aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* kernel: backport RTL8761B FW name change to v5.10Quintin Hill2022-11-122-0/+222
| | | | | | | | | Make the firmware filenames referenced by the module consistent for v5.10 and v5.15 kernels. Backport two upstream patches a cleanup commit and the commit making the change, the former is required for the latter to apply cleanly. Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
* linux-firmware: add rtl8761 bluetooth firmwareQuintin Hill2022-11-121-0/+23
| | | | | | | | | Realtek bluetooth devices need firmware. Add packages for some of these. Tested on a WNDR3700v4 with rtl8761bu firmware. Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
* kernel: support for Realtek USB bluetooth devicesQuintin Hill2022-11-121-2/+3
| | | | | | | | | | | USB adaptors with the RTL8761B chipset are cheap and readily available but so far support is missing in Openwrt. Enable the relevant kernel options and add a module to the kmod-bluetooth package. Increases size of kmod-bluetooth ipk from 279140 bytes to 285320 bytes on my ath79 build. Tested on a WNDR3700v4 with rtl8761bu firmware. Signed-off-by: Quintin Hill <stuff@quintin.me.uk>
* dnsmasq: add support for filter-AAAA/AChen Minqiang2022-11-122-0/+5
| | | | | | | | This add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6 addresses from DNS answers. these options is supported since version 2.87. Co-authored-by: NueXini <nuexini@alumni.tongji.edu.cn> Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* libnftnl: update to 1.2.4Nick Hainke2022-11-121-2/+2
| | | | | | | Release Announcement: https://lore.kernel.org/netfilter-devel/Y20W+LT%2F+sq%2Fi2rz@salvia/T/#u Signed-off-by: Nick Hainke <vincent@systemli.org>
* linux-firmware: update to 20221109Nick Hainke2022-11-121-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: 712460c linux-firmware: Update firmware file for Intel Bluetooth 9462 90d5f7e linux-firmware: Update firmware file for Intel Bluetooth 9462 48954ba linux-firmware: Update firmware file for Intel Bluetooth 9560 0e205fd linux-firmware: Update firmware file for Intel Bluetooth 9560 06b941e linux-firmware: Update firmware file for Intel Bluetooth AX201 ba958ff linux-firmware: Update firmware file for Intel Bluetooth AX201 02bdea2 linux-firmware: Update firmware file for Intel Bluetooth AX211 7044d46 linux-firmware: Update firmware file for Intel Bluetooth AX211 1b99bcd linux-firmware: Update firmware file for Intel Bluetooth AX210 4668ae9 linux-firmware: Update firmware file for Intel Bluetooth AX200 5bdfdba linux-firmware: Update firmware file for Intel Bluetooth AX201 b0f995c amdgpu: update DMCUB firmware for DCN 3.1.6 d991031 rtl_bt: Update RTL8822C BT UART firmware to 0xFFB8_ABD6 fd62f01 rtl_bt: Update RTL8822C BT USB firmware to 0xFFB8_ABD3 b15fc21 WHENCE: mrvl: prestera: Add WHENCE entries for newly updated 4.1 FW images bf5a337 mrvl: prestera: Update Marvell Prestera Switchdev FW to v4.1 4a733c2 iwlwifi: add new FWs from core74_pv-60 release 7d2bb50 qcom: drop split a530_zap firmware file 7d56713 qcom/vpu-1.0: drop split firmware in favour of the mbn file 1431496 qcom/venus-4.2: drop split firmware in favour of the mbn file cf95783 qcom/venus-4.2: replace split firmware with the mbn file 1fe6f49 qcom/venus-1.8: replace split firmware with the mbn file abc0302 linux-firmware: Add firmware for Cirrus CS35L41 on new ASUS Laptop 20d9516 iwlwifi: add new PNVM binaries from core74-44 release 06dbfbc iwlwifi: add new FWs from core69-81 release 05df8e6 qcom: update venus firmware files for VPU-2.0 cd6fcdb qcom: remove split SC7280 venus firmware images 1612706 qcom: update venus firmware file for v5.4 ad9fdba qcom: replace split SC7180 venus firmware images with symlink dae5d46 rtw89: 8852b: update fw to v0.27.32.1 a8e86ec rtlwifi: update firmware for rtl8192eu to v35.7 9aa8db1 rtlwifi: Add firmware v4.0 for RTL8188FU 8f86b5a i915: Add HuC 7.10.3 for DG2 48407ff cnm: update chips&media wave521c firmware. bd31846 brcm: add symlink for Pi Zero 2 W NVRAM file 771968c linux-firmware: Add firmware for Cirrus CS35L41 on ASUS Laptops 6f9620e linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops 1d18cb9 linux-firmware: Add firmware for Cirrus CS35L41 on HP Laptops e497757 rtw89: 8852b: add initial fw v0.27.32.0 98b5577 iwlwifi: add new FWs from core72-129 release 604026c iwlwifi: update 9000-family firmwares to core72-129 Signed-off-by: Nick Hainke <vincent@systemli.org>
* kernel: update U-Boot nvmem driver to v6.2 release versionRafał Miłecki2022-11-126-0/+336
| | | | | | | | | Backport queued patches that 1. Fix CRC32 calculation for redundant images 2. Fix CRC32 on big-endian 3. Fix parting images with Broadcom header Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* mt76: update to the latest versionFelix Fietkau2022-11-112-16/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 8cc34bdc9ef0 wifi: mt76: mt7921: set MT_DRV_AMSDU_OFFLOAD for USB/SDIO 2182de50a37c wifi: mt76: fix receiving LLC packets on mt7615/mt7915 269df4b01f27 wifi: mt76: fix rx checksum offload on mt7615/mt7915/mt7921 fa4ace8e3b58 ieee80211: add EHT 1K aggregation definitions 176df35e7e80 wifi: mt76: mt7915: improve accuracy of time_busy calculation 94b335fa88e1 wifi: mt76: mt7915: add ack signal support 3365c129f73c wifi: mt76: mt7915: enable use_cts_prot support ad9bd2ba361e wifi: mt76: mt7615: enable use_cts_prot support 68bdcccb0aa7 wifi: mt76: mt7915: fix reporting of TX AGGR histogram 242fece4323f wifi: mt76: mt7921: fix reporting of TX AGGR histogram 75003c69a9bd wifi: mt76: mt7615: rely on mt7615_phy in mt7615_mac_reset_counters 65c70a32f1cf wifi: mt76: move aggr_stats array in mt76_phy b1ddf8bec058 wifi: mt76: mt7915: rework mt7915_dma_reset() 1ad31c3f76f4 wifi: mt76: mt7915: enable full system reset support 6b0668de7a53 wifi: mt76: mt7915: add full system reset into debugfs a5e48378d2a6 wifi: mt76: mt7915: enable coredump support 1e9060420c92 wifi: mt76: mt7915: fix incorrect tx path number configuration 0263711ba362 wifi: mt76: mt7915: fix antenna selection with bad eeprom. 869815e5ef86 wifi: mt76: mt7915: Fix chainmask calculation on mt7915 DBDC fc410557b7e1 wifi: mt76: mt7915: Fix VHT beamforming capabilities with DBDC daa30a31cf70 wifi: mt76: mt7915: don't claim 160MHz support with mt7915 DBDC 80bcecdbc2ff wifi: mt76: connac: update nss calculation in txs 465219c1f56c wifi: mt76: do not run mt76u_status_worker if the device is not running c7db15903e5c wifi: mt76: connac: add mt76_connac_mcu_uni_set_chctx 7a2b1a13b1b0 wifi: mt76: mt7921: add chanctx parameter to mt76_connac_mcu_uni_add_bss signature dece6921e606 wifi: mt76: mt7921: add unified ROC cmd/event support d4da182389b6 wifi: mt76: mt7921: drop ieee80211_[start, stop]_queues in driver 0c3ef988d8dc wifi: mt76: connac: accept hw scan request at a time c477225fd10e mt7615: update cr4 firmware to 20190415154149 413a4bf39513 mt76: mt7915: fix unused-but-set variable f5034abea899 mt76: mt7915: fix format string a9ac73ed8275 wifi: mt76: mt7615: increase eeprom size for mt7663 4a27f23fc4f2 linux-firmware: update firmware for MT7921 WiFi device Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bcm4908: refresh kernel 5.15 configRafał Miłecki2022-11-111-8/+15
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm4908: prepare support for kernel 5.15Rafał Miłecki2022-11-1140-0/+3989
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm4908: update DTS files with the latest changesRafał Miłecki2022-11-118-8/+298
| | | | | | | The most affecting change is move of files from bcm4908/ to the bcmbca/. That required updating few paths. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* procd: update to git HEADDaniel Golle2022-11-101-3/+3
| | | | | | | | 24f6bc4 jail: correctly check for null pointer 93b2c2d jail: ignore missing .dynamic sect 039b88f sysupgrade: print errno on failure Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* ath79: add support for Teltonika RUT300Daniel Golle2022-11-104-0/+223
| | | | | | | | | | | | | | | | | | | | | | | | Add support for the Teltonika RUT300 rugged industrial Ethernet router Hardware -------- SoC: Qualcomm Atheros QCA9531 RAM: 64M DDR2 (EtronTech EM68B16CWQK-25IH) FLASH: 16M SPI-NOR (Winbond W25Q128) ETH: 4x 100M LAN (QCA9533 internal AR8229 switch, eth0) 1x 100M WAN (QCA9533 internal PHY, eth1) UART: 115200 8n1, same debug port as other Teltonika devices USB: 1 single USB 2.0 host port BUTTON: Reset LED: 1x green power LED (always on) 5x yellow Ethernet port LED (controlled by Linux) WAN port LED is used as boot status and upgrade indicator as the power LED cannot be controlled in software. Use the *-factory.bin file to intially flash the device using the vendor firmware's Web-UI. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* kernel: more fixes for mtk_eth_soc performance optimizationFelix Fietkau2022-11-103-22/+27
| | | | | | | | - fix features sync between netdevs - fix crash in dsa_switch_rcv Fixes: ceb1451c10c1 ("kernel: add mediatek soc ethernet performance improvements") Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mac80211: fix mesh airtime link metric estimationFelix Fietkau2022-11-101-0/+36
| | | | | | fix reading the per-packet rate on devices with firmware rate control Signed-off-by: Felix Fietkau <nbd@nbd.name>
* fstools: update to git HEADRafał Miłecki2022-11-101-3/+3
| | | | | | 3affe9e block: try multiple NTFS filesystem implementations Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* kernel: fix vlan parsing issue in mediatek ethernet driverFelix Fietkau2022-11-102-30/+22
| | | | | | | Check the vlan rx offload flag Sync features across netdevs Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: remove invalid dtim_period option processingFelix Fietkau2022-11-101-2/+1
| | | | | | | | dtim_period is a bss property, not a device one. It is already handled properly in mac80211.sh Fixes: 30c64825c7ed ("hostapd: add dtim_period, local_pwr_constraint, spectrum_mgmt_required") Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: support "linux,rootfs" DT property for splitting rootfsRafał Miłecki2022-11-102-10/+12
| | | | | | | | | OpenWrt's support for splitting rootfs (to create an extra "rootfs_data" partition) is limited to partitions called "rootfs". Upstream kernel allows any name partition to be rootfs if it has "linux,rootfs" property set. Add split support to such partitions in OpenWrt code. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* bcm53xx: update DTS files with the latest changesRafał Miłecki2022-11-1032-13/+4255
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* ipq40xx: add support for GL.iNet GL-A1300Weiping Yang2022-11-097-0/+345
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifications: SOC: Qualcomm IPQ4018 (DAKOTA) ARM Quad-Core RAM: 256 MiB FLASH1: 4 MiB NOR FLASH2: 128 MiB NAND ETH: Qualcomm QCA8075 WLAN1: Qualcomm Atheros QCA4018 2.4GHz 802.11b/g/n 2x2 WLAN2: Qualcomm Atheros QCA4018 5G 802.11n/ac W2 2x2 USB: 1 x USB 3.0 port Button: 1 x Reset button Switch: 1 x Mode switch LED: 1 x Blue LED + 1 x White LED Install via uboot tftp or uboot web failsafe. By uboot tftp: (IPQ40xx) # tftpboot 0x84000000 openwrt-ipq40xx-generic-glinet_gl-a1300-squashfs-nand-factory.ubi (IPQ40xx) # nand erase 0 0x8000000 (IPQ40xx) # nand write 0x84000000 0 $filesize By uboot web failsafe: Push the reset button for 10 seconds util the power led flash faster, then use broswer to access http://192.168.1.1 Afterwards upgrade can use sysupgrade image. Signed-off-by: Weiping Yang <weiping.yang@gl-inet.com>
* ath79: calibrate TL-WDR4900 v2 with nvmem-cellsEdward Chow2022-11-092-17/+24
| | | | | | | | | | | | | Driver for both soc (2.4GHz Wifi) and pci (5 GHz) now pull the calibration data from the nvmem subsystem. This allows us to move the userspace caldata extraction for the pci-e ath9k supported wifi into the device-tree definition of the device. wmac's nodes are also changed over to use nvmem-cells over OpenWrt's custom mtd-cal-data property. Signed-off-by: Edward Chow <equu@openmail.cc>
* ath79: add missing clock name strings in SoC dtsiShiji Yang2022-11-095-5/+14
| | | | | | | For all SoC in the ath79 target, the PLL controller provides 3 main clocks "cpu", "ddr" and "ahb" through the input clock "ref". Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* ath79: move reference clock node to SoC dtsiShiji Yang2022-11-0925-186/+24
| | | | | | | AR7161, AR724x, AR9132 and QCA95xx only support fixed frequency external crystal oscillator, so move reference clock node to SoC dtsi files. Signed-off-by: Shiji Yang <yangshiji66@qq.com>
* Revert "build: fix for sourcing target image config a when target is being ↵Christian Marangi2022-11-091-1/+0
| | | | | | | | | | replaced" This reverts commit ce1346a8fc0ce9640a4ecbc37bc1686a25c1165d. Seems to cause buildbot compilation to fail and require more testing. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* build: fix for sourcing target image config a when target is being replacedPrasun Maiti2022-11-091-0/+1
| | | | | | | Sourcing of image/Config.in will not happen When a target is installed from target/linux/feeds/ Signed-off-by: Prasun Maiti <prasunmaiti87@gmail.com>
* mac80211: remove old legacy legacy driversFelix Fietkau2022-11-0916-922/+19
| | | | | | | | | | | Get rid of drivers that are either limited to 802.11b/g or don't even support cfg80211/mac80211. Most of these are either limited to boards that we don't even support anymore because of firmware size, or were only used for custom hacks by a really small number of users in the past. Let's get rid of those to reduce the maintenance effort and the number of useless packages Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mediatek: filogic: enable maxlinear PHY support, refresh configFelix Fietkau2022-11-091-0/+1
| | | | | | Needed for the 7986 RFB1 board Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mediatek: filogic: fix mt7986a ethernet devicetree entriesFelix Fietkau2022-11-091-12/+24
| | | | | | Add all ports, rename DSA ports to start at lan1 Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mediatek: drop the use of device tree overlays on mt7986a-rfb boardFelix Fietkau2022-11-094-91/+92
| | | | | | | The boot loader does not support it. Instead make NAND the default image for this board Signed-off-by: Felix Fietkau <nbd@nbd.name>
* scripts/mkits.sh: fix portability issueFelix Fietkau2022-11-091-2/+2
| | | | | | | BSD wc can output more whitespaces, which breaks the cut usage. Replace the cut invocation with awk, which is more portable. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mt76: add firmware package for mt7916Andrew Powers-Holmes2022-11-091-0/+16
| | | | | | | | | | Add kernel package 'mt7916-firmware' with firmware files for MT7916E devices. These share the same driver as the MT7915 chipset, but use their own firmware. Tested using a pair of AsiaRF AW7916-NPD cards. Signed-off-by: Andrew Powers-Holmes <aholmes@omnom.net>
* kernel: add mediatek soc ethernet performance improvementsFelix Fietkau2022-11-0914-8/+1422
| | | | | | | | - implement multiqueue via qdma hardware shaper to deal with ports with different speeds - implement hardware DSA untagging - add NETIF_F_ALL_TSO to reduce unnecessary segmentation Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mac80211: subsys: add tags to upstreamed patchesNick Hainke2022-11-0932-0/+0
| | | | | | Some patches were already upstreamed. Signed-off-by: Nick Hainke <vincent@systemli.org>
* mac80211: rt2x00: add tags to upstreamed patchesNick Hainke2022-11-0916-0/+0
| | | | | | Some patches are already upstreamed. Signed-off-by: Nick Hainke <vincent@systemli.org>
* mac80211: brcm: add tag to upstreamed patchNick Hainke2022-11-091-0/+0
| | | | | | Add tag to upstreamed patch. Signed-off-by: Nick Hainke <vincent@systemli.org>
* mac80211: ath9k: add tag to upstreamed patchNick Hainke2022-11-091-0/+0
| | | | | | Add tag to upstreamed patch. Signed-off-by: Nick Hainke <vincent@systemli.org>
* mac80211: ath10k: add tags for upstreamed patchesNick Hainke2022-11-096-0/+0
| | | | | | Add tags to already upstreamed patches. Signed-off-by: Nick Hainke <vincent@systemli.org>
* ipq806x: kernel ramoops storage for C2600/AD7200Edward Matijevic2022-11-092-2/+11
| | | | | | | | | Define the kernel crash log storage ramoops/pstore feature for C2600/AD7200 and add kmod-ramoops to default. Tested with C2600 only. Signed-off-by: Edward Matijevic <motolav@gmail.com>
* ramips: define loadaddr for U6 Lite DTBDavid Bauer2022-11-081-0/+1
| | | | | | | | | | | | | The Ubiquiti UniFi 6 Lite does not correctly align the FDT by always setting fdt_high to 0xffffffff when invoking the bootubnt command. Work around this issue by loading the DTB to a valid,aligned address, so the bootloader does not have to relocate the FDT automatically. Note: The device does read the kernel before invoking bootm on the FIT image to 0x86000000. Signed-off-by: David Bauer <mail@david-bauer.net>
* mkits: support definition of DTB loadaddrDavid Bauer2022-11-083-1/+10
| | | | | | | Support defining a per-device loadaddress for the DTB. This is required for devices which to not align the DTB from the bootloader correctly. Signed-off-by: David Bauer <mail@david-bauer.net>
* kernel: improve description of NTFS kernel packagesRafał Miłecki2022-11-081-4/+8
| | | | | | This helps choosing the right NTFS driver from two available options. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* kernel: backport support for "linux,rootfs" in DTRafał Miłecki2022-11-0814-94/+170
| | | | | | | | | This DT property allows marking flash partition that Linux should use as a root device. It's useful for devices that don't use U-Boot and cmdline parser for partitioning. It may be used with "fixed-partitions" or some dynamic partitioning based on flash content. Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* kernel: split out mtd hack for CONFIG_FIT_PARTITION + rootfsRafał Miłecki2022-11-083-4/+20
| | | | | | | | This is some hack on top of our old hack. Use separated patch for it so it's easier to understand and actually possible to describe. We should ideally get rid of this (and we actually did with kernels 5.15+). Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* ramips: gl-mt1300: downclock SPI to 50MHzMichael Lyle2022-11-071-2/+1
| | | | | | | | | | | | | | | The SPI max frequency was set to 80MHz, considerably higher than the vendor clocks it in their firmware (10MHz). Multiple users reported jffs2 corruption/instability in GitHub issue #10461. My unit has a W25Q256; datasheet specifies maximum SPI frequency for read command of 50MHz. Thanks to @DragonBlueP for suggesting to eliminate m25p,fast-read; and @MPannen1979 for identifying the problem. Fixes: #10461 Signed-off-by: Michael Lyle <mlyle@lyle.org>
* ramips: fix TP-Link RE200 v3/v4 LEDsSungbo Eo2022-11-075-11/+54
| | | | | | | | | | | | Set power LED to gpio 43 instead of 44 for v3 and v4. Set red wifi LED to gpio 40 (was assigned to `red:wifi5g`). Tested by the author of the initial v3 and v4 commit. Reported-by: Richard Fröhning <misanthropos@gmx.de> Tested-by: Richard Fröhning <misanthropos@gmx.de> Signed-off-by: Sungbo Eo <mans0n@gorani.run> Signed-off-by: Jan-Niklas Burfeind <git@aiyionpri.me>
* dnsmasq: remove backported CVE patchKevin Darbyshire-Bryant2022-11-061-179/+0
| | | | | | Patch no longer applies/required since bump to v2.87 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* dnsmasq: Support nftables nftsetsKevin Darbyshire-Bryant2022-11-062-11/+43
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add build option for nftables sets. By default disable iptables ipset support. By default enable nftable nftset support since this is what fw4 uses. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> dnsmasq: nftset: serve from ipset config Use existing ipset configs as source for nftsets to be compatible with existing configs. As the OS can either have iptables XOR nftables support, it's fine to provide both to dnsmasq. dnsmasq will silently fail for the present one. Depending on the dnsmasq compile time options, the ipsets or nftsets option will not be added to the dnsmasq config file. dnsmasq will try to add the IP addresses to all sets, regardless of the IP version defined for the set. Adding an IPv6 to an IPv4 set and vice versa will silently fail. Signed-off-by: Mathias Kresin <dev@kresin.me> dnsmasq: support populating nftsets in addition to ipsets Tell dnsmasq to populate nftsets instead of ipsets, if firewall4 is present in the system. Keep the same configuration syntax in /etc/config/dhcp, for compatibility purposes. Huge thanks to Jo-Philipp Wich for basically writing the function. Signed-off-by: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com> dnsmasq: obtain nftset ip family from nft Unfortunately dnsmasq nft is noisy if an attempt to add a mismatched ip address family to an nft set is made. Heuristic to guess which ip family a nft set might belong by inferring from the set name. In order of preference: If setname ends with standalone '4' or '6' use that, else if setname has '4' or '6' delimited by '-' or '_' use that (eg foo-4-bar) else If setname begins with '4' or '6' standalone use that. By standalone I mean not as part of a larger number eg. 24 If the above fails then use the existing nft set query mechanism and if that fails, well you're stuffed! With-thanks-to: Jo-Philipp Wich <jo@mein.io> who improved my regexp knowledge. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> dnsmasq: specify firewall table for nftset Permit ipsets to specify an nftables table for the set. New config parameter is 'table'. If not specified the default of 'fw4' is used. config ipset list name 'BK_4,BK_6' option table 'dscpclassify' option table_family 'ip' option family '4' list domain 'ms-acdc.office.com' list domain 'windowsupdate.com' list domain 'update.microsoft.com' list domain 'graph.microsoft.com' list domain '1drv.ms' list domain '1drv.com' The table family can also be specified, usually 'ip' or 'ip6' else the default 'inet' capable of both ipv4 & ipv6 is used. If the table family is not specified then finally a family option is available to specify either '4' or '6' for ipv4 or ipv6 respectively. This is all in addition to the existing heuristic that will look in the nftset name for an ip family clue, or in total desperation, query the value from the nftset itself. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* dnsmasq: add uci-defaults script for ipset migrationMathias Kresin2022-11-062-0/+33
| | | | | | | | When running sysupgrade from an existing configuration, move existing ipset definitions to a dedicated config section. Later on, it will allow to serve ipset as well as nftable sets from the same configuration. Signed-off-by: Mathias Kresin <dev@kresin.me>
* dnsmasq: bump to 2.87Kevin Darbyshire-Bryant2022-11-063-10/+10
| | | | | | Bump dnsmasq to 2.87 & refresh patches Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>