Commit graph

26973 commits

Author SHA1 Message Date
Philip Prindeville
2aff212510 isc-dhcp: detect whether ddns transfers are IPv4 only
If named is configured to not listen on any IPv6 interfaces,
then we should run 'nsupdate' with the '-4' argument.

Also:

* cleanup RFC-1918 address detection;
* don't generate PTR records for domain entries that aren't
  RFC-1918 addresses or these will generate NOTAUTH failures;

We're assuming that we're doing DNS split-horizon and that
internal addresses aren't routable.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 13:25:55 -06:00
Philip Prindeville
0172063b0a
Merge pull request #18069 from pprindeville/isc-dhcp-dont-leak-mktemp-files
isc-dhcp: don't leak mktemp files
2022-03-15 13:25:08 -06:00
Philip Prindeville
aa490f0279 isc-dhcp: don't leak mktemp files
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 12:55:21 -06:00
Daniel Golle
f951f61005
gnunet: improve init script
Ensure correct ownership of /etc/gnunet.
Quote variables and more or less make shellcheck happy.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 18:33:37 +00:00
Daniel Engberg
24686e4d6b
Merge pull request #18063 from turris-cz/netdata-disable-liblz4
netdata: disable LZ4 compression support
2022-03-15 11:25:31 +01:00
Josef Schlehofer
ceca87b25b
netdata: disable LZ4 compression support
To avoid unnecessary dependency, let's disable it for now.
LZ4 can be also used for DB engine and HTTPS

Fixes:
Package netdata is missing dependencies for the following libraries:
liblz4.so.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-15 10:52:56 +01:00
Daniel Golle
079479918d
gnunet: depend on 'uci-firewall' instead of 'firewall'
To allow using gnunet on systems with firewall4, add replace direct
dependency on 'firewall' with 'uci-firewall' which is satisfied by
either 'firewall' or 'firewall4'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 02:41:31 +00:00
Etienne Champetier
34f556cb57 shorewall6-lite: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Etienne Champetier
57855319f1 shorewall6: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Florian Eckert
c789e3c9c4
Merge pull request #18058 from TDT-AG/pr/20220314-keepalived
keepalived: enable nftables filtering
2022-03-14 13:24:51 +01:00
Florian Eckert
bacc3a889f keepalived: enable nftables filtering
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 12:00:31 +01:00
Florian Eckert
c688ffb025 mwan3: update version to 2.11.0
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 11:34:10 +01:00
Josef Schlehofer
94fb0da32c
Merge pull request #18002 from BKPepe/haproxy-conflicts
haproxy: Makefile polishing and add conflict to SSL/non-SSL variant
2022-03-14 10:03:31 +01:00
Florian Eckert
0b5f09162b mwan3: dump iptables and ipset command for debugging
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
5a80a5dbfe mwan3: unify error messages
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
ed2e0b33ed mwan3: add sleep to release ipset reference
It turns out that under high system load, ipsets cannot be deleted. This
is because there is still a reference in iptables. A short sleep should
give the system time to clean this up.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
13c2604eb1 mwan3: remove not needed ipset del cmd
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
408458a72f mwan3: Split ipsets into separate ipv4 and ipv6 sets
Nft does not directly support ipsets, nft sets must be used instead.
The mwan3 uses ipsets for certain tasks. They can be combinded. So called
an ipset of ipsets. This list type is not available in nft. So that
mwan3 could be ported to nft in the feature, the ipset handling should be
split. So we have for each ipset an iptables rule.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
502779755a mwan3: use mwan3_push_update function for mwan3_delete_iface_iptables
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
b5c675392d mwan3: remove ipset generation from mwan3_set_general_iptables
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
9c2abb19e2 mwan3: use sticky ipset generation mwan3_push_update pattern
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
e985f0dcd1 mwan3: do not create dynamic ipset for IPv6 if not supported
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
fedfbd5004 mwan3: do not add mwan3_custom_v6 set if ipv6 is not available
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
54fad2326e mwan3: use also ipset restore for connected ipv4 sets
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
a49d0953dc mwan3: move command definitions to common.sh
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
33e70606c6 mwan3: update iptables dependencies
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Daniel Golle
c0d2c82528
auc: don't segfault on invalid URL
Show error message instead of segfaulting in case of an invalid URL
being read from UCI config.

Fixes: #17971
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-13 23:49:25 +00:00
Etienne Champetier
d098f907bb
Merge pull request #18052 from 1715173329/va
v2raya: add iptables as dependency
2022-03-13 12:37:32 -04:00
Tianling Shen
88750d67e2
v2raya: add iptables as dependency
This package requires to use iptables (no matter which variant).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-13 23:34:53 +08:00
Daniel Golle
2f8e696189 gnunet: update to version 0.16.1
* OPUS and Pulse can be configured nicely by default now, no longer
   need a local patch for that
 * mysql version checks fail when cross-compiling, add patch to remove
   them and always assume MySQL >8.0.
 * Package new services, communicators, ...

This is a new major release. It breaks protocol compatibility with the
0.15.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network,
and interactions between old and new peers will result in issues.
0.15.x peers will be able to communicate with Git master or 0.16.x
peers, but some services - in particular GNS - will not be compatible.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-13 13:14:44 +00:00
Rosen Penev
196e15162d treewide: remove rpath-link
Most usages seem to be outdated and fixed a long time ago.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-13 00:02:02 -08:00
Josef Schlehofer
f65025eaf9
Merge pull request #18041 from turris-cz/syslog-ng-bump
syslog-ng: update to version 3.36.1 and add test.sh
2022-03-12 06:50:54 +01:00
Oskari Rauta
845083213f catatonit: add new package
podman uses catatonit now for container init, so new package for
catatonit is required.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2022-03-11 13:07:20 +01:00
Florian Eckert
052ca56890
Merge pull request #18042 from nwidger/delve-1.8.2
delve: Update to 1.8.2
2022-03-11 08:47:44 +01:00
Rosen Penev
a97993a887 softethervpn: remove rpath hack
This was needed when readline was a shared library. Now that it's
static, this can be removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-10 21:51:24 -08:00
Tianling Shen
b31615c63c yq: Update to 4.22.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-10 15:51:26 -08:00
Niels Widger
d48a82d6f6 delve: Update to 1.8.2
See https://github.com/go-delve/delve/blob/master/CHANGELOG.md for
changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
2022-03-10 10:50:46 -05:00
Josef Schlehofer
222d04e810
Merge pull request #16339 from paper42/netdata-1.31
netdata: update to version 1.33.1
2022-03-10 16:20:22 +01:00
Josef Schlehofer
110d46eb37
syslog-ng: update to version 3.36.1
- Bump version in config file

Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.36.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-10 16:19:19 +01:00
Rosen Penev
e7a2bddbb7 gerbera: update to 1.10.0
Backport some bug fixes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-09 23:40:17 -08:00
Rosen Penev
ddfdf4148d pugixml: update to 1.12.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-09 23:40:17 -08:00
Rosen Penev
30f52fcd31 libnpupnp: update to 4.2.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-09 23:40:17 -08:00
Rosen Penev
28225e21b6 libmicrohttpd: update to 0.9.75
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-09 23:40:17 -08:00
Rosen Penev
342c284c29 expat: update to 2.4.7
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-09 23:40:17 -08:00
Michal Vasilek
1278eec776
netdata: update to version 1.33.1
- Switch to upstream's release tarball
  Requires to add PKG_BUILD_DIR since netdata is extracted to the folder
  netdata-v1.33.1 instead of the previous solution where there was
missing v

- Disable anomaly detection by default
This avoids adding a new dependencies to netdata

Fixes:
Package netdata is missing dependencies for the following libraries:
libatomic.so.1
libstdc++.so.6

- Add FreeBSD patch to have smaller package and to avoid clutter in
  WebUI

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
[add commit message, add FreeBSD patch]
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-10 00:13:02 +01:00
Tianling Shen
2dff513cd8 dnsproxy: Update to 0.41.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-09 12:11:56 -08:00
Kuan-Yi Li
de9fce568b modemmanager: bump to 1.18.6
Remove upstreamed patch.

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
2022-03-09 02:15:46 -08:00
Kuan-Yi Li
89d6fc71e0 libmbim: bump to 1.26.2
Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
2022-03-09 02:15:46 -08:00
Kuan-Yi Li
244e1c7cfb libqmi: bump to 1.30.4
Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
2022-03-09 02:15:46 -08:00
Kuan-Yi Li
cae4e8c8ec libqrtr-glib: bump to 1.2.2
Builds are now done from git repository based on release tag. [1][2]

Switch to meson as GNU autotools based build is no longer supported. [2]

Update SPDX license identifier [3] and switch to AUTORELEASE to avoid
manual increments.

[1] https://www.freedesktop.org/software/libqmi/libqrtr-glib-RELEASES-README
[2] https://lists.freedesktop.org/archives/libqmi-devel/2021-November/003721.html
[3] https://gitlab.freedesktop.org/mobile-broadband/libqrtr-glib/-/tree/1.2.2#license

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
2022-03-09 02:15:46 -08:00