78aae79 Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: allow more complex configurationKonstantin Demin2024-02-09
| | | | | | | | | | | | | | - switch DB_OPT_COMMON and DB_OPT_CONFIG to comma-separated lists: this allows to have values with "|" in DB_OPT_COMMON and DB_OPT_CONFIG which is more likely to be than values with commas; use $(comma) variable for values with commas. - sort DB_OPT_COMMON and DB_OPT_CONFIG to have "overrides" on top of list. - allow DB_OPT_COMMON to have values with commas. - allow to replace multiline definitions in sysoptions.h. improves e1bd9645 Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: cherry-pick upstream patchesKonstantin Demin2024-02-09
| | | | | | | | | | | | | | | | | | | | | | critical fixes: - libtommath: possible integer overflow (CVE-2023-36328) - implement Strict KEX mode (CVE-2023-48795) various fixes: - fix DROPBEAR_DSS and DROPBEAR_RSA config options - y2038 issues - remove SO_LINGER socket option - make banner reading failure non-fatal - fix "noremotetcp" behavior - don't try to shutdown a pty - fix test for multiuser kernels adds new features: - option to bind to interface - allow inetd with non-syslog - ignore unsupported command line options with dropbearkey Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* dropbear: bump to 2022.83Konstantin Demin2024-02-09
| | | | | | | | | | | | - update dropbear to latest stable 2022.83; for the changes see https://matt.ucc.asn.au/dropbear/CHANGES - drop patches: - 001-fix-MAX_UNAUTH_CLIENTS-regression.patch - rework patches: - 901-bundled-libs-cflags.patch - refresh remaining patches Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* lldpd: add option to force EDPStephen Howell2024-02-08
| | | | | | allow EDP support if compiled and add force EDP option Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: only use snmp options when compiled inStephen Howell2024-02-08
| | | | | | prevent SNMP options being passed unless lldpd supports them Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: Update Makefile package releaseStephen Howell2024-02-08
| | | | | | increment Makefile package release to reflect changes to init script Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: add option for tx delay and tx holdStephen Howell2024-02-08
| | | | | | add option to set LLDP transmit delay, hold timers to set update frequency Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: add option to set system platformStephen Howell2024-02-08
| | | | | | add option to override system platform instead of using kernel name Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: add option to force SONMP enabledStephen Howell2024-02-08
| | | | | | add option to force SONMP to be enabled even when no peer detected Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: add option to force FDP onStephen Howell2024-02-08
| | | | | | add option to force FDP when no peers detected Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: set CDP version and allow forcing CDP onStephen Howell2024-02-08
| | | | | | add option to specify CDPv1 or CDPv2 and separately enable or force each Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: allow disabling LLDP protcolStephen Howell2024-02-08
| | | | | | add option to allow LLDP disabling while using other supported protocols Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: add portidsubtype optionStephen Howell2024-02-08
| | | | | | add option portidsubtype to correct port identifiers and descriptions Signed-off-by: Stephen Howell <howels@allthatwemight.be>
* lldpd: add agent-type optionStephen Howell2024-02-08
| | | | | | add option to set agent-type to control propogation Signed-off-by: Stephen Howell <howels@allthatwemight.be>