Commit graph

9372 commits

Author SHA1 Message Date
David Bauer
a6f2d72288 usteer: update to latest git head
98247d1 usteer: track RRM and BSS-TM support per connection
6ec60fc ubus: add BSS-transition-management support
f462de0 local-node: fetch bss-transition-management support
c5242dd ubus: add supported beacon-measurement modes
0dd47b1 local-node: convert kick-dely to absolute time
96976ba readme: add initial README

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-02-19 22:36:51 +01:00
Christian Lachner
c48a375d9e haproxy: Update HAProxy to v2.4.13
- Update haproxy download URL and hash
- Updated upstream patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-02-17 19:29:30 -08:00
Lucian Cristian
58aa97cb8f uacme: proper ualpn integration
ualpn works only with openssl and gnutls, so default build will not have this included

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-02-17 19:29:24 -08:00
Tianling Shen
125da0f2f4 dnsproxy: Update to 0.41.2
Fixed typo error: `AUTORELESE` -> `AUTORELEASE`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-17 19:28:01 -08:00
Lucian Cristian
ce5755cc0b uacme: pack ualpn.sh
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-02-16 22:16:46 -08:00
Lucian Cristian
7f5dc09e5d frr: branch update, mips64 fix
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-02-16 22:15:41 -08:00
Josef Schlehofer
cb3eb63f77
Merge pull request #17850 from BKPepe/unbound
unbound: update to version 1.15.0
2022-02-16 09:15:45 +01:00
Luiz Angelo Daros de Luca
4e0d54f4d2 openvpn-easy-rsa: make it reproducible
The "build" script was replacing a ~DATE~ with current date.
Now it uses $(SOURCE_DATE_EPOCH).

Fixes #17848

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-02-15 16:41:50 -08:00
Rosen Penev
3ffd540b04 ksmbd-tools: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-14 19:50:14 -08:00
Jeffery To
b3869e1e46 obfs4proxy: Update to 0.0.13
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-02-14 17:16:54 -08:00
Etienne Champetier
66b7c19992 phantap: switch to nftables
e80be64 Remove disable_eap_hack
b066ce2 Switch to nftables / firewall4
4d88b0b Do not harcode build flags

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-02-12 23:20:54 -05:00
Sergey V. Lobanov
ac62437099 ipvsadm: fix build on macos
ipvsadm build fails on macos due to libipvs Makefiles uses system
`ar` that is not compatible with the objectes generated by OpenWrt
GCC Toolchain.

This commit adds patch to allow ar redefining
This commit modifes an old patch (removing CC=gcc is not required
due to it is redefinable)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-12 15:18:06 -08:00
Nicholas Smith
8a878440bf modemmanager: bump to 1.18.4 with patch
The included patch corrects an issue preventing udev rules from
being parsed correctly. [1][2]

This patch should not be needed after the next release. [3]

More information:
[1] e9f254ba3f
[2] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009024.html
[3] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009022.html

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
2022-02-11 11:58:42 -08:00
Josef Schlehofer
2abe98e134
unbound: update to version 1.15.0
Refresh patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-11 17:11:44 +01:00
Rucke Teg
f2a8fc48c5 openssh-server: manually set path to passwd binary
In the build environment the autotools finds the `passwd` binary in
/usr/bin. But in the target image it is available under /bin instead.
Manually set the path to `passwd` binary to `/bin/passwd`

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
2022-02-10 21:10:08 -08:00
Rucke Teg
fb113c5a70 openssh-server: change sshd.failsafe
There is no need to remove root password from /etc/shadow as the
password in the file is blank anyway in the failsafe mode.

Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
2022-02-10 21:10:08 -08:00
Tiago Gaspar
5482b98940 jool: update default config
Update the default configuration files to match the upstream example
ones.


Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2022-02-10 19:32:38 -08:00
Tianling Shen
b8b1305e74 dnsproxy: Update to 0.41.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-10 15:58:04 -08:00
Chip Lee
68704969ce mbusd: Repair UCI config file about parity
in mbusd, parity must be N, E or O, can't be y.

Signed-off-by: Chip Lee <chplee@gmail.com>
2022-02-10 15:02:06 -08:00
Dirk Brenken
067d133601
Merge pull request #17829 from neheb/6
banip: make reproducible
2022-02-10 16:34:24 +01:00
Dirk Brenken
721a310897
Merge pull request #17828 from neheb/5
adblock: make reproducible
2022-02-10 16:33:49 +01:00
Jan Hák
4de863e418 knot: update to 3.1.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2022-02-09 16:04:51 -08:00
Stijn Tintel
289a751530
Merge pull request #17827 from skingry/snmpd_init_order
net-snmp: move start order from 50 to 99
2022-02-09 19:28:59 +02:00
David Bauer
bcf4e90f0c usteer: update to latest git head
6aebb75 local-node: check correct field
f42bf29 gitignore: add .orig files
3c0cd98 local-node: save latest bss-transition-response
1dc69d7 ubus: add get_connected_clients
04ef308 local-node: save beacon-reports
b0dab90 measurement: add handling of measurements
76ccae6 node: add methods to access nodes by bssid
3b51bfb local-node: obtain channel + op-class
c7830b5 policy: add min_snr_kick_delay
e36967f local-node: handle BSS transition queries
022635c policy: don't track roam_scan_done
742236f policy: fix incurrect handling of scan-requests with disabled timeout
9a78412 policy: add roam-scan timeout
7e999e0 policy: don't select better candidate with bad signal
3c1dd51 policy: export snr_to_signal to other source files
1c5a738 ubus: only request beacon-report for current SSID
5610ace config: make remote_node_timeout configurable
918b809 policy: only select candidates with better load
55e98d8 sta: uniform disconnect state handling
806e647 sta: remove duplicate code
2ccb99e policy: remove redundant candidate evaluation
bbf133f policy: fix not selecting better candidate on request

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-02-09 11:43:26 +01:00
Alexandru Ardelean
3ebd7e7e5f tcpreplay: bump to version 4.4.0
Also need to use musl-fts when building with musl now.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-02-08 14:18:51 -08:00
Rosen Penev
59dcbb741a banip: make reproducible
Timestamp needs to be removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-07 22:02:26 -08:00
Rosen Penev
5d095a1366 adblock: make reproducible
Need to get rid of the timestamp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-02-07 22:00:12 -08:00
Seth Kingry
7b1bfb181a
net-snmp: move start order from 50 to 99
Signed-off-by: Seth Kingry <sjkingry@gmail.com>
2022-02-08 00:36:36 -05:00
Noah Meyerhans
6a0a55a5ed bind: support compile-time exclusion of DNS-over-HTTPS support
DoH is enabled by default, but disabling it removes the need to link
against libnghttp2, which may be desirable more constrained
environments.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-02-07 21:31:54 -08:00
R4SAS I2P
b9000cf231 i2pd: add service reload support
Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
2022-02-07 21:29:08 -08:00
Tianling Shen
71de776796 gg: Update to 0.2.2
Updated PKG_LICENSE_FILES according to upstream change.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-07 09:42:41 -08:00
Florian Eckert
493bf98d69
Merge pull request #17785 from TDT-AG/pr/20220204-stunnel
stunnel: update version to 5.62
2022-02-07 09:12:40 +01:00
Florian Eckert
9dbcfadf88
Merge pull request #17784 from TDT-AG/pr/20220204-keepalived
keepalived: update version to 2.2.7
2022-02-07 09:12:28 +01:00
Stan Grishin
88265c4fb9 https-dns-proxy: init script refactoring
* consolidate dnsmasq config manipulation into one function
* more elegant code for PROCD data processing (Thanks @jow-!)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-02-06 06:00:03 +00:00
Tianling Shen
c7b5e7ed67 v2rayA: Update to 1.5.6.2
Manually added new env variable `XDG_DATA_HOME` which won't be passed
by procd by default.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:41 -08:00
Tianling Shen
8465053a58 v2raya: init: convert arguments into env variables
Suggested by upstream, to provide forward compatibility.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:41 -08:00
Tianling Shen
d8d261fe2d xray-core: Update to 1.5.3
Removed outdated `alterId` in sample config.

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-04 08:28:20 -08:00
Florian Eckert
d7b73fb195 stunnel: update version to 5.62
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-02-04 08:16:33 +01:00
Florian Eckert
792d745a59 keepalived: update version to 2.2.7
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-02-04 08:14:42 +01:00
Hannu Nyman
f21774629c
Merge pull request #17671 from tohojo/sqm-nft
sqm-scripts: Change iptables dependency to iptables-nft
2022-02-03 20:00:09 +02:00
Florian Eckert
cb4719789c
Merge pull request #17748 from neheb/8
xinetd: fix bad printf formats
2022-02-03 09:16:28 +01:00
Stan Grishin
b59938c86e
Merge pull request #17762 from stangri/master-https-dns-proxy
https-dns-proxy: update to 2021-11-22-1
2022-02-02 09:12:20 -08:00
James White
435733a899 adguardhome: Bump adguardhome to v0.107.3 stable
Signed-off-by: James White <james@jmwhite.co.uk>
2022-02-02 07:25:37 -08:00
Josef Schlehofer
6c6c99ffb5 apache2: security update to version 2.4.52
Fixes CVEs:
- CVE-2021-44790
- CVE-2021-44224

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-02 07:24:59 -08:00
Philip Prindeville
2b00697f08 strongswan: Update to 5.9.5
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-02-01 23:24:46 -08:00
Toke Høiland-Jørgensen
698af2eb99 sqm-scripts: Change iptables dependency to iptables-nft
There's only one of the shaper scripts (simple.qos) that uses iptables, and
it should be fine with iptables-nft for compatibility with the new default
nft-based firewall. Confusingly, we still need the iptables-mod-ipopt
package to get the DSCP match module; we never used CONNMARK, though, so
drop the iptables-mod-conntrack-extra dependency while we're at it.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2022-02-01 23:30:17 +01:00
Nick Hainke
40b87aac95 wg-installer: use babeld add_interface function
With commit 385200443554 ("babeld: add add_interface function") babeld
has a new ubus function allowing to dynamically add an interface.

Before the add_interface function, we were required to reload babeld.
The reload influenced the babeld routing. However, the remove part is
still missing and will be added at a later stage.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-02-01 22:32:30 +01:00
Noah Meyerhans
127ef1207b bind: bump to 9.18.0
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-02-01 09:09:17 -08:00
Andy Walsh
1fa70d6a3c samba4: update to 4.14.12
* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-02-01 07:20:56 -05:00
Sergey V. Lobanov
0528707fd7 chaosvpn: fix build on macos
chaosvpn Makefile detects Darwin (macos) and changes compilation
flags for macos target, but OpenWrt is always Linux so build fails.
This patch redefines OS=Linux to use Linux compilation flags.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 18:37:30 -08:00
Stan Grishin
1e5e7ce469 https-dns-proxy: update to 2021-11-22-1
* update to 2021-11-22 upstream source
* update patch file
* update init script to preserve manual entries
	(fixes https://github.com/stangri/source.openwrt.melmac.net/issues/149)
* update init script service_triggers

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-01-31 22:15:04 +00:00
Sergey V. Lobanov
43372343ee nut: fix build on macos
nut build fails on macos due to:
1. configure script can not use AR env var due to OpenWrt build
system provides only executable name (e.g. aarch64-openwrt-linux-musl-gcc-ar)
but configure script checks if AR has '/'. As a result, configure
script ignores AR env var and uses system `ar` but macos `ar` is
not compatible with the objects generated by OpenWrt GCC toolchain.

This commit explicitly sets ac_cv_path_AR=$(TARGET_AR) to use
OpenWrt toolchain AR.

2. configure script detects if build host is macos and adds
macosx_ups driver as a build target, but this driver can not be
build with OpenWrt toolchain because OpenWrt is Linux.

This commit explicitly disables macosx_ups driver using configure
flag --without-macosx_ups

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 13:57:36 -08:00
Sergey V. Lobanov
f01baee526 softethervpn: fix build on macos
host-compile fails on macos due to several reasons:
1. host-compile Makefile always selected for linux
2. macos host cc (clang) fails due to implicit-function-declaration
3. ar and ranlib tools are hardcoded in softethervpn Makefiles

All three issues are fixed by this patch

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-31 13:57:22 -08:00
Rosen Penev
e87e3406ee bridge-utils: update to 1.7.1
Added missing limits header for PATH_MAX.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-31 07:08:39 -08:00
Rosen Penev
31a8112c51 linuxptp: fix bad formats with ppc64 and mips64
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-31 07:04:17 -08:00
André Herbst
07dec08c78 ddns-scripts: remove extra pipe
The extra pipe caused an error WARN : PID 'xyz' exit WITH ERROR '2' when executing ddns update.
Signed-off-by: André Herbst <moormaster@gmx.net>
2022-01-31 10:46:40 +01:00
Rosen Penev
d438d1295c xinetd: fix bad printf formats
Easier to use the proper C macro.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-30 23:27:41 -08:00
Sergey V. Lobanov
ae7b158723 knxd: fix build on macos
knxd compilation fails on macos due to clang does not support
exit() builtin function that is used to detect build cc

This commit adds a patch to fix this issue (replaces `exit 0` by
`return 0` in conftest.c)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-30 23:08:41 -08:00
Tianling Shen
eeb3143a88 dnsproxy: Update to 0.41.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-30 15:44:05 -08:00
Thibaut VARÈNE
8c78c33fed coova-chilli: add interface_trigger "wan"
This intends to replace the hotplug script. It still hardcodes "wan"
interface name (as several other packages do) for lack of a deterministic
way to detect the actual wan iface before it is brought up, but at least
it is fully integrated with procd and will not start a disabled service.

The interface trigger forcefully restarts chilli as a simple reload may
not be sufficient to recover from wan changes.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-01-29 21:02:28 -08:00
Thibaut VARÈNE
a3e125267c coova-chilli: remove hotplug call
This hotplug trigger unconditionaly restarts coova-chilli when the "wan"
interface sees action "ifup", without checking whether or not the
service is disabled or the upstream interface is actually called "wan".

This hotplug could be replaced by a suitable service trigger instead.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-01-29 21:02:28 -08:00
Thibaut VARÈNE
b1fb66e007 coova-chilli: execute firewall cleanup at shutdown
Coova Chilli creates "undo" firewall scripts that are intended to be run
when the daemon is shut down. Failure to do so results in leftover
entries in firewall and duplicated ones if chilli is subsequently
restarted.

Execute these scripts when the service stops.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-01-29 21:02:28 -08:00
Thibaut VARÈNE
06193dfdd6 coova-chilli: postpone startup until wan is available
Coova Chilli will fail to start if e.g. it cannot resolve names in its
configuration (like uamserver, radiusserver, etc) which is typically the
case when wan is unavailable. Prevent this situation by delaying startup
if wan is not available.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-01-29 21:02:28 -08:00
Rosen Penev
6e4bf0deaf radsecproxy: fix compilation with newer GCC
Errors on uninitialized variable. Only on powerpc64 for some reason.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-29 16:38:49 -08:00
Philip Prindeville
b8f1dcd22f
Merge pull request #17718 from pprindeville/isc-dhcp-fix-srvhost-rr
isc-dhcp: properly anchor SRV RR's
2022-01-28 22:33:24 -07:00
Philip Prindeville
93c9a1cb7a isc-dhcp: properly anchor SRV RR's
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-01-28 21:32:53 -07:00
Josef Schlehofer
dcedbe8027 prosody: update to version 0.11.13
Fixes CVEs:
- CVE-2022-0217
- CVE-2021-37601
- CVE-2021-32918
- CVE-2021-32920
- CVE-2021-32921
- CVE-2021-32917
- CVE-2021-32919

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-28 12:10:09 -08:00
Andy Walsh
7730a65d30 samba4: update to 4.14.11; fix AD_DC build
* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-01-28 12:09:09 -08:00
Sergey V. Lobanov
768a832df1 isc-dhcp: fix build on macos
isc-dhcp uses system ar tool so build fails on Darwin build host.
Embedded bind lib uses system ar and ranlib tools and fails on Darwin

This patch explicitly specifies ar and ranlib tools for target build

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-28 12:08:27 -08:00
Josef Schlehofer
98332fea15
Merge pull request #17713 from turris-cz/clamav-update
clamav: update to version 0.104.2
2022-01-28 17:34:48 +01:00
Josef Schlehofer
eddbb64bc9
clamav: update to version 0.104.2
Backported upstream pending pull request to fix following error:

CMake Error at /foo/staging_dir/host/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:218 (message):
  Could NOT find CURSES (missing: CURSES_LIBRARY)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-28 15:22:32 +01:00
Kerma Gérald
d2fd1f8346 crowdsec: update from latest upstream release 1.3.0
Changes (from 1.2.3):
https://github.com/crowdsecurity/crowdsec/compare/v1.2.3...v1.3.0

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-27 17:43:16 -08:00
Florian Eckert
64da77a4fd
Merge pull request #17646 from LugicoHDPlayer/feature-ddns-scripts-one-com
ddns-scripts: add one.com provider
2022-01-27 16:06:09 +01:00
Luca Conte
60047cdce1 ddns-scripts: add one.com provider
Signed-off-by: Luca Conte <main@lugico.de>
2022-01-27 13:59:42 +01:00
Hannu Nyman
569f3710fe miniupnpd: declare nftables variant as DEFAULT_VARIANT
Declare the nftables variant as the DEFAULT_VARIANT
as nftables firewall4 is the now default in OpenWrt.

Additionally,
 * toggle CONFLICTS placement to avoid circular dependency warning
 * use AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2022-01-26 13:11:05 -05:00
Tianling Shen
ad608b5ca7 dnsproxy: Update to 0.40.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-25 15:30:38 -08:00
Peter van Dijk
c3d2311e35 pdns: update to 4.6.0
* Bump to 4.6.0
* Remove "random" backend as it is gone upstream

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-25 15:30:30 -08:00
Jan Hoffmann
948f0d29cc vnstat2: update to version 2.9
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2022-01-25 21:54:48 +01:00
Daniel Bermond
9baa761936 proxychains-ng: update to version 4.16
Maintainer: me

Build system: Arch Linux x86_64
Build tested: ipq806x/R7800
Run tested  : ipq806x/R7800

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
2022-01-25 21:54:13 +01:00
Nick Hainke
94efdcf02a wg-installer: fix multiple namespaces
Add flag "--lookup-default-namespace" to signal that wg-installer should
look already established wireguard sessions in the default namespace.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-23 00:08:32 +01:00
Stijn Tintel
59af1d0694
Merge pull request #17543 from stintel/vallumd
vallumd: bump to 0.2.0
2022-01-22 16:59:25 +02:00
Tiago Gaspar
28ac3a6997 jool: remove iptables support and update templates
This commit removes iptables backend support and leaves only the
netfilter backend support. This means that:
-  iptables and nftables firewall based systems (firewall3 and firewall
4) are supported trough the netfilter instance mode
-  the iptables/xtables mode support is disabled

For more information on the modes and how to use the new netfilter
instance checkout https://www.jool.mx/en/intro-jool.html

This move is made out of the commit upstream that sets firewall4 as the
default for new default buils and based on the conversation in #16818
and was decided that the netfilter interface is the priority since
iptables support will be dropped in the foreseeable future.

While at it update the templates provided.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2022-01-21 18:57:02 -08:00
Sergey V. Lobanov
270e8eabc3 libreswan: fix build on macos
libreswan makefile detects macos (darwin) and changes build logic
but OpenWrt is always Linux so it is required to specify linux as
target platfrom

This patch specifies Linux as a target platfrom

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-20 20:49:08 -08:00
Kerma Gérald
d6b116cb43 crowdsec-firewall-bouncer: fix name in initd to start the process
crowdsec rename the binary from crowdsec-firewall-bouncer to cs-firewall-bouncer
the initd need the correct binary name to start the process
the link for github source need also to be fixed (only the information one)
fix the BuildDate
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-20 20:48:18 -08:00
Tianling Shen
de310c7ff0 dnsproxy: Update to 0.40.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-20 20:47:01 -08:00
Glenn Strauss
3badd76668 lighttpd: update to lighttpd 1.4.64 release hash
remove long-deprecated modules

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-01-20 15:21:28 -08:00
Nick Hainke
fab86eb626 wg-installer: remove unused dependency
Remove the dependency "coreutils-realpath" from
wg-installer-server-hotplug-olsrd.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 15:56:02 +01:00
Nick Hainke
324fa79d7c wg-installer: create wireguard key if it does not exist
Check if the key exists which is given by
    option wg_key '/etc/wgserver/wg.key'

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 14:44:26 +01:00
Nick Hainke
432a965689 wg-installer: install cronjob
Install a cronjob that removes unused wireguard interfaces every 10
minutes.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 09:51:05 +01:00
Nick Hainke
da48bc3792 wg-installer: check if a key is already inserted
Check if a peer is already existing with a given public key. Introduce a
response code for signaling why the server rejected the request.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 09:19:04 +01:00
Nick Hainke
69c81790d1 wg-installer: rework code
Use shellcheck to rework the code. Use "export" to return variables from
a function call. Further, fix typos.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 02:04:50 +01:00
Peter van Dijk
8ca0439f97 dnsdist: update to 1.7.0
* bump to 1.7.0
* add outgoing DNS over HTTPS support, using new dependency nghttp2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-19 13:27:16 -08:00
Peter van Dijk
9e3d0bdd82 pdns-recursor: update to 4.6.0
* bump to 4.7.0
* enable DNS over TLS (uses libssl which was already a dependency)
* add libcurl dependency for new zone-to-cache feature.

Co-Authored-By: wout@wbnet.eu
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-19 13:27:03 -08:00
Sergey V. Lobanov
d60a7ccedc ola: fix build on macos
Latest Apple clang (v13) defines __cplusplus=199711 by default, but
protobuf requires at least 201103 (c++11)

Backported patch to fix c++ detection:
30fe936a88

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-19 11:25:15 -08:00
Lucian Cristian
a1cdf51ba8 frr: update to latest
also fix mips compile

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-01-18 21:29:39 -08:00
Josef Schlehofer
042bf16072 git: update to version 2.34.1
- Refreshed patches

- Release notes 2.34.0:
2ae0a9cb82/Documentation/RelNotes/2.34.0.txt

- Release notes 2.34.1:
2ae0a9cb82/Documentation/RelNotes/2.34.1.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-18 18:06:07 -08:00
Robert Marko
9f0fdb0ee2 mdio-tools: update to version 1.0.1
Version 1.0.1 brought the following changes:
[v1.0.1] - 2021-11-26

Primarily fixes a few issues in the kernel module that were found
during a quick review from Russell King:

https://lore.kernel.org/netdev/YYPThd7aX+TBWslz@shell.armlinux.org.uk/
https://lore.kernel.org/netdev/YYPU1gOvUPa00JWg@shell.armlinux.org.uk/

- mdio: The mvls subcommand now supports flushing the ATU

- mdio-netlink: Plug some glaring holes around integer overflows of
  the PC.
- mdio-netlink: Release reference to MDIO bus after a transaction
  completes.

So, update to the latest version and switch the kernel module back
to fetching tarballs like the userspace tool does.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2022-01-18 18:05:33 -08:00
Nick Hainke
38a9a3e0dc wg-installer: cosmetic changes
Use "ip addr" instead of "ip addres" or "ip a".

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-18 18:20:20 +01:00
Kerma Gérald
de41b63ca4 crowdsec: update from upstream latest release 1.2.3
update from latest upstream release 1.2.3
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-18 16:31:31 +01:00
Florian Eckert
505b6c74db
Merge pull request #17586 from clayface/davfs2-secrets
davfs2: add secrets file to conffiles definition
2022-01-18 09:28:56 +01:00
Sergey V. Lobanov
5cd8b75f94 redsocks: fix build on macos
fix cross-compile issues (on macos)
use $CC -dumpmachine instead of `uname`
use $CC instead of CC

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-17 21:09:19 -08:00
Lucian Cristian
ec252c20cc libreswan: update to 4.6
this update also fixes a CVE

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-01-17 21:08:31 -08:00
Othmar Truniger
a2ba5e57cb knxd: bump to new upstream version 0.14.53
Signed-off-by: Othmar Truniger <github@truniger.ch>
2022-01-17 20:52:03 -08:00
Nick Hainke
7cb73ae3b9 dawn: update to 2022-01-17
877e2dc iwinfo: fix get_bandwidth_iwinfo
9ce01ec datastorage: fix multi-SSID
9187665 treewide: improve maintaince
6bf9b6d memory: Tighten up some memory handling to help spot errors
4df0c98 treewide: improve logging

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-17 11:52:42 +01:00
Michael Heimpold
6831c51a8c
Merge pull request #17534 from neheb/4
knxd: fix compilation with newer glibc
2022-01-16 15:39:17 +01:00
Nick Hainke
b89eb0115f wg-installer: switch to ubus call for olsrd hotplug
Use ubus ipc calls to add and remove interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-16 11:05:27 +01:00
Nick Hainke
fea27cec05 wg-installer: rework iproute2 commands
- Use ip address add instead of ip a a
- Directly add broadcast address

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-16 10:39:19 +01:00
Florian Eckert
b4694bb82c
Merge pull request #17617 from hgl/ddns-cloudflare
ddns-scripts-cloudflare: fix shell conditional
2022-01-15 16:03:37 +01:00
Glen Huang
aed4dbf349 ddns-scripts-cloudflare: fix shell conditional
Signed-off-by: Glen Huang <heyhgl@gmail.com>
2022-01-15 22:33:28 +08:00
Florian Eckert
e85fa926e6
Merge pull request #17600 from camarel/feature/ddns-scripts-wget-user-agent
ddns-scripts: pass user agent string
2022-01-15 15:24:43 +01:00
Claudio Marelli
dc0953fedd ddns-scripts: pass user agent string
This adds a user agent string to the wget request.

Fixes #17507

Signed-off-by: Claudio Marelli <camarelli@gmx.net>
2022-01-15 10:07:30 +01:00
Josef Schlehofer
0f0c7b8ea4
Merge pull request #17432 from r4sas/i2pd-2.40.0
i2pd: Update to 2.40.0, update init.rc script, UCI config and Makefile
2022-01-14 16:27:24 +01:00
R4SAS I2P
ac27fffff9
i2pd: Update to 2.40.0 and update package sources
* Updating i2pd package to 2.40.0
* Rewrite Makefile
* Remove usage of PKG_INSTALL (package's make install)
* Rewrite init.rc configuration and script
* Remove '--service' option from init, which only sets datadir to /var/lib/i2pd
* Use '--datadir' option in init, otherwise datadir changing via uci is not works
* Update patch for i2pd.conf

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
2022-01-14 12:46:37 +00:00
Aleksander Morgado
ab061c8ddd modemmanager: remove 2s timeout before reporting cached events
When ModemManager is started on boot we may end up with hotplug events
reported directly to the daemon, plus some others already cached in
the cache file before the daemon was started.

If the cached events correspond to the same device that is still
notifying ports directly, we may end up with a modem object created
before the cached events have been emitted, so the modem may not
handle all control/data ports it should.

E.g.:

  - modem detected
  - hotplug event for wwan0 port, cached as MM not running
  - hotplug event for cdc-wdm0 port, cached as MM not running
  - hotplug event for ttyUSB0, cached as MM not running
  - MM starts
  - hotplug event for ttyUSB1, directly processed as MM is running
  - hotplug event for ttyUSB2, directly processed as MM is running
  - modem object created with ttyUSB1 and ttyUSB2
  - 2s after MM starts, cached events for wwan0, cdc-wdm0 and ttyUSB0
    happen, but are ignored because the modem object has already been
    created

MM expects that ports of the same device are reported with less than
1500ms in between ports. In other words, if ports are reported more
than 1500ms after the last reported port, they may get ignored.

If we remove the 2s timeout, the report of the cached events will
happen as soon as MM starts, which makes it much more likely to happen
in the timeslot that MM expects for ports of the same device reported.
The logic is still not perfect, and we may also need to increase that
1500ms timeout inside MM, but removing the 2s timeout right away here
makes sense.

This 2s timeout was introduced along with the new wrapper launcher for
the daemon, it didn't exist before.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2022-01-13 15:54:02 -08:00
Florian Eckert
bd10c454f4
Merge pull request #17563 from TDT-AG/pr/20220110-stunnel
stunnel: update to 5.61
2022-01-13 10:32:58 +01:00
Josef Schlehofer
8b2003ba34
Merge pull request #17494 from BKPepe/update-atlas
Atlas SW probe to version 5040 and its busybox version
2022-01-13 10:17:14 +01:00
Nick Hainke
53503c4a3a wg-installer: fix shell typo
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-12 18:58:46 +01:00
Nick Hainke
ee879d3747 wg-installer: allow defining link costs for hotplugs
Add options to set link costs in mesh routing daemons.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-12 17:47:26 +01:00
Tiago Gaspar
98ac608fb8 jool: update to 4.1.6, add init files and default configuration
This commit adds support for starting and running jool through init
scripts, with default config files as examples.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2022-01-12 04:00:30 -08:00
Rui Salvaterra
72974bed43 tor: bump to 0.4.6.9 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-01-12 01:56:39 -08:00
Sergey V. Lobanov
4b23b2df3b iodine: fix build on macos
redefine TARGETOS=Linux due to OpenWrt is always Linux

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-12 01:56:19 -08:00
Nick Hainke
6a59d41fbf wg-installer: private key as parameter
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-12 01:29:48 +01:00
Pascal Coudurier
f9bbc5173c nut: refactor upssched uci-defaults script
Add checks not to overwrite defaultnotify options in the nut-sendmail-notify fashion.
Use lists for defaultnotify instead of option.
Add check not to overwrite notifycmd if already defined.
upssched-cmd script must not be called directly, it is called by the upssched binary with needed arguments.

Signed-off-by: Pascal Coudurier <coudu@wanadoo.fr>
2022-01-11 16:27:19 -08:00
Pascal Coudurier
0f91594e2a nut: refactor nut-monitor uci config file
Convert notifyflags options to lists as supported by the init script, so multiple options can be chosen.
Add SYSLOG default option to individuals notifyflags instead of deprecated flag 1|0.
Add comment for defaultnotify and individuals notifyflags about possible values.

Signed-off-by: Pascal Coudurier <coudu@wanadoo.fr>
2022-01-11 16:27:19 -08:00
Pascal Coudurier
a46fd908df nut: fix typo in nut-monitor init script
This fixes a typo in the nut-monitor init script when building config file from uci config.

Signed-off-by: Pascal Coudurier <coudu@wanadoo.fr>
2022-01-11 16:27:19 -08:00
Sergey V. Lobanov
366c1b6fa7 lynx: fix build on macos
lynx uses host C-compiler to build internal utility that is used to
generate files required for target build. On MacOS it uses internal
clang with MacOS system headers so host build fails due to MacOS is
not Linux

Forced to use OpenWrt host C compiler using --with-build-*
./configure flags

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-11 16:23:58 -08:00
Hauke Mehrtens
d4b2345802 ntpd: Fix compile with glibc 2.34
This adds a patch from Open embedded to fix compilation with glibc 2.34.
This patch was taken from here:
https://github.com/openembedded/meta-openembedded/blob/master/meta-networking/recipes-support/ntp/ntp/0001-libntp-Do-not-use-PTHREAD_STACK_MIN-on-glibc.patch

It fixes the following build problem:
work_thread.c:45:57: error: missing binary operator before token "("
   45 | #if defined(PTHREAD_STACK_MIN) && THREAD_MINSTACKSIZE < PTHREAD_STACK_MIN
      |                                                         ^~~~~~~~~~~~~~~~~
make[7]: *** [Makefile:892: work_thread.o] Error 1

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2022-01-11 16:23:00 -08:00
Hauke Mehrtens
1de56f8990 radsecproxy: Fix compile with glibc 2.34
This backports a patch from upstream radsecproxy to fix compilation with glibc 2.34.

It fixes the following build problem:
radsecproxy.h:35:5: error: missing binary operator before token "("
   35 | #if PTHREAD_STACK_MIN > PTHREAD_STACK_SIZE
      |     ^~~~~~~~~~~~~~~~~
make[5]: *** [Makefile:623: dtls.o] Error 1

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2022-01-11 16:21:19 -08:00
Matthew Hagan
ebaec4c441 davfs2: add secrets file to conffiles definition
davfs2 username and password information is typically stored in
/etc/davfs2/secrets. This information should be kept across sysupgrades.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-01-12 00:20:19 +00:00
Nick Hainke
8ab044712a wg-installer: generate new keys for every connection
Generate new keys on every new connection.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-12 00:51:08 +01:00
Rui Salvaterra
e636e433c1 stubby: explicitly disable static linking
Although undocumented, there's a way to explicitly disable static linking in
Stubby, setting the CMake build option ENABLE_GETDNS_STATIC_LINK to OFF (ON by
default). Make it so.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-01-11 14:54:25 -08:00
Florian Eckert
9c12900aee
Merge pull request #17535 from hgl/ddns-cloudflare
ddns-scripts-cloudflare: allow explicit zone_id
2022-01-11 16:13:04 +01:00
Nick Hainke
5e8301d7dc wg-installer: fix using symlinks for conf files
It is useful to symlink babeld and olsrd to /tmp/ if we frequently
write to those config files.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-11 00:27:43 +01:00
Noah Meyerhans
2978bc1977 iputils: bump to 20211215
Drop the tftpd binary, which is no longer provided upstream.  Users
should switch to the atftp server as a replacement.

Avoid executing runtime tests, which are not supported in cross-build
environments.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-01-10 11:18:09 -08:00
Florian Eckert
71467fe5ee stunnel: add new protocol option capwin and capwinctrl
The new protocol capwin and capwinctrl was added in version 5.61
https://www.stunnel.org/NEWS.html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-01-10 14:52:44 +01:00
Florian Eckert
1e17d3b93c stunnel: update to 5.61
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-01-10 14:37:09 +01:00
Florian Eckert
4e0a711bc2 stunnel: add missing sessionResume option
The option sessionResume was added in version 5.60
https://www.stunnel.org/NEWS.html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-01-10 14:32:03 +01:00
Jeffery To
15008be5cb
Merge pull request #17341 from erdoukki/fail2ban-2to3
fail2ban: fix 2to3 error
2022-01-10 20:48:03 +08:00
Glen Huang
78ef7d7379 ddns-scripts-cloudflare: allow explicit zone_id
When zone id is explicitly provided, there is no need for the API token to have read permission. Inspired by acme.sh's cloudflare logic.

Signed-off-by: Glen Huang <heyhgl@gmail.com>
2022-01-10 20:44:40 +08:00
Nick Hainke
e6afcf8f3c wg-installer: fix cleanup script
The wrong function was called.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-10 13:32:20 +01:00
Christian Lachner
8891db4a91 haproxy: Update HAProxy to v2.4.10
- Update haproxy download URL and hash
- Updated upstream patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-01-09 13:50:49 -08:00
Kerma Gérald
b4f48b5c23 crowdsec-firewall-bouncer: update to 0.0.21
Update crowdsec-firewall-bouncer to latest upstream release version 0.0.21

Makefile rework
- use tagged version for download

Fixes
- set API_KEY in firewall bouncer config file

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-09 13:44:20 -08:00
Sergey V. Lobanov
e660ac3398 krb5: fix build on macos
backport of upstream commit
3c66c1fec7
Original author: Nikhil Benesch <nikhil.benesch@gmail.com>

Remove unnecessary flag in macOS build
The configuration logic for adding the `-search_paths_first` linker
flag on Darwin does not correctly handle cross compilation.  It should
check the value of $krb5_cv_host rather than `uname -s` to detect when
the compilation target is Darwin, rather than the build machine.

It turns out `-search_paths_first` has been the default behavior of ld
on macOS since XCode 4.  So just remove that bit of logic entirely.
(The flag was added in commit acd27af0e845f8b93de2e226cc2ec9ac8af52077
in 2004; XCode 4 was released in 2010.)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-09 13:43:48 -08:00
Matthew Hagan
019501fe44 transmission: add ca_bundle support with procd-ujail
With procd-ujail enabled, it is not possible to use HTTPS URLs, for
example when either for downloading torrent files or blocklists. The
followig example occurs when downloading a URL from the "Upload Torrent
Files" dialogue box:

Error adding
"https://releases.ubuntu.com/21.10/ubuntu-21.10-desktop-amd64.iso.torrent":
gotMetadataFromURL: http error 0: No Response

syslog will also hint that no CA_BUNDLE is being used:

transmission-daemon[6683]: [2021-12-30 20:01:30.990] web will verify
tracker certs using envvar CURL_CA_BUNDLE: none (web.c:455)

This patch rectifies this issue by adding a ca_bundle configurable,
enabled by default. This explicitly fixes the ca_bundle file location
to /etc/ssl/certs/ca-certificates.crt and adds this file to the procd
jail. On subsequent testing, HTTPS URL download functionality is
restored.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-01-09 21:18:15 +00:00
Stan Grishin
dd81a4878c curl: update to 7.81.0
* changes: https://curl.se/changes.html#7_81_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-01-09 19:51:47 +00:00
Stijn Tintel
31fd0f03b2 vallumd: bump to 0.2.0
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-01-09 18:31:47 +02:00
Nick Hainke
0e416dadd1 wg-installer: fix typo in cleanup function
The delete variable was misspelled leading to devices always being
removed although they had connected neighbors.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-09 13:33:03 +01:00
Nick Hainke
714b51c630 wg-installer: add cleanup script
Add script to cleanup unused wireguard interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-09 10:21:44 +01:00
Rosen Penev
33181c98a4 knxd: fix compilation with newer glibc
the link variable conflicts with the link() function.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-08 20:41:13 -08:00
Rosen Penev
e7547d980d Revert "pdns-recursor: temp"
This reverts commit 96e355836d.
2022-01-08 19:06:07 -08:00
Rosen Penev
96e355836d pdns-recursor: temp
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-08 19:05:17 -08:00
Kerma Gérald
2a34e4987b crowdsec: update to 1.2.2
Update crowdsec to latest upstream release version 1.2.2

Makefile rework
- use tagged version for download

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-08 23:04:44 +01:00
Nick Hainke
4302bfd3c8 wg-installer: fix ipv4 meshing via olsr
The ipv4 address space was not allowed.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-08 22:30:47 +01:00
Kerma Gérald
ad0e1a1c3c fail2ban: fix 2to3 error
Issue: 2to3 support has been removed in setuptools since version 58.0.0.

Fix: openwrt/packages#17311

Requirements: 2to3/host openwrt/packages#17429

Add upstream patch: 196c55e931

To install/build for python3 from source, it is necessary to convert to py3
codebase before setup (invoke 2to3 or ./fail2ban-2to3 firstly).
> ./fail2ban-2to3
> python3 setup.py build

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-08 20:19:32 +01:00
Josef Schlehofer
a4325bc3b9
Merge pull request #17491 from jefferyto/obfs4proxy-0.0.12
obfs4proxy: Update to 0.0.12
2022-01-07 21:40:56 +01:00
Oleg Derevenetz
8bf6a355d4 bwping: update to version 2.4
Signed-off-by: Oleg Derevenetz <oleg-derevenetz@yandex.ru>
2022-01-07 21:38:10 +01:00
Nick Hainke
98d8680a8c wg-installer: add ipv4 support
Add base_v4prefix to allow ipv4 mesh connections.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-07 08:04:00 +01:00
Josef Schlehofer
3b17fd5b30
Merge pull request #17502 from jefferyto/radicale2-2.1.12
radicale2: Update to 2.1.12
2022-01-06 23:29:24 +01:00
Josef Schlehofer
c1e7bab06a
Merge pull request #17500 from jefferyto/radicale-1.1.7
radicale: Update to 1.1.7
2022-01-06 23:29:10 +01:00
Nick Hainke
d35c22951b wg-installer: add hotplug script for olsr
Add hotplug-olsrd to automatically mesh with olsrd via new wireguard
links.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-06 22:24:08 +01:00
Jeffery To
b37f409146
radicale2: Update to 2.1.12
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-05 19:23:55 +08:00
Jeffery To
8d0018f549
radicale: Update to 1.1.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-05 18:48:17 +08:00
Stijn Tintel
7fbc5d4db3 miniupnpd: create iptables and nftables variant
The next OpenWrt stable release aims to use firewall4 by default. As
this uses nftables as backend, miniupnpd will no longer work. Create an
iptables and nftables variant of the miniupnpd package so that miniupnpd
can be used with either firewall variant.

See #16818 for more info.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-01-05 11:00:02 +02:00
Stijn Tintel
23ba57418c Revert "miniupnpd: introduce IGDv1 variant"
Since version 2.2.3, miniupnpd will detect MS clients and force IGDv1.

This reverts commit 7f5534ac7a.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-01-05 11:00:02 +02:00
Shaleen Jain
82010861aa miniupnpc: update to version 2.2.3
Signed-off-by: Shaleen Jain <shaleen@jain.sh>
2022-01-05 08:18:38 +01:00
Shaleen Jain
c2e846dae6 miniupnpd: update to version 2.2.3
Signed-off-by: Shaleen Jain <shaleen@jain.sh>
2022-01-05 08:18:38 +01:00
Josef Schlehofer
cf65ca2db0
atlas-probe: update to version 2.4.1
Removed patches:
001-fix-stime-glibc-remove.patch - it is included in upstream
003-Fix-compilation-with-gcc11.patch - no longer necessary

Updated patches:
002-Avoid-problems-with-64-bit-time_t.patch

Refreshed patches:
004-Comment-out-librt-testing.patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-04 12:57:42 +01:00
Josef Schlehofer
ec767eb499
atlas-sw-probe: update to version 5040
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-04 12:57:42 +01:00
Jeffery To
1c7a6d5cc2
obfs4proxy: Update to 0.0.12
Parts of the meek_lite transport are GPL3 (added in 0.0.9), the rest of
the program is BSD 2-Clause.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-04 13:56:42 +08:00
Rosen Penev
b434cd71b9 inadyn: update to 2.9.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-01-03 18:02:59 -08:00
Rui Salvaterra
e6809f7d79 stubby: clean up the makefile
These cmake modules are actually never referenced. Stubby itself doesn't link to
libidn or libunbound, only getdns does. They're most likely leftovers from when
stubby was split from getdns to its own repository.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-01-03 02:18:57 -08:00
James White
a02d4f646f adguardhome: Update to v0.107.2 stable
Signed-off-by: James White <james@jmwhite.co.uk>
2022-01-02 20:12:40 +01:00
Tianling Shen
a97c3c8cda
dnsproxy: Update to 0.40.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-02 14:13:36 +08:00
Tianling Shen
914e6eb7e2 dnsproxy: Update to 0.40.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-12-29 10:20:50 +01:00
Florian Eckert
bca4b5032e
Merge pull request #17418 from TDT-AG/pr/20211222-mwan3
mwan3: fix mwan3 flush conntrack table call
2021-12-28 14:52:06 +01:00
Dmitry Mikhirev
bdd264b890 stubby: quote address value in config
fixes #17421

Signed-off-by: Dmitry Mikhirev <mikhirev@gmail.com>
2021-12-26 15:43:07 +01:00
Josef Schlehofer
87c393f0ae
Merge pull request #17409 from alaviss/adguardhome-update
adguardhome: update to 0.107.0
2021-12-25 23:49:36 +01:00
David Bauer
2a371898c3 usteer: fix PKG_SOURCE_DATE
Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: David Bauer <mail@david-bauer.net>
2021-12-24 17:49:24 -08:00
Josef Schlehofer
aafa614dea
Merge pull request #17388 from AuthorReflex/openvpn-2.5.5
openvpn: update to 2.5.5
2021-12-24 18:41:41 +01:00
Josef Schlehofer
841f4766d1
Merge pull request #17427 from 1715173329/xr
xray-core: Update to 1.5.2
2021-12-24 18:39:15 +01:00
Tianling Shen
d2b957e178
dnsproxy: Update to 0.40.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-12-24 23:15:51 +08:00
Tianling Shen
418e59356b
xray-core: Update to 1.5.2
Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-12-24 23:12:16 +08:00
Hiếu Lê
f44603a131
adguardhome: update to 0.107.0
Full changelog available at: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.0

packr has been removed from build dependencies, per
c6888326b0 (diff-2873f79a86c0d8b3335cd7731b0ecf7dd4301eb19a82ef7a1cba7589b5252261L2)

Also added the ability to configure working directory location and moved
the directory to /var. On most setups this should not change anything,
as /var is symlinked to /tmp. The move mostly benefits setups where /var
is configured to be persistent.

The working directory is used by AdGuard to store persistent data like
query logs, filter lists, etc.

Data stored in this directory can get really huge, as such allowing
this directory to be moved elsewhere (ie. an USB drive) is very
beneficial.

Co-authored-by: Dobroslaw Kijowski <dobo90@gmail.com>
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Hiếu Lê <leorize+oss@disroot.org>
2021-12-22 22:06:49 -06:00
Dirk Brenken
25dd0c63af
adblock: 4.1.3-4
* fix backup dir creation in raw mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-12-22 13:19:40 +01:00
Matthew Hagan
c815c9a94d geoipupdate: initial commit
Add MaxMind's geoipupdate utility. mmdb files are downloaded to /var/GeoIP
by default. The user should update /etc/GeoIP.conf with their API key and
DB choice, currently set to country only. So as not to exceed MaxMind's
download limitations, the user should manually run the utility or set up a
cron job.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2021-12-22 02:09:22 -08:00
Florian Eckert
e1f321150d mwan3: fix mwan3 flush conntrack table call
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-12-22 09:28:12 +01:00
Kerma Gérald
ffd97e173c crowdsec-firewall-bouncer: remove crowdsec package dependency
Remove un-necessary crowdsec package dependency, to be able to use
crowdsec-firewall-bouncer independently from crowdsec local installation.
(with remote API)

Fix issue: https://github.com/openwrt/packages/issues/17406

Description:
  using crowdsec-firewall-bouncer on many OpenWRT devices connected
  with my domain LAPI server (which collect many crowdsec machines,
  mostly nginx), it works great. Actually, crowdsec package is not
  mandatory for that usage, it would be great if it was not a dependency.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2021-12-22 06:18:48 +01:00
Tianling Shen
575bda1f63 gg: add new package
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-12-21 17:39:16 -08:00
Tianling Shen
6d56c80ff9 xray-core: Update to 1.5.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-12-21 17:37:53 -08:00
Jan Hák
2a56e478f5 knot: update to 3.1.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2021-12-21 17:18:16 +01:00
Wes Morgan
efb908b032 tailscale: update to 1.18.2
Signed-off-by: Wes Morgan <git@wesmorgan.me>
2021-12-20 11:27:50 +02:00
Alexandru Ardelean
3663b48186
Merge pull request #17378 from neheb/22
davfs2: update to 1.6.1
2021-12-20 11:26:02 +02:00
Maxim Storchak
6243a17250 tgt: update to 1.0.81
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2021-12-19 17:38:10 -08:00
Florian Eckert
3d809e0482
Merge pull request #17265 from TDT-AG/pr/20211203-modemmanager
modemmanager: refactoring procd init script
2021-12-18 12:08:59 +01:00
Ivan Pavlov
353499ac9d openvpn: update to 2.5.5
Maintainer: me / @mkrkn
Compile tested: ramips/mt7620 TP-Link Archer C50 v1, ramips/mt7621 Xiaomi Mi router 3 Pro, ath79/generic TP-Link WDR-3500
Run tested: ramips/mt7620 TP-Link Archer C50 v1, ramips/mt7621 Xiaomi Mi router 3 Pro, ath79/generic TP-Link WDR-3500

openvpn: update to 2.5.5

use of CFG Spectre-mitigations in MSVC builds
bring back OpenSSL config loading to Windows builds
several build fixes, refer to https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2021-12-18 11:39:34 +03:00
Rosen Penev
0ad6384b5f atftp: update to 0.7.5
Remove upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-12-17 14:09:50 -08:00
Imran Khan
726633301e nft-qos: bump PKG_RELEASE
Signed-off-by: Imran Khan <gururug@gmail.com>
2021-12-17 14:07:47 -08:00
Imran Khan
4f4f66fd17 nft-qos: fix monitor duplicates
nft command syntax is incorrect

rearrange parameter order

Signed-off-by: Imran Khan <gururug@gmail.com>
2021-12-17 14:07:47 -08:00
Imran Khan
6d095c479a nft-qos: fix include on image build service enable
Fixes: f88485f572 ("nft-qos: silence buildsystem errors")

Prefixing IPKG_INSTROOT to sourced includes is ineffective for this
package.

Source includes only when empty to avoid image make errors.

Signed-off-by: Imran Khan <gururug@gmail.com>
2021-12-17 14:07:47 -08:00
Rui Salvaterra
cb9229870e sqm-scripts: drop redundant dependency
The kmod-sched-cake package already depends on kmod-sched-core, there's no need
for explicitly stating the dependency.

While at it, change PKG_RELEASE to $(AUTORELEASE).

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-12-17 18:33:42 +01:00
Rosen Penev
c44b96078b bwm-ng: update to 0.63
Remove upstreamed patch.

Add autoreconf and fixup configure section. The tarball no longer ships
configure and Makefiles.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-12-17 02:55:39 -08:00
Rosen Penev
4a400ed105 ariang: update to 1.2.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-12-16 19:26:45 -08:00
Rosen Penev
461c972d86 davfs2: update to 1.6.1
Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-12-16 15:53:40 -08:00
Alexander Ryzhov
89d5d2e091 fail2ban: Python 10.0 compatibility
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
2021-12-16 15:35:05 -08:00
W. Michael Petullo
605d06a014 snort: update to 2.9.19
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2021-12-16 15:31:07 -08:00
W. Michael Petullo
6c57db2bea snort3: update to 3.1.18.0
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2021-12-16 15:30:41 -08:00
Miroslav Lichvar
ca9ddcc7f8 chrony: update to 4.2
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2021-12-16 15:27:20 -08:00
Stijn Tintel
6fe18ac4de openvswitch: partially restore kmod-mpls dependency
Enabling OPENVSWITCH in the kernel config selects MPLS. This exposes the
MPLS_ROUTING symbol, which is missing if kmod-mpls is not enabled. On
kernel 5.4 this problem doesn't show up, as the Open vSwitch package
uses the in-tree kernel modules rather than the upstream ones.

Restore the kmod-mpls dependency when using the upstream kernel modules
to fix build.

Reported-by: Matthew Hagan <mnhagan88@gmail.com>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-12-16 13:27:24 +08:00
Matthew Hagan
5ffc45126d openvswitch: fix libunbound dependency check
The ifeq check for CONFIG_OPENVSWITCH_WITH_LIBUNBOUND does not evaluate
correctly within the menuconfig, resulting in libunbound not being
selected, resulting in a failing libunbound.so.8 dependency.

Instead add this condition:dependency in the manner defined in the
OpenWrt developer guide.

Signed-off-by: Matthew Hagan <mathagan@fb.com>
2021-12-16 13:25:37 +08:00
Matthew Hagan
136003c44d openvswitch: Change dependency from append to definition
ovs_libovsdb_depends and ovs_libofproto_depends append the libatomic
dependency. However in these cases these variables were not previously
defined and thus a reader may search the Makefile for the definition.
Therefore change the operator to explicitly define these dependency
variables, rather than append. In addition add a space after operator to
improve readability and conform to other dependency definitions in the
Makefile.

Signed-off-by: Matthew Hagan <mathagan@fb.com>
2021-12-16 13:25:37 +08:00
Matthew Hagan
4e5eb5e0b9 openvswitch: merge dependency lists
Rather than defining dependencies, then appending the libatomic
dependency on the following line, merge all into one definition.
Simultaneously, sort by alphabetical order.

Signed-off-by: Matthew Hagan <mathagan@fb.com>
2021-12-16 13:25:37 +08:00
Florian Eckert
7bd395fdbc
Merge pull request #17333 from ysc3839/ddns-ns1
ddns-scripts: add ns1.com provider
2021-12-15 12:50:01 +01:00
Richard Yu
9e6dd11484
ddns-scripts: add ns1.com provider
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
2021-12-15 18:22:56 +08:00
Tianling Shen
5f1e6f7d09 dnsproxy: Update to 0.39.13
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-12-14 19:01:08 +01:00
Florian Eckert
45a56a8899 modemmanager: refactoring hotplug debug logging
The output of the hotplug is very chatty and floods the log with
messages that are not necessary in functioning operation.

So that the log can be filtered. A log level was added to each message
as the first opiton on mm_log function call.

In addition, the facility of the hotplug script has been set to daemon,
which in my view fits better than user.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-12-14 09:17:34 +01:00
Florian Eckert
dc7095baff ModemManager: add service options
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-12-14 09:17:02 +01:00
Sergey V. Lobanov
8457944e61 nfs-kernel-server: fix build on macos arm64
1. prctl() check is not required for host-compile on any OS due to prctl
is not used in rpcgen which is only one is compiled during host-compile
phase. prctl() check is disabled via HOST_CONFIGURE_VARS in OpenWrt makefile

2. __DARWIN_ONLY_64_BIT_INO_T is true on macos arm64 so struct stat64
and stat64() are not available. This patch defines stat64 as stat if
__DARWIN_ONLY_64_BIT_INO_T is true

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2021-12-13 19:57:18 -08:00
W. Michael Petullo
f614850285 krb5: update to 1.19.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2021-12-13 09:03:05 +01:00
Kerma Gérald
515f8489cc crowdsec-firewall-bouncer: update to 0.0.18
Update to upstream release 0.0.18

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2021-12-12 19:14:48 +01:00
Tianling Shen
21e98e952f v2rayA: Update to 1.5.5
Breaking changes:
The database has been replaced with boltdb to try to solve the problem
of database corruption.

Note that the data will not be migrated, but the previous data will be
retained. If you need the previous data, just downgrade v2rayA (v1.5.4).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-12-12 01:39:40 -08:00
Glenn Strauss
35dff58b3a lighttpd: update to lighttpd 1.4.63 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2021-12-12 08:01:17 +01:00
Glenn Strauss
ddecac45c8 lighttpd: update to lighttpd 1.4.62 release hash
depend on libpcre2 instead of libpcre

also remove patches incorporated upstream into lighttpd 1.4.62

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2021-12-12 08:01:17 +01:00
David Bauer
0fdfcab67c usteer: update to latest git head
8e7b1ff ubus: skip current node for transition candidate list
e51ea7a node: move roam-events to dedicated struct
edbe7d4 node: skip neighbors exceeding assoc-limit

Signed-off-by: David Bauer <mail@david-bauer.net>
2021-12-11 00:09:09 +01:00
Eric Luehrsen
824aa45133 unbound: update to 1.14.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-12-10 10:50:14 +01:00
Josef Schlehofer
10ab230670 knot-resolver: update to version 5.4.3
Release notes:
https://www.knot-resolver.cz/2021-12-01-knot-resolver-5.4.3.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-12-07 12:24:03 -08:00
Othmar Truniger
f2f4649783 knxd: bump to upstream version 0.14.52
Signed-off-by: Othmar Truniger <github@truniger.ch>
2021-12-07 12:23:38 -08:00
Moritz Warning
b9aebd8cdc zerotier: update to 1.8.4
Also remove patch to fix uClibc-ng,
since it is not in openwrt anymore.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-12-06 15:12:35 -08:00
Oskari Rauta
61143fc8b9 cni-route-override: new package
route-override IPAM works as meta CNI plugin to override IP route given by previous CNI plugins. It is useful in a case with network-attachment-definition.
Currently route-override verified its feature with podman and crio(with Kubernetes).

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2021-12-06 23:00:38 +01:00
Florian Eckert
0b027b131c ModemManager: refactoring procd init script
The way the init script is written now, we get a bad output when calling
the ubus service backend.

ubus call service list "{'verbose':true,'name':'modemmanager'}"
>{
>        "modemmanager": {
>                "instances": {
>                        "instance1": {
>                                "running": true,
>                                "pid": 20511,
>                                "command": [
>                                        "sh",
>                                        "-c",
>                                        ".
>/usr/share/ModemManager/modemmanager.common;    \t
>mkdir -m 0755 -p /var/run/modemmanager;          \t
>mm_cleanup_interfaces;                            \t
>( mm_report_events_from_cache ) >/dev/null 2>&1 & \t
>/usr/sbin/ModemManager"
>                                ],
>                                "term_timeout": 5,
>                                "respawn": {
>                                        "threshold": 3600,
>                                        "timeout": 5,
>                                        "retry": 5
>                                },
>                                "pidfile":"/var/run/modemmanager/modemmanager.pid"
>                        }
>                }
>        }
>}"

I also get the output in the log that the PID file cannot be created.

> daemon.err procd: Failed to remove pidfile: :No such file or directory

The changes in this commit fixes this issues, by moving startup into a
wrapper script.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-12-06 14:49:43 +01:00
Oskari Rauta
053bc23573 speedtestpp: add new package
SpeedTest++
Yet another unofficial speedtest.net client cli interface

For users who instead of python based speedtest client want
to use something that was written in c++...

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2021-12-06 08:22:25 +01:00
Dirk Brenken
4be2a5b737
Merge pull request #17137 from oskarirauta/banip
banip: update nginx matching
2021-12-03 05:41:40 +01:00
Oskari Rauta
1441366364 banip: update nginx matching
Currently banip matches nginx log entries starting with
nginx[number]:...

I am running a containerized nginx with alpine as base, which
ends up adding log entries without [number] part..
like this:
nginx:...

This patch updates regex for nginx log entry search to include
both versions.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2021-12-03 05:15:00 +02:00
Olivier Poitrey
189a806293 nextdns: Update to version 1.37.7
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-12-03 01:09:08 +01:00
Olivier Poitrey
f94b7380a5 nextdns: Update to version 1.37.6
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-12-02 18:36:02 +01:00
Tianling Shen
04b82e9da0 cloudreve: Update to 3.4.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-12-02 09:23:02 +01:00
Jo-Philipp Wich
04d0e45da1 zerotier: add configuration reload trigger
Ensure that the zerotier service is automatically restarted when the uci
configuration is modified.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-12-01 18:59:24 +01:00
Olivier Poitrey
a2e26b101f nextdns: Update to version 1.37.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-11-30 16:10:27 +00:00
Martijn Atema
aa820a2cae ddns-scripts: Add script for TransIP.nl
Signed-off-by: Martijn Atema <martijn@atema.one>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
- PKG_RELEASE number updated
2021-11-30 13:10:57 +01:00
Peter Gransdorfer
c0296bf25d ddns-scripts: use HTTPS for spdyn
Signed-off-by: Peter Gransdorfer <peter.gransdorfer@cattronix.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
- PKG_RELEASE number updated
2021-11-30 12:55:23 +01:00
Florian Eckert
7a787760ac
Merge pull request #17228 from giannoug/fix-do
ddns-scripts: Fix DigitalOcean JSON payload
2021-11-30 12:39:33 +01:00
Alexandru Ardelean
add867a001
Merge pull request #17206 from cotequeiroz/seafile-broken
treewide: mark django1 and dependents BROKEN
2021-11-29 22:02:57 +02:00
George Giannou
49defda70c ddns-scripts: Fix DigitalOcean JSON payload
Signed-off-by: George Giannou <giannoug@gmail.com>
2021-11-29 13:00:36 +02:00
Georgi Valkov
4af04cdc05 ksmbd-tools: Fix ksmbd service is semi-killed at system startup
The configuration for the ksmbd service is auto-generated when
the OpenWRT configuration changes, and also during startup,
hence ksmbd.init has to reload the kernel module. It does that by
calling kill_server, which does not perform cleanup. This results
in ksmbd being killed but not restarted properly during boot.
This patch resolves the issue by using stop_service, which performs
proper cleanup.

https://forum.openwrt.org/t/ksmbd-samba3-4-alternative-ex-cifsd-smbd-package-support-thread/51695/68

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
2021-11-29 01:24:09 -08:00
Tianling Shen
06db04ba63 cloudreve: Update to 3.4.1
Use SPDX identifier for PKG_LICENSE.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-11-27 17:16:39 +02:00
Eneas U de Queiroz
9d97f4ba14
treewide: mark django1 and dependents BROKEN
Django 1.x is not compatible with python 3.10.
Mark the package as BROKEN.  Since its dependent packages will also
select it, they will need to be marked BROKEN as well to avoid recursive
dependencies--packages not marked as BROKEN will be able to select the
broken package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-11-27 10:27:16 -03:00
George Iv
bc11243d04 yggdrasil: bump to 0.4.2
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
2021-11-26 10:36:10 -08:00
Christian Lachner
7b7366b1d9 haproxy: Update HAProxy to v2.4.9
- Update haproxy download URL and hash
- Switched over to using USE_LIBATOMIC in favor of -latomic
- Added a patch which fixes nossl builds

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-11-26 16:07:09 +02:00
David Bauer
a419d35d2f usteer: update to latest git head
7bf79a2 ubus: set scan duration to roam scan interval
b4eb49e policy: only select nodes with better signal when roaming
5d5a0be ubus: don't request measurement from unsupported STAs
abc6fe0 local-node: update STA RRM capabilites
5ec713b node: determine roamability when selecting neighbors
d0cd65b node: save created time for node
a5c21ae ubus: prioritize neighbor reports on bss transition
532a48d local-node: prioritize neighbor candidates
4862080 node: keep track of roam-sources and roam-destinations
6a20591 sta-info: add last_connected field

Signed-off-by: David Bauer <mail@david-bauer.net>
2021-11-26 13:05:31 +01:00
Tianling Shen
55107364a4 dnsproxy: Update to 0.39.12
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-11-25 19:43:10 +01:00
Stijn Tintel
07c5f565bf openvswitch: document missing options
Commit 1038ac1235 ("openvswitch: add support for definining bridge ports...")
added two new options:
- drop_unknown_ports
- ports
They are missing from the README, so add them.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-11-25 09:36:05 +08:00