Commit graph

27404 commits

Author SHA1 Message Date
Nick Hainke
0a07237514 prometheus-node-exporter: fix ubus stations
Not every radio has also ubus support. Only query radios with ubus
functions.

Signed-off-by: Nick Hainke <vincent@systemli.org>
[fixup, call ubus.connect() once per scrape]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-05-29 23:04:12 -04:00
Michael Heimpold
c12e1cfcab libxml2: update to 2.9.14
This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-05-29 22:01:48 +02:00
Michael Heimpold
fbcb35b33f php8: update to 8.1.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-05-29 11:05:11 +02:00
R4SAS I2P
bdd8ab6faf i2pd: Update package
* Update to 2.42.1
* Replace spaces with tabulation in init file

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
2022-05-28 21:32:50 -07:00
Etienne Champetier
1302ab64ee
Merge pull request #18511 from jefferyto/circleci-add-keys
CircleCI: Add 22.03 public keys, 18.06 v2 gpg key, 18.06 usign key
2022-05-28 21:16:46 -04:00
Dirk Brenken
a2f0257272
banip: mark as broken
banIP 0.7.x is not compatible with new nft firewall (default in master and 22.03).
Mark the package as BROKEN for now.

Signed-off-by: Dirk Brenken <dev@brenken.org>
2022-05-27 21:23:56 +02:00
Michael Pratt
bb7c596028 golang: do not rely on Go script host detection
for some use cases, for example:
a system with 64 bit kernel
and 32 bit userspace programs

the local Go installation is "detected"
using the kernel "uname",
causing build failure if they happen to differ

by adding the argument GOHOSTARCH using the corresponding make variable
it would be fully controlled in the openwrt git tree
based on the HOST_ARCH make variable.

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-27 02:39:52 -04:00
Michael Pratt
b99164aff4 golang: enable verbose output
allow the building script of Go to output verbose
when make is executed with "V=s..."

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-27 02:39:52 -04:00
Michael Pratt
abf28899a0 golang: split compile recipe into configure and compile
the default Configure recipe for packages
assumes that there is a "configure" script
in the source tree directory

Go does not have such a script,
configure and compile is done with the same script

so split the current Compile recipe
into both Configure and Compile recipes

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-05-27 02:39:52 -04:00
Maciej Krüger
0b5eb86718 lua-openssl: update to version 0.8.2-1
Signed-off-by: Maciej Krüger <mkg20001@gmail.com>
2022-05-26 20:39:30 -07:00
W. Michael Petullo
8e0bc54fcd gcc: depend on libzstd
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-25 18:58:01 -07:00
Aleksandr V. Piskunov
3c04a6d235 stubby: restart on trigger interfaces
Force restart stubby if any of the trigger interfaces goes up or down.
Avoids DoT DNS lookup timeouts when default route changes, in case of multiple
upstream interfaces.

Signed-off-by: Aleksandr V. Piskunov <aleksandr.v.piskunov@gmail.com>
2022-05-25 17:35:38 -07:00
Rosen Penev
760e0fe1ee hfsprogs: update to 540.1.linux3
Updates hfsprogs from 2011 to 2013 version.

Updated patches to latest Debian ones. Kept custom OpenWrt ones.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-05-25 17:07:24 -07:00
Andreas Erhard
bf6f2dae15 vpnc: Update to 0.5.3+git20220517
The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
2022-05-25 17:06:13 -07:00
Christian Lachner
e69fe1f211 haproxy: Update HAProxy to v2.4.17
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-05-25 17:05:02 -07:00
Javier Marcet
f1ed3f5bc2 python-jsonschema: Update to 4.5.1
What's Changed:

 - Extend dynamicRef keyword by @nezhar
 - Add FORMAT_CHECKER attribute for Validator by @TiborVoelcker
 - Remove stray double-quote by @lurch
 - Ensure proper sorting of list in error message by @ssbarnea

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-05-25 17:04:47 -07:00
Javier Marcet
117e3d6a18 python3-paramiko: update to version 2.11.0
2.11.0:

 - [Feature] Add SSH config token expansion (eg %h, %p) when parsing
 ProxyJump directives. Patch courtesy of Bruno Inec.

 - [Support] (via #2011) Apply unittest skipIf to tests currently
 using SHA1 in their critical path, to avoid failures on systems
 starting to disable SHA1 outright in their crypto backends (eg RHEL
 9). Report & patch via Paul Howarth.

 - [Support] Update camelCase method calls against the threading
 module to be snake_case; this and related tweaks should fix some
 deprecation warnings under Python 3.10. Thanks to Karthikeyan
 Singaravelan for the report, @Narendra-Neerukonda for the patch,
 and to Thomas Grainger and Jun Omae for patch workshopping.

 - [Support] Recent versions of Cryptography have deprecated Blowfish
 algorithm support; in lieu of an easy method for users to remove it
 from the list of algorithms Paramiko tries to import and use, we’ve
 decided to remove it from our “preferred algorithms” list. This will
 both discourage use of a weak algorithm, and avoid warnings. Credit
 for report/patch goes to Mike Roest.

2.10.5:

 - [Bug] Windows-native SSH agent support as merged in 2.10 could
 encounter Errno 22 OSError exceptions in some scenarios (eg server
 not cleanly closing a relevant named pipe). This has been worked
 around and should be less problematic. Reported by Danilo Campana
 Fuchs and patched by Jun Omae.

 - [Bug] OpenSSH 7.7 and older has a bug preventing it from
 understanding how to perform SHA2 signature verification for RSA
 certificates (specifically certs - not keys), so when we added SHA2
 support it broke all clients using RSA certificates with these
 servers. This has been fixed in a manner similar to what OpenSSH’s
 own client does: a version check is performed and the algorithm used
 is downgraded if needed. Reported by Adarsh Chauhan, with fix
 suggested by Jun Omae.

 - [Bug] Align signature verification algorithm with OpenSSH re:
 zero-padding signatures which don’t match their nominal size/length.
 This shouldn’t affect most users, but will help Paramiko-implemented
 SSH servers handle poorly behaved clients such as PuTTY. Thanks to
 Jun Omae for catch & patch.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-05-25 17:03:28 -07:00
Javier Marcet
32d87ae946 docker-compose: Update to version 2.5.1
What's Changed:

 - Fix relative paths on envfile label by @ulyssessouza
 - down: Reject all arguments by @Jille
 - Clarify what default work dir is when multiple compose files by
 @quite
 - compose down exit=0 if nothing to remove by @ndeloof
 - cp command: copy to all containers of a service as default
 behaviour by @glours
 - Fix extra space printed with --no-log-prefix option by @jan4843
 - bump compose-go to 1.2.5 by @ndeloof

New Contributors:

 - @Jille made their first contribution
 - @quite made their first contribution
 - @jan4843 made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-05-25 17:01:43 -07:00
Tianling Shen
202f0007d6 dnslookup: Update to 1.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-05-25 17:00:34 -07:00
Tianling Shen
20a51c2efd dnsproxy: Update to 0.43.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-05-25 17:00:21 -07:00
Nikos Mavrogiannopoulos
4f433598dc
Merge pull request #18605 from rsalvaterra/oc
openconnect: three misc fixes
2022-05-24 14:34:58 +02:00
Rui Salvaterra
ae11bdf5d8 openconnect: make sure OpenSSL is built with DTLS support
Otherwise, OpenConnect will fail to connect with DTLS.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-05-24 12:03:06 +01:00
Rui Salvaterra
9bbecd2438 openconnect: don't bother loading the tun module
If it exists (if it isn't built-in), it will be loaded automatically at boot.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-05-23 23:58:42 +01:00
Rui Salvaterra
131ec7b3bd openconnect: drop the dependency on resolveip
We have nslookup and awk, let's use them.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-05-23 23:58:42 +01:00
Tianling Shen
35961ec90d dnsproxy: Update to 0.42.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-05-23 15:21:42 -07:00
Sergey V. Lobanov
510d44d988 samba4: fix build on macos
This commit fixes two issues on macos:
1. Added a patch to fix 'echo -n' issue with MacOS shell
(backported from upstream)
2. Redefined sys.platform='linux' for target build if build host is
MacOS (otherwise, build script tries to use MacOS logic for
OpenWrt(Linux) target build)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-05-22 13:40:48 -07:00
Rosen Penev
d0cd7eb5bf glib2: update to 2.70.5
Enabled glib_checks to fix podman.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-05-22 13:38:39 -07:00
Jianhui Zhao
0ea357c164 rtty: update to 8.0.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2022-05-22 13:38:27 -07:00
Toke Høiland-Jørgensen
d926da5182 acme: switch from iptables to nft
Use nft instead of iptables to open port 80 in the firewall when getting a
cert. Since nft doesn't allow deleting a rule by its contents, capture and
save the handle when creating the rule, and use that to delete.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2022-05-20 13:16:59 -07:00
Eneas U de Queiroz
1d54defb0f audit: remove host build
The audit package in the packages feed share the same sources as the
libaudit package in the base repo.  libaudit performs a host build, used
only by libsemanage in base.

There is no package depending on 'audit/host', so we can remove it to
avoid possible confusion.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-05-20 12:18:31 -07:00
Eneas U de Queiroz
c0f26f4980 audit: avoid interferece with base libaudit build
Both audit in the packages feed and libaudito from the base repo use the
same sources.

Have 'audit' use a different build directory than 'libaudit' package to
avoid interference between them.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-05-20 12:18:31 -07:00
Eneas U de Queiroz
7be14da0d5 audit: Fix compilation with kernel 5.15
Linux 5.15 does not have the linux/ipx.h header.

The patch is a partial cherry-pick (skipped ChangeLog) of upstream
commit 6b09724c6 ("Make IPX packet interpretation dependent on the ipx
header file existing").

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-05-20 12:18:31 -07:00
Rui Salvaterra
1ee8d9c8ff openconnect: fix OpenSSL build without deprecated API
Backport a patch in order to allow building OpenConnect against OpenSSL 1.1.x
without the need for deprecated API (further fixes will be required for OpenSSL
3.x, though).

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-05-20 12:16:18 -07:00
Leo Soares
80c4d675c2 libcoap: make sure libcoap-3-notls.so is installed
This commit fixes an issue where the `libcoap-3-notls.so` is not installed,
in some cases leaving the target's root with no library and just a broken link
from `libcoap-3.so` to `libcoap-3-notls.so`.

Signed-off-by: Leo Soares <leo@hyper.ag>
2022-05-20 12:14:40 -07:00
Adam Williams
a03282f0db wifi-presence: Add config for process user/group
On systems using seccomp, the hostapd socket files will be owned by the
'network' user/group ([source][0]). In this case, if wifi-presence is
run as root/root, then it does not have permissions to open the
hostapd socket files. This was discussed in awilliams/wifi-presence#3.

This change allows the process user/group to be specified in
/etc/config/wifi-presence. If no explicit user/group is set, then the
init script will use the owner of the socket files in /var/run/hostapd/
to determine the appropriate process user/group.

[0]: ec6293febc/package/network/services/hostapd/files/wpad.init (L35-L36)

Signed-off-by: Adam Williams <pwnfactory@gmail.com>
2022-05-20 12:12:15 -07:00
Florian Eckert
f1a59e9683
Merge pull request #18586 from flyn-org/openldap
openldap: drop use of HTTP in favor of HTTPS
2022-05-20 16:21:51 +02:00
W. Michael Petullo
bab2f020ee openldap: drop use of HTTP in favor of HTTPS
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-20 08:14:33 -05:00
Florian Eckert
83e862fc43
Merge pull request #18494 from nemesisdesign/master
openwisp-config: update to 1.0.0
2022-05-20 09:59:34 +02:00
Jeffery To
d3cdfa3c30 bluez: Update to 5.64, update/refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-19 16:55:29 -07:00
Stijn Tintel
f9424b1745 frr: drop elfutils/host dependency
The elfutils package moved to tools and elfutils/host no longer exists.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-05-19 16:55:16 -07:00
Michal Vasilek
534b538598
yt-dlp: add package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-19 17:52:20 +02:00
Michal Vasilek
89710ac588
youtube-dl: drop package
youtube-dl is still maintained, but moves very slowly and many other
distributions instead package an active fork, yt-dlp.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-19 17:16:43 +02:00
Florian Eckert
d932134b1d stunnel: update to version 5.64
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-05-19 16:11:25 +02:00
Stan Grishin
d03d91b343
Merge pull request #18361 from stangri/master-https-dns-proxy
https-dns-proxy: 2021-11-22-3: add support for Canary Domains
2022-05-19 12:00:31 +03:00
W. Michael Petullo
ceaa6e840e gcc: update to allow compiling different versions
This is based on the toolchain GCC, and aims to share as much of its
Makefile and patches with that definition. The package requires two
additional patches:

(1) 003-dont-choke-when-building-32bit-on-64bit.patch, which fixes the
`error: size of array 'test_real_width' is negative` error that occurs
when building a 32-bit GCC on a 64-bit host. (Search the Internet for
examples of this error appearing.)

(2) 980-add-nostdinc++.patch, which backports a fix from 11.3.0 (11.2.0
only).

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-18 16:34:53 -07:00
W. Michael Petullo
abbe33b369 gcc: change maintainer
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-18 16:34:53 -07:00
John Audia
de2ff3a5f1 zsh: update to 5.9
Bump to latest release

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
2022-05-18 12:26:59 -07:00
Federico Capoano
a1b5bc3add openwisp-config: update to 1.0.0
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2022-05-18 15:20:15 -04:00
Stijn Tintel
039912dec5 Revert "lxc: export systemd cgroups after install"
The postinst script is sourced during image build, which causes the
follow failure:
/home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory
postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1

Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so
already. Unfortunately removing that line from the init script is not
enough to fix the problem. The postinst script should also check
IPKG_INSTROOT. As these two changes are unrelated, they should go in
separate commits, and the solution to the image build problem is to
revert the commit that introduced the breakage.

This reverts commit 2cde10b950.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-05-18 17:19:22 +03:00
Rosen Penev
489cffadd2 Revert "ci: Use openwrt/gh-action-sdk@v5"
This reverts commit 7b7265293f.
2022-05-18 06:51:33 -07:00