Commit graph

19316 commits

Author SHA1 Message Date
Stijn Tintel
d1e31481ec strongswan: bump to 5.8.4
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-05-08 06:02:32 +03:00
Stijn Tintel
e1f607af94 vallumd: switch to codeload.github.com
Review of my PR to add readsb requested to use codeload. Update vallumd
to use codeload as well, so that things are consistent.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-05-08 04:17:48 +03:00
Rosen Penev
d339fa2af8
Merge pull request #12062 from stintel/drop_maintainership
Drop maintainership
2020-05-07 16:58:02 -07:00
Rosen Penev
52d4b1e965
Merge pull request #12087 from simetnicbr/for-upstream/fping-suid
fping: add new config option to install SUID root
2020-05-07 11:40:52 -07:00
Kevin Darbyshire-Bryant
c8640d1f68 collectd: sqm_collectd improve interface name filter
Increase the range of characters that get substituted by '_' so the
shell doesn't complain about illegal variable names.

Primarily done to catch '.' and '-' but who knows what funnies will
appear in i/f names.

It's a shame that busybox ash doesn't understand :alnum:

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-07 10:48:45 +01:00
Rosen Penev
0ec076cf56
Merge pull request #12097 from neheb/dav
davfs2: fix compilation with newer neon
2020-05-07 01:15:16 -07:00
Philip Prindeville
b9c6cb6f0f
Merge pull request #12038 from pprindeville/syslog-ng-includes-user-settings-last
syslog-ng: including user settings after system settings
2020-05-06 16:20:54 -06:00
Rosen Penev
1376a5fe66
Merge pull request #12088 from lucize/sysrepofix
sysrepo: update to 1.4.2
2020-05-06 14:55:36 -07:00
Rosen Penev
1884c52072
davfs2: fix compilation with newer neon
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-06 14:28:13 -07:00
Lucian Cristian
1953132cea sysrepo: update to 1.4.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-07 00:25:57 +03:00
Henrique de Moraes Holschuh
958cbf5f45 fping: install fping SUID root
fping requires either root or CAP_NET_PING to work, otherwise it is
useless.  Use INSTALL_SUID so that fping will be setuid root, and thus
it will be usable by non-root users.

fping knows to drop root priviledges after it parses the command line
and creates the ping socket.  You actually get a lot less code running
as root when you make it setuid root and run it from an unprivileged
user.

This is the same way net/iputils already handles "ping", which has the
same requirements.

Signed-off-by: Henrique de Moraes Holschuh <henrique@nic.br>
2020-05-06 15:44:48 -03:00
Philip Prindeville
03a27b26a4
Merge pull request #12093 from pprindeville/openssh-no-ecdsa-hostkey
openssh-server: deprecate the ecdsa HostKey
2020-05-06 10:37:28 -06:00
Yousong Zhou
2f73c4853b shadowsocks-libev: ignore error from flushing route table
Linux kernel and iproute2 together now implement strict checking of the
existence of route tables.

Previously kernel does not support filtering by table id, now it does
and will error with nlmsgerr "ipv4: FIB table does not exist".

Previously iproute2 dump all routes and filter by table id in userspace,
now this has changed with iproute2 commit c7e6371bc4af ("ip route: Add
protocol, table id and device to dump request")

Error scene

	root@OpenWrt:/# ip route flush table 100
	Error: ipv4: FIB table does not exist.
	Flush terminated
	root@OpenWrt:/# echo $?
	2

Fixes: https://github.com/openwrt/packages/issues/12095
Ref: https://lists.openwall.net/netdev/2019/05/02/105
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-05-06 21:38:53 +08:00
Rosen Penev
ec9341ade7
Merge pull request #12092 from wongsyrone/patch-1
wsdd2: fix infinite loop when BI_PARM is never set
2020-05-05 19:58:09 -07:00
Syrone Wong
e8bee3aaa3 wsdd2: bump PKG_RELEASE; refine init script
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2020-05-06 10:12:03 +08:00
Jeffery To
1c54706b97 libevhtp: Fix dependencies not selected when building static library
When libevhtp is added to a package's PKG_BUILD_DEPENDS (i.e. for
seafile-server), libevhtp's target package dependencies are not
automatically selected, in particular libevent2-openssl and
libevent2-pthreads.

Moreover, if libevent-openssl and libevent2-pthreads are not selected,
OpenSSL and thread support are disabled when compiling libevent2, which
in turn causes a compile error when building libevhtp.

This adds a config option, LIBEVHTP_BUILD_DEPENDS, that will select
libevent2-openssl and libevent2-pthreads (via LIBEVHTP_BUILD_SELECT)
when it is selected.

Other build dependencies are moved to PKG_BUILD_DEPENDS.

This also updates seafile-server to remove the (indirect) dependencies
added in 13d843fec1 and instead select
LIBEVHTP_BUILD_DEPENDS.

This also updates the maintainer's email address and adds myself as
another maintainer.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-05 23:03:30 -03:00
Philip Prindeville
73fa0c963d openssh-server: deprecate the ecdsa HostKey
The init.d script for sshd never generates an ecdsa HostKey as seen
here:

	for type in rsa ed25519
	do
		# check for keys
		key=/etc/ssh/ssh_host_${type}_key
		[ ! -f $key ] && {
			# generate missing keys
			[ -x /usr/bin/ssh-keygen ] && {
				/usr/bin/ssh-keygen -N '' -t $type -f $key 2>&- >&-
			}
		}
	done

so we'll never succeed at loading one.  Get rid of the resultant
error message in logging:

May  5 17:13:59 OpenWrt sshd[20070]: error: Unable to load host key: /etc/ssh/ssh_host_ecdsa_key

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2020-05-05 18:03:56 -06:00
Syrone Wong
48d9521ecd wsdd2: fix infinite loop when BI_PARM is never set
If BI_PARM is never set, it's "" and causes
infinite loop (before my PR sent upstream) or
error out (after my PR sent upstream).
Append -b option only if it's valid.

Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2020-05-06 07:59:52 +08:00
Rosen Penev
76f5cf1a28
Merge pull request #11980 from neheb/pulseee
pulseaudio: add lto and gc-sections to reduce size
2020-05-05 15:12:26 -07:00
Rosen Penev
91e80e5442
pulseaudio: do not build NEON with unsupported platforms
Unfortunately, meson's check is totally broken.

Fortunately, it's fairly easy to workaround.

Fixes compilation with all ARM platforms that don't support NEON.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-05 15:02:01 -07:00
Rosen Penev
20960e5021
Merge pull request #12052 from neheb/sati
minisatip: update to 1.0.3
2020-05-05 14:38:16 -07:00
Rosen Penev
59148c7ac5
Merge pull request #12041 from neheb/shair
shairport-sync: update to 3.3.6
2020-05-05 14:37:43 -07:00
Florian Eckert
87ba072dce docker-ce: fix docker info warning
If we execute `docker info` we get the following warning:

WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled

To fix this enable this in sysctl if docker is installed.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-05 17:03:30 +02:00
Hannu Nyman
03162ee920 collectd: bump PKG_RELEASE
Bump PKG_RELEASE on behalf of 38235de9c

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-05-05 16:52:48 +03:00
Kevin Darbyshire-Bryant
38235de9c3 collectd: SQM collect data from some qdiscs
Add a script that can collect data from mq (multi queue) and cake
qdiscs.

Script is reliant on collectd's 'exec' module.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-05 12:00:56 +01:00
Kevin Darbyshire-Bryant
edc41b26ab rrdtool1: modify logarithmic scale labelling
The y-axis graph labels in logarithmic mode display in 'scientific'
notation eg: '1e+00' for 0, '1e+01' for 10, '1e+02' for 100 and so on.
This IMO is a pain in the backside for non scientific humans to read.

Modified output to display numbers up to 99,999 in conventional decimal
format and to revert to scientific notation for larger, thus the same
display space is taken.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-05 11:58:49 +01:00
Rosen Penev
d6caf776ae
Merge pull request #12046 from BKPepe/youtubedl
youtube-dl: update to version 2020.5.3
2020-05-04 22:25:43 -07:00
Rosen Penev
48ae81f9a7
Merge pull request #12079 from stangri/master-vpn-policy-routing
vpn-policy-routing: support phys-dev policies
2020-05-04 22:24:48 -07:00
Rosen Penev
eab63909f4
Merge pull request #12081 from ematsu/feature_create_tmpdir
freeradius3: Fix to init script.
2020-05-04 22:24:20 -07:00
Eiji MATSUMOTO
f4e9f07391
freeradius3: Fix to init script.
To use eap tls, 'tmpdir' must be created before server starts.
This 'tmpdir' is used to store and verify client certificate,
and therefore radiusd do 'chmod go-rwx'.

If 'tmpdir' does NOT exists, server failed to start and default
'tmpdir' is '/tmp/radiusd'. So init script MUST create default
'tmpdir' like other directories.

Signed-off-by: Eiji MATSUMOTO <toudaiman@gmail.com>
2020-05-05 12:03:10 +09:00
Rosen Penev
45e58e1cc3
pulseaudio: add lto and gc-sections to reduce size
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-04 18:32:01 -07:00
Rosen Penev
0d913069e5
Merge pull request #12059 from neheb/gerb2
gerbera: update to 1.5.0
2020-05-04 18:07:29 -07:00
Rosen Penev
2e4d2d36c2
gerbera: update to 1.5.0
This is a fairly massive update that adds new dependencies.

Switched the CMAKE_OPTIONS to use ON/OFF as is done elsewhere.

Added a patch fixing compilation with libiconv-stub/full.

Add a small debug option to write to syslog debug information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-04 16:05:23 -07:00
Stan Grishin
7bb2ccd4e1 vpn-policy-routing: support phys-dev policies
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-04 22:47:32 +00:00
Rosen Penev
f24f339eb1
Merge pull request #12078 from micmac1/masneon
neon: add back sed scripts for neon-config
2020-05-04 15:37:16 -07:00
Rosen Penev
fd437d1495 libmicrohttpd: update to 0.9.70
Fix license information.

Cleanup Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-05 00:24:38 +02:00
Sebastian Kemper
d59ae48f85 neon: add back sed scripts for neon-config
Commit 3a67097 removed the sed scripts that ran on neon-config. Now
there is build failure for Asterisk because a host include directory is
added to the build:

mips_24kc_musl/usr/lib/libintl-stub/include    -I/store/buildbot/slave/shared-workdir/build/sdk/staging_dir/target-mips_24kc_musl/usr/include/libxml2  -Wall -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations       -fPIC -DAST_MODULE=\"res_calendar_exchange\" -DAST_MODULE_SELF_SYM=__internal_res_calendar_exchange_self  -I/usr/include/neon -I/store/buildbot/slave/shared-workdir/build/sdk/staging_dir/target-mips_24kc_musl/usr/include -pthread -I/store/buildbot/slave/shared-workdir/build/sdk/staging_dir/target-mips_24kc_musl/usr/include
res_calendar_exchange.c:34:10: fatal error: ne_session.h: No such file or directory
 #include <ne_session.h>
          ^~~~~~~~~~~~~~
compilation terminated.

This commit adds back the sed scripts.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-04 23:00:13 +02:00
Rosen Penev
60e16ba4a2
Merge pull request #12036 from micmac1/json-glib
json-glib: new package
2020-05-04 10:34:43 -07:00
Rosen Penev
fa2ba2cdb1
Merge pull request #12063 from mstorchak/tmux
tmux: update to 3.1b
2020-05-04 10:33:05 -07:00
Rosen Penev
e63c89a062
Merge pull request #12071 from neheb/yara
yara: update to 4.0.0
2020-05-04 09:40:02 -07:00
Hannu Nyman
e5195acff3
Merge pull request #12076 from TDT-AG/pr/20200504-collectd
collectd: add syslog json plugin
2020-05-04 16:36:51 +03:00
Florian Eckert
bb666cc9ff collectd: add syslog json plugin
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 14:51:14 +02:00
Maxim Storchak
20dd5d7848 tmux: update to 3.1b
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2020-05-04 14:02:34 +03:00
Toke Høiland-Jørgensen
ef61a2be50 acme: Bump acme.sh to v2.8.6
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-05-04 10:36:42 +02:00
Toke Høiland-Jørgensen
b88b678004 acme: Remove luci-app-acme
The Luci app for ACME has been moved to the luci package feed.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-05-04 10:23:35 +02:00
Florian Eckert
d009ce628b keepalived: update PKG_RELEASE number
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
1b1ba71063 keepalived: add script security param to fix warning
Openwrt is a single user system. So keepalived is runnig as root.
If we add the config options `script_user root` and
`enabled_script_security' the following warnings are gone.

> local1.info Keepalived_vrrp[5382]: SECURITY VIOLATION - scripts are
being executed but script_security not enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
cc9e4d3b82 keepalived: move linkbeat_use_polling section into main section
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
c4d1af42e8 keepalived: move alt_config_file check into process_config
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00
Florian Eckert
9b24763b9f keepalived: add upgrade script for globals section
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-05-04 09:07:00 +02:00