Commit graph

26810 commits

Author SHA1 Message Date
Jeffery To
d640480c0e Revert "expat: add host build"
This reverts commit ca21bbf2ed.

5bf74f2 removed the host build of expat and updated packages to use
tools/expat instead.

ca21bbf re-added the host build of expat for mesa (actually wayland) in
the video feed.

Changing wayland to use tools/expat is the proper fix, and there is a
PR[1] open with this change. Therefore this commit can and should be
reverted.

[1]: https://github.com/openwrt/video/pull/24

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-18 04:18:04 +00:00
Jeffery To
9f3f7a07c7 slide-switch: Update to 1.0.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-17 11:39:20 -07:00
Tianling Shen
cf9f4409e5 cloudflared: Update to 2022.3.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-17 11:39:08 -07:00
Jeffery To
2f81f907c2 python3: Add Py3Build/InstallBuildDepends recipe
This adds a recipe, Py3Build/InstallBuildDepends, that installs the
requirements listed in HOST_PYTHON3_PACKAGE_BUILD_DEPENDS. This allows
other (non-Python) packages to install host Python packages by calling
this recipe, without having to know the internals of python3-package.mk.

This also updates apparmor to call this recipe.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-17 11:38:19 -07:00
Rosen Penev
6000735f34 libextractor: remove ffmpeg plugin
This was removed upstream. It also doesn't build with ffmpeg 5.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-17 17:37:19 +00:00
Philip Prindeville
55055f70e4 bind: fix warnings about unknown options
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-17 08:38:05 -07:00
Florian Eckert
fe4f165b8e
Merge pull request #18066 from TDT-AG/pr/20220315-collectd
collectd: update smart plugin
2022-03-17 15:33:29 +01:00
Florian Eckert
896a0f0db6 collectd: smart: add patch to check udev_enumerate_scan_devices return value
The function udev_enumarte_scan_devices returns a value less than 0 on
failure. If this is the case then we terminate the read for this smart
information.

This change was already send upstream. And could be delete in feature
collectd versions.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-17 14:11:41 +01:00
Florian Eckert
a9ea1cf6ed collectd: remove not needed fix
This was not a real fix but a workaround. It is no longer clear to me
why this was necessary. Deleting the patch restores the upstream
behaviour of the collected for the smart plugin. I have tested it and on
my system the hard disk to be monitored is recognised.

root@system ~ # cat /sys/class/block/sda/uevent
MAJOR=8
MINOR=0
DEVNAME=sda
DEVTYPE=disk

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-17 14:11:41 +01:00
Florian Eckert
9aba2936e2
Merge pull request #17940 from TDT-AG/pr/20220225-mwan3
mwan3: update to version 2.11.0
2022-03-17 14:01:43 +01:00
Rosen Penev
74daf78dd6 vim: remove vim/host
The only use of it is for xxd. tools/xxd was added in base so this can
go.

https://github.com/openwrt/openwrt/commit/c4dd2441e7

added it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-17 10:04:40 +01:00
Florian Eckert
d3df3fed26
Merge pull request #18079 from TDT-AG/pr/20220316-libqmi-libmbim
ibqmi/libmbim: fix configure warning on unrecognized options
2022-03-17 08:04:32 +01:00
Michael Heimpold
ad52e193ac
Merge pull request #18070 from mhei/libxml2-update
libxml2: update to 2.9.13
2022-03-17 08:02:48 +01:00
Michal Vasilek
ee7aae202a openssh: update to 8.9p1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-03-16 19:53:38 -07:00
Josef Schlehofer
eb8e8ea4db libarchive: add conflict to bsdtar/bsdtar-noopenssl
Fixes:
Packages 'bsdtar' and 'bsdtar-noopenssl' do not conflict while providing same file: /usr/bin/bsdtar

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-16 19:53:14 -07:00
Florian Eckert
0c66639a28 libudev-zero: backport latest changes to fix blocking on devices scan
This change added the latest upstream changes since version 1.0.0.

When using the smart plugin from collectd, there are problems with the
function udev_enumerate_scan_devices. This function is blocked and no
longer returns. Backporting the latest fixes from libudev-zero solves
the problem.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-16 19:46:41 -07:00
Tianling Shen
35c109c7ff cloudflared: add new package
Contains the command-line client for Cloudflare Tunnel, a tunneling
daemon that proxies traffic from the Cloudflare network to your origins.

Docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-16 19:46:07 -07:00
Christian Lachner
ff90e4d479 haproxy: Update HAProxy to v2.4.15
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-03-16 19:45:52 -07:00
Javier Marcet
d09e1b23b2 python3-paramiko: update to version 2.10.1
2.10.1:

 - [Bug]: (CVE-2022-24302) Creation of new private key files using
 PKey subclasses was subject to a race condition between file creation
 & mode modification, which could be exploited by an attacker with
 knowledge of where the Paramiko-using code would write out such
 files.

 - This has been patched by using os.open and os.fdopen to ensure new
 files are opened with the correct mode immediately. We’ve left the
 subsequent explicit chmod in place to minimize any possible
 disruption, though it may get removed in future backwards-
 incompatible updates.

 - Thanks to Jan Schejbal for the report & feedback on the solution,
 and to Jeremy Katz at Tidelift for coordinating the disclosure.

2.10.0:

 - [Feature] Add support for OpenSSH’s Windows agent as a fallback
 when Putty/WinPageant isn’t available or functional. Reported by
 @benj56 with patches/PRs from @lewgordon and Patrick Spendrin.

 - [Feature] Add support for the %C token when parsing SSH config
 files. Foundational PR submitted by @jbrand42.

 - [Bug] Significantly speed up low-level read/write actions on
 SFTPFile objects by using bytearray/memoryview. This is unlikely to
 change anything for users of the higher level methods like
 SFTPClient.get or SFTPClient.getfo, but users of SFTPClient.open will
 likely see orders of magnitude improvements for files larger than a
 few megabytes in size.

 - Thanks to @jkji for the original report and to Sevastian Tchernov
 for the patch.

 - [Support] Add six explicitly to install-requires; it snuck into
 active use at some point but has only been indicated by transitive
 dependency on bcrypt until they somewhat-recently dropped it. This
 will be short-lived until we drop Python 2 support. Thanks to
 Sondre Lillebø Gundersen for catch & patch.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-03-16 19:45:42 -07:00
Marc Egerton
b9b9929591 mtr: bump version to 0.95, split package for JSON and non-JSON variants
As per the discussion in PR #18047, split the MTR package into
two, one with jansson enabled for JSON output, and one without.

This commit also bumps the version to 0.95. Since the MTR project
website does not seem to be updated with builds any longer, switch
to GitHub Codeload instead.

Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process
is executed properly.

Signed-off-by: Marc Egerton <marc@malloc.me>
2022-03-16 19:45:29 -07:00
Moritz Warning
2f488873eb zerotier: update to 1.8.6
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-16 19:45:14 -07:00
Alexandru Ardelean
589f276ba6 sudo: bump to version 1.9.10
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-16 19:45:02 -07:00
Javier Marcet
83357a7fe4 docker-compose: Update to version 2.3.3
What's Changed:

 - use plain text progress when ansi=never is set by @ndeloof
 - build full compose model from resources, then filter by services by
 @ndeloof
 - add run with dependencies e2e test by @glours
 - add support for device_cgroup_rules by @ndeloof
 - composeService to use dockerCli's In/Out/Err streams by @ndeloof
 - fix generated YAML missing an "examples" section, and update
 cli-docs-tool to v0.4.0 by @thaJeztah

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-03-16 19:44:14 -07:00
Josef Schlehofer
405bc53c0c chicken-scheme: add conflict and small Makefile polishing
- No need to explicitly state two times section and category since this is
already done in define Package/chicken-scheme/Default
- Also add TITLE to Default

- Add conflict between chicken-scheme-interpreter and
  chicken-scheme-full
They both provide the same files:
/usr/lib/libchicken.so
/usr/lib/chicken/11/chicken.time.import.so
/usr/lib/chicken/11/chicken.fixnum.import.so
/usr/lib/chicken/11/chicken.internal.import.so
/usr/lib/chicken/11/chicken.tcp.import.so
/usr/lib/chicken/11/chicken.continuation.import.so
/usr/lib/chicken/11/chicken.port.import.so
/usr/lib/chicken/11/chicken.random.import.so
/usr/lib/chicken/11/chicken.compiler.user-pass.import.so
/usr/lib/chicken/11/chicken.process-context.import.so
/usr/lib/chicken/11/chicken.bitwise.import.so
/usr/lib/chicken/11/srfi-4.import.so
/usr/lib/chicken/11/chicken.load.import.so
/usr/lib/chicken/11/chicken.blob.import.so
/usr/lib/chicken/11/chicken.time.posix.import.so
/usr/lib/chicken/11/chicken.file.posix.import.so
/usr/lib/chicken/11/chicken.flonum.import.so
/usr/lib/chicken/11/chicken.condition.import.so
/usr/lib/chicken/11/chicken.pretty-print.import.so
/usr/lib/chicken/11/types.db
/usr/lib/chicken/11/chicken.foreign.import.so
/usr/lib/chicken/11/chicken.repl.import.so
/usr/lib/chicken/11/chicken.pathname.import.so
/usr/lib/chicken/11/chicken.sort.import.so
/usr/lib/chicken/11/chicken.keyword.import.so
/usr/lib/chicken/11/chicken.process.signal.import.so
/usr/lib/chicken/11/chicken.platform.import.so
/usr/lib/chicken/11/chicken.base.import.so
/usr/lib/chicken/11/chicken.syntax.import.so
/usr/lib/chicken/11/chicken.file.import.so
/usr/lib/chicken/11/chicken.memory.import.so
/usr/lib/chicken/11/chicken.gc.import.so
/usr/lib/chicken/11/chicken.io.import.so
/usr/lib/chicken/11/chicken.memory.representation.import.so
/usr/lib/chicken/11/chicken.process.import.so
/usr/lib/chicken/11/chicken.plist.import.so
/usr/lib/chicken/11/chicken.string.import.so
/usr/lib/chicken/11/chicken.errno.import.so
/usr/lib/chicken/11/chicken.format.import.so
/usr/lib/chicken/11/chicken.eval.import.so
/usr/lib/chicken/11/chicken.irregex.import.so
/usr/lib/chicken/11/chicken.process-context.posix.import.so
/usr/lib/chicken/11/chicken.read-syntax.import.so
/usr/lib/chicken/11/chicken.csi.import.so
/usr/lib/chicken/11/chicken.locative.import.so
/usr/bin/csi

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-16 19:39:59 -07:00
Alexandru Ardelean
a85bc94a76 python-asn1crypto: drop package
I can't seem to see any package that needs it.
This was added for cryptography, since it was needed up to version 2.7
asn1-crypto doesn't have a user since commit 9d892e3cf8
So, remove it.

Abandoned packaged PR: https://github.com/openwrt/packages-abandoned/pull/23

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-16 19:39:31 -07:00
Oskari Rauta
21d2575a95 podman: updates podman package
- add missing runtime depency catatonit
 - removed SELinux variant, add config option for it instead, I do not believe we need variant of EVERY SELinux support capable software
 - add config option for iptables firewall setup in default cni network config, otherwise skip iptables part (part of nftables transition, use cni-plugins-nft for nftables fw support or better; forget about cni fw completely, instead use openwrt's own as that way your rules for containers do not disappear on firewall restart)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2022-03-16 19:39:06 -07:00
Jeffery To
26f99270d2 python-packages: Remove unused library packages
With the removal of Seafile, these library packages no longer have any
in-repo users. They will be imported into the abandoned packages
repo[1].

[1]: https://github.com/openwrt/packages-abandoned/pull/24

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-16 19:38:32 -07:00
Jeffery To
7022834082 libevhtp: Remove package
With the removal of Seafile, there are no more in-repo users of this
package. It will be imported into the abandoned packages repo[1].

[1]: https://github.com/openwrt/packages-abandoned/pull/25

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-16 19:37:02 -07:00
Stijn Tintel
3c503436d1 chrony: enable LTO
Size difference of the ipk on qoriq:
* chrony:	718571	676886
* chrony-nts:	786960	757064

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-16 19:35:01 -07:00
Stijn Tintel
51550d1415 chrony: enable AUTORELEASE
Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-16 19:35:01 -07:00
Florian Eckert
f0b5589ef0 libmbim: remove unknown configure option
The configure option --enable-more-warnings and --without-udev are not
recognized by configure.

Buildlog:
configure: WARNING: unrecognized options: --disable-nls,
--enable-more-warnings, --without-udev

Therefore this unkown configure options are removed with this commit.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-16 16:51:33 +01:00
Florian Eckert
a42f526b0c libqmi: remove unknown configure option
The configure option --enable-more-warnings is not recognized by
configure.

Buildlog:
configure: WARNING: unrecognized options: --disable-nls, --enable-more-warnings

Therefore this configure option is removed with this commit.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-16 16:51:28 +01:00
Philip Prindeville
116d17098a
Merge pull request #18056 from pprindeville/isc-dhcp-update-4.4.3
isc-dhcp: Update to 4.4.3
2022-03-15 17:59:58 -06:00
Philip Prindeville
649244dae2 isc-dhcp: Update to 4.4.3
Note that on 32-bit ARM with MUSL we don't have Unwind_GetIP() so
we need to disable backtraces.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 17:18:24 -06:00
Philip Prindeville
9e4485b156 named: don't leak mktemp files on reload
Unless we're using "mktemp -u ..." (not recommended), it will
create the temp file as part of its safety checking.  Thus you
should only create the name (file) if you're going to use it,
and always remove it if you have created it.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 15:20:15 -07:00
Michael Heimpold
81fd836f97 libxml2: update to 2.9.13
This fixes CVE-2022-23308.

Also switch to GNOME as download source and xz tarball.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-03-15 21:25:46 +01:00
Philip Prindeville
59b89ae066
Merge pull request #18061 from pprindeville/isc-dhcp-fix-ddns-updates
isc-dhcp: detect whether ddns transfers are IPv4 only
2022-03-15 13:56:35 -06:00
Philip Prindeville
2aff212510 isc-dhcp: detect whether ddns transfers are IPv4 only
If named is configured to not listen on any IPv6 interfaces,
then we should run 'nsupdate' with the '-4' argument.

Also:

* cleanup RFC-1918 address detection;
* don't generate PTR records for domain entries that aren't
  RFC-1918 addresses or these will generate NOTAUTH failures;

We're assuming that we're doing DNS split-horizon and that
internal addresses aren't routable.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 13:25:55 -06:00
Philip Prindeville
0172063b0a
Merge pull request #18069 from pprindeville/isc-dhcp-dont-leak-mktemp-files
isc-dhcp: don't leak mktemp files
2022-03-15 13:25:08 -06:00
Philip Prindeville
aa490f0279 isc-dhcp: don't leak mktemp files
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 12:55:21 -06:00
Daniel Golle
f951f61005
gnunet: improve init script
Ensure correct ownership of /etc/gnunet.
Quote variables and more or less make shellcheck happy.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 18:33:37 +00:00
Daniel Engberg
24686e4d6b
Merge pull request #18063 from turris-cz/netdata-disable-liblz4
netdata: disable LZ4 compression support
2022-03-15 11:25:31 +01:00
Josef Schlehofer
ceca87b25b
netdata: disable LZ4 compression support
To avoid unnecessary dependency, let's disable it for now.
LZ4 can be also used for DB engine and HTTPS

Fixes:
Package netdata is missing dependencies for the following libraries:
liblz4.so.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-15 10:52:56 +01:00
Daniel Golle
079479918d
gnunet: depend on 'uci-firewall' instead of 'firewall'
To allow using gnunet on systems with firewall4, add replace direct
dependency on 'firewall' with 'uci-firewall' which is satisfied by
either 'firewall' or 'firewall4'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 02:41:31 +00:00
Etienne Champetier
34f556cb57 shorewall6-lite: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Etienne Champetier
57855319f1 shorewall6: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Florian Eckert
c789e3c9c4
Merge pull request #18058 from TDT-AG/pr/20220314-keepalived
keepalived: enable nftables filtering
2022-03-14 13:24:51 +01:00
Florian Eckert
bacc3a889f keepalived: enable nftables filtering
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 12:00:31 +01:00
Florian Eckert
c688ffb025 mwan3: update version to 2.11.0
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 11:34:10 +01:00
Josef Schlehofer
94fb0da32c
Merge pull request #18002 from BKPepe/haproxy-conflicts
haproxy: Makefile polishing and add conflict to SSL/non-SSL variant
2022-03-14 10:03:31 +01:00