Commit graph

9241 commits

Author SHA1 Message Date
Marc Egerton
b9b9929591 mtr: bump version to 0.95, split package for JSON and non-JSON variants
As per the discussion in PR #18047, split the MTR package into
two, one with jansson enabled for JSON output, and one without.

This commit also bumps the version to 0.95. Since the MTR project
website does not seem to be updated with builds any longer, switch
to GitHub Codeload instead.

Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process
is executed properly.

Signed-off-by: Marc Egerton <marc@malloc.me>
2022-03-16 19:45:29 -07:00
Moritz Warning
2f488873eb zerotier: update to 1.8.6
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-16 19:45:14 -07:00
Stijn Tintel
3c503436d1 chrony: enable LTO
Size difference of the ipk on qoriq:
* chrony:	718571	676886
* chrony-nts:	786960	757064

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-16 19:35:01 -07:00
Stijn Tintel
51550d1415 chrony: enable AUTORELEASE
Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-16 19:35:01 -07:00
Philip Prindeville
649244dae2 isc-dhcp: Update to 4.4.3
Note that on 32-bit ARM with MUSL we don't have Unwind_GetIP() so
we need to disable backtraces.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 17:18:24 -06:00
Philip Prindeville
9e4485b156 named: don't leak mktemp files on reload
Unless we're using "mktemp -u ..." (not recommended), it will
create the temp file as part of its safety checking.  Thus you
should only create the name (file) if you're going to use it,
and always remove it if you have created it.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 15:20:15 -07:00
Philip Prindeville
2aff212510 isc-dhcp: detect whether ddns transfers are IPv4 only
If named is configured to not listen on any IPv6 interfaces,
then we should run 'nsupdate' with the '-4' argument.

Also:

* cleanup RFC-1918 address detection;
* don't generate PTR records for domain entries that aren't
  RFC-1918 addresses or these will generate NOTAUTH failures;

We're assuming that we're doing DNS split-horizon and that
internal addresses aren't routable.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 13:25:55 -06:00
Philip Prindeville
aa490f0279 isc-dhcp: don't leak mktemp files
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 12:55:21 -06:00
Daniel Golle
f951f61005
gnunet: improve init script
Ensure correct ownership of /etc/gnunet.
Quote variables and more or less make shellcheck happy.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 18:33:37 +00:00
Daniel Golle
079479918d
gnunet: depend on 'uci-firewall' instead of 'firewall'
To allow using gnunet on systems with firewall4, add replace direct
dependency on 'firewall' with 'uci-firewall' which is satisfied by
either 'firewall' or 'firewall4'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 02:41:31 +00:00
Etienne Champetier
34f556cb57 shorewall6-lite: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Etienne Champetier
57855319f1 shorewall6: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Florian Eckert
bacc3a889f keepalived: enable nftables filtering
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 12:00:31 +01:00
Josef Schlehofer
94fb0da32c
Merge pull request #18002 from BKPepe/haproxy-conflicts
haproxy: Makefile polishing and add conflict to SSL/non-SSL variant
2022-03-14 10:03:31 +01:00
Tianling Shen
88750d67e2
v2raya: add iptables as dependency
This package requires to use iptables (no matter which variant).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-13 23:34:53 +08:00
Daniel Golle
2f8e696189 gnunet: update to version 0.16.1
* OPUS and Pulse can be configured nicely by default now, no longer
   need a local patch for that
 * mysql version checks fail when cross-compiling, add patch to remove
   them and always assume MySQL >8.0.
 * Package new services, communicators, ...

This is a new major release. It breaks protocol compatibility with the
0.15.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network,
and interactions between old and new peers will result in issues.
0.15.x peers will be able to communicate with Git master or 0.16.x
peers, but some services - in particular GNS - will not be compatible.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-13 13:14:44 +00:00
Rosen Penev
196e15162d treewide: remove rpath-link
Most usages seem to be outdated and fixed a long time ago.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-13 00:02:02 -08:00
Rosen Penev
a97993a887 softethervpn: remove rpath hack
This was needed when readline was a shared library. Now that it's
static, this can be removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-10 21:51:24 -08:00
Tianling Shen
2dff513cd8 dnsproxy: Update to 0.41.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-09 12:11:56 -08:00
Kuan-Yi Li
de9fce568b modemmanager: bump to 1.18.6
Remove upstreamed patch.

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
2022-03-09 02:15:46 -08:00
James White
b08aa72bad adguardhome: Update adguardhome to v0.107.5
Signed-off-by: James White <james@jmwhite.co.uk>
2022-03-08 22:02:33 -08:00
Thibaut VARÈNE
385923321b coova-chilli: remove kmod dep on binary package
There is no reason for the kmod to depend on the binary package
itself, neither for building nor for installing.

That dependency prevents phase1 from building the kmod even though
support is enabled in the binary.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-03-08 21:57:48 -08:00
Erwan MAS
fb99d50c1e tinc: add creation of hosts directory for each network configuration
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2022-03-08 21:56:52 -08:00
Lucian Cristian
9ffd55a993 frr: update to 8.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-03-08 21:56:19 -08:00
John Audia
9e5e23737e iperf3: bump to 3.11
Update to latest upstream version

Signed-off-by: John Audia <graysky@archlinux.us>
2022-03-08 16:46:10 -08:00
Yousong Zhou
3623e50e1e shadowsocks-libev: remove now unused file firewall.ss-rules
It was leftover from the previous rewrite of ss-rules.  The built
package has no ref to it so no need to update PKG_RELEASE

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-08 15:23:55 +08:00
Stan Grishin
0b81af23a4
Merge pull request #18018 from rs/nextdns-1.37.10-master
nextdns: Update to version 1.37.10
2022-03-07 13:35:37 -08:00
Josef Schlehofer
6d15260c0a
Merge pull request #18001 from turris-cz/chrony-conflicts
chrony: add conflict between without NTS and NTS variant
2022-03-07 21:41:48 +01:00
Dirk Brenken
81d468489f
adblock: 4.1.3-6
* remove discontinued sources: shallalist, stalkerware
* fix a logical glitch in startup trigger handling

Signed-off-by: Dirk Brenken <dev@brenken.org>
2022-03-07 21:25:31 +01:00
Olivier Poitrey
0dc33a69de nextdns: Update to version 1.37.10
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2022-03-07 19:48:04 +00:00
Stan Grishin
ae9baa8d7e
Merge pull request #18004 from stangri/master-curl
curl: update to 7.82.0
2022-03-06 23:19:20 -08:00
Jeffery To
c05460c9ad seafile: Remove packages
I believe these packages should be removed (and imported into the
abandoned packages repo[1]) as Seafile Server and Seahub have been
marked as broken for some time, and I do not believe I will have time to
fix or update these packages in the foreseeable future.

[1]: https://github.com/openwrt/packages-abandoned/pull/22

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-06 19:37:45 -08:00
Stan Grishin
38b3a5f857 curl: update to 7.82.0
* changelog: https://curl.se/changes.html#7_82_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2022-03-07 02:57:42 +00:00
Yousong Zhou
d86ca89e49 shadowsocks-libev: add note on nftables set restriction
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-07 10:18:19 +08:00
Zhong Jianxin
2de9035bda shadowsocks-libev: add nft_tcp_extra/nft_udp_extra options
To add extra statement to tcp/udp forward rule, example:

```
config ss_rules 'ss_rules'
    ...
    option nft_tcp_extra 'tcp dport { 80, 443 }' # tcp only forward connections with dport 80 or 443
    option nft_udp_extra 'udp dport { 53 }' # udp only forward connections with dport 53
```

This somewhat restores the old ipt_args functionality.

Signed-off-by: Zhong Jianxin <azuwis@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(Amend README.md a bit)
2022-03-07 10:09:56 +08:00
Josef Schlehofer
487cc8fb26
haproxy: add conflict to packages with SSL or without SSL support
Both packages provide the same packages and should conflict to each
other.

Fixes:
```
Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /usr/sbin/haproxy
Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/haproxy.cfg
Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/init.d/haproxy
```

They should not be installed side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-06 13:06:44 +01:00
Josef Schlehofer
cedc95c862
haproxy: Makefile polishing
- There should be shorter TITLE in Package/haproxy/Default
otherwise it is not shown
- No need to call Build/Prepare/Default
- Remove twice TITLE in non-SSL variant
- Make conffiles more clear
- Remove empty menu for halog

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-06 13:06:39 +01:00
Josef Schlehofer
b898847395
chrony: add conflict between without NTS and NTS variant
Both packages provide the same files:
/usr/bin/chronyc
/usr/sbin/chronyd
/etc/chrony/chrony.conf
/etc/hotplug.d/iface/20-chrony
/etc/init.d/chronyd

They should not be installed side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-06 12:28:21 +01:00
Josef Schlehofer
a504fd9dfa
snort: add conflict with snort3
Both packages provides the same files:
- /usr/bin/u2boat
- /usr/bin/u2spewfoo
- /usr/bin/snort
- /etc/init.d/snort
- /etc/config/snort

So they should be in conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-04 16:28:58 +01:00
Maarten Aertsen
baa97e7fdf mdnsresponder: Fix nullpointer dereference while parsing interface list
This patch was backported from https://github.com/IETF-Hackathon/mDNSResponder/commit/1fb07b9524b4afed3a826c087db4dc48a7bfdb8

Signed-off-by: Maarten Aertsen <maarten@rtsn.nl>
2022-03-04 06:28:53 -08:00
Stijn Tintel
bc09311c38 strongswan: add missing dependencies
Fix the following build failures by adding the missing dependencies:

Package strongswan-mod-connmark is missing dependencies for the following libraries:
libip4tc.so.2

Package strongswan-mod-forecast is missing dependencies for the following libraries:
libip4tc.so.2

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-04 06:28:08 -08:00
Rosen Penev
160deb4465 tcpproxy: fix Wformat warning
snprintf call requires one more byte for NULL termunator.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-03 14:21:24 -08:00
Tianling Shen
39a804e99b
dnsproxy: Update to 0.41.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-03 21:51:43 +08:00
Christian Lachner
ff56783b1c haproxy: Update HAProxy to v2.4.14
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-03-02 16:35:24 -08:00
Etienne Champetier
68fb9c62a5 sqm-scripts: switch back to iptables
Following recent dependency rework, we can switch
between iptables-legacy and iptables-nft, and they both
PROVIDES iptables. Make it easier for user that want/need to
stick to firewall3/iptables-legacy to do so.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-02 17:26:23 -05:00
Yousong Zhou
c99cfc3ea3 shadowsocks-libev: update README.md
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-01 02:19:35 +00:00
Yousong Zhou
fdaf2de2ae shadowsocks-libev: convert to using nft
It will be mostly implemented with ucode templates installed at
/usr/share/ss-rules and called from init script.  The generated nftables
rules will be stored at /etc/nftables.d/

Incompatible changes were introduced as described in the README.md file

 - Netfilter ipset was replaced with nftables sets
 - UCI options ipt_args and dst_forward_recentrst of section ss_rules
   are now deprecated.  The former does not apply to nftables.  The
   later not yet implemented with nftables.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-01 10:06:48 +08:00
Yousong Zhou
e60310eb2e shadowsocks-libev: ss-rules: request presence of nat table
ss-rules with iptables needs presence of netfilter nat table to work.
ss-rules works before without explicitly requesting it as a dependency
because it's present by default on a pre-firewall4/nftables OpenWrt
install.  We request it explicitly now to make life easier in case
people would like to try ss-rules/iptables on firewall4/nftables enabled
OpenWrt system

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-01 10:06:48 +08:00
Chao Liu
b7171d5382 kcptun: bump to v20210922
Signed-off-by: Chao Liu <git@expiron.dev>
2022-02-28 14:09:34 -08:00
Tianling Shen
ca4324aee0 gg: Update to 0.2.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-02-28 11:43:53 -08:00