aboutsummaryrefslogtreecommitdiffstats
path: root/package/system
Commit message (Collapse)AuthorAgeFilesLines
* config: introduce separate CONFIG_SIGNATURE_CHECK optionJo-Philipp Wich2019-08-071-2/+2
| | | | | | | | | | | | | | | | | | | | Introduce a new option CONFIG_SIGNATURE_CHECK which defaults to the value of CONFIG_SIGNED_PACKAGES and thus is enabled by default. This option is needed to support building target opkg with enabled signature verification while having the signed package lists disabled. Our buildbots currently disable package signing globally in the buildroot and SDK to avoid the need to ship private signing keys to the build workers and to prevent the triggering of random key generation on the worker nodes since package signing happens off-line on the master nodes. As unintended side-effect, updated opkg packages will get built with disabled signature verification, hence the need for a new override option. Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit f565f276e2c06ac8f3176e0b16d6f2d40cd653d4)
* usign: update to latest Git HEADJo-Philipp Wich2019-08-061-3/+3
| | | | | | | | | | | | | | | This update fixes usign signature verification on files with certain file sizes triggering a bug in the shipped SHA-512 implementation. 5a52b37 sha512: fix bad hardcoded constant in sha512_final() 3e6648b README: replace unicode character 716c3f2 README: add reference to OpenBSD signify 86d3668 README: provide reference for ed25519 algorithm 939ec35 usign: main.c: describe necessary arguments for -G Ref: https://forum.openwrt.org/t/signature-check-failed/41945 Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 991dd5a89340367920315a3fd0390a7423e6b34a)
* opkg: bump to version 2019-06-14Yousong Zhou2019-07-121-3/+3
| | | | | | | | | | | | | | | Changelog dcbc142 alternatives: remove duplicate 'const' specifier 21b7bd7 alternatives: special-case busybox as alternatives provider d4ba162 libopkg: only perform size check when information is available cb66403 libopkg: check for file size mismatches Opkg starting from this version special-cases busybox as alternatives provider. There should be no need to add entries to ALTERNATIVES of busybox package Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* fstools: block-mount: fix restart of fstab serviceKarel Kočí2019-06-212-1/+5
| | | | | | | | | | | | | | | | Restarting service causes file-systems to be unmounted without being mounted back. When this service was obsoleted it should have been implemented in a way that all actions are ignored. Up to this commit default handler was called when restart was requested. This default handler just simply calls stop and start. That means that stop called unmount but start just printed that this service is obsoleted. This instead implements restart that just prints same message like start does. It just calls start in reality. This makes restart unavailable for call. Signed-off-by: Karel Kočí <karel.koci@nic.cz> (cherry picked from commit 3ead9e7b743b1fbd3b07f5a72a16999abbec9347)
* fstools: update to the latest master branchPetr Štetiar2019-06-211-3/+3
| | | | | | | | ff1ded6 libfstools: Fix overflow of F2FS_MINSIZE constant bc2c876 libfstools: Print error in case of loop blkdev failure Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 1e55171a1213472e180e9320d8b1d08621d2b8d5)
* fstools: media change detection (eg:sdcard) using kernel pollingMatthias Badaire2019-06-212-1/+10
| | | | | | | | | | | | | | | | | | | | | Linux kernel has a polling mechanism that can be activated by changing the parameter /sys/module/block/parameters/events_dfl_poll_msecs which is deactivated by default or the /sys/block/[device]/events_poll_msecs for one device. This patch set the events_poll_msecs when a disk is inserted. Once the media disk change event is sent by the kernel then we force a re-read of the devices using /sbin/block info. With this patch, insertion and ejection of sd card will automatically generate partition devices in /dev. Signed-off-by: Matthias Badaire <mbadaire@gmail.com> [rewrap commit message, fix bashisms, fix non-matching condition, bump pkg release] Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit cf8483cb4ffc99bf3f512bb134860ccc8c099abe)
* rpcd: fix init script reload actionJo-Philipp Wich2019-06-062-6/+3
| | | | | | | | Drop the legacy start() and stop() procedures and define a proper reload signal action instead. Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit f664d560df8e59f8d368273990462bba85a09668)
* uci: fix heap use after free (FS#2288)Hans Dedecker2019-05-231-3/+3
| | | | | | f199b96 uci: fix options list of section after type change Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* ca-certificates: update to version 20190110Josef Schlehofer2019-04-201-4/+3
| | | | | | | | | | | - Tested on Turris MOX, OpenWrt master - Removed PKG_BUILD_DIR In build_dir there were two folders ca-certificates and ca-certificates-20190110 and it failed as files were in ca-certificates-20190110 Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz> (cherry picked from commit f22c33b40cc7b542b3b31fa0d873d28d3a3482b5)
* opkg: update to latest Git headJo-Philipp Wich2019-01-221-4/+4
| | | | | | | | | | | | | | This update fixes some cosmetical issues and a number of segmentation faults when parsing lists having Conflicts or Replaces tags. d217daf libopkg: fix replacelist parsing and writing 9dd9a07 libopkg: fix segmentation fault when traversing conflicts 34571ba libopkg: consider provided packages in pkg_vec_mark_if_matches() 18740e6 opkg_download: print error when fork() fails e3d7330 libopkg: don't print unresolved dependencies twice Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 1bd18f2b5cbf1c9c384e9725eff7804decf88c90)
* opkg: drop argument from check_signature in opkg.confJonas Gorski2019-01-221-2/+2
| | | | | | | | | | | check_signature is a bool option and doesn't take any arguments. The presence of the 1 falsely suggests setting it to 0 disables the check, while the option actually needs to be removed or commented out to be disabled. So remove the argument to make it more clear. Fixes: beca028bd6bb ("build: add integration for managing opkg package feed keys") Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com> (cherry picked from commit d3bf5ff9bc7b55b2a3dab93853b33a0cd2c4ca47)
* fstools: update to the latest master branchRafał Miłecki2019-01-101-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a big block(d) cleanup with new feature of generating "mount" hotplug.d events. It's an important update for those who were using mountd in the pre-18.06 releases. Due to the mountd being replaced with blockd a support for "mountd" hotplug.d events has been lost. It broke all kind of shell scripts that were e.g. managing services depending on an external USB drive availability. This basically (re-)adds support for calling /etc/hotplug.d/mount/ scripts with ACTION ("add" or "remove") and DEVICE set. af93f4b block(d): improve hotplug.d "mount" events for the autofs 3bb3352 blockd: unmount device explicitly when it disappears 28753b3 block: remove target directory after unmounting c8c7ca5 block: cleanup handling "start" action of the "autofs" command f1bb762 block: make blockd_notify() return an int instead of void 71c2bde block: generate hotplug.d mount events 30f5096 block: validate amount of arguments for the "autofs" command dc6a462 blockd: don't reparse blob msg in the vlist callbacks f6a9686 blockd: don't unmount device when removing it from the list 1913fea block: don't duplicate unmounting code in the mount_action() 6b445fa block: make umount_device() function more generic a778468 block: don't duplicate mounting code in the mount_device() 5dc631d block: simplify code picking mount target directory 2971779 block: move blockd_notify() call out of the conditional blocks b86bd6e block: fix formatting & indent in the mount_device() e12c0d6 fstools: use EXIT_FAILURE when indicating error on exit 091aa3d fstools: guard usage of WEXITSTATUS Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 5c4277ec376541b10f1acbea734aa29900eb5722)
* fstools: update to git HEADHans Dedecker2019-01-101-3/+3
| | | | | | | 29e53af fstools: add ntfs support Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> (cherry picked from commit 59db98d0f216b2de1472bcde0d87ae871625052c)
* fstools: filter unknown action in mount.hotplug scriptRosy Song2019-01-102-2/+2
| | | | | Signed-off-by: Rosy Song <rosysong@rosinson.com> (cherry picked from commit 0fa1dd71ccf5456e1a55dd492e9a42d9b71185ba)
* fstools: Install mount.hotplug and 10-fstab.defaults as 600Rosen Penev2019-01-101-3/+3
| | | | | | | | | Both of these are used by programs that run as root and nothing else. Signed-off-by: Rosen Penev <rosenp@gmail.com> [rmilecki: dropped PKG_SOURCE_URL regression from the original patch] Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 4ad87744fa83e2f75fd4f6e9a46f106aaf7ee2dc)
* fstools: Add the new options available in the menuconfigPierre Lebleu2018-12-181-0/+16
| | | | | | | | | Mounting using the zlib compression and mounting with full access accounting are now available in the menuconfig. Signed-off-by: Pierre Lebleu <pme.lebleu@gmail.com> (backported from e6b8ce4c081b0bdfbbd20477ecef18b285481b07)
* fstools: update to latest git HEADHans Dedecker2018-12-181-3/+3
| | | | | | | | dd02dad fstools: allow the mounting with full access time accounting 242248c fstools: allow to compress the filesystem Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> (backported from 5df2597c59879029059d09c426dbf10e06c80306)
* ubus: update to latest git HEADHans Dedecker2018-12-181-3/+3
| | | | | | | | | | | 221ce7e ubusd_acl: event send access list support da503db ubusd_acl: event listen access list support c035bab ubusd_acl: rework wildcard support 73bd847 ubusd_event: move strmatch_len to ubus_common.h 0327a91 ubus/lua: add support for BLOBMSG_TYPE_DOUBLE Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> (backported from f771a1b96277e3553b46746decdf24fbf00a8997)
* zram-swap: bump pkg versionEmil Muratov2018-12-181-1/+1
| | | | | Signed-off-by: Emil Muratov <gpm@hotplug.ru> (backported from bbf46c9f8feea755ceb8e33ccf91733c1c2b2a34)
* zram-swap: Add "max compression streams" configuration optionEmil Muratov2018-12-181-0/+14
| | | | | | | | | | | Config option to limit maximum compression streams per zram dev for multicore CPU's. This could be defined via 'zram_comp_streams' option in the 'system' section of '/etc/config/system' file or via cli (for e.x. with 'uci set system.@System[0].zram_comp_streams=2 && uci commit system'). Default is number of logical CPU cores. Signed-off-by: Emil Muratov <gpm@hotplug.ru> (backported from 70d3ffb47fcef901e4d86da4c9077ba8b8e2ba10)
* zram-swap: fix number of created zram devices for multicore CPU'sEmil Muratov2018-12-181-45/+29
| | | | | | | | | | Use only one zram swap device of the specified $size instead of [N x $size] devices for multicore CPUs Now zram module uses multiple compression streams for each dev by default, so we do not need to create several zram devs to utilize multicore CPUs. Signed-off-by: Emil Muratov <gpm@hotplug.ru> (backported from 814cae7362c3bd57e8fd9305d5d0b48ff219d4d0)
* zram-swap: fix zram dev reset for multicore cpu devicesEmil Muratov2018-12-181-12/+10
| | | | | | | | | | | * "zram stop" could reset up to $(num_of_cores) zram devices even if some of those were not mounted as swap dev's. This fix tries to enumerate mounted swap zram dev's before making a reset * remove hot-added zram devs on stop (except zram0) Signed-off-by: Emil Muratov <gpm@hotplug.ru> (backported from 9edc1fe8abac6638cd05640279bc741a23b8d260)
* zram-swap: compression algorithm configuration optionEmil Muratov2018-12-181-0/+18
| | | | | | | | | | | | | Compression algorithms for zram are provided by kernel crypto API, could be any of [lzo|zl4|deflate|<some_more>] depending on kernel modules. Compress algo for zram-swap could be defined via 'zram_comp_algo' option in 'system' section of '/etc/config/system' file, or via cli (for e.x. with 'uci set system.@System[0].zram_comp_algo=lz4 && uci commit system'). check available algo's via 'cat /sys/block/zram0 /comp_algorithm' Signed-off-by: Emil Muratov <gpm@hotplug.ru> (backported from b9e89adfb7881806d01e3bd259852e352f3b3ce8)
* zram-swap: Shell cosmeticSamuel Casa2018-12-181-4/+4
| | | | | Signed-off-by: Samuel Casa <samuel.casa@neratec.com> (backported from 65e9561b3d0546bfe6bad1840d81c0aa07b0c68d)
* zram-swap: remove trailing whitespaces in init scriptSamuel Casa2018-12-181-2/+2
| | | | | | | Signed-off-by: Samuel Casa <samuel.casa@neratec.com> [slightly reword subject] Signed-off-by: Jo-Philipp Wich <jo@mein.io> (backported from b291517fdf5a698726fe94010055ec90d85f365a)
* ca-certificates: ca-bundle: add symlink for openssl default settingYousong Zhou2018-12-181-0/+2
| | | | | | | | | | | OpenSSL defaults X509_CERT_FILE to /etc/ssl/cert.pem. This change is needed for wget-ssl and possibly others to work seamlessly with fresh ca-bundle installation Fixes openwrt/packages#6152 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> (backported from 191078e83d127f5ed9a38366d2edaac49f9333c5)
* rpcd: update to latest Git headJo-Philipp Wich2018-12-123-4/+10
| | | | | | | | | | | | | | | | | 3aa81d0 file: access exec timeout via daemon ops structure 7235f34 plugin: store pointer to exec timeout value in the ops structure ccd7c0a treewide: rename exec_timeout to rpc_exec_timeout c79ef22 main: fix logic bug when not specifying a timeout option 2cc4b99 file: use global exec timeout instead of own hardcoded limit ecd1660 exec: increase maximum execution time to 120s Also expose the socket and timeout options in /etc/config/rpcd for easier use. Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commits 41055551151e12abf8efe710efa4dc025a7b7b6a, 952b11766cd83898cf8f9626b75141eac6d4ad1a and e533fb17061027dca2cc60a9555fc2edb9e832eb)
* rpcd: update to latest git HEADJo-Philipp Wich2018-08-161-3/+3
| | | | | | | | | | | 41333ab uci: tighten uci reorder operation error handling f91751b uci: tighten uci delete operation error handling c2c612b uci: tighten uci set operation error handling 948bb51 uci: tighten uci add operation error handling 51980c6 uci: reject invalid section and option names Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 8c91807214c42b481a0893e118d46f488419468a)
* uci: bump to source date 2018-08-11Yousong Zhou2018-08-111-3/+3
| | | | | | | Fixes segfault when parsing malformed delta lines Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> (cherry picked from commit 3493c1cf41ecaa2f87394059a26578f723109a15)
* ca-certificates[18.06]]: remove myself as PKG_MAINTAINERChristian Schoenebeck2018-07-311-1/+1
| | | | | | remove myself as PKG_MAINTAINER Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
* ubus: update to latest git HEADJo-Philipp Wich2018-07-261-3/+3
| | | | | | | 40e0931 libubus: pass an empty UBUS_ATTR_DATA block if msg is NULL on invoke Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 7316515891532a9d5f0b70db31a95d06f7b00e94)
* ubus: update to latest git HEADJohn Crispin2018-07-251-3/+3
| | | | | | | 884be45 libubus: check for non-NULL data before running callbacks Signed-off-by: John Crispin <john@phrozen.org> (cherry picked from commit a5c3bbaf56d6fb442ea16f26042cec83c7c00454)
* mtd: improve check for TRX header being already fixedRafał Miłecki2018-07-162-8/+9
| | | | | | | | | | | | First of all lengths should be compared after checking all blocks for being good/bad. It's because requested length may differ from a final one if there were some bad blocks. Secondly it makes sense to also compare crc32 since we already have a new one calculated. Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 82498a7f7aa86ad0e93ef60d50dccaa0a9549e4c)
* mtd: support bad blocks within the mtd_fixtrx()Rafał Miłecki2018-07-162-7/+29
| | | | | | | | | | | | | | | | | Reading MTD data with (p)read doesn't return any error when accessing bad block. As the result, with current code, CRC32 covers "data" stored in bad blocks. That behavior doesn't match CFE's one (bootloader simply skips bad blocks) and may result in: 1) Invalid CRC32 2) CFE refusing to boot firmware with a following error: Boot program checksum is invalid Fix that problem by checking every block before reading its content. Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 0f54489f754e7bd34e0430c57a11b6a54740d58e)
* mtd: mark as nonshared to fix FS#484Mirko Parthey2018-06-181-0/+2
| | | | | | | | | | | The mtd tool is built with different configurations depending on the target. For example, brcm47xx adds the fixtrx subcommand, without which an image fails when booting the second time. Mark the mtd package as nonshared to really fix FS#484. Signed-off-by: Mirko Parthey <mirko.parthey@web.de> (cherry picked from commit 46d7ced9d1e104693a9f995bfe8a6e28ac82b592)
* logd: create log directory for log_fileKarl Palsson2018-06-072-1/+3
| | | | | | | If log_file is specified, make sure its directory exists. Signed-off-by: Karl Palsson <karlp@etactica.com> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [PKG_RELEASE increase]
* openwrt-keyring: bundle latest usign certificatesJo-Philipp Wich2018-05-201-3/+3
| | | | | | | Includes the public usign certificates used by the 18.06.* release builds. Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 6d108c4a1a40708715e663d6e8eec3ce5ef79c21)
* openwrt-keyring: rename from lede-keyringJo-Philipp Wich2018-05-201-7/+8
| | | | | | | | Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit fd72e67ffe10a130ae4ee9620e7670d83c2538ce)
* rpcd: update to lastest HEADJo-Philipp Wich2018-05-141-3/+3
| | | | | | | | 8206219 uci: fix memory leak in rpc_uci_replace_savedir() 10f7878 exec: close stdout and stderr streams on child signal 92d0d75 uci: use correct sort index when reordering sections Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* ca-certificates: Update to Version 20180409Christian Schoenebeck2018-05-051-2/+2
| | | | | | ca-certificates: Update to Version 20180409 Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
* rpcd: update to latest HEADJo-Philipp Wich2018-04-201-3/+3
| | | | | | | | | | | | 6994c87 uci: fix session delta isolation f0f6f81 session: remove redundant key attribute to rpc_session_set() 3d400c7 session: support reclaiming pending apply session eb09f3a session: ignore non-string username attribute upon restore edd37f8 uci: add rpc_uci_replace_savedir() helper 2423162 uci: switch to proper save directory on apply/rollback 66a9bad uci: fix memory leak in rpc_uci_apply_timeout() Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* mtd: fix erase handling with partition offset on writeFelix Fietkau2018-04-201-1/+1
| | | | | | | | When a partition offset is given, it is used in an lseek call, which affects write, but not erase. Add it to the offset for erase calls as well Signed-off-by: Felix Fietkau <nbd@nbd.name>
* fstools: update to latest master branchRafał Miłecki2018-04-161-3/+3
| | | | | | | | e243683 libfstools: move mount points when switching to JFFS2 3782b59 libfstools: add "const" to char pointer arguments in mount_move() 79721f0 libfstools: fix foreachdir() to pass dir with a trailing slash Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* procd: update to the latest versionYousong Zhou2018-03-281-4/+4
| | | | | | | | | | | | Changes since last version dfb68f8 service: initialize supplementary group ids 3db4e6d service: add func for string config change check c3faabe procd: get rid of putenv usage. The supplementary group id change fixes FS#988 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* uci: update to latest git HEADHans Dedecker2018-03-271-3/+3
| | | | | | | | 5d2bf09 uci: fix a potential use-after-free in uci_set() 3b3d63e list: only record ordering deltas if element position changed 4c4d343 cmake: Fix cli shared linking against ubox Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* ubox: fix PKG_MIRROR_HASHJohn Crispin2018-02-201-1/+1
| | | | Signed-off-by: John Crispin <john@phrozen.org>
* ubox: update to latest git HEADJohn Crispin2018-02-142-3/+3
| | | | | | | | | | 128bc35 logread: fix reconnect logd logic 66347ec logread: move the code setting up the request blob out of the main loop 975a258 logread: move output connection setup code out of main loop b81bea7 logread: cleanup pid file handling d73e7d2 ubox: Replace strerror(errno) with %m format. Signed-off-by: John Crispin <john@phrozen.org>
* ramips: add support for D-Link DAP-1522 A1George Hopkins2018-02-131-1/+1
| | | | | | | | | | | | | | | | | | D-Link DAP-1522 is a wireless bridge/access point with 4 LAN ports and a dual-band wireless chipset. Specifications: - Ralink RT2880 - 32 MB of RAM - 4 MB of Flash - 4x 10/100/1000 Mbps Ethernet (RTL8366SR) - 802.11abgn (RT2850) Flash Instructions: 1. Download lede-ramips-rt288x-dap-1522-a1-squashfs-factory.bin 2. Open the web interface and upload the image Signed-off-by: George Hopkins <george-hopkins@null.net>
* mtd: add fixwrg commandGeorge Hopkins2018-02-134-3/+233
| | | | | | Add a command to fix WRG headers, based on wrgg.c. Signed-off-by: George Hopkins <george-hopkins@null.net>
* tools: add iucode-toolZoltan HERPAI2018-02-111-0/+47
| | | | | | | | | | | | Add tool to "compile" Intel microcode files. The tool will be compiled for host (to split the microcode.dat) and for target (to forcibly reload the microcode if required). Instead of using the large microcode.bin/microcode-64.bin, the splitted ucode files (separate for CPU families) will be installed. Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>