Commit Graph

29225 Commits

Author SHA1 Message Date
Erik Karlsson 7029af834c openssh: add respawn and reloading via signal
Configure the openssh server to respawn. Reload by sending SIGHUP

Signed-off-by: Erik Karlsson <erik.karlsson@genexis.eu>
2023-05-01 13:34:10 +03:00
Hannu Nyman b7b1fe6cb3 zoneinfo: adjust to current timezone data file structure
Tweak the package to better match the current file structure in the
upstream time zone database. Add missing aliases. Make some clarifications

* Combine -northmerica and -southamerica into -america, as all
  current official America/xxx definitions were already in -northamerica
  and only the unofficial/deprecated Brazil/xxx, Chile and Argentina were
  in -southamerica. (Confusingly America/Sao_Paulo was in northamerica,
  while Brazil was in southamerica.)
  * Add PROVIDES for the old package names

* Add missing top-level dir country/nation alias links.
* Define Eire in -europe instead of -core.

* Rename -india to -indian, as it contains the Indian ocean islands
  instead of the actual Asia/Kolkata zone for the mainland India.
  * Add PROVIDES for the old package name

* Add 'Ocean' to all ocean zone titles.

* Make all zoneinfo-packages depend on zoneinfo-core, so that zone.tab,
  the UTC based definitions and the still existing short zone codes are
  always available.

* Clarify menuconfig menu as "Time Zone info"

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2023-05-01 13:31:57 +03:00
Glenn Strauss 90d5bd6dab lighttpd: build fixes
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-05-01 13:31:17 +03:00
Stan Grishin cdfff4a693 pbr: update to 1.1.1-1
*** MAKEFILE ***
* remove libubus dependency as it was causing issues
  https://forum.openwrt.org/t/policy-based-routing-pbr-package-discussion/140639/318
* move firewall hotplug directory/file creation out of default section into
  pbr and pbr-iptables packages sections in preparation for dropping it from pbr
* fix no new line after output when uninstalling packages

*** UCI-DEFAULTS ***
* only add firewall include to firewall config if the include file exists
* add shellcheck exception to netifd uci-defaults file

*** SCRIPTS ***
* more informative logging for firewall and iface hotplug scripts
* more informative logging for firewall include script

*** SERVICE ***
* introduce lock-file to prevent package starting on external events if it hasn't
  been auto- or manually started before
* use the `ip`, not `ip-full` command to prevent errors on OpenWrt 21.02
* parse firewall WAN zone to append list of interfaces
* append error and warning "arrays" with new messages
* used shared memory to store the service output/logging messages
* improve is_ovpn function to filter out false positives when interface names started
  with `tun`
* introduce is_valid_ovpn to find OpenVPN tunnels where the device name in OpenVPN config
  matches the device name in network config
* introduce opkg_get_version to compare versions of principal and luci packages
* better code to obtain AdGuardHome version with betas installed
* optimize code and add better logging for errors when inserting policies with iptables
* optimize code and add better logging for errors when inserting policies with nft
* bugfix: insert policies in all specified protocols
* bugfix: support using physical devices in policies in nft mode
* bugfix: use iptPrefix, not nftPrefix in iptables commands
* implement Tor support in nft mode
* bugfix: fix spelling for User File Syntax error
* restart service fully (instead of quick reload) for OpenVPN interface events, as
  the order/number of supported interfaces
* more verbose output (showing handles) of status in nft mode
* improve `icmp_interface`, `ignored_interface`, `supported_interface` validation
  regexes
* improve `interface`, validation regex

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-05-01 00:44:58 +00:00
Javier Marcet ab94144b87 samba4: decouple quotas from vfs option
Signed-off-by: Javier Marcet <javier@marcet.info>
2023-04-29 13:44:21 +03:00
Stepan Henek eb7275402e python-eventlet: bump to version 0.33.3
old eventlet is not working well with python3.10

```
root@turris:~# python3
Python 3.10.9 (main, Feb  9 2023, 10:37:45) [GCC 11.2.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import eventlet
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/__init__.py", line 17, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/convenience.py", line 7, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/green/socket.py", line 4, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/green/_socket_nodns.py", line 11, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/greenio/__init__.py", line 3, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/greenio/base.py", line 32, in <module>
  File "/usr/lib/python3.10/site-packages/eventlet/timeout.py", line 166, in wrap_is_timeout
TypeError: cannot set 'is_timeout' attribute of immutable type 'TimeoutError'
```

see 0.33.3 release notes for details - https://eventlet.net/doc/changelog.html#id1

Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
2023-04-29 13:43:16 +03:00
Tom Stöveken febf921d10 restic: update to 0.15.2
Maintainer: Tom Stöveken <tom@naaa.de>
Compile tested: SDK for OpenWrt 22.03.4
Run tested: x86/64 @ Intel(R) Celeron(R) CPU N3160 @ 1.60GHz, OpenWrt 22.03.4

Description:
Updated to version 0.15.2

Signed-off-by: Tom Stöveken <tom@naaa.de>
2023-04-29 13:42:21 +03:00
Dirk Brenken 16acda2262
banip: update 0.8.4-2
* fix domain lookup function (parse banIP config vars)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-04-28 12:07:06 +02:00
Nick Hainke 130e63931f libreswan: update to 4.10
Release Notes:
https://github.com/libreswan/libreswan/releases/tag/v4.10

Fixes: CVE-2023-23009
Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-04-27 21:14:00 +02:00
Christian Marangi c4b27ff6d5
nginx: rename nginx-all-module to nginx-full
Rename nginx-all-module to nginx-full to follow pattern used by other
package and other projects.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-27 06:14:58 +02:00
Christian Marangi 4611ca0b0a
nginx: update to 1.24.0 and update headers-more module
Update nginx to 1.24.0 and update headers-more module to fix compilation
error.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-27 06:14:58 +02:00
Christian Marangi cfce21ffea
nginx: update lua module to latest openresty version
Update lua module to latest openrestry version. Additional config are
required to correctly use it.

Switch it to luajit from liblua as this is what is currently supported
for the module since plain lua support was dropped from the module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-27 06:14:58 +02:00
Christian Marangi 65a676ed56
nginx: introduce support for dynamic modules
Start building sub package that provide dynamic modules.

Each module needs to be loaded using load_modules.
Refer to nginx documentation on how to use this.

This should result in lower memory usage as only used module are loaded.

Also fix the uci-default scripts to add the required ubus module for
luci module.

-fvisibility=hidden is needed to be dropped to correctly support loading
dynamic modules.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-27 06:14:57 +02:00
Christian Marangi 0a67d0e129
nginx-util: add support for loading dynamic module in uci template
Add support for loading dynamic module in uci template by adding .module
file in module.d directory.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-27 06:14:55 +02:00
Glen Huang 8589f298a1 acme: remove redundant postinst
opkg runs uci-defaults if a package installs one, in acme-common's case
that's identical to postinst.

prerm shouldn't be run a image builder, so it's unnecessary to check
IPKG_INSTROOT

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-26 22:42:26 +02:00
Nick Hainke 1bfd2f7ade iperf3: update to 3.13
Release Notes:
https://software.es.net/iperf/news.html#iperf-3-13-released

Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-04-26 10:52:16 +03:00
Tianling Shen 34842c2233 pcre2: only build static library for host
Fix potential linking issue:
```
/mnt/snapshot/staging_dir/hostpkg/bin/swig: error while loading shared
  libraries: libpcre2-8.so.0: cannot open shared object file:
    No such file or directory

error: command '/mnt/snapshot/staging_dir/hostpkg/bin/swig' failed with
  exit code 127
```

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-26 10:51:57 +03:00
Tianling Shen 42d340bce0 librespeed-go: update file permissions for ujail
This fixes "permission denied" error when access files as a normal user.

Reported-by: Anya Lin <hukk1996@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-26 10:51:08 +03:00
Nick Hainke bf006f137b iperf: update to 2.1.9
Changelog can be found here:
https://sourceforge.net/projects/iperf2/files/

Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-04-26 10:50:22 +03:00
Nick Hainke 10424ab9bf gzip: update to 1.12
Release Notes:
https://lists.gnu.org/archive/html/info-gnu/2022-04/msg00003.html

Fixes: CVE-2022-1271
Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-04-26 09:28:44 +03:00
Nick Hainke 37c6617f76 kmod: update to 30
Release Notes:
- https://github.com/kmod-project/kmod/releases/tag/v28
- https://github.com/kmod-project/kmod/releases/tag/v29
- https://github.com/kmod-project/kmod/releases/tag/v30

Signed-off-by: Nick Hainke <vincent@systemli.org>
2023-04-26 09:27:36 +03:00
Luiz Angelo Daros de Luca 786b3b9e9c yaml: only build static library
Do not build shared libraries to avoid host programs to dynamic link
libraries at non-standard paths.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-04-25 14:48:17 -03:00
Luiz Angelo Daros de Luca 39c14b859a ruby: statically link extensions into host ruby
Ruby uses extensions (.so files) that might also depend on other
libraries. When the linker builds an executable, it will refer to the
path it found the library, including those in the stagging dir. However,
when it links a shared library (like ruby exts), it will let that
dependency to be resolved at runtime.

During host and target build, ruby build script runs ruby scripts. When
it loads a ext that depends on another library, it will, by default,
look for the system libraries to satisfy that, breaking the build when
it fails. Setting LD_LIBRARY_PATH to the stagging lib dir is a valid
workaround.

Ruby can also be built statically linking all exts into ruby executable.
That will make the linker point to the stagging library path, fixing the
issue. It was used in the past but, at some point, ruby broke it. Now it
is working as expected.

Closes #20839

While at it, clean up excluded extensions not used by host ruby.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-04-25 14:48:17 -03:00
Jeffery To a35431f2bf python: Update find stdlib script
This updates the python3-find-stdlib-depends.sh script for these
changes:

* The gdbm (dbm.gnu) package was merged into the dbm package in
  78f6c2c5ad.

* The uuid module was split into a separate package in
  4e05541782.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:49:53 +03:00
Jeffery To 743204ff2d python-idna: Update to 3.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:48:47 +03:00
Jeffery To 36587eced2 python-zope-interface: Update to 6.0, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:48:14 +03:00
Jeffery To 977d8e5a6f python-pyasn1: Update to 0.5.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-04-25 07:47:33 +03:00
Glen Huang e36a55c9ed openssh: preserve authorized_keys
The root user is usually the user that clients ssh into with, so in most
cases its authorized_keys determines what clients are allowed to ssh
into this device. Without preserving this file, they could potentially
be locked out after upgrading.

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-25 07:23:01 +03:00
Philip Prindeville 7016a4546b
Merge pull request #20836 from hgl/strongswan-deps
strongswan: add missing PKG_MOD_AVAILABLE
2023-04-24 11:49:52 -06:00
Glen Huang 0436897323 strongswan: add missing PKG_MOD_AVAILABLE
Without these charon will warn with messages like:

plugin 'kdf': failed to load - kdf_plugin_create not found and no plugin file available
plugin 'drbg': failed to load - drbg_plugin_create not found and no plugin file available

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-24 22:40:18 +08:00
Philip Prindeville 6a3e5464ca
Merge pull request #20832 from hgl/strongswan
strongswan: enable nonce unconditionally
2023-04-24 08:34:55 -06:00
Glen Huang e67eb58312 strongswan: enable nonce unconditionally
Without nonce, charon won't start, so it's not an optional plugin. I
asked one of the strongSwan maintainers (ecdsa), and he confirmed this:

> It definitely has to be enabled unconditionally. The only other
> provider for the NONCE_GEN plugin feature is in charon-tkm, so
> completely irrelevant on OpenWrt

Signed-off-by: Glen Huang <me@glenhuang.com>
2023-04-24 15:51:28 +08:00
John Audia fbbe30622a snort3: update to 3.1.60.0
Upstream bump

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-04-24 05:08:17 +08:00
Dirk Brenken c5d9b3ded2
banip: release 0.8.4-1
* add support for a custom feeds file (/etc/banip/banip.custom.feeds). Add new or edit existing banIP feeds on your own with the integrated custom feed editor (LuCI-component
* add a new option 'ban_blockpolicy' to overrule the default bblock policy (block all chains), see readme for details
* change the feed file format and add a new ipthreat feed, see readme
* refine (debug) logging
* multiple small fixes and improvements
* readme update
* luci update (separate commit)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-04-23 22:03:09 +02:00
Vladimir Ermakov 6035e4884d qemu: add zstd option
Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
2023-04-23 18:35:39 +08:00
Vladimir Ermakov 65d052d9b8 qemu: update to 8.0.0
- Update version to 8.0.0
- Refresh patches
- Update configure opttions to disable libdw

Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
2023-04-23 18:35:39 +08:00
Andrew Sim 837c0f7f1c ksmbd-tools: update to 3.4.8 release
Changelog: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.4.8

Maintainer: nobody
Compile tested: Mediatek filogic, Asus TUF AX4200, lastest master
Run tested: Mediatek filogic, Asus TUF AX4200, lastest master

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>
2023-04-23 16:02:14 +08:00
Kirill Fertikov d1ad585ca9 shadowsocks-libev: ACL support
Link: https://github.com/openwrt/packages/pull/20647
Signed-off-by: Kirill Fertikov <kirill.fertikov@gmail.com>
[indentation fix]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2023-04-23 13:54:08 +08:00
Philip Prindeville 9569c7c03f
Merge pull request #20857 from pprindeville/strongswan-drop-local_gateway
strongswan: local_gateway unused in swanctl.init
2023-04-22 22:58:28 -06:00
Philip Prindeville 5f3840c765 strongswan: local_gateway unused in swanctl.init
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2023-04-22 18:20:38 -06:00
Javier Marcet b607e19398 docker-compose: Update to version 2.17.3
Signed-off-by: Javier Marcet <javier@marcet.info>
2023-04-23 07:32:34 +08:00
Tianling Shen 066a09754b
Merge pull request #20845 from jefferyto/ci-local-feed
CI: Add local feed for CI-built packages
2023-04-22 07:36:39 +08:00
Paul Fertser 0c10c224be treewide: remove AUTORELEASE
Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.

The following temporary change was made to the core:

diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
 abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))

 COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))

 all:
 FORCE: ;

And this command used to fix affected packages:

for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
                              sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
  make package/$i/download
done

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2023-04-21 22:46:58 +02:00
Hirokazu MORIKAWA 018fcf3ccd icu: bump to 73.1
Description:
It updates to CLDR 43 locale data with various additions and corrections.
ICU 73 improves Japanese and Korean short-text line breaking, reduces C++ memory use in date formatting, and promotes the Java person name formatter from tech preview to draft.
ICU 73 and CLDR 43 are minor releases, mostly focused on bug fixes and small enhancements. (The fall CLDR/ICU releases will update to Unicode 15.1 which is planned for September.)
ICU 73 updates to the time zone data version 2023c (2023-mar). Note that pre-1970 data for a number of time zones has been removed, as has been the case in the upstream tzdata release since 2021b.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-04-21 11:34:15 +08:00
Luca Barbato 1f9baddd43 rust: update to 1.69.0
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2023-04-21 06:09:47 +08:00
Christian Marangi 8b144f0dc3
nginx: split DAV_EXT from standard nginx DAV config
Split DAV_EXT from standard nginx DAV config as additional WebDAV
methods are provided by an external module.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-04-20 07:45:30 +02:00
Florian Eckert e14a7073b6
Merge pull request #20846 from johnfzc/sscep-license
scep: fix license
2023-04-20 08:16:34 +02:00
Peter van Dijk 8686e69765 pdns-recursor: update to 4.8.4
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-04-19 17:57:01 +02:00
Peter van Dijk b74c966c7c pdns: update to 4.7.4
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2023-04-19 17:55:26 +02:00
Josef Schlehofer abad1526fd
Merge pull request #20824 from jefferyto/newt-0.52.23
newt: Update to 0.52.23
2023-04-19 17:55:05 +02:00