Commit graph

26786 commits

Author SHA1 Message Date
Rosen Penev
74daf78dd6 vim: remove vim/host
The only use of it is for xxd. tools/xxd was added in base so this can
go.

https://github.com/openwrt/openwrt/commit/c4dd2441e7

added it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-17 10:04:40 +01:00
Florian Eckert
d3df3fed26
Merge pull request #18079 from TDT-AG/pr/20220316-libqmi-libmbim
ibqmi/libmbim: fix configure warning on unrecognized options
2022-03-17 08:04:32 +01:00
Michael Heimpold
ad52e193ac
Merge pull request #18070 from mhei/libxml2-update
libxml2: update to 2.9.13
2022-03-17 08:02:48 +01:00
Michal Vasilek
ee7aae202a openssh: update to 8.9p1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-03-16 19:53:38 -07:00
Josef Schlehofer
eb8e8ea4db libarchive: add conflict to bsdtar/bsdtar-noopenssl
Fixes:
Packages 'bsdtar' and 'bsdtar-noopenssl' do not conflict while providing same file: /usr/bin/bsdtar

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-16 19:53:14 -07:00
Florian Eckert
0c66639a28 libudev-zero: backport latest changes to fix blocking on devices scan
This change added the latest upstream changes since version 1.0.0.

When using the smart plugin from collectd, there are problems with the
function udev_enumerate_scan_devices. This function is blocked and no
longer returns. Backporting the latest fixes from libudev-zero solves
the problem.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-16 19:46:41 -07:00
Tianling Shen
35c109c7ff cloudflared: add new package
Contains the command-line client for Cloudflare Tunnel, a tunneling
daemon that proxies traffic from the Cloudflare network to your origins.

Docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-16 19:46:07 -07:00
Christian Lachner
ff90e4d479 haproxy: Update HAProxy to v2.4.15
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-03-16 19:45:52 -07:00
Javier Marcet
d09e1b23b2 python3-paramiko: update to version 2.10.1
2.10.1:

 - [Bug]: (CVE-2022-24302) Creation of new private key files using
 PKey subclasses was subject to a race condition between file creation
 & mode modification, which could be exploited by an attacker with
 knowledge of where the Paramiko-using code would write out such
 files.

 - This has been patched by using os.open and os.fdopen to ensure new
 files are opened with the correct mode immediately. We’ve left the
 subsequent explicit chmod in place to minimize any possible
 disruption, though it may get removed in future backwards-
 incompatible updates.

 - Thanks to Jan Schejbal for the report & feedback on the solution,
 and to Jeremy Katz at Tidelift for coordinating the disclosure.

2.10.0:

 - [Feature] Add support for OpenSSH’s Windows agent as a fallback
 when Putty/WinPageant isn’t available or functional. Reported by
 @benj56 with patches/PRs from @lewgordon and Patrick Spendrin.

 - [Feature] Add support for the %C token when parsing SSH config
 files. Foundational PR submitted by @jbrand42.

 - [Bug] Significantly speed up low-level read/write actions on
 SFTPFile objects by using bytearray/memoryview. This is unlikely to
 change anything for users of the higher level methods like
 SFTPClient.get or SFTPClient.getfo, but users of SFTPClient.open will
 likely see orders of magnitude improvements for files larger than a
 few megabytes in size.

 - Thanks to @jkji for the original report and to Sevastian Tchernov
 for the patch.

 - [Support] Add six explicitly to install-requires; it snuck into
 active use at some point but has only been indicated by transitive
 dependency on bcrypt until they somewhat-recently dropped it. This
 will be short-lived until we drop Python 2 support. Thanks to
 Sondre Lillebø Gundersen for catch & patch.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-03-16 19:45:42 -07:00
Marc Egerton
b9b9929591 mtr: bump version to 0.95, split package for JSON and non-JSON variants
As per the discussion in PR #18047, split the MTR package into
two, one with jansson enabled for JSON output, and one without.

This commit also bumps the version to 0.95. Since the MTR project
website does not seem to be updated with builds any longer, switch
to GitHub Codeload instead.

Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process
is executed properly.

Signed-off-by: Marc Egerton <marc@malloc.me>
2022-03-16 19:45:29 -07:00
Moritz Warning
2f488873eb zerotier: update to 1.8.6
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-16 19:45:14 -07:00
Alexandru Ardelean
589f276ba6 sudo: bump to version 1.9.10
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-16 19:45:02 -07:00
Javier Marcet
83357a7fe4 docker-compose: Update to version 2.3.3
What's Changed:

 - use plain text progress when ansi=never is set by @ndeloof
 - build full compose model from resources, then filter by services by
 @ndeloof
 - add run with dependencies e2e test by @glours
 - add support for device_cgroup_rules by @ndeloof
 - composeService to use dockerCli's In/Out/Err streams by @ndeloof
 - fix generated YAML missing an "examples" section, and update
 cli-docs-tool to v0.4.0 by @thaJeztah

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-03-16 19:44:14 -07:00
Josef Schlehofer
405bc53c0c chicken-scheme: add conflict and small Makefile polishing
- No need to explicitly state two times section and category since this is
already done in define Package/chicken-scheme/Default
- Also add TITLE to Default

- Add conflict between chicken-scheme-interpreter and
  chicken-scheme-full
They both provide the same files:
/usr/lib/libchicken.so
/usr/lib/chicken/11/chicken.time.import.so
/usr/lib/chicken/11/chicken.fixnum.import.so
/usr/lib/chicken/11/chicken.internal.import.so
/usr/lib/chicken/11/chicken.tcp.import.so
/usr/lib/chicken/11/chicken.continuation.import.so
/usr/lib/chicken/11/chicken.port.import.so
/usr/lib/chicken/11/chicken.random.import.so
/usr/lib/chicken/11/chicken.compiler.user-pass.import.so
/usr/lib/chicken/11/chicken.process-context.import.so
/usr/lib/chicken/11/chicken.bitwise.import.so
/usr/lib/chicken/11/srfi-4.import.so
/usr/lib/chicken/11/chicken.load.import.so
/usr/lib/chicken/11/chicken.blob.import.so
/usr/lib/chicken/11/chicken.time.posix.import.so
/usr/lib/chicken/11/chicken.file.posix.import.so
/usr/lib/chicken/11/chicken.flonum.import.so
/usr/lib/chicken/11/chicken.condition.import.so
/usr/lib/chicken/11/chicken.pretty-print.import.so
/usr/lib/chicken/11/types.db
/usr/lib/chicken/11/chicken.foreign.import.so
/usr/lib/chicken/11/chicken.repl.import.so
/usr/lib/chicken/11/chicken.pathname.import.so
/usr/lib/chicken/11/chicken.sort.import.so
/usr/lib/chicken/11/chicken.keyword.import.so
/usr/lib/chicken/11/chicken.process.signal.import.so
/usr/lib/chicken/11/chicken.platform.import.so
/usr/lib/chicken/11/chicken.base.import.so
/usr/lib/chicken/11/chicken.syntax.import.so
/usr/lib/chicken/11/chicken.file.import.so
/usr/lib/chicken/11/chicken.memory.import.so
/usr/lib/chicken/11/chicken.gc.import.so
/usr/lib/chicken/11/chicken.io.import.so
/usr/lib/chicken/11/chicken.memory.representation.import.so
/usr/lib/chicken/11/chicken.process.import.so
/usr/lib/chicken/11/chicken.plist.import.so
/usr/lib/chicken/11/chicken.string.import.so
/usr/lib/chicken/11/chicken.errno.import.so
/usr/lib/chicken/11/chicken.format.import.so
/usr/lib/chicken/11/chicken.eval.import.so
/usr/lib/chicken/11/chicken.irregex.import.so
/usr/lib/chicken/11/chicken.process-context.posix.import.so
/usr/lib/chicken/11/chicken.read-syntax.import.so
/usr/lib/chicken/11/chicken.csi.import.so
/usr/lib/chicken/11/chicken.locative.import.so
/usr/bin/csi

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-16 19:39:59 -07:00
Alexandru Ardelean
a85bc94a76 python-asn1crypto: drop package
I can't seem to see any package that needs it.
This was added for cryptography, since it was needed up to version 2.7
asn1-crypto doesn't have a user since commit 9d892e3cf8
So, remove it.

Abandoned packaged PR: https://github.com/openwrt/packages-abandoned/pull/23

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-16 19:39:31 -07:00
Oskari Rauta
21d2575a95 podman: updates podman package
- add missing runtime depency catatonit
 - removed SELinux variant, add config option for it instead, I do not believe we need variant of EVERY SELinux support capable software
 - add config option for iptables firewall setup in default cni network config, otherwise skip iptables part (part of nftables transition, use cni-plugins-nft for nftables fw support or better; forget about cni fw completely, instead use openwrt's own as that way your rules for containers do not disappear on firewall restart)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2022-03-16 19:39:06 -07:00
Jeffery To
26f99270d2 python-packages: Remove unused library packages
With the removal of Seafile, these library packages no longer have any
in-repo users. They will be imported into the abandoned packages
repo[1].

[1]: https://github.com/openwrt/packages-abandoned/pull/24

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-16 19:38:32 -07:00
Jeffery To
7022834082 libevhtp: Remove package
With the removal of Seafile, there are no more in-repo users of this
package. It will be imported into the abandoned packages repo[1].

[1]: https://github.com/openwrt/packages-abandoned/pull/25

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-16 19:37:02 -07:00
Stijn Tintel
3c503436d1 chrony: enable LTO
Size difference of the ipk on qoriq:
* chrony:	718571	676886
* chrony-nts:	786960	757064

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-16 19:35:01 -07:00
Stijn Tintel
51550d1415 chrony: enable AUTORELEASE
Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-16 19:35:01 -07:00
Florian Eckert
f0b5589ef0 libmbim: remove unknown configure option
The configure option --enable-more-warnings and --without-udev are not
recognized by configure.

Buildlog:
configure: WARNING: unrecognized options: --disable-nls,
--enable-more-warnings, --without-udev

Therefore this unkown configure options are removed with this commit.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-16 16:51:33 +01:00
Florian Eckert
a42f526b0c libqmi: remove unknown configure option
The configure option --enable-more-warnings is not recognized by
configure.

Buildlog:
configure: WARNING: unrecognized options: --disable-nls, --enable-more-warnings

Therefore this configure option is removed with this commit.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-16 16:51:28 +01:00
Philip Prindeville
116d17098a
Merge pull request #18056 from pprindeville/isc-dhcp-update-4.4.3
isc-dhcp: Update to 4.4.3
2022-03-15 17:59:58 -06:00
Philip Prindeville
649244dae2 isc-dhcp: Update to 4.4.3
Note that on 32-bit ARM with MUSL we don't have Unwind_GetIP() so
we need to disable backtraces.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 17:18:24 -06:00
Philip Prindeville
9e4485b156 named: don't leak mktemp files on reload
Unless we're using "mktemp -u ..." (not recommended), it will
create the temp file as part of its safety checking.  Thus you
should only create the name (file) if you're going to use it,
and always remove it if you have created it.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 15:20:15 -07:00
Michael Heimpold
81fd836f97 libxml2: update to 2.9.13
This fixes CVE-2022-23308.

Also switch to GNOME as download source and xz tarball.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-03-15 21:25:46 +01:00
Philip Prindeville
59b89ae066
Merge pull request #18061 from pprindeville/isc-dhcp-fix-ddns-updates
isc-dhcp: detect whether ddns transfers are IPv4 only
2022-03-15 13:56:35 -06:00
Philip Prindeville
2aff212510 isc-dhcp: detect whether ddns transfers are IPv4 only
If named is configured to not listen on any IPv6 interfaces,
then we should run 'nsupdate' with the '-4' argument.

Also:

* cleanup RFC-1918 address detection;
* don't generate PTR records for domain entries that aren't
  RFC-1918 addresses or these will generate NOTAUTH failures;

We're assuming that we're doing DNS split-horizon and that
internal addresses aren't routable.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 13:25:55 -06:00
Philip Prindeville
0172063b0a
Merge pull request #18069 from pprindeville/isc-dhcp-dont-leak-mktemp-files
isc-dhcp: don't leak mktemp files
2022-03-15 13:25:08 -06:00
Philip Prindeville
aa490f0279 isc-dhcp: don't leak mktemp files
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 12:55:21 -06:00
Daniel Golle
f951f61005
gnunet: improve init script
Ensure correct ownership of /etc/gnunet.
Quote variables and more or less make shellcheck happy.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 18:33:37 +00:00
Daniel Engberg
24686e4d6b
Merge pull request #18063 from turris-cz/netdata-disable-liblz4
netdata: disable LZ4 compression support
2022-03-15 11:25:31 +01:00
Josef Schlehofer
ceca87b25b
netdata: disable LZ4 compression support
To avoid unnecessary dependency, let's disable it for now.
LZ4 can be also used for DB engine and HTTPS

Fixes:
Package netdata is missing dependencies for the following libraries:
liblz4.so.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-15 10:52:56 +01:00
Daniel Golle
079479918d
gnunet: depend on 'uci-firewall' instead of 'firewall'
To allow using gnunet on systems with firewall4, add replace direct
dependency on 'firewall' with 'uci-firewall' which is satisfied by
either 'firewall' or 'firewall4'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 02:41:31 +00:00
Etienne Champetier
34f556cb57 shorewall6-lite: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Etienne Champetier
57855319f1 shorewall6: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Florian Eckert
c789e3c9c4
Merge pull request #18058 from TDT-AG/pr/20220314-keepalived
keepalived: enable nftables filtering
2022-03-14 13:24:51 +01:00
Florian Eckert
bacc3a889f keepalived: enable nftables filtering
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 12:00:31 +01:00
Josef Schlehofer
94fb0da32c
Merge pull request #18002 from BKPepe/haproxy-conflicts
haproxy: Makefile polishing and add conflict to SSL/non-SSL variant
2022-03-14 10:03:31 +01:00
Daniel Golle
c0d2c82528
auc: don't segfault on invalid URL
Show error message instead of segfaulting in case of an invalid URL
being read from UCI config.

Fixes: #17971
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-13 23:49:25 +00:00
Etienne Champetier
d098f907bb
Merge pull request #18052 from 1715173329/va
v2raya: add iptables as dependency
2022-03-13 12:37:32 -04:00
Tianling Shen
88750d67e2
v2raya: add iptables as dependency
This package requires to use iptables (no matter which variant).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-13 23:34:53 +08:00
Daniel Golle
2f8e696189 gnunet: update to version 0.16.1
* OPUS and Pulse can be configured nicely by default now, no longer
   need a local patch for that
 * mysql version checks fail when cross-compiling, add patch to remove
   them and always assume MySQL >8.0.
 * Package new services, communicators, ...

This is a new major release. It breaks protocol compatibility with the
0.15.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network,
and interactions between old and new peers will result in issues.
0.15.x peers will be able to communicate with Git master or 0.16.x
peers, but some services - in particular GNS - will not be compatible.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-13 13:14:44 +00:00
Rosen Penev
196e15162d treewide: remove rpath-link
Most usages seem to be outdated and fixed a long time ago.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-13 00:02:02 -08:00
Josef Schlehofer
f65025eaf9
Merge pull request #18041 from turris-cz/syslog-ng-bump
syslog-ng: update to version 3.36.1 and add test.sh
2022-03-12 06:50:54 +01:00
Oskari Rauta
845083213f catatonit: add new package
podman uses catatonit now for container init, so new package for
catatonit is required.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2022-03-11 13:07:20 +01:00
Florian Eckert
052ca56890
Merge pull request #18042 from nwidger/delve-1.8.2
delve: Update to 1.8.2
2022-03-11 08:47:44 +01:00
Rosen Penev
a97993a887 softethervpn: remove rpath hack
This was needed when readline was a shared library. Now that it's
static, this can be removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-10 21:51:24 -08:00
Tianling Shen
b31615c63c yq: Update to 4.22.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-10 15:51:26 -08:00
Niels Widger
d48a82d6f6 delve: Update to 1.8.2
See https://github.com/go-delve/delve/blob/master/CHANGELOG.md for
changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
2022-03-10 10:50:46 -05:00