aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* kernel: add missing symbolStijn Tintel2022-04-021-0/+5
| | | | | | | Enabling KERNEL_KPROBES exposes KERNEL_BPF_KPROBE_OVERRIDE. Add a build option for it to fix build failures with KERNEL_KPROBES enabled. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* bpf-headers: support CONFIG_HZ=300Felix Fietkau2022-04-011-0/+20
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* imx: base-files: drop redundant space after case keywordsPiotr Dymacz2022-04-013-94/+94
| | | | Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
* kernel: modules: drop 'AddDepends/bluetooth' callsPiotr Dymacz2022-04-011-2/+0
| | | | | | Function 'AddDepends/bluetooth' doesn't exist in our codebase. Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
* layerscape: image: drop redundant parameter from kernel build recipePiotr Dymacz2022-04-011-2/+2
| | | | | | | Neither 'fit', nor target-specific 'traverse-fit' build recipes accept FDT load address in 3rd parameter. Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
* kernel: scale nf_conntrack_max more reasonablyVincent Pelletier2022-04-014-1/+150
| | | | | | | | | | | | | | | | | | | Use the kernel's built-in formula for computing this value. The value applied by OpenWRT's sysctl configuration file does not scale with the available memory, under-using hardware capabilities. Also, that formula also influences net.netfilter.nf_conntrack_buckets, which should improve conntrack performance in average (fewer connections per hashtable bucket). Backport upstream commit for its effect on the number of connections per hashtable bucket. Apply a hack patch to set the RAM size divisor to a more reasonable value (2048, down from 16384) for our use case, a typical router handling several thousands of connections. Signed-off-by: Vincent Pelletier <plr.vincent@gmail.com> Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* scripts: make sure conffiles are sortedPaul Spooren2022-04-011-1/+2
| | | | | | | | | It may happen that conffiles are in different order on different builds. Make sure they have the same order by sorting them. FIX: #9612 Signed-off-by: Paul Spooren <mail@aparcar.org>
* toolchain: reproducible libstdcppPaul Spooren2022-04-011-1/+2
| | | | | | | A Python script containing an unreproducible path is copied by default. Remove it before generating the package. Signed-off-by: Paul Spooren <mail@aparcar.org>
* octeon: mark source-onlyStijn Tintel2022-04-011-1/+1
| | | | | | | There is a hard to reproduce, even harder to track down memory leak in Octeon since kernel 5.10. Mark octeon source-only until it is plugged. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* Revert "ipq40xx: stop chromium sub-target builds on the buildbots"Petr Štetiar2022-04-011-1/+1
| | | | | | | | | | This reverts commit 35d2bbc29ba7f802706bf65585aeb8808fcac622 as we believe we found that it is indeed an openssl issue, where openssl is trying to use getrandom(2), but fails because this particular builder has an ancient kernel without that syscall. We didn't get to the bottom of why openssl doesn't fall back to something like /dev/random. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* mxs: enable 5.15 as testing kernelZoltan HERPAI2022-04-011-0/+1
| | | | Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* mxs: update config for 5.15Zoltan HERPAI2022-04-011-2/+9
| | | | Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* mxs: copy config from 5.10 to 5.15Zoltan HERPAI2022-04-011-0/+242
| | | | Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* generic: add missing symbol for 5.15Zoltan HERPAI2022-04-011-0/+1
| | | | Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* busybox: Fix snprintf arguments in lockHauke Mehrtens2022-03-311-1/+1
| | | | | | | | | The first argument for snprintf is the buffer and the 2. one is the size. Fix the order. This broke the lock application. Fixes: 34567750db2c ("busybox: fix busybox lock applet pidstr buffer overflow") Reported-by: Hartmut Birr <e9hack@gmail.com> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ath79: migrate Archer C5 5GHz radio device pathsJan-Niklas Burfeind2022-03-311-0/+1
| | | | | | | | | | | When upgrading a TP-Link Archer C5 v1 from ar71xx to ath79, the 5ghz radio stops working because the device path changed. Same has been done for the Archer C7 before: commit e19506f20618 ("ath79: migrate Archer C7 5GHz radio device paths") Signed-off-by: Jan-Niklas Burfeind <git@aiyionpri.me>
* imx: re-enable ARM arch timerPetr Štetiar2022-03-311-0/+2
| | | | | | | | | | | | | | Config option `ARM_ARCH_TIMER` has been removed during rebasing onto 5.15 kernel in commit 2b395c298247 ("imx: update config for 5.15"). Anyway, as stated in commit 8cdc356f8c30 ("mediatek: mt7623: Re-enable ARM arch timer") config option `ARM_ARCH_TIMER` cannot be enabled in the config directly; it is only selected by `HAVE_ARM_ARCH_TIMER`. We need to enable the latter in our config. Fixes: 2b395c298247 ("imx: update config for 5.15") Reported-by: Piotr Dymacz <pepe2k@gmail.com> Signed-off-by: Petr Štetiar <ynezz@true.cz>
* kernel: modules: fix kmod-drm-imx-ldb dependency for 5.15Petr Štetiar2022-03-311-1/+2
| | | | | | | | | | | | Fixes following issue: Package kmod-drm-imx-ldb is missing dependencies for the following libraries: drm_dp_aux_bus.ko Introduced upstream in commit aeb33699fc2c ("drm: Introduce the DP AUX bus") in kernel version 5.15. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* imx: make 5.15 default kernel and remove 5.10 supportPetr Štetiar2022-03-315-623/+1
| | | | | | | | | | | | | | | | | | | | | | | | In imx target we're sharing single, version agnostic kernel `config-default` file, which doesn't work very well with current 5.10 and upcoming 5.15 kernel symbols as recent rebase onto 5.15 kernel introduced in commit 2b395c298247 ("imx: update config for 5.15) has introduced following regression with 5.10 kernel: Marvell 88E6xxx Ethernet switch fabric support (NET_DSA_MV88E6XXX) [Y/n/m/?] y Switch Global 2 Registers support (NET_DSA_MV88E6XXX_GLOBAL2) [Y/n/?] (NEW) That NET_DSA_MV88E6XXX_GLOBAL2 kernel config symbol has been removed in upstream commit 63368a7416df ("net: dsa: mv88e6xxx: Make global2 support mandatory") in kernel version 5.12. This issue could be probably fixed by introduction of separate kernel config files for each currently used kernel versions and subtarget, but it is not worth the hassle and resources as imx target is running mostly upstream kernel, so lets fix it by switching to 5.15 version instead. Fixes: 2b395c298247 ("imx: update config for 5.15") Acked-by: Piotr Dymacz <pepe2k@gmail.com> Signed-off-by: Petr Štetiar <ynezz@true.cz>
* tools: SOURCE_DATE_EPOCH handling for mkfs.fatPaul Spooren2022-03-311-0/+157
| | | | | | | Backport upstream patch to have reproducible FAT signatures. This should enable reproducibility for x86 EFI images. Signed-off-by: Paul Spooren <mail@aparcar.org>
* kernel: modules: fix kmod-drm dependency for 5.15Petr Štetiar2022-03-301-1/+2
| | | | | | | | | | | | Fixes following issue: Package kmod-drm is missing dependencies for the following libraries: fb.ko Introduced upstream in commit f611b1e7624c ("drm: Avoid circular dependencies for CONFIG_FB") in 5.14. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* kernel: generic: add more missing kernel symbols for 5.15Petr Štetiar2022-03-301-0/+7
| | | | | | Found while adding 5.15 support for imx target. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* imx: update config for 5.15Petr Štetiar2022-03-303-9/+21
| | | | | | Refresh kernel config with `make kernel_oldconfig` make target. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* imx: enable 5.15 as testing kernelPetr Štetiar2022-03-301-0/+1
| | | | | | | So anyone interested can help with new kernel version integration and testing. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* imx: copy config and patches from 5.10 to 5.15Petr Štetiar2022-03-304-0/+623
| | | | | | So the upcoming changes needed for 5.15 can be reviewed easily. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* bcm53xx: prepare kernel 5.15 supportRafał Miłecki2022-03-3048-1/+4905
| | | | | | Tested on Luxul XWR-3150 (boot, NAND, PCIe, switch, Ethernet). Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* kernel: bump 5.10 to 5.10.109John Audia2022-03-3028-193/+182
| | | | | | | | | | All patches automatically rebased. Build system: x86_64 Build-tested: bcm2711/RPi4B, mt7622/RT3200 Run-tested: bcm2711/RPi4B, mt7622/RT3200 Signed-off-by: John Audia <graysky@archlinux.us>
* busybox: fix busybox lock applet pidstr buffer overflowQichao Zhang2022-03-301-3/+3
| | | | | | | | | | Kernel setting `/proc/sys/kernel/pid_max` can be set up to 4194304 (7 digits) which will cause buffer overflow in busbox lock patch, this often happens when running in a rootfs container environment. This commit enlarges `pidstr` to 12 bytes to ensure a sufficient buffer for pid number and an additional char '\n'. Signed-off-by: Qichao Zhang <njuzhangqichao@gmail.com>
* ath79: fix label MAC address for Ubiquiti UniFi AP Outdoor+Matthias Schiffer2022-03-303-2/+4
| | | | | | | | | The label has the MAC address of eth0, not the WLAN PHY address. We can merge the definition back into ar7241_ubnt_unifi.dtsi, as both DTS derived from it use the same interface for their label MAC addresses after all. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* ath79: add 5.15 support for generic subtargetDavid Bauer2022-03-3035-0/+3604
| | | | | | | | | Add Kernel 5.15 patches + config. This is currently only available for the generic subtarget, as it was exclusively tested with this target. Tested-on: Siemens WS-AP3610, Enterasys WS-AP3705i Signed-off-by: David Bauer <mail@david-bauer.net>
* bcm53xx: add switch ports for Buffalo WZR-900DHP & re-enable itSHIMAMOTO Takayoshi2022-03-302-1/+44
| | | | | | | | | | Specify the switch ports in the DTS file. Re-enable it after it was disabled by commit e9672b1a8fa4 ("bcm53xx: switch to the upstream DSA-based b53 driver"). Signed-off-by: SHIMAMOTO Takayoshi <takayoshi.shimamoto.360@gmail.com> [rmilecki: reword commit & drop unneeded whitespace change] Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: backport DT changes from 5.17 & 5.18Rafał Miłecki2022-03-309-1/+471
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* build: store sha256_unsigned in JSONPaul Spooren2022-03-293-7/+16
| | | | | | | | | | | | Introduce `sha256_unsigned` which is a checksum of the image _before_ a signature is attached. This is helpful to compare image reproducibility. Since the `.sha256sum` file is located in the $(KDIR) folder, switch $(BIN_DIR) with $(KDIR) to simplify the code. The value of $(BIN_DIR) itself is not stored inside the resulting JSON file, so it can be replaced. Signed-off-by: Paul Spooren <mail@aparcar.org>
* mt76: update to the latest versionFelix Fietkau2022-03-291-3/+3
| | | | | | eed44048ca57 Revert "mt76: dma: reduce lock contention in mt76_dma_tx_cleanup" Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bcm53xx: drop dead upgrade codeRafał Miłecki2022-03-291-8/+0
| | | | | | | platform_nand_pre_upgrade() is gone since commit 790692dde2b9 ("base-files: drop support for the platform_nand_pre_upgrade()"). Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: add support for Asus RT-AC88UArınç ÜNAL2022-03-292-0/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Asus RT-AC88U is an AC3100 router featuring 9 Ethernet ports over the integrated Broadcom and the external Realtek switch. Hardware info: * Processor: Broadcom BCM4709C0KFEBG dual-core @ 1.4 GHz * Switch: BCM53012 in BCM4709C0KFEBG & external RTL8365MB * DDR3 RAM: 512 MB * Flash: 128 MB (ESMT F59L1G81LA-25T) * 2.4GHz: BCM4366 4×4 2.4/5G single chip 802.11ac SoC * 5GHz: BCM4366 4×4 2.4/5G single chip 802.11ac SoC * Ports: 8 Ports, 1 WAN Ports Flashing instructions: * Boot to CFE Recovery Mode by holding the reset button while power-on. * Connect to the router with an ethernet cable. * Set IPv4 address of the computer to 192.168.1.2 subnet 255.255.255.0. * Head to http://192.168.1.1. * Reset NVRAM. * Upload the OpenWrt image. CFE bootloader may reject flashing the image due to image integrity check. In that case, follow the instructions below. * Rename the OpenWrt image as firmware.trx. * Run a TFTP server and make it serve the firmware.trx file. * Run the URL below on a browser or curl. http://192.168.1.1/do.htm?cmd=flash+-noheader+192.168.1.2:firmware.trx+flash0.trx Signed-off-by: Arınç ÜNAL <arinc.unal@arinc9.com> [rmilecki: mark BROKEN until we sort out nvram & CFE recovery] Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* kernel: fix initramfs reproducibilityDaniel Golle2022-03-291-1/+1
| | | | | | | | | Make sure xz uses at least 2 threads so compression always runs in multi-threaded mode as the resulting file in single-threaded mode differs. Fixes: 29d7461d11 ("kernel: set options to make external initramfs reproducible") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* image: let mksquashfs4 use all processorsStijn Tintel2022-03-291-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Drop the -processors argument from the mksquashfs4 call, so it will use all available processors. This dramatically reduces the time to create squashfs filesystems. The times below are observed when building an image for my main router, the WatchGuard Firebox M300 (qoriq target): Before: real 4m45,973s After: real 0m23,497s With this commit `mksquashfs` may use more cores than defined via `-j`. This is the same behaviour as for archive creation of ImageBuilder, SDK or toolchain. There is no trivial way to limit `mksquashfs` CPU core usage to the amount of "free" make jobs since two running `mksquashfs` instances would each run with the total allowed number (-j) of threads. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> [extended reasoning in commit message] Signed-off-by: Paul Spooren <mail@aparcar.org>
* realtek: Fix tc default packageHauke Mehrtens2022-03-291-1/+1
| | | | | | | | | | The tc package does not exits any more, it was split into tc-tiny, tc-full and tc-bpf. Include tc-bpf by default into realtek images. This increases the compressed image size by about 232KBytes. Tested-by: Stijn Segers <foss@volatilesystems.org> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* realtek: Use firewall4Hauke Mehrtens2022-03-291-1/+1
| | | | | | | | | | | | | | | | | | | The realtek target is not a router, but basic device, see DEVICE_TYPE. The basic device type does not come with firewall by default, see include/target.mk for details. The realtek target extended DEFAULT_PACKAGES manually with firewall. This changes the defaults to take firewall4 and nftables instead of firewall and iptables. This also adds the additional package kmod-nft-offload. The only difference to the router type is the missing ppp, ppp-mod-pppoe, dnsmasq and odhcpd-ipv6only package. This increases the compressed image size by about 422KBytes. Tested-by: Stijn Segers <foss@volatilesystems.org> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* realtek: Remove dnsmasq and odhcpd-ipv6only from defaultHauke Mehrtens2022-03-291-1/+1
| | | | | | | | | | | Do not include the dnsmasq and odhcpd-ipv6only package by default any more. These services are not needed on a switch. If someone needs this it is still possible to use opkg or image builder to add them. This decreases the compressed image size by about 165KBytes. Tested-by: Stijn Segers <foss@volatilesystems.org> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* sunxi: update config for 5.15Petr Štetiar2022-03-291-6/+21
| | | | | | Refresh kernel config with `make kernel_oldconfig` make target. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* sunxi: refresh kernel 5.15 patchesPetr Štetiar2022-03-291-1/+1
| | | | | | So the patches apply cleanly. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* sunxi: rebase sun50i-h5-nanopi-r1s-h5.dts onto 5.15Petr Štetiar2022-03-291-8/+8
| | | | | | So the patch can be applied on top of 5.15 kernel. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* sunxi: enable 5.15 as testing kernelPetr Štetiar2022-03-291-0/+1
| | | | | | | So anyone interested can help with new kernel version integration and testing. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* sunxi: copy config and patches from 5.10 to 5.15Petr Štetiar2022-03-2911-0/+874
| | | | | | | | | | | | So the upcoming changes needed for 5.15 can be reviewed easily. Removed following upstreamed patches: * 062-add-sun8i-h3-zeropi-support.patch * 100-sunxi-h3-add-support-for-nanopi-r1.patch * 101-sunxi-h5-add-support-for-nanopi-r1s-h5.patch Signed-off-by: Petr Štetiar <ynezz@true.cz>
* kernel: modules: fix kmod-mdio-devres dependency for 5.15Petr Štetiar2022-03-292-4/+4
| | | | | | | | | | | | | | | Fixes following build issues: Package kmod-r8169 is missing dependencies for the following libraries: mdio_devres.ko Package kmod-ixgbe is missing dependencies for the following libraries: mdio_devres.ko Package kmod-amd-xgbe is missing dependencies for the following libraries: mdio_devres.ko Signed-off-by: Petr Štetiar <ynezz@true.cz>
* x86: update config for 5.15Petr Štetiar2022-03-295-33/+92
| | | | | | Refresh kernel config with `make kernel_oldconfig` make target. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* x86: enable 5.15 as testing kernelPetr Štetiar2022-03-291-0/+1
| | | | | | | So anyone interested can help with new kernel version integration and testing. Signed-off-by: Petr Štetiar <ynezz@true.cz>
* x86: copy config and patches from 5.10 to 5.15Petr Štetiar2022-03-297-0/+1784
| | | | | | | | | | | | | | So the upcoming changes needed for 5.15 can be reviewed easily. Removing following patches backported from 5.15: * 101-v5.15-mfd-lpc_ich-Enable-GPIO-driver-for-DH89xxCC.patch * 102-v5.15-platform-x86-add-meraki-mx100-platform-driver.patch Removed upstreamed patch `300-pcengines_apu1_led.patch` in commit 1b40faf7e4ab ("leds: apu: extend support for PC Engines APU1 with newer firmware") Signed-off-by: Petr Štetiar <ynezz@true.cz>