This updates auc to use the new API of the sysupgrade image server.
Package version updates now need to be evaluated locally.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
be065c4b sepolicy: Do not try to load policy on import
8f0f0a28 selinux(8,5): Describe fcontext regular expressions
e12f71e8 python/sepolgen: allow any policy statement in if(n)def
b15dff0f python/semanage: Sort imports in alphabetical order
92e01969 python/semanage: empty stdout before exiting on BrokenPipeError
fadcc839 python/sepolicy: allow to override manpage date
2a60de8e sepolgen: sort extended rules like normal ones
9e239e55 sepolgen: print extended permissions in hexadecimal
ccd973f7 python/audit2allow: add #include <limits.h> to sepolgen-ifgen-attr-helper.c
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
Switched to building with meson as it works better in a parallel
context.
Small Makefile adjustments for consistency.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Avoids having to use msgfmt, which happens to be broken with gettext-full.
msgfmt is used for the desktop gvim application, which is not used here.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
This fixes compiling lxc without seccomp support if libseccomp is
already installed to the staging dir. Patches were applied upstream.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* Since the docker0 is a private network by default we can be
more accepting like the LAN is by default
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* The default server is the default switch so that
queries will go through the hosts dnsmasq by default
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
This adds $STAGING_DIR to library search paths in setup.py, to avoid
picking up host libraries when linking.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Add custom meson build since the Makefile requires too much patching
anyway.
Stop using uClibc++. It will be removed in the near future.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Remove upstreamed patches.
Use autorelease to avoid bumping the release manually.
Fix bad linker variable on glibc.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
std::round was unavailable because of a wrong configure var from the
uClibc days. Fixed upstream with 1647790ae6202bd70b199e2aa44f8eb43e8d3af1
Refreshed patches with make package/sane-backends/refresh
Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Moved logic out of config writing
* Made default config only specify OpenWrt dictated defaults
Otherwise, docker defaults can be assumed
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
The crude loop I wrote to come up with this changeset:
find -L package/feeds/packages/ -name patches | \
sed 's/patches$/refresh/' | sort | xargs make
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
We should be using "00" to deal with alphabetical order.
Fixes: e9a126c145 ("rng-tools: start as early as possible")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Raspberry Pi devices (bcm2708) need this to get from:
[ 102.310494] random: crng init done
to:
[ 12.539744] random: crng init done
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Bugs:
- Fix SSH hostname parsing when it contains leading 's', 'h', and remove the quiet
option that was hiding the error (via docker-py bump to 4.4.2)
- Fix key error for --no-log-prefix option
- Fix incorrect CLI environment variable name for service profiles: COMPOSE_PROFILES
instead of COMPOSE_PROFILE
- Fix fish completion
Miscellaneous:
- Bump cryptography to 3.3.2
- Remove log driver filter
Signed-off-by: Javier Marcet <javier@marcet.info>
In recent commit for libxml2 [1], there was enabled support for iconv,
but it relieves issue with klish that it does not compile as it fails with
following output:
checking for xmlNewDoc in -lxml2... no
configure: error: cannot find libxml2 library
make[2]: *** [Makefile:73: /foo/build/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/klish-2.2.0/.configured_68b329da9893e34099c7d8ad5cb9c940] Error 1
make[2]: Leaving directory '/foo/build/feeds/packages/utils/klish'
[1] d18692c926
Suggested-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
The "get_wifi_interfaces" function is not returning the wifi interface
names. This causes the bug #14625.
Fix the "get_wifi_interfaces" function.
Signed-off-by: Nick Hainke <vincent@systemli.org>
This utility is intended to analyze EEPROM/boarddata content of Atheros
based boards: load, dump, parse and perform quick edit. Mostly it is
used to work with binary dumps/blobs on a host, but sometime it is
useful to be able to run it on a board, e.g. to make an EEPROM content
dump or to quickly analyze ART/boarddata without copying it to a host.
Signed-off-by: Sergey Ryazanov <ryazanov.s.a@gmail.com>
Package oci-runtime-tool itself as well as oci-runtime-tests containing
runtime validation test executables as well as rootfs tarballs used by
the tests.
oci-runtime-tool can be used to generate OCI spec files or validate
OCI bundles.
To validate the OCI runtime (runc, crun, uxc, maybe others) itself,
install the 'oci-runtime-tests' package as well as 'node-npm', use
npm to install node-tap and symlink the tap executable to /usr/bin.
Then
cd /usr/libexec/oci-runtime-tests
tap *.t
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Currently, we called `/usr/libexec/login.sh` as login command, but unfortunately the auth
is disabled by default in it[1], and this is really serious as it could be a free "backdoor"
for any spoiler who has conntectd to the router via LAN or wireless.
In my option, it shouldn't be exposed to anyone without auth, so I set the default login
command to `/bin/login`. And for those who really want that, they can do it themselves.
1. `login.sh` adjusts whether use authentication or not from system config named ttylogin,
which is set to disabled by default. See package/base-files/files/bin/config_generate#L243.
Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
Add "ipstatistics"-plugin. This plugin parses "/proc/net/netstat" and
"/proc/net/snmp6" to get the overall ipv4 and ipv6 usage.
Signed-off-by: Nick Hainke <vincent@systemli.org>
Dockerd start too early will conflict with other net config.
After boot must manually restart dockerd, Or some container will not run.
Signed-off-by: Yuhang Qin <qinyuhangxiaoxiang@gmail.com>
The install command on macOS does not support the -T flag.
As suggested by Rosen Penev, this package does not compile anything,
so the contents can be installed directly.
Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
This includes a backport of quota commit 02b222a3, which removes the
use of reallocarray. The musl C library does not provide reallocarray.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Bugs:
- Revert to Python 3.7 bump for Linux static builds
- Add bash completion for docker-compose logs|up --no-log-prefix
Miscellaneous:
- CI setup update
Signed-off-by: Javier Marcet <javier@marcet.info>
The Alpine Package Keeper is the default package manager for Alpine
Linux. They manage their own repositoriy with thousends of packages and
as musl is used for compilation, their binaries can directly run on
OpenWrt.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Getifaddrs() is not working all the time (e.g. wireguard interfaces).
Instead we use if_nameindex() syscall as suggested in:
https://stackoverflow.com/a/45796495/8474618
Signed-off-by: Nick Hainke <vincent@systemli.org>
Features:
- Support for Nvidia GPUs via device requests
- Support for service profiles
- Change the SSH connection approach to the Docker CLI's via shellout to the local SSH client (old behaviour enabled by setting COMPOSE_PARAMIKO_SSH environment variable)
- Add flag to disable log prefix
- Add flag for ansi output control
Bugs:
- Make parallel_pull=True by default
- Bring back warning for configs in non-swarm mode
- Take --file in account when defining project_dir
- On compose up, attach only to services we read logs from
Signed-off-by: Javier Marcet <javier@marcet.info>
Simplified bsd patch to be compatible with glibc. It's easier to just
use libbsd with glibc. Size shouldn't be an issue.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
The first release candidate with plenty of changes needs wider testing,
so package it.
Since Linux 4.8 new more efficient GPIO manipulation API is available
and sysfs class gpio is deprecated. Enable OpenOCD support for both for
now to avoid breaking existing user configs.
Due to low user demand and packaging difficulties require USB libraries
unconditionally from now on. Their sizes are not significant compared to
the OpenOCD package itself.
Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Version 008 started requiring libudev. Now that we have libudev-zero,
switch to that.
Remove custom usb.ids handling as that was split to a separate package.
Add datadir override as otherwise it would expect usb.ids in the wrong
place.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Several packages use files from this project. Added package to
consolidate. Packages will be adjusted to depend on this.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
It seems that in some situations, the host CC gets picked up. Just pass
the target one explicitly.
Refreshed patches.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
First version based on 1.1.8
It is based on the ccid build framework
from Daniel Golle <daniel@makrotopia.org>
Suggested-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Vincent JARDIN <vjardin@free.fr>
Fix start error:
00001221 [2012634380] pcscdaemon.c:624:main() cannot create /run/pcscd: No such file or directory
Signed-off-by: Vincent JARDIN <vjardin@free.fr>
It was removed in base system commit 88468f7e ("armvirt: merge arm64 as
subtarget 64") in 2017
No change in packaged content
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* SELinux and Seccomp are now enabled via the kernel options themselves
* Config.in now uses CGroupsV2 by default but optionally allows V1
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
The source is being deprecated and split into the CLI and engine/daemon
repositories, So `docker-ce` will now be the `dockerd` and a separate
package will be made for the `docker` CLI.
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
Count the current dhcpleases. Currently, we use a bash script
that does the same job (Freifunk Berlin). We want to use native
collectd plugin for that.
Signed-off-by: Nick Hainke <vincent@systemli.org>
This is dependency of luci-app-lxc and when users install that package
it is no way clear that they have to reload rpcd to get it working
correctly. Without it container listing does not work.
In general this reload should be in this package simply because other
rpcd-mod-* packages reload rpcd as well.
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
If you want statistics about IPv6 you can use snmpv6 exporter.
Currently, the "/proc/net/snmp6" is existing but all values are
just "0".
To use this plugin you have to set
CONFIG_PROC_STRIPPED=n
I will find a way to enable the important ipv6 statistics by default.
Signed-off-by: Nick Hainke <vincent@systemli.org>
Commit 9bcea2de2c causes a dependency
problem with some out-of-tree packages which expect "DEPENDS:=+kmod-pcspkr".
To fix this problem, this commit restores a dependency definition to
the previous one on x86 target.
Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>
This is a convenience argument to primarily facilitate outbound wan
connections from a docker container. However, all docker containers
can't bidirectionally communicate with the internet by default.
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
It's useless and it's only used by this package. Just link it
statically.
Remove CMAKE_INSTALL as InstallDev section is gone.
Add PKG_BUILD_PARALLEL for faster compilation.
Put license information up as there are no longer 2 packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Some change in base broke compilation with libusb and this package.
From looking at it more carefully, it turns out that the libusb patch
needs to be updated so that host paths are not used.
libusb-compat also depends on libusb, which increases the overall
installed size.
Refreshed patches with make package/hplip/refresh .
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Some change to base broke compilation. From looking at the CFLAGS,
hplip tries to use the host libusb.
libusb-compat seems to work properly. So use that.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
also
• update description
• drop “-c lto”, this option is gone from Build.sh
• add missing $(TARGET_CPPFLAGS)
Signed-off-by: Thorsten Glaser <tg@mirbsd.org>
Now that runc builds according to available kernel features and there
is no longer a sub-menu to select them manually, also drop the MENU:=1
statement from the package Makefile.
Fixes: 3a06ce559 ("runc: Updated to v1.0.0-rc92 for dockerd")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* adds the canon_lide70 backend
* avision: adds support for the KODAK i1120, fixes thread cancellation issues,
disables exposure option for non-filmscanners
* canon_dr: improves error reporting
* dmc: fixes compiler warnings on the scan area options
* epsonds: rewrites the network I/O following changes made to the
* epson2 backend in 1.0.30 to fix security issues. Network support is still
unsupported.
* fujitsu: adds support for the fi-800R and a card scanning slot, fixes a bug
when reading hardware sensors on the first invocation. Adds USB IDs for
fi-7800 and fi-7900.
* genesys: adds support for the Canon 5600F, Canon LiDE 90, Plustek OpticFilm
7200 and 7200 (v2), 7400, 7600i, 8100 and 8200i. Fixes several issues with the
Canon 8600F. Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
flatbed support on the Canon 8400F. Adds an option to fill dark calibration
with a constant. Adds transparency support for gl847 chipset based devices.
Fixes CIS scanner support for gl842 chipset based devices. Removes lineart and
image enhancement emulation support.
* gphoto: supports the PLANon DocuPen RC800 (with a recent enough version of
gphoto2)
* gt68xx: modifies scan cancellation behaviour
* hp5400: adds button support, fixes a scan cancellation crash issue
* pixma: add supports for the i-SENSYS MF440 Series and untested support for the
PIXMMA G7000 Series and GM4000 Series as well as the i-SENSYS MF720 Series.
* plustek: fixes a potential buffer overrun
* test: adds gamma options
Patches:
- ADD: 102-pixma_Restore_old_behaviour_in_case_XML_support_is_missing.patch:
pixma was failing to detect libxml2, even when it exists
(https://gitlab.com/sane-project/backends/-/issues/345)
- DROP: 100-fix-bigendian.patch: fix in release
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
It's nice to have seccomp support which is enabled in OpenWrt on
supported platforms on targets which are not marked as SMALL_FLASH.
(and it's kinda obvious that you wouldn't want to install runc on a
SMALL_FLASH target to begin with)
So let's enable seccomp by default.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Better a separate package than enabling it via busybox.
Special thanks to @neheb for the Makefile patches.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Installing the 'xz' package currently leads to file collisions:
Collected errors:
* check_data_file_clashes: Package xz wants to install file /usr/bin/unxz
But that file is already provided by package * busybox
* check_data_file_clashes: Package xz wants to install file /usr/bin/xz
But that file is already provided by package * busybox
* opkg_install_cmd: Cannot install package debootstrap.
Fix that by switching to use ALTERNATIVES for all multicall commands
instead of copying the symlinks into the package.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
dirmngr is needed to download keys from keyservers.
That being a useful thing, let's package dirmngr.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
