Make sure '-rcX' suffix is recognized as being a lower version than
the release.
Detect per-branch snapshot version by matching the version name string.
Clean up here and there.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Automatically select image root filesystem type and allow the user
to override that choice using the new '-F' command line option.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Follow the @aparcar's withlist:
- [x] Print URL of used server when searching for an update
- [x] Implement `-y` option which automatically accepts changes
- [x] Implement `-r` option which doesn't check for package upgrades but only new releases
- [x] Print link or created image to be downloadable by the user from a browser/curl.
Also allow selecting branch and version manually.
Fixes: #16324
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This fixes build problem introduced in commit 9a1bb4baf5 ("stress-ng: bump to version 0.13.00"):
Package stress-ng is missing dependencies for the following libraries:
libkmod.so.2
Fixes: 9a1bb4baf5 ("stress-ng: bump to version 0.13.00")
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
clocate is a small utility to determinethe location of a
802.11 capable device by using a remote locator service
(Mozilla or Google).
Signed-off-by: David Bauer <mail@david-bauer.net>
Changing a volume right after activation doesn't work well due to some
caching or race-condition issue.
Perform activation as last lvchange operation as a work-around.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* genrate UCI fstab configs for each volume before first 'up'
* remove UCI section on volume remove
* use autofs automounter for read-only volumes
* try umount on 'down'
* emulate hotplug events for UBI volume up/down
* more robust error paths
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
We previously did not identify the correct BSS from the output of
`hostapd_cli -i <phy> status`, because when asked for a vif it will
always respond with information relevant to the whole phy.
The per vif settings will use an iterator and we now try to detect
the correct BSS from that output.
Signed-off-by: Martin Weinelt <hexa@darmstadt.ccc.de>
Switch URL to new upstream.
Switch to AUTORELEASE for simplicity.
Removed most patches as they have been upstreamed. Rebased the remaining
one.
Fixed license information.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
* lvm: remove left-over ubus events
* lvm: resolve /dev/dm-* device name
As block-mount and blockd now use /dev/dm-* names, let uvol also return
those device names.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
- use $(INSTALL_DIR) instead of mkdir
- using $(INSTALL_CONF) and then running chmod is pointless, use
$(INSTALL_DATA) directly
- /etc/xinetd.d/sane-port doesn't need read protection from non-root
users, use $(INSTALL_DATA) as well
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
On some build systems (build bots, Debian Buster for example) the
current mechanism in the Build/Install define doesn't run. Replace it
with shell fu that works.
Issue was reported, see [1].
[1] https://github.com/openwrt/packages/issues/16085
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* make sure new volumes are in state 'down' until explicitely
requested to transition to 'up' state. Useful for additional
verification steps after writing a read-only volume.
* remove unused ubus events as blockd does that much better now
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Using GPT/UUID parition table is not always a possible choice.
Add support for MBR/DOS partitioned disks to make autopart work on
legacy targets like mt7623.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
By default, there was used sks-keyservers.net pool, which has invalid
SSL certificate and they also announced that their service is deprecate
and no longer maintained.
Use the same GPG server as LXC is using by default in the newer
releases.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
To allow cross matching bssids between different exporters we need to
use the same case, as label matching is case senstive.
Signed-off-by: Martin Weinelt <hexa@darmstadt.ccc.de>
There was a corner case, when a vif had no stations, that
evaluate_metrics for a station that was nil and had no collected metrics
would have been called.
Comment the code, to make it easier to understand and follow, and
simplify some variable names along the way.
Signed-off-by: Martin Weinelt <hexa@darmstadt.ccc.de>
Normalizes metrics according to the Prometheus upstream metric
guidelines available at https://prometheus.io/docs/practices/naming/.
Drops the `hostapd_station_wpa` metric, because it is misleading, as it
is not a differentiator between WPA versions, like one could be led to
assume.
Exposes more flags in a more consistent manner. Their metric was
previously only exposed if the flag was present, but not if it wasn't.
The same applies issue was fixed with regards to vht caps.
After this commit the following breaking changes are in place:
- All flags have been moved below `hostapd_station_flags_$flagname`:
- `hostapd_station_ht` is now `hostapd_station_flag_ht`
- `hostapd_station_mfp` is now `hostapd_station_flag_mfp`
- `hostapd_station_vht` is now `hostapd_station_flag_vht`
- `hostapd_station_wmm` is now `hostapd_station_flag_wmm`
- New flags have been exposed:
- `hostapd_station_flag_he` for high-efficency connections
- `hostapd_station_flag_short_preamble` for short preamble connections
- `hostapd_station_flag_auth` for authentication state
- `hostapd_station_flag_assoc` for association state
- Some metrics have had their unit normalized to the SI base unit or
embedded into the metrics name:
- `hostapd_station_inactive_msec` is now
`hostapd_station_inactive_seconds`, the value is still float64 and
as such has enough precision anyway, but becomes easier to reason
about
- `hostapd_station_connected_time` has been renamed to
`hostapd_station_connected_seconds_total` so the unit, as well as
the nature of the counter is reflected
- `hostapd_station_signal` now includes its unit and is therefore
named `hostapd_station_signal_dbm`
- The packet counter metrics have been normalized to what the node
exporter uses, so it is more in line with the defaults in the
Prometheus ecosystem:
- `hostapd_station_rx_packets` is now
`hostapd_station_receive_packets_total`
- `hostapd_station_rx_bytes` is now
`hostapd_station_receive_bytes_total`
- `hostapd_station_tx_packets` is now
`hostapd_station_transmit_packets_total`
- `hostapd_station_tx_bytes` is now
`hostapd_station_transmit_bytes_total`
Signed-off-by: Martin Weinelt <hexa@darmstadt.ccc.de>
An empty line has a name and value that is nil and setting a table
index to nil breaks metrics for every vif after the first one.
Signed-off-by: Martin Weinelt <hexa@darmstadt.ccc.de>
Correlating data is only possible when we have more metadata, this adds
a bunch of labels for each client, that will increase the depth of
dashboards yet to come.
In particular the changes in this commit are:
- renames the `ifname` label to `vif`
- adds `frequency`, `channel`, `bssid`, `ssid`, `encryption` and `mode`
Signed-off-by: Martin Weinelt <hexa@darmstadt.ccc.de>
Free and total bytes are now properly returned as bytes by LVM2 as
requested. No longer multiply values.
Fix parameter order of 'create' command in usage output while at it.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
The previous approach was to uncompress N times a big tarball (638 MB)
where N=130 is the number of supported languages. Each iteration would
only extract a single file, but it still needs to uncompress the whole
tarball. This is of course completely inefficient.
Now, we uncompress the tarball only once to extract all relevant files,
and then iterate N times to copy the file needed for each language.
This massively speeds up builds, at the expense of temporarily requiring
more build space (about 1 GB more)
Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
This fixes support for x86, auc now selects the right combined image
depending on the system being booted in EFI mode or not.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
The fix requires the use of the generated dnsmasq `lancache.conf` file.
So I moved configuration of the hosts directory out of the UCI and into
the generated dnsmasq configuration file to simplify the script.
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
Running podman as users other than root seems to require that those
users can read /usr/share/containers/seccomp.json. This change sets the
permissions on that file to match those used on Fedora.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
No longer fail in case a package is part of multiple lists (which may
happen temporarily in case it becomes 'nonshared').
Bump version to prepare for sync accross branches.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* don't segfault if server reply is incomplete
* always request 'generic' image on x86/generic and x86/64
* make SNAPSHOT branches sticky, eg. stay on 21.02-SNAPSHOT and do
not 'upgrade' to 21.02.0-rc2.
* output requested server URL when debugging
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
squashfs-tools aren't of much use without xz compression support
on OpenWrt, as we build kernel with squashfs supporting only xz.
Enabled support for xz compression by default.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* quotes around all variables
* always use 'read -r' instead of 'read'
* some more minor shellcheck fixes
* reorder LVM ops for 'up' call to allow it to succeed
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This is a security release that fixes a single bug:
- tighten up plugin-finding logic (#811)
Users of libcni are strongly encouraged to update.
Added me to list of maintainers as requested by @dangowrt.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
Patch fixing segfaults on nulls was removed due to patch's content being now included in conmon's source since containers/conmon@355dbf1
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
The sysroot has to point to the toolchain directory. The directory
includes libraries like libm. However, the STAGING_DIR needs to be
added to the CFLAGS.
Fixes#15773
[As suggested by jow]
Signed-off-by: Nick Hainke <vincent@systemli.org>
Added a small patch to fix compilation.
Renamed patch files to have a .patch suffix. Makes them easier to read
with vim and probably IDEs.
Remove UCLIBC depend since it's no longer present.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
gpsd-utils include management tools for GPS daemon - and this commmit
particularly introduces gpsdctl to add/remove device from the GPS
daemon's device list over control socket.
Signed-off-by: ekathva advaita <ekathva@hotmail.com>
Running podman as users other than root seems to require that those
users can read the configuration files in /etc/containers. This change
sets the permissions of /etc/containers and its contents to match those
used on Fedora.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Miscellaneous:
- Remove prompt to use docker compose in the up command
- Bump py to 1.10.0 in requirements-indirect.txt
Signed-off-by: Javier Marcet <javier@marcet.info>
* Use $(COMMITCOUNT)
* Use SPDX
* Use CA (ucert) public key
* Update repo link
* Update maintainer email
* Format description
Signed-off-by: Paul Spooren <mail@aparcar.org>
Using strcmp() to compare a version string doesn't work well.
Use verrevcmp() function from opkg instead.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Use sfdisk to get GPT partition by name as partition names are not
known by the kernel if added via partx.
Make sure physical volume names are unique, if possible correlate
with the disks serial number and/or card's cid.
mkf2fs apparently returns 134 even in case format succeeded, so don't
fail in that case (this fixes rw volumes large enough for F2FS to be
selected by the lvm scripts of uvol).
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
- Add support for AppArmor
- Gracefully stop containers and pods on shutdown
I found out that If you change location of containers to persistent storage instead of tmpfs, starting them will fail unless they have been stopped. If this is the case that reboot has occurred before pods and containers have been stopped, they cannot be started, they have to be removed and re-created. Change in initscript tries to avoid that. Even if containers are running at tmpfs, this won't hurt. Still, if something happens and system hangs/reboots/etc, script won't save you from that. It's just a attempt to make things better.
I also enabled AppArmor support for future possibilities.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
Currently, this package can not be installed while using standard path
of busybox, because binary killall wants to be installed on the same
location as busybox.
Collision:
• /usr/bin/killall: busybox (new-file), psmisc (existing-file)
Many of these binaries, which provides alternatives were moved to
folder /usr/libexec like wget, sed, findutils, less.
So I moved killall to /usr/libexec and others leave in touch and added
ALTERNATIVES for it, because preinstall script is no longer necessary.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Emmit ubus events when volumes come up/down.
Make sure volume state is always well defined by introducing
additional state 'write-prepare' (wp) during mkfs.
Add init scripts to bring up volumes at boot.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
HAVE_LIBPCIACCESS that is currently passed through MAKE_VARS to disable
building with libpciaccess can't be set through the environment.
Instead, use CONFIG_CON_PCI, which can be passed through the environment
and will disable libpciaccess.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Switch to AUTORELEASE for simplicity.
Use autotools build.
Remove upstream patch.
Minor cleanups for consistency between packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Make sure filesystem is ready when volume becomes available.
Use 'write-once' as initial state for read-only volumes, only allow
writing to volumes in that state and transision to 'read-only' once
write has completed.
Also fix a typo which prevented 'list' command from working with LVM.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Bugs:
- Fix for invalid handler warning on Windows builds
- Fix config hash to trigger container recreation on IPC mode updates
- Fix conversion map for placement.max_replicas_per_node
- Remove extra scan suggestion on build
Signed-off-by: Javier Marcet <javier@marcet.info>
Features:
- Add profile filter to docker-compose config
- Add a depends_on condition to wait for successful service completion
Miscellaneous:
- Add image scan message on build
- Update warning message for --no-ansi to mention --ansi never as alternative
- Bump docker-py to 5.0.0
- Bump PyYAML to 5.4.1
- Bump python-dotenv to 0.17.0
Signed-off-by: Javier Marcet <javier@marcet.info>
The package needs libseccomp, which does not currently support arc.
In order to avoid a circular dependency, we must avoid arc here as well.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
modbus-utils was not intended to be added at this stage. Remove it.
Fixes: 312594f86 ("uvol: add new package")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
uvol is a wrapper-script which allows automated handling of storage
volumes. uvol currently comes with backend support for LVM2 and UBI,
covering practically all options for storage large enough to be
managed (NAND, SPI-NAND, eMMC, SATA, NVME, virtio-blk, ...).
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This was probably a work-around for an issue with dependencies which
was fixed by
988ed00802
Remove it as all other packages with `-selinux` variants do provide
a non-SELinux-variant without any suffix and that works now, see
procd vs. procd-selinux
busybox vs. busybox-selinux
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Instead of just appending the driver serial including the '0x' prefix,
use '-' prefix instead to make it more readable.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
The 'autopart' package is intended for devices with rather large
block device storage (ie. SATA or MMC).
It automatically allocates the free space on the block device used
for booting into an LVM2 physical volume.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
crun is the prefered container run-time of podman, it's faster than
runc and has a much lower memory footprint.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* Updated the .ga TLD server.
* Removed the .cd and cf TLD servers.
* Removed 72 new gTLDs which are no longer active.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Ariadne Conill (1):
database: do not chroot(".") unless actually necessary
Martin Vahlensieck (1):
Use correct port when redirected
Timo Teräs (5):
db: fix control character check to use uint8_t
libfetch: send Proxy-Authorization also for https connect
del: report correctly package's provides names
Signed-off-by: Paul Spooren <mail@aparcar.org>
faster to compile.
A small selection of packages was tested going from:
Executed in 696.30 secs fish external
usr time 82.98 mins 395.00 micros 82.98 mins
sys time 9.02 mins 0.00 micros 9.02 mins
to:
Executed in 592.20 secs fish external
usr time 84.84 mins 361.00 micros 84.84 mins
sys time 8.85 mins 57.00 micros 8.85 mins
Tested by running make -j 12 and wiping staging/build_dir/target_x
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Bugs:
- Make --env-file relative to the current working directory and error out for
invalid paths. Environment file paths set with --env-file are relative to the
current working directory while the default .env file is located in the project
directory which by default is the base directory of the Compose file.
- Fix missing service property storage_opt by updating the compose schema
- Fix build extra_hosts list format
- Remove extra error message on exec
- Fix OpenSSL version mismatch error when shelling out to the ssh client
- Add missing build flags to the native builder: platform, isolation and
extra_hosts
- Remove info message on native build
- Avoid fetching logs when service logging driver is set to 'none'
Miscellaneous:
- Add compose.yml and compose.yaml to default filename list
Signed-off-by: Javier Marcet <javier@marcet.info>
Switch to AUTORELEASE for simplicity.
Add libarchive dependency since it's now used.
Build with ninja for faster compilation.
Refresh SIMD CMake patch and add musl patch.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Switch to AUTORELEASE for simplicity.
Switch to building with Ninja for faster speed.
Several cleanups for consistency between packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Changelog [1]:
Version 1.09
* Explicitly set the controlling TTY
Version 1.08
* Report when IP key has changed
* Scrub the environment variable for -e
Version 1.07
* Pass signals that should terminate to ssh
* Fix race around signal handling
* Report IPC errors to stderr
* Report if can't open -f password file
[1] https://sourceforge.net/p/sshpass/code/76/tree/trunk/ChangeLog
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Enables the compiler option that collectd is compiled with
debugging support. This is used at development stages to get
more messages from the collectd during development.
This option is default disabled.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
On my system the attribute DEVTYPE was not set. The plugin could not
read any data and the function call blocked forever on this function and did
not returned. By removing it, all block devices under `/sys/class/block`
were checked.
Block devices that do not support SMART were not evaluated. The
collected displays the following message.
smart plugin: checking SMART status of /dev/loop4.
smart plugin: unable to open /dev/loop4.
If you do not like this message, you could only enable device in the uci that
does support SMART.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* include version_code in request
* include versions of selected packages in request
* add SHA256 verification via busybox sha256sum
* sort attributes in policies alphabetically
* move all API-specific string constants to precompiler macros
* set correct MIME type for JSON post request (application/json)
* output string error message if something goes wrong
* auto-generate version string
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This updates auc to use the new API of the sysupgrade image server.
Package version updates now need to be evaluated locally.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
be065c4b sepolicy: Do not try to load policy on import
8f0f0a28 selinux(8,5): Describe fcontext regular expressions
e12f71e8 python/sepolgen: allow any policy statement in if(n)def
b15dff0f python/semanage: Sort imports in alphabetical order
92e01969 python/semanage: empty stdout before exiting on BrokenPipeError
fadcc839 python/sepolicy: allow to override manpage date
2a60de8e sepolgen: sort extended rules like normal ones
9e239e55 sepolgen: print extended permissions in hexadecimal
ccd973f7 python/audit2allow: add #include <limits.h> to sepolgen-ifgen-attr-helper.c
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
Switched to building with meson as it works better in a parallel
context.
Small Makefile adjustments for consistency.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Avoids having to use msgfmt, which happens to be broken with gettext-full.
msgfmt is used for the desktop gvim application, which is not used here.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
This fixes compiling lxc without seccomp support if libseccomp is
already installed to the staging dir. Patches were applied upstream.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* Since the docker0 is a private network by default we can be
more accepting like the LAN is by default
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* The default server is the default switch so that
queries will go through the hosts dnsmasq by default
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
This adds $STAGING_DIR to library search paths in setup.py, to avoid
picking up host libraries when linking.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add custom meson build since the Makefile requires too much patching
anyway.
Stop using uClibc++. It will be removed in the near future.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Remove upstreamed patches.
Use autorelease to avoid bumping the release manually.
Fix bad linker variable on glibc.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
std::round was unavailable because of a wrong configure var from the
uClibc days. Fixed upstream with 1647790ae6202bd70b199e2aa44f8eb43e8d3af1
Refreshed patches with make package/sane-backends/refresh
Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Moved logic out of config writing
* Made default config only specify OpenWrt dictated defaults
Otherwise, docker defaults can be assumed
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
The crude loop I wrote to come up with this changeset:
find -L package/feeds/packages/ -name patches | \
sed 's/patches$/refresh/' | sort | xargs make
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
We should be using "00" to deal with alphabetical order.
Fixes: e9a126c145 ("rng-tools: start as early as possible")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Raspberry Pi devices (bcm2708) need this to get from:
[ 102.310494] random: crng init done
to:
[ 12.539744] random: crng init done
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Bugs:
- Fix SSH hostname parsing when it contains leading 's', 'h', and remove the quiet
option that was hiding the error (via docker-py bump to 4.4.2)
- Fix key error for --no-log-prefix option
- Fix incorrect CLI environment variable name for service profiles: COMPOSE_PROFILES
instead of COMPOSE_PROFILE
- Fix fish completion
Miscellaneous:
- Bump cryptography to 3.3.2
- Remove log driver filter
Signed-off-by: Javier Marcet <javier@marcet.info>
In recent commit for libxml2 [1], there was enabled support for iconv,
but it relieves issue with klish that it does not compile as it fails with
following output:
checking for xmlNewDoc in -lxml2... no
configure: error: cannot find libxml2 library
make[2]: *** [Makefile:73: /foo/build/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/klish-2.2.0/.configured_68b329da9893e34099c7d8ad5cb9c940] Error 1
make[2]: Leaving directory '/foo/build/feeds/packages/utils/klish'
[1] d18692c926
Suggested-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
The "get_wifi_interfaces" function is not returning the wifi interface
names. This causes the bug #14625.
Fix the "get_wifi_interfaces" function.
Signed-off-by: Nick Hainke <vincent@systemli.org>
This utility is intended to analyze EEPROM/boarddata content of Atheros
based boards: load, dump, parse and perform quick edit. Mostly it is
used to work with binary dumps/blobs on a host, but sometime it is
useful to be able to run it on a board, e.g. to make an EEPROM content
dump or to quickly analyze ART/boarddata without copying it to a host.
Signed-off-by: Sergey Ryazanov <ryazanov.s.a@gmail.com>
Package oci-runtime-tool itself as well as oci-runtime-tests containing
runtime validation test executables as well as rootfs tarballs used by
the tests.
oci-runtime-tool can be used to generate OCI spec files or validate
OCI bundles.
To validate the OCI runtime (runc, crun, uxc, maybe others) itself,
install the 'oci-runtime-tests' package as well as 'node-npm', use
npm to install node-tap and symlink the tap executable to /usr/bin.
Then
cd /usr/libexec/oci-runtime-tests
tap *.t
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Currently, we called `/usr/libexec/login.sh` as login command, but unfortunately the auth
is disabled by default in it[1], and this is really serious as it could be a free "backdoor"
for any spoiler who has conntectd to the router via LAN or wireless.
In my option, it shouldn't be exposed to anyone without auth, so I set the default login
command to `/bin/login`. And for those who really want that, they can do it themselves.
1. `login.sh` adjusts whether use authentication or not from system config named ttylogin,
which is set to disabled by default. See package/base-files/files/bin/config_generate#L243.
Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
Add "ipstatistics"-plugin. This plugin parses "/proc/net/netstat" and
"/proc/net/snmp6" to get the overall ipv4 and ipv6 usage.
Signed-off-by: Nick Hainke <vincent@systemli.org>
Dockerd start too early will conflict with other net config.
After boot must manually restart dockerd, Or some container will not run.
Signed-off-by: Yuhang Qin <qinyuhangxiaoxiang@gmail.com>
The install command on macOS does not support the -T flag.
As suggested by Rosen Penev, this package does not compile anything,
so the contents can be installed directly.
Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
This includes a backport of quota commit 02b222a3, which removes the
use of reallocarray. The musl C library does not provide reallocarray.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Bugs:
- Revert to Python 3.7 bump for Linux static builds
- Add bash completion for docker-compose logs|up --no-log-prefix
Miscellaneous:
- CI setup update
Signed-off-by: Javier Marcet <javier@marcet.info>
The Alpine Package Keeper is the default package manager for Alpine
Linux. They manage their own repositoriy with thousends of packages and
as musl is used for compilation, their binaries can directly run on
OpenWrt.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Getifaddrs() is not working all the time (e.g. wireguard interfaces).
Instead we use if_nameindex() syscall as suggested in:
https://stackoverflow.com/a/45796495/8474618
Signed-off-by: Nick Hainke <vincent@systemli.org>
Features:
- Support for Nvidia GPUs via device requests
- Support for service profiles
- Change the SSH connection approach to the Docker CLI's via shellout to the local SSH client (old behaviour enabled by setting COMPOSE_PARAMIKO_SSH environment variable)
- Add flag to disable log prefix
- Add flag for ansi output control
Bugs:
- Make parallel_pull=True by default
- Bring back warning for configs in non-swarm mode
- Take --file in account when defining project_dir
- On compose up, attach only to services we read logs from
Signed-off-by: Javier Marcet <javier@marcet.info>
Simplified bsd patch to be compatible with glibc. It's easier to just
use libbsd with glibc. Size shouldn't be an issue.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
The first release candidate with plenty of changes needs wider testing,
so package it.
Since Linux 4.8 new more efficient GPIO manipulation API is available
and sysfs class gpio is deprecated. Enable OpenOCD support for both for
now to avoid breaking existing user configs.
Due to low user demand and packaging difficulties require USB libraries
unconditionally from now on. Their sizes are not significant compared to
the OpenOCD package itself.
Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Version 008 started requiring libudev. Now that we have libudev-zero,
switch to that.
Remove custom usb.ids handling as that was split to a separate package.
Add datadir override as otherwise it would expect usb.ids in the wrong
place.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Several packages use files from this project. Added package to
consolidate. Packages will be adjusted to depend on this.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
It seems that in some situations, the host CC gets picked up. Just pass
the target one explicitly.
Refreshed patches.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
First version based on 1.1.8
It is based on the ccid build framework
from Daniel Golle <daniel@makrotopia.org>
Suggested-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Vincent JARDIN <vjardin@free.fr>
Fix start error:
00001221 [2012634380] pcscdaemon.c:624:main() cannot create /run/pcscd: No such file or directory
Signed-off-by: Vincent JARDIN <vjardin@free.fr>
It was removed in base system commit 88468f7e ("armvirt: merge arm64 as
subtarget 64") in 2017
No change in packaged content
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* SELinux and Seccomp are now enabled via the kernel options themselves
* Config.in now uses CGroupsV2 by default but optionally allows V1
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
The source is being deprecated and split into the CLI and engine/daemon
repositories, So `docker-ce` will now be the `dockerd` and a separate
package will be made for the `docker` CLI.
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
Count the current dhcpleases. Currently, we use a bash script
that does the same job (Freifunk Berlin). We want to use native
collectd plugin for that.
Signed-off-by: Nick Hainke <vincent@systemli.org>
This is dependency of luci-app-lxc and when users install that package
it is no way clear that they have to reload rpcd to get it working
correctly. Without it container listing does not work.
In general this reload should be in this package simply because other
rpcd-mod-* packages reload rpcd as well.
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
If you want statistics about IPv6 you can use snmpv6 exporter.
Currently, the "/proc/net/snmp6" is existing but all values are
just "0".
To use this plugin you have to set
CONFIG_PROC_STRIPPED=n
I will find a way to enable the important ipv6 statistics by default.
Signed-off-by: Nick Hainke <vincent@systemli.org>
Commit 9bcea2de2c causes a dependency
problem with some out-of-tree packages which expect "DEPENDS:=+kmod-pcspkr".
To fix this problem, this commit restores a dependency definition to
the previous one on x86 target.
Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>
This is a convenience argument to primarily facilitate outbound wan
connections from a docker container. However, all docker containers
can't bidirectionally communicate with the internet by default.
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
It's useless and it's only used by this package. Just link it
statically.
Remove CMAKE_INSTALL as InstallDev section is gone.
Add PKG_BUILD_PARALLEL for faster compilation.
Put license information up as there are no longer 2 packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Some change in base broke compilation with libusb and this package.
From looking at it more carefully, it turns out that the libusb patch
needs to be updated so that host paths are not used.
libusb-compat also depends on libusb, which increases the overall
installed size.
Refreshed patches with make package/hplip/refresh .
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Some change to base broke compilation. From looking at the CFLAGS,
hplip tries to use the host libusb.
libusb-compat seems to work properly. So use that.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
also
• update description
• drop “-c lto”, this option is gone from Build.sh
• add missing $(TARGET_CPPFLAGS)
Signed-off-by: Thorsten Glaser <tg@mirbsd.org>
Now that runc builds according to available kernel features and there
is no longer a sub-menu to select them manually, also drop the MENU:=1
statement from the package Makefile.
Fixes: 3a06ce559 ("runc: Updated to v1.0.0-rc92 for dockerd")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* adds the canon_lide70 backend
* avision: adds support for the KODAK i1120, fixes thread cancellation issues,
disables exposure option for non-filmscanners
* canon_dr: improves error reporting
* dmc: fixes compiler warnings on the scan area options
* epsonds: rewrites the network I/O following changes made to the
* epson2 backend in 1.0.30 to fix security issues. Network support is still
unsupported.
* fujitsu: adds support for the fi-800R and a card scanning slot, fixes a bug
when reading hardware sensors on the first invocation. Adds USB IDs for
fi-7800 and fi-7900.
* genesys: adds support for the Canon 5600F, Canon LiDE 90, Plustek OpticFilm
7200 and 7200 (v2), 7400, 7600i, 8100 and 8200i. Fixes several issues with the
Canon 8600F. Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
flatbed support on the Canon 8400F. Adds an option to fill dark calibration
with a constant. Adds transparency support for gl847 chipset based devices.
Fixes CIS scanner support for gl842 chipset based devices. Removes lineart and
image enhancement emulation support.
* gphoto: supports the PLANon DocuPen RC800 (with a recent enough version of
gphoto2)
* gt68xx: modifies scan cancellation behaviour
* hp5400: adds button support, fixes a scan cancellation crash issue
* pixma: add supports for the i-SENSYS MF440 Series and untested support for the
PIXMMA G7000 Series and GM4000 Series as well as the i-SENSYS MF720 Series.
* plustek: fixes a potential buffer overrun
* test: adds gamma options
Patches:
- ADD: 102-pixma_Restore_old_behaviour_in_case_XML_support_is_missing.patch:
pixma was failing to detect libxml2, even when it exists
(https://gitlab.com/sane-project/backends/-/issues/345)
- DROP: 100-fix-bigendian.patch: fix in release
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
It's nice to have seccomp support which is enabled in OpenWrt on
supported platforms on targets which are not marked as SMALL_FLASH.
(and it's kinda obvious that you wouldn't want to install runc on a
SMALL_FLASH target to begin with)
So let's enable seccomp by default.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Better a separate package than enabling it via busybox.
Special thanks to @neheb for the Makefile patches.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Installing the 'xz' package currently leads to file collisions:
Collected errors:
* check_data_file_clashes: Package xz wants to install file /usr/bin/unxz
But that file is already provided by package * busybox
* check_data_file_clashes: Package xz wants to install file /usr/bin/xz
But that file is already provided by package * busybox
* opkg_install_cmd: Cannot install package debootstrap.
Fix that by switching to use ALTERNATIVES for all multicall commands
instead of copying the symlinks into the package.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
dirmngr is needed to download keys from keyservers.
That being a useful thing, let's package dirmngr.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Ship podman with defaults more coherent with user expectations and
more likely to work out-of-the-box.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Deleting rules that docker has created is error-prone, because with
every update docker we have to check if anything has changed.
Cleaning up the firewall rules is part of the docker and should and must be
cleaned up and handeled by them when the service is terminated.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
If docker-ce handles the firewall and fw3 is not envolved because the
rules get not proceed, then not only docker0 should be handled but also
other interfaces and therefore other docker networks.
This commit extends the handling and introduces a new uci option
`device` in the docker config firewall section. This can be used to specify
which device is allowed to access the container. Up to now only docker0
is covert.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
As the protocol is set to none, this makes no sense here, as it cannot
be controlled and thus processed by the netifd.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Openwrt has a own firewall service called fw3, that supports firewall zones.
Docker can bypass the handling of the zone rules in openwrt via custom
tables. These are "always" processed before the openwrt firewall.
Which is prone to errors!
Since not everyone is aware that the firewall of openwrt will
not be passed. And this is a security problem because a mapped port is
visible on all interfaces and so also on the WAN side.
If the firewall handling in docker is switched off, then the port in
fw3 must be explicitly released and it cannot happen that the
port is accidentally exported to the outside world via the interfaces on
the WAN zone.
So all rules for the containers should and so must be made in fw3.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Up to now only the docker0 interface and bridge is created by default.
In order to create other interfaces and to integrate them into the
openwrt these functions can now be called with arguments.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
nopingtime UCI option rationale:
I want relatively fast reaction(i.e. 1m or 2m) for 'no internet' condition,
but i don't want my router to reboot every 1 minute if there is still no
internet after reboot.
initd_watchcat:
* add: nopingtime uci option support
* add: defaults to all non-critical options
* add: log warnings for non-critical errors(when option is missed and
default is applyed)
* fix: error handling and config_get defaults are somtimes in conflict
because of config_get defaults. They are gone now, error handling improved.
* fix: calling watchcat.sh with 'period' mode instead of 'ping'. Typo?
* fix: pingperiod default changed from period/20 to more reasonable period/5
watchcat.sh:
* add: nopingtime uci option support( sleep if uptime < nopingtime )
* remove: [ "$mode" = "allways" ] && mode="always" - not needed, already
done by initd_watchcat in load_watchcat() func
* add: echo 1 > /proc/sys/kernel/sysrq before sysrq-trigger
* refactor: eliminated once used not needed variables, code size reduced.
* PKG_RELEASE bumped up
Signed-off-by: Vasily Trotzky <trotzky.vas@gmail.com>
* blocked_interfaces blocks all packets to docker0 from the given
interface. This is needed because all the iptables commands dockerd
adds operate before any of the fw3 generated rules.
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
Use ALTERNATIVES for /usr/bin/gpg and /usr/bin/gpgv, so upcoming gnupg2
variants can be selected instead.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Added Fedora patch to fix compilation.
Added python3 dependency as it seems it's needed now.
Replaced custom boost 1.73 patch with upstream one. Removed CFLAG that
was supposed to fix this but didn't do anything.
Removed nls.mk. telldus-core was fixed to not require iconv.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Fix "hostapd_ubus_stations.lua". The bit-lib that is imported and the
one specified as the dependency do not match. Use luabitop.
Signed-off-by: Nick Hainke <vincent@systemli.org>
it makes no sense to show docker-compose sit in Languages -> Python
submenu in menuconfig, it is a tool and not a library.
Move it to Utilities section like docker-ce also is.
Signed-off-by: Alberto Bursi <bobafetthotmail@gmail.com>
This reverts commit 1f5f599d0e
that bumped the zoneinfo version from 2020a to 2020b.
Apparently some libc are incompatible with the data format in 2020b.
At least our default libc, musl, fails to parse timezones from the
compiled 2020b zoneinfo files.
Release notes mention that deprecated "posixrules" feature is now
omitted from the default build. Possibly musl uses it?
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
As announced in the 2.21.0 release notes, the experimental gRPC API v2
has been removed.
[CHANGE] web: Remove APIv2. #7935
[ENHANCEMENT] React UI: Implement missing TSDB head stats section. #7876
[ENHANCEMENT] UI: Add Collapse all button to targets page. #6957
[ENHANCEMENT] UI: Clarify alert state toggle via checkbox icon. #7936
[ENHANCEMENT] Add rule_group_last_evaluation_samples and
prometheus_tsdb_data_replay_duration_seconds metrics. #7737#7977
[ENHANCEMENT] Gracefully handle unknown WAL record types. #8004
[ENHANCEMENT] Issue a warning for 64 bit systems running 32 bit
binaries. #8012
[BUGFIX] Adjust scrape timestamps to align them to the intended
schedule, effectively reducing block size. Workaround for a regression
in go1.14+. #7976
[BUGFIX] promtool: Ensure alert rules are marked as restored in unit
tests. #7661
[BUGFIX] Eureka: Fix service discovery when compiled in 32-bit. #7964
[BUGFIX] Don't do literal regex matching optimisation when case
insensitive. #8013
[BUGFIX] Fix classic UI sometimes running queries for instant query when
in range query mode. #7984
Signed-off-by: Paul Spooren <mail@aparcar.org>
Remove few no longer needed bits - like checking that datadir is defined
or mysqld_safe from server package and bumping revision after all the
init script cleanups.
Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
Rewrite init script as mysqladmin requires access to the MySQL which is
hard to guarantee. Use standard signals instead.
Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
Use /srv/mysql as default datadir as /var/lib/mysql is in tmpfs. This
doesn't affect any existing setup as up till now it had to be always
specified in configuration. That is addressed in the second part of this
commit - init script now uses even defaults as compiled in MariaDB so
not everything has to be specified in configuration file.
Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
There is already the hostapd_stations exporter, which uses
hostapd-utils (more precisely hostapd-cli) to get client statistics.
However, the ubus interface is permanently integrated under hostapd
in OpenWrt. So this exporter needs one dependency less.
For now it exports mainly the rrm statistics. Many people are
interested in what your device supports. The exporter provides
information about the radio-resource-managment extensions.
Signed-off-by: Nick Hainke <vincent@systemli.org>
Previously the test.sh script would also run for the `vim-help` package
which isn't a binary package but just a tar archive.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Refreshed patches. Reworked several of them as musl has changed.
Removed several upstreamed ones.
Added musl 1.2.0 patch which uses 64-bit time_t.
Removed -Werror as there's a redefinition warning caused by nls.mk.
Replaced glib2/host dependency with rpcsvc-proto.
Fixed compilation with full NLS.
Fixed compilation with musl 1.2.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
This also adds a config option GOLANG_BUILD_CACHE_DIR to customize the
location of the build cache directory.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Beep is a target-independent software that can handle buzzers controlled by kmod-gpio-beeper.
This change is useful for some non-x86 enterprise APs and development boards
that have a buzzer connected to GPIO.
Compile-tested: ath79, ELECOM WAB-I1750-PS, 3fab4ac + device support patch
Run-tested: ath79, ELECOM WAB-I1750-PS, 3fab4ac + device support patch
Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>
On few places, shellcheck gets confused by how some OpenWrt functions
work - especially load ones. Also on few places there are $options
variables that need not to be globbed. Could be rewritten better not to
need them, but I'll do major rewrites later in separate pull request.
Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
Just to make sure, add double quotes around strings and various
variables. In some cases it could prevent some issues, in other cases it
is just a good practice.
Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
policycoreutils was reworked in master.
Added PKG_BUILD_PARALLEL for faster compilation.
Reorganized some stuff for consistency.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
According to https://bugs.gentoo.org/301782 coreutils does not respect
--without-selinux correctly when libselinux.so is present on the target
system (in the staging dir).
This solves a weird issue of some coreutils programs not building (for
example stdbuf), because the configure script uses -Werror to determine
whether __attribute__((constructor)) is respected, but -Werror causes
compilation to fail because of a warning about redefinition of
HAVE_SELINUX_SELINUX_H macro.
Signed-off-by: Marek Behún <kabel@blackhole.sk>
Run trivial check if the compiled binary works on the architecture. Do
so by comparing the printed version by the binary with the Makefile
version. The release is OpenWrt specific, so cut it off.
Signed-off-by: Paul Spooren <mail@aparcar.org>
This release is built with Go 1.15, which deprecates X.509 CommonName
in TLS certificates validation.
In the unlikely case that you use the gRPC API v2 (which is limited to TSDB
admin commands), please note that we will remove this experimental API in the
next minor release 2.22.
[CHANGE] Disable HTTP/2 because of concerns with the Go HTTP/2 client. #7588#7701
[CHANGE] PromQL: query_log_file path is now relative to the config file. #7701
[CHANGE] Promtool: Replace the tsdb command line tool by a promtool tsdb subcommand. #6088
[CHANGE] Rules: Label rule_group_iterations metric with group name. #7823
[FEATURE] Eureka SD: New service discovery. #3369
[FEATURE] Hetzner SD: New service discovery. #7822
[FEATURE] Kubernetes SD: Support Kubernetes EndpointSlices. #6838
[FEATURE] Scrape: Add per scrape-config targets limit. #7554
[ENHANCEMENT] Support composite durations in PromQL, config and UI, e.g. 1h30m. #7713#7833
[ENHANCEMENT] DNS SD: Add SRV record target and port meta labels. #7678
[ENHANCEMENT] Docker Swarm SD: Support tasks and service without published ports. #7686
[ENHANCEMENT] PromQL: Reduce the amount of data queried by remote read when a subquery has an offset. #7667
[ENHANCEMENT] Promtool: Add --time option to query instant command. #7829
[ENHANCEMENT] UI: Respect the --web.page-title parameter in the React UI. #7607
[ENHANCEMENT] UI: Add duration, labels, annotations to alerts page in the React UI. #7605
[ENHANCEMENT] UI: Add duration on the React UI rules page, hide annotation and labels if empty. #7606
[BUGFIX] API: Deduplicate series in /api/v1/series. #7862
[BUGFIX] PromQL: Drop metric name in bool comparison between two instant vectors. #7819
[BUGFIX] PromQL: Exit with an error when time parameters can't be parsed. #7505
[BUGFIX] Remote read: Re-add accidentally removed tracing for remote-read requests. #7916
[BUGFIX] Rules: Detect extra fields in rule files. #7767
[BUGFIX] Rules: Disallow overwriting the metric name in the labels section of recording rules. #7787
[BUGFIX] Rules: Keep evaluation timestamp across reloads. #7775
[BUGFIX] Scrape: Do not stop scrapes in progress during reload. #7752
[BUGFIX] TSDB: Fix chunks.HeadReadWriter: maxt of the files are not set error. #7856
[BUGFIX] TSDB: Delete blocks atomically to prevent corruption when there is a panic/crash during deletion. #7772
[BUGFIX] Triton SD: Fix a panic when triton_sd_config is nil. #7671
[BUGFIX] UI: Fix react UI bug with series going on and off. #7804
[BUGFIX] UI: Fix styling bug for target labels with special names in React UI. #7902
[BUGFIX] Web: Stop CMUX and GRPC servers even with stale connections, preventing the server to stop on SIGTERM. #7810
Signed-off-by: Paul Spooren <mail@aparcar.org>
Auditd seems to build its own libev if the library is not already present;
otherwise it uses the system-installed library. This adds libev as a
dependency to ensure a consistent build.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
[update to 3.1, make use of Python 3, and update dependencies]
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
[strip library after adding it to openwrt repository]
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Similar to `syncthing` also `prometheus` build environment sets
variables later shown in the `--version` string. Set those varialbes.
Signed-off-by: Paul Spooren <mail@aparcar.org>
* The upstream script changed to use `.hosts` files from `.conf` files,
so changes were required to make dnsmasq use the new file format.
* Added a default wolfssl variant.
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
This release adds the advanced folder option caseSensitiveFS
(https://docs.syncthing.net/advanced/folder-caseSensitiveFS.html) to
disable the new safe handling of case insensitive filesystems.
Bugfixes:
#1787: Case-only renames break stuff
#5708: Properly handle upper-/lowercase-only file name collisions
#6613: TestWatchRename test fails on FreeBSD.
#6793: Error status should take precedence over Local Additions
#6850: Global state incorrect when ignoring local change
#6864: Folder incorrectly marked “Up to Date” after switching from “Receive Only” to “Send & Receive”
#6867: Certificate error when built with Go 1.15
#6886: chmod permission after editing .stignore via WebUI not preserved
#6889: test failures with Go 1.15
#6892: Syncthing 1.8.0 trying to connect via wrong network route
#6898: tests in TestCopyRange fail on ppc64le with "inappropriate ioctl for device"
#6908: NAT service fails to terminate during Shutdown
#6910: Local Additions when deleting file after changing folder type from SR to RO
#6922: Auto accepted folders not saved
#6938: Modifying config during first scan corrupts folder state
Enhancements:
#2739: Syncthing should be case insensitive by default
#5579: Avoid anti-aliasing artifacts for svg device icons
#6873: Don't fail dirs in receive-only folders that were removed elsewhere but exist locally
Signed-off-by: Paul Spooren <mail@aparcar.org>
Changes:
- Pass compiler flags through PORT_CFLAGS (previously, it was always compiled with -O2 -lrt)
- Add option to override toolchain and use -O3
- Disable MIPS16 (highly decreases results)
- Enable LTO
Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>
Update collectd to version 5.12.0.
* Refresh patches
* Remove upstreamed patch 920-fix-ubi-data-source-type.patch
* Backport a patch from upstream to fix a missing define
(920-backport-netlink-reg-noerror.patch)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
The rb532 target has finally been removed in master, so drop the
dependencies in this package.
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
The ar71xx target has finally been removed in master, so drop the
dependencies in this package.
Don't remove the patch for the TEW673GRU driver, as it may come
back with ath79.
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
Description: uhubctl is a utility that allows you to control USB power
on USB hubs that implement per-port or ganged power switching.
Signed-off-by: Steven Honson <steven@honson.id.au>
Cleaned up Makefile for consistency between packages.
Fixed license information.
Added PKG_BUILD_PARALLEL for faster compilation.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Maintainer: @blogic me
Compile tested: head r14241-ba2ddba, x86_64
Run tested: x86_64 (VirtualBox)
Description:
Addressed the build failure with node.js version 12.
https://github.com/openwrt/packages/pull/12225
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Add license information.
Add PKG_INSTALL and PKG_BUILD_PARALLEL for consistency between packages.
Minor cleanups.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
There are intermittent build failures on the buildbots because of this.
I see the same build failures locally as well.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
usleep is deprecated.
Modernized the Makefile to modern standards.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
5969273ff4 mistakenly got rid of the
install section for canutils, causing errors when trying to install.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
command-count.h generated by makefile was wrong
when using default shell in mac,
set shell to bash to fix it.
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
LVM2 uses libselinux if found at buildtime and then requires it to
be present on run-time.
As LVM2 is usually not installed on space-constraint systems just
always build with libselinux as apart from the extra space usage it
doesn't hurt.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This was caused by upstream project commit db5adeaa ("build-sys: clean
up flags included in the linker command line")
Reported-by: W. Michael Petullo <mike@flyn.org>
Link: https://github.com/openwrt/packages/issues/13081
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Fix shellcheck SC2230
> which is non-standard. Use builtin 'command -v' instead.
Once applied to everything concerning OpenWrt we can disable the busybox
feature `which` and save 3.8kB.
Signed-off-by: Paul Spooren <mail@aparcar.org>
If ttyd is configured to ssl, you will get the following message in the
log `refuse to serve WS client for illegal ws path`. Upstream a patch
has already been applied which fixes this.
Since there is no newer version than 1.6.1, this fix is backported as a
patch. And could be removed if a new version of ttyd is available.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
GCC10 defaults to -fno-common , which breaks compilation as there are
multiple variables defined outside of the header file.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Append missing debug option value.
If this is not append and the debug option is selected, then we get the
following error output on ttyd start.
> ttyd: missing start command
To fix this add missing debug option value.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Added the mount utilities. It turns out that udev is not a requirement.
Renamed package to fuse3 and moved to utils, as with fuse2.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
This commit adds two additional init.d targets:
* uciadd:
This command adds the default docker0 bridge to the network
configuration. Additional, a new firewall zone docker is created
* ucidel
This command removes default docker0 bridge from the network
configuration. The new docker firewall zone gets also deleted.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Removed multibyte options. They must now be enabled.
Refreshed patches.
Commented out autowrite as requested in
https://github.com/openwrt/packages/pull/12177
Signed-off-by: Rosen Penev <rosenp@gmail.com>
API change.
Cleaned up Makefile.
Fixed license information.
Remove pointless CMAKE_INSTALL. This is not needed in InstallDev.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
If the uci configuration is changed send dockerd a SIGHUP to reload the
generated daemon.json file with the new configuration.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Extract data from configuration file /etc/config/dhcp and create labels
{name, ip, mac, dns} via uci. Those labels are useful in order to craft
complex prometheus queries as replacing the MAC address to a custom
name. E.g.: wifi_station_signal_dbm * on (mac) group_left(name)
uci_dhcp_host or on (mac) label_replace(wifi_station_signal_dbm, "name",
"$1", "mac", "(.+)")
Signed-off-by: Gérondal Thibault <contact@tycale.be>
Added patches to fix meson compilation.
Reworked flashrom.mk to work with meson.
Several minor Makefile cleanups.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
A bit ugly but it works.
Added PKG_BUILD_PARALLEL for faster compilation.
Fix license information.
Minor cleanups.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
This adds a new Makefile variable, GO_PKG_TAGS, for Go packages. When
set, the value is passed as the parameter of the -tags option for 'go
install'.
This also updates syncthing to use this variable.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
I've noticed that in deployment on some reboots it won't configure,
This seems to be due to running before the system/network is ready.
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
Until now, the firewall rules from the dockerd were preserved after the
service was stopped. This is not nice. With this change the firewall rules
created by dockerd will be deleted when the dockerd service is stopped.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Upstream backport.
Adjusted package to use PKG_INSTALL for consistency between packages.
Added PKG_BUILD_PARALLEL for faster compilation.
Adjusted InstallDev section to install the pkgconf file.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
default inotify limits at 8k are
low for serious usage
and the GUI shows errors like
"Failed to start filesystem watcher
for folder XXXX"
increase them with this config file
as instructed by syncthing's FAQ.
https://docs.syncthing.net/users/
faq.html#inotify-limits
Signed-off-by: Alberto Bursi <bobafetthotmail@gmail.com>
[bumped PKG_RELEASE]
Signed-off-by: Paul Spooren <mail@aparcar.org>
Allows simplifying the Makefile. Faster compilation as well.
Revert b70cb0ef5e
That commit was misleading and ended up bloating the Utilities section.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
As simple package, providing a utility ("br") for controlling X10
home automation Firecracker transmitters over serial.
Signed-off-by: Brian Norris <computersforpeace@gmail.com>
About the patch: Gnuplot build process includes the compilation of some
custom binaries which are subsequently used to generate help files/docs.
Since those binaries are compiled for TARGET, this breaks the build on
the HOST. The patch disables the generation of those binaries (and the
documentation).
Signed-off-by: Matteo Cicuttin <datafl4sh@toxicnet.eu>
Setting the GO_PKG_LDFLAGS_X after including golang-package does not
include them anymore after commit 25a7f00. By adding flags before they
are correctly loaded and included in `syncthing` binary.
Signed-off-by: Paul Spooren <mail@aparcar.org>
DAWN is a decentralized WiFi Controller.
https://github.com/berlin-open-wireless-lab/DAWN
The node exporter allows to gather statistics about your network:
- Infos about AP (Channel Utilization, Station Count, ...)
- Connected Clients (Signal, Capabilities)
Signed-off-by: Nick Hainke <vincent@systemli.org>
Fix license information.
Add URL.
Add HOST_BUILD_PARALLEL for faster compilation.
Add PKG_HOST_ONLY to signify that this is to be used as a host package
only.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Link: https://kb.vmware.com/s/article/60262
Add new package to support Shared Folders user mode FUSE client.
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
Currently the init script generates a config file from uci, that has the
include line before the interval line. This means, that anything happening
in the include directory does not yet see the changed Interval.
Moving the include line before the uci generation process fix this issue.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Currently the values are stored in the ubi plugin as data source type
`counter`. But this makes no sense, because the values change very slowly
and I don't want to know the rate of change. It is better to store the
value as data source type `gauge`. Then I can see the current value.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Since size is not a problem here, use libxcrypt to avoid algorithm
availability. Changed default to bcrypt as that's the strongest
supported by shadow-utils.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
ALTERNATIVES shall be defined in the package where /sbin/kmod resides --
otherwise kmod tools will break if we install only the library as these
tools will be linked to a nonexistent executable.
Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
Irqbalance defines /run/irqbalance dir for its socket
communication between irqbalance and its UI. /run does not exist
in OpenWrt (although it is defined by the Linux FHS), so the
socket creation fails. Although we do not compile UI and thus
the issue is not critical to us, fix the directory location.
Additionally, the creation is originally handled by a systemd
init script that we do not use.
* patch source to define dir as /var/run/irqbalance
* create the dir in the procd init script.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
If musl has no bcrypt:
passwd: failed to crypt password with salt '$2a$13$w8EJ0Yfz5bGsG4U/0m7bk/': Function not implemented
The password for root is unchanged.
glibc output as it has no bcrypt:
passwd: failed to crypt password with salt '$2a$13$xbpmAYmq6Q/rZN5jOlNxJZ': Invalid argument
The password for root is unchanged.
--without-bcrypt output:
Invalid ENCRYPT_METHOD value: 'BCRYPT'.
Defaulting to DES.
passwd: password changed.
The solution was tested on glibc despite using a musl specific variable
Still works.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Even though I think that mysql_upgrade is a client package (it depends
on the mysql client and it's in the "client" directory in the source
tree, for instance), upstream laid it out differently. Since upstream
commit ec586f5 mysql_upgrade is to be considered a part of the server,
because the COMPONENT argument in the MYSQL_ADD_EXECUTABLE macro is set
to "Server".
That means that mysql_upgrade is only installed when the server is. So
we need to move it back to the server package, otherwise we will have a
build failure when mariadb-client is selected while mariadb-server is
not. This particular build failure was recently a topic on
openwrt-devel.
Some more binaries are moved, following the layout visible in
"man/CMakeLists.txt", to make sure we follow upstream's vision with
regards to how the binaries are packaged.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Also add coreutils-sleep and coreutils-date as dependencies (Flent needs
these for the scripts-based remote data gathering tools).
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
Domoticz doesn't use libmosquittopp any more as it was deprecated. It
has its own copy. It can also use the system libjsoncpp, so do that too.
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
This release removes iconv dependency which needed nls.mk before.
It also removes the library component.
Switch from old name to new name in Makefile.
Fixed license information.
Several other cleanups for consistency between packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
add hwinfo package, it is a complete
system hardware detection tool,
similar to lshw but is written in C
and has minimal dependencies.
It is part of core SUSE Linux
applications like Yast installer
and system configurator tool so
it's regularly maintained.
Signed-off-by: Alberto Bursi <bobafetthotmail@gmail.com>
init script would error:
procd: /etc/rc.d/S99acpid: /etc/rc.common: /etc/rc.d/S99acpid: line 18: procd_send_signal: not found
procd: /etc/rc.d/S99acpid: /etc/rc.common: /etc/rc.d/S99acpid: line 19: syntax error: unexpected "}"
Signed-off-by: Rob Mosher <nyt-openwrt@countercultured.net>
The current version fails to build on mips and also on mipsel, but the
the latter is not masked.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Reworked Makefile for consistency between packages.
Removed librt dependency. clock_gettime does not need it anymore.
Updated URL.
Add MAP_SYNC workaround as musl undefines MAP_SYNC for MIPS and PPC.
Refreshed patches and removed upstream ones
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Robert Marko <robert.marko@sartura.hr>
Signed-off-by: Marijan Svalina <marijan.svalina@sartura.hr>
Signed-off-by: Luka Perkov <luka.perkov@sartura.hr>
The variable is a list of shell variables; the new name is more in-line
with other parts the build system (CONFIGURE_VARS, MAKE_VARS, etc.).
GoPackage/Environment is kept (for now) in case other feeds are using
it.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
mysqld_safe is the recommended way to start the server on non-systemd
systems ([1]). For instance, it has a crash detection with auto-restart
function, can update ulimits, setup core files, set the niceness of the
server etc. It looks like it could also be helpful when trying to set up
clusters. It's maintained upstream and adding it means we don't need to
add these features into our init script.
mysqld_safe is a script itself, so it's added to conffiles in case users
want to edit it.
It can't be run under procd, so the init script is converted to a normal
System V type. To stop the server and to reload the privileges tables
mysqladmin is used. To that end mysqladmin is moved into the server
package.
While changing the init script, the Debian init script was used for
ideas. It wasn't copied verbatim and adapted a bit here and there.
Thanks to whoever wrote it!
This commit removes the support for starting the service as a user other
than "mariadb". This makes the init script simpler. If anybody wants to
play around with the user then it's up to them to fix the permissions.
[1] https://mariadb.com/kb/en/mysqld_safe/
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
It's really a client. It connects to the running server as a client, to
upgrade the DBs. And it depends on both mysql and mysqlcheck.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
