This is intended as a match with standard urngd. They serve same purpose
and urngd starts as first with 00. Starting haveged later can create
issues if you replace urngd with it. The example problem is if
uci-defaults script decides to generate certificate. Haveged can supply
entropy but it is started later and to mitigate this urngd would still
have to be installed. This means that haveget can't serve as replacement
without moving it to match start order of urngd.
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
If libacl is built, gnu sed finds it during configuration and enables support
linking in libacl. This results in build failures due to the missing dependency.
Consequently, use CONFIGURE_ARGS to disable acl support.
Reported-by: Rosen Penev rosenp@gmail.com
Signed-off-by: Russell Senior <russell@personaltelco.net>
The previous implementation always succeeded so no scan was performed.
This now fixes that and it correctly scans for BTRFS devices if BTRFS
support is in kernel.
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
The original patch[1] this package was based on has been merged into
OpenWrt master, making this package unnecessary.
[1]: https://patchwork.ozlabs.org/patch/1094493/
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Add PKG_BUILD_PARALLEL for faster compilation.
Replace ' ' with TAB for consistency between packages.
Refresh patches and remove outdated ones.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Use PKG_INSTALL for consistency between packages.
Add PKG_BUILD_PARALLEL for faster compilation.
Fix wrong locking path. First discovered here:
https://forum.openwrt.org/t/cannot-setup-dm-crypt/56836
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Added support for reload_config
This service does not need to start so early (even
before the netwrok is up). Start it after
the device is mostly up and operational.
Compile-tested on: ipq806x
Runtime-tested on: ipq806x
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
Added the ability to enable/disable via a config file;
the default is enabled for backwards compatibility.
This is an additional service, so running it the
same priority as dnsmasq, etc does not make sense.
Added USE_PROCD=1
"done" starts at "START=95", so this should start earlier
Added STOP=10 to stop syncthing early
Compile-tested on: ipq806x, ipq40xx
Runtime-tested on: ipq806x, ipq40xx
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
Added the ability to change sampling interval
and provide a list of IRQ's to ignore
via /etc/config/irqbalance
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
Upgraded from 1.2.0 to 1.6.0 to pick up
all the latest fixes and improvements
irqbalance made glib2 mandatory since 1.3.0, but is
using very little of it. glib2 linked statically
to minimize the impact.
1.2.0 size: 33,619
1.6.0 size: 99,539
~# irqbalance --version
irqbalance version 1.6.0
~# ldd /usr/sbin/irqbalance
/lib/ld-musl-armhf.so.1 (0xb6f5f000)
libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xb6f43000)
libc.so => /lib/ld-musl-armhf.so.1 (0xb6f5f000)
~# opkg info irqbalance
Package: irqbalance
Version: 1.6.0-6
Depends: libc
Status: install user installed
Architecture: arm_cortex-a7_neon-vfpv4
Installed-Time: 1582839249
Compile-tested: ipq806x/R7800 & ipq40xx/GL-B1300
Run-tested: ipq806x/R7800 & ipq40xx/GL-B1300
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
Currently it only cleans up binaries when executing
Build/InstallDev without deleting .built stamp file.
This leads to wrong information about existence of
built runc binaries and causes error when executing
package/containerd/install twice.
Signed-off-by: Texot Qi <tete1030@gmail.com>
Currently it only cleans up binaries when executing
Build/InstallDev without deleting .built stamp file.
This leads to wrong information about existence of
built runc binaries and causes error when executing
package/runc/install twice.
Signed-off-by: Texot Qi <tete1030@gmail.com>
Infozip (earlier name "zip") has 12 year old source code that
would require work to make the binary actually work.
> root@router1:/# zip
> zip error: Not supported (uzoff_t not same size as zoff_t)
The package was rename from zip to infozip a few weeks ago
due to buildbot's relutance to compile zip in master and 19.07
ever since host zip was added as a build tool.
Reference to #10985 and #11089 as well as
ad8c2d6099
But as the binary does not work, lets remove the package to
avoid confusion for the end-users.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Convert bigclown packages to use pypi.mk and pypi in general instead of
github.
This allows us to remove version replacement as that is already done in
pypi archive.
Updated dependencies to also contain proxy dependencies that are listed
in upstream.
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
Fix compilation error due to multiple definition
x86_64-openwrt-linux-musl/bin/ld: lib/libcoreutils.a(strtold.o):(.data+0x0):
multiple definition of `minus_zero'; lib/libcoreutils.a(strtod.o):(.data+0x0):
first defined here
collect2: error: ld returned 1 exit status
Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
Since the brcm2708 target has been renamed to bcm27xx in openwrt
repo, update the dependency to the target in this package.
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
Removed CMAKE_INSTALL as there's no need for InstallDev.
Added PKG_BUILD_PARALLEL for faster compilation.
Small cleanups.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Move more environment variables into GoPackage/Environment
* Split GoPackage/Environment into target and build sections
* Do not set GOROOT_FINAL for Go packages (setting it should only affect
the Go compiler and not Go packages)
* Set CGO_LDFLAGS to $(TARGET_LDFLAGS)
* Move GO_TARGET_* variables from golang-values.mk, and GO_VERSION_*
variables from golang-version.mk, into golang/Makefile
This also updates runc, containerd, and docker-ce to reflect the changes
in GoPackage/Environment.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Today CVE-2020-7221 was publicly discussed on oss-sec [1]. MariaDB
upstream had not mentioned this CVE in their last release notes. The CVE
is related to auth-pam and the possibility of a local mariadb to root
user exploit in the mysql_install_db script.
Upstream has made amendments to the script, but according to the oss-sec
posts the folder permissions were not updated as they should have been.
In OpenWrt the script mysql_install_db is actually patched to never run
the commands in question. This has been this way since MariaDB 10.4 was
made available.
Still, the directory permissions set by the postinstall script are too
lax. To quote the discoverer of the issue, Matthias Gerstner from Suse,
they exhibit "the dangerous situation of a setuid-root binary residing
in a directory owned by an unprivileged user".
This commit fixes this by changing the permissions to the following:
root:mariadb 0750 /usr/lib/mariadb/plugin/auth_pam_tool_dir
This way the setuid-root binary is only available to root and the
mariadb user, while at the same time the mariadb user has no ownership
of the directory.
[1] https://seclists.org/oss-sec/2020/q1/55
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
This exporter exposes information of the connected stations acquired
from hostapd. These contain additional information compared to the
existing station exporter, however they require a full build of hostapd
/ wpad.
Signed-off-by: David Bauer <mail@david-bauer.net>
- Migrate libusb dependency back to libsane
(virtually all useful backends for OpenWrt would need it anyway)
- Disabled new usb-record-replay feature (avoid libxml2 dep)
- Disabled new escl backend (network-only backend are not too useful
for OpenWrt and it requires libcurl, libnetsnmp, libavahi and libxml2)
- Workaround sane-daemon/postinst installation on Imagebuild
- Enabled backends kvs40xx and mustek_usb2 (fixed upstream)
- Fix bigendian compilation
(https://gitlab.com/sane-project/backends/-/merge_requests/329)
- Fix missing std::round() for uclibc
(https://gitlab.com/sane-project/backends/issues/237)
- Fixes FS#2685: coldplug was running before usblp was loaded. Now
it grants access do usblp when a device using it is plugged.
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
Fixed license information.
Removed patch requiring autoreconf and replaced with a configure variable.
Removed faulty patch that broke systems without a disabled crypt size hack.
Replaced with using a SED command as well as bcrypt, which works in musl.
Removed su patch and converted it to a SED command in the Makefile.
Added new shadow utilities.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rename "zip" to "infozip" to avoid name collision, as the same
zip package has been introduces to the build tools as zip.
Buildbot does not like that.
Reference to #10985 and #11089 as well as
ad8c2d6099
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
This happens during compilation:
Enabling network
./etc/init.d/prometheus-node-exporter-lua: line 7: /lib/functions/network.sh: No such file or directory
Signed-off-by: Rosen Penev <rosenp@gmail.com>
