Commit graph

24127 commits

Author SHA1 Message Date
Rosen Penev
2cdc64b12a file: update to 5.40
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-10 17:05:18 -07:00
Daniel Golle
2d9b46e677
ovsd: improve package style and update source
Fix post-merge comments in #15316 and update source.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 16:56:44 +01:00
Daniel Golle
1e1e7af6a9
modbus-utils: remove accidentally added package
modbus-utils was not intended to be added at this stage. Remove it.

Fixes: 312594f86 ("uvol: add new package")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 13:33:17 +01:00
Gregory L. Dietsche
49535edffd safe-search: prevent duplicate cron job installation
This patch prevents multiple cron jobs from being created to run the
safe-search-maintenance script.

To reproduce this bug, perform the following:
  - Install safe-search
  - Perform an OpenWRT firmware upgrade (choose to preserve user settings)
  - Install safe-search again

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
2021-04-10 14:28:25 +02:00
Daniel Golle
0d505441be
ap_config: remove accidentally added package
Fixes: 312594f86 ("uvol: add new package")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 12:53:26 +01:00
Daniel Golle
312594f869
uvol: add new package
uvol is a wrapper-script which allows automated handling of storage
volumes. uvol currently comes with backend support for LVM2 and UBI,
covering practically all options for storage large enough to be
managed (NAND, SPI-NAND, eMMC, SATA, NVME, virtio-blk, ...).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 12:02:23 +01:00
Daniel Golle
43597b918a
lvm2: don't use -normal suffix for non-SELinux variants
This was probably a work-around for an issue with dependencies which
was fixed by
988ed00802

Remove it as all other packages with `-selinux` variants do provide
a non-SELinux-variant without any suffix and that works now, see
procd vs. procd-selinux
busybox vs. busybox-selinux

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 12:01:59 +01:00
Dirk Brenken
ec20e9df96
adblock: fix games_tracking source url
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:42:30 +02:00
Daniel Golle
d2f8d9c90f
autopart: use '-' to separate drive serial in volume name
Instead of just appending the driver serial including the '0x' prefix,
use '-' prefix instead to make it more readable.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-09 17:33:21 +01:00
Jianhui Zhao
3aa128f007 libuhttpd: Update to 3.11.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2021-04-08 22:32:11 -07:00
Philip Prindeville
e44b2665e7
Merge pull request #6924 from derekyerger/strongswan-lattice-sha3
strongswan: add more crypto plugins
2021-04-08 22:26:56 -06:00
Josef Schlehofer
7c80ef5f76
Merge pull request #15353 from ja-pa/knot-resolver-5.3.1
knot-resolver: update to version 5.3.1
2021-04-07 14:17:57 +02:00
Rosen Penev
c6fa2d5bfa ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-07 00:46:54 -07:00
Kirill Nikolaev
272b0a5c18 ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
2021-04-07 00:46:54 -07:00
Rosen Penev
fa6f182a21 ksmbd: update to 3.3.8
Major changes are:
  clean-up codes using checkpatch --strict option.
  fix several warning and build failure from linux-next.
  change the minimum supported kernel version to v5.4.
  use xarray for tree connect list.
  fix reviews from lkml.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-07 00:46:54 -07:00
Jan Pavlinec
354523d5b5 ooniprobe: update to version 3.9.0
Remove getrescources call because it is no longer
required.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-07 10:17:23 +03:00
Jan Pavlinec
4e979ceb6b python-pytest: update to version 6.2.3
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-07 10:16:56 +03:00
Hannu Nyman
90e45ce5be
Merge pull request #15235 from TDT-AG/pr/20210323-collectd-mod-ubi
collectd: add bad blocks percent calculation for ubi plugin
2021-04-07 10:16:28 +03:00
Josef Schlehofer
e21d493964
Merge pull request #15359 from BKPepe/zeroconf
zeroconf: update to version 0.29.0
2021-04-07 00:23:19 +02:00
Josef Schlehofer
c09cd1868c
Merge pull request #15358 from BKPepe/ytdl
youtube-dl: update to version 2021.4.7
2021-04-07 00:23:08 +02:00
Rosen Penev
3d65773650 minisatip: add libdvbcsa support
Unconditionally enable with BUILD_PATENTED.

Simplify configure args.

Add missing PKG_CONFIG_DEPENDS

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-06 15:22:35 -07:00
Rosen Penev
ed15856aef lualanes: build with CMake
Faster to compile.

Add license information.

Several cleanups for consistency between packages.

Small patch fix now that uClibc-ng is gone.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-06 15:22:08 -07:00
Josef Schlehofer
757b0ea647
zeroconf: update to version 0.29.0
Update copyright in Makefile

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-04-06 22:48:19 +02:00
Josef Schlehofer
701ded952a
youtube-dl: update to version 2021.4.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-04-06 22:45:06 +02:00
Jan Pavlinec
3e3025b191
knot-resolver: update to version 5.3.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-06 12:41:17 +02:00
Karl Palsson
d4e5f38147 mosquitto: bump to 2.0.10
This is a security fix, affecting 2.0.0 through to 2.0.9.  Mosquitto instances
could be remotely DoS'd by authenticated clients.

Release notes at: https://github.com/eclipse/mosquitto/blob/v2.0.10/ChangeLog.txt
CVE number has not yet been assigned.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-04-06 10:33:56 +00:00
Christian Lachner
b94645c68a haproxy: Update HAProxy to v2.2.13
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-04-06 12:56:05 +03:00
Florian Eckert
97ea947b1e
Merge pull request #15337 from SvenRoederer/xinetd-include
xinetd: honor ${IPKG_INSTROOT} when sourcing /lib/functions.sh
2021-04-06 07:51:43 +02:00
Rosen Penev
42baf1bac5 meson: fix compilation with at least spice
This commit should also get rid of pointless option warnings.

Also removed an extra ) that was causing a bad cpu value.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-05 15:31:59 -07:00
Alexandru Ardelean
afdcfb525c pillow: bump to version 8.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-04-05 15:11:48 -07:00
Rosen Penev
4b8138c8a8 libmaxminddb: build with CMake
Faster and less error prone.

Small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-05 14:59:28 -07:00
Philip Prindeville
ae3d5aa73e strongswan: bump to 5.9.2
Retire weak algorithms like MD5 and 3DES.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-05 14:58:54 -07:00
Derek Yerger
4c1fc7e311 strongswan: add more crypto plugins
Adds modules for BLISS signature scheme, NTRU and New Hope key
exchange algorithms, and dependencies ChaCha20-Poly1305 AEAD,
ChaCha20 XOF, MGF1 mask generation function, SHA3 hasher SHAKE
XOF, and the Number Theoretic Transform library.

Signed-off-by: Derek Yerger <derek@altdevs.net>
2021-04-05 14:31:49 -05:00
Philip Prindeville
a72780a9c2 strongswan: force PIC on all builds
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-05 07:31:40 -10:00
Stijn Tintel
a62090aea9 libcap: drop from feed
The libcap package was moved to OpenWrt base.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-04-05 20:02:08 +03:00
Alexandru Ardelean
156e2e354e python3: bump to version 3.9.4
For some reason Python3 jumped from 3.9.2 to 3.9.4 in about a week.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-04-05 19:32:00 +03:00
Leonardo Mörlein
24ddf22073 uacme: add retries
Prior to this commit, the acme service attempted to obtain certificates
once and then terminated, regardless of whether the certificate could be
obtained or not. This commit introduces a new uci option "retries" to
the "certificate" section. If this option is set to N, the acme service
will attempt to obtain the certificate up to N times before terminating.
There is a waiting pause between the retries to comply with the rate
limits of Let'sEncrypt.

The waiting pause is:
-  2 minutes for staging certificates
- 24 minutes for production certificates

The current "Failed Validation" rate limits of Let'sEncrypt are:
- staging:   60 per hour -> 1 failure every 1 minute in avg.
- production: 5 per hour -> 1 failure every 12 minutes in avg.

This means that we are within rate limits by a factor of two.

By default the option "retries" is set to "1", which means that acme
behaves as before by default. If the variable is set to "0", infinite
retries are performed.

This feature is helpful, when you already want to initiate the
certificate request, but you are still waiting for your dns server to be
configured, your network to appear or other conditions.

Signed-off-by: Leonardo Mörlein <git@irrelefant.net>
2021-04-04 22:16:02 -07:00
Rosen Penev
4f7aad0e52 lua-openssl: try to fix buildbot
Something is weird there. Can't reproduce on CI or locally.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-04 19:52:32 -07:00
Rosen Penev
ec6a3a1ef4 libdvbcsa: add BUILD_PATENTED
This was missing in the initial commit.

Add AUTORELEASE as well for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-04 19:40:22 -07:00
Leonardo Mörlein
9a6c2339b0 uacme: propagate rc of uacme in issue_cert()
Before this commit, issue_cert always returned 1 no matter if uacme
returned 1, 2, 3, ... With this commit, the return code of the uacme
binary is propagated. Therefore the caller of issue_cert can
differentiate between "no renew necessary" and "an error occurred".

Signed-off-by: Leonardo Mörlein <me@irrelefant.net>
2021-04-04 19:12:38 -07:00
Leonardo Mörlein
4588a61652 uacme: allow including run-uacme
With this commit, the run-acme script can be included into other scripts
by setting INLCUDE_ONLY=1.

Signed-off-by: Leonardo Mörlein <me@irrelefant.net>
2021-04-04 19:12:38 -07:00
Ondřej Caletka
0c044284b7 jool: Update to 4.1.5
Compile and run tested on: mvebu (Turris Omnia)

Signed-off-by: Ondřej Caletka <ondrej@caletka.cz>
2021-04-04 19:06:05 -07:00
Javier Marcet
0a754f2ec1 python-dotenv: update to v0.17.0
Signed-off-by: Javier Marcet <javier@marcet.info>
2021-04-05 00:42:01 +02:00
Philip Prindeville
9a6320658a
Merge pull request #14708 from pprindeville/strongswan-add-swanctl-initd
strongswan: migrate to swanctl configs
2021-04-04 13:08:26 -06:00
Philip Prindeville
f9d91f1f47 strongswan: migrate to swanctl configs
Derived from the ipsec initd script, with the following changes:

(1) various code improvements, corrections (get rid of left/right
    updown scripts, since there's only one), etc;
(2) add reauth and fragmentation parameters;
(3) add x.509 certificate-based authentication;

and other minor changes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-04 11:58:51 -06:00
Philip Prindeville
1eeb8bc287
Merge pull request #15339 from pprindeville/strongswan-reset-ipsec.conf
strongswan: remove synthesized ipsec conf files
2021-04-03 22:18:08 -06:00
Rosen Penev
0fb5d3ed2c dbus: update to 1.13.18
Switch to building with CMake for faster compilation.

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-03 19:17:13 -07:00
Rosen Penev
fc5b047c4d
Merge pull request #15329 from G-M0N3Y-2503/cache-domains-fix
cache-domains: Fixed host files directory
2021-04-03 19:07:43 -07:00
Rosen Penev
79a2677c07
Merge pull request #15330 from 1715173329/xray
xray-core: Update to 1.4.2
2021-04-03 19:07:17 -07:00
Philip Prindeville
fd9012836a bash: fixing missing PARAMS() macro in strtod.c
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-03 18:57:09 -07:00