Commit graph

27421 commits

Author SHA1 Message Date
Josef Schlehofer
fefd89f774
libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 676c5c72b5)
2022-10-25 14:29:25 +02:00
Josef Schlehofer
21ac9491f1
libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 77e682a11c)
2022-10-25 14:29:20 +02:00
Josef Schlehofer
deefa58a83
lighttpd: backport patch to fix dummy Sec-WebSocket-Key
It was requested in https://gitlab.nic.cz/turris/os/packages/-/issues/873

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit de49362d35)
2022-10-25 14:05:36 +02:00
Stan Grishin
5caff2eca1
Merge pull request #19700 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: add version information to binary
2022-10-24 23:11:34 -07:00
Stan Grishin
944a36af43
Merge pull request #19697 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: service_triggers improvements
2022-10-24 23:11:24 -07:00
Michal Hrusecky
54f3c84449
mariadb: Drop unused rundir fix socket dir perms
We had been creating "rundir" but it was never used, probably leftover
from some removed function. At the same time, we were setting quite
strict rights to the socket directory (while comments sugested
otherwise).

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
(cherry picked from commit 8f6831b64b)
2022-10-25 06:47:33 +02:00
Stan Grishin
6f49212bcf https-dns-proxy: add version information to binary
* add patches/020-cmakelists-add-version.patch (thanks @baranyaib90)
  to add version information to the binary and fix https://github.com/aarond10/https_dns_proxy/issues/149
* modify Makefile to add version information for the binary
* rename patches/010-fix-cmakelists.patch for better readability
* revert back to service restart in WAN/WAN6 trigger
* update test.sh to test both init script and binary versions

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 61ca2f4d16)
2022-10-24 21:54:11 +00:00
Stan Grishin
0be9e78c08 simple-adblock: service_triggers improvements
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 188d332840)
2022-10-24 17:04:31 +00:00
Stan Grishin
14125f8002
Merge pull request #19692 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: restore empty server; misc improvements
2022-10-24 09:45:13 -07:00
Dirk Brenken
7132a6b55d
adblock: update 4.1.5-4
* fixed broken oisd regex

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e90b4c01e1)
2022-10-24 12:35:24 +02:00
Sebastian Kemper
55c412f4b8 softflowd: use %lld for time_t always
Add upstreamed patch to fix segmentation fault reported in [1].

[1] https://github.com/openwrt/packages/issues/19655

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 7d019635b1)
2022-10-23 23:29:58 -07:00
Michal Hrusecky
5076201543 mariadb: Update to the latest version 10.6.10
Keeping the major version, bumping just a minor version. It includes
various bug fixes and security fixes. For details, see:

https://mariadb.com/kb/en/mariadb-10610-release-notes/
https://mariadb.com/kb/en/mariadb-1069-release-notes/
https://mariadb.com/kb/en/mariadb-1068-release-notes/
https://mariadb.com/kb/en/mariadb-1067-release-notes/
https://mariadb.com/kb/en/mariadb-1066-release-notes/
https://mariadb.com/kb/en/mariadb-1065-release-notes/

Following two patches dropped as the issues were fixed in upstream.

* 130-c11_atomics.patch
* 140-mips-connect-unaligned.patch

The rest of the patches were refreshed.

Don't need to disable cassandra and tokudb anymore as they were dropped
from upstream tarball.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
2022-10-23 23:26:44 -07:00
Stan Grishin
e7b83b5a54 https-dns-proxy: bugfix: restore empty server; misc improvements
* bugfix: properly restore empty server config for dnsmasq (to
  address issue brought up in https://github.com/stangri/source.openwrt.melmac.net/pull/162)
* better handling of non-existant wan/wan6 interface for triggers
* add resolver url to ubus data for future-proofing WebUI js move

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit fbc63cb9f6)
2022-10-24 04:22:20 +00:00
Dirk Brenken
7278c00b26
adblock: update 4.1.5-3
* fixed search regression in DNS report
* removed last shallalist pointers in the init help

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ca4c4d4fbc)
2022-10-22 09:24:45 +02:00
Tianling Shen
15ce9af907 treewide: fix procd service inactive
Exit directly will result procd service inactive and uci
configuration changes are no longer monitored.

Reported-by: Lvc Revincx <revincx233@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b1651c5d54)
2022-10-21 15:09:08 -07:00
Tianling Shen
31b99e2560 dnsproxy: Update to 0.45.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5801b0134a)
2022-10-21 15:03:16 -07:00
Stan Grishin
55fe139c72
Merge pull request #19661 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: prevent creation of empty interface trigger
2022-10-21 14:15:44 -07:00
Stan Grishin
cd052c1b97
Merge pull request #19659 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: remove unnecessary procd_add_reload_interface_trigger
2022-10-21 14:15:25 -07:00
Stan Grishin
ad1d25d0bf https-dns-proxy: bugfix: prevent creation of empty interface trigger
* When $wan/$wan6 are empty but double-quoted, it leads to creation
  of an interface trigger with empty interface

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 425cef2f8c)
2022-10-21 11:59:44 +00:00
Stan Grishin
45cdc86462 simple-adblock: remove unnecessary procd_add_reload_interface_trigger
Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ef067f6304)
2022-10-21 11:54:52 +00:00
Stan Grishin
6af202f917
Merge pull request #19594 from pymumu/master
[openwrt-22.03] smartdns: update to 1.2022.38.1
2022-10-20 04:53:07 -07:00
Stan Grishin
2104296291
Merge pull request #19636 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: remove canary domains
2022-10-20 03:42:32 -07:00
Dirk Brenken
667ba42946
adblock: update 4.1.5-2
* fixed broken/blocked oisd download links (switched to the official github mirror)
* made sure that curl error out on http errors as well
* removed obsolete compatibility stuff from init script

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f83baf221d)
2022-10-20 11:49:15 +02:00
Stan Grishin
1b93c3104a https-dns-proxy: bugfix: remove canary domains
* bugfix: canary domains persistence (as described in
  https://forum.openwrt.org/t/https-dns-proxy-canary-domain-persistance/139967)
* minor: remove global variables and make them local in
  service_start/service_stop/service_triggers
* minor: split DEFAULT_BOOTSTRAP into BOOTSTRAP_CF and BOOTSTRAP_GOOGLE for
  better code readability

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 92a45c3985)
2022-10-20 05:24:11 +00:00
Stan Grishin
997737ee83
Merge pull request #19634 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: bugfix: remove wan6 from procd triggers
2022-10-19 05:21:25 -07:00
Stan Grishin
7a7b95639d https-dns-proxy: bugfix: remove wan6 from procd triggers
* fixes https://github.com/openwrt/packages/issues/19631

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 409ce0f14f)
2022-10-19 09:05:18 +00:00
Hannu Nyman
9b6e0fde7e irqbalance: update to 1.9.1
Update irqbalance version to 1.9.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c1582e1ad0)
2022-10-19 08:51:13 +02:00
Rosen Penev
40006c97c3 irqbalance: add meson
Fixes compilation when libiconv is missing.

Also remove pthread from glibc. No longer needed.

Cleanup Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 59cadc7c65)
2022-10-19 08:51:13 +02:00
Rui Salvaterra
dc768d941a irqbalance: handle deepestcache option
Allow the user to specify the level at which irqbalance assumes the cache
domains are partitioned. Keep the default value of 2.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit d9447cfdc2)
2022-10-19 08:51:13 +02:00
Stan Grishin
acfd1ca906
Merge pull request #19604 from stangri/openwrt-22.03-nebula
[22.03] nebula: implement netifd support
2022-10-18 11:09:16 -07:00
Stan Grishin
44c6348c2c
Merge pull request #19626 from stangri/openwrt-22.03-simple-adblock
[22.03] simple-adblock: update to 1.9.2-1
2022-10-18 11:08:13 -07:00
Dirk Brenken
b365fdf8c7
adblock: update 4.1.5
* made the reporting/top statistics flexible, see "top_count" parm in CLI or in LuCI (default 10), fixes #19622
* added the new blocklist source cpbl (provided by PascalCoffeeLake@gmail.com)
* added/separated Easylist/Easyprivacy blocklist sources (provided by PascalCoffeeLake@gmail.com)
* added reg_jp blocklist_source (provided by PascalCoffeeLake@gmail.com)
* removed the easylist addons from the other regional lists
* removed the second/obsolete pl regional list and renamed the first one to "reg_pl"
* updated the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0e19246d14)
2022-10-18 19:02:09 +02:00
Michal Vasilek
de80dad8c2 ddns-scripts: fix cloudflare&digitalocean provides
Fixes mistake in dbe79e409d, the
cloudflare PROVIDES got mixed up with digitalocean.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 001564ed83)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Remove PKG_RELEASE version bump
2022-10-18 15:51:39 +02:00
Michal Vasilek
b0e5208557 ddns-scripts: add PROVIDES for old package names
* ddns-scripts-services: provide ddns-scripts_service
* ddns-scripts-cloudflare: provide ddns-scripts_digitalocean.com-v2
* ddns-scripts-freedns: provide ddns-scripts_freedns_42_pl
* ddns-scripts-godaddy: provide ddns-scripts_godaddy.com-v1
* ddns-scripts-noip: provide ddns-scripts_no-ip_com
* ddns-scripts-nsupdate: provide ddns-scripts_nsupdate
* ddns-scripts-route53: provide ddns-scripts_route53-v1
* ddns-scripts-cnkuai: provide ddns-scripts_cnkuai_cn

https://github.com/openwrt/packages/pull/13509 renamed many ddns-scripts
packages, but didn't include a PROVIDES for the old package names to
make updates work well.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit dbe79e409d)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Remove PKG_RELEASE version bump
2022-10-18 13:35:46 +02:00
Stan Grishin
e8fc003672 simple-adblock: update to 1.9.2-1
* make PKG_VERSION of the init script readonly to remove shellcheck
  exception
* replace exit with return in the the procd scripts per:
  https://github.com/openwrt/packages/pull/19617
* remove custom boot() function as it prevented creation of procd
  firewall object on start on boot
* improve performance of allowing domains code

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3ba54553ca)
2022-10-18 10:25:40 +00:00
Michal Vasilek
f8262f4056
tailscale: add version tests
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 551bb8b718)
2022-10-18 09:04:46 +02:00
Michal Vasilek
20595747f5
tailscale: fix -version
tailscale version, tailscaled -version and the web UI reported the wrong
version number which doesn't cause any issues, but it can be confusing.

This is fixed by specifying the version in go ldflags similar to how
it's done in many other go packages and the official tailscale Dockerfile.

version.Long version can not be specified in GO_PKG_LDFLAGS_X because it
contains a space and GO_PKG_LDFLAGS_X is always split at a space.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 738f44be4f)
2022-10-18 09:04:08 +02:00
Michael Heimpold
822cd366d6
Merge pull request #19619 from mhei/22.03-libxml2-update-2.10.3
[22.03] libxml2: update to 2.10.3
2022-10-18 08:00:13 +02:00
Michael Heimpold
37fd7c0316 libxml2: update to 2.10.3
This fixes:
    - CVE-2022-40303
    - CVE-2022-40304

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c2742973b0)
2022-10-17 22:05:59 +02:00
Stan Grishin
d8e9f6a7a7
Merge pull request #19612 from stangri/openwrt-22.03-https-dns-proxy
[22.03] https-dns-proxy: upstream bugfix for ca_info
2022-10-16 23:57:45 -07:00
Stan Grishin
ceba4b361a https-dns-proxy: upstream bugfix for ca_info
* upstream bugfix: Add a forgotten 'NULL' initialize for ca_info
  if not manually set
* make init script PKG_VERSION variable readonly so that a
  shellcheck excettion can be removed
* add procd interface trigger to 'wan6' if IPv6 wan interface name
  cannot be obtained on start

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit bca5d0ed8e)
2022-10-16 12:12:50 +00:00
Alexandru Ardelean
b201f469c7
numpy: bump to version 1.23.3
Also bump Cython version to 0.29.32

And yeeeey: zip -> tar.gz

And they fixed the Intel AVX extension stuff/detection.
Which is why I deferred updating it until now.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 5b9a66cd7c)
2022-10-15 17:22:11 +02:00
Eneas U de Queiroz
dba8a0102e
gnunnet: halt build if any command fails
There are many places in the packages' install recipes whith multiple
commands being executed in the same shell invocation, separated with a
semicolon (;).  The return status will depend only on the last command
being run.  The same thing happens in loops, where only the last file
will determine the result of the command.

Change the ';' to '&&', and exit the loop if any operation fails.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 2e75ccbb7d)
2022-10-14 20:44:27 +02:00
Eneas U de Queiroz
c1700e3a33
gnunnet: don't copy non-existing files
There are six places pointing to files that do not exist any more:
 - gns-import.sh in package gnunet-gns (dropped in v0.11.0)
 - libgnunetdnsstub.so* in gnunet-vpn (integrated into util in v0.11.0)
 - libgnunettun.so* in gnunet-vpn (integrated into util in v0.11.0)
 - gnunet-service-ats-new in package gnunet (dropped in v0.12.0)
 - libgnunetreclaimattribute.so.* (integrated into reclaim in v0.13.0)
 - libgnunetabe.so.* in gnunet-reclaim (dropped in v0.17.2)

They were not noticed because their failing copy commands were part of
loops in which only the last operation had its exit status checked.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit fb91f8b7b0)
2022-10-14 20:44:23 +02:00
Eneas U de Queiroz
9c68da83ec
gnunet: gnunet-rest: add libjose dependency
According to the package's configure.ac, reclaimID OpenID Connect plugin
depends on jose.  It is installed by the gnunet-rest plugin package:
libgnunnetrest_openid_connect.so.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit f041796003)
2022-10-14 20:44:18 +02:00
Eneas U de Queiroz
e1d7992559
opendoas: avoid libpam dependency
Package is failing to build because it picks up libpam dependency
regardless of `BUSYBOX_CONFIG_PAM`.

Use configure args --with-pam, --without-pam to assert the option.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8cb0ed95dd)
2022-10-14 20:41:30 +02:00
Josef Schlehofer
53c0a2767c
Revert "wget: update to 1.21.3"
With the newer wget version, wget-nossl can not be compiled due to
missing library, so let's revert it.

Package wget-nossl is missing dependencies for the following libraries:
libnettle.so.8

This reverts commit 5075f5b701.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-14 16:14:17 +02:00
Stan Grishin
93d378788f nebula: implement netifd support
This commit contains the following:
* Update binary to version 1.6.1
* Update README URLs in the Makefile to link OpenWrt-specific info
* Separate the binary, the init script and netifd script into 3 packages:
  nebula, nebula-service and nebula-proto accordingly
* implement yml parser for init script to fetch variables from it
* add the netifd script for nebula protocol
* update test file to address all built packages
* make the PKG_VERSION variable of init/proto scripts readonly

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 51902f9206)
2022-10-14 11:02:48 +00:00
Scott Roberts
e0502e477c
zabbix: add variants for SSL support
opkg does not offer ssl varients:
zabbix-agentd
zabbix-sender
zabbix-get
zabbix-proxy
zabbix-server

resolve this by adding ssl varients.

Signed-off-by: Scott Roberts <ttocsr@gmail.com>
(cherry picked from commit cd48d03f01)
2022-10-13 22:05:10 +02:00
Nick Hainke
f9bbda2e4c
wget: update to 1.21.3
Release Notes:
https://lists.gnu.org/archive/html/info-gnu/2022-02/msg00017.html

Remove the patch "100-fix-sts-time". This patch was replaced upstream by
several other fixes, see:
https://git.savannah.gnu.org/cgit/wget.git/log/src/hsts.c

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 5075f5b701)
2022-10-13 22:04:23 +02:00