Commit graph

9261 commits

Author SHA1 Message Date
Tianling Shen
cf9f4409e5 cloudflared: Update to 2022.3.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-17 11:39:08 -07:00
Philip Prindeville
55055f70e4 bind: fix warnings about unknown options
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-17 08:38:05 -07:00
Florian Eckert
9aba2936e2
Merge pull request #17940 from TDT-AG/pr/20220225-mwan3
mwan3: update to version 2.11.0
2022-03-17 14:01:43 +01:00
Michal Vasilek
ee7aae202a openssh: update to 8.9p1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-03-16 19:53:38 -07:00
Tianling Shen
35c109c7ff cloudflared: add new package
Contains the command-line client for Cloudflare Tunnel, a tunneling
daemon that proxies traffic from the Cloudflare network to your origins.

Docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-16 19:46:07 -07:00
Christian Lachner
ff90e4d479 haproxy: Update HAProxy to v2.4.15
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-03-16 19:45:52 -07:00
Marc Egerton
b9b9929591 mtr: bump version to 0.95, split package for JSON and non-JSON variants
As per the discussion in PR #18047, split the MTR package into
two, one with jansson enabled for JSON output, and one without.

This commit also bumps the version to 0.95. Since the MTR project
website does not seem to be updated with builds any longer, switch
to GitHub Codeload instead.

Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process
is executed properly.

Signed-off-by: Marc Egerton <marc@malloc.me>
2022-03-16 19:45:29 -07:00
Moritz Warning
2f488873eb zerotier: update to 1.8.6
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-16 19:45:14 -07:00
Stijn Tintel
3c503436d1 chrony: enable LTO
Size difference of the ipk on qoriq:
* chrony:	718571	676886
* chrony-nts:	786960	757064

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-16 19:35:01 -07:00
Stijn Tintel
51550d1415 chrony: enable AUTORELEASE
Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-03-16 19:35:01 -07:00
Philip Prindeville
649244dae2 isc-dhcp: Update to 4.4.3
Note that on 32-bit ARM with MUSL we don't have Unwind_GetIP() so
we need to disable backtraces.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 17:18:24 -06:00
Philip Prindeville
9e4485b156 named: don't leak mktemp files on reload
Unless we're using "mktemp -u ..." (not recommended), it will
create the temp file as part of its safety checking.  Thus you
should only create the name (file) if you're going to use it,
and always remove it if you have created it.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 15:20:15 -07:00
Philip Prindeville
2aff212510 isc-dhcp: detect whether ddns transfers are IPv4 only
If named is configured to not listen on any IPv6 interfaces,
then we should run 'nsupdate' with the '-4' argument.

Also:

* cleanup RFC-1918 address detection;
* don't generate PTR records for domain entries that aren't
  RFC-1918 addresses or these will generate NOTAUTH failures;

We're assuming that we're doing DNS split-horizon and that
internal addresses aren't routable.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 13:25:55 -06:00
Philip Prindeville
aa490f0279 isc-dhcp: don't leak mktemp files
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-03-15 12:55:21 -06:00
Daniel Golle
f951f61005
gnunet: improve init script
Ensure correct ownership of /etc/gnunet.
Quote variables and more or less make shellcheck happy.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 18:33:37 +00:00
Daniel Golle
079479918d
gnunet: depend on 'uci-firewall' instead of 'firewall'
To allow using gnunet on systems with firewall4, add replace direct
dependency on 'firewall' with 'uci-firewall' which is satisfied by
either 'firewall' or 'firewall4'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-15 02:41:31 +00:00
Etienne Champetier
34f556cb57 shorewall6-lite: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Etienne Champetier
57855319f1 shorewall6: add @IPV6 to DEPENDS
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-03-14 09:28:47 -04:00
Florian Eckert
bacc3a889f keepalived: enable nftables filtering
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 12:00:31 +01:00
Florian Eckert
c688ffb025 mwan3: update version to 2.11.0
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 11:34:10 +01:00
Josef Schlehofer
94fb0da32c
Merge pull request #18002 from BKPepe/haproxy-conflicts
haproxy: Makefile polishing and add conflict to SSL/non-SSL variant
2022-03-14 10:03:31 +01:00
Florian Eckert
0b5f09162b mwan3: dump iptables and ipset command for debugging
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
5a80a5dbfe mwan3: unify error messages
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
ed2e0b33ed mwan3: add sleep to release ipset reference
It turns out that under high system load, ipsets cannot be deleted. This
is because there is still a reference in iptables. A short sleep should
give the system time to clean this up.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
13c2604eb1 mwan3: remove not needed ipset del cmd
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
408458a72f mwan3: Split ipsets into separate ipv4 and ipv6 sets
Nft does not directly support ipsets, nft sets must be used instead.
The mwan3 uses ipsets for certain tasks. They can be combinded. So called
an ipset of ipsets. This list type is not available in nft. So that
mwan3 could be ported to nft in the feature, the ipset handling should be
split. So we have for each ipset an iptables rule.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
502779755a mwan3: use mwan3_push_update function for mwan3_delete_iface_iptables
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
b5c675392d mwan3: remove ipset generation from mwan3_set_general_iptables
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
9c2abb19e2 mwan3: use sticky ipset generation mwan3_push_update pattern
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
e985f0dcd1 mwan3: do not create dynamic ipset for IPv6 if not supported
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
fedfbd5004 mwan3: do not add mwan3_custom_v6 set if ipv6 is not available
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
54fad2326e mwan3: use also ipset restore for connected ipv4 sets
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
a49d0953dc mwan3: move command definitions to common.sh
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Florian Eckert
33e70606c6 mwan3: update iptables dependencies
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-03-14 09:34:49 +01:00
Tianling Shen
88750d67e2
v2raya: add iptables as dependency
This package requires to use iptables (no matter which variant).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-13 23:34:53 +08:00
Daniel Golle
2f8e696189 gnunet: update to version 0.16.1
* OPUS and Pulse can be configured nicely by default now, no longer
   need a local patch for that
 * mysql version checks fail when cross-compiling, add patch to remove
   them and always assume MySQL >8.0.
 * Package new services, communicators, ...

This is a new major release. It breaks protocol compatibility with the
0.15.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network,
and interactions between old and new peers will result in issues.
0.15.x peers will be able to communicate with Git master or 0.16.x
peers, but some services - in particular GNS - will not be compatible.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-13 13:14:44 +00:00
Rosen Penev
196e15162d treewide: remove rpath-link
Most usages seem to be outdated and fixed a long time ago.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-13 00:02:02 -08:00
Rosen Penev
a97993a887 softethervpn: remove rpath hack
This was needed when readline was a shared library. Now that it's
static, this can be removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-10 21:51:24 -08:00
Tianling Shen
2dff513cd8 dnsproxy: Update to 0.41.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-03-09 12:11:56 -08:00
Kuan-Yi Li
de9fce568b modemmanager: bump to 1.18.6
Remove upstreamed patch.

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
2022-03-09 02:15:46 -08:00
James White
b08aa72bad adguardhome: Update adguardhome to v0.107.5
Signed-off-by: James White <james@jmwhite.co.uk>
2022-03-08 22:02:33 -08:00
Thibaut VARÈNE
385923321b coova-chilli: remove kmod dep on binary package
There is no reason for the kmod to depend on the binary package
itself, neither for building nor for installing.

That dependency prevents phase1 from building the kmod even though
support is enabled in the binary.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
2022-03-08 21:57:48 -08:00
Erwan MAS
fb99d50c1e tinc: add creation of hosts directory for each network configuration
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2022-03-08 21:56:52 -08:00
Lucian Cristian
9ffd55a993 frr: update to 8.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-03-08 21:56:19 -08:00
John Audia
9e5e23737e iperf3: bump to 3.11
Update to latest upstream version

Signed-off-by: John Audia <graysky@archlinux.us>
2022-03-08 16:46:10 -08:00
Yousong Zhou
3623e50e1e shadowsocks-libev: remove now unused file firewall.ss-rules
It was leftover from the previous rewrite of ss-rules.  The built
package has no ref to it so no need to update PKG_RELEASE

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2022-03-08 15:23:55 +08:00
Stan Grishin
0b81af23a4
Merge pull request #18018 from rs/nextdns-1.37.10-master
nextdns: Update to version 1.37.10
2022-03-07 13:35:37 -08:00
Josef Schlehofer
6d15260c0a
Merge pull request #18001 from turris-cz/chrony-conflicts
chrony: add conflict between without NTS and NTS variant
2022-03-07 21:41:48 +01:00
Dirk Brenken
81d468489f
adblock: 4.1.3-6
* remove discontinued sources: shallalist, stalkerware
* fix a logical glitch in startup trigger handling

Signed-off-by: Dirk Brenken <dev@brenken.org>
2022-03-07 21:25:31 +01:00
Olivier Poitrey
0dc33a69de nextdns: Update to version 1.37.10
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2022-03-07 19:48:04 +00:00