Commit graph

30165 commits

Author SHA1 Message Date
Florian Eckert
f021b9416b mwan3: refactoring mwan3_report_iface_status output
The tracking and interface status was mixed up in the report. To fix
this, the interface status and the tracking status are now used
directly. The online, uptime and error information are appended to the
status line if needed. If certain routing tables and routing rules are
missing, the error number is also given.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-09-20 16:10:34 +02:00
Florian Eckert
002439594c mwan3: also show tracker state via ubus
The tracker state is not shown via ubus. Only if the tracker was in
active state, then the boolean running was set or not. By adding the
tracking state to the ubus information we could also evaluate the state
of the tracker. To remain compatible, the runnig flag of the tracker is
not removed, which in fact displays the same information, but only if
the tracker is in state 'active' or not.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-09-20 16:10:06 +02:00
Florian Eckert
28e058e92f mwan3: rename tracking state from 'not enabled' to 'disabled'
The expression 'disabled' is more meaningful than 'not enabled' and can
therefore be better processed in the ubus output, since it is only one
word.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-09-20 16:05:13 +02:00
Florian Eckert
4f59c248e0 mwan3: remove notracking in mwan3track ubus status
The function 'get_mwan3_status' is reading the internal state from the
tracker via the status file. Do not use the state 'notracking' status
anymore. If the mwan3track is not running always return 'unknown'
and not 'notracking'. There is already an other function that evaluates
the external state of the tracker.

We have now the following states of the tracker:
internal (mwan3track):
- offline
- online
- diconnecting
- connecting
- disabled
- unknown

external (via pgrep and config):
- paused
- active
- down
- not enabled

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-09-20 16:05:08 +02:00
Josef Schlehofer
6a8d3565f0 bind: update to version 9.18.18
Release notes:
https://downloads.isc.org/isc/bind9/9.18.18/doc/arm/html/notes.html#notes-for-bind-9-18-18
https://downloads.isc.org/isc/bind9/9.18.17/doc/arm/html/notes.html#notes-for-bind-9-18-17

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-20 06:23:25 -07:00
Oskari Rauta
8b3bf5bb88 slirp4netns: update to 1.2.2
v1.2.2 changes:
 - Enabled reproducible builds

v1.2.1 changes:
 - sandbox: Add support for escaping resolv.conf symlinks. This fixes usage in WSL environments which symlinks /etc/resolv.conf under a shared location under /mnt.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-20 00:17:20 +02:00
Jan Hák
2a6dc24882 knot: update to version 3.3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2023-09-19 13:13:56 +02:00
Tianling Shen
1b75de7e5c
rclone: Update to 1.64.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-09-19 09:58:18 +08:00
Hannu Nyman
87a9305ddd collectd: remove target dependency from cpufreq plugin
We currently have more package architectures supporting
CPU frequency scaling than earlier, and the package architecture
vs. CPU target SDK matching does not fully reflect that.
(E.g. aarch64_cortex-a53 is currently using bcm27xx/bcm2710)

Simplify things by removing the target dependency and let the plugin
be built for all architectures.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2023-09-18 22:13:41 +03:00
Florian Eckert
aca50a5af7
Merge pull request #22130 from oskarirauta/dockerd
dockerd: busybox compatibility
2023-09-18 11:46:17 +02:00
Florian Eckert
cfe941d578
Merge pull request #22126 from oskarirauta/podman
podman: depend on catatonit
2023-09-18 08:05:08 +02:00
Philip Prindeville
4108ca7aed
Merge pull request #22091 from pprindeville/isc-dhcp-fix-require-parameters-delim
isc-dhcpd: Generate correct delimiter in hex strings
2023-09-17 16:19:31 -06:00
Philip Prindeville
2faa29c550 isc-dhcp: Allow per-subnet domain names
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 14:28:10 -06:00
Philip Prindeville
4590decf5b isc-dhcpd: Generate correct delimiter in hex strings
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 14:28:10 -06:00
Philip Prindeville
a2438c834d
Merge pull request #22132 from pprindeville/perl-text-csv_xs-update-1.51
perl-text-csv_xs: Update to 1.51
2023-09-17 14:25:19 -06:00
Philip Prindeville
2954ac9742
Merge pull request #22131 from pprindeville/perl-cgi-update-4.57
perl-cgi: Update to 4.57
2023-09-17 14:17:08 -06:00
Philip Prindeville
606e7b9f46 perl-text-csv_xs: Update to 1.51
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 13:51:59 -06:00
Philip Prindeville
f459125b97 perl-cgi: Update to 4.57
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-09-17 13:44:03 -06:00
Oskari Rauta
9596937de3 dockerd: busybox compatibility
build hosts with busybox fail with long options on rm
command. Short versions are supported by all, so this
makes it script compatible with busybox hosts as well.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-17 16:36:30 +03:00
Ted Hess
8b2ccd8177
Merge pull request #22128 from BKPepe/ffmpeg
ffmpeg: update to version 5.1.3
2023-09-17 07:13:57 -04:00
Josef Schlehofer
87b2a2bb57 ffmpeg: update to version 5.1.3
Fixes CVEs:
CVE-2022-3964 [1]
CVE-2022-3965 [2]

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-3964
[2] https://nvd.nist.gov/vuln/detail/CVE-2022-3965

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-17 09:46:19 +02:00
Leo Douglas
8a223d4724 iperf3: update to 3.15
see changelog: https://github.com/esnet/iperf/releases/tag/3.15.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-17 07:38:54 +02:00
Oskari Rauta
500e484f61 podman: depend on catatonit
podman still seems to use catatonit with
rootless containers. It seems that it is
possible to use alternatives, such as tini,
but maybe go the same way they went on mainstream.

This PR just adds catatonit to depends.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-17 06:55:26 +03:00
Stan Grishin
6fa542b84c
Merge pull request #22122 from stangri/master-https-dns-proxy
https-dns-proxy: improve boot up start
2023-09-16 18:59:22 -07:00
Stan Grishin
22d21e28a7 https-dns-proxy: improve boot up startup
Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-09-16 23:45:20 +00:00
Stan Grishin
3653eb3d4a
Merge pull request #22118 from stangri/master-adblock-fast
adblock-fast: bugfix: remove domains on allow
2023-09-16 16:43:31 -07:00
Oskari Rauta
75064f1bf7 aardvark-dns: update to 1.7.0
Changelog: https://github.com/containers/aardvark-dns/compare/v1.6.0...v1.7.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:46 +08:00
Oskari Rauta
efb06993d7 netavark: update to 1.7.0
Changelog: https://github.com/containers/netavark/compare/v1.6.0...v1.7.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:27 +08:00
Oskari Rauta
56930920a4 podman: update to 4.6.2
patch refreshed.

Changelog:

 - Fixed a performance issue when calculating diff sizes in overlay. The podman system df command should see a significant performance improvement.
 - Fixed a bug where containers in a pod would use the pod restart policy over the set container restart policy.
 - Fixed a bug in the Compat Build endpoint where the pull query parameter did not parse 0/1 as a boolean.
 - Updated the containers/storage library to v1.48.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:43:15 +08:00
Oskari Rauta
7728e1eb39 crun: update to 1.9
Changes:
 - support arbitrary idmapped mounts. Now it is possible to specify a mapping for any type of mount, not only bind mounts.
 - add support for "ridmap" mount option to support recursive idmapped mounts.
 - fix check for oom_score_adj. Write the oom_score_adj file even when the new value is 0.
 - features: Support mountExtensions.
 - correctly handle unknown signal string when it doesn't start with a digit.
 - do not attempt to join again already joined namespace.
 - wasmer: use latest wasix API.
 - refresh libocispec

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:42:58 +08:00
Oskari Rauta
3d88d18ee2 conmon: update to 2.1.8
Bug fixes:
 - stdio: ignore EIO for terminals
 - ensure console socket buffers are properly sized
 - conmon: drop return after pexit()
 - ctrl: make accept4 failures fatal
 - logging: avoid opening /dev/null for each write
 - oom: restore old OOM score
 - Use default umask 0022

Misc changes:
 - cli: log parsing errors to stderr
 - Changes to build conmon for riscv64
 - Changes to build conmon for ppc64le
 - Fix close_other_fds on FreeBSD

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-09-16 21:42:34 +08:00
Stan Grishin
bce310bfcd adblock-fast: bugfix: remove domains on allow
* fix sed command to properly remove allowed domains from block-file

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-09-16 13:13:49 +00:00
Stan Grishin
6105cb2752
Merge pull request #22109 from BKPepe/curl-update
curl: update to version 8.3.0
2023-09-16 03:25:03 -07:00
Josef Schlehofer
bb4c3b5a20 bandwidthd: drop this package
This package is not maintained by upstream anymore as they replace it by Ntopng 3. [1]
Upstream repository is archived and read only since February 2022 [2]

[1] https://community.nethserver.org/t/bandwidthd-for-nethserver-7/4071/18
[2] https://github.com/NethServer/bandwidthd

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-16 12:17:22 +02:00
Josef Schlehofer
07c0a5eab8 curl: update to version 8.3.0
Release notes:
https://curl.se/changes.html#8_3_0

Fixes:
CVE-2023-38039 [1]

[1] https://curl.se/docs/CVE-2023-38039.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-16 11:23:06 +02:00
Martin Schiller
d42a6758b9 ovpn-dco: fix package dependencies
We have to add an "IPV6:" in front of the kmod-udptunnel6 to fix
redundant dependencies with the openvpn-* packages.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2023-09-16 17:03:03 +08:00
Olivier Poitrey
66b72b6db3 nextdns: Update to version 1.40.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-09-15 23:41:21 +08:00
Tianling Shen
c1fbf1f419
Merge pull request #22104 from douglarek/zt
zerotier: update to 1.12.2
2023-09-15 23:41:05 +08:00
Josef Schlehofer
536569ca62 dnscrypt-proxy2: update to version 2.1.5
Fixes compilation with Go 1.21+.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-15 10:23:20 +02:00
Josef Schlehofer
c43599b0c8 syslog-ng: update to version 4.3.1
Makefile changes:
- Since version 4.3.0, there is required to use pcre2 instead of pcre
Reference: https://github.com/syslog-ng/syslog-ng/pull/4537

- Disable c++ support by default to avoid picking libstdcpp dependency
Reference: https://github.com/syslog-ng/syslog-ng/pull/4484

Config changes:
- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-09-15 09:27:40 +02:00
Leo Douglas
0343dffefa
zerotier: update to 1.12.2
see changelog: https://github.com/zerotier/ZeroTierOne/releases/tag/1.12.2.

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-15 10:17:57 +08:00
Leo Douglas
b76a0d6aa6 sing-box: update to 1.4.3
see changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.4.3

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-09-15 09:50:14 +08:00
Tyler Young
ccde8d18a1 tailscale: set nftables as default
This changes the default firewall method used by Tailscale to nftables.
The 'autodetection' mode is only supported by arm64 and amd64 for now[1].
This causes mips devices to not do proper detection and incorrectly default back to
iptables.

I added a fw_mode variable to the tailscale.conf file that could be
set to iptables for easy conversion for someone still using iptables.
I was able to test on an older mips device and my current aarch64
without issues.

Also a few readme updates to bring it up to the current status.

1. dc7aa98b76/util/linuxfw/linuxfw_unsupported.go (L4C58-L4C58)

Signed-off-by: Tyler Young <git@yfh.addy.io>
2023-09-15 09:49:47 +08:00
John Audia
633950a384 snort3: update to 3.1.70.0
Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.1.70.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.12
           Using LuaJIT version 2.1.0-beta3
           Using OpenSSL 3.0.10 1 Aug 2023
           Using libpcap version 1.10.4 (with TPACKET_V3)
           Using PCRE version 8.45 2021-06-15
           Using ZLIB version 1.2.13
           Using Hyperscan version 5.4.2 2023-09-07

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-09-14 23:46:46 +02:00
Jeffery To
e309346104 python-setuptools: Update to 68.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-14 21:38:03 +08:00
Jeffery To
21eb9b7456 python-build: Update to 1.0.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-14 21:37:51 +08:00
Tianling Shen
701368824e
Merge pull request #22095 from jefferyto/rust-arch-depends
rust: Move RUST_ARCH_DEPENDS into rust-values.mk
2023-09-14 21:28:06 +08:00
Peter van Dijk
e25bb510de dnsdist: update to 1.8.1
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-09-13 12:39:34 +08:00
Jeffery To
985738b399
rust: Move RUST_ARCH_DEPENDS into rust-values.mk
This allows other packages access to RUST_ARCH_DEPENDS by including
rust-values.mk, instead of rust-package.mk which also sets
Build/Compile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-13 04:27:11 +08:00
Florian Eckert
a56e111c49 mwan3: fix mwan3_connected ubus output
During the renameing of mwan3_connected_v4 to mwan3_connected_ipv4 and
mwan3_connected_v6 to mwan3_connected_ipv6 the adjustment in the ubus
call was forgotten. This commit fixes this.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-09-12 16:03:18 +02:00