Commit graph

9077 commits

Author SHA1 Message Date
Lucian Cristian
a1cdf51ba8 frr: update to latest
also fix mips compile

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-01-18 21:29:39 -08:00
Josef Schlehofer
042bf16072 git: update to version 2.34.1
- Refreshed patches

- Release notes 2.34.0:
2ae0a9cb82/Documentation/RelNotes/2.34.0.txt

- Release notes 2.34.1:
2ae0a9cb82/Documentation/RelNotes/2.34.1.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-18 18:06:07 -08:00
Robert Marko
9f0fdb0ee2 mdio-tools: update to version 1.0.1
Version 1.0.1 brought the following changes:
[v1.0.1] - 2021-11-26

Primarily fixes a few issues in the kernel module that were found
during a quick review from Russell King:

https://lore.kernel.org/netdev/YYPThd7aX+TBWslz@shell.armlinux.org.uk/
https://lore.kernel.org/netdev/YYPU1gOvUPa00JWg@shell.armlinux.org.uk/

- mdio: The mvls subcommand now supports flushing the ATU

- mdio-netlink: Plug some glaring holes around integer overflows of
  the PC.
- mdio-netlink: Release reference to MDIO bus after a transaction
  completes.

So, update to the latest version and switch the kernel module back
to fetching tarballs like the userspace tool does.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2022-01-18 18:05:33 -08:00
Nick Hainke
38a9a3e0dc wg-installer: cosmetic changes
Use "ip addr" instead of "ip addres" or "ip a".

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-18 18:20:20 +01:00
Kerma Gérald
de41b63ca4 crowdsec: update from upstream latest release 1.2.3
update from latest upstream release 1.2.3
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-18 16:31:31 +01:00
Florian Eckert
505b6c74db
Merge pull request #17586 from clayface/davfs2-secrets
davfs2: add secrets file to conffiles definition
2022-01-18 09:28:56 +01:00
Sergey V. Lobanov
5cd8b75f94 redsocks: fix build on macos
fix cross-compile issues (on macos)
use $CC -dumpmachine instead of `uname`
use $CC instead of CC

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-17 21:09:19 -08:00
Lucian Cristian
ec252c20cc libreswan: update to 4.6
this update also fixes a CVE

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-01-17 21:08:31 -08:00
Othmar Truniger
a2ba5e57cb knxd: bump to new upstream version 0.14.53
Signed-off-by: Othmar Truniger <github@truniger.ch>
2022-01-17 20:52:03 -08:00
Nick Hainke
7cb73ae3b9 dawn: update to 2022-01-17
877e2dc iwinfo: fix get_bandwidth_iwinfo
9ce01ec datastorage: fix multi-SSID
9187665 treewide: improve maintaince
6bf9b6d memory: Tighten up some memory handling to help spot errors
4df0c98 treewide: improve logging

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-17 11:52:42 +01:00
Michael Heimpold
6831c51a8c
Merge pull request #17534 from neheb/4
knxd: fix compilation with newer glibc
2022-01-16 15:39:17 +01:00
Nick Hainke
b89eb0115f wg-installer: switch to ubus call for olsrd hotplug
Use ubus ipc calls to add and remove interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-16 11:05:27 +01:00
Nick Hainke
fea27cec05 wg-installer: rework iproute2 commands
- Use ip address add instead of ip a a
- Directly add broadcast address

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-16 10:39:19 +01:00
Florian Eckert
b4694bb82c
Merge pull request #17617 from hgl/ddns-cloudflare
ddns-scripts-cloudflare: fix shell conditional
2022-01-15 16:03:37 +01:00
Glen Huang
aed4dbf349 ddns-scripts-cloudflare: fix shell conditional
Signed-off-by: Glen Huang <heyhgl@gmail.com>
2022-01-15 22:33:28 +08:00
Florian Eckert
e85fa926e6
Merge pull request #17600 from camarel/feature/ddns-scripts-wget-user-agent
ddns-scripts: pass user agent string
2022-01-15 15:24:43 +01:00
Claudio Marelli
dc0953fedd ddns-scripts: pass user agent string
This adds a user agent string to the wget request.

Fixes #17507

Signed-off-by: Claudio Marelli <camarelli@gmx.net>
2022-01-15 10:07:30 +01:00
Josef Schlehofer
0f0c7b8ea4
Merge pull request #17432 from r4sas/i2pd-2.40.0
i2pd: Update to 2.40.0, update init.rc script, UCI config and Makefile
2022-01-14 16:27:24 +01:00
R4SAS I2P
ac27fffff9
i2pd: Update to 2.40.0 and update package sources
* Updating i2pd package to 2.40.0
* Rewrite Makefile
* Remove usage of PKG_INSTALL (package's make install)
* Rewrite init.rc configuration and script
* Remove '--service' option from init, which only sets datadir to /var/lib/i2pd
* Use '--datadir' option in init, otherwise datadir changing via uci is not works
* Update patch for i2pd.conf

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
2022-01-14 12:46:37 +00:00
Aleksander Morgado
ab061c8ddd modemmanager: remove 2s timeout before reporting cached events
When ModemManager is started on boot we may end up with hotplug events
reported directly to the daemon, plus some others already cached in
the cache file before the daemon was started.

If the cached events correspond to the same device that is still
notifying ports directly, we may end up with a modem object created
before the cached events have been emitted, so the modem may not
handle all control/data ports it should.

E.g.:

  - modem detected
  - hotplug event for wwan0 port, cached as MM not running
  - hotplug event for cdc-wdm0 port, cached as MM not running
  - hotplug event for ttyUSB0, cached as MM not running
  - MM starts
  - hotplug event for ttyUSB1, directly processed as MM is running
  - hotplug event for ttyUSB2, directly processed as MM is running
  - modem object created with ttyUSB1 and ttyUSB2
  - 2s after MM starts, cached events for wwan0, cdc-wdm0 and ttyUSB0
    happen, but are ignored because the modem object has already been
    created

MM expects that ports of the same device are reported with less than
1500ms in between ports. In other words, if ports are reported more
than 1500ms after the last reported port, they may get ignored.

If we remove the 2s timeout, the report of the cached events will
happen as soon as MM starts, which makes it much more likely to happen
in the timeslot that MM expects for ports of the same device reported.
The logic is still not perfect, and we may also need to increase that
1500ms timeout inside MM, but removing the 2s timeout right away here
makes sense.

This 2s timeout was introduced along with the new wrapper launcher for
the daemon, it didn't exist before.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2022-01-13 15:54:02 -08:00
Florian Eckert
bd10c454f4
Merge pull request #17563 from TDT-AG/pr/20220110-stunnel
stunnel: update to 5.61
2022-01-13 10:32:58 +01:00
Josef Schlehofer
8b2003ba34
Merge pull request #17494 from BKPepe/update-atlas
Atlas SW probe to version 5040 and its busybox version
2022-01-13 10:17:14 +01:00
Nick Hainke
53503c4a3a wg-installer: fix shell typo
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-12 18:58:46 +01:00
Nick Hainke
ee879d3747 wg-installer: allow defining link costs for hotplugs
Add options to set link costs in mesh routing daemons.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-12 17:47:26 +01:00
Tiago Gaspar
98ac608fb8 jool: update to 4.1.6, add init files and default configuration
This commit adds support for starting and running jool through init
scripts, with default config files as examples.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2022-01-12 04:00:30 -08:00
Rui Salvaterra
72974bed43 tor: bump to 0.4.6.9 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-01-12 01:56:39 -08:00
Sergey V. Lobanov
4b23b2df3b iodine: fix build on macos
redefine TARGETOS=Linux due to OpenWrt is always Linux

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-12 01:56:19 -08:00
Nick Hainke
6a59d41fbf wg-installer: private key as parameter
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-12 01:29:48 +01:00
Pascal Coudurier
f9bbc5173c nut: refactor upssched uci-defaults script
Add checks not to overwrite defaultnotify options in the nut-sendmail-notify fashion.
Use lists for defaultnotify instead of option.
Add check not to overwrite notifycmd if already defined.
upssched-cmd script must not be called directly, it is called by the upssched binary with needed arguments.

Signed-off-by: Pascal Coudurier <coudu@wanadoo.fr>
2022-01-11 16:27:19 -08:00
Pascal Coudurier
0f91594e2a nut: refactor nut-monitor uci config file
Convert notifyflags options to lists as supported by the init script, so multiple options can be chosen.
Add SYSLOG default option to individuals notifyflags instead of deprecated flag 1|0.
Add comment for defaultnotify and individuals notifyflags about possible values.

Signed-off-by: Pascal Coudurier <coudu@wanadoo.fr>
2022-01-11 16:27:19 -08:00
Pascal Coudurier
a46fd908df nut: fix typo in nut-monitor init script
This fixes a typo in the nut-monitor init script when building config file from uci config.

Signed-off-by: Pascal Coudurier <coudu@wanadoo.fr>
2022-01-11 16:27:19 -08:00
Sergey V. Lobanov
366c1b6fa7 lynx: fix build on macos
lynx uses host C-compiler to build internal utility that is used to
generate files required for target build. On MacOS it uses internal
clang with MacOS system headers so host build fails due to MacOS is
not Linux

Forced to use OpenWrt host C compiler using --with-build-*
./configure flags

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-11 16:23:58 -08:00
Hauke Mehrtens
d4b2345802 ntpd: Fix compile with glibc 2.34
This adds a patch from Open embedded to fix compilation with glibc 2.34.
This patch was taken from here:
https://github.com/openembedded/meta-openembedded/blob/master/meta-networking/recipes-support/ntp/ntp/0001-libntp-Do-not-use-PTHREAD_STACK_MIN-on-glibc.patch

It fixes the following build problem:
work_thread.c:45:57: error: missing binary operator before token "("
   45 | #if defined(PTHREAD_STACK_MIN) && THREAD_MINSTACKSIZE < PTHREAD_STACK_MIN
      |                                                         ^~~~~~~~~~~~~~~~~
make[7]: *** [Makefile:892: work_thread.o] Error 1

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2022-01-11 16:23:00 -08:00
Hauke Mehrtens
1de56f8990 radsecproxy: Fix compile with glibc 2.34
This backports a patch from upstream radsecproxy to fix compilation with glibc 2.34.

It fixes the following build problem:
radsecproxy.h:35:5: error: missing binary operator before token "("
   35 | #if PTHREAD_STACK_MIN > PTHREAD_STACK_SIZE
      |     ^~~~~~~~~~~~~~~~~
make[5]: *** [Makefile:623: dtls.o] Error 1

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2022-01-11 16:21:19 -08:00
Matthew Hagan
ebaec4c441 davfs2: add secrets file to conffiles definition
davfs2 username and password information is typically stored in
/etc/davfs2/secrets. This information should be kept across sysupgrades.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-01-12 00:20:19 +00:00
Nick Hainke
8ab044712a wg-installer: generate new keys for every connection
Generate new keys on every new connection.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-12 00:51:08 +01:00
Rui Salvaterra
e636e433c1 stubby: explicitly disable static linking
Although undocumented, there's a way to explicitly disable static linking in
Stubby, setting the CMake build option ENABLE_GETDNS_STATIC_LINK to OFF (ON by
default). Make it so.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-01-11 14:54:25 -08:00
Florian Eckert
9c12900aee
Merge pull request #17535 from hgl/ddns-cloudflare
ddns-scripts-cloudflare: allow explicit zone_id
2022-01-11 16:13:04 +01:00
Nick Hainke
5e8301d7dc wg-installer: fix using symlinks for conf files
It is useful to symlink babeld and olsrd to /tmp/ if we frequently
write to those config files.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-11 00:27:43 +01:00
Noah Meyerhans
2978bc1977 iputils: bump to 20211215
Drop the tftpd binary, which is no longer provided upstream.  Users
should switch to the atftp server as a replacement.

Avoid executing runtime tests, which are not supported in cross-build
environments.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-01-10 11:18:09 -08:00
Florian Eckert
71467fe5ee stunnel: add new protocol option capwin and capwinctrl
The new protocol capwin and capwinctrl was added in version 5.61
https://www.stunnel.org/NEWS.html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-01-10 14:52:44 +01:00
Florian Eckert
1e17d3b93c stunnel: update to 5.61
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-01-10 14:37:09 +01:00
Florian Eckert
4e0a711bc2 stunnel: add missing sessionResume option
The option sessionResume was added in version 5.60
https://www.stunnel.org/NEWS.html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-01-10 14:32:03 +01:00
Jeffery To
15008be5cb
Merge pull request #17341 from erdoukki/fail2ban-2to3
fail2ban: fix 2to3 error
2022-01-10 20:48:03 +08:00
Glen Huang
78ef7d7379 ddns-scripts-cloudflare: allow explicit zone_id
When zone id is explicitly provided, there is no need for the API token to have read permission. Inspired by acme.sh's cloudflare logic.

Signed-off-by: Glen Huang <heyhgl@gmail.com>
2022-01-10 20:44:40 +08:00
Nick Hainke
e6afcf8f3c wg-installer: fix cleanup script
The wrong function was called.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-10 13:32:20 +01:00
Christian Lachner
8891db4a91 haproxy: Update HAProxy to v2.4.10
- Update haproxy download URL and hash
- Updated upstream patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-01-09 13:50:49 -08:00
Kerma Gérald
b4f48b5c23 crowdsec-firewall-bouncer: update to 0.0.21
Update crowdsec-firewall-bouncer to latest upstream release version 0.0.21

Makefile rework
- use tagged version for download

Fixes
- set API_KEY in firewall bouncer config file

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-09 13:44:20 -08:00
Sergey V. Lobanov
e660ac3398 krb5: fix build on macos
backport of upstream commit
3c66c1fec7
Original author: Nikhil Benesch <nikhil.benesch@gmail.com>

Remove unnecessary flag in macOS build
The configuration logic for adding the `-search_paths_first` linker
flag on Darwin does not correctly handle cross compilation.  It should
check the value of $krb5_cv_host rather than `uname -s` to detect when
the compilation target is Darwin, rather than the build machine.

It turns out `-search_paths_first` has been the default behavior of ld
on macOS since XCode 4.  So just remove that bit of logic entirely.
(The flag was added in commit acd27af0e845f8b93de2e226cc2ec9ac8af52077
in 2004; XCode 4 was released in 2010.)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-09 13:43:48 -08:00
Matthew Hagan
019501fe44 transmission: add ca_bundle support with procd-ujail
With procd-ujail enabled, it is not possible to use HTTPS URLs, for
example when either for downloading torrent files or blocklists. The
followig example occurs when downloading a URL from the "Upload Torrent
Files" dialogue box:

Error adding
"https://releases.ubuntu.com/21.10/ubuntu-21.10-desktop-amd64.iso.torrent":
gotMetadataFromURL: http error 0: No Response

syslog will also hint that no CA_BUNDLE is being used:

transmission-daemon[6683]: [2021-12-30 20:01:30.990] web will verify
tracker certs using envvar CURL_CA_BUNDLE: none (web.c:455)

This patch rectifies this issue by adding a ca_bundle configurable,
enabled by default. This explicitly fixes the ca_bundle file location
to /etc/ssl/certs/ca-certificates.crt and adds this file to the procd
jail. On subsequent testing, HTTPS URL download functionality is
restored.

Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
2022-01-09 21:18:15 +00:00